last executing test programs: 12.023735505s ago: executing program 0 (id=544): read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f00000001c0)={{0x5, 0xee00, 0xffffffffffffffff, 0xff, 0x1053, 0x6, 0xb}, &(0x7f00000000c0)=0xc4, &(0x7f0000000180)=0x1, 0x9, 0x5, 0x10001, 0x7, 0xd7, 0x434b, 0x66a, 0x5, @inferred, @inferred=0xffffffffffffffff}) msgctl$auto_MSG_INFO(0x8f, 0xc, &(0x7f00000002c0)={{0x4, 0xee01, r0, 0x0, 0x4a, 0x2, 0x6}, &(0x7f0000000240), &(0x7f0000000280)=0xf, 0x80, 0x2c8, 0x7, 0x7fffffffffffffff, 0x2, 0x3, 0x5, 0x5, @raw=0x3, @raw=0xfc000000}) setns(0xc9, 0x0) r1 = socket(0x1f, 0x5, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) r4 = bpf$auto(0x1, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, 0x0, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'vlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4014}, 0x10) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) socket(0x1, 0x1, 0x1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(0xffffffffffffffff, 0x0, 0xe) 10.003100804s ago: executing program 0 (id=548): io_submit$auto(0x10001, 0x1, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd2d, 0x9, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x200}]}, 0x1c}}, 0x8880) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r7, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000840)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) 9.995892841s ago: executing program 1 (id=549): pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) fanotify_init$auto(0x200, 0x1) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000003, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) fanotify_mark$auto(0x0, 0x255, 0x9, 0xffffffffffffffff, 0x0) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedb126ca02600000c00040080000000", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/setgroups\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="020028bd7000fedbdf259200000006003600000000001c005d00090000000400dd00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) socket(0xa, 0x2, 0x73) unshare$auto(0x6) r6 = socket(0x11, 0x5, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8010, 0x788b) readv$auto(r4, &(0x7f0000000400)={0x0, 0x2}, 0x4) 9.728892152s ago: executing program 2 (id=550): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, 0x0, 0x20040800) 9.721696008s ago: executing program 3 (id=551): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x1, 0x5, 0x0) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x3ffffffffffffc, 0x400005, 0x800000000000002, 0x19, r3, 0x8001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x10000000f8, 0xfffffffffffffffa, 0x8000) 8.166886372s ago: executing program 1 (id=552): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, 0x0, 0x20040800) 8.115910279s ago: executing program 0 (id=553): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000840)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) 8.043849921s ago: executing program 3 (id=554): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x4000007e) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x80c1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af83, 0x0) unshare$auto(0x40000080) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd1/sched/read2_fifo_list\x00', 0x169100, 0x0) pread64$auto(r2, 0x0, 0x800000001000f42d, 0x102) mmap$auto(0xffffffffffffefff, 0x5, 0x6, 0x11, r0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) lsm_list_modules$auto(&(0x7f00000004c0)=0x7, &(0x7f0000000500)=0x6, 0x9127) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3b) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x7}, @L2TP_ATTR_NONE={0xe, 0x0, "f59baf53c801e0a7e856"}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r6, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/event0\x00', 0x131200, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000240)=0xc32) bpf$auto(0x0, 0x0, 0x6f4) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) stat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800001, 0xc214, 0xdfc0, 0x705, 0x0, 0x0, 0x0, 0x2, 0x5, 0x808, 0x201, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x4, 0x4, 0x6, 0xa4a3}) keyctl$auto(0x1f, 0x1, 0x6, r7, 0x80000000) 6.277817072s ago: executing program 0 (id=556): pread64$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0xfffffffffffffffa, 0x11, 0xdd, 0x0) unshare$auto(0x2) r1 = open(&(0x7f0000000000)=':-.\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(r1, 0x105, 0x10000000f2b, r1, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kcore\x00', 0x40000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000400)=""/232, 0xfdef) r3 = openat$auto(r1, &(0x7f0000000340)='./file0\x00', 0x809, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) setpriority$auto_PRIO_PGRP(0x1, r4, 0x200) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x3, 0x100, 0x3, 0x8}, &(0x7f0000000380)=0x52, &(0x7f0000000180)=0x5, 0x8, 0x17aa, 0x7b, 0x5, 0x8, 0x3, 0x5, 0xba2d, @inferred, @inferred=0x0}) read$auto(0xffffffffffffffff, &(0x7f0000000000)='/\v5s/kernel/debuw/lru\b\x00en\x00', 0xd) lchown$auto(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/virtual/net/nr2/power/autosuspend_delay_ms\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x3f87e220, 0x200009) fspick$auto(r3, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x40000080) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x2000040}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x1, 0x4008) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) 6.225789906s ago: executing program 2 (id=557): r0 = eventfd$auto(0x0) timer_create$auto(0xd, 0x0, 0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) mmap$auto(0x0, 0x2020009, 0x91d, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0xffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x10000001) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a4}, 0x64810) ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x6493, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x156, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x2400, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000001800)) keyctl$auto(0x7, 0x0, 0x0, 0x0, 0x100000000000a) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) write$auto(r4, &(0x7f0000000080)='\x00', 0x10) 6.193457862s ago: executing program 1 (id=558): pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) fanotify_init$auto(0x200, 0x1) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000003, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) fanotify_mark$auto(0x0, 0x255, 0x9, 0xffffffffffffffff, 0x0) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedb126ca02600000c000400800000000000000049b20c00030009000000000000000800", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/setgroups\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="020028bd7000fedbdf259200000006003600000000001c005d00090000000400dd00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) socket(0xa, 0x2, 0x73) unshare$auto(0x6) r6 = socket(0x11, 0x5, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8010, 0x788b) readv$auto(r4, &(0x7f0000000400)={0x0, 0x2}, 0x4) 6.119074609s ago: executing program 3 (id=559): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='-)', 0x2) write$auto(r1, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) mmap$auto(0x8, 0x4000000200006, 0x2, 0x19, r2, 0x300000000001) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r3, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x48a241, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20809) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000040)=0xc32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd3/queue/write_same_max_bytes\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000440)=""/4095, 0xfff) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) chown$auto(0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 4.115673473s ago: executing program 1 (id=560): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x2005, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x12941, 0x0) unshare$auto(0x40000080) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x82, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, &(0x7f0000000340)='nbd\r4U4z\xb4PR\x1f\xdf\x10\x11\xf0.\xbbZ\xca\x95\x98\xda-\x0f\xc896\x15^w\x93|w\xe8\xd4\xd2\xf7\xa8\'\t?9\x96\x87\x13S\b?\xd9\x81\xe1\xe6z\x1f\x8b\x8fN\xc2\xb3e\xbfp\x92\xfa\xb5c\x96>\x92\xaa\xbe\x8e\x12\x84\x17\x9c\x03\xf7\x88\xc5gd\xb7B\x0e\x1c\x12\xbf\x88\x06m}\xc6\xaa:\f_\x1b\x0fa&;\xf3\no\xce^\x19Ar\xdd\xf9v\xa1\xc4[*h\x12}\xf1\x98\xba\x84\x00\xd8\x1f\xe3\xebgEA\xb5\xfa\xa2\xf6/\xe4\xf3\x9d\xe9\x8b\x04\xebkD5\xb6\xe5[\xcb\xd0k\x144\xaa\xc91$\x94Q\x00'/174, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r3 = socket(0x27, 0x1, 0x1) setsockopt$auto(r3, 0x23, 0x1020, 0x0, 0x8002) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0x1181, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) writev$auto(r2, &(0x7f0000000080)={0x0, 0x400000000007111}, 0xffffffff80000000) bpf$auto(0x9, 0x0, 0x9) unshare$auto(0x8000000) semget$auto(0x840, 0x6, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x8000) 4.072160418s ago: executing program 2 (id=561): pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) fanotify_init$auto(0x200, 0x1) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000003, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) fanotify_mark$auto(0x0, 0x255, 0x9, 0xffffffffffffffff, 0x0) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedb126ca02600000c000400800000000000000049b20c00030009", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/setgroups\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="020028bd7000fedbdf259200000006003600000000001c005d00090000000400dd00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) socket(0xa, 0x2, 0x73) unshare$auto(0x6) r6 = socket(0x11, 0x5, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8010, 0x788b) readv$auto(r4, &(0x7f0000000400)={0x0, 0x2}, 0x4) 3.949528929s ago: executing program 3 (id=562): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) setsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r1 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0xc, 0x3, 0x4}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0xffffffffffffffff, 0x0, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "000200000000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) 3.682780802s ago: executing program 0 (id=563): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, 0x0, 0x20040800) 2.986727476s ago: executing program 3 (id=564): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x8c81, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/set_event\x00', 0x0, 0x0) read$auto(r6, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000840)=ANY=[@ANYBLOB="20060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) 1.995817491s ago: executing program 1 (id=565): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8942, &(0x7f0000000540)={'macvlan0\x00'}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) lsm_list_modules$auto(&(0x7f00000004c0)=0x7, &(0x7f0000000500)=0x6, 0x9127) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3b) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x7}, @L2TP_ATTR_NONE={0xe, 0x0, "f59baf53c801e0a7e856"}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0xc800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r6, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/event0\x00', 0x131200, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000240)=0xc32) bpf$auto(0x0, 0x0, 0x6f4) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) stat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800001, 0xc214, 0xdfc0, 0x705, 0x0, 0x0, 0x0, 0x2, 0x5, 0x808, 0x201, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x4, 0x4, 0x6, 0xa4a3}) keyctl$auto(0x1f, 0x1, 0x6, r7, 0x80000000) 1.926158998s ago: executing program 2 (id=566): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080), 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$auto(0x35, 0x1, 0x8, 0x210c, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) socket(0x2, 0x3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2\b\x00\x00\x00\x00\x00\x00\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3b) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(r2, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000240)=0xc32) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x6f4) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv9\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000100), 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x8000000000000000) 1.362463609s ago: executing program 0 (id=567): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x143080, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0xc, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) madvise$auto(0x0, 0x2003f2, 0x14) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x84100, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x5) ioctl$auto(0x3, 0x541b, 0x7f) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) settimeofday$auto(&(0x7f0000000180)={0x4, 0x9}, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r2, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000004", @ANYRES16=r4, @ANYBLOB="050727bd7000fbdbdf2567000000", @ANYRESDEC, @ANYRES16=r3, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$auto_NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01a156fe72b255d2ffdbdf250e00010104005001000000000000000000000000117ef477fe2ff0c17a754f504b49b7a207bc0cfe57b387b67ce64f40c19099c327a84a05206d4d373fb0e2d7d3238e1ab18b83051a5af61d29dc41a73ae12daddaa156a2a310055ac9b267d5d802afde09ddc81645e42c619ca7"], 0x18}, 0x1, 0x0, 0x0, 0x20080001}, 0x4000000) renameat2$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 784.108554ms ago: executing program 3 (id=568): open(&(0x7f0000000100)='.\x00', 0x0, 0x408) setitimer$auto(0x7, &(0x7f0000000180)={{0x97e3, 0x100}, {0x0, 0x6}}, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x40000018, 0x6, 0x10, 0x7, 0x10, 0xffffffffffffffff, 0xfe, "2af051a901800e085bdbd84dc83ae659", 0x0, 0xffffffffffffffff, 0x3, 0x5, 0xe5, 0x3}, 0x18) setgroups$auto(0xc00000000, 0xfffffffffffffffc) bpf$auto(0x8, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x8, 0x9, 0x80000009, 0xfffffe01, 0xe6d6, r0}, 0x92) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x7, 0x101, 0x3, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x18) ioctl$auto(0x3, 0x894b, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) r2 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x410900, 0x0) connect$auto(r2, 0x0, 0x54) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400e700", @ANYBLOB="668f0da987b7b664cf96c0e4aef59354c9e62295624b2be3503677226d0849c2c32822e9ffeb63162a424b0e19cf23dcb684457cf8cae75037959fc7d3c1c4c0c61dbe8bc7a30c5012229ad05cbd3cd041589bfe65a06b0d9e0b1ed8aedca169f3fe3e0a00000000000020000000000000100000cdb24b22b56bfebea60b148993411da1ea245482", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c7505155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9f5430d7fcb537acc00e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a3f89a7ef8e0e1d3852ce3335f958af008910bf0de56d60d3f8ad1e694dcb44f6aa2b49a8337babe88034752259b08302c50ee5a894c78bc8cd245d", 0xed) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 140.541042ms ago: executing program 1 (id=569): pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) fanotify_init$auto(0x200, 0x1) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000003, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) fanotify_mark$auto(0x0, 0x255, 0x9, 0xffffffffffffffff, 0x0) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedb126ca02600000c000400800000000000000049b20c00030009000000000000000800", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/setgroups\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="020028bd7000fedbdf259200000006003600000000001c005d00090000000400dd00"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = socket(0x2a, 0x2, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) socket(0xa, 0x2, 0x73) unshare$auto(0x6) r6 = socket(0x11, 0x5, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8010, 0x788b) readv$auto(r4, &(0x7f0000000400)={0x0, 0x2}, 0x4) 0s ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x2) shutdown$auto(0x200000003, 0x2) mq_notify$auto(r0, &(0x7f0000000280)={@sival_ptr=&(0x7f00000003c0), @inferred=r0, 0x2, @_tid}) syz_clone3(&(0x7f0000000480)={0x8804880, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3d}, &(0x7f0000000340)=""/143, 0x8f, &(0x7f0000000400)=""/64, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400200000006) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = socket(0xa, 0x5, 0x0) r3 = getsockopt$auto(r2, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r3, r3, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000feffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r8}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r8, 0xc, 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r1, 0x921064a2, 0x20000000020000a) r9 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r9, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 74.082465][ T5603] cgroup: Unknown subsys name 'net' [ 74.187488][ T5603] cgroup: Unknown subsys name 'cpuset' [ 74.195498][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.638517][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.370612][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.378679][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.390756][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.406744][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.410056][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.413055][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.414306][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.414781][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.415623][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.415932][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.416512][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.417243][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.419023][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.420087][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.420390][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.421577][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.422953][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.423462][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.424216][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.427562][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.914712][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.914883][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.915437][ T5614] bridge_slave_0: entered allmulticast mode [ 78.917164][ T5614] bridge_slave_0: entered promiscuous mode [ 78.920113][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.920209][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.920577][ T5613] bridge_slave_0: entered allmulticast mode [ 78.923248][ T5613] bridge_slave_0: entered promiscuous mode [ 78.948428][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948524][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.948649][ T5614] bridge_slave_1: entered allmulticast mode [ 78.950639][ T5614] bridge_slave_1: entered promiscuous mode [ 78.952970][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.953065][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.953180][ T5613] bridge_slave_1: entered allmulticast mode [ 78.955188][ T5613] bridge_slave_1: entered promiscuous mode [ 79.073927][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.078306][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.081878][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.111455][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.111626][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.112015][ T5615] bridge_slave_0: entered allmulticast mode [ 79.113741][ T5615] bridge_slave_0: entered promiscuous mode [ 79.119562][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.122327][ T5613] team0: Port device team_slave_0 added [ 79.126407][ T5613] team0: Port device team_slave_1 added [ 79.153289][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.153389][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.153505][ T5615] bridge_slave_1: entered allmulticast mode [ 79.156360][ T5615] bridge_slave_1: entered promiscuous mode [ 79.212860][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.212929][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.212955][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.217449][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.217467][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.217496][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.218119][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.218214][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.218347][ T5612] bridge_slave_0: entered allmulticast mode [ 79.220295][ T5612] bridge_slave_0: entered promiscuous mode [ 79.223995][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.224811][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224936][ T5612] bridge_slave_1: entered allmulticast mode [ 79.226999][ T5612] bridge_slave_1: entered promiscuous mode [ 79.256463][ T5614] team0: Port device team_slave_0 added [ 79.290315][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.297225][ T5614] team0: Port device team_slave_1 added [ 79.320436][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.327238][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.331453][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.425235][ T5613] hsr_slave_0: entered promiscuous mode [ 79.426284][ T5613] hsr_slave_1: entered promiscuous mode [ 79.427903][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.427918][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.427946][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.450599][ T5612] team0: Port device team_slave_0 added [ 79.453567][ T5615] team0: Port device team_slave_0 added [ 79.457185][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.457202][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.457231][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.470151][ T5612] team0: Port device team_slave_1 added [ 79.482794][ T5616] Bluetooth: hci1: command tx timeout [ 79.482903][ T5616] Bluetooth: hci3: command tx timeout [ 79.482978][ T5616] Bluetooth: hci0: command tx timeout [ 79.484715][ T52] Bluetooth: hci2: command tx timeout [ 79.488370][ T5615] team0: Port device team_slave_1 added [ 79.606427][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.612413][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.612445][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.628166][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.628185][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.628212][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.663878][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.663897][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.663924][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.695593][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.695610][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.695638][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.709684][ T5614] hsr_slave_0: entered promiscuous mode [ 79.712187][ T5614] hsr_slave_1: entered promiscuous mode [ 79.714355][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 79.714443][ T5614] Cannot create hsr debugfs directory [ 79.887984][ T5612] hsr_slave_0: entered promiscuous mode [ 79.888997][ T5612] hsr_slave_1: entered promiscuous mode [ 79.889718][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 79.889744][ T5612] Cannot create hsr debugfs directory [ 79.913340][ T5615] hsr_slave_0: entered promiscuous mode [ 79.914620][ T5615] hsr_slave_1: entered promiscuous mode [ 79.915275][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 79.915295][ T5615] Cannot create hsr debugfs directory [ 80.191075][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.204887][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.205877][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.217491][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.232299][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.244566][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.246950][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.258452][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.359958][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.369268][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.370239][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.382502][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.389125][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.399268][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.412451][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.421917][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.495896][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.508052][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.517909][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.527297][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.540146][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.549359][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.563535][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.573409][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.587023][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.657991][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.668653][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.669524][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.679740][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.692403][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.696821][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.708225][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.718585][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.728522][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.750241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.750390][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.772081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.772186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.851760][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.883523][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.908648][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.908754][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.927328][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.962557][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.962678][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.021918][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.056941][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.057068][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.088376][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.088475][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.121133][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.162191][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.209197][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.209332][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.262780][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.262905][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.562280][ T4932] Bluetooth: hci2: command tx timeout [ 81.562336][ T4932] Bluetooth: hci0: command tx timeout [ 81.562360][ T4932] Bluetooth: hci3: command tx timeout [ 81.562381][ T4932] Bluetooth: hci1: command tx timeout [ 81.951942][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.192809][ T5613] veth0_vlan: entered promiscuous mode [ 82.226239][ T5613] veth1_vlan: entered promiscuous mode [ 82.318929][ T5613] veth0_macvtap: entered promiscuous mode [ 82.328213][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.337325][ T5613] veth1_macvtap: entered promiscuous mode [ 82.391742][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.420987][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.486268][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.497302][ T5614] veth0_vlan: entered promiscuous mode [ 82.559030][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.560926][ T5614] veth1_vlan: entered promiscuous mode [ 82.605816][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.654442][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658871][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.658905][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.744456][ T5614] veth0_macvtap: entered promiscuous mode [ 82.754675][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.760863][ T5615] veth0_vlan: entered promiscuous mode [ 82.770557][ T5615] veth1_vlan: entered promiscuous mode [ 82.775255][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775306][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.818443][ T5614] veth1_macvtap: entered promiscuous mode [ 82.828600][ T5615] veth0_macvtap: entered promiscuous mode [ 82.839115][ T5612] veth0_vlan: entered promiscuous mode [ 82.846970][ T5615] veth1_macvtap: entered promiscuous mode [ 82.879630][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.904006][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.910253][ T5612] veth1_vlan: entered promiscuous mode [ 82.922705][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.930873][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.959222][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.995172][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995934][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995995][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.996048][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.044987][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.047037][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.047114][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096900][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.142541][ T5612] veth0_macvtap: entered promiscuous mode [ 83.187651][ T5612] veth1_macvtap: entered promiscuous mode [ 83.229542][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.229606][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.393934][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.393978][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.454486][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.462807][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.484258][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.484305][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.589327][ T5766] FAULT_INJECTION: forcing a failure. [ 83.589327][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 83.603222][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.603245][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.607825][ T5766] CPU: 0 UID: 0 PID: 5766 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 83.607860][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.607884][ T5766] Call Trace: [ 83.607893][ T5766] [ 83.607903][ T5766] dump_stack_lvl+0x100/0x190 [ 83.607943][ T5766] should_fail_ex.cold+0x5/0xa [ 83.607977][ T5766] should_failslab+0xc2/0x120 [ 83.608010][ T5766] __kmalloc_cache_noprof+0x91/0x6d0 [ 83.608050][ T5766] ? sget_fc+0x117/0x1f20 [ 83.608073][ T5766] ? sget_fc+0x1ba/0x1f20 [ 83.608104][ T5766] sget_fc+0x1ba/0x1f20 [ 83.608134][ T5766] ? __pfx_set_anon_super_fc+0x10/0x10 [ 83.608170][ T5766] ? __pfx_sget_fc+0x10/0x10 [ 83.608192][ T5766] ? refcount_dec_not_one+0x136/0x1c0 [ 83.608220][ T5766] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 83.608247][ T5766] ? __kasan_kmalloc+0xaa/0xb0 [ 83.608276][ T5766] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 83.608312][ T5766] ? __kasan_kmalloc+0xaa/0xb0 [ 83.608345][ T5766] ? __pfx_mqueue_fill_super+0x10/0x10 [ 83.608372][ T5766] get_tree_nodev+0x28/0x190 [ 83.608399][ T5766] mqueue_get_tree+0xf1/0x130 [ 83.608424][ T5766] vfs_get_tree+0x92/0x320 [ 83.608460][ T5766] fc_mount_longterm+0x1a/0x270 [ 83.608507][ T5766] mq_init_ns+0x482/0x820 [ 83.608541][ T5766] copy_ipcs+0x3dd/0x7e0 [ 83.608576][ T5766] create_new_namespaces+0x20a/0xac0 [ 83.608613][ T5766] ? security_capable+0x80/0x260 [ 83.608647][ T5766] unshare_nsproxy_namespaces+0xf2/0x220 [ 83.608687][ T5766] ksys_unshare+0x4a2/0xa70 [ 83.608713][ T5766] ? __pfx_ksys_unshare+0x10/0x10 [ 83.608750][ T5766] __x64_sys_unshare+0x31/0x40 [ 83.608775][ T5766] do_syscall_64+0x121/0x770 [ 83.608812][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.608839][ T5766] RIP: 0033:0x7f4faa19e159 [ 83.608866][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.608894][ T5766] RSP: 002b:00007f4fab0de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 83.608923][ T5766] RAX: ffffffffffffffda RBX: 00007f4faa426090 RCX: 00007f4faa19e159 [ 83.608940][ T5766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 83.608956][ T5766] RBP: 00007f4faa235024 R08: 0000000000000000 R09: 0000000000000000 [ 83.608972][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.608987][ T5766] R13: 00007f4faa426128 R14: 00007f4faa426090 R15: 00007fff3b8c88e8 [ 83.609020][ T5766] [ 83.625918][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626557][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626603][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626645][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.643300][ T5616] Bluetooth: hci3: command tx timeout [ 83.643334][ T5616] Bluetooth: hci0: command tx timeout [ 83.643358][ T5616] Bluetooth: hci2: command tx timeout [ 83.643515][ T52] Bluetooth: hci1: command tx timeout [ 84.169093][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.169143][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.549999][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.550046][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.077315][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.715224][ T4932] Bluetooth: hci2: command tx timeout [ 85.715766][ T4932] Bluetooth: hci0: command tx timeout [ 85.715819][ T4932] Bluetooth: hci3: command tx timeout [ 85.721320][ T52] Bluetooth: hci1: command tx timeout [ 86.599055][ T5832] kernel read not supported for file / (pid: 5832 comm: syz.2.7) [ 86.614071][ T30] audit: type=1800 audit(94.130:2): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7" name=1F dev="mqueue" ino=8524 res=0 errno=0 [ 86.690259][ T9] cfg80211: failed to load regulatory.db [ 87.571859][ T5837] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.948773][ T5842] db_root: cannot open: : [ 91.173318][ T5902] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.791024][ T52] Bluetooth: hci2: unexpected event 0x2c length: 1022 > 17 [ 93.939326][ T5943] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 97.369977][ T5991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.545885][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 100.670567][ T6063] process 'syz.1.44' launched '/dev/fd/7' with NULL argv: empty string added [ 102.311543][ T6078] netlink: 504 bytes leftover after parsing attributes in process `syz.2.41'. [ 102.339875][ T6078] netlink: 350 bytes leftover after parsing attributes in process `syz.2.41'. [ 102.445878][ T52] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17 [ 110.158185][ T6223] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.888233][ T6255] ubi0: attaching mtd0 [ 111.932656][ T6255] ubi0: scanning is finished [ 111.942491][ T6255] ubi0: empty MTD device detected [ 112.403739][ T6255] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.403789][ T6255] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.403828][ T6255] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.403852][ T6255] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 112.403877][ T6255] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.403900][ T6255] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.403924][ T6255] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 430180633 [ 112.403951][ T6255] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.441578][ T6262] ubi0: detaching mtd0 [ 112.531361][ T6262] ubi0: mtd0 is detached [ 114.487449][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 122.106558][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 125.565401][ T6475] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.690121][ T6511] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.873667][ T6545] can: request_module (can-proto-5) failed. [ 132.757863][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757954][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.382625][ T6595] ubi0: attaching mtd0 [ 133.383871][ T6595] ubi0: scanning is finished [ 133.660909][ T6595] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.660962][ T6595] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.661005][ T6595] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.661030][ T6595] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 133.661054][ T6595] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.661076][ T6595] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 133.661099][ T6595] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 430180633 [ 133.661126][ T6595] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.675843][ T6609] ubi0: background thread "ubi_bgt0d" started, PID 6609 [ 133.683972][ T6599] ubi0: detaching mtd0 [ 133.801772][ T6599] ubi0: mtd0 is detached [ 135.488869][ T6623] bonding: no command found in bonding_masters - use +ifname or -ifname [ 138.220450][ T6656] FAULT_INJECTION: forcing a failure. [ 138.220450][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 138.220528][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.220567][ T6656] Tainted: [L]=SOFTLOCKUP [ 138.220577][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.220593][ T6656] Call Trace: [ 138.220602][ T6656] [ 138.220612][ T6656] dump_stack_lvl+0x100/0x190 [ 138.220666][ T6656] should_fail_ex.cold+0x5/0xa [ 138.220702][ T6656] should_failslab+0xc2/0x120 [ 138.220736][ T6656] __kmalloc_cache_noprof+0x91/0x6d0 [ 138.220784][ T6656] ? sget_fc+0x117/0x1f20 [ 138.220808][ T6656] ? sget_fc+0x1ba/0x1f20 [ 138.220838][ T6656] sget_fc+0x1ba/0x1f20 [ 138.220871][ T6656] ? __pfx_set_anon_super_fc+0x10/0x10 [ 138.220909][ T6656] ? __pfx_sget_fc+0x10/0x10 [ 138.220931][ T6656] ? refcount_dec_not_one+0x136/0x1c0 [ 138.220961][ T6656] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 138.220988][ T6656] ? __kasan_kmalloc+0xaa/0xb0 [ 138.221019][ T6656] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 138.221057][ T6656] ? __kasan_kmalloc+0xaa/0xb0 [ 138.221091][ T6656] ? __pfx_mqueue_fill_super+0x10/0x10 [ 138.221119][ T6656] get_tree_nodev+0x28/0x190 [ 138.221147][ T6656] mqueue_get_tree+0xf1/0x130 [ 138.221172][ T6656] vfs_get_tree+0x92/0x320 [ 138.221207][ T6656] fc_mount_longterm+0x1a/0x270 [ 138.221249][ T6656] mq_init_ns+0x482/0x820 [ 138.221283][ T6656] copy_ipcs+0x3dd/0x7e0 [ 138.221317][ T6656] create_new_namespaces+0x20a/0xac0 [ 138.221355][ T6656] ? security_capable+0x80/0x260 [ 138.221388][ T6656] unshare_nsproxy_namespaces+0xf2/0x220 [ 138.221430][ T6656] ksys_unshare+0x4a2/0xa70 [ 138.221457][ T6656] ? __pfx_ksys_unshare+0x10/0x10 [ 138.221492][ T6656] __x64_sys_unshare+0x31/0x40 [ 138.221517][ T6656] do_syscall_64+0x121/0x770 [ 138.221556][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.221583][ T6656] RIP: 0033:0x7f374319e159 [ 138.221617][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.221643][ T6656] RSP: 002b:00007f374076c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 138.221669][ T6656] RAX: ffffffffffffffda RBX: 00007f3743426450 RCX: 00007f374319e159 [ 138.221688][ T6656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 138.221705][ T6656] RBP: 00007f3743235024 R08: 0000000000000000 R09: 0000000000000000 [ 138.221721][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.221737][ T6656] R13: 00007f37434264e8 R14: 00007f3743426450 R15: 00007fff9c37e648 [ 138.221778][ T6656] [ 141.088628][ T6702] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 146.681939][ T6795] ubi0: attaching mtd0 [ 146.683096][ T6795] ubi0: scanning is finished [ 146.900735][ T6803] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 146.978551][ T6795] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 146.986631][ T6795] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 146.994409][ T6795] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 147.001618][ T6795] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 147.009106][ T6795] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 147.009135][ T6795] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 147.009157][ T6795] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 430180633 [ 147.009182][ T6795] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 147.010364][ T6800] ubi0: detaching mtd0 [ 147.067903][ T6800] ubi0: mtd0 is detached [ 151.142550][ T6846] syz.1.136 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.642732][ T6897] FAULT_INJECTION: forcing a failure. [ 154.642732][ T6897] name failslab, interval 1, probability 0, space 0, times 0 [ 154.659299][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz.1.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.659345][ T6897] Tainted: [L]=SOFTLOCKUP [ 154.659355][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.659372][ T6897] Call Trace: [ 154.659382][ T6897] [ 154.659394][ T6897] dump_stack_lvl+0x100/0x190 [ 154.659437][ T6897] should_fail_ex.cold+0x5/0xa [ 154.659472][ T6897] should_failslab+0xc2/0x120 [ 154.659506][ T6897] __kmalloc_noprof+0xfc/0x840 [ 154.659539][ T6897] ? lsm_blob_alloc+0x68/0x90 [ 154.659573][ T6897] lsm_blob_alloc+0x68/0x90 [ 154.659600][ T6897] security_sb_alloc+0x25/0x240 [ 154.659632][ T6897] sget_fc+0x3ca/0x1f20 [ 154.659668][ T6897] ? __pfx_set_anon_super_fc+0x10/0x10 [ 154.659708][ T6897] ? __pfx_sget_fc+0x10/0x10 [ 154.659730][ T6897] ? refcount_dec_not_one+0x136/0x1c0 [ 154.659761][ T6897] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 154.659788][ T6897] ? __kasan_kmalloc+0xaa/0xb0 [ 154.659819][ T6897] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 154.659858][ T6897] ? __kasan_kmalloc+0xaa/0xb0 [ 154.659892][ T6897] ? __pfx_mqueue_fill_super+0x10/0x10 [ 154.659920][ T6897] get_tree_nodev+0x28/0x190 [ 154.659949][ T6897] mqueue_get_tree+0xf1/0x130 [ 154.659977][ T6897] vfs_get_tree+0x92/0x320 [ 154.660022][ T6897] fc_mount_longterm+0x1a/0x270 [ 154.660066][ T6897] mq_init_ns+0x482/0x820 [ 154.660102][ T6897] copy_ipcs+0x3dd/0x7e0 [ 154.660138][ T6897] create_new_namespaces+0x20a/0xac0 [ 154.660176][ T6897] ? security_capable+0x80/0x260 [ 154.660211][ T6897] unshare_nsproxy_namespaces+0xf2/0x220 [ 154.660252][ T6897] ksys_unshare+0x4a2/0xa70 [ 154.660280][ T6897] ? __pfx_ksys_unshare+0x10/0x10 [ 154.660320][ T6897] __x64_sys_unshare+0x31/0x40 [ 154.660347][ T6897] do_syscall_64+0x121/0x770 [ 154.660386][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.660415][ T6897] RIP: 0033:0x7fdea5d9e159 [ 154.660438][ T6897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.660463][ T6897] RSP: 002b:00007fdea6b92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.660489][ T6897] RAX: ffffffffffffffda RBX: 00007fdea6026450 RCX: 00007fdea5d9e159 [ 154.660508][ T6897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 154.660526][ T6897] RBP: 00007fdea5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 154.660543][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.660559][ T6897] R13: 00007fdea60264e8 R14: 00007fdea6026450 R15: 00007ffc89af1918 [ 154.660598][ T6897] [ 156.663261][ T6918] ubi0: attaching mtd0 [ 156.715779][ T6918] ubi0: scanning is finished [ 156.924081][ T6918] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 156.925469][ T6918] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 156.925495][ T6918] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 156.925514][ T6918] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 156.925533][ T6918] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 156.925553][ T6918] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.925574][ T6918] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 430180633 [ 156.925597][ T6918] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 156.941153][ T6927] ubi0: background thread "ubi_bgt0d" started, PID 6927 [ 156.941215][ T6923] ubi0: detaching mtd0 [ 157.040581][ T6923] ubi0: mtd0 is detached [ 166.745797][ T7060] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.745868][ T7060] vhci_hcd vhci_hcd.2: invalid port number 0 [ 167.159130][ T7063] smpboot: CPU 1 is now offline [ 167.999878][ T7088] ubi0: attaching mtd0 [ 168.023073][ T7088] ubi0: scanning is finished [ 168.239982][ T7088] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 168.240011][ T7088] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 168.240033][ T7088] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 168.240047][ T7088] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 168.240060][ T7088] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 168.240073][ T7088] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 168.240087][ T7088] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 430180633 [ 168.240102][ T7088] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 168.249107][ T7094] ubi0: background thread "ubi_bgt0d" started, PID 7094 [ 168.301949][ T7089] ubi0: detaching mtd0 [ 168.353605][ T7089] ubi0: mtd0 is detached [ 174.508458][ T7176] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.179'. [ 178.157873][ T7221] vivid-007: ================= START STATUS ================= [ 178.169722][ T7221] vivid-007: Generate PTS: true [ 178.180719][ T7221] vivid-007: Generate SCR: true [ 178.180752][ T7221] tpg source WxH: 320x240 (Y'CbCr) [ 178.180764][ T7221] tpg field: 1 [ 178.180771][ T7221] tpg crop: (0,0)/320x240 [ 178.180782][ T7221] tpg compose: (0,0)/320x240 [ 178.180793][ T7221] tpg colorspace: 8 [ 178.180801][ T7221] tpg transfer function: 0/0 [ 178.180809][ T7221] tpg Y'CbCr encoding: 0/0 [ 178.180818][ T7221] tpg quantization: 0/0 [ 178.180826][ T7221] tpg RGB range: 0/2 [ 178.180834][ T7221] vivid-007: ================== END STATUS ================== [ 180.922933][ T7277] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.191'. [ 185.617894][ T7338] FAULT_INJECTION: forcing a failure. [ 185.617894][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 185.617949][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.3.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.617971][ T7338] Tainted: [L]=SOFTLOCKUP [ 185.617976][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.617985][ T7338] Call Trace: [ 185.617990][ T7338] [ 185.617996][ T7338] dump_stack_lvl+0x100/0x190 [ 185.618020][ T7338] should_fail_ex.cold+0x5/0xa [ 185.618043][ T7338] should_failslab+0xc2/0x120 [ 185.618061][ T7338] __kmalloc_cache_noprof+0x91/0x6d0 [ 185.618082][ T7338] ? sget_fc+0x117/0x1f20 [ 185.618094][ T7338] ? sget_fc+0x1ba/0x1f20 [ 185.618110][ T7338] sget_fc+0x1ba/0x1f20 [ 185.618127][ T7338] ? __pfx_set_anon_super_fc+0x10/0x10 [ 185.618148][ T7338] ? __pfx_sget_fc+0x10/0x10 [ 185.618159][ T7338] ? refcount_dec_not_one+0x136/0x1c0 [ 185.618180][ T7338] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 185.618195][ T7338] ? __kasan_kmalloc+0xaa/0xb0 [ 185.618211][ T7338] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 185.618231][ T7338] ? __kasan_kmalloc+0xaa/0xb0 [ 185.618248][ T7338] ? __pfx_mqueue_fill_super+0x10/0x10 [ 185.618263][ T7338] get_tree_nodev+0x28/0x190 [ 185.618277][ T7338] mqueue_get_tree+0xf1/0x130 [ 185.618292][ T7338] vfs_get_tree+0x92/0x320 [ 185.618311][ T7338] fc_mount_longterm+0x1a/0x270 [ 185.618335][ T7338] mq_init_ns+0x482/0x820 [ 185.618353][ T7338] copy_ipcs+0x3dd/0x7e0 [ 185.618372][ T7338] create_new_namespaces+0x20a/0xac0 [ 185.618393][ T7338] ? security_capable+0x80/0x260 [ 185.618410][ T7338] unshare_nsproxy_namespaces+0xf2/0x220 [ 185.618432][ T7338] ksys_unshare+0x4a2/0xa70 [ 185.618446][ T7338] ? __pfx_ksys_unshare+0x10/0x10 [ 185.618466][ T7338] __x64_sys_unshare+0x31/0x40 [ 185.618479][ T7338] do_syscall_64+0x121/0x770 [ 185.618500][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.618515][ T7338] RIP: 0033:0x7fa91f99e159 [ 185.618528][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.618541][ T7338] RSP: 002b:00007fa9208a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 185.618556][ T7338] RAX: ffffffffffffffda RBX: 00007fa91fc26450 RCX: 00007fa91f99e159 [ 185.618565][ T7338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 185.618573][ T7338] RBP: 00007fa91fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 185.618582][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.618590][ T7338] R13: 00007fa91fc264e8 R14: 00007fa91fc26450 R15: 00007fffc79d7608 [ 185.618608][ T7338] [ 188.955677][ T7369] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.204'. [ 192.916340][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.922815][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.274515][ T7475] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.215'. [ 201.032170][ T7534] Process accounting resumed [ 201.227417][ T7554] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 201.293934][ T7556] smpboot: CPU 1 is now offline [ 201.399455][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 201.399519][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 201.399548][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 201.399567][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 205.439506][ T30] audit: type=1400 audit(212.970:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7617 comm="syz.2.237" [ 209.074607][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 213.868922][ T7747] ======================================================= [ 213.868922][ T7747] WARNING: The mand mount option has been deprecated and [ 213.868922][ T7747] and is ignored by this kernel. Remove the mand [ 213.868922][ T7747] option from the mount to silence this warning. [ 213.868922][ T7747] ======================================================= [ 214.196595][ T30] audit: type=1400 audit(221.730:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7746 comm="syz.1.254" [ 216.220965][ T7760] vivid-007: ================= START STATUS ================= [ 216.220991][ T7760] vivid-007: Generate PTS: true [ 216.221021][ T7760] vivid-007: Generate SCR: true [ 216.221042][ T7760] tpg source WxH: 320x240 (Y'CbCr) [ 216.221053][ T7760] tpg field: 1 [ 216.221060][ T7760] tpg crop: (0,0)/320x240 [ 216.221071][ T7760] tpg compose: (0,0)/320x240 [ 216.221082][ T7760] tpg colorspace: 8 [ 216.221090][ T7760] tpg transfer function: 0/0 [ 216.221098][ T7760] tpg Y'CbCr encoding: 0/0 [ 216.221107][ T7760] tpg quantization: 0/0 [ 216.221115][ T7760] tpg RGB range: 0/2 [ 216.221123][ T7760] vivid-007: ================== END STATUS ================== [ 216.384247][ T7779] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 221.646286][ T30] audit: type=1400 audit(229.180:5): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7834 comm="syz.0.266" [ 223.504861][ T7882] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 227.613842][ T7932] synth uevent: /devices/platform/vimc.0/video4linux/v4l-subdev4: unknown uevent action string [ 227.632101][ T7932] video4linux v4l-subdev4: uevent: failed to send synthetic uevent: -22 [ 229.472833][ T30] audit: type=1400 audit(237.000:6): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7945 comm="syz.3.279" [ 231.398325][ T7963] Process accounting paused [ 231.905982][ T7992] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 234.217966][ T8020] binder: 8018:8020 ioctl c018620c 200000000040 returned -22 [ 235.437367][ T8026] kexec: Could not allocate control_code_buffer [ 235.963647][ T8035] syz.3.291 uses obsolete (PF_INET,SOCK_PACKET) [ 236.130567][ T8036] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 239.002759][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'. [ 239.159616][ T8083] bond0: (slave bond_slave_0): Releasing backup interface [ 239.190341][ T8083] Zero length message leads to an empty skb [ 246.418204][ T8179] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.305'. [ 255.642051][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642100][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.773469][ T8370] Process accounting resumed [ 268.185661][ T8455] FAULT_INJECTION: forcing a failure. [ 268.185661][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 268.185705][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.1.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.185728][ T8455] Tainted: [L]=SOFTLOCKUP [ 268.185733][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.185744][ T8455] Call Trace: [ 268.185750][ T8455] [ 268.185756][ T8455] dump_stack_lvl+0x100/0x190 [ 268.185782][ T8455] should_fail_ex.cold+0x5/0xa [ 268.185801][ T8455] should_failslab+0xc2/0x120 [ 268.185820][ T8455] kmem_cache_alloc_noprof+0x92/0x6a0 [ 268.185838][ T8455] ? __asan_memcpy+0x3c/0x60 [ 268.185850][ T8455] ? __kernfs_new_node+0xd2/0xa10 [ 268.185874][ T8455] __kernfs_new_node+0xd2/0xa10 [ 268.185894][ T8455] ? __pfx___kernfs_new_node+0x10/0x10 [ 268.185914][ T8455] ? lock_acquire+0x1d1/0x380 [ 268.185932][ T8455] ? kernfs_root+0x23/0x2a0 [ 268.185948][ T8455] ? find_held_lock+0x2b/0x80 [ 268.185962][ T8455] ? kernfs_root+0xee/0x2a0 [ 268.185977][ T8455] ? kernfs_root+0xee/0x2a0 [ 268.185996][ T8455] kernfs_create_dir_ns+0xa6/0x2b0 [ 268.186015][ T8455] ? percpu_ref_init+0x244/0x3f0 [ 268.186038][ T8455] cgroup_mkdir+0x3be/0x1330 [ 268.186059][ T8455] ? __pfx_cgroup_mkdir+0x10/0x10 [ 268.186078][ T8455] kernfs_iop_mkdir+0x111/0x190 [ 268.186095][ T8455] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 268.186113][ T8455] vfs_mkdir+0x364/0x850 [ 268.186146][ T8455] filename_mkdirat+0x48b/0x5e0 [ 268.186165][ T8455] ? __pfx_filename_mkdirat+0x10/0x10 [ 268.186182][ T8455] ? strncpy_from_user+0x19d/0x2d0 [ 268.186201][ T8455] ? do_getname+0x191/0x390 [ 268.186223][ T8455] __x64_sys_mkdir+0x6b/0x90 [ 268.186240][ T8455] do_syscall_64+0x121/0x770 [ 268.186262][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.186285][ T8455] RIP: 0033:0x7fdea5d9e159 [ 268.186299][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.186313][ T8455] RSP: 002b:00007fdea6c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 268.186331][ T8455] RAX: ffffffffffffffda RBX: 00007fdea6025fa0 RCX: 00007fdea5d9e159 [ 268.186341][ T8455] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 268.186350][ T8455] RBP: 00007fdea5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 268.186359][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.186367][ T8455] R13: 00007fdea6026038 R14: 00007fdea6025fa0 R15: 00007ffc89af1918 [ 268.186386][ T8455] [ 273.940100][ T8542] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.355'. [ 274.053140][ T8547] program syz.1.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.396932][ T8628] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.365'. [ 281.012102][ T8641] ubi0: attaching mtd0 [ 281.033479][ T8641] ubi0: scanning is finished [ 281.575581][ T8641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 281.586537][ T8641] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 281.586574][ T8641] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 281.586587][ T8641] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 281.586601][ T8641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 281.586614][ T8641] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 281.586628][ T8641] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 430180633 [ 281.586643][ T8641] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 281.603516][ T8649] ubi0: background thread "ubi_bgt0d" started, PID 8649 [ 283.819534][ T8680] mmap: syz.0.373 (8680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 285.678137][ T8718] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.377'. [ 285.747567][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 285.875677][ T8720] bond0: (slave bond_slave_0): Releasing backup interface [ 287.193257][ T8756] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.382'. [ 290.510873][ T8780] syz.1.386 (8780) used greatest stack depth: 17960 bytes left [ 291.307785][ T8811] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.389'. [ 294.611931][ T8828] Process accounting paused [ 296.423910][ T8883] FAULT_INJECTION: forcing a failure. [ 296.423910][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 296.423949][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.423970][ T8883] Tainted: [L]=SOFTLOCKUP [ 296.423975][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.423984][ T8883] Call Trace: [ 296.423990][ T8883] [ 296.423995][ T8883] dump_stack_lvl+0x100/0x190 [ 296.424020][ T8883] should_fail_ex.cold+0x5/0xa [ 296.424043][ T8883] should_failslab+0xc2/0x120 [ 296.424062][ T8883] kmem_cache_alloc_noprof+0x92/0x6a0 [ 296.424100][ T8883] ? jbd2__journal_start+0x194/0x6b0 [ 296.424126][ T8883] jbd2__journal_start+0x194/0x6b0 [ 296.424149][ T8883] __ext4_journal_start_sb+0x314/0x610 [ 296.424209][ T8883] ? ext4_dirty_inode+0xa1/0x130 [ 296.424233][ T8883] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 296.424250][ T8883] ext4_dirty_inode+0xa1/0x130 [ 296.424268][ T8883] ? rcu_is_watching+0x13/0xc0 [ 296.424282][ T8883] __mark_inode_dirty+0x1f3/0x16e0 [ 296.424307][ T8883] file_update_time_flags+0x49c/0x520 [ 296.424329][ T8883] file_modified+0x36/0x50 [ 296.424348][ T8883] ext4_fallocate+0x2cb/0x3e60 [ 296.424370][ T8883] ? lock_acquire+0x1d1/0x380 [ 296.424388][ T8883] ? madvise_vma_behavior+0x959/0x2350 [ 296.424408][ T8883] ? __pfx_ext4_fallocate+0x10/0x10 [ 296.424429][ T8883] ? __pfx_ext4_fallocate+0x10/0x10 [ 296.424447][ T8883] vfs_fallocate+0x576/0x10a0 [ 296.424464][ T8883] ? __pfx_vfs_fallocate+0x10/0x10 [ 296.424477][ T8883] ? madvise_vma_behavior+0x1317/0x2350 [ 296.424496][ T8883] ? madvise_vma_behavior+0x1317/0x2350 [ 296.424520][ T8883] madvise_vma_behavior+0x959/0x2350 [ 296.424544][ T8883] ? mas_prev+0xa4/0x100 [ 296.424566][ T8883] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 296.424587][ T8883] ? mas_walk+0x260/0x310 [ 296.424605][ T8883] ? find_vma_prev+0xd8/0x150 [ 296.424622][ T8883] ? __pfx_find_vma_prev+0x10/0x10 [ 296.424638][ T8883] ? lock_acquire+0x1d1/0x380 [ 296.424667][ T8883] madvise_walk_vmas+0x30e/0xc50 [ 296.424691][ T8883] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 296.424713][ T8883] ? __pfx_futex_wake_mark+0x10/0x10 [ 296.424733][ T8883] ? lock_acquire+0x1d1/0x380 [ 296.424754][ T8883] madvise_do_behavior+0x1ea/0x510 [ 296.424775][ T8883] ? __pfx_madvise_do_behavior+0x10/0x10 [ 296.424795][ T8883] ? down_read+0x13b/0x4c0 [ 296.424824][ T8883] do_madvise+0x238/0x290 [ 296.424845][ T8883] ? __pfx_do_madvise+0x10/0x10 [ 296.424867][ T8883] ? do_futex+0x190/0x440 [ 296.424884][ T8883] ? __fget_files+0x21f/0x3d0 [ 296.424911][ T8883] __x64_sys_madvise+0xa9/0x110 [ 296.424930][ T8883] ? lockdep_hardirqs_on+0x7d/0x110 [ 296.424949][ T8883] do_syscall_64+0x121/0x770 [ 296.424969][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.424984][ T8883] RIP: 0033:0x7f374319e159 [ 296.424997][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.425010][ T8883] RSP: 002b:00007f3743f85028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 296.425045][ T8883] RAX: ffffffffffffffda RBX: 00007f3743425fa0 RCX: 00007f374319e159 [ 296.425055][ T8883] RDX: 0000000000000009 RSI: 00000000008031ca RDI: 000000110c230000 [ 296.425065][ T8883] RBP: 00007f3743235024 R08: 0000000000000000 R09: 0000000000000000 [ 296.425074][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.425083][ T8883] R13: 00007f3743426038 R14: 00007f3743425fa0 R15: 00007fff9c37e648 [ 296.425102][ T8883] [ 303.130220][ T8980] FAULT_INJECTION: forcing a failure. [ 303.130220][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 303.130270][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.0.412 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.130292][ T8980] Tainted: [L]=SOFTLOCKUP [ 303.130298][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.130307][ T8980] Call Trace: [ 303.130312][ T8980] [ 303.130318][ T8980] dump_stack_lvl+0x100/0x190 [ 303.130344][ T8980] should_fail_ex.cold+0x5/0xa [ 303.130363][ T8980] should_failslab+0xc2/0x120 [ 303.130382][ T8980] kmem_cache_alloc_noprof+0x92/0x6a0 [ 303.130398][ T8980] ? jbd2__journal_start+0x194/0x6b0 [ 303.130423][ T8980] jbd2__journal_start+0x194/0x6b0 [ 303.130446][ T8980] __ext4_journal_start_sb+0x314/0x610 [ 303.130462][ T8980] ? ext4_dirty_inode+0xa1/0x130 [ 303.130481][ T8980] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 303.130498][ T8980] ext4_dirty_inode+0xa1/0x130 [ 303.130514][ T8980] ? rcu_is_watching+0x13/0xc0 [ 303.130528][ T8980] __mark_inode_dirty+0x1f3/0x16e0 [ 303.130552][ T8980] file_update_time_flags+0x49c/0x520 [ 303.130574][ T8980] file_modified+0x36/0x50 [ 303.130592][ T8980] ext4_fallocate+0x2cb/0x3e60 [ 303.130613][ T8980] ? lock_acquire+0x1d1/0x380 [ 303.130634][ T8980] ? madvise_vma_behavior+0x959/0x2350 [ 303.130653][ T8980] ? __pfx_ext4_fallocate+0x10/0x10 [ 303.130683][ T8980] ? __pfx_ext4_fallocate+0x10/0x10 [ 303.130702][ T8980] vfs_fallocate+0x576/0x10a0 [ 303.130720][ T8980] ? __pfx_vfs_fallocate+0x10/0x10 [ 303.130734][ T8980] ? madvise_vma_behavior+0x1317/0x2350 [ 303.130753][ T8980] ? madvise_vma_behavior+0x1317/0x2350 [ 303.130777][ T8980] madvise_vma_behavior+0x959/0x2350 [ 303.130798][ T8980] ? mas_prev+0xa4/0x100 [ 303.130821][ T8980] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 303.130841][ T8980] ? mas_walk+0x260/0x310 [ 303.130860][ T8980] ? find_vma_prev+0xd8/0x150 [ 303.130877][ T8980] ? __pfx_find_vma_prev+0x10/0x10 [ 303.130894][ T8980] ? lock_acquire+0x1d1/0x380 [ 303.130923][ T8980] madvise_walk_vmas+0x30e/0xc50 [ 303.130946][ T8980] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 303.130966][ T8980] ? __pfx_futex_wake_mark+0x10/0x10 [ 303.130987][ T8980] ? lock_acquire+0x1d1/0x380 [ 303.131007][ T8980] madvise_do_behavior+0x1ea/0x510 [ 303.131028][ T8980] ? __pfx_madvise_do_behavior+0x10/0x10 [ 303.131048][ T8980] ? down_read+0x13b/0x4c0 [ 303.131077][ T8980] do_madvise+0x238/0x290 [ 303.131095][ T8980] ? __pfx_do_madvise+0x10/0x10 [ 303.131114][ T8980] ? do_futex+0x190/0x440 [ 303.131130][ T8980] ? __fget_files+0x21f/0x3d0 [ 303.131157][ T8980] __x64_sys_madvise+0xa9/0x110 [ 303.131176][ T8980] ? lockdep_hardirqs_on+0x7d/0x110 [ 303.131195][ T8980] do_syscall_64+0x121/0x770 [ 303.131215][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.131230][ T8980] RIP: 0033:0x7f4faa19e159 [ 303.131243][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.131257][ T8980] RSP: 002b:00007f4fab0ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 303.131272][ T8980] RAX: ffffffffffffffda RBX: 00007f4faa425fa0 RCX: 00007f4faa19e159 [ 303.131282][ T8980] RDX: 0000000000000009 RSI: 00000000008031ca RDI: 000000110c230000 [ 303.131292][ T8980] RBP: 00007f4faa235024 R08: 0000000000000000 R09: 0000000000000000 [ 303.131301][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.131310][ T8980] R13: 00007f4faa426038 R14: 00007f4faa425fa0 R15: 00007fff3b8c88e8 [ 303.131330][ T8980] [ 313.474564][ T9155] nfs: Bad value for 'source' [ 313.530663][ T9155] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5612] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9155] [ 317.045069][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.051429][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.095371][ T9221] FAULT_INJECTION: forcing a failure. [ 318.095371][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 318.095411][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.1.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.095433][ T9221] Tainted: [L]=SOFTLOCKUP [ 318.095448][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.095458][ T9221] Call Trace: [ 318.095463][ T9221] [ 318.095470][ T9221] dump_stack_lvl+0x100/0x190 [ 318.095496][ T9221] should_fail_ex.cold+0x5/0xa [ 318.095517][ T9221] should_failslab+0xc2/0x120 [ 318.095536][ T9221] kmem_cache_alloc_noprof+0x92/0x6a0 [ 318.095552][ T9221] ? jbd2__journal_start+0x194/0x6b0 [ 318.095579][ T9221] jbd2__journal_start+0x194/0x6b0 [ 318.095602][ T9221] __ext4_journal_start_sb+0x314/0x610 [ 318.095618][ T9221] ? ext4_dirty_inode+0xa1/0x130 [ 318.095635][ T9221] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 318.095652][ T9221] ext4_dirty_inode+0xa1/0x130 [ 318.095668][ T9221] ? rcu_is_watching+0x13/0xc0 [ 318.095682][ T9221] __mark_inode_dirty+0x1f3/0x16e0 [ 318.095706][ T9221] file_update_time_flags+0x49c/0x520 [ 318.095729][ T9221] file_modified+0x36/0x50 [ 318.095747][ T9221] ext4_fallocate+0x2cb/0x3e60 [ 318.095767][ T9221] ? lock_acquire+0x1d1/0x380 [ 318.095786][ T9221] ? madvise_vma_behavior+0x959/0x2350 [ 318.095805][ T9221] ? __pfx_ext4_fallocate+0x10/0x10 [ 318.095827][ T9221] ? __pfx_ext4_fallocate+0x10/0x10 [ 318.095845][ T9221] vfs_fallocate+0x576/0x10a0 [ 318.095862][ T9221] ? __pfx_vfs_fallocate+0x10/0x10 [ 318.095875][ T9221] ? madvise_vma_behavior+0x1317/0x2350 [ 318.095894][ T9221] ? madvise_vma_behavior+0x1317/0x2350 [ 318.095917][ T9221] madvise_vma_behavior+0x959/0x2350 [ 318.095938][ T9221] ? mas_prev+0xa4/0x100 [ 318.095960][ T9221] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 318.095981][ T9221] ? mas_walk+0x260/0x310 [ 318.095999][ T9221] ? find_vma_prev+0xd8/0x150 [ 318.096016][ T9221] ? __pfx_find_vma_prev+0x10/0x10 [ 318.096032][ T9221] ? lock_acquire+0x1d1/0x380 [ 318.096062][ T9221] madvise_walk_vmas+0x30e/0xc50 [ 318.096090][ T9221] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 318.096112][ T9221] ? __pfx_futex_wake_mark+0x10/0x10 [ 318.096138][ T9221] ? lock_acquire+0x1d1/0x380 [ 318.096160][ T9221] madvise_do_behavior+0x1ea/0x510 [ 318.096182][ T9221] ? __pfx_madvise_do_behavior+0x10/0x10 [ 318.096204][ T9221] ? down_read+0x13b/0x4c0 [ 318.096234][ T9221] do_madvise+0x238/0x290 [ 318.096252][ T9221] ? __pfx_do_madvise+0x10/0x10 [ 318.096271][ T9221] ? do_futex+0x190/0x440 [ 318.096288][ T9221] ? __fget_files+0x21f/0x3d0 [ 318.096315][ T9221] __x64_sys_madvise+0xa9/0x110 [ 318.096334][ T9221] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.096353][ T9221] do_syscall_64+0x121/0x770 [ 318.096373][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.096389][ T9221] RIP: 0033:0x7fdea5d9e159 [ 318.096402][ T9221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.096415][ T9221] RSP: 002b:00007fdea6c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 318.096430][ T9221] RAX: ffffffffffffffda RBX: 00007fdea6025fa0 RCX: 00007fdea5d9e159 [ 318.096447][ T9221] RDX: 0000000000000009 RSI: 00000000008031ca RDI: 000000110c230000 [ 318.096456][ T9221] RBP: 00007fdea5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 318.096465][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.096475][ T9221] R13: 00007fdea6026038 R14: 00007fdea6025fa0 R15: 00007ffc89af1918 [ 318.096494][ T9221] [ 318.572930][ T9223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.591564][ T9223] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 318.650102][ T9223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.660147][ T9223] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 318.678938][ T9223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.679023][ T9223] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.765895][ T9223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.765998][ T9223] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.891406][ T30] audit: type=1807 audit(2374.459:7): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 318.934493][ T30] audit: type=1802 audit(2374.510:8): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.444" res=0 errno=0 [ 318.983597][ T9236] ima: policy update failed [ 318.989313][ T30] audit: type=1802 audit(2374.560:9): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.444" res=0 errno=0 [ 320.624652][ T8239] Bluetooth: hci0: command 0x0406 tx timeout [ 320.644253][ T9260] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.446'. [ 320.713861][ T8239] Bluetooth: hci1: command 0x0406 tx timeout [ 320.713911][ T8239] Bluetooth: hci2: command 0x0406 tx timeout [ 320.783599][ T8218] Bluetooth: hci3: command 0x0406 tx timeout [ 322.693552][ T8218] Bluetooth: hci0: command 0x0406 tx timeout [ 322.773987][ T8218] Bluetooth: hci2: command 0x0406 tx timeout [ 322.774032][ T8218] Bluetooth: hci1: command 0x0406 tx timeout [ 322.805750][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 322.853033][ T9299] Bluetooth: hci3: command 0x0406 tx timeout [ 326.236929][ T9326] Process accounting resumed [ 326.359075][ T9339] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 326.367468][ T9339] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 326.798303][ T9354] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.459'. [ 328.859618][ T9388] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.461'. [ 332.469447][ T9446] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.471'. [ 337.867824][ T9515] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.484'. [ 351.679047][ T9749] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 352.186159][ T9751] dump_stack_lvl+0x100/0x190 [ 352.186223][ T9751] should_fail_ex.cold+0x5/0xa [ 352.186258][ T9751] should_failslab+0xc2/0x120 [ 352.186328][ T9751] kmem_cache_alloc_noprof+0x92/0x6a0 [ 352.186369][ T9751] ? key_alloc+0x3c5/0x1310 [ 352.186448][ T9751] key_alloc+0x3c5/0x1310 [ 352.186472][ T9751] ? __kasan_kmalloc+0xaa/0xb0 [ 352.186510][ T9751] ? __pfx_key_alloc+0x10/0x10 [ 352.186534][ T9751] keyring_alloc+0x44/0xc0 [ 352.186559][ T9751] install_session_keyring_to_cred+0x190/0x230 [ 352.186601][ T9751] join_session_keyring+0x1bc/0x350 [ 352.186621][ T9751] lookup_user_key+0xbf9/0x1300 [ 352.186641][ T9751] ? __pfx_lookup_user_key+0x10/0x10 [ 352.186660][ T9751] ? find_held_lock+0x2b/0x80 [ 352.186689][ T9751] ? setid_policy_lookup+0x10c/0x350 [ 352.186741][ T9751] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 352.186765][ T9751] ? bpf_lsm_capable+0x9/0x10 [ 352.186826][ T9751] ? security_capable+0x80/0x260 [ 352.186877][ T9751] keyctl_get_persistent+0x197/0x8b0 [ 352.186901][ T9751] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 352.186925][ T9751] ? __x64_sys_futex+0x34f/0x4d0 [ 352.186948][ T9751] ? __x64_sys_futex+0x358/0x4d0 [ 352.186966][ T9751] ? xfd_validate_state+0x129/0x190 [ 352.187000][ T9751] __do_sys_keyctl+0x3b2/0x5a0 [ 352.187018][ T9751] do_syscall_64+0x121/0x770 [ 352.187112][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.187134][ T9751] RIP: 0033:0x7f4faa19e159 [ 352.187148][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.187162][ T9751] RSP: 002b:00007f4fab0ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 352.187227][ T9751] RAX: ffffffffffffffda RBX: 00007f4faa425fa0 RCX: 00007f4faa19e159 [ 352.187237][ T9751] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 352.187247][ T9751] RBP: 00007f4faa235024 R08: 0000000000000001 R09: 0000000000000000 [ 352.187256][ T9751] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 352.187265][ T9751] R13: 00007f4faa426038 R14: 00007f4faa425fa0 R15: 00007fff3b8c88e8 [ 352.187284][ T9751] [ 353.320344][ T9764] FAULT_INJECTION: forcing a failure. [ 353.320344][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 353.320383][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.3.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.320405][ T9764] Tainted: [L]=SOFTLOCKUP [ 353.320411][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.320420][ T9764] Call Trace: [ 353.320425][ T9764] [ 353.320431][ T9764] dump_stack_lvl+0x100/0x190 [ 353.320455][ T9764] should_fail_ex.cold+0x5/0xa [ 353.320474][ T9764] should_failslab+0xc2/0x120 [ 353.320493][ T9764] __kmalloc_cache_noprof+0x91/0x6d0 [ 353.320554][ T9764] ? trace_pid_list_alloc+0x232/0x480 [ 353.320586][ T9764] trace_pid_list_alloc+0x232/0x480 [ 353.320607][ T9764] trace_pid_write+0x110/0x460 [ 353.320628][ T9764] ? __pfx_trace_pid_write+0x10/0x10 [ 353.320649][ T9764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 353.320724][ T9764] event_pid_write.isra.0+0x1e4/0x7d0 [ 353.320753][ T9764] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 353.320780][ T9764] vfs_write+0x2aa/0x1050 [ 353.320830][ T9764] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 353.320850][ T9764] ? lock_acquire+0x1d1/0x380 [ 353.320870][ T9764] ? __fget_files+0x34/0x3d0 [ 353.320933][ T9764] ? __pfx_vfs_write+0x10/0x10 [ 353.320947][ T9764] ? find_held_lock+0x2b/0x80 [ 353.320962][ T9764] ? __fget_files+0x215/0x3d0 [ 353.320980][ T9764] ? __fget_files+0x21f/0x3d0 [ 353.321001][ T9764] ksys_write+0x12a/0x250 [ 353.321016][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 353.321036][ T9764] do_syscall_64+0x121/0x770 [ 353.321058][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.321073][ T9764] RIP: 0033:0x7fa91f99e159 [ 353.321086][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.321099][ T9764] RSP: 002b:00007fa920946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.321114][ T9764] RAX: ffffffffffffffda RBX: 00007fa91fc25fa0 RCX: 00007fa91f99e159 [ 353.321124][ T9764] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 353.321132][ T9764] RBP: 00007fa91fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 353.321140][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.321149][ T9764] R13: 00007fa91fc26038 R14: 00007fa91fc25fa0 R15: 00007fffc79d7608 [ 353.321169][ T9764] [ 353.610772][ T9772] FAULT_INJECTION: forcing a failure. [ 353.610772][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 353.610812][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.3.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.610836][ T9772] Tainted: [L]=SOFTLOCKUP [ 353.610842][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.610851][ T9772] Call Trace: [ 353.610857][ T9772] [ 353.610864][ T9772] dump_stack_lvl+0x100/0x190 [ 353.610887][ T9772] should_fail_ex.cold+0x5/0xa [ 353.610904][ T9772] ? lock_acquire+0x1d1/0x380 [ 353.610927][ T9772] should_failslab+0xc2/0x120 [ 353.610946][ T9772] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 353.610963][ T9772] ? zswap_store+0xc6d/0x2e70 [ 353.611058][ T9772] zswap_store+0xc6d/0x2e70 [ 353.611088][ T9772] ? __pfx_zswap_store+0x10/0x10 [ 353.611110][ T9772] ? lock_acquire+0x1d1/0x380 [ 353.611129][ T9772] ? do_raw_spin_lock+0x128/0x260 [ 353.611152][ T9772] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.611173][ T9772] ? find_held_lock+0x2b/0x80 [ 353.611187][ T9772] ? swap_writeout+0xdd8/0x1b20 [ 353.611207][ T9772] ? swap_writeout+0xdd8/0x1b20 [ 353.611231][ T9772] swap_writeout+0xde0/0x1b20 [ 353.611255][ T9772] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.611274][ T9772] shmem_writeout+0xecd/0x1a00 [ 353.611327][ T9772] ? __pfx_shmem_writeout+0x10/0x10 [ 353.611350][ T9772] ? inode_to_bdi+0x9e/0x160 [ 353.611385][ T9772] ? folio_clear_dirty_for_io+0x178/0x960 [ 353.611488][ T9772] shrink_folio_list+0x399a/0x5e40 [ 353.611534][ T9772] ? __pfx_shrink_folio_list+0x10/0x10 [ 353.611579][ T9772] ? __lock_acquire+0x4c5/0x1ec0 [ 353.611598][ T9772] ? __css_rstat_updated+0x1ce/0x590 [ 353.611625][ T9772] ? __pfx___css_rstat_updated+0x10/0x10 [ 353.611647][ T9772] reclaim_folio_list+0xe9/0x5e0 [ 353.611667][ T9772] ? __pfx_reclaim_folio_list+0x10/0x10 [ 353.611684][ T9772] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 353.611742][ T9772] ? lru_gen_update_size+0x431/0xe20 [ 353.611764][ T9772] ? lru_gen_del_folio+0x382/0x5f0 [ 353.611784][ T9772] reclaim_pages+0x428/0x5e0 [ 353.611805][ T9772] ? __pfx_reclaim_pages+0x10/0x10 [ 353.611823][ T9772] ? find_held_lock+0x2b/0x80 [ 353.611839][ T9772] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 353.611863][ T9772] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 353.611890][ T9772] ? rcu_read_unlock+0x17/0x60 [ 353.611932][ T9772] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.611954][ T9772] ? __mod_zone_page_state+0xdb/0x190 [ 353.611979][ T9772] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.612002][ T9772] walk_pgd_range+0xbef/0x1e00 [ 353.612043][ T9772] ? find_held_lock+0x2b/0x80 [ 353.612065][ T9772] ? __pfx_walk_pgd_range+0x10/0x10 [ 353.612081][ T9772] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 353.612127][ T9772] __walk_page_range+0x171/0x850 [ 353.612151][ T9772] walk_page_range_vma_unsafe+0x209/0x8f0 [ 353.612169][ T9772] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 353.612189][ T9772] ? find_held_lock+0x2b/0x80 [ 353.612203][ T9772] ? mlock_drain_local+0x254/0x4e0 [ 353.612269][ T9772] ? mlock_drain_local+0x254/0x4e0 [ 353.612294][ T9772] walk_page_range_vma+0x63/0x90 [ 353.612311][ T9772] madvise_pageout+0x29e/0x5b0 [ 353.612331][ T9772] ? __pfx_madvise_pageout+0x10/0x10 [ 353.612363][ T9772] madvise_vma_behavior+0x48b/0x2350 [ 353.612384][ T9772] ? mas_prev+0xa4/0x100 [ 353.612449][ T9772] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 353.612471][ T9772] ? mas_walk+0x260/0x310 [ 353.612489][ T9772] ? find_vma_prev+0xd8/0x150 [ 353.612506][ T9772] ? __pfx_find_vma_prev+0x10/0x10 [ 353.612522][ T9772] ? lock_acquire+0x1d1/0x380 [ 353.612551][ T9772] madvise_walk_vmas+0x30e/0xc50 [ 353.612573][ T9772] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 353.612594][ T9772] ? __pfx_futex_wake_mark+0x10/0x10 [ 353.612615][ T9772] ? lock_acquire+0x1d1/0x380 [ 353.612635][ T9772] madvise_do_behavior+0x1ea/0x510 [ 353.612656][ T9772] ? __pfx_madvise_do_behavior+0x10/0x10 [ 353.612676][ T9772] ? down_read+0x13b/0x4c0 [ 353.612705][ T9772] do_madvise+0x238/0x290 [ 353.612731][ T9772] ? __pfx_do_madvise+0x10/0x10 [ 353.612750][ T9772] ? do_futex+0x190/0x440 [ 353.612768][ T9772] ? fdget+0x18b/0x210 [ 353.612796][ T9772] __x64_sys_madvise+0xa9/0x110 [ 353.612816][ T9772] ? lockdep_hardirqs_on+0x7d/0x110 [ 353.612834][ T9772] do_syscall_64+0x121/0x770 [ 353.612855][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.612870][ T9772] RIP: 0033:0x7fa91f99e159 [ 353.612884][ T9772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.612898][ T9772] RSP: 002b:00007fa920904028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 353.612913][ T9772] RAX: ffffffffffffffda RBX: 00007fa91fc26180 RCX: 00007fa91f99e159 [ 353.612923][ T9772] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000 [ 353.612932][ T9772] RBP: 00007fa91fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 353.612941][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.612949][ T9772] R13: 00007fa91fc26218 R14: 00007fa91fc26180 R15: 00007fffc79d7608 [ 353.612968][ T9772] [ 357.787080][ T9803] Process accounting paused [ 361.795421][ T9900] futex_wake_op: syz.3.531 tries to shift op by -2048; fix this program [ 361.795532][ T9900] futex_wake_op: syz.3.531 tries to shift op by -2048; fix this program [ 361.817923][ T9900] 0x000000000001-0x000000020000 : "" [ 361.860941][ T9900] ftl_cs: FTL header corrupt! [ 365.504748][ T9937] FAULT_INJECTION: forcing a failure. [ 365.504748][ T9937] name failslab, interval 1, probability 0, space 0, times 0 [ 365.504789][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.1.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.504809][ T9937] Tainted: [L]=SOFTLOCKUP [ 365.504814][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.504824][ T9937] Call Trace: [ 365.504828][ T9937] [ 365.504834][ T9937] dump_stack_lvl+0x100/0x190 [ 365.504859][ T9937] should_fail_ex.cold+0x5/0xa [ 365.504878][ T9937] should_failslab+0xc2/0x120 [ 365.504898][ T9937] kmem_cache_alloc_noprof+0x92/0x6a0 [ 365.504916][ T9937] ? __pfx_acct_collect+0x10/0x10 [ 365.504933][ T9937] ? taskstats_exit+0x6d3/0xca0 [ 365.504954][ T9937] taskstats_exit+0x6d3/0xca0 [ 365.504971][ T9937] ? __pfx_acct_update_integrals+0x10/0x10 [ 365.504990][ T9937] ? __pfx_taskstats_exit+0x10/0x10 [ 365.505008][ T9937] ? rcu_read_lock_any_held+0x6a/0x90 [ 365.505051][ T9937] do_exit+0x65c/0x2ae0 [ 365.505077][ T9937] ? __pfx_do_exit+0x10/0x10 [ 365.505091][ T9937] ? do_raw_spin_lock+0x128/0x260 [ 365.505112][ T9937] ? find_held_lock+0x2b/0x80 [ 365.505125][ T9937] ? get_signal+0x7e0/0x21e0 [ 365.505155][ T9937] do_group_exit+0xd5/0x2a0 [ 365.505171][ T9937] get_signal+0x1ec7/0x21e0 [ 365.505197][ T9937] ? __pfx_get_signal+0x10/0x10 [ 365.505218][ T9937] ? __pfx_set_user_sigmask+0x10/0x10 [ 365.505235][ T9937] ? do_futex+0x190/0x440 [ 365.505249][ T9937] arch_do_signal_or_restart+0x91/0x7a0 [ 365.505274][ T9937] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 365.505302][ T9937] exit_to_user_mode_loop+0x139/0x700 [ 365.505322][ T9937] ? rcu_is_watching+0x13/0xc0 [ 365.505336][ T9937] do_syscall_64+0x603/0x770 [ 365.505358][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.505373][ T9937] RIP: 0033:0x7fdea5d9e159 [ 365.505386][ T9937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.505399][ T9937] RSP: 002b:00007fdea6c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 365.505413][ T9937] RAX: fffffffffffffdfe RBX: 00007fdea6025fa0 RCX: 00007fdea5d9e159 [ 365.505422][ T9937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 365.505430][ T9937] RBP: 00007fdea5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 365.505438][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.505446][ T9937] R13: 00007fdea6026038 R14: 00007fdea6025fa0 R15: 00007ffc89af1918 [ 365.505464][ T9937] [ 374.688708][T10106] overlayfs: missing 'lowerdir' [ 376.640203][T10126] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 376.640347][T10126] vhci_hcd vhci_hcd.2: invalid port number 0 [ 377.465253][ T30] audit: type=1804 audit(4481.344:10): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.563" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=3486 res=1 errno=0 [ 378.168874][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.168925][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.884486][T10199] FAULT_INJECTION: forcing a failure. [ 380.884486][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 380.907057][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.907085][T10199] Tainted: [L]=SOFTLOCKUP [ 380.907091][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.907100][T10199] Call Trace: [ 380.907107][T10199] [ 380.907113][T10199] dump_stack_lvl+0x100/0x190 [ 380.907139][T10199] should_fail_ex.cold+0x5/0xa [ 380.907158][T10199] should_failslab+0xc2/0x120 [ 380.907178][T10199] __kmalloc_noprof+0xfc/0x840 [ 380.907194][T10199] ? tracepoint_add_func+0x3a8/0x1150 [ 380.907217][T10199] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 380.907236][T10199] tracepoint_add_func+0x3a8/0x1150 [ 380.907255][T10199] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 380.907278][T10199] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 380.907297][T10199] tracepoint_probe_register+0xc4/0x110 [ 380.907317][T10199] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 380.907337][T10199] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 380.907356][T10199] ? relay_open+0x793/0xa00 [ 380.907374][T10199] blk_register_tracepoints+0x129/0x440 [ 380.907389][T10199] blk_trace_setup_finalize+0x320/0x3a0 [ 380.907405][T10199] blk_trace_setup+0x254/0x440 [ 380.907423][T10199] ? __pfx_blk_trace_setup+0x10/0x10 [ 380.907438][T10199] ? vsnprintf+0x4c5/0x1300 [ 380.907461][T10199] ? __pfx_vsnprintf+0x10/0x10 [ 380.907489][T10199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.907512][T10199] ? do_vfs_ioctl+0x226/0x13e0 [ 380.907619][T10199] blk_trace_ioctl+0x245/0x320 [ 380.907643][T10199] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 380.907664][T10199] ? find_held_lock+0x2b/0x80 [ 380.907679][T10199] ? hook_file_ioctl_common+0x140/0x440 [ 380.907770][T10199] blkdev_ioctl+0x17c/0x6f0 [ 380.907817][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 380.907838][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 380.907857][T10199] __x64_sys_ioctl+0x18e/0x210 [ 380.907881][T10199] do_syscall_64+0x121/0x770 [ 380.907902][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.907918][T10199] RIP: 0033:0x7f374319e159 [ 380.907931][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.907946][T10199] RSP: 002b:00007f37413f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.907961][T10199] RAX: ffffffffffffffda RBX: 00007f3743426090 RCX: 00007f374319e159 [ 380.907971][T10199] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 380.907980][T10199] RBP: 00007f3743235024 R08: 0000000000000000 R09: 0000000000000000 [ 380.907989][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.907998][T10199] R13: 00007f3743426128 R14: 00007f3743426090 R15: 00007fff9c37e648 [ 380.908017][T10199] [ 381.079751][T10199] ------------[ cut here ]------------ [ 381.079761][T10199] ret [ 381.079779][T10199] WARNING: kernel/trace/blktrace.c:1344 at blk_register_tracepoints+0x390/0x440, CPU#0: syz.2.570/10199 [ 381.223492][T10199] Modules linked in: [ 381.227376][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.238265][T10199] Tainted: [L]=SOFTLOCKUP [ 381.243346][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.253455][T10199] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 381.259813][T10199] Code: 0f 0b 90 e9 47 fd ff ff e8 ad 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 9f 8e f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 91 8e f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 83 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 381.279563][T10199] RSP: 0018:ffffc9000c54fb00 EFLAGS: 00010283 [ 381.285622][T10199] RAX: 000000000003e945 RBX: 00000000fffffff4 RCX: ffffc9000e90a000 [ 381.293773][T10199] RDX: 0000000000080000 RSI: ffffffff8213ad9f RDI: ffff88807f839f40 [ 381.301829][T10199] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 381.310591][T10199] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 381.318552][T10199] R13: ffff8880277e2540 R14: ffffc9000c54fda0 R15: 0000000000000001 [ 381.327092][T10199] FS: 00007f37413f66c0(0000) GS:ffff888123b63000(0000) knlGS:0000000000000000 [ 381.336072][T10199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.342676][T10199] CR2: 0000200000001500 CR3: 000000007a0b0000 CR4: 00000000003526f0 [ 381.350738][T10199] Call Trace: [ 381.354003][T10199] [ 381.356914][T10199] blk_trace_setup_finalize+0x320/0x3a0 [ 381.362478][T10199] blk_trace_setup+0x254/0x440 [ 381.367231][T10199] ? __pfx_blk_trace_setup+0x10/0x10 [ 381.372533][T10199] ? vsnprintf+0x4c5/0x1300 [ 381.377029][T10199] ? __pfx_vsnprintf+0x10/0x10 [ 381.381808][T10199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.387774][T10199] ? do_vfs_ioctl+0x226/0x13e0 [ 381.392607][T10199] blk_trace_ioctl+0x245/0x320 [ 381.397377][T10199] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 381.402696][T10199] ? find_held_lock+0x2b/0x80 [ 381.408153][T10199] ? hook_file_ioctl_common+0x140/0x440 [ 381.413695][T10199] blkdev_ioctl+0x17c/0x6f0 [ 381.418774][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.423833][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.428968][T10199] __x64_sys_ioctl+0x18e/0x210 [ 381.433729][T10199] do_syscall_64+0x121/0x770 [ 381.438357][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.444232][T10199] RIP: 0033:0x7f374319e159 [ 381.448662][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.468312][T10199] RSP: 002b:00007f37413f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.476705][T10199] RAX: ffffffffffffffda RBX: 00007f3743426090 RCX: 00007f374319e159 [ 381.484696][T10199] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 381.492682][T10199] RBP: 00007f3743235024 R08: 0000000000000000 R09: 0000000000000000 [ 381.500677][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.509521][T10199] R13: 00007f3743426128 R14: 00007f3743426090 R15: 00007fff9c37e648 [ 381.517490][T10199] [ 381.521036][T10199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.528301][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.539131][T10199] Tainted: [L]=SOFTLOCKUP [ 381.543437][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.553469][T10199] Call Trace: [ 381.556728][T10199] [ 381.559642][T10199] dump_stack_lvl+0x100/0x190 [ 381.564310][T10199] vpanic+0x553/0x970 [ 381.568270][T10199] ? __pfx_vpanic+0x10/0x10 [ 381.572766][T10199] panic+0xd1/0xe0 [ 381.576466][T10199] ? __pfx_panic+0x10/0x10 [ 381.580867][T10199] check_panic_on_warn.cold+0x19/0x34 [ 381.586220][T10199] ? blk_register_tracepoints+0x390/0x440 [ 381.591918][T10199] __warn.cold+0x191/0x318 [ 381.596318][T10199] __report_bug+0x30f/0x440 [ 381.600885][T10199] ? blk_register_tracepoints+0x390/0x440 [ 381.606587][T10199] ? __pfx___report_bug+0x10/0x10 [ 381.611601][T10199] ? __mutex_unlock_slowpath+0x35d/0x930 [ 381.617221][T10199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.623184][T10199] ? blk_register_tracepoints+0x390/0x440 [ 381.628885][T10199] report_bug+0xb3/0x220 [ 381.633113][T10199] ? blk_register_tracepoints+0x390/0x440 [ 381.638811][T10199] handle_bug+0x16a/0x2a0 [ 381.643129][T10199] exc_invalid_op+0x17/0x50 [ 381.647632][T10199] asm_exc_invalid_op+0x1a/0x20 [ 381.652467][T10199] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 381.658781][T10199] Code: 0f 0b 90 e9 47 fd ff ff e8 ad 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 9f 8e f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 91 8e f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 83 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 381.678381][T10199] RSP: 0018:ffffc9000c54fb00 EFLAGS: 00010283 [ 381.684445][T10199] RAX: 000000000003e945 RBX: 00000000fffffff4 RCX: ffffc9000e90a000 [ 381.692413][T10199] RDX: 0000000000080000 RSI: ffffffff8213ad9f RDI: ffff88807f839f40 [ 381.700379][T10199] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 381.708333][T10199] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 381.716293][T10199] R13: ffff8880277e2540 R14: ffffc9000c54fda0 R15: 0000000000000001 [ 381.724285][T10199] ? blk_register_tracepoints+0x38f/0x440 [ 381.729998][T10199] blk_trace_setup_finalize+0x320/0x3a0 [ 381.735527][T10199] blk_trace_setup+0x254/0x440 [ 381.740275][T10199] ? __pfx_blk_trace_setup+0x10/0x10 [ 381.745544][T10199] ? vsnprintf+0x4c5/0x1300 [ 381.750036][T10199] ? __pfx_vsnprintf+0x10/0x10 [ 381.754794][T10199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.760672][T10199] ? do_vfs_ioctl+0x226/0x13e0 [ 381.765427][T10199] blk_trace_ioctl+0x245/0x320 [ 381.770177][T10199] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 381.775449][T10199] ? find_held_lock+0x2b/0x80 [ 381.780108][T10199] ? hook_file_ioctl_common+0x140/0x440 [ 381.785644][T10199] blkdev_ioctl+0x17c/0x6f0 [ 381.790132][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.795141][T10199] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.800151][T10199] __x64_sys_ioctl+0x18e/0x210 [ 381.804923][T10199] do_syscall_64+0x121/0x770 [ 381.809511][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.815386][T10199] RIP: 0033:0x7f374319e159 [ 381.819795][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.839381][T10199] RSP: 002b:00007f37413f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.847775][T10199] RAX: ffffffffffffffda RBX: 00007f3743426090 RCX: 00007f374319e159 [ 381.855726][T10199] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 381.863679][T10199] RBP: 00007f3743235024 R08: 0000000000000000 R09: 0000000000000000 [ 381.871628][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.879607][T10199] R13: 00007f3743426128 R14: 00007f3743426090 R15: 00007fff9c37e648 [ 381.887588][T10199] [ 381.890651][T10199] Kernel Offset: disabled [ 381.894966][T10199] Rebooting in 86400 seconds..