last executing test programs: 12.106326971s ago: executing program 2 (id=1187): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, 0x0, 0x4b47, 0x3, 0x4080005, @number_of_packets, 0x2004c, 0xc, 0x0}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0x7}) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x4, 0xb}, 0x9, 0x1ff, 0x9, 0x2, @raw=0x6c7, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r3 = setfsgid$auto(r2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) madvise$auto(0x0, 0x8000000000000000, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x181201, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) shmctl$auto(0x1ff, 0xffff77c1, &(0x7f00000006c0)={{0x80000000, r1, 0xee01, 0xfff, 0x47e, 0x1e7126e4, 0x101}, 0xf, 0x7, 0x3, 0x7, @raw=0xbaf, @raw=0x3, 0x4, 0x0, &(0x7f0000000380)="8f107fd660f7bd61794987b65be1b48be333a71f4b91f2b3c4566ebae87d82cfeda22ae6aa278128992c31bad730786c61cc2bd193f10f95066f9c85db7ecf756f7c66bb0bd8f3ea062864839e5e164df98d6b9375c67f22cc081928ec732c6c7ab09348aa956e12f5417750e6d25a568a0227b457e96880e8e6274396d81819aae89ff3baaee644afcc3d145616b74948705101657bbbd608e5b8fe38e882144e1feb7bf70f5d5d0517f636afc58221190876479f66b2116f958ab45d45dd6ecf7becadd56fbdedcef13703a3b01edc43e4a652946e151ddce096f59071ed6b12c72fea27be9c04d3e28db3e8f0de958eff9b41bb6b", &(0x7f00000005c0)="3e1c8306a2db3b3d6411fbf3cc824ac186e9c280759880f5ad26bdff3398f9bdd126d8435218360120294ce7d35fb189ff9c5ec600aa8b4f4006d94228c518290138f86ce1b185ab49b0bbaa41267ba15bc1bf8780b632815176a93a2b469adb2fbccbf12e963a0274791c632b2eebda3db5f87b5b685b32fcfe450af8eb9077f904adcfe064faa2ac0f322d5eb2e2e4aa8896c0d1d59dc3da6f333e6c579e67bae32e5908932458ba03e42feacf112464080d84d92cf7ca1bbcb9b5b8529679e404d506b01b0c70bed7052c54239b0ff97f9d"}) keyctl$auto(0x1, r1, r1, r5, 0x2) keyctl$auto(0xa097, r1, r1, r2, 0x7fff) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x8) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.104739815s ago: executing program 1 (id=1196): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket(0x11, 0x9, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, 0x0, 0x2, 0x100) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw=0x6, 0x2, 0x0, 0x8, 0xe5c2, 0x7cd, "ab23a38ef2d82897c43a0700af000000050000007d00002000"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x129041, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 10.092496433s ago: executing program 2 (id=1191): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000440)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0x5, 0x6, 0x7}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r1 = setfsgid$auto(r0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) connect$auto(r2, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x3}}, 0x51) shutdown$auto(0x200000003, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2282, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f00000001c0), 0x7111}, 0x8) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7c, 0x4) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/ns/cgroup\x00', 0x440000, 0x0) mseal$auto(0x0, 0x7dda, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) futex$auto(&(0x7f0000000000)=0x24000, 0x8, 0x4991, &(0x7f0000000040)={0x64, 0x5}, &(0x7f0000000080)=0x2, 0xc826) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 10.090500865s ago: executing program 1 (id=1200): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x9) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xca0, 0xdf, 0x9b7f, 0x2, 0x8000) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3}, 0x6, 0x8, 0x1, 0x80000000, @raw=0x9, @inferred, 0x7, 0x0, &(0x7f0000000180)="1fbbfb24d0ccfce9b5cd95ec09c5ea7dbc04c6a51badbcd2b14bf5aab9c79d210c1974f917386d9510e44297fff6fb25a6f8094bf99a8c0de61b1329145e72be184d853d695bbc883369a3dbdbeb450ce93fc0655104dbe94de06cf2d8b05648d0e4953ad609596bf10b8b115effb2f959beebc9bbd8835bc8ca9c4248154035d5d71a495ba293d56c", &(0x7f0000000240)="ffa4321eb8682b97dfcee1f3ba93ed7a84c9912b7e02a86aac483064078559f5a876f2c1ffad8026ce5db76be9928c22aad0e03e35e3d33b694c6c591cf59531a526f17c59dddd5a3fbc153fde63f545bcf2553bf16924ee178adafbc9b25788e8aef6f15750b9478ac12736066345f12134b759d7e93f8a6e3d38dcb9d4bb48fc6ea000d55b78f535ea75119cdc8885a630462466e9d317d3ea0a7aceee5665cf2acadd832b43c79fdcbda23871dda9ce2c93bcc8808b130a5b859c2c5ec22c121bcaa069510e90909685fe0f27cc85154c6730a5587a810640392fd683"}) clone$auto(0x8, 0x69, &(0x7f0000000400)=0x6447, &(0x7f0000000440)=0x6, 0x647) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fabbbc6eb7a128af22982b64cf3277598962d1726edd99d4ee6fc65251427fbea4e717aab7692c9821f09d6e7b00000000000000", @ANYRES16=0x0, @ANYBLOB="000224bd700001dcdf251b0000003e0002800c001d800800e500", @ANYRES32=r1, @ANYBLOB="413b995748294ad383bcf69feaf843ecf91f7cf4077fa120d2a5128540ac0c4f2916a4b68648e62889c1147770cd0000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000780)={r0, &(0x7f0000000580)="5668e3c5e53e246f32229526de9a8bda6e92141b49a830349b4ac174cf61361a7e5d7e328a04ebd003973ef502afffc2c149f15b3a5c67d2536060fad622fd81a829b7ec04ddb75c4b46e61836209732172fffcaa46298b4e951e955566c06aec74332292b78d184a37e29bd559f2eb185950627857b0136945a2d54bf244c33605d936fb3dcbdb98fda37e5eda91f209db3fd0ce02179f42fea7d0f6d3d22cfd8114c8ade0b9b8e", 0x10001, &(0x7f0000000640)="026c2021429d0ad0b9351d1fb8ea1bd2f24764f5a1ba7a071939d3ae393a4e0715d73947cc6e6a5cd3532eb97835e107add46303920fd2c499987c2483c534e6f592c4", 0xca, &(0x7f00000006c0)="21dbb3c46f5826ef605de8b232e73eb6d68bc377375c9e58d3b8a839c34d1328870537229ef61ba0a39ed9aa8d0cc1224f88057735c868c4172695a1e4d574d8d5eb680f2da20e50d08d0cf844ddb9d8b37c3d3ebd689550f92273", &(0x7f0000000740)=0x354}) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x800008000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c0a, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) bind$auto(0xffffffffffffffff, 0x0, 0x6b) syz_open_procfs$namespace(0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 10.017326787s ago: executing program 3 (id=1192): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) epoll_wait$auto(r0, &(0x7f0000000200)={0xfb1c0406, 0x5}, 0x8, 0x1a) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, 0x0, 0x0) socket(0x2, 0x2, 0x0) shutdown$auto(0x200000003, 0x0) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 9.995141665s ago: executing program 0 (id=1193): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000500)={{0x1, 0xffffffffffffffff, 0x0, 0x6c19, 0x4, 0x162e, 0x5}, 0xffffffff, 0x6, 0x1, 0x5, @inferred=0x0, @raw=0xe, 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000480)}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xa0) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x9, 0x0) msgctl$auto(0x6, 0x1744, &(0x7f0000000600)={{0x7a0a, 0xffffffffffffffff, 0xee00, 0x8, 0x4, 0x2, 0xceb2}, &(0x7f0000000580)=0x3, &(0x7f00000005c0)=0x9, 0x0, 0x2, 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, @inferred=0xffffffffffffffff, @raw=0x6}) sendmsg$auto_TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="08009440", @ANYRES32=r4, @ANYBLOB="c41319dc20d1747616a5aa8e773c98f3fae8a80f105249bea3e2523205b2a0adc7ff84cb1506ce1f48ff69d116b20e1391da1b2848d5639d119ed8f5548f040008801400f500fc0200000000000000000000000000002927fbd33ccfad054047c683eb5aeffee01608005100", @ANYRES32=r3, @ANYBLOB="040007801400aa00fe8000000000000000000000000000bb3a0003802bf80cdaf4093ca45045939346f9439776b81454e5d954d1acd0ffad3477dd869ea27d014d9895c824e3f6e3886d08001600", @ANYRES32=r5, @ANYBLOB='\x00\x00'], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) pkey_mprotect$auto(0x80000000, 0x3000000, 0xa, 0x4) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r6, 0x1260, 0x0) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, &(0x7f0000000000)) setfsuid$auto(0xee00) socket(0xb, 0x5, 0x100) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.856456835s ago: executing program 2 (id=1194): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)={0xfd, 0x5, 0x0, 0x4, &(0x7f00000000c0)="d16b4e081fdef5ff30449d598a9410139aa50eddc327a2d54603365aff444f306c4df129a91bab8881767372479606ae0c9553687a9aefff79dc5385d6b85dc1942ab4", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0xc9bc, 0x0, [{0x7, 0x5, 0xc}, {0x5, 0x94, 0x5}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mcs_mask_5ghz\x00', 0x88000, 0x0) read$auto(r1, &(0x7f0000001200)='\x00', 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf251f000000df007f003fb1b88d4992975305d801f296dffc2d7f40d05201e776480c277d54e4d372c7f4e534b7fdbd0a5caef322aef797afc0f3871c77a4de2f6f26a065cb91e1a882722a0ce5948b8316ff65ea462142f7ed83c057e89443c3cdf19acae44c26157128261cf9ab0fa3513cebfc4b15beb71ab6df40318237717e9f4fba471c0ecffcc12a9514886156a8eed0948ff5f00835b696315d2eb3fdccaae85450bec6fbae6dc590d1f437bac21e1c363071194ba88a6eab3160d0e62054de92cdc0c225f9d6429a356744f40787c8dad996248c1d43f2f72d142da21a50b2af0006001200000000004000328005000200070000000500010003000000050003000f00000008000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400696e6705f04c3972050005000200080000000500010003000000"], 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x1d9882, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0xb) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 7.728364395s ago: executing program 0 (id=1195): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x541b, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x10000, 0x1fffffffffffffff}, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000080)="5e9b037ec5d011067f8ed3a676581e1fbe4a20f1a9322ee07a91ae2386638cbf8887e35c7c42512b9ea573a305356a5035c159634c369823e1cbce07d20f98fd6179f35863a8681a6701c38a69673a971db04e10e7eb2cd0176ac12693d648c77e4d70b605e6b2ae", 0x68) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x6, 0x36ec}, 0x2, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mseal$auto(0x0, 0x7dda, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/pcmC1D0c\x00', 0x48000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r3, 0x80184153, 0x0) socket(0x10, 0x1, 0x828) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) r4 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x10044010) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.676722209s ago: executing program 3 (id=1197): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0xfd, 0x5, 0x10001, 0x4, &(0x7f0000000240)='#', 0x6, 0x10, 0x80005, @number_of_packets=0xf7ffffff, 0x2004c, 0xc, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x40000000000003, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x24040010) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff4, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) select$auto(0xc, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)=[{0x402, 0xffff, 0x9}, {0xffffffffffffff75, 0x9, 0x3ffffffffffffff}, {0xffffffff, 0xd, 0x3}]) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x14b902, 0x0) write$auto(r2, &(0x7f00000007c0)='f\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x181) keyctl$auto(0xc, 0xffffffffffffffff, 0x0, 0x0, 0x8) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyt6\x00', 0x0, 0x0) prctl$auto_PR_SET_MM_ENV_START(0x10001, 0xa, 0x0, 0xe57, 0x80) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x4) mmap$auto(0x8, 0x400008, 0xdf, 0x100000009b72, r0, 0xfffffffffffffffb) 7.659473066s ago: executing program 1 (id=1198): io_submit$auto(0x7fffffffffffffff, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x547c, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x7ffffffffffffffe, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0xfffffffffffffff9, 0x3ff, 0x5, 0xe, 0xf9eb, 0x4, 0x3, 0x3ff}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) close_range$auto(r2, r1, 0x5) ioctl$auto_BLKGETSIZE(r2, 0x1260, 0x0) setfsuid$auto(0xee00) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000014", @ANYRES16=r4, @ANYBLOB="f50128bd7000fbdbdf250a0000"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) ioctl$auto_NVRAM_INIT(r1, 0x7040, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000080) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 5.931225252s ago: executing program 2 (id=1199): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x1a3342, 0x24) close_range$auto(0x2, 0x8, 0x0) fsync$auto(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000ac0), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000006000008000c000380080f2e800400078012000100898771f1c19f17790485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0xc840) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x9, 0x10000001, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) futex_wait$auto(&(0x7f0000001200)="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", 0x8, 0x6, 0x5, &(0x7f0000002200)={0xffffffff}, 0x5) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000100)={0x81}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100001000000032, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r4, 0x8000) inotify_init1$auto(0x41) mprotect$auto(0xffd, 0x20000000401005, 0x0) 5.92451168s ago: executing program 3 (id=1201): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsetxattr$auto(r1, &(0x7f0000000040)='&\x00', &(0x7f0000000180)="1ee85262dd03fd7d2cabc33195bcd43bb114d0a31083033ee00150f9f82d41d31991ffcf61fa50f0e9e29693f5cc82c3f3c1df5c646c21e1", 0x1, 0xfffff592) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) keyctl$auto_KEYCTL_SEARCH(0xa, 0xb, 0x67f, 0x7f, 0x2) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) 5.899851822s ago: executing program 0 (id=1202): mmap$auto(0x0, 0x2020008, 0xb, 0x8000000000013, 0xfffffffffffffffa, 0x8000) r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x2, 0x5, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) quotactl$auto(0x8, &(0x7f0000000540)='/dev/ra\a\x96L\xad\xc8\x16\xb5\xdbW\n\xce\x93\xbex m7\x00\n\xa5\xba\xf8\x86?b\xce\x9fI\x96t\xe2\xd9u7&\xae\xc4\xe2\xa9b\x84\xc5\xd5\x8a( \xfd`z\x93n\xb3\x1f`\f\x82\"%1\x86\xe0[\x80\x971\x15\\\xed\xaa\xd53E7\x9e\xe3\xd4\xb5\xea\x99\xe2>\x18\xae\x88\xb4\xc8\xc7A,\x15\xce\x046i\xd4g\xedh\x90\x04R#\xc91,Y\v2\x15\xae\x04\x10\xef\xb3\x1b\xb5?\xb32\xd5>8\x19\xe0]\xa6\'\xae\xaa\xa3?\xc9}\xb3\x99\x8c`?Dg\v\xb4`\xae\xdf]z\xfe\xc2\xa6r@\xb4\xfc4M\xdd;\xee\xc9\x00\xd9\x06\x9c\xd04\t\x04\xb3FCO\xda.\xdf\x8f\v\x14\xd0\xdbyH3T\v\xd6#\xb0\x13\x85\xc8}\x94#uG\x01RP\xee\x01\x18\xca\x84\xa0y\x10\x95\xc6\x90/\xe0\x04\xaf\"\x01FH\x1f\'Q\x11\xa1\xd3\xe5\xd70\xfdw<\xc2rz\bm\xe5\x03\x90\r\xb0t\x06\xe1\xc0w\x02\xd8M/\x83\xc5\x99\x03\x95\xba\x99v\xb6\a\x01]\xf9t\xc1\'\x11\x89\xa4m?t\xd4\v \x98\xec\x9es\xfd\x1b\"<\x99\xa5f\xc47\xaa\xfeAz\x85\xdb\xd3\xbc_\x97z\x0f\x90l\xac\x17CF,s\x834\xe9h\xe0\xe7/\xf2Ez\xa3V\x90\t9\xec\xf8u\x17B\x96\xa7\xe7\x1f\xf0|\x1a:i^\xba\x93\xa4\xf2\x0f[\x97\xe5A%\xd9r\xe1\xf3\xf2\xa9\xa6', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1e9080, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x103861, 0x0) write$auto(r1, 0x0, 0x100000a3d9) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wg1/retrans_time\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x3001000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xe) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x200000020009, 0x4000000000df, 0x11, 0x401, 0xfffffffffffffff7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.io_serviced\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/64, 0x40) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x503101, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/aev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 5.772826655s ago: executing program 1 (id=1203): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x4bf15e08, 0x0) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="040029bd7000fedbdf2596000000"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x801) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000040)={0x24, 0x0, 0x801, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8024}, 0x2400c090) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000580), 0x301, 0x0) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0x2, 0x4, 0x58a, 0x1}, 0x1, 0x5, 0x5, 0x1, @raw=0x1, @raw=0x4, 0x1, 0x0, &(0x7f0000000280)="df517d8f0ab3a9a9958f903fd9e6c43d1a486883c3b6ff629775c3be7f103db92b19894c09f0a1610b32be6774886d1ae5a48ad4711aaffb1f6b9add3a28fe5655060d0246d518e9ca76ffa534ef4b5226304ce3c37b2342f93ecb0ff45661bfd9ee7e580315d80fbeddce141749b24e19820c64ce06d7b55b2640969a86c3ff38ea47ceaee5ae2220f70876840446a04fd6580db75fd613c2fc169f3ac50578d2055adc39cc1d00c29eb79b35a9866da082afe3a664ec991bcc283b5486", &(0x7f0000000340)="0090600ada734c09e7f3592ab83b5837a02b6e16f55c1a6b3af8985b99ccd4a3d3090f5f0769c51d5b462f5b14b12aac713660cfba0741cd8fb64201dd8b6bfa0dee626e22c0ed0318510d5223bd057b8c5e398e72abaa6aecabe88e60ecafcae03bbc1f70554128bad808bfa7287be93686d3b1795043eea46c793239dbb133fe38a455eb46305a283eca21cafb5da5fdc36573dfa4e29e99b0040a36df27866465218de76c36a2b5a2c668e2057b6a35d49fa61a2650664686494a8eeacc84bd31539f2a70614dbf775cacb29806cc850dcfd2496e516d1488582c7af39ccc2ddb3a601e96ebe8b25f196fb8"}) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r3 = socket(0x1, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.722998121s ago: executing program 3 (id=1204): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3d4, 0x7, 0x2, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0x4000000000002) fsconfig$auto_XFS_DAX_INODE(r2, 0x10001, &(0x7f0000000340)='\x00', &(0x7f0000000380)="e4ff8a7b96bcb13fe95ba6f264be30c076ec750499461239ea8414d64e4731a5c50129aa52f5aa35305ecccc7a", 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) mseal$auto(0x0, 0x7dda, 0x0) 3.471385421s ago: executing program 0 (id=1205): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, 0xffffffffffffffff}) close_range$auto(r0, 0xffffffffffffffff, 0xdf9b) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x4000000) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) unshare$auto(0x5) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000080)=0x80, 0x7ff, 0x3ff, 0x7, 0xa, 0xf9eb, 0x4, 0x3, 0x6, @inferred=0xffffffffffffffff}) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r4, 0x1260, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x7fffffffe000, 0xffffffffffff0000, 0x100001000000009, 0xfa33, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.302250807s ago: executing program 1 (id=1206): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r0, 0xfffffffd, 0x7, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000040)="2c57d028dbf9479d6047bc2bb916e003b30e8ce4b4c9c8f7170cf85447aa856d7108675f06ea09f846", 0x5c48) sendto$auto(0xffffffffffffffff, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) socket(0xa, 0x3, 0x3c) connect$auto(0x3, 0x0, 0x7) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) sched_rr_get_interval$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x14) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x800, 0x400002) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) setsockopt$auto(r3, 0x2a, 0x42, 0x0, 0x8) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)=@link_detach={r2}, 0x7fffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fedb"], 0x2c}}, 0x4000000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.300271438s ago: executing program 2 (id=1207): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x9) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xca0, 0xdf, 0x9b7f, 0x2, 0x8000) shmctl$auto_SHM_LOCK(0x8, 0xb, &(0x7f0000000380)={{0x6, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3}, 0x6, 0x8, 0x1, 0x80000000, @raw=0x9, @inferred, 0x7, 0x0, &(0x7f0000000180)="1fbbfb24d0ccfce9b5cd95ec09c5ea7dbc04c6a51badbcd2b14bf5aab9c79d210c1974f917386d9510e44297fff6fb25a6f8094bf99a8c0de61b1329145e72be184d853d695bbc883369a3dbdbeb450ce93fc0655104dbe94de06cf2d8b05648d0e4953ad609596bf10b8b115effb2f959beebc9bbd8835bc8ca9c4248154035d5d71a495ba293d56c", &(0x7f0000000240)="ffa4321eb8682b97dfcee1f3ba93ed7a84c9912b7e02a86aac483064078559f5a876f2c1ffad8026ce5db76be9928c22aad0e03e35e3d33b694c6c591cf59531a526f17c59dddd5a3fbc153fde63f545bcf2553bf16924ee178adafbc9b25788e8aef6f15750b9478ac12736066345f12134b759d7e93f8a6e3d38dcb9d4bb48fc6ea000d55b78f535ea75119cdc8885a630462466e9d317d3ea0a7aceee5665cf2acadd832b43c79fdcbda23871dda9ce2c93bcc8808b130a5b859c2c5ec22c121bcaa069510e90909685fe0f27cc85154c6730a5587a810640392fd683"}) clone$auto(0x8, 0x69, &(0x7f0000000400)=0x6447, &(0x7f0000000440)=0x6, 0x647) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540), 0xc, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fabbbc6eb7a128af22982b64cf3277598962d1726edd99d4ee6fc65251427fbea4e717aab7692c9821f09d6e7b00000000000000", @ANYRES16=0x0, @ANYBLOB="000224bd700001dcdf251b0000003e0002800c001d800800e500", @ANYRES32=r1, @ANYBLOB="413b995748294ad383bcf69feaf843ecf91f7cf4077fa120d2a5128540ac0c4f2916a4b68648e62889c1147770cd0000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000780)={r0, &(0x7f0000000580)="5668e3c5e53e246f32229526de9a8bda6e92141b49a830349b4ac174cf61361a7e5d7e328a04ebd003973ef502afffc2c149f15b3a5c67d2536060fad622fd81a829b7ec04ddb75c4b46e61836209732172fffcaa46298b4e951e955566c06aec74332292b78d184a37e29bd559f2eb185950627857b0136945a2d54bf244c33605d936fb3dcbdb98fda37e5eda91f209db3fd0ce02179f42fea7d0f6d3d22cfd8114c8ade0b9b8e", 0x10001, &(0x7f0000000640)="026c2021429d0ad0b9351d1fb8ea1bd2f24764f5a1ba7a071939d3ae393a4e0715d73947cc6e6a5cd3532eb97835e107add46303920fd2c499987c2483c534e6f592c4", 0xca, &(0x7f00000006c0)="21dbb3c46f5826ef605de8b232e73eb6d68bc377375c9e58d3b8a839c34d1328870537229ef61ba0a39ed9aa8d0cc1224f88057735c868c4172695a1e4d574d8d5eb680f2da20e50d08d0cf844ddb9d8b37c3d3ebd689550f92273", &(0x7f0000000740)=0x354}) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x800008000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c0a, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) bind$auto(0xffffffffffffffff, 0x0, 0x6b) syz_open_procfs$namespace(0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.263910471s ago: executing program 3 (id=1208): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x73) sendto$auto(r0, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x109, 0xf, 0x0, 0xb) madvise$auto(0x0, 0x2003f2, 0x14) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x2a, 0x42, 0x0, 0x8) rt_sigprocmask$auto(0x0, &(0x7f0000000040)={0xfffffffffffffe01}, 0x0, 0x8) socket(0x2, 0x1, 0x106) rt_sigprocmask$auto_SIG_SETMASK(0x2, &(0x7f0000000100)={0x4}, &(0x7f0000000140)={0x7}, 0x8) write$auto(0x3, 0x0, 0xffd8) r2 = getpid() r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4\x00', 0x200000, 0x0) ioctl$auto_XFS_IOC_FREESP64(r3, 0x40305825, &(0x7f00000000c0)={0x5, 0x50, 0x3, 0xaf7, 0x0, r2}) r4 = gettid() rt_tgsigqueueinfo$auto(r2, r4, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 916.820928ms ago: executing program 0 (id=1209): socket(0x15, 0x5, 0xfffffffe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) ioctl$auto(0x3, 0x89e0, 0x38) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r2}, 0x92) unshare$auto(0x5) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0e0000", @ANYRES16=r4, @ANYBLOB="08002cbd7000fcdbdf25180000007300288092aa63d73aa75d93ab44e8faae28df080498f5d98612efe56b2a3bf5e9d8bc088c36c58f33337142520dd775e9f80200000000000000ea80f9efa6a29004cd780899d21d9a1345088701926023f7d7ddc8e070a872fbf0debd50a6628d7b40dd2f37472f6b224daa6c2c30152dfb25001c002b800c00058004001f80040021800400030008005100ac1414aa0c000600000000000020010005002400fb000000b9", @ANYRES32=r3, @ANYBLOB="d500fd00efab22256f1354d10095ea9e64c88afc06458665ced7ff7b879e4ddc5b05e8ef806116d5f6edc233abb1dacc0dd02928200f77fd9d6c50a6931a610613a4ce04c776a39d133b96e8470d4fe6e856cb3be8eb0dc9529957546ffaa0cc803d83123a04c3a7980ffda494f0e1e817ef7b7dbce6d419ab11b31271b7991e05276da6c0e5c9a4e58895d44bfc008b30d19f6d1e22633bef7d9408bcbfea76760dd032fe08b7d9d3ec459209e49898ab337aa23421518ccf961a614a686551a8aed2948bf7e7adbe148f6659d8f47a0c46e8793d00000056c115909db15c43f20d8929923d91dbf5a49b3c8aad34e2ce708918bfa01cb7d4347b793ab2f95f84b8b224aec747ede9bb8ecfa2a5abf73c6bd71d31fa3ef521ec1b223d36e79b8d43b65c3bc2e9b9e989493161a86e1b069ef0d3355cf99a672086687f7c27a41b1a4380a1b93efbf0a325d7c873d30af4413781e2adcd6c7c596779eec3f0a71a9a397305e6105e2ba15a4ce1625753ddf7f853bccfeaecafe55404ced5b985d54da9fb4973a2aa3cecfcd9f3570cf7f25f0bbe44d3b884f9e40cf7bf0ce434df243698c18d627e0fdfeecc124ebf60d57fa5b500bb76608ba4221530112f4a20c6a94280e0f502ffad45921aea45a59355fddb6dae1aba6e6016115a1e8972d1e179fe25edb9107aa15f7d2dc8435ee783f46546432d0e2aa9f8261b139254602ca6a5715b5d0186db69546531038892f94db03a62ab87f012e79f4a5156780694d40f02927586504cdd0efaa445060fed9bd95d758e2fcbe3492cfbbe49bbf82914f89536943ca2c25fcc1b87a470ca4290919e45c293d0f9ede3e65fc541cd6c801296f77860acff5492c7a69521d8c0e14215461b22bc63b759451611a3a92d88ddba15d806647bcc7325d57be0c35c5087477940b3727d916b478ddba6180d2abb0e5035cdf804885f7e8c339431388d0ea0022119f390b9e7ce5e79139597e8d366dc096109e94abd41fd32ae3488e4af6aed86b6e8c9522a1aafbf91a194e02ead0d1c39ddd29b068fee274532bc57ef0bf61fb719317a336a725a4d42801c9f99c1e5622f7b36c7bd3574ddbdc57e4e5444f0e9f86e892769f4975c61867359f723dbe957b12ce1a02adc86e85c56ea9fa043d2c9425966378ce1d6e105913716e723c3119953d344bb5e6572cc5d9072d0e88d9b277a12f1c94eeb5eb4fe1f6141eb6e8b0d64c50018590436ee589b35d32d5ffb39420aee03687edbc14a2b7377ee8a3dc201a72c7a720a3e104e0f453a91ffaa80960ff3c68fbafd8fd74b77ea9e187be6509b5f88c45d89c6db973767b7aebbbcf52f7918c6a7991748eb39415c6efb55e80cc4c656cdcf6581d5834b310d30dea2cf938ea62df7a72a8feb56ea60a93fd5491d79ba7ed5744c6527911a13f8eab6d0e6b325bf06c01fd6feebe4ecc967f1da08e918104dfef67c2b3de4fa9241ab80e7fab262a36608fe2f4946f0963d00a312ae992bb15f62e10812de494a6ec28700299dad67615b7bd758b1be7329c0872e7aeac85ad66ad87a43f64d6d0abf6fe6d710bf921871cfebcfd16f69057bdf43f452e1e5ab6538810dc8db8072acaf16569160980bfd5a2eaa597eabd8473dae3409786b769aa7a101a6ba6d87eefd6675366a335209e446d97634c20a4cb19798375afd8d217591397e6f1169c937fa25ca91c90ad9718eb0c764ae104ebdd60f3a9e687b595e32556319d1b2af2d22d56a00fa58423cea5b519589fc51c7a50f6f6a8a482e71082c0a5cde3bab1dd6f820d38cff305ab55c5f12188149345d1a4856f793cebfd82005d77d834ec03882fdaea736d25c59349eede3ddfeec7e1aa8e7eb881672ecb5002fb9e9671a53d23f3bbf918d0fee244bbb1be6755276276fd069be516771f710caf0ed5d2afa89c72d487776039960a625c8a3d17da45ab4cd841067c514dbb9cadef22ce4d4db50b46858045c5c5df6208cad544cdaf2dd7abceff59dfb727d23c1053e7ec9900bea7efdaeb18fc4c5b853c05b33b8c4dba93791e27bb42f67125b3c1c3d7be583950efbad83b67ca7097c762ec950532a018021a60e44bc0fc39df11a3cc03f8d1560b2a6ccd521dfa1dcd35adba895dfa811496888777c5afc161f0c458e35ca6df96194a65ca74486432ed60aa69b55aa9a679668c26c0b1ace0eb1c34d23c2e26d407f0801358e012d659013868f4fcc13290b55a88a42cecc86ad927b2547a08e151701c8d616aa6e8f3384940e5015af0bf6b4a1093844a6d2b65b069be7759088944f5256e3da32e1c866131299152c3ff3a1417e5a39677424b97757bd58348c0f960f5bcb5007de963f926e060113ca3a0c6e3aa7408e4f34557678a044db186acdf5ac30f04c818c6df9b45965c1e9d528f5851132c2132f410ac9836dc1a960ce4b869ed018d71c6031cec7684073342f907f58277b29264520e2b3c20c7e7cd4b99d3abb9be52ec970c9b8f98cfb5a48ce7bdb4d29cad0c051deff13fa1a2daf62eeb11c0762d1a3ddc58fc7fa1bd625dfda1756f00d66d130702d1eb473d825188ad0b92a1ccb88d287c22a5dc69eb15e654e5fb3dc92b3e8f18f4a255666f6b0f920cbca1e4d52a1eb8fd1e8bd871f2dd333f4e51aad097db4e2dc14e066ac11001b51c5ef0713764ef1de095e486c6f582d615d80a201e910c1414cfe9c4dd6df6b3e166660a2d31f3ea8e04afffc4c108a85396ff9e911d2a9c593a0da2931baf6c32703a1aa7ce5480a022d7fdcc4057620deaaab86f7c1e2a2dd37ed6f889babdad69490d49cbe96087e296f75a904507dc245bbf13b82822fc145d0908c879fe4d5d0760037fd5c70b2011b774636c0fbc0da64f8597cb436f73aace90c93342f0d84fd89852c8737a4dc96e2deca000c59239f4d89615b9ec3a89f8da187e394cc1ed6b7255a71ae405a811ce1274d6eaa45598cc7609d22dd049373d23d062a330db83a48c899a0948edfdd720af636ead763dc886b5889327c64e3c772597623bc2453a5d35f7c44ab4828181c1bea5f77b3553738305f1f886749a2fe595ac6ed93299138ddd46b585344d718ae37c4c4f8dcc71bc0cdbef74cc8d263baf9156cf48df762e759d18a547c3269fe9c96dd5fa846635bd893977cd232a8dfa902a710bf9890d60fe1d0d92eede3d4134efb4d082c5916cb958ec07fd07555575b58844e5f418395fafb523ecb33c82e340925ec79d84238891ccf112377270d7c4c485dacb3e1751fcd62a16f1dc6f6433dc60853099a49e005aae2687d9a19e47684d11b50ca9c12f8d7300df9af5fbdf364f799d81d7e2cbc2f3aba1be2e853d90eca56805a291e374c61efae8a30f504ce091948dc93bbc13d42cb2427fd99bc7a41a2173353a409a243bedec849848a8d55c4d3f213f01cd160b2e9d646072bff86dcf9638e26bd3ac5aef05e0c3658a07c1a2083032bd24e033ef8e47955121799c857eda88b4617799b06589f13c2767242d93ffc393836657d4ebac48c9df1d5f638426537db04ec2a5f093d29a4a9f9cf59d2230d7e1eaf0e5922eb79af9d21286b02f715948a0d8f5bfb8ec75442962109071735d42583f9c1f6ef31d6b4a2d2c1e2456508f993179a9705b728d23f1f8f55bfad0d3ceb3c1bf79d8ad31262c6e91219724f7a54e7b8fa5d5e9f67bf539e808ce1e28963b7acde842f33f39bf5f549cf80483475717a17a3c3b8d168460ab65163ca2158f523dd98b4f38d5436a07f807052a31b0ccc308121380904a2fdb6f7fb439744cba27295685a41b2b03681326d7239b2880058818c61b8c6e7791c4092b9310c03b51b911aee93e944b3c117920bb0c10e352fce50b9ee9f0521e02025ef29dfecf57d7b5b38151c45a15683a882604f8298381a3b40f3280e269761ee9e25a6ea84bacf2bbdcd3a32ad2e3e7b61c2f5c8bc90e7af728b653ce838c1ef625c5d70495410fbbce239f80863d9a28a5157edf75e8ccd917efa052e9975dce2db2c3cf6439aadc8e76bd0f69e378f863b2ace112e4698d8dc3ebcddb5a7a833cf4bca3c1055b5e2eec701d7347a883421549780da138d55206d74372ed2ec4f5958ec988894ef0b157e1b2880d61ec66c9076bc1920d57bfbe15dd1e960861a350c98a6e614f7a50a25556d99c8efd273a43e7a012f88cd52da8bceb4aeef9dadf3ce6be9ac5a9b2c0e4741a33a77df1b20ba8de51195e9f8ac3121467dd9cf4d7ce53632c88bcafa90b739748529c833e8bdb43f0106e98edaef38b446a079e2133958df40463ac6cf2271b5bd1f2864d3974891f028cb39e85bb6b15a11ca6501eeac36e6f9c60c54bc2991c30707dbf864c8e967d2712e241337059d11d8f0cea5a8bceb2abf6674324893d150e1ce068c45346d3f56c1b7c4a319acb5ae354983f0fca8f535f904aabfd5cb3c33405ea6c5cbd7aaf7780fd108ee6a4fadb81a168e700ce942f7f22e567c93dbe6e270f3849d3fbcc14a340e71e72de35bb2a9ac6e59a4f4e8ddc2ca6feb5cb0016f1cc4920344b45f645dc3d5f97bab79362b501dfe31637c6948d0d59e35f624121e6de50eac642c037318fd9307049838114398269a05233d2e4cb1a1b6d07deb5a4916b7540194cf9d8e6d3070c8c00cfe8a3049a85c479b3e10706b22b9d92c6b1391d96ba2fe01ae493eb1477750356789b3daacdfbbb57e9b1ccd4365c18b74361d7b869fe86611759c49b6b331e6c7ede14445a0e88e74c56abbad1f72287266dec2f72b1de7759bcaaa826f7588b98a46155f2b0d90f465f3e1940e78a4fe0614d7ac1a809b35ece280c42d9891b0a8fad5c6938c31711834e190f4a004a512751a3d9d673dfd21c7"], 0xe7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) mmap$auto(0x0, 0x2020009, 0x126, 0x15, 0xffffffffffffffff, 0x8001) sysfs$auto(0x2, 0x100000000000026, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x6, 0x1, 0x80e, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 513.752632ms ago: executing program 1 (id=1210): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)={0xfd, 0x5, 0x0, 0x4, &(0x7f00000000c0)="d16b4e081fdef5ff30449d598a9410139aa50eddc327a2d54603365aff444f306c4df129a91bab8881767372479606ae0c9553687a9aefff79dc5385d6b85dc1942ab4", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0xc9bc, 0x0, [{0x7, 0x5, 0xc}, {0x5, 0x94, 0x5}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mcs_mask_5ghz\x00', 0x88000, 0x0) read$auto(r1, &(0x7f0000001200)='\x00', 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400696e6705f04c3972050005000200080000000500010003000000"], 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x1d9882, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0xb) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 481.557268ms ago: executing program 2 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="014d18bd7000fddbdf25020000000800018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) socket(0x28, 0x801, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = getsockopt$auto(r2, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r3, r3, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfab, 0x3, 0x200000000040000e}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x8040) write$auto(r4, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f\xe2\xe0\xe2}yX\xc5\x9c\xb8\x91\b\xfc=\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vw\r\xcf\x1e\x9f\xb3\xf6zR\xc7;v\xea\xd3\x83\xa9l8@!\xad\x94\xf9\xfe\f\xc2\xc6\x13\x16\xd0\xfc\x85\xd7 \xd4\xff\xbb\x8b\xa2\xf2p\xad\x12\xcf$VG\x06\xb3\x84\xbe\xd5S\x92z\xa9', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) pipe$auto(0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x82000, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) 252.773Āµs ago: executing program 0 (id=1212): unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x4145) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) shutdown$auto(0x200000003, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$auto_IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000580)={0x3, 0x0, 0x3}) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) syz_clone3(&(0x7f00000005c0)={0x20000700, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/184, 0xb8, &(0x7f0000000440)=""/234, 0x0}, 0x58) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r2, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0x1000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) lstat$auto(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x80000000) 0s ago: executing program 3 (id=1213): inotify_init1$auto(0x3000000000000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x182, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x1, 0x7, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r1, 0x40045431, r0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x405, 0x7, 0x2406a90b, 0x83, 0x3}, 0x20, 0xffffffff, 0x8000006) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(0x0, 0xd, 0x88, 0x10) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r3, 0x5412, 0xffffffffffffffff) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)=@bpf_attr_5={@target_ifindex, r2, 0x6576fa89, 0x4f, 0xffffffffffffffff, @relative_id=0x2009, 0x7e}, 0x8) getsockopt$auto_SO_BINDTODEVICE(0xffffffffffffffff, 0x39fb8bef, 0x19, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) msgctl$auto_IPC_STAT(0x1, 0x2, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) timer_create$auto(0x1, &(0x7f0000000100)={@sival_int=0x1b19, @raw=0x60b, 0x595e}, 0x0) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 85.705450][ T1020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705998][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706180][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706337][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706664][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.834325][ T5783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.838823][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5'. [ 85.840328][ T5783] netlink: 354 bytes leftover after parsing attributes in process `syz.3.5'. [ 85.869371][ T5783] Zero length message leads to an empty skb [ 86.239674][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.239748][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.748022][ T5799] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.851446][ T1220] cfg80211: failed to load regulatory.db [ 86.986479][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.986496][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.060664][ T5627] Bluetooth: hci1: command tx timeout [ 87.142321][ T5625] Bluetooth: hci3: command tx timeout [ 87.142373][ T5627] Bluetooth: hci2: command tx timeout [ 87.220833][ T5627] Bluetooth: hci0: command tx timeout [ 88.806118][ T5816] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.156385][ T5888] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.156441][ T5888] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 94.472312][ T5897] FAULT_INJECTION: forcing a failure. [ 94.472312][ T5897] name failslab, interval 1, probability 0, space 0, times 1 [ 94.472385][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 94.472416][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.472438][ T5897] Call Trace: [ 94.472447][ T5897] [ 94.472458][ T5897] dump_stack_lvl+0x100/0x190 [ 94.472502][ T5897] should_fail_ex.cold+0x5/0xa [ 94.472537][ T5897] should_failslab+0xc2/0x120 [ 94.472579][ T5897] __kmalloc_cache_noprof+0x91/0x6d0 [ 94.472620][ T5897] ? sget_fc+0x117/0x1f20 [ 94.472644][ T5897] ? sget_fc+0x1ba/0x1f20 [ 94.472675][ T5897] sget_fc+0x1ba/0x1f20 [ 94.472709][ T5897] ? __pfx_set_anon_super_fc+0x10/0x10 [ 94.472746][ T5897] ? __pfx_sget_fc+0x10/0x10 [ 94.472769][ T5897] ? refcount_dec_not_one+0x136/0x1c0 [ 94.472802][ T5897] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 94.472831][ T5897] ? __kasan_kmalloc+0xaa/0xb0 [ 94.472862][ T5897] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 94.472899][ T5897] ? __kasan_kmalloc+0xaa/0xb0 [ 94.472932][ T5897] ? __pfx_mqueue_fill_super+0x10/0x10 [ 94.472962][ T5897] get_tree_nodev+0x28/0x190 [ 94.472990][ T5897] mqueue_get_tree+0xf1/0x130 [ 94.473060][ T5897] vfs_get_tree+0x92/0x320 [ 94.473097][ T5897] fc_mount_longterm+0x1a/0x270 [ 94.473129][ T5897] mq_init_ns+0x482/0x820 [ 94.473166][ T5897] copy_ipcs+0x3dd/0x7e0 [ 94.473209][ T5897] create_new_namespaces+0x20a/0xac0 [ 94.473248][ T5897] ? security_capable+0x80/0x260 [ 94.473284][ T5897] unshare_nsproxy_namespaces+0xf2/0x220 [ 94.473324][ T5897] ksys_unshare+0x4a2/0xa70 [ 94.473352][ T5897] ? __pfx_ksys_unshare+0x10/0x10 [ 94.473391][ T5897] __x64_sys_unshare+0x31/0x40 [ 94.473417][ T5897] do_syscall_64+0x121/0x770 [ 94.473457][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.473484][ T5897] RIP: 0033:0x7fbfc2f9e159 [ 94.473506][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.473535][ T5897] RSP: 002b:00007fbfc054b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.473562][ T5897] RAX: ffffffffffffffda RBX: 00007fbfc3226450 RCX: 00007fbfc2f9e159 [ 94.473593][ T5897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 94.473609][ T5897] RBP: 00007fbfc303503b R08: 0000000000000000 R09: 0000000000000000 [ 94.473625][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.473641][ T5897] R13: 00007fbfc32264e8 R14: 00007fbfc3226450 R15: 00007ffea3efde48 [ 94.473677][ T5897] [ 97.803652][ T5949] FAULT_INJECTION: forcing a failure. [ 97.803652][ T5949] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.803692][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) [ 97.803723][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.803737][ T5949] Call Trace: [ 97.803746][ T5949] [ 97.803756][ T5949] dump_stack_lvl+0x100/0x190 [ 97.803796][ T5949] should_fail_ex.cold+0x5/0xa [ 97.803836][ T5949] ? prepare_alloc_pages+0x16d/0x5b0 [ 97.803874][ T5949] should_fail_alloc_page+0xeb/0x140 [ 97.803908][ T5949] prepare_alloc_pages+0x1f0/0x5b0 [ 97.803940][ T5949] ? unwind_get_return_address+0x59/0xa0 [ 97.803974][ T5949] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 97.804007][ T5949] ? __lock_acquire+0x5c0/0x1f40 [ 97.804041][ T5949] ? __lock_acquire+0x5c0/0x1f40 [ 97.804072][ T5949] ? __css_rstat_updated+0x1ce/0x590 [ 97.804113][ T5949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 97.804144][ T5949] ? find_held_lock+0x2b/0x80 [ 97.804170][ T5949] ? page_table_check_set+0x30f/0x580 [ 97.804202][ T5949] ? page_table_check_set+0x30f/0x580 [ 97.804241][ T5949] ? page_table_check_set+0x31e/0x580 [ 97.804276][ T5949] ? __page_table_check_ptes_set+0x1d5/0x530 [ 97.804313][ T5949] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 97.804350][ T5949] ? folio_add_new_anon_rmap+0x52d/0x18c0 [ 97.804381][ T5949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.804413][ T5949] ? policy_nodemask+0xed/0x4f0 [ 97.804448][ T5949] alloc_pages_mpol+0x201/0x550 [ 97.804482][ T5949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 97.804516][ T5949] ? rcu_read_unlock+0x2d/0xb0 [ 97.804560][ T5949] folio_alloc_mpol_noprof+0x36/0x260 [ 97.804600][ T5949] vma_alloc_folio_noprof+0xed/0x1d0 [ 97.804637][ T5949] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 97.804686][ T5949] do_fault+0x243/0x1830 [ 97.804717][ T5949] ? __pfx_filemap_map_pages+0x10/0x10 [ 97.804751][ T5949] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 97.804791][ T5949] ? __pfx_do_fault+0x10/0x10 [ 97.804831][ T5949] ? rcu_read_unlock+0x2d/0xb0 [ 97.804868][ T5949] ? rcu_read_unlock+0x2d/0xb0 [ 97.804907][ T5949] ? __pte_offset_map+0x179/0x310 [ 97.804943][ T5949] __handle_mm_fault+0x150b/0x2f60 [ 97.804990][ T5949] ? __pfx___handle_mm_fault+0x10/0x10 [ 97.805025][ T5949] ? pte_offset_map_lock+0x174/0x320 [ 97.805055][ T5949] ? find_held_lock+0x2b/0x80 [ 97.805082][ T5949] ? find_held_lock+0x2b/0x80 [ 97.805106][ T5949] ? follow_page_pte+0x536/0x1050 [ 97.805157][ T5949] handle_mm_fault+0x363/0xa20 [ 97.805201][ T5949] __get_user_pages+0x8ae/0x2c30 [ 97.805241][ T5949] ? __pfx_mt_find+0x10/0x10 [ 97.805269][ T5949] ? __pfx___get_user_pages+0x10/0x10 [ 97.805312][ T5949] populate_vma_page_range+0x267/0x3f0 [ 97.805348][ T5949] ? __pfx_populate_vma_page_range+0x10/0x10 [ 97.805380][ T5949] ? __pfx_find_vma_intersection+0x10/0x10 [ 97.805423][ T5949] __mm_populate+0x107/0x3a0 [ 97.805457][ T5949] ? __pfx___mm_populate+0x10/0x10 [ 97.805492][ T5949] ? up_write+0x2dc/0x5b0 [ 97.805533][ T5949] vm_mmap_pgoff+0x441/0x470 [ 97.805566][ T5949] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 97.805592][ T5949] ? __fget_files+0x215/0x3d0 [ 97.805628][ T5949] ? __fget_files+0x21f/0x3d0 [ 97.805657][ T5949] ksys_mmap_pgoff+0x3cb/0x610 [ 97.805705][ T5949] ? __x64_sys_futex+0x358/0x4d0 [ 97.805731][ T5949] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 97.805762][ T5949] ? xfd_validate_state+0x129/0x190 [ 97.805817][ T5949] __x64_sys_mmap+0x125/0x190 [ 97.805848][ T5949] do_syscall_64+0x121/0x770 [ 97.805889][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.805916][ T5949] RIP: 0033:0x7f757299e159 [ 97.805937][ T5949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.805961][ T5949] RSP: 002b:00007f7573783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 97.805985][ T5949] RAX: ffffffffffffffda RBX: 00007f7572c26180 RCX: 00007f757299e159 [ 97.806001][ T5949] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 97.806016][ T5949] RBP: 00007f7572a3503b R08: 0000000000000008 R09: 0000000000008000 [ 97.806032][ T5949] R10: 0008000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 97.806047][ T5949] R13: 00007f7572c26218 R14: 00007f7572c26180 R15: 00007ffcec8173a8 [ 97.806081][ T5949] [ 99.546979][ T5967] ubi0: attaching mtd0 [ 99.625036][ T5967] ubi0: scanning is finished [ 99.625064][ T5967] ubi0: empty MTD device detected [ 99.976312][ T5967] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 99.976342][ T5967] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 99.976391][ T5967] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 99.976410][ T5967] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 99.976430][ T5967] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 99.976453][ T5967] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 99.976473][ T5967] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 401584627 [ 99.976496][ T5967] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 99.977630][ T5983] ubi0: background thread "ubi_bgt0d" started, PID 5983 [ 99.985345][ T5977] ubi0: detaching mtd0 [ 100.117800][ T5977] ubi0: mtd0 is detached [ 102.082020][ T5997] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.082065][ T5997] vhci_hcd vhci_hcd.2: invalid port number 0 [ 103.697302][ T6015] zswap: compressor not available [ 105.333844][ T6041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.948302][ T6079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.792901][ T6133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.793034][ T6133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.808203][ T6133] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.854016][ T6133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.854220][ T6133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.866973][ T6133] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.886796][ T6133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.888500][ T6133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.911452][ T6133] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.918879][ T6133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.919129][ T6133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.941032][ T6133] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.949504][ T6159] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.949553][ T6159] vhci_hcd vhci_hcd.2: invalid port number 0 [ 112.828694][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.901570][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.901627][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.981965][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.901234][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.983398][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.983490][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.060574][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.026880][ T6269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.028222][ T6269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.028472][ T6269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.030191][ T6269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.990507][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.060521][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.061495][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.061527][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.332768][ T6313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.332969][ T6313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.333088][ T6313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.333207][ T6313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.321671][ T6326] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 120.321730][ T6326] vhci_hcd vhci_hcd.2: invalid port number 0 [ 121.382277][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.382317][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.382346][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.382372][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.939376][ T6423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.939999][ T6423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.940158][ T6423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.940325][ T6423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.941390][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.941436][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.941497][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.020573][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.102926][ T6483] futex_wake_op: syz.2.100 tries to shift op by -2048; fix this program [ 129.103987][ T6483] futex_wake_op: syz.2.100 tries to shift op by -2048; fix this program [ 131.011134][ T6498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.011324][ T6498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.011481][ T6498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.011637][ T6498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.909764][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.909838][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061209][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.061251][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.061280][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.061308][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.298121][ T6566] ubi0: attaching mtd0 [ 134.313619][ T6566] ubi0: scanning is finished [ 134.575173][ T6566] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 134.575203][ T6566] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 134.575224][ T6566] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 134.575241][ T6566] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 134.575260][ T6566] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 134.575283][ T6566] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 134.575302][ T6566] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 401584627 [ 134.575325][ T6566] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 134.580315][ T6577] ubi0: background thread "ubi_bgt0d" started, PID 6577 [ 134.589056][ T6576] ubi0: detaching mtd0 [ 134.707640][ T6576] ubi0: mtd0 is detached [ 140.303095][ T6640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.303269][ T6640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.310649][ T6640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.310812][ T6640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.021132][ T6678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.021310][ T6678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.021472][ T6678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.021638][ T6678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.963335][ T6691] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.963383][ T6691] vhci_hcd vhci_hcd.2: invalid port number 0 [ 144.100989][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.101028][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.101055][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.103984][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.515005][ T6735] futex_wake_op: syz.1.125 tries to shift op by -2048; fix this program [ 145.515499][ T6735] futex_wake_op: syz.1.125 tries to shift op by -2048; fix this program [ 149.568695][ T6786] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.568734][ T6786] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 149.850473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 151.827899][ T6821] syz.0.136 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.731752][ T6861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.731944][ T6861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.732101][ T6861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.732259][ T6861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.740663][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.740705][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.740732][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.740758][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.199036][ T6955] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.199084][ T6955] vhci_hcd vhci_hcd.2: invalid port number 0 [ 167.273886][ T7049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.359707][ T7049] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.360088][ T7049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.360322][ T7049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.300481][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.382555][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.382596][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.382624][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.654309][ T7093] FAULT_INJECTION: forcing a failure. [ 169.654309][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 169.654365][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) [ 169.654398][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.654413][ T7093] Call Trace: [ 169.654422][ T7093] [ 169.654432][ T7093] dump_stack_lvl+0x100/0x190 [ 169.654483][ T7093] should_fail_ex.cold+0x5/0xa [ 169.654518][ T7093] should_failslab+0xc2/0x120 [ 169.654551][ T7093] __kmalloc_cache_noprof+0x91/0x6d0 [ 169.654590][ T7093] ? sget_fc+0x117/0x1f20 [ 169.654614][ T7093] ? sget_fc+0x1ba/0x1f20 [ 169.654644][ T7093] sget_fc+0x1ba/0x1f20 [ 169.654678][ T7093] ? __pfx_set_anon_super_fc+0x10/0x10 [ 169.654722][ T7093] ? __pfx_sget_fc+0x10/0x10 [ 169.654745][ T7093] ? refcount_dec_not_one+0x136/0x1c0 [ 169.654778][ T7093] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 169.654808][ T7093] ? __kasan_kmalloc+0xaa/0xb0 [ 169.654840][ T7093] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 169.654876][ T7093] ? __kasan_kmalloc+0xaa/0xb0 [ 169.654911][ T7093] ? __pfx_mqueue_fill_super+0x10/0x10 [ 169.654941][ T7093] get_tree_nodev+0x28/0x190 [ 169.654969][ T7093] mqueue_get_tree+0xf1/0x130 [ 169.654999][ T7093] vfs_get_tree+0x92/0x320 [ 169.655040][ T7093] fc_mount_longterm+0x1a/0x270 [ 169.655068][ T7093] mq_init_ns+0x482/0x820 [ 169.655106][ T7093] copy_ipcs+0x3dd/0x7e0 [ 169.655144][ T7093] create_new_namespaces+0x20a/0xac0 [ 169.655181][ T7093] ? security_capable+0x80/0x260 [ 169.655216][ T7093] unshare_nsproxy_namespaces+0xf2/0x220 [ 169.655255][ T7093] ksys_unshare+0x4a2/0xa70 [ 169.655282][ T7093] ? __pfx_ksys_unshare+0x10/0x10 [ 169.655321][ T7093] __x64_sys_unshare+0x31/0x40 [ 169.655346][ T7093] do_syscall_64+0x121/0x770 [ 169.655386][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.655412][ T7093] RIP: 0033:0x7f757299e159 [ 169.655443][ T7093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.655467][ T7093] RSP: 002b:00007f75703d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.655493][ T7093] RAX: ffffffffffffffda RBX: 00007f7572c26360 RCX: 00007f757299e159 [ 169.655510][ T7093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 169.655525][ T7093] RBP: 00007f7572a3503b R08: 0000000000000000 R09: 0000000000000000 [ 169.655541][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.655557][ T7093] R13: 00007f7572c263f8 R14: 00007f7572c26360 R15: 00007ffcec8173a8 [ 169.655593][ T7093] [ 173.081287][ T7132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.081548][ T7132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.081827][ T7132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.082050][ T7132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.140600][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.140643][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.140671][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.140698][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.931623][ T7175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.932235][ T7175] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.934062][ T7175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.934322][ T7175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.940705][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.940747][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.940775][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.940801][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.885494][ T7239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.885750][ T7239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.885969][ T7239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.890122][ T7239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.350775][ T7283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.350963][ T7283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.351134][ T7283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.351306][ T7283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.380527][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.380568][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.380597][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.380625][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.281375][ T7359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.281693][ T7359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.281866][ T7359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.282042][ T7359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.340558][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.340601][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.340629][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.340685][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.793990][ T7404] FAULT_INJECTION: forcing a failure. [ 189.793990][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 189.794027][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.2.209 Not tainted syzkaller #0 PREEMPT(full) [ 189.794058][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.794073][ T7404] Call Trace: [ 189.794082][ T7404] [ 189.794092][ T7404] dump_stack_lvl+0x100/0x190 [ 189.794134][ T7404] should_fail_ex.cold+0x5/0xa [ 189.794168][ T7404] should_failslab+0xc2/0x120 [ 189.794252][ T7404] __kmalloc_cache_noprof+0x91/0x6d0 [ 189.794291][ T7404] ? sget_fc+0x117/0x1f20 [ 189.794314][ T7404] ? sget_fc+0x1ba/0x1f20 [ 189.794343][ T7404] sget_fc+0x1ba/0x1f20 [ 189.794374][ T7404] ? __pfx_set_anon_super_fc+0x10/0x10 [ 189.794408][ T7404] ? __pfx_sget_fc+0x10/0x10 [ 189.794426][ T7404] ? refcount_dec_not_one+0x136/0x1c0 [ 189.794454][ T7404] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 189.794479][ T7404] ? __kasan_kmalloc+0xaa/0xb0 [ 189.794504][ T7404] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 189.794536][ T7404] ? __kasan_kmalloc+0xaa/0xb0 [ 189.794565][ T7404] ? __pfx_mqueue_fill_super+0x10/0x10 [ 189.794590][ T7404] get_tree_nodev+0x28/0x190 [ 189.794613][ T7404] mqueue_get_tree+0xf1/0x130 [ 189.794638][ T7404] vfs_get_tree+0x92/0x320 [ 189.794669][ T7404] fc_mount_longterm+0x1a/0x270 [ 189.794691][ T7404] mq_init_ns+0x482/0x820 [ 189.794724][ T7404] copy_ipcs+0x3dd/0x7e0 [ 189.794756][ T7404] create_new_namespaces+0x20a/0xac0 [ 189.794789][ T7404] ? security_capable+0x80/0x260 [ 189.794820][ T7404] unshare_nsproxy_namespaces+0xf2/0x220 [ 189.794856][ T7404] ksys_unshare+0x4a2/0xa70 [ 189.794878][ T7404] ? __pfx_ksys_unshare+0x10/0x10 [ 189.794899][ T7404] ? ksys_write+0x1ac/0x250 [ 189.794931][ T7404] __x64_sys_unshare+0x31/0x40 [ 189.794953][ T7404] do_syscall_64+0x121/0x770 [ 189.794987][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.795009][ T7404] RIP: 0033:0x7f326b19e159 [ 189.795028][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.795047][ T7404] RSP: 002b:00007f326bfe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.795068][ T7404] RAX: ffffffffffffffda RBX: 00007f326b426450 RCX: 00007f326b19e159 [ 189.795082][ T7404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 189.795095][ T7404] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 189.795108][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.795121][ T7404] R13: 00007f326b4264e8 R14: 00007f326b426450 R15: 00007ffddb10de08 [ 189.795151][ T7404] [ 194.223889][ T7465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.224073][ T7465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.224228][ T7465] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.224382][ T7465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.348477][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348541][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.260608][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.260633][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.260648][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.260700][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.841407][ T7534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.842234][ T7534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.842398][ T7534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.842544][ T7534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.860803][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.860843][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.860871][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.860896][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.643701][ T7605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.643921][ T7605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.644082][ T7605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.644307][ T7605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.040766][ T7642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.040910][ T7642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.041034][ T7642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.041156][ T7642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.072281][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.072322][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.072382][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.072424][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.730792][ T7707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.730968][ T7707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.731139][ T7707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.731280][ T7707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.644719][ T7739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.646028][ T7739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.668292][ T7739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.676739][ T7739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.660558][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.660597][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.660628][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.740648][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.021727][ T7789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.021912][ T7789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.022071][ T7789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.022237][ T7789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.580283][ T7798] netlink: 206 bytes leftover after parsing attributes in process `syz.1.264'. [ 212.628352][ T7814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.628579][ T7814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.628754][ T7814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.628927][ T7814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.496921][ T7846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.497096][ T7846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.497262][ T7846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.497438][ T7846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.510564][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.510603][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.510630][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.510690][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.640664][ T7894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.640864][ T7894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.641033][ T7894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.641200][ T7894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.710499][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.710543][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.710570][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.710625][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.210591][ T7988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.210799][ T7988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.210964][ T7988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.211122][ T7988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.219308][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.219364][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.221641][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.221727][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.959709][ T8059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.959913][ T8059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.960093][ T8059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.960253][ T8059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.977338][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.977381][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.977409][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.977435][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.085986][ T8095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.086161][ T8095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.089396][ T8095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.089627][ T8095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.136770][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.136820][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.138033][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.138063][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.615384][ T8154] FAULT_INJECTION: forcing a failure. [ 232.615384][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 232.615422][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 232.615452][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.615467][ T8154] Call Trace: [ 232.615475][ T8154] [ 232.615486][ T8154] dump_stack_lvl+0x100/0x190 [ 232.615524][ T8154] should_fail_ex.cold+0x5/0xa [ 232.615560][ T8154] should_failslab+0xc2/0x120 [ 232.615594][ T8154] __kmalloc_node_noprof+0xff/0x880 [ 232.615626][ T8154] ? blk_mq_alloc_tag_set+0x57a/0x1330 [ 232.615670][ T8154] blk_mq_alloc_tag_set+0x57a/0x1330 [ 232.615704][ T8154] ? idr_alloc+0x77/0x130 [ 232.615736][ T8154] loop_add+0x3b7/0xb60 [ 232.615766][ T8154] ? __pfx_loop_add+0x10/0x10 [ 232.615811][ T8154] ? __fget_files+0x34/0x3d0 [ 232.615841][ T8154] ? find_held_lock+0x2b/0x80 [ 232.615870][ T8154] ? hook_file_ioctl_common+0x140/0x440 [ 232.615912][ T8154] loop_control_ioctl+0xae/0x620 [ 232.615943][ T8154] ? __pfx_loop_control_ioctl+0x10/0x10 [ 232.615979][ T8154] ? __pfx_loop_control_ioctl+0x10/0x10 [ 232.616039][ T8154] __x64_sys_ioctl+0x18e/0x210 [ 232.616068][ T8154] do_syscall_64+0x121/0x770 [ 232.616109][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.616135][ T8154] RIP: 0033:0x7f326b19e159 [ 232.616157][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.616179][ T8154] RSP: 002b:00007f326c087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.616203][ T8154] RAX: ffffffffffffffda RBX: 00007f326b425fa0 RCX: 00007f326b19e159 [ 232.616220][ T8154] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 232.616237][ T8154] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 232.616254][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.616266][ T8154] R13: 00007f326b426038 R14: 00007f326b425fa0 R15: 00007ffddb10de08 [ 232.616296][ T8154] [ 233.524775][ T8168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.524950][ T8168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.525112][ T8168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.525264][ T8168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.337265][ T8200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.337468][ T8200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.337629][ T8200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.337790][ T8200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.376899][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.376899][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.376958][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.376999][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.554147][ T8248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.554254][ T8248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.554364][ T8248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.554455][ T8248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.577414][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.577457][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.577487][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.577553][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.742632][ T8312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.743784][ T8312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.744033][ T8312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.744304][ T8312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.839941][ T8333] process 'syz.3.328' launched '/dev/fd/3' with NULL argv: empty string added [ 241.912172][ T8338] mmap: syz.3.328 (8338) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.816727][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.816767][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.816794][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.816863][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.006678][ T8374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.006861][ T8374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.007021][ T8374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.007225][ T8374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.026637][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.026677][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.026707][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.026773][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.753556][ T8421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.753742][ T8421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.753918][ T8421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.754086][ T8421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.194449][ T8432] FAULT_INJECTION: forcing a failure. [ 247.194449][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 247.194505][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.1.339 Not tainted syzkaller #0 PREEMPT(full) [ 247.194535][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.194554][ T8432] Call Trace: [ 247.194562][ T8432] [ 247.194572][ T8432] dump_stack_lvl+0x100/0x190 [ 247.194612][ T8432] should_fail_ex.cold+0x5/0xa [ 247.194646][ T8432] should_failslab+0xc2/0x120 [ 247.194681][ T8432] __kmalloc_cache_noprof+0x91/0x6d0 [ 247.194719][ T8432] ? ima_d_path+0xc9/0x260 [ 247.194760][ T8432] ima_d_path+0xc9/0x260 [ 247.194797][ T8432] ? __pfx_ima_d_path+0x10/0x10 [ 247.194834][ T8432] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 247.194872][ T8432] process_measurement+0x1b25/0x2350 [ 247.194917][ T8432] ? __pfx_process_measurement+0x10/0x10 [ 247.194947][ T8432] ? lock_acquire+0x1d1/0x380 [ 247.194998][ T8432] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 247.195027][ T8432] ? find_held_lock+0x2b/0x80 [ 247.195055][ T8432] ? rcu_read_unlock+0x17/0x60 [ 247.195078][ T8432] ? rcu_read_unlock+0x17/0x60 [ 247.195109][ T8432] ? __memcg_slab_post_alloc_hook+0x78b/0x1270 [ 247.195188][ T8432] ? seq_open+0x116/0x170 [ 247.195225][ T8432] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 247.195254][ T8432] ? single_open+0x15f/0x1d0 [ 247.195282][ T8432] ima_file_check+0xcc/0x120 [ 247.195313][ T8432] ? __pfx_ima_file_check+0x10/0x10 [ 247.195355][ T8432] security_file_post_open+0xc4/0x210 [ 247.195393][ T8432] path_openat+0x5cd/0x2440 [ 247.195428][ T8432] ? __pfx_path_openat+0x10/0x10 [ 247.195469][ T8432] do_file_open+0x20e/0x430 [ 247.195501][ T8432] ? __pfx_do_file_open+0x10/0x10 [ 247.195554][ T8432] ? _raw_spin_unlock+0x28/0x50 [ 247.195586][ T8432] ? alloc_fd+0x471/0x7a0 [ 247.195626][ T8432] do_sys_openat2+0x10f/0x1e0 [ 247.195661][ T8432] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.195698][ T8432] ? fdget+0x18b/0x210 [ 247.195733][ T8432] __x64_sys_openat+0x12d/0x210 [ 247.195765][ T8432] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.195813][ T8432] do_syscall_64+0x121/0x770 [ 247.195852][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.195879][ T8432] RIP: 0033:0x7f060eb9e159 [ 247.195901][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.195923][ T8432] RSP: 002b:00007f060fab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.195954][ T8432] RAX: ffffffffffffffda RBX: 00007f060ee25fa0 RCX: 00007f060eb9e159 [ 247.195972][ T8432] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 247.195989][ T8432] RBP: 00007f060ec3503b R08: 0000000000000000 R09: 0000000000000000 [ 247.196004][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.196019][ T8432] R13: 00007f060ee26038 R14: 00007f060ee25fa0 R15: 00007fffae77a298 [ 247.196054][ T8432] [ 248.817016][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.817057][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.817085][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.817149][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.293824][ T8459] FAULT_INJECTION: forcing a failure. [ 249.293824][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 249.293863][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 249.293894][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.293910][ T8459] Call Trace: [ 249.293918][ T8459] [ 249.293938][ T8459] dump_stack_lvl+0x100/0x190 [ 249.293984][ T8459] should_fail_ex.cold+0x5/0xa [ 249.294020][ T8459] should_failslab+0xc2/0x120 [ 249.294054][ T8459] __kmalloc_cache_node_noprof+0x94/0x720 [ 249.294086][ T8459] ? __alloc_workqueue+0xdba/0x1950 [ 249.294112][ T8459] ? init_rescuer+0x19f/0x550 [ 249.294145][ T8459] init_rescuer+0x19f/0x550 [ 249.294169][ T8459] ? __pfx_init_rescuer+0x10/0x10 [ 249.294195][ T8459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.294248][ T8459] __alloc_workqueue+0xe82/0x1950 [ 249.294283][ T8459] alloc_workqueue_noprof+0xc7/0x130 [ 249.294307][ T8459] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 249.294337][ T8459] ? __pfx___debug_object_init+0x10/0x10 [ 249.294379][ T8459] nci_register_device+0x21e/0xb80 [ 249.294413][ T8459] ? __pfx_nci_register_device+0x10/0x10 [ 249.294448][ T8459] ? lockdep_init_map_type+0x5c/0x250 [ 249.294488][ T8459] virtual_ncidev_open+0x141/0x220 [ 249.294514][ T8459] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 249.294537][ T8459] misc_open+0x26d/0x450 [ 249.294568][ T8459] ? __pfx_misc_open+0x10/0x10 [ 249.294596][ T8459] chrdev_open+0x234/0x6a0 [ 249.294625][ T8459] ? __pfx_chrdev_open+0x10/0x10 [ 249.294654][ T8459] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 249.294695][ T8459] do_dentry_open+0x6ab/0x14d0 [ 249.294722][ T8459] ? __pfx_chrdev_open+0x10/0x10 [ 249.294756][ T8459] vfs_open+0x82/0x3f0 [ 249.294795][ T8459] path_openat+0x19fa/0x2440 [ 249.294848][ T8459] ? __pfx_path_openat+0x10/0x10 [ 249.294892][ T8459] do_file_open+0x20e/0x430 [ 249.294935][ T8459] ? __pfx_do_file_open+0x10/0x10 [ 249.294994][ T8459] ? _raw_spin_unlock+0x28/0x50 [ 249.295027][ T8459] ? alloc_fd+0x471/0x7a0 [ 249.295062][ T8459] do_sys_openat2+0x10f/0x1e0 [ 249.295092][ T8459] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.295134][ T8459] __x64_sys_openat+0x12d/0x210 [ 249.295169][ T8459] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.295218][ T8459] do_syscall_64+0x121/0x770 [ 249.295258][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.295284][ T8459] RIP: 0033:0x7fbfc2f9e159 [ 249.295307][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.295329][ T8459] RSP: 002b:00007fbfc11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.295354][ T8459] RAX: ffffffffffffffda RBX: 00007fbfc3225fa0 RCX: 00007fbfc2f9e159 [ 249.295371][ T8459] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 249.295388][ T8459] RBP: 00007fbfc303503b R08: 0000000000000000 R09: 0000000000000000 [ 249.295404][ T8459] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 249.295420][ T8459] R13: 00007fbfc3226038 R14: 00007fbfc3225fa0 R15: 00007ffea3efde48 [ 249.295456][ T8459] [ 249.330481][ T8459] workqueue: Failed to allocate a rescuer for wq "nfc2_nci_cmd_wq" [ 250.338259][ T8483] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.338414][ T8483] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.338552][ T8483] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.338696][ T8483] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.131538][ T8496] FAULT_INJECTION: forcing a failure. [ 251.131538][ T8496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.131578][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 251.131608][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.131624][ T8496] Call Trace: [ 251.131632][ T8496] [ 251.131642][ T8496] dump_stack_lvl+0x100/0x190 [ 251.131683][ T8496] should_fail_ex.cold+0x5/0xa [ 251.131710][ T8496] ? fs_reclaim_acquire+0x70/0x100 [ 251.131747][ T8496] should_fail_alloc_page+0xeb/0x140 [ 251.131784][ T8496] prepare_alloc_pages+0x1f0/0x5b0 [ 251.131823][ T8496] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 251.131867][ T8496] ? lock_acquire+0x1d1/0x380 [ 251.131899][ T8496] ? clockevents_program_event+0x23e/0x820 [ 251.131928][ T8496] ? find_held_lock+0x2b/0x80 [ 251.131953][ T8496] ? clockevents_program_event+0x23e/0x820 [ 251.131980][ T8496] ? clockevents_program_event+0x23e/0x820 [ 251.132014][ T8496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.132041][ T8496] ? ktime_get+0x1a4/0x320 [ 251.132077][ T8496] ? lapic_next_event+0x10/0x20 [ 251.132101][ T8496] ? clockevents_program_event+0x1ef/0x820 [ 251.132134][ T8496] ? __pfx_clockevents_program_event+0x10/0x10 [ 251.132163][ T8496] ? find_held_lock+0x2b/0x80 [ 251.132202][ T8496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.132236][ T8496] ? policy_nodemask+0xed/0x4f0 [ 251.132270][ T8496] alloc_pages_mpol+0x201/0x550 [ 251.132303][ T8496] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 251.132336][ T8496] ? alloc_pages_noprof+0xb0/0x160 [ 251.132379][ T8496] alloc_pages_noprof+0x1a/0x160 [ 251.132415][ T8496] relay_open_buf.part.0+0x261/0xb70 [ 251.132463][ T8496] relay_open+0x7b9/0xa00 [ 251.132499][ T8496] blk_trace_setup_prepare+0x35c/0x6c0 [ 251.132537][ T8496] blk_trace_setup+0x217/0x440 [ 251.132573][ T8496] ? __pfx_blk_trace_setup+0x10/0x10 [ 251.132601][ T8496] ? vsnprintf+0x4c5/0x1300 [ 251.132648][ T8496] ? __pfx_vsnprintf+0x10/0x10 [ 251.132704][ T8496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.132739][ T8496] ? do_vfs_ioctl+0x226/0x13e0 [ 251.132769][ T8496] blk_trace_ioctl+0x245/0x320 [ 251.132801][ T8496] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 251.132847][ T8496] ? find_held_lock+0x2b/0x80 [ 251.132874][ T8496] ? hook_file_ioctl_common+0x140/0x440 [ 251.132917][ T8496] blkdev_ioctl+0x17c/0x6f0 [ 251.132952][ T8496] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.132990][ T8496] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.133026][ T8496] __x64_sys_ioctl+0x18e/0x210 [ 251.133053][ T8496] do_syscall_64+0x121/0x770 [ 251.133093][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.133119][ T8496] RIP: 0033:0x7f326b19e159 [ 251.133142][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.133164][ T8496] RSP: 002b:00007f326c066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.133190][ T8496] RAX: ffffffffffffffda RBX: 00007f326b426090 RCX: 00007f326b19e159 [ 251.133207][ T8496] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 251.133224][ T8496] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 251.133240][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.133255][ T8496] R13: 00007f326b426128 R14: 00007f326b426090 R15: 00007ffddb10de08 [ 251.133292][ T8496] [ 252.425728][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.425772][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.425801][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.425829][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.004925][ T8524] vivid-007: ================= START STATUS ================= [ 253.004976][ T8524] vivid-007: Generate PTS: true [ 253.005003][ T8524] vivid-007: Generate SCR: true [ 253.005033][ T8524] tpg source WxH: 320x240 (Y'CbCr) [ 253.005049][ T8524] tpg field: 1 [ 253.005057][ T8524] tpg crop: (0,0)/320x240 [ 253.005077][ T8524] tpg compose: (0,0)/320x240 [ 253.005092][ T8524] tpg colorspace: 8 [ 253.005101][ T8524] tpg transfer function: 0/0 [ 253.005113][ T8524] tpg Y'CbCr encoding: 0/0 [ 253.005125][ T8524] tpg quantization: 0/0 [ 253.005135][ T8524] tpg RGB range: 0/2 [ 253.005146][ T8524] vivid-007: ================== END STATUS ================== [ 253.325683][ T8537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.325890][ T8537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.326064][ T8537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.326208][ T8537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.376697][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.376737][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.376765][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.376830][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.779060][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779122][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.518182][ T8640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.518461][ T8640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.518634][ T8640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.518799][ T8640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.494137][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 260.576455][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.576497][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.576525][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.576594][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.169440][ T8683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.169633][ T8683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.169794][ T8683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.169954][ T8683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.216490][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.216530][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.216557][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.216621][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.926837][ T8749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.927086][ T8749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.928694][ T8749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.928949][ T8749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.487465][ T8786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.487648][ T8786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.487836][ T8786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.488004][ T8786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.536553][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.536595][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.536623][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.536652][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.826563][ T8849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.826743][ T8849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.826902][ T8849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.827072][ T8849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.367139][ T8885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.367327][ T8885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.367516][ T8885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.367689][ T8885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.376413][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.376453][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.376482][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.376550][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.409413][ T8969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.409596][ T8969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.409779][ T8969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.409964][ T8969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.456811][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.456855][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.456884][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.456951][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.577025][ T9042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.577215][ T9042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.578596][ T9042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.581345][ T9042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.616549][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.616590][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.616618][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.616646][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.051559][ T9135] kafs: addr_prefs: Too many elements in string [ 287.283064][ T9136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.283280][ T9136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.283438][ T9136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.283596][ T9136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.069238][ T9169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.069429][ T9169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.069588][ T9169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.069754][ T9169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.621490][ T9191] nbd: nbd4129 already in use [ 291.137508][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.137551][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.137579][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.137644][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.607021][ T9274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.607199][ T9274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.607359][ T9274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.607515][ T9274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.666470][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.666511][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.666545][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.666572][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.545732][ T9315] FAULT_INJECTION: forcing a failure. [ 297.545732][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 297.545788][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) [ 297.545819][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.545834][ T9315] Call Trace: [ 297.545841][ T9315] [ 297.545851][ T9315] dump_stack_lvl+0x100/0x190 [ 297.545899][ T9315] should_fail_ex.cold+0x5/0xa [ 297.545933][ T9315] should_failslab+0xc2/0x120 [ 297.545967][ T9315] __kmalloc_cache_noprof+0x91/0x6d0 [ 297.546003][ T9315] ? string+0x201/0x4d0 [ 297.546031][ T9315] ? format_decode+0x1ad/0xdd0 [ 297.546059][ T9315] ? tomoyo_init_log+0x1a0/0x20c0 [ 297.546091][ T9315] tomoyo_init_log+0x1a0/0x20c0 [ 297.546117][ T9315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.546156][ T9315] ? vsnprintf+0x4c5/0x1300 [ 297.546201][ T9315] ? __pfx_tomoyo_init_log+0x10/0x10 [ 297.546228][ T9315] ? tomoyo_profile+0x47/0x60 [ 297.546252][ T9315] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 297.546287][ T9315] tomoyo_supervisor+0x506/0x1340 [ 297.546322][ T9315] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 297.546369][ T9315] ? tomoyo_check_path_acl+0x141/0x210 [ 297.546406][ T9315] ? tomoyo_check_acl+0x1f7/0x410 [ 297.546444][ T9315] tomoyo_path_permission+0x270/0x3b0 [ 297.546484][ T9315] tomoyo_check_open_permission+0x34d/0x3c0 [ 297.546522][ T9315] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 297.546558][ T9315] ? __lock_acquire+0x5c0/0x1f40 [ 297.546601][ T9315] ? hook_file_open+0x248/0x8e0 [ 297.546651][ T9315] ? path_get+0x61/0x80 [ 297.546687][ T9315] tomoyo_file_open+0x6b/0x90 [ 297.546718][ T9315] security_file_open+0xb5/0x1e0 [ 297.546744][ T9315] do_dentry_open+0x588/0x14d0 [ 297.546781][ T9315] vfs_open+0x82/0x3f0 [ 297.546818][ T9315] path_openat+0x19fa/0x2440 [ 297.546854][ T9315] ? __pfx_path_openat+0x10/0x10 [ 297.546902][ T9315] do_file_open+0x20e/0x430 [ 297.546936][ T9315] ? __pfx_do_file_open+0x10/0x10 [ 297.546986][ T9315] ? _raw_spin_unlock+0x28/0x50 [ 297.547018][ T9315] ? alloc_fd+0x471/0x7a0 [ 297.547057][ T9315] do_sys_openat2+0x10f/0x1e0 [ 297.547091][ T9315] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.547139][ T9315] __x64_sys_openat+0x12d/0x210 [ 297.547175][ T9315] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.547224][ T9315] do_syscall_64+0x121/0x770 [ 297.547264][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.547290][ T9315] RIP: 0033:0x7f757299e159 [ 297.547312][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.547335][ T9315] RSP: 002b:00007f75737c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.547360][ T9315] RAX: ffffffffffffffda RBX: 00007f7572c25fa0 RCX: 00007f757299e159 [ 297.547376][ T9315] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 297.547392][ T9315] RBP: 00007f7572a3503b R08: 0000000000000000 R09: 0000000000000000 [ 297.547405][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.547419][ T9315] R13: 00007f7572c26038 R14: 00007f7572c25fa0 R15: 00007ffcec8173a8 [ 297.547454][ T9315] [ 298.696746][ T9344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.696908][ T9344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.697158][ T9344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.697271][ T9344] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.923580][ T9380] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.457'. [ 299.957537][ T9368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.957725][ T9368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.957903][ T9368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.958091][ T9368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.028762][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.028805][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.028833][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.028860][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.936795][ T9471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.937031][ T9471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.937284][ T9471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.937527][ T9471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.026755][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.026801][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 308.026830][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.026858][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.788177][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 309.003962][ T9517] FAULT_INJECTION: forcing a failure. [ 309.003962][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 309.004000][ T9517] CPU: 0 UID: 0 PID: 9517 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) [ 309.004030][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.004045][ T9517] Call Trace: [ 309.004053][ T9517] [ 309.004062][ T9517] dump_stack_lvl+0x100/0x190 [ 309.004103][ T9517] should_fail_ex.cold+0x5/0xa [ 309.004136][ T9517] should_failslab+0xc2/0x120 [ 309.004173][ T9517] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 309.004205][ T9517] ? __d_alloc+0x35/0xa50 [ 309.004252][ T9517] __d_alloc+0x35/0xa50 [ 309.004289][ T9517] d_alloc+0x4a/0x1e0 [ 309.004322][ T9517] lookup_one_qstr_excl+0x171/0x250 [ 309.004371][ T9517] start_dirop+0x59/0xb0 [ 309.004402][ T9517] simple_start_creating+0xf9/0x110 [ 309.004432][ T9517] ? __pfx_simple_start_creating+0x10/0x10 [ 309.004461][ T9517] ? mntput+0x70/0xa0 [ 309.004487][ T9517] ? simple_pin_fs+0xa3/0x190 [ 309.004514][ T9517] debugfs_start_creating.part.0+0x9f/0x180 [ 309.004550][ T9517] __debugfs_create_file+0x86/0x4d0 [ 309.004587][ T9517] debugfs_create_file_full+0x41/0x60 [ 309.004625][ T9517] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 309.004663][ T9517] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 309.004733][ T9517] ? kasan_save_track+0x14/0x30 [ 309.004765][ T9517] ? __kasan_kmalloc+0xaa/0xb0 [ 309.004795][ T9517] ? lockdep_init_map_type+0x5c/0x250 [ 309.004834][ T9517] preinit_net+0x252/0x920 [ 309.004872][ T9517] copy_net_ns+0x1dd/0x7a0 [ 309.004898][ T9517] create_new_namespaces+0x3ea/0xac0 [ 309.004939][ T9517] unshare_nsproxy_namespaces+0xf2/0x220 [ 309.004976][ T9517] ksys_unshare+0x4a2/0xa70 [ 309.005011][ T9517] ? __pfx_ksys_unshare+0x10/0x10 [ 309.005051][ T9517] __x64_sys_unshare+0x31/0x40 [ 309.005077][ T9517] do_syscall_64+0x121/0x770 [ 309.005120][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.005147][ T9517] RIP: 0033:0x7f757299e159 [ 309.005168][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.005189][ T9517] RSP: 002b:00007f75737c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.005213][ T9517] RAX: ffffffffffffffda RBX: 00007f7572c25fa0 RCX: 00007f757299e159 [ 309.005228][ T9517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 309.005243][ T9517] RBP: 00007f7572a3503b R08: 0000000000000000 R09: 0000000000000000 [ 309.005258][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.005272][ T9517] R13: 00007f7572c26038 R14: 00007f7572c25fa0 R15: 00007ffcec8173a8 [ 309.005306][ T9517] [ 311.185526][ T9546] syz.3.478 uses obsolete (PF_INET,SOCK_PACKET) [ 314.207005][ T9609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.207284][ T9609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.207457][ T9609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 314.207626][ T9609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.256418][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 316.256457][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.256485][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.256521][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.219878][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219941][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.726663][ T9686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.726891][ T9686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.727052][ T9686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.727206][ T9686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.736642][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.736669][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.736686][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.736732][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.290836][ T9786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.291561][ T9786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.295075][ T9786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.296964][ T9786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.298393][ T9813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.298565][ T9813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.298719][ T9813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.298893][ T9813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.336637][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 328.336677][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.336705][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 328.336731][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.436965][ T9932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.437227][ T9932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.437545][ T9932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.441032][ T9932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.707288][ T9955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.707475][ T9955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.707873][ T9955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.708066][ T9955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 336.437329][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 336.660013][ T9972] FAULT_INJECTION: forcing a failure. [ 336.660013][ T9972] name failslab, interval 1, probability 0, space 0, times 0 [ 336.660050][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: syz.2.531 Not tainted syzkaller #0 PREEMPT(full) [ 336.660075][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.660088][ T9972] Call Trace: [ 336.660096][ T9972] [ 336.660106][ T9972] dump_stack_lvl+0x100/0x190 [ 336.660147][ T9972] should_fail_ex.cold+0x5/0xa [ 336.660178][ T9972] should_failslab+0xc2/0x120 [ 336.660220][ T9972] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 336.660250][ T9972] ? sock_alloc_inode+0x26/0x2c0 [ 336.660277][ T9972] ? __pfx_sock_alloc_inode+0x10/0x10 [ 336.660304][ T9972] sock_alloc_inode+0x26/0x2c0 [ 336.660328][ T9972] ? __pfx_sock_alloc_inode+0x10/0x10 [ 336.660350][ T9972] alloc_inode+0x68/0x250 [ 336.660386][ T9972] sock_alloc+0x44/0x280 [ 336.660418][ T9972] ? security_socket_create+0x7f/0x250 [ 336.660453][ T9972] __sock_create+0xc2/0x860 [ 336.660486][ T9972] __sys_socket+0x14d/0x260 [ 336.660512][ T9972] ? __pfx___sys_socket+0x10/0x10 [ 336.660546][ T9972] __x64_sys_socket+0x72/0xb0 [ 336.660572][ T9972] ? lockdep_hardirqs_on+0x7d/0x110 [ 336.660607][ T9972] do_syscall_64+0x121/0x770 [ 336.660648][ T9972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.660672][ T9972] RIP: 0033:0x7f326b19e159 [ 336.660693][ T9972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.660715][ T9972] RSP: 002b:00007f326c045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 336.660739][ T9972] RAX: ffffffffffffffda RBX: 00007f326b426180 RCX: 00007f326b19e159 [ 336.660763][ T9972] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 336.660777][ T9972] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 336.660792][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.660805][ T9972] R13: 00007f326b426218 R14: 00007f326b426180 R15: 00007ffddb10de08 [ 336.660840][ T9972] [ 336.661963][ T9972] socket: no more sockets [ 337.776470][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.776519][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 337.776547][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.776616][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.783207][T10034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.783496][T10034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 340.783670][T10034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 340.783847][T10034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.957295][T10059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.957473][T10059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.957634][T10059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.957799][T10059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.275826][T10077] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 344.016405][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.016446][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 344.016459][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.016514][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.804764][T10193] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.557'. [ 357.020114][T10256] FAULT_INJECTION: forcing a failure. [ 357.020114][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 357.020150][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.0.568 Not tainted syzkaller #0 PREEMPT(full) [ 357.020177][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.020192][T10256] Call Trace: [ 357.020200][T10256] [ 357.020210][T10256] dump_stack_lvl+0x100/0x190 [ 357.020248][T10256] should_fail_ex.cold+0x5/0xa [ 357.020281][T10256] should_failslab+0xc2/0x120 [ 357.020315][T10256] __kmalloc_noprof+0xfc/0x840 [ 357.020344][T10256] ? tomoyo_profile+0x47/0x60 [ 357.020371][T10256] ? tomoyo_supervisor+0x65d/0x1340 [ 357.020407][T10256] tomoyo_supervisor+0x65d/0x1340 [ 357.020444][T10256] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 357.020528][T10256] ? tomoyo_check_path_acl+0x141/0x210 [ 357.020569][T10256] ? tomoyo_check_acl+0x1f7/0x410 [ 357.020611][T10256] tomoyo_path_permission+0x270/0x3b0 [ 357.020653][T10256] tomoyo_check_open_permission+0x34d/0x3c0 [ 357.020691][T10256] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 357.020726][T10256] ? __lock_acquire+0x5c0/0x1f40 [ 357.020778][T10256] ? hook_file_open+0x248/0x8e0 [ 357.020826][T10256] ? path_get+0x61/0x80 [ 357.020860][T10256] tomoyo_file_open+0x6b/0x90 [ 357.020889][T10256] security_file_open+0xb5/0x1e0 [ 357.020910][T10256] do_dentry_open+0x588/0x14d0 [ 357.020944][T10256] vfs_open+0x82/0x3f0 [ 357.020979][T10256] path_openat+0x19fa/0x2440 [ 357.021018][T10256] ? __pfx_path_openat+0x10/0x10 [ 357.021058][T10256] do_file_open+0x20e/0x430 [ 357.021090][T10256] ? __pfx_do_file_open+0x10/0x10 [ 357.021143][T10256] ? _raw_spin_unlock+0x28/0x50 [ 357.021177][T10256] ? alloc_fd+0x471/0x7a0 [ 357.021215][T10256] do_sys_openat2+0x10f/0x1e0 [ 357.021249][T10256] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.021294][T10256] __x64_sys_openat+0x12d/0x210 [ 357.021325][T10256] ? __pfx___x64_sys_openat+0x10/0x10 [ 357.021366][T10256] do_syscall_64+0x121/0x770 [ 357.021403][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.021430][T10256] RIP: 0033:0x7fbfc2f9e159 [ 357.021452][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.021476][T10256] RSP: 002b:00007fbfc11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.021502][T10256] RAX: ffffffffffffffda RBX: 00007fbfc3225fa0 RCX: 00007fbfc2f9e159 [ 357.021520][T10256] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 357.021536][T10256] RBP: 00007fbfc303503b R08: 0000000000000000 R09: 0000000000000000 [ 357.021551][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.021566][T10256] R13: 00007fbfc3226038 R14: 00007fbfc3225fa0 R15: 00007ffea3efde48 [ 357.021601][T10256] [ 358.663267][T10288] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.663769][T10288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.664300][T10288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.666125][T10288] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.746587][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.746616][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.746649][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.746676][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.330086][T10330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.346076][T10330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.359517][T10330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.360480][T10330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.386390][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.386417][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.386447][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.387913][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.719840][T10367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.719996][T10367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.720151][T10367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.720305][T10367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.178155][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.736420][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.736440][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.736470][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.127324][T10484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.127481][T10484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.127629][T10484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.127788][T10484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.257440][T10516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.257618][T10516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.257797][T10516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.257958][T10516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.336391][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 374.336432][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.336459][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 374.336487][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.269829][T10617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.270016][T10617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.270203][T10617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.270378][T10617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.660682][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.660747][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.336492][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.336532][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.336601][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.336656][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.441661][T10651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.441845][T10651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.442020][T10651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.442175][T10651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.496608][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.496649][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.496678][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.496705][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 386.397070][T10737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 386.398029][T10737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.399303][T10737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 386.401095][T10737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.452066][T10754] __vm_enough_memory: pid: 10754, comm: syz.2.626, bytes: 4398046457856 not enough memory for the allocation [ 388.417226][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 388.417272][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 388.417301][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.417329][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 388.593988][T10756] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 392.673847][T10830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.673955][T10830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.674043][T10830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.674132][T10830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.736348][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.736389][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.736417][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.736445][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.207787][T10896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 397.208031][T10896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.208249][T10896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.208466][T10896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.937460][T10935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.937740][T10935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.937908][T10935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.938068][T10935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.976373][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.976415][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.976442][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.976469][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.086511][T11003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.086683][T11003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.086842][T11003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.087031][T11003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.146359][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.146401][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.146429][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 405.146457][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.022336][T11100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.022446][T11100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.022536][T11100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.022625][T11100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.057354][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.057397][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.057426][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.057490][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 423.046624][T11336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.046781][T11336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.046932][T11336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.047081][T11336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.689985][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 425.056340][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.056381][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.056409][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.056474][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.094371][T11372] FAULT_INJECTION: forcing a failure. [ 425.094371][T11372] name failslab, interval 1, probability 0, space 0, times 0 [ 425.094419][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.0.705 Not tainted syzkaller #0 PREEMPT(full) [ 425.094448][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.094462][T11372] Call Trace: [ 425.094470][T11372] [ 425.094480][T11372] dump_stack_lvl+0x100/0x190 [ 425.094520][T11372] should_fail_ex.cold+0x5/0xa [ 425.094551][T11372] should_failslab+0xc2/0x120 [ 425.094583][T11372] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 425.094610][T11372] ? __d_alloc+0x35/0xa50 [ 425.094646][T11372] __d_alloc+0x35/0xa50 [ 425.094682][T11372] d_alloc_pseudo+0x1c/0xc0 [ 425.094706][T11372] alloc_file_pseudo+0x118/0x290 [ 425.094742][T11372] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 425.094776][T11372] ? alloc_fd+0x471/0x7a0 [ 425.094810][T11372] sock_alloc_file+0x50/0x210 [ 425.094847][T11372] __sys_socket+0x1c0/0x260 [ 425.094874][T11372] ? __pfx___sys_socket+0x10/0x10 [ 425.094910][T11372] __x64_sys_socket+0x72/0xb0 [ 425.094933][T11372] ? lockdep_hardirqs_on+0x7d/0x110 [ 425.094969][T11372] do_syscall_64+0x121/0x770 [ 425.095009][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.095034][T11372] RIP: 0033:0x7fbfc2f9e159 [ 425.095055][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.095077][T11372] RSP: 002b:00007fbfc11b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 425.095101][T11372] RAX: ffffffffffffffda RBX: 00007fbfc3226180 RCX: 00007fbfc2f9e159 [ 425.095117][T11372] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 425.095132][T11372] RBP: 00007fbfc303503b R08: 0000000000000000 R09: 0000000000000000 [ 425.095147][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.095161][T11372] R13: 00007fbfc3226218 R14: 00007fbfc3226180 R15: 00007ffea3efde48 [ 425.095195][T11372] [ 425.429718][T11376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 425.430033][T11376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 425.430263][T11376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.430495][T11376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.466301][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.466344][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 427.466372][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.466398][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.572685][T11396] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 433.131919][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 433.623643][T11500] FAULT_INJECTION: forcing a failure. [ 433.623643][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 433.623684][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 433.623717][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.623733][T11500] Call Trace: [ 433.623741][T11500] [ 433.623751][T11500] dump_stack_lvl+0x100/0x190 [ 433.623792][T11500] should_fail_ex.cold+0x5/0xa [ 433.623823][T11500] should_failslab+0xc2/0x120 [ 433.623857][T11500] kmem_cache_alloc_noprof+0x92/0x6a0 [ 433.623887][T11500] ? security_file_alloc+0x34/0x2c0 [ 433.623918][T11500] security_file_alloc+0x34/0x2c0 [ 433.623944][T11500] init_file+0x95/0x480 [ 433.623976][T11500] alloc_empty_file+0x79/0x1c0 [ 433.624011][T11500] alloc_file_pseudo+0x183/0x290 [ 433.624045][T11500] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 433.624077][T11500] ? alloc_fd+0x471/0x7a0 [ 433.624111][T11500] sock_alloc_file+0x50/0x210 [ 433.624146][T11500] __sys_socket+0x1c0/0x260 [ 433.624186][T11500] ? __pfx___sys_socket+0x10/0x10 [ 433.624224][T11500] __x64_sys_socket+0x72/0xb0 [ 433.624250][T11500] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.624285][T11500] do_syscall_64+0x121/0x770 [ 433.624321][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.624347][T11500] RIP: 0033:0x7f060eb9e159 [ 433.624370][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.624394][T11500] RSP: 002b:00007f060fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.624419][T11500] RAX: ffffffffffffffda RBX: 00007f060ee26180 RCX: 00007f060eb9e159 [ 433.624436][T11500] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000000010 [ 433.624451][T11500] RBP: 00007f060ec3503b R08: 0000000000000000 R09: 0000000000000000 [ 433.624468][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.624484][T11500] R13: 00007f060ee26218 R14: 00007f060ee26180 R15: 00007fffae77a298 [ 433.624519][T11500] [ 435.976288][T11517] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 439.738291][T11583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.738542][T11583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 439.738766][T11583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 439.738988][T11583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.099947][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.100000][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.665503][T11629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.665691][T11629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.665851][T11629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.666007][T11629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.702937][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.702981][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.703011][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.703040][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.488384][T11693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.489642][T11693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.491205][T11693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.491498][T11693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.400888][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 446.856919][T11717] FAULT_INJECTION: forcing a failure. [ 446.856919][T11717] name fail_futex, interval 1, probability 0, space 0, times 1 [ 446.856962][T11717] CPU: 0 UID: 0 PID: 11717 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT(full) [ 446.856992][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.857007][T11717] Call Trace: [ 446.857016][T11717] [ 446.857025][T11717] dump_stack_lvl+0x100/0x190 [ 446.857065][T11717] should_fail_ex.cold+0x5/0xa [ 446.857097][T11717] get_futex_key+0x1d0/0x14f0 [ 446.857138][T11717] ? __pfx_get_futex_key+0x10/0x10 [ 446.857175][T11717] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 446.857213][T11717] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 446.857254][T11717] futex_wait_setup+0x91/0x540 [ 446.857289][T11717] __futex_wait+0x19f/0x300 [ 446.857320][T11717] ? __pfx___futex_wait+0x10/0x10 [ 446.857346][T11717] ? __pfx_try_to_wake_up+0x10/0x10 [ 446.857393][T11717] ? futex_hash+0x311/0x400 [ 446.857433][T11717] ? __pfx_futex_wake_mark+0x10/0x10 [ 446.857468][T11717] ? find_held_lock+0x2b/0x80 [ 446.857493][T11717] ? futex_wake+0x4ea/0x5e0 [ 446.857530][T11717] futex_wait+0xe6/0x370 [ 446.857559][T11717] ? __pfx_futex_wait+0x10/0x10 [ 446.857607][T11717] do_futex+0x265/0x440 [ 446.857633][T11717] ? __pfx_do_futex+0x10/0x10 [ 446.857657][T11717] ? __pfx___might_resched+0x10/0x10 [ 446.857688][T11717] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 446.857733][T11717] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.857772][T11717] __x64_sys_futex+0x34f/0x4d0 [ 446.857802][T11717] ? __pfx___x64_sys_futex+0x10/0x10 [ 446.857827][T11717] ? rcu_is_watching+0x13/0xc0 [ 446.857862][T11717] do_syscall_64+0x121/0x770 [ 446.857899][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.857931][T11717] RIP: 0033:0x7f060eb9e159 [ 446.857952][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.857977][T11717] RSP: 002b:00007f060fa720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.858002][T11717] RAX: ffffffffffffffda RBX: 00007f060ee26188 RCX: 00007f060eb9e159 [ 446.858019][T11717] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f060ee26188 [ 446.858034][T11717] RBP: 00007f060ee26180 R08: 0000000000000000 R09: 0000000000000000 [ 446.858048][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.858062][T11717] R13: 00007f060ee26218 R14: 00007fffae77a1b0 R15: 00007fffae77a298 [ 446.858095][T11717] [ 447.540353][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 447.540381][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.540397][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 447.540412][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.586635][T11726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.586879][T11726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 448.587103][T11726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 448.587345][T11726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.657413][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 450.657456][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.657485][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 450.657512][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.638193][T11785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.644240][T11785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 451.644434][T11785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.644599][T11785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.184646][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 452.477754][T11811] FAULT_INJECTION: forcing a failure. [ 452.477754][T11811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 452.477793][T11811] CPU: 1 UID: 0 PID: 11811 Comm: syz.1.761 Not tainted syzkaller #0 PREEMPT(full) [ 452.477822][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.477837][T11811] Call Trace: [ 452.477845][T11811] [ 452.477854][T11811] dump_stack_lvl+0x100/0x190 [ 452.477894][T11811] should_fail_ex.cold+0x5/0xa [ 452.477925][T11811] get_futex_key+0x1d0/0x14f0 [ 452.477971][T11811] ? __pfx_get_futex_key+0x10/0x10 [ 452.478009][T11811] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 452.478051][T11811] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 452.478089][T11811] futex_wait_setup+0x91/0x540 [ 452.478128][T11811] __futex_wait+0x19f/0x300 [ 452.478157][T11811] ? __pfx___futex_wait+0x10/0x10 [ 452.478182][T11811] ? __pfx_try_to_wake_up+0x10/0x10 [ 452.478213][T11811] ? futex_hash+0x311/0x400 [ 452.478251][T11811] ? __pfx_futex_wake_mark+0x10/0x10 [ 452.478285][T11811] ? find_held_lock+0x2b/0x80 [ 452.478307][T11811] ? futex_wake+0x4ea/0x5e0 [ 452.478343][T11811] futex_wait+0xe6/0x370 [ 452.478372][T11811] ? __pfx_futex_wait+0x10/0x10 [ 452.478430][T11811] do_futex+0x265/0x440 [ 452.478457][T11811] ? __pfx_do_futex+0x10/0x10 [ 452.478481][T11811] ? __pfx___might_resched+0x10/0x10 [ 452.478513][T11811] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 452.478547][T11811] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.478584][T11811] __x64_sys_futex+0x34f/0x4d0 [ 452.478613][T11811] ? __pfx___x64_sys_futex+0x10/0x10 [ 452.478634][T11811] ? rcu_is_watching+0x13/0xc0 [ 452.478667][T11811] do_syscall_64+0x121/0x770 [ 452.478705][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.478729][T11811] RIP: 0033:0x7f060eb9e159 [ 452.478751][T11811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.478772][T11811] RSP: 002b:00007f060fa720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 452.478797][T11811] RAX: ffffffffffffffda RBX: 00007f060ee26188 RCX: 00007f060eb9e159 [ 452.478814][T11811] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f060ee26188 [ 452.478830][T11811] RBP: 00007f060ee26180 R08: 0000000000000000 R09: 0000000000000000 [ 452.478844][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.478859][T11811] R13: 00007f060ee26218 R14: 00007fffae77a1b0 R15: 00007fffae77a298 [ 452.478894][T11811] [ 452.886985][T11814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.887214][T11814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.887450][T11814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.887745][T11814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.922912][T11830] random: crng reseeded on system resumption [ 454.896364][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.896406][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.896433][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.896461][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.484848][T11868] snd_virmidi snd_virmidi.0: control 61678:131081:1:y»:6 is already present [ 456.834684][T11873] kexec: Could not allocate control_code_buffer [ 461.438346][T11947] bond0: invalid ARP target specified [ 461.678084][T11947] hub 1-0:1.0: USB hub found [ 461.678532][T11947] hub 1-0:1.0: 1 port detected [ 469.653949][T12079] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.793'. [ 473.358617][T12116] nvme_fcloop: unknown parameter or missing value '7="­’ł;¤°&Lė=j³"Yq'R"' [ 482.505499][T12263] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3302266462.2417750473.2276798763), cmd(3) [ 484.508573][T12283] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.2175733653), cmd(3) [ 484.864187][T12293] sctp: [Deprecated]: syz.3.824 (pid 12293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.864187][T12293] Use struct sctp_sack_info instead [ 486.914078][T12321] hub 1-0:1.0: USB hub found [ 487.022020][T12321] hub 1-0:1.0: 1 port detected [ 489.703333][T12371] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.833'. [ 496.275228][T12435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.275520][T12435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.275693][T12435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.276070][T12435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.312031][T12478] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.845'. [ 497.619251][T12487] hub 1-0:1.0: USB hub found [ 497.621835][T12487] hub 1-0:1.0: 1 port detected [ 497.669081][T12481] bond0: invalid ARP target specified [ 498.085531][T12501] futex_wake_op: syz.1.848 tries to shift op by -2048; fix this program [ 498.086090][T12501] futex_wake_op: syz.1.848 tries to shift op by -2048; fix this program [ 498.335799][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.335842][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 498.335871][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.335900][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 498.689486][T12494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.689675][T12494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 498.689833][T12494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.690000][T12494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.590032][T12525] __vm_enough_memory: pid: 12525, comm: syz.1.860, bytes: 4398046457856 not enough memory for the allocation [ 500.444233][T12531] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 500.495897][T12540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.496151][T12540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.496381][T12540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 500.496603][T12540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.445144][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.445214][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.552915][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 502.552959][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 502.552959][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 502.553051][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 504.426457][T12605] WARNING! power/level is deprecated; use power/control instead [ 505.302419][T12615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.302627][T12615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.302787][T12615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.302951][T12615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.999613][T12632] sctp: [Deprecated]: syz.1.865 (pid 12632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.999613][T12632] Use struct sctp_sack_info instead [ 507.334929][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 507.334970][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 507.334998][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 507.335025][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 510.017806][T12691] Setting dangerous option i915.mitigations - tainting kernel [ 510.033459][T12691] Bad "i915.mitigations=,!];", '];' is unknown [ 512.479117][T12733] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.878'. [ 514.350210][T12761] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 516.129041][T12772] __vm_enough_memory: pid: 12772, comm: syz.3.883, bytes: 4398046457856 not enough memory for the allocation [ 516.748676][T12773] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 517.895591][T12805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.895843][T12805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.896059][T12805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.896282][T12805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.734568][T12839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.734753][T12839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 519.734914][T12839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 519.735085][T12839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.732019][T12857] hub 1-0:1.0: USB hub found [ 520.735295][T12857] hub 1-0:1.0: 1 port detected [ 520.736397][T12854] bond0: invalid ARP target specified [ 521.734088][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 521.734129][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.734157][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 521.734220][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 523.138214][T12902] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 523.316194][T12901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.316408][T12901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.317829][T12901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.318359][T12901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.685945][T12935] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.901'. [ 525.325413][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 525.325453][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 525.325481][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.325509][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 526.230454][T12944] Setting dangerous option i915.mitigations - tainting kernel [ 526.230705][T12944] Bad "i915.mitigations=,!];", '];' is unknown [ 526.242201][T12947] futex_wake_op: syz.3.906 tries to shift op by -2048; fix this program [ 526.242474][T12947] futex_wake_op: syz.3.906 tries to shift op by -2048; fix this program [ 526.821020][T12969] ======================================================= [ 526.821020][T12969] WARNING: The mand mount option has been deprecated and [ 526.821020][T12969] and is ignored by this kernel. Remove the mand [ 526.821020][T12969] option from the mount to silence this warning. [ 526.821020][T12969] ======================================================= [ 528.361371][T12988] FAULT_INJECTION: forcing a failure. [ 528.361371][T12988] name failslab, interval 1, probability 0, space 0, times 0 [ 528.361496][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.3.909 Tainted: G U syzkaller #0 PREEMPT(full) [ 528.361534][T12988] Tainted: [U]=USER [ 528.361543][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.361567][T12988] Call Trace: [ 528.361577][T12988] [ 528.361587][T12988] dump_stack_lvl+0x100/0x190 [ 528.361680][T12988] should_fail_ex.cold+0x5/0xa [ 528.361736][T12988] should_failslab+0xc2/0x120 [ 528.361833][T12988] __kmalloc_noprof+0xfc/0x840 [ 528.361904][T12988] ? security_inode_alloc+0x3b/0x2c0 [ 528.362003][T12988] ? sk_prot_alloc+0x10b/0x2a0 [ 528.362073][T12988] sk_prot_alloc+0x10b/0x2a0 [ 528.362102][T12988] sk_alloc+0x36/0xe80 [ 528.362138][T12988] packet_create+0x127/0x8e0 [ 528.362204][T12988] __sock_create+0x339/0x860 [ 528.362263][T12988] __sys_socket+0x14d/0x260 [ 528.362293][T12988] ? __pfx___sys_socket+0x10/0x10 [ 528.362332][T12988] __x64_sys_socket+0x72/0xb0 [ 528.362358][T12988] ? lockdep_hardirqs_on+0x7d/0x110 [ 528.362451][T12988] do_syscall_64+0x121/0x770 [ 528.362524][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.362564][T12988] RIP: 0033:0x7f757299e159 [ 528.362587][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.362611][T12988] RSP: 002b:00007f756ffae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 528.362668][T12988] RAX: ffffffffffffffda RBX: 00007f7572c26450 RCX: 00007f757299e159 [ 528.362686][T12988] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 528.362702][T12988] RBP: 00007f7572a3503b R08: 0000000000000000 R09: 0000000000000000 [ 528.362718][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.362734][T12988] R13: 00007f7572c264e8 R14: 00007f7572c26450 R15: 00007ffcec8173a8 [ 528.362769][T12988] [ 529.867860][T13020] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 530.062017][T13023] ecryptfs_parse_packet_length: Error parsing packet length [ 530.062067][T13023] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 533.785217][T13060] __vm_enough_memory: pid: 13060, comm: syz.2.917, bytes: 4398046457856 not enough memory for the allocation [ 534.444961][T13063] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 540.262886][T13175] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.932'. [ 540.372082][T13179] ecryptfs_parse_packet_length: Error parsing packet length [ 540.372104][T13179] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 549.059113][T13310] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.947'. [ 554.309231][T13377] __vm_enough_memory: pid: 13377, comm: syz.0.961, bytes: 4398046457856 not enough memory for the allocation [ 554.801038][T13399] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 555.468698][T13386] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 557.479191][T13427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 557.479380][T13427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 557.479547][T13427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.479705][T13427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.538857][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.539155][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.539179][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.539225][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 561.798807][T13503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.798994][T13503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 561.799155][T13503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.799330][T13503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.577283][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.577346][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.835824][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 563.835906][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 563.835936][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 563.836004][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 563.978968][T13542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 563.979144][T13542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 563.979302][T13542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.979469][T13542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.639225][T13576] FAULT_INJECTION: forcing a failure. [ 565.639225][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 565.639268][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.1.983 Tainted: G U syzkaller #0 PREEMPT(full) [ 565.639303][T13576] Tainted: [U]=USER [ 565.639312][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.639327][T13576] Call Trace: [ 565.639335][T13576] [ 565.639345][T13576] dump_stack_lvl+0x100/0x190 [ 565.639388][T13576] should_fail_ex.cold+0x5/0xa [ 565.639423][T13576] should_failslab+0xc2/0x120 [ 565.639456][T13576] __kmalloc_noprof+0xfc/0x840 [ 565.639483][T13576] ? security_inode_alloc+0x3b/0x2c0 [ 565.639518][T13576] ? sk_prot_alloc+0x10b/0x2a0 [ 565.639552][T13576] sk_prot_alloc+0x10b/0x2a0 [ 565.639578][T13576] sk_alloc+0x36/0xe80 [ 565.639608][T13576] packet_create+0x127/0x8e0 [ 565.639642][T13576] __sock_create+0x339/0x860 [ 565.639675][T13576] __sys_socket+0x14d/0x260 [ 565.639704][T13576] ? __pfx___sys_socket+0x10/0x10 [ 565.639742][T13576] __x64_sys_socket+0x72/0xb0 [ 565.639769][T13576] ? lockdep_hardirqs_on+0x7d/0x110 [ 565.639815][T13576] do_syscall_64+0x121/0x770 [ 565.639857][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.639884][T13576] RIP: 0033:0x7f060eb9e159 [ 565.639906][T13576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.639929][T13576] RSP: 002b:00007f060fa0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 565.639952][T13576] RAX: ffffffffffffffda RBX: 00007f060ee26450 RCX: 00007f060eb9e159 [ 565.639968][T13576] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 565.639982][T13576] RBP: 00007f060ec3503b R08: 0000000000000000 R09: 0000000000000000 [ 565.639995][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.640010][T13576] R13: 00007f060ee264e8 R14: 00007f060ee26450 R15: 00007fffae77a298 [ 565.640045][T13576] [ 565.984592][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 565.984633][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 565.984660][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 565.984688][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.894022][T13603] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5617] was attempted by "m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’’’?%)…’’’’H%)…’’’’ƒ#)…’’’’m%)…’’’’$()…’’’’@()…’’ [ 568.088574][T13606] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 570.848024][T13640] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 571.558553][T13639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.558801][T13639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.559028][T13639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.559251][T13639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.020618][T13676] FAULT_INJECTION: forcing a failure. [ 573.020618][T13676] name failslab, interval 1, probability 0, space 0, times 0 [ 573.020658][T13676] CPU: 1 UID: 0 PID: 13676 Comm: syz.0.996 Tainted: G U syzkaller #0 PREEMPT(full) [ 573.020692][T13676] Tainted: [U]=USER [ 573.020701][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.020715][T13676] Call Trace: [ 573.020731][T13676] [ 573.020741][T13676] dump_stack_lvl+0x100/0x190 [ 573.020781][T13676] should_fail_ex.cold+0x5/0xa [ 573.020814][T13676] should_failslab+0xc2/0x120 [ 573.020846][T13676] __kmalloc_noprof+0xfc/0x840 [ 573.020873][T13676] ? security_inode_alloc+0x3b/0x2c0 [ 573.020907][T13676] ? sk_prot_alloc+0x10b/0x2a0 [ 573.020939][T13676] sk_prot_alloc+0x10b/0x2a0 [ 573.020966][T13676] sk_alloc+0x36/0xe80 [ 573.021001][T13676] packet_create+0x127/0x8e0 [ 573.021035][T13676] __sock_create+0x339/0x860 [ 573.021068][T13676] __sys_socket+0x14d/0x260 [ 573.021094][T13676] ? __pfx___sys_socket+0x10/0x10 [ 573.021131][T13676] __x64_sys_socket+0x72/0xb0 [ 573.021157][T13676] ? lockdep_hardirqs_on+0x7d/0x110 [ 573.021193][T13676] do_syscall_64+0x121/0x770 [ 573.021232][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.021258][T13676] RIP: 0033:0x7fbfc2f9e159 [ 573.021279][T13676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.021301][T13676] RSP: 002b:00007fbfc054b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 573.021326][T13676] RAX: ffffffffffffffda RBX: 00007fbfc3226450 RCX: 00007fbfc2f9e159 [ 573.021343][T13676] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 573.021358][T13676] RBP: 00007fbfc303503b R08: 0000000000000000 R09: 0000000000000000 [ 573.021373][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.021389][T13676] R13: 00007fbfc32264e8 R14: 00007fbfc3226450 R15: 00007ffea3efde48 [ 573.021425][T13676] [ 573.631246][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.631289][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.631317][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.631345][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 577.593316][T13741] random: crng reseeded on system resumption [ 579.313144][T13781] FAULT_INJECTION: forcing a failure. [ 579.313144][T13781] name failslab, interval 1, probability 0, space 0, times 0 [ 579.313198][T13781] CPU: 1 UID: 0 PID: 13781 Comm: syz.2.1011 Tainted: G U syzkaller #0 PREEMPT(full) [ 579.313234][T13781] Tainted: [U]=USER [ 579.313243][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.313258][T13781] Call Trace: [ 579.313267][T13781] [ 579.313276][T13781] dump_stack_lvl+0x100/0x190 [ 579.313316][T13781] should_fail_ex.cold+0x5/0xa [ 579.313349][T13781] should_failslab+0xc2/0x120 [ 579.313383][T13781] __kmalloc_noprof+0xfc/0x840 [ 579.313411][T13781] ? security_inode_alloc+0x3b/0x2c0 [ 579.313444][T13781] ? sk_prot_alloc+0x10b/0x2a0 [ 579.313476][T13781] sk_prot_alloc+0x10b/0x2a0 [ 579.313504][T13781] sk_alloc+0x36/0xe80 [ 579.313537][T13781] packet_create+0x127/0x8e0 [ 579.313573][T13781] __sock_create+0x339/0x860 [ 579.313606][T13781] __sys_socket+0x14d/0x260 [ 579.313634][T13781] ? __pfx___sys_socket+0x10/0x10 [ 579.313672][T13781] __x64_sys_socket+0x72/0xb0 [ 579.313696][T13781] ? lockdep_hardirqs_on+0x7d/0x110 [ 579.313732][T13781] do_syscall_64+0x121/0x770 [ 579.313771][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.313797][T13781] RIP: 0033:0x7f326b19e159 [ 579.313818][T13781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.313840][T13781] RSP: 002b:00007f326bfe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 579.313865][T13781] RAX: ffffffffffffffda RBX: 00007f326b426450 RCX: 00007f326b19e159 [ 579.313880][T13781] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 579.313894][T13781] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 579.313906][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.313919][T13781] R13: 00007f326b4264e8 R14: 00007f326b426450 R15: 00007ffddb10de08 [ 579.313949][T13781] [ 580.839951][T13809] ecryptfs_parse_packet_length: Error parsing packet length [ 580.839972][T13809] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 581.216038][T13807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.216254][T13807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.216425][T13807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.216606][T13807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.266734][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 583.266776][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 583.266805][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 583.266867][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 584.393775][T13868] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191037926), cmd(3) [ 587.165598][T13896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 587.165783][T13896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.165951][T13896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 587.166121][T13896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.414737][T13927] ecryptfs_parse_packet_length: Error parsing packet length [ 588.414758][T13927] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 589.225119][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.225162][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 589.225179][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 589.225228][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.741797][T13960] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(68.0.2191079313), cmd(3) [ 595.777207][T13997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.777415][T13997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.777586][T13997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.777746][T13997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.611320][T14031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 597.611905][T14031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 597.612071][T14031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 597.612303][T14031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.649954][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 599.649996][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 599.650016][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 599.650070][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.536798][T14102] __vm_enough_memory: pid: 14102, comm: syz.1.1052, bytes: 4398046457856 not enough memory for the allocation [ 603.081043][T14111] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 604.423845][T14138] kafs: addr_prefs: Invalid Command [ 604.872845][T14154] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.1055'. [ 605.002683][ T31] audit: type=1807 audit(4294969440.037:2): UNKNOWN=0"ū]$|Ė1jė0B|d™¹żÓ‰OŸ¬+ö×/ÉéxŌóČõWÓ¦–Ó^ø“gq%HĢˆrźOŽ res=0 [ 605.004787][ T31] audit: type=1802 audit(4294969440.047:3): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1057" res=0 errno=0 [ 605.040653][T14156] ima: policy update failed [ 605.044552][ T31] audit: type=1802 audit(4294969440.077:4): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1057" res=0 errno=0 [ 611.051433][T14250] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.1070'. [ 614.623158][T14291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 614.623332][T14291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 614.623493][T14291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.650968][T14291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.003274][T14317] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.1079'. [ 616.681787][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 616.681830][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.681859][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 616.681886][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 620.795350][T14381] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 622.383205][T14406] db_root: cannot open: /sy [ 623.688559][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.688622][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.558096][ T31] audit: type=1804 audit(4294969459.699:5): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.1094" name="ima_policy_written" res=0 errno=-17 [ 624.558275][ T31] audit: type=1807 audit(4294969459.699:6): UNKNOWN=0"ū]$|Ė1jė0B|d™¹żÓ‰OŸ¬+ö×/ÉéxŌóČõWÓ¦–Ó^ø“gq%HĢˆrźOŽ res=0 [ 624.558469][ T31] audit: type=1802 audit(4294969459.699:7): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1094" res=0 errno=0 [ 624.559842][T14440] ima: policy update failed [ 624.559984][ T31] audit: type=1802 audit(4294969459.699:8): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1094" res=0 errno=0 [ 626.671836][T14478] random: crng reseeded on system resumption [ 626.847572][T14450] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [16] [ 628.421554][T14503] IPVS: length: 8 != 21224 [ 632.219565][ T31] audit: type=1804 audit(4294969467.399:9): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.1108" name="ima_policy_written" res=0 errno=-17 [ 632.219621][ T31] audit: type=1807 audit(4294969467.399:10): UNKNOWN=0"ū]$|Ė1jė0B|d™¹żÓ‰OŸ¬+ö×/ÉéxŌóČõWÓ¦–Ó^ø“gq%HĢˆrźOŽ res=0 [ 632.219660][ T31] audit: type=1802 audit(4294969467.399:11): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1108" res=0 errno=0 [ 632.294964][T14564] ima: policy update failed [ 632.296441][ T31] audit: type=1802 audit(4294969467.479:12): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1108" res=0 errno=0 [ 636.021442][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 637.053002][T14621] tipc: can't start tipc send workqueue [ 637.165459][T14643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 637.165733][T14643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 637.165979][T14643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 637.166253][T14643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.017844][T14667] : Can't lookup blockdev [ 638.035230][T14665] FAULT_INJECTION: forcing a failure. [ 638.035230][T14665] name failslab, interval 1, probability 0, space 0, times 0 [ 638.035276][T14665] CPU: 0 UID: 0 PID: 14665 Comm: syz.2.1122 Tainted: G U syzkaller #0 PREEMPT(full) [ 638.035313][T14665] Tainted: [U]=USER [ 638.035322][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.035338][T14665] Call Trace: [ 638.035347][T14665] [ 638.035358][T14665] dump_stack_lvl+0x100/0x190 [ 638.035399][T14665] should_fail_ex.cold+0x5/0xa [ 638.035434][T14665] should_failslab+0xc2/0x120 [ 638.035469][T14665] __kmalloc_cache_noprof+0x91/0x6d0 [ 638.035645][T14665] ? sget_fc+0x117/0x1f20 [ 638.035701][T14665] ? sget_fc+0x1ba/0x1f20 [ 638.035732][T14665] sget_fc+0x1ba/0x1f20 [ 638.035766][T14665] ? __pfx_set_anon_super_fc+0x10/0x10 [ 638.035833][T14665] ? __pfx_sget_fc+0x10/0x10 [ 638.035856][T14665] ? refcount_dec_not_one+0x136/0x1c0 [ 638.035953][T14665] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 638.035984][T14665] ? __kasan_kmalloc+0xaa/0xb0 [ 638.036042][T14665] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 638.036079][T14665] ? __kasan_kmalloc+0xaa/0xb0 [ 638.036113][T14665] ? __pfx_mqueue_fill_super+0x10/0x10 [ 638.036191][T14665] get_tree_nodev+0x28/0x190 [ 638.036220][T14665] mqueue_get_tree+0xf1/0x130 [ 638.036250][T14665] vfs_get_tree+0x92/0x320 [ 638.036288][T14665] fc_mount_longterm+0x1a/0x270 [ 638.036354][T14665] mq_init_ns+0x482/0x820 [ 638.036421][T14665] copy_ipcs+0x3dd/0x7e0 [ 638.036460][T14665] create_new_namespaces+0x20a/0xac0 [ 638.036512][T14665] ? security_capable+0x80/0x260 [ 638.036558][T14665] unshare_nsproxy_namespaces+0xf2/0x220 [ 638.036602][T14665] ksys_unshare+0x4a2/0xa70 [ 638.036629][T14665] ? __pfx_ksys_unshare+0x10/0x10 [ 638.036670][T14665] __x64_sys_unshare+0x31/0x40 [ 638.036696][T14665] do_syscall_64+0x121/0x770 [ 638.036737][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.036765][T14665] RIP: 0033:0x7f326b19e159 [ 638.036787][T14665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.036811][T14665] RSP: 002b:00007f326bfe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 638.036837][T14665] RAX: ffffffffffffffda RBX: 00007f326b426450 RCX: 00007f326b19e159 [ 638.036855][T14665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 638.036871][T14665] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 638.036889][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.036905][T14665] R13: 00007f326b4264e8 R14: 00007f326b426450 R15: 00007ffddb10de08 [ 638.036941][T14665] [ 639.204502][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 639.204540][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 639.204568][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.204596][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.238267][T14677] random: crng reseeded on system resumption [ 641.290934][T14700] mac80211.ieee80211_default_rc_algo: string parameter too long [ 642.864726][T14722] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.1127'. [ 644.885407][T14746] syz.2.1131 (14746) used greatest stack depth: 19896 bytes left [ 645.598444][T14755] openvswitch: netlink: Message has 4 unknown bytes. [ 648.910901][T14811] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.1143'. [ 649.730631][T14831] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1145'. [ 651.268429][T14836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 651.270059][T14836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 651.271391][T14836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.299092][T14836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.346438][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.291216][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.291257][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 653.291316][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 654.388092][T14903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 654.388263][T14903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 654.388428][T14903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 654.388578][T14903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 656.395177][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 656.395216][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.395243][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 656.395308][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.176416][T14944] openvswitch: netlink: Message has 4 unknown bytes. [ 660.497175][T14989] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.497937][T14989] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 660.498108][T14989] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.498274][T14989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.523930][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 662.523971][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.524001][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.524101][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.559795][T15035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 662.560106][T15035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.560336][T15035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.560996][T15035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 664.592626][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 664.592671][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 664.592699][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 664.592763][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 667.973134][T15134] : Can't lookup blockdev [ 668.007430][T15123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.007626][T15123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.007746][T15123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.007866][T15123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 670.005090][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.005130][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.005158][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.005220][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.728787][T15170] vhci_hcd vhci_hcd.1: invalid port number 41 [ 670.728895][T15170] vhci_hcd vhci_hcd.1: default hub control req: ec2a v6846 i0029 l41133 [ 674.568196][T15242] : Can't lookup blockdev [ 677.028227][T15272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.028401][T15272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.028561][T15272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.028765][T15272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.572211][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 679.077730][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 679.077785][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.077814][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.077882][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.246362][T15372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.247113][T15372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.247291][T15372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.247448][T15372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.799764][T15391] FAULT_INJECTION: forcing a failure. [ 684.799764][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 684.799810][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.2.1211 Tainted: G U syzkaller #0 PREEMPT(full) [ 684.799843][T15391] Tainted: [U]=USER [ 684.799851][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.799864][T15391] Call Trace: [ 684.799881][T15391] [ 684.799897][T15391] dump_stack_lvl+0x100/0x190 [ 684.799939][T15391] should_fail_ex.cold+0x5/0xa [ 684.799976][T15391] should_failslab+0xc2/0x120 [ 684.800017][T15391] __kmalloc_noprof+0xfc/0x840 [ 684.800047][T15391] ? tracepoint_add_func+0x3a8/0x1150 [ 684.800120][T15391] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 684.800153][T15391] tracepoint_add_func+0x3a8/0x1150 [ 684.800188][T15391] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 684.800227][T15391] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 684.800257][T15391] tracepoint_probe_register+0xc4/0x110 [ 684.800292][T15391] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 684.800324][T15391] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 684.800354][T15391] ? relay_open+0x793/0xa00 [ 684.800386][T15391] blk_register_tracepoints+0x75/0x440 [ 684.800413][T15391] blk_trace_setup_finalize+0x320/0x3a0 [ 684.800442][T15391] blk_trace_setup+0x254/0x440 [ 684.800478][T15391] ? __pfx_blk_trace_setup+0x10/0x10 [ 684.800505][T15391] ? vsnprintf+0x4c5/0x1300 [ 684.800619][T15391] ? __pfx_vsnprintf+0x10/0x10 [ 684.800673][T15391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.800708][T15391] ? do_vfs_ioctl+0x226/0x13e0 [ 684.800783][T15391] blk_trace_ioctl+0x245/0x320 [ 684.800822][T15391] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 684.800857][T15391] ? find_held_lock+0x2b/0x80 [ 684.800894][T15391] ? hook_file_ioctl_common+0x140/0x440 [ 684.801000][T15391] blkdev_ioctl+0x17c/0x6f0 [ 684.801094][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 684.801130][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 684.801163][T15391] __x64_sys_ioctl+0x18e/0x210 [ 684.801192][T15391] do_syscall_64+0x121/0x770 [ 684.801232][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.801260][T15391] RIP: 0033:0x7f326b19e159 [ 684.801283][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.801306][T15391] RSP: 002b:00007f326c087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.801332][T15391] RAX: ffffffffffffffda RBX: 00007f326b425fa0 RCX: 00007f326b19e159 [ 684.801350][T15391] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 684.801367][T15391] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 684.801383][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.801399][T15391] R13: 00007f326b426038 R14: 00007f326b425fa0 R15: 00007ffddb10de08 [ 684.801435][T15391] [ 684.805321][T15391] ------------[ cut here ]------------ [ 684.805334][T15391] ret [ 684.805356][T15391] WARNING: kernel/trace/blktrace.c:1336 at blk_register_tracepoints+0x358/0x440, CPU#0: syz.2.1211/15391 [ 684.821078][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.821139][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.131583][T15391] Modules linked in: [ 685.136894][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.2.1211 Tainted: G U syzkaller #0 PREEMPT(full) [ 685.148207][T15391] Tainted: [U]=USER [ 685.152029][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.162567][T15391] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 685.169335][T15391] Code: f7 ff 5b c3 cc cc cc cc e8 d5 8a f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 c7 8a f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 b9 8a f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 ab 8a f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 685.189053][T15391] RSP: 0018:ffffc900050cfb00 EFLAGS: 00010283 [ 685.195222][T15391] RAX: 0000000000060c37 RBX: 00000000fffffff4 RCX: ffffc90005a01000 [ 685.203219][T15391] RDX: 0000000000080000 RSI: ffffffff8213d717 RDI: ffff888028358000 [ 685.211347][T15391] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 685.219418][T15391] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000e [ 685.227461][T15391] R13: ffff888027594130 R14: ffffc900050cfda0 R15: 0000000000000001 [ 685.235628][T15391] FS: 00007f326c0876c0(0000) GS:ffff888123b5d000(0000) knlGS:0000000000000000 [ 685.244584][T15391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.251244][T15391] CR2: 00007f326c066d58 CR3: 000000001e754000 CR4: 00000000003526f0 [ 685.259305][T15391] Call Trace: [ 685.262998][T15391] [ 685.266290][T15391] blk_trace_setup_finalize+0x320/0x3a0 [ 685.271866][T15391] blk_trace_setup+0x254/0x440 [ 685.276695][T15391] ? __pfx_blk_trace_setup+0x10/0x10 [ 685.282011][T15391] ? vsnprintf+0x4c5/0x1300 [ 685.286706][T15391] ? __pfx_vsnprintf+0x10/0x10 [ 685.291518][T15391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 685.297464][T15391] ? do_vfs_ioctl+0x226/0x13e0 [ 685.302231][T15391] blk_trace_ioctl+0x245/0x320 [ 685.307052][T15391] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 685.312380][T15391] ? find_held_lock+0x2b/0x80 [ 685.317151][T15391] ? hook_file_ioctl_common+0x140/0x440 [ 685.322740][T15391] blkdev_ioctl+0x17c/0x6f0 [ 685.327344][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 685.332408][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 685.337529][T15391] __x64_sys_ioctl+0x18e/0x210 [ 685.342306][T15391] do_syscall_64+0x121/0x770 [ 685.346972][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.352879][T15391] RIP: 0033:0x7f326b19e159 [ 685.357345][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.377598][T15391] RSP: 002b:00007f326c087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.386397][T15391] RAX: ffffffffffffffda RBX: 00007f326b425fa0 RCX: 00007f326b19e159 [ 685.394474][T15391] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 685.402465][T15391] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 685.411061][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.419096][T15391] R13: 00007f326b426038 R14: 00007f326b425fa0 R15: 00007ffddb10de08 [ 685.427142][T15391] [ 685.430172][T15391] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 685.437447][T15391] CPU: 0 UID: 0 PID: 15391 Comm: syz.2.1211 Tainted: G U syzkaller #0 PREEMPT(full) [ 685.448383][T15391] Tainted: [U]=USER [ 685.452195][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.462270][T15391] Call Trace: [ 685.465567][T15391] [ 685.468508][T15391] dump_stack_lvl+0x100/0x190 [ 685.473205][T15391] vpanic+0x553/0x970 [ 685.477234][T15391] ? __pfx_vpanic+0x10/0x10 [ 685.481743][T15391] panic+0xd1/0xe0 [ 685.485473][T15391] ? __pfx_panic+0x10/0x10 [ 685.489924][T15391] check_panic_on_warn.cold+0x19/0x34 [ 685.495322][T15391] ? blk_register_tracepoints+0x358/0x440 [ 685.501056][T15391] __warn.cold+0x191/0x318 [ 685.505508][T15391] __report_bug+0x30f/0x440 [ 685.510164][T15391] ? blk_register_tracepoints+0x358/0x440 [ 685.515915][T15391] ? __pfx___report_bug+0x10/0x10 [ 685.520981][T15391] ? __mutex_unlock_slowpath+0x35d/0x930 [ 685.526657][T15391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.532675][T15391] ? blk_register_tracepoints+0x358/0x440 [ 685.538422][T15391] report_bug+0xb3/0x220 [ 685.542879][T15391] ? blk_register_tracepoints+0x358/0x440 [ 685.548630][T15391] handle_bug+0x16a/0x2a0 [ 685.552992][T15391] exc_invalid_op+0x17/0x50 [ 685.557540][T15391] asm_exc_invalid_op+0x1a/0x20 [ 685.564245][T15391] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 685.570697][T15391] Code: f7 ff 5b c3 cc cc cc cc e8 d5 8a f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 c7 8a f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 b9 8a f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 ab 8a f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 685.590328][T15391] RSP: 0018:ffffc900050cfb00 EFLAGS: 00010283 [ 685.596415][T15391] RAX: 0000000000060c37 RBX: 00000000fffffff4 RCX: ffffc90005a01000 [ 685.604431][T15391] RDX: 0000000000080000 RSI: ffffffff8213d717 RDI: ffff888028358000 [ 685.612450][T15391] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 685.622315][T15391] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000e [ 685.630313][T15391] R13: ffff888027594130 R14: ffffc900050cfda0 R15: 0000000000000001 [ 685.638318][T15391] ? blk_register_tracepoints+0x357/0x440 [ 685.644110][T15391] blk_trace_setup_finalize+0x320/0x3a0 [ 685.649690][T15391] blk_trace_setup+0x254/0x440 [ 685.654498][T15391] ? __pfx_blk_trace_setup+0x10/0x10 [ 685.659811][T15391] ? vsnprintf+0x4c5/0x1300 [ 685.664356][T15391] ? __pfx_vsnprintf+0x10/0x10 [ 685.669174][T15391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 685.675108][T15391] ? do_vfs_ioctl+0x226/0x13e0 [ 685.679924][T15391] blk_trace_ioctl+0x245/0x320 [ 685.684723][T15391] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 685.690034][T15391] ? find_held_lock+0x2b/0x80 [ 685.694738][T15391] ? hook_file_ioctl_common+0x140/0x440 [ 685.700319][T15391] blkdev_ioctl+0x17c/0x6f0 [ 685.704842][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 685.709888][T15391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 685.714937][T15391] __x64_sys_ioctl+0x18e/0x210 [ 685.719735][T15391] do_syscall_64+0x121/0x770 [ 685.724363][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.730262][T15391] RIP: 0033:0x7f326b19e159 [ 685.734692][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.754325][T15391] RSP: 002b:00007f326c087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.762752][T15391] RAX: ffffffffffffffda RBX: 00007f326b425fa0 RCX: 00007f326b19e159 [ 685.770733][T15391] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 685.778721][T15391] RBP: 00007f326b23503b R08: 0000000000000000 R09: 0000000000000000 [ 685.786703][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.794685][T15391] R13: 00007f326b426038 R14: 00007f326b425fa0 R15: 00007ffddb10de08 [ 685.802678][T15391] [ 685.805967][T15391] Kernel Offset: disabled [ 685.810291][T15391] Rebooting in 86400 seconds..