last executing test programs: 10.618100608s ago: executing program 3 (id=697): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0xc4}) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r3, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) setns(0xc9, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = socket(0x1f, 0x2, 0x0) getpeername$auto(r4, 0x0, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r3) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xd0, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ALGO_NAME={0xac, 0x2, '/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x9}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008070}, 0x20004801) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 10.477366831s ago: executing program 2 (id=699): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x3075c0, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0x8000000000000000, 0x8000) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01ff25bd7020f8dbdf2501fffe0008000200d9b3a782abdd44938a23ddd789fb784b91826170350a7ff861904ca459db8b7e20374ecf35b61ada6a0a0dd02b4a2c5b883e261f5e2b9d66f9890e67d46ccc", @ANYBLOB="08000100486652000800"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) munmap$auto(0x8000, 0xffffffff) socket(0x11, 0x80003, 0x300) mprotect$auto(0x0, 0x8, 0x2000006) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001200), r2) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0xc0105502, r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4008af83, 0x0) unshare$auto(0x40000080) 10.262167254s ago: executing program 0 (id=700): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) unshare$auto(0x20700) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) pselect6$auto(0x2005, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x12941, 0x0) unshare$auto(0x40000080) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) writev$auto(r2, &(0x7f0000000080)={0x0, 0x400000000007111}, 0xffffffff80000000) bpf$auto(0x9, 0x0, 0x9) unshare$auto(0x8000000) semget$auto(0x840, 0x6, 0x8000) ioctl$auto_USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000002c0)={0xffffff28, 0x4, 0x9280000, &(0x7f00000001c0)="2b9f1d97b258c87a085916b35b1eaddf972e3c6adac566a84b7c8fc50ccd301c49446c706915fe2ced34929b7357e48fd93adc6f07c6e5073ef98ad083ba82d2976e46c3bf48717ed26c82a1fd84e375437f711a65dca2df66d7dec44e97bf6ce1c2ac2e968d7549d266b4042ece24be33edef00a883f322e00a6bd76bacb57e25c51211d2e999ba9c0eba5900bfc00269f725f350e8ea97af9aab0eb5170e93"}) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x8000) 8.187467974s ago: executing program 3 (id=702): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) bind$auto(r1, &(0x7f0000000040)=@nl=@unspec, 0x3) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x65) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_INFO(0xffffffff, 0x3, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x1, 0x4, 0xffff}, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x2, 0xd, 0xffffffffffffffff, 0x35, 0xf, 0x7, 0x3494, 0x0, 0x9, @raw=0xa6, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80400100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b4060000", @ANYRES16, @ANYBLOB="210028bd7000fedbdf25030000003400058008001e004b00", @ANYRES32=r0, @ANYBLOB="1d00300002f6fb52dbc946e1e778b206df245c26d2cacd6da6a16481a600000008003100", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00'], 0x6b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) prctl$auto(0x29, 0x3, r4, 0x0, 0x4) r5 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) execveat$auto(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.224993923s ago: executing program 3 (id=703): fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x20001, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c4", 0x2b8) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x0, 0x2, 0xeb1, 0xfffffffffffffff7, 0xb) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x6, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x1e, 0x2, 0x10006) mmap$auto(0x0, 0x2020009, 0x3, 0xf0, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000b, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.217883521s ago: executing program 0 (id=711): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x0, 0x10, 0x0, 0x17) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x9, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x10000000800007ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) unshare$auto(0x2) socket(0x2d, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f00000000c0)={{0x27, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0x8, 0x80000000000001, 0x3, 0x9, 0x6, 0xfff7, 0x14, 0x200, @inferred, @raw=0x5}) setresuid$auto(0x8, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffd, 0x6, 0x80000000, 0x200010000eb1, 0xffffffffffffffff, 0x400000020007ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.216661615s ago: executing program 1 (id=704): mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) getrlimit$auto(0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x9, 0x0, 0x7fffffff) getsockopt$auto(r0, 0x6, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/conf/veth1_vlan/arp_ignore\x00', 0xa802, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat$auto(0x0, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c090}, 0x10) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2483, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x400400, 0x3}, 0x2, 0x7) 7.216493265s ago: executing program 2 (id=705): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/33, 0x21) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r2, 0x0, 0x202, 0xfffff000) r3 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r4) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="e0140000", @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket(0xf, 0x3, 0x2) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) getsockname$auto(r3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x1}, &(0x7f0000000380)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 5.331651074s ago: executing program 1 (id=706): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0xb) socket(0x2b, 0x6, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) timer_create$auto_CLOCK_TAI(0xb, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x810) bind$auto(r1, 0x0, 0x66) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.259781018s ago: executing program 2 (id=707): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi22\x00', 0x1, 0x0) ioctl$auto(0x3, 0xc0905664, 0x38) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) signalfd$auto(r1, 0x0, 0x8) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) write$auto(r2, &(0x7f0000000040)='/sys/kernel/debug/drS/vkms/Wri1/edid_override\x00', 0x20004) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zram0\x00', 0x2000, 0x0) ioctl$auto_BLKBSZSET(r3, 0x40081271, &(0x7f0000000180)=0x800) readv$auto(r1, &(0x7f0000000280)={&(0x7f0000000180)="5034047c19233e7597d750cb674c63b014fac9d7bb415cd62ca27d005402ab007354391b828589cb0fafb8683aa2c3b26a166f7b6f67d098e8e3d09d0d8a3b59bd39d013e030471853cacde34841b59d8c44d8b05b085bf8ba1c2e9886080d1b7584947e239aa3e07588708c28503fa91793fa5f7671cfbf1fa0d0e59b94625fb8821db8d6d44fa783f255c85a2b0e34b5735c326dfa2c0028a4a9c3907f7cfb7e2e0260cf51ea5889f68038be69e1c31e7b7eba0e400d95ae84b29896f7e39eb1c0605fdbbf87952389f87efda89e92113a228e524a1d09e7f2aca9cf018780eedb1188ee94438d05f5"}, 0xb) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b32, 0x9) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67c4, 0x7ff) r5 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x3679) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) 5.203638164s ago: executing program 0 (id=708): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x28, 0x1, 0x4000000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setreuid$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x0) 5.193327937s ago: executing program 3 (id=709): mmap$auto(0xfffffffffffffffc, 0x20009, 0xdf, 0x210, 0xffffffffffffffff, 0x7) r0 = prctl$auto(0xffff8000, 0x0, 0x0, 0x4, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffbfffffffffd}, {0x100, 0x20001, 0x52, 0x2, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x4) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) ioctl$auto_TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r1 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x82042, 0x0) write$auto_vcs_fops_vc_screen(r2, &(0x7f0000000300)="e8d0046dbf2c0d37075e9b55ca623ec94e1777aab558b8b7713134a64a119c5e5f72363611ee3b885723bc50ff1080a13a3a79583d7c2b928c615146933a058f6e2403d8ec4e399006304b", 0x4b) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.312004136s ago: executing program 2 (id=710): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0x11, 0xa, 0x300) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, 0x0, 0x810) r3 = socket(0x2, 0x5, 0x0) r4 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x9, 0x2) ioctl$auto(r3, 0x2, r4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40001) ioprio_set$auto(0x2, 0x0, 0x4b34) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) bpf$auto(0x9, &(0x7f0000000100)=@enable_stats, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.154701656s ago: executing program 3 (id=712): statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r2, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) 4.012431162s ago: executing program 0 (id=713): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x9}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80c}, 0x4000081) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000340)={0x2bef, 0x9, 0x7, 0x6, 0x4c8}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x65) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1d, 0x0, 0xa5) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x101, 0x7fff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.215494092s ago: executing program 1 (id=714): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) unshare$auto(0x40000080) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x28, 0x0, 0xc) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mmap$auto(0x100000000000080, 0x7ff, 0x2, 0x11, 0xffffffffffffffff, 0x8007) write$auto(r1, 0x0, 0x5334) ioctl$auto(r0, 0x4b32, r0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$auto(r3, 0x800064bd, r3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x402, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) write$auto(r4, &(0x7f0000000500)='odev/\xdf\x00\x00\x00\x00H\xde\xe1\xcf\x8ch:\x11\xeah\xf4\xcc\xc6\xa6\xd9\xc3Y\xcb\xf4v6u\\\xd7hD\xfcw\xdb\x05\x11\x96ZP\x81\x87d\xa1#98\xcc\x9d\xc8\x8d\xf6\xdd\x11v(\xb0>$\x96-\xdf\x85(\xa0cq\xc5q\xa4\xad\xae\r\xb5\x8d\x81\xc6?\xd4\x7f\xd3\x1a\xe9\':\xe4\xebd\x97\x8bW^r\xe0\xc8\x85\x03\x04L:\x06\xb6\xe5\x91M\x82\xfeKM\xe0y\xd0\xd5\xb2\xfa\x1do\xa4 \xf6\xdaB\xef\xa6\x1a\x9f\xb6\\\xeb\xa9\x7f\xb3*\xaa9I\x8c,\xefD\x90\x97L!A\xbe\xd13\xc99\x8fF\xc8t\x9c\x06\x90\xb8 \xdc\x9f\x9d\xcaqc4\x10\xc5\xdd\x8c\xe7f{\\D\x86\x10\xe3%n\xbci,:\x8a#', 0x80000000) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 1.976464183s ago: executing program 2 (id=715): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd, @target_ifindex=r1, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) socket(0x1, 0x1, 0x1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) poll$auto(0x0, 0x5, 0x108) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe) 1.964941917s ago: executing program 0 (id=716): mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x7fffffff, 0x940009, 0x40df, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x200, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rt6_stats\x00', 0x4a0200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0xfffff00000000001, 0x3, 0x401, 0x10011, 0x401, 0xa7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/features/freeze_notification\x00', 0x1, 0x0) socket(0x1, 0x80003, 0x300) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x3f, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x4}, 0x2, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/neigh/vlan1/proxy_qlen\x00', 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) memfd_create$auto(0x0, 0xe) mq_open$auto(0x0, 0xfffd, 0xfff7, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 985.878905ms ago: executing program 0 (id=717): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/33, 0x21) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r2, 0x0, 0x202, 0xfffff000) r3 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r4) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="e0140000", @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket(0xf, 0x3, 0x2) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) getsockname$auto(r3, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x1}, &(0x7f0000000380)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 985.746785ms ago: executing program 1 (id=718): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/protocols\x00', 0x30100, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x18f5c1, 0x0) r3 = bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, r2, 0x4, 0x402f, 0x8, 0xfff, r2, 0x6, 0x3}, 0x6f5) sendfile$auto(r4, 0x3, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r4, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(r1, r3, 0xffffeffd) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0xc885) 985.632255ms ago: executing program 2 (id=719): fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x20001, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x2b8) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x0, 0x2, 0xeb1, 0xfffffffffffffff7, 0xb) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x6, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x1e, 0x2, 0x10006) mmap$auto(0x0, 0x2020009, 0x3, 0xf0, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) read$auto(0x3, 0x0, 0xf3c) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000b, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 985.515572ms ago: executing program 3 (id=720): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x0, 0x10, 0x0, 0x17) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x9, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x10000000800007ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) unshare$auto(0x2) socket(0x2d, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f00000000c0)={{0x27, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0x8, 0x80000000000001, 0x3, 0x9, 0x6, 0xfff7, 0x14, 0x200, @inferred, @raw=0x5}) setresuid$auto(0x8, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffd, 0x6, 0x80000000, 0x200010000eb1, 0xffffffffffffffff, 0x400000020007ffc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 248.237663ms ago: executing program 1 (id=721): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) pipe2$auto(0x0, 0x80) socket(0x2, 0x1, 0x106) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x6f) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 0s ago: executing program 1 (id=722): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r7, 0xc, 0x6) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r0, 0x921064a2, 0x20000000020000a) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r8, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socket(0x2, 0x80002, 0x73) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 62.154912][ T5600] cgroup: Unknown subsys name 'net' [ 62.243123][ T5600] cgroup: Unknown subsys name 'cpuset' [ 62.245661][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.426224][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.185097][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.186437][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.187379][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.187840][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.188293][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.188756][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.189472][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.198924][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.199180][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.201589][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.201780][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.202358][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.202438][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.203337][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.205113][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.206083][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.208369][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.209012][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.220554][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.235068][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.405140][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.405277][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.405419][ T5612] bridge_slave_0: entered allmulticast mode [ 66.406798][ T5612] bridge_slave_0: entered promiscuous mode [ 66.462525][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.462657][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.463590][ T5612] bridge_slave_1: entered allmulticast mode [ 66.466752][ T5612] bridge_slave_1: entered promiscuous mode [ 66.516734][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.516845][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.516915][ T5611] bridge_slave_0: entered allmulticast mode [ 66.517747][ T5611] bridge_slave_0: entered promiscuous mode [ 66.520469][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.520551][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.520653][ T5611] bridge_slave_1: entered allmulticast mode [ 66.522028][ T5611] bridge_slave_1: entered promiscuous mode [ 66.577584][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.610952][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.617491][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.649752][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.666864][ T5612] team0: Port device team_slave_0 added [ 66.691633][ T5612] team0: Port device team_slave_1 added [ 66.702461][ T5611] team0: Port device team_slave_0 added [ 66.704824][ T5611] team0: Port device team_slave_1 added [ 66.732110][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.732239][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.732341][ T5609] bridge_slave_0: entered allmulticast mode [ 66.733694][ T5609] bridge_slave_0: entered promiscuous mode [ 66.758041][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.758123][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.758471][ T5610] bridge_slave_0: entered allmulticast mode [ 66.760039][ T5610] bridge_slave_0: entered promiscuous mode [ 66.762256][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.762384][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.762689][ T5610] bridge_slave_1: entered allmulticast mode [ 66.764114][ T5610] bridge_slave_1: entered promiscuous mode [ 66.776430][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.776512][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.776843][ T5609] bridge_slave_1: entered allmulticast mode [ 66.779012][ T5609] bridge_slave_1: entered promiscuous mode [ 66.781672][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.781692][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.781727][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.795947][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.795962][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.795984][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.809414][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.809428][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.809447][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.841102][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.841118][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.841154][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.868412][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.880232][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.888146][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.905501][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.933066][ T5610] team0: Port device team_slave_0 added [ 67.024525][ T5610] team0: Port device team_slave_1 added [ 67.043078][ T5612] hsr_slave_0: entered promiscuous mode [ 67.044041][ T5612] hsr_slave_1: entered promiscuous mode [ 67.060508][ T5609] team0: Port device team_slave_0 added [ 67.067552][ T5611] hsr_slave_0: entered promiscuous mode [ 67.068393][ T5611] hsr_slave_1: entered promiscuous mode [ 67.069097][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 67.069182][ T5611] Cannot create hsr debugfs directory [ 67.086075][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.086091][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.086113][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.088975][ T5609] team0: Port device team_slave_1 added [ 67.132223][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.132239][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.132264][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.198176][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.198191][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.198214][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.260910][ T5619] Bluetooth: hci0: command tx timeout [ 67.260908][ T5622] Bluetooth: hci2: command tx timeout [ 67.261068][ T5619] Bluetooth: hci1: command tx timeout [ 67.267731][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.267746][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.267767][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.311262][ T5610] hsr_slave_0: entered promiscuous mode [ 67.312181][ T5610] hsr_slave_1: entered promiscuous mode [ 67.312715][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 67.312732][ T5610] Cannot create hsr debugfs directory [ 67.344716][ T5623] Bluetooth: hci3: command tx timeout [ 67.417020][ T5609] hsr_slave_0: entered promiscuous mode [ 67.417570][ T5609] hsr_slave_1: entered promiscuous mode [ 67.417909][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.417926][ T5609] Cannot create hsr debugfs directory [ 67.677416][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.684072][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.684910][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.699483][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.703521][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.713228][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.714867][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.732915][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.803289][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.807117][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.807869][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.820293][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.828239][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.836760][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.852281][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.863195][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.939277][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.955996][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.969767][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.979761][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.988008][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.998652][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.999283][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.017829][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.085659][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.131681][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.135015][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.135675][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.137672][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.139476][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.164098][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.172671][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.194073][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.196954][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.203462][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.203594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.206571][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.206659][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.289627][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.321351][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.349245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.349344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.403101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.403198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.449226][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.497144][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.517844][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.517955][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.563456][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.563525][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.635869][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.725241][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.747558][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.747648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.774193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.774279][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.867049][ T5609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.867073][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.138349][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.253119][ T5612] veth0_vlan: entered promiscuous mode [ 69.294116][ T5612] veth1_vlan: entered promiscuous mode [ 69.340090][ T5623] Bluetooth: hci2: command tx timeout [ 69.340121][ T5623] Bluetooth: hci0: command tx timeout [ 69.340206][ T5623] Bluetooth: hci1: command tx timeout [ 69.385515][ T5612] veth0_macvtap: entered promiscuous mode [ 69.407583][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.420920][ T5612] veth1_macvtap: entered promiscuous mode [ 69.423491][ T5619] Bluetooth: hci3: command tx timeout [ 69.483238][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.496215][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.563395][ T5611] veth0_vlan: entered promiscuous mode [ 69.599018][ T5611] veth1_vlan: entered promiscuous mode [ 69.661702][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.722722][ T5611] veth0_macvtap: entered promiscuous mode [ 69.747803][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.763649][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.763679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.777395][ T5611] veth1_macvtap: entered promiscuous mode [ 69.814514][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.848096][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.856501][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.856522][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.862439][ T5610] veth0_vlan: entered promiscuous mode [ 69.868119][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.868982][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869042][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869096][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869753][ T5610] veth1_vlan: entered promiscuous mode [ 69.904600][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.954884][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.985432][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.018561][ T5610] veth0_macvtap: entered promiscuous mode [ 70.023382][ T5609] veth0_vlan: entered promiscuous mode [ 70.044858][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.045312][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.046681][ T5610] veth1_macvtap: entered promiscuous mode [ 70.086604][ T5609] veth1_vlan: entered promiscuous mode [ 70.157351][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.188555][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.188578][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.197232][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.289099][ T5609] veth0_macvtap: entered promiscuous mode [ 70.292669][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.292688][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.337246][ T5609] veth1_macvtap: entered promiscuous mode [ 70.361842][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.361889][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.361927][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.361963][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.442211][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.493394][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.533638][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.533658][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.674594][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.675713][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.742951][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.742971][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.981224][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.983212][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.264911][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.264980][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420363][ T5623] Bluetooth: hci0: command tx timeout [ 71.420397][ T5623] Bluetooth: hci2: command tx timeout [ 71.420511][ T5619] Bluetooth: hci1: command tx timeout [ 71.468367][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.468385][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.501167][ T5619] Bluetooth: hci3: command tx timeout [ 71.709590][ T5782] FAULT_INJECTION: forcing a failure. [ 71.709590][ T5782] name failslab, interval 1, probability 0, space 0, times 1 [ 71.709648][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 71.709675][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.709695][ T5782] Call Trace: [ 71.709702][ T5782] [ 71.709711][ T5782] dump_stack_lvl+0x100/0x190 [ 71.709758][ T5782] should_fail_ex.cold+0x5/0xa [ 71.709793][ T5782] should_failslab+0xc2/0x120 [ 71.709823][ T5782] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.709844][ T5782] ? sget_fc+0x117/0x1f70 [ 71.709868][ T5782] ? sget_fc+0x1ba/0x1f70 [ 71.709896][ T5782] sget_fc+0x1ba/0x1f70 [ 71.709925][ T5782] ? __pfx_set_anon_super_fc+0x10/0x10 [ 71.709948][ T5782] ? __pfx_sget_fc+0x10/0x10 [ 71.709970][ T5782] ? refcount_dec_not_one+0x136/0x1c0 [ 71.710001][ T5782] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 71.710030][ T5782] ? __kasan_kmalloc+0xaa/0xb0 [ 71.710060][ T5782] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 71.710083][ T5782] ? __kasan_kmalloc+0xaa/0xb0 [ 71.710114][ T5782] ? __pfx_mqueue_fill_super+0x10/0x10 [ 71.710144][ T5782] get_tree_nodev+0x28/0x190 [ 71.710171][ T5782] mqueue_get_tree+0xf1/0x130 [ 71.710200][ T5782] vfs_get_tree+0x92/0x320 [ 71.710221][ T5782] fc_mount_longterm+0x1a/0x270 [ 71.710246][ T5782] mq_init_ns+0x482/0x820 [ 71.710280][ T5782] copy_ipcs+0x3dd/0x7e0 [ 71.710303][ T5782] create_new_namespaces+0x20a/0xac0 [ 71.710336][ T5782] ? security_capable+0x80/0x260 [ 71.710378][ T5782] unshare_nsproxy_namespaces+0xf2/0x220 [ 71.710416][ T5782] ksys_unshare+0x4a2/0xa70 [ 71.710441][ T5782] ? __pfx_ksys_unshare+0x10/0x10 [ 71.710465][ T5782] ? __pfx_rcu_exp_handler+0x10/0x10 [ 71.710498][ T5782] ? rcu_is_watching+0x13/0xc0 [ 71.710522][ T5782] ? trace_csd_function_exit+0x73/0x1f0 [ 71.710560][ T5782] __x64_sys_unshare+0x31/0x40 [ 71.710582][ T5782] do_syscall_64+0x121/0x770 [ 71.710612][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.710635][ T5782] RIP: 0033:0x7f1c7679e159 [ 71.710660][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.710685][ T5782] RSP: 002b:00007f1c7758a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.710711][ T5782] RAX: ffffffffffffffda RBX: 00007f1c76a26450 RCX: 00007f1c7679e159 [ 71.710725][ T5782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 71.710739][ T5782] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 71.710752][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.710765][ T5782] R13: 00007f1c76a264e8 R14: 00007f1c76a26450 R15: 00007ffffa4f5948 [ 71.710793][ T5782] [ 71.814572][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.814592][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.076759][ T5788] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 73.100348][ T5808] usbcore.quirks: string doesn't fit in 127 chars. [ 73.500584][ T5622] Bluetooth: hci2: command tx timeout [ 73.500949][ T5622] Bluetooth: hci0: command tx timeout [ 73.501006][ T5619] Bluetooth: hci1: command tx timeout [ 73.580056][ T5619] Bluetooth: hci3: command tx timeout [ 75.200493][ T5844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 75.205571][ T5844] FAULT_INJECTION: forcing a failure. [ 75.205571][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 75.205605][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 75.205629][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.205643][ T5844] Call Trace: [ 75.205649][ T5844] [ 75.205658][ T5844] dump_stack_lvl+0x100/0x190 [ 75.205696][ T5844] should_fail_ex.cold+0x5/0xa [ 75.205725][ T5844] should_failslab+0xc2/0x120 [ 75.205757][ T5844] __kmalloc_flags_noprof+0x122/0x8e0 [ 75.205785][ T5844] ? alloc_slab_obj_exts+0x6a/0x170 [ 75.205835][ T5844] alloc_slab_obj_exts+0x6a/0x170 [ 75.205861][ T5844] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 75.205894][ T5844] ? kasan_save_track+0x14/0x30 [ 75.205927][ T5844] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 75.205955][ T5844] ? seq_open+0x55/0x170 [ 75.205979][ T5844] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 75.206007][ T5844] seq_open+0x55/0x170 [ 75.206028][ T5844] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 75.206054][ T5844] single_open+0xfc/0x1d0 [ 75.206079][ T5844] tracing_trace_options_open+0xdd/0x1a0 [ 75.206114][ T5844] do_dentry_open+0x6ab/0x14d0 [ 75.206140][ T5844] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 75.206189][ T5844] vfs_open+0x82/0x3f0 [ 75.206226][ T5844] path_openat+0x19fa/0x2440 [ 75.206260][ T5844] ? __pfx_path_openat+0x10/0x10 [ 75.206297][ T5844] do_file_open+0x20e/0x430 [ 75.206328][ T5844] ? __pfx_do_file_open+0x10/0x10 [ 75.206376][ T5844] ? _raw_spin_unlock+0x28/0x50 [ 75.206398][ T5844] ? alloc_fd+0x471/0x7a0 [ 75.206431][ T5844] do_sys_openat2+0x10f/0x1e0 [ 75.206458][ T5844] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.206486][ T5844] ? fdget+0x18b/0x210 [ 75.206511][ T5844] __x64_sys_openat+0x12d/0x210 [ 75.206528][ T5844] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.206552][ T5844] do_syscall_64+0x121/0x770 [ 75.206575][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.206595][ T5844] RIP: 0033:0x7fe81e19e159 [ 75.206612][ T5844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.206633][ T5844] RSP: 002b:00007fe81f0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.206654][ T5844] RAX: ffffffffffffffda RBX: 00007fe81e425fa0 RCX: 00007fe81e19e159 [ 75.206668][ T5844] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 75.206680][ T5844] RBP: 00007fe81e23506b R08: 0000000000000000 R09: 0000000000000000 [ 75.206692][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.206704][ T5844] R13: 00007fe81e426038 R14: 00007fe81e425fa0 R15: 00007ffd70260b78 [ 75.206728][ T5844] [ 76.953793][ T5865] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.522504][ T990] cfg80211: failed to load regulatory.db [ 82.910826][ T5976] i2c i2c-0: delete_device: Can't find device in list [ 84.243694][ T5986] netlink: 342 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.243876][ T5986] Zero length message leads to an empty skb [ 84.427910][ T5988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.428025][ T5988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.451563][ T5988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.499117][ T5988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.499219][ T5988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.525829][ T5988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.537045][ T5988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.537169][ T5988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.554987][ T5988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.587889][ T5988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.588129][ T5988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.600013][ T5988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.461029][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.540679][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.540763][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.621887][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.049482][ T6043] netlink: 338 bytes leftover after parsing attributes in process `syz.0.41'. [ 87.701782][ T6052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.701971][ T6052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.702179][ T6052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.702321][ T6052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.347249][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.347664][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.580019][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.740060][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.740093][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.740198][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.113675][ T6115] process 'syz.2.53' launched ':,' with NULL argv: empty string added [ 90.159503][ T6115] mmap: syz.2.53 (6115) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.160173][ T6115] FAULT_INJECTION: forcing a failure. [ 90.160173][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 90.160201][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 90.160226][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.160240][ T6115] Call Trace: [ 90.160248][ T6115] [ 90.160257][ T6115] dump_stack_lvl+0x100/0x190 [ 90.160294][ T6115] should_fail_ex.cold+0x5/0xa [ 90.160325][ T6115] should_failslab+0xc2/0x120 [ 90.160358][ T6115] __kmalloc_noprof+0xfc/0x840 [ 90.160397][ T6115] ? tomoyo_profile+0x47/0x60 [ 90.160427][ T6115] ? tomoyo_supervisor+0x65d/0x1340 [ 90.160462][ T6115] tomoyo_supervisor+0x65d/0x1340 [ 90.160499][ T6115] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 90.160550][ T6115] ? tomoyo_check_path_acl+0x141/0x210 [ 90.160587][ T6115] ? tomoyo_check_acl+0x1f7/0x410 [ 90.160624][ T6115] tomoyo_path_permission+0x270/0x3b0 [ 90.160662][ T6115] tomoyo_check_open_permission+0x34d/0x3c0 [ 90.160686][ T6115] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 90.160708][ T6115] ? __lock_acquire+0x5c0/0x1f40 [ 90.160748][ T6115] ? hook_file_open+0x248/0x8e0 [ 90.160793][ T6115] ? path_get+0x61/0x80 [ 90.160832][ T6115] tomoyo_file_open+0x6b/0x90 [ 90.160865][ T6115] security_file_open+0xb5/0x1e0 [ 90.160892][ T6115] do_dentry_open+0x588/0x14d0 [ 90.160927][ T6115] vfs_open+0x82/0x3f0 [ 90.160967][ T6115] path_openat+0x19fa/0x2440 [ 90.161004][ T6115] ? __pfx_path_openat+0x10/0x10 [ 90.161043][ T6115] do_file_open+0x20e/0x430 [ 90.161077][ T6115] ? __pfx_do_file_open+0x10/0x10 [ 90.161125][ T6115] ? _raw_spin_unlock+0x28/0x50 [ 90.161147][ T6115] ? alloc_fd+0x471/0x7a0 [ 90.161183][ T6115] do_sys_openat2+0x10f/0x1e0 [ 90.161216][ T6115] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.161254][ T6115] ? __fget_files+0x21f/0x3d0 [ 90.161292][ T6115] __x64_sys_openat+0x12d/0x210 [ 90.161314][ T6115] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.161348][ T6115] do_syscall_64+0x121/0x770 [ 90.161378][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.161403][ T6115] RIP: 0033:0x7f1c7679e159 [ 90.161421][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.161441][ T6115] RSP: 002b:00007f1c7760e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.161466][ T6115] RAX: ffffffffffffffda RBX: 00007f1c76a26090 RCX: 00007f1c7679e159 [ 90.161482][ T6115] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 90.161496][ T6115] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 90.161510][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.161524][ T6115] R13: 00007f1c76a26128 R14: 00007f1c76a26090 R15: 00007ffffa4f5948 [ 90.161552][ T6115] [ 91.659898][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.821937][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.821976][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.822670][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.912151][ T6181] zswap: compressor not available [ 95.610131][ T6219] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.457570][ T31] audit: type=1800 audit(99.000:2): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 97.402192][ T6237] smpboot: CPU 1 is now offline [ 100.341629][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 104.837348][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 114.549477][ T6483] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3302266462.2417750473.2276798763), cmd(3) [ 114.569219][ T6483] FAULT_INJECTION: forcing a failure. [ 114.569219][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 114.569262][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(full) [ 114.569277][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.569288][ T6483] Call Trace: [ 114.569293][ T6483] [ 114.569299][ T6483] dump_stack_lvl+0x100/0x190 [ 114.569331][ T6483] should_fail_ex.cold+0x5/0xa [ 114.569349][ T6483] should_failslab+0xc2/0x120 [ 114.569368][ T6483] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.569382][ T6483] ? copy_ipcs+0x10d/0x7e0 [ 114.569396][ T6483] copy_ipcs+0x10d/0x7e0 [ 114.569408][ T6483] create_new_namespaces+0x20a/0xac0 [ 114.569428][ T6483] ? security_capable+0x80/0x260 [ 114.569447][ T6483] unshare_nsproxy_namespaces+0xf2/0x220 [ 114.569468][ T6483] ksys_unshare+0x4a2/0xa70 [ 114.569481][ T6483] ? __pfx_ksys_unshare+0x10/0x10 [ 114.569500][ T6483] __x64_sys_unshare+0x31/0x40 [ 114.569513][ T6483] do_syscall_64+0x121/0x770 [ 114.569530][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.569543][ T6483] RIP: 0033:0x7f1c7679e159 [ 114.569560][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.569571][ T6483] RSP: 002b:00007f1c7760e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 114.569586][ T6483] RAX: ffffffffffffffda RBX: 00007f1c76a26090 RCX: 00007f1c7679e159 [ 114.569594][ T6483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 114.569601][ T6483] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 114.569608][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.569614][ T6483] R13: 00007f1c76a26128 R14: 00007f1c76a26090 R15: 00007ffffa4f5948 [ 114.569629][ T6483] [ 117.093631][ T6522] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 118.001072][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 118.108641][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.108660][ T6539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.126959][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.126977][ T6539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.736823][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 118.754163][ T6545] netlink: 354 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.052412][ T6564] FAULT_INJECTION: forcing a failure. [ 119.052412][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 119.052445][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 119.052460][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.052467][ T6564] Call Trace: [ 119.052472][ T6564] [ 119.052477][ T6564] dump_stack_lvl+0x100/0x190 [ 119.052499][ T6564] should_fail_ex.cold+0x5/0xa [ 119.052517][ T6564] should_failslab+0xc2/0x120 [ 119.052536][ T6564] __kmalloc_cache_noprof+0x91/0x6d0 [ 119.052550][ T6564] ? sget_fc+0x117/0x1f70 [ 119.052563][ T6564] ? sget_fc+0x1ba/0x1f70 [ 119.052584][ T6564] sget_fc+0x1ba/0x1f70 [ 119.052601][ T6564] ? __pfx_set_anon_super_fc+0x10/0x10 [ 119.052615][ T6564] ? __pfx_sget_fc+0x10/0x10 [ 119.052628][ T6564] ? refcount_dec_not_one+0x136/0x1c0 [ 119.052646][ T6564] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 119.052664][ T6564] ? __kasan_kmalloc+0xaa/0xb0 [ 119.052683][ T6564] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 119.052695][ T6564] ? __kasan_kmalloc+0xaa/0xb0 [ 119.052712][ T6564] ? __pfx_mqueue_fill_super+0x10/0x10 [ 119.052728][ T6564] get_tree_nodev+0x28/0x190 [ 119.052742][ T6564] mqueue_get_tree+0xf1/0x130 [ 119.052758][ T6564] vfs_get_tree+0x92/0x320 [ 119.052770][ T6564] fc_mount_longterm+0x1a/0x270 [ 119.052784][ T6564] mq_init_ns+0x482/0x820 [ 119.052803][ T6564] copy_ipcs+0x3dd/0x7e0 [ 119.052815][ T6564] create_new_namespaces+0x20a/0xac0 [ 119.052833][ T6564] ? security_capable+0x80/0x260 [ 119.052852][ T6564] unshare_nsproxy_namespaces+0xf2/0x220 [ 119.052872][ T6564] ksys_unshare+0x4a2/0xa70 [ 119.052886][ T6564] ? __pfx_ksys_unshare+0x10/0x10 [ 119.052904][ T6564] __x64_sys_unshare+0x31/0x40 [ 119.052923][ T6564] do_syscall_64+0x121/0x770 [ 119.052941][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.052953][ T6564] RIP: 0033:0x7f1c7679e159 [ 119.052965][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.052976][ T6564] RSP: 002b:00007f1c7758a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.052988][ T6564] RAX: ffffffffffffffda RBX: 00007f1c76a26450 RCX: 00007f1c7679e159 [ 119.052996][ T6564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 119.053004][ T6564] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 119.053011][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.053019][ T6564] R13: 00007f1c76a264e8 R14: 00007f1c76a26450 R15: 00007ffffa4f5948 [ 119.053035][ T6564] [ 123.323701][ T6628] netlink: 21 bytes leftover after parsing attributes in process `syz.3.121'. [ 124.942987][ T6647] hub 1-0:1.0: USB hub found [ 124.966150][ T6647] hub 1-0:1.0: 1 port detected [ 126.346143][ T6671] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.375157][ T6671] FAULT_INJECTION: forcing a failure. [ 126.375157][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 126.375183][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 126.375199][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.375215][ T6671] Call Trace: [ 126.375219][ T6671] [ 126.375225][ T6671] dump_stack_lvl+0x100/0x190 [ 126.375247][ T6671] should_fail_ex.cold+0x5/0xa [ 126.375266][ T6671] should_failslab+0xc2/0x120 [ 126.375285][ T6671] kmem_cache_alloc_noprof+0x92/0x6a0 [ 126.375302][ T6671] ? anon_vma_clone+0x2b3/0xca0 [ 126.375322][ T6671] anon_vma_clone+0x2b3/0xca0 [ 126.375344][ T6671] copy_vma+0x934/0x1100 [ 126.375360][ T6671] ? __pfx_copy_vma+0x10/0x10 [ 126.375372][ T6671] ? __lock_acquire+0x5c0/0x1f40 [ 126.375402][ T6671] ? lock_acquire+0x1d1/0x380 [ 126.375418][ T6671] ? __vma_start_write+0x11c/0x280 [ 126.375440][ T6671] copy_vma_and_data+0x23f/0x780 [ 126.375454][ T6671] ? __vma_start_exclude_readers+0x238/0x810 [ 126.375473][ T6671] ? __pfx_copy_vma_and_data+0x10/0x10 [ 126.375492][ T6671] ? __vma_start_write+0x17f/0x280 [ 126.375510][ T6671] ? __pfx___vma_start_write+0x10/0x10 [ 126.375532][ T6671] move_vma+0x57c/0x12e0 [ 126.375547][ T6671] ? __pfx_move_vma+0x10/0x10 [ 126.375560][ T6671] ? cap_mmap_addr+0x4b/0x120 [ 126.375577][ T6671] ? security_mmap_addr+0x71/0x1e0 [ 126.375591][ T6671] ? __get_unmapped_area+0x255/0x3e0 [ 126.375609][ T6671] ? vrm_set_new_addr+0x1f5/0x2a0 [ 126.375623][ T6671] mremap_to+0x234/0x4c0 [ 126.375636][ T6671] ? __pfx_mremap_to+0x10/0x10 [ 126.375649][ T6671] ? mas_walk+0x260/0x310 [ 126.375666][ T6671] __do_sys_mremap+0x99f/0x1780 [ 126.375679][ T6671] ? futex_wait+0xd0/0x370 [ 126.375698][ T6671] ? __pfx___do_sys_mremap+0x10/0x10 [ 126.375717][ T6671] ? __pfx_do_recvmmsg+0x10/0x10 [ 126.375738][ T6671] ? __pfx_do_futex+0x10/0x10 [ 126.375759][ T6671] ? xfd_validate_state+0x129/0x190 [ 126.375784][ T6671] do_syscall_64+0x121/0x770 [ 126.375800][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.375812][ T6671] RIP: 0033:0x7f1c7679e159 [ 126.375824][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.375835][ T6671] RSP: 002b:00007f1c7758a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 126.375847][ T6671] RAX: ffffffffffffffda RBX: 00007f1c76a26450 RCX: 00007f1c7679e159 [ 126.375855][ T6671] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 126.375862][ T6671] RBP: 00007f1c7683506b R08: 0000000100000000 R09: 0000000000000000 [ 126.375869][ T6671] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 126.375877][ T6671] R13: 00007f1c76a264e8 R14: 00007f1c76a26450 R15: 00007ffffa4f5948 [ 126.375894][ T6671] [ 128.789198][ T6698] serio: Serial port pty37 [ 128.954994][ T6703] futex_wake_op: syz.0.134 tries to shift op by -2048; fix this program [ 128.955801][ T6703] futex_wake_op: syz.0.134 tries to shift op by -2048; fix this program [ 132.118703][ T6751] random: crng reseeded on system resumption [ 132.702104][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702138][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.309545][ T6816] program syz.0.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.837980][ T6864] IPVS: length: 8 != 21224 [ 143.481231][ T6910] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 143.870792][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.674752][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 152.896491][ T7098] nbd: couldn't find device at index 0 [ 153.367507][ T7122] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 155.630681][ T7150] syz.3.187 (7150) used greatest stack depth: 19536 bytes left [ 158.808738][ T7211] FAULT_INJECTION: forcing a failure. [ 158.808738][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 158.808762][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.3.193 Not tainted syzkaller #0 PREEMPT(full) [ 158.808776][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.808784][ T7211] Call Trace: [ 158.808788][ T7211] [ 158.808793][ T7211] dump_stack_lvl+0x100/0x190 [ 158.808815][ T7211] should_fail_ex.cold+0x5/0xa [ 158.808834][ T7211] should_failslab+0xc2/0x120 [ 158.808852][ T7211] kmem_cache_alloc_noprof+0x92/0x6a0 [ 158.808869][ T7211] ? key_alloc+0xc0f/0x1310 [ 158.808885][ T7211] key_alloc+0xc0f/0x1310 [ 158.808902][ T7211] ? __pfx_assoc_array_find+0x10/0x10 [ 158.808919][ T7211] ? __pfx_key_alloc+0x10/0x10 [ 158.808934][ T7211] ? find_held_lock+0x2b/0x80 [ 158.808950][ T7211] keyring_alloc+0x44/0xc0 [ 158.808966][ T7211] keyctl_get_persistent+0x6c7/0x8b0 [ 158.808990][ T7211] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 158.809008][ T7211] ? __x64_sys_futex+0x34f/0x4d0 [ 158.809022][ T7211] ? __x64_sys_futex+0x358/0x4d0 [ 158.809037][ T7211] ? xfd_validate_state+0x129/0x190 [ 158.809059][ T7211] __do_sys_keyctl+0x3b2/0x5a0 [ 158.809078][ T7211] do_syscall_64+0x121/0x770 [ 158.809095][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.809107][ T7211] RIP: 0033:0x7fe81e19e159 [ 158.809119][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.809131][ T7211] RSP: 002b:00007fe81f02a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 158.809143][ T7211] RAX: ffffffffffffffda RBX: 00007fe81e426450 RCX: 00007fe81e19e159 [ 158.809150][ T7211] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 158.809158][ T7211] RBP: 00007fe81e23506b R08: 0000000000001000 R09: 0000000000000000 [ 158.809165][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.809172][ T7211] R13: 00007fe81e4264e8 R14: 00007fe81e426450 R15: 00007ffd70260b78 [ 158.809189][ T7211] [ 161.312174][ T7253] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5609] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7253] [ 167.838563][ T7337] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 167.838579][ T7337] netlink: 1 bytes leftover after parsing attributes in process `syz.1.213'. [ 168.436768][ T7364] ======================================================= [ 168.436768][ T7364] WARNING: The mand mount option has been deprecated and [ 168.436768][ T7364] and is ignored by this kernel. Remove the mand [ 168.436768][ T7364] option from the mount to silence this warning. [ 168.436768][ T7364] ======================================================= [ 175.205058][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 175.209238][ T7451] netlink: 354 bytes leftover after parsing attributes in process `syz.3.227'. [ 176.781722][ T7485] FAULT_INJECTION: forcing a failure. [ 176.781722][ T7485] name failslab, interval 1, probability 0, space 0, times 0 [ 176.781761][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.1.229 Not tainted syzkaller #0 PREEMPT(full) [ 176.781777][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.781785][ T7485] Call Trace: [ 176.781790][ T7485] [ 176.781795][ T7485] dump_stack_lvl+0x100/0x190 [ 176.781819][ T7485] should_fail_ex.cold+0x5/0xa [ 176.781837][ T7485] should_failslab+0xc2/0x120 [ 176.781860][ T7485] __kmalloc_noprof+0xfc/0x840 [ 176.781876][ T7485] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 176.781898][ T7485] vb2_core_allocated_buffers_storage+0x184/0x220 [ 176.781916][ T7485] vb2_core_reqbufs+0x382/0xf30 [ 176.781937][ T7485] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 176.781960][ T7485] ? __vb2_init_fileio+0x18f/0x1000 [ 176.781980][ T7485] __vb2_init_fileio+0x32d/0x1000 [ 176.781997][ T7485] ? lockdep_hardirqs_on+0x7d/0x110 [ 176.782013][ T7485] ? __pollwait+0x276/0x490 [ 176.782029][ T7485] vb2_core_poll+0x611/0x740 [ 176.782047][ T7485] vb2_poll+0x4b/0xe0 [ 176.782064][ T7485] vb2_fop_poll+0x10e/0x350 [ 176.782082][ T7485] ? __pfx_vb2_fop_poll+0x10/0x10 [ 176.782097][ T7485] v4l2_poll+0x15f/0x220 [ 176.782111][ T7485] ? __pfx_v4l2_poll+0x10/0x10 [ 176.782125][ T7485] do_sys_poll+0x6e5/0xe90 [ 176.782138][ T7485] ? rcu_is_watching+0x13/0xc0 [ 176.782157][ T7485] ? __pfx_do_sys_poll+0x10/0x10 [ 176.782185][ T7485] ? __futex_wait+0x256/0x300 [ 176.782201][ T7485] ? __pfx___pollwait+0x10/0x10 [ 176.782217][ T7485] ? __pfx_pollwake+0x10/0x10 [ 176.782255][ T7485] ? ktime_get_ts64+0x306/0x420 [ 176.782273][ T7485] ? ktime_get_ts64+0x318/0x420 [ 176.782290][ T7485] ? ktime_get_ts64+0x257/0x420 [ 176.782313][ T7485] __x64_sys_poll+0x1b3/0x420 [ 176.782328][ T7485] ? __pfx___x64_sys_poll+0x10/0x10 [ 176.782348][ T7485] do_syscall_64+0x121/0x770 [ 176.782363][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.782376][ T7485] RIP: 0033:0x7f286f19e159 [ 176.782387][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.782399][ T7485] RSP: 002b:00007f286c7ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 176.782411][ T7485] RAX: ffffffffffffffda RBX: 00007f286f426450 RCX: 00007f286f19e159 [ 176.782420][ T7485] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 176.782428][ T7485] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 176.782435][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.782443][ T7485] R13: 00007f286f4264e8 R14: 00007f286f426450 R15: 00007fffa35a07c8 [ 176.782459][ T7485] [ 178.635438][ T7516] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 185.420594][ T7627] program syz.3.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.622349][ T7635] FAULT_INJECTION: forcing a failure. [ 185.622349][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 185.622376][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 185.622391][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.622400][ T7635] Call Trace: [ 185.622405][ T7635] [ 185.622410][ T7635] dump_stack_lvl+0x100/0x190 [ 185.622431][ T7635] should_fail_ex.cold+0x5/0xa [ 185.622450][ T7635] should_failslab+0xc2/0x120 [ 185.622468][ T7635] __kmalloc_noprof+0xfc/0x840 [ 185.622484][ T7635] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 185.622506][ T7635] vb2_core_allocated_buffers_storage+0x184/0x220 [ 185.622524][ T7635] vb2_core_reqbufs+0x382/0xf30 [ 185.622545][ T7635] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 185.622575][ T7635] ? __vb2_init_fileio+0x18f/0x1000 [ 185.622597][ T7635] __vb2_init_fileio+0x32d/0x1000 [ 185.622614][ T7635] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.622630][ T7635] ? __pollwait+0x276/0x490 [ 185.622646][ T7635] vb2_core_poll+0x611/0x740 [ 185.622665][ T7635] vb2_poll+0x4b/0xe0 [ 185.622681][ T7635] vb2_fop_poll+0x10e/0x350 [ 185.622698][ T7635] ? __pfx_vb2_fop_poll+0x10/0x10 [ 185.622713][ T7635] v4l2_poll+0x15f/0x220 [ 185.622728][ T7635] ? __pfx_v4l2_poll+0x10/0x10 [ 185.622741][ T7635] do_sys_poll+0x6e5/0xe90 [ 185.622754][ T7635] ? rcu_is_watching+0x13/0xc0 [ 185.622773][ T7635] ? __pfx_do_sys_poll+0x10/0x10 [ 185.622808][ T7635] ? __futex_wait+0x256/0x300 [ 185.622828][ T7635] ? __pfx___pollwait+0x10/0x10 [ 185.622844][ T7635] ? __pfx_pollwake+0x10/0x10 [ 185.622883][ T7635] ? ktime_get_ts64+0x306/0x420 [ 185.622903][ T7635] ? ktime_get_ts64+0x318/0x420 [ 185.622921][ T7635] ? ktime_get_ts64+0x257/0x420 [ 185.622944][ T7635] __x64_sys_poll+0x1b3/0x420 [ 185.622960][ T7635] ? __pfx___x64_sys_poll+0x10/0x10 [ 185.622979][ T7635] do_syscall_64+0x121/0x770 [ 185.622998][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.623011][ T7635] RIP: 0033:0x7fdf41f9e159 [ 185.623023][ T7635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.623034][ T7635] RSP: 002b:00007fdf3f54b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 185.623047][ T7635] RAX: ffffffffffffffda RBX: 00007fdf42226450 RCX: 00007fdf41f9e159 [ 185.623056][ T7635] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 185.623064][ T7635] RBP: 00007fdf4203506b R08: 0000000000000000 R09: 0000000000000000 [ 185.623071][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.623080][ T7635] R13: 00007fdf422264e8 R14: 00007fdf42226450 R15: 00007fffd753e238 [ 185.623096][ T7635] [ 188.634227][ T7648] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 188.634241][ T7648] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 188.636514][ T7648] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 188.636528][ T7648] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 192.139426][ T7736] FAULT_INJECTION: forcing a failure. [ 192.139426][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 192.139451][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 192.139467][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.139475][ T7736] Call Trace: [ 192.139479][ T7736] [ 192.139484][ T7736] dump_stack_lvl+0x100/0x190 [ 192.139505][ T7736] should_fail_ex.cold+0x5/0xa [ 192.139522][ T7736] should_failslab+0xc2/0x120 [ 192.139541][ T7736] __kmalloc_noprof+0xfc/0x840 [ 192.139557][ T7736] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 192.139578][ T7736] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 192.139596][ T7736] vb2_core_reqbufs+0x382/0xf30 [ 192.139616][ T7736] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 192.139638][ T7736] ? __vb2_init_fileio+0x18f/0x1000 [ 192.139659][ T7736] __vb2_init_fileio+0x32d/0x1000 [ 192.139676][ T7736] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.139692][ T7736] ? __pollwait+0x276/0x490 [ 192.139708][ T7736] vb2_core_poll+0x611/0x740 [ 192.139726][ T7736] vb2_poll+0x4b/0xe0 [ 192.139744][ T7736] vb2_fop_poll+0x10e/0x350 [ 192.139766][ T7736] ? __pfx_vb2_fop_poll+0x10/0x10 [ 192.139782][ T7736] v4l2_poll+0x15f/0x220 [ 192.139804][ T7736] ? __pfx_v4l2_poll+0x10/0x10 [ 192.139817][ T7736] do_sys_poll+0x6e5/0xe90 [ 192.139837][ T7736] ? __pfx_do_sys_poll+0x10/0x10 [ 192.139851][ T7736] ? __resched_curr+0x42e/0x500 [ 192.139882][ T7736] ? try_to_wake_up+0x70a/0x1c90 [ 192.139903][ T7736] ? __pfx___pollwait+0x10/0x10 [ 192.139927][ T7736] ? __pfx_pollwake+0x10/0x10 [ 192.139967][ T7736] ? ktime_get_ts64+0x306/0x420 [ 192.139986][ T7736] ? ktime_get_ts64+0x318/0x420 [ 192.140003][ T7736] ? ktime_get_ts64+0x257/0x420 [ 192.140025][ T7736] __x64_sys_poll+0x1b3/0x420 [ 192.140041][ T7736] ? __pfx___x64_sys_poll+0x10/0x10 [ 192.140060][ T7736] do_syscall_64+0x121/0x770 [ 192.140076][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.140089][ T7736] RIP: 0033:0x7fe81e19e159 [ 192.140101][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.140112][ T7736] RSP: 002b:00007fe81f02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 192.140125][ T7736] RAX: ffffffffffffffda RBX: 00007fe81e426450 RCX: 00007fe81e19e159 [ 192.140133][ T7736] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 192.140141][ T7736] RBP: 00007fe81e23506b R08: 0000000000000000 R09: 0000000000000000 [ 192.140149][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.140156][ T7736] R13: 00007fe81e4264e8 R14: 00007fe81e426450 R15: 00007ffd70260b78 [ 192.140173][ T7736] [ 194.151391][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.151430][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.381923][ T7915] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 204.020473][ T7939] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5612] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7939] [ 210.423911][ T8058] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5610] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8058] [ 213.991860][ T8105] FAULT_INJECTION: forcing a failure. [ 213.991860][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 213.991885][ T8105] CPU: 0 UID: 0 PID: 8105 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(full) [ 213.991900][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.991908][ T8105] Call Trace: [ 213.991913][ T8105] [ 213.991918][ T8105] dump_stack_lvl+0x100/0x190 [ 213.991942][ T8105] should_fail_ex.cold+0x5/0xa [ 213.991961][ T8105] should_failslab+0xc2/0x120 [ 213.991980][ T8105] __kmalloc_noprof+0xfc/0x840 [ 213.991997][ T8105] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 213.992019][ T8105] vb2_core_allocated_buffers_storage+0x184/0x220 [ 213.992037][ T8105] vb2_core_reqbufs+0x382/0xf30 [ 213.992058][ T8105] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 213.992080][ T8105] ? __vb2_init_fileio+0x18f/0x1000 [ 213.992102][ T8105] __vb2_init_fileio+0x32d/0x1000 [ 213.992119][ T8105] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.992139][ T8105] ? __pollwait+0x276/0x490 [ 213.992162][ T8105] vb2_core_poll+0x611/0x740 [ 213.992181][ T8105] vb2_poll+0x4b/0xe0 [ 213.992198][ T8105] vb2_fop_poll+0x10e/0x350 [ 213.992216][ T8105] ? __pfx_vb2_fop_poll+0x10/0x10 [ 213.992232][ T8105] v4l2_poll+0x15f/0x220 [ 213.992247][ T8105] ? __pfx_v4l2_poll+0x10/0x10 [ 213.992260][ T8105] do_sys_poll+0x6e5/0xe90 [ 213.992273][ T8105] ? rcu_is_watching+0x13/0xc0 [ 213.992292][ T8105] ? __pfx_do_sys_poll+0x10/0x10 [ 213.992320][ T8105] ? __futex_wait+0x256/0x300 [ 213.992337][ T8105] ? __pfx___pollwait+0x10/0x10 [ 213.992353][ T8105] ? __pfx_pollwake+0x10/0x10 [ 213.992391][ T8105] ? ktime_get_ts64+0x306/0x420 [ 213.992411][ T8105] ? ktime_get_ts64+0x318/0x420 [ 213.992428][ T8105] ? ktime_get_ts64+0x257/0x420 [ 213.992450][ T8105] __x64_sys_poll+0x1b3/0x420 [ 213.992465][ T8105] ? __pfx___x64_sys_poll+0x10/0x10 [ 213.992485][ T8105] do_syscall_64+0x121/0x770 [ 213.992501][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.992513][ T8105] RIP: 0033:0x7f1c7679e159 [ 213.992525][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.992536][ T8105] RSP: 002b:00007f1c775ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 213.992548][ T8105] RAX: ffffffffffffffda RBX: 00007f1c76a26360 RCX: 00007f1c7679e159 [ 213.992557][ T8105] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 213.992564][ T8105] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 213.992573][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.992581][ T8105] R13: 00007f1c76a263f8 R14: 00007f1c76a26360 R15: 00007ffffa4f5948 [ 213.992597][ T8105] [ 216.782793][ T8149] program syz.1.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.052101][ T8184] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.176968][ T8224] FAULT_INJECTION: forcing a failure. [ 221.176968][ T8224] name failslab, interval 1, probability 0, space 0, times 0 [ 221.176993][ T8224] CPU: 0 UID: 0 PID: 8224 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) [ 221.177008][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.177015][ T8224] Call Trace: [ 221.177020][ T8224] [ 221.177025][ T8224] dump_stack_lvl+0x100/0x190 [ 221.177048][ T8224] should_fail_ex.cold+0x5/0xa [ 221.177066][ T8224] should_failslab+0xc2/0x120 [ 221.177084][ T8224] __kmalloc_noprof+0xfc/0x840 [ 221.177101][ T8224] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 221.177123][ T8224] vb2_core_allocated_buffers_storage+0x184/0x220 [ 221.177167][ T8224] vb2_core_reqbufs+0x382/0xf30 [ 221.177189][ T8224] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 221.177215][ T8224] ? __vb2_init_fileio+0x18f/0x1000 [ 221.177235][ T8224] __vb2_init_fileio+0x32d/0x1000 [ 221.177257][ T8224] ? lockdep_hardirqs_on+0x7d/0x110 [ 221.177288][ T8224] ? __pollwait+0x276/0x490 [ 221.177306][ T8224] vb2_core_poll+0x611/0x740 [ 221.177325][ T8224] vb2_poll+0x4b/0xe0 [ 221.177341][ T8224] vb2_fop_poll+0x10e/0x350 [ 221.177359][ T8224] ? __pfx_vb2_fop_poll+0x10/0x10 [ 221.177374][ T8224] v4l2_poll+0x15f/0x220 [ 221.177388][ T8224] ? __pfx_v4l2_poll+0x10/0x10 [ 221.177401][ T8224] do_sys_poll+0x6e5/0xe90 [ 221.177415][ T8224] ? rcu_is_watching+0x13/0xc0 [ 221.177433][ T8224] ? __pfx_do_sys_poll+0x10/0x10 [ 221.177461][ T8224] ? __futex_wait+0x256/0x300 [ 221.177477][ T8224] ? __pfx___pollwait+0x10/0x10 [ 221.177493][ T8224] ? __pfx_pollwake+0x10/0x10 [ 221.177530][ T8224] ? ktime_get_ts64+0x306/0x420 [ 221.177549][ T8224] ? ktime_get_ts64+0x318/0x420 [ 221.177565][ T8224] ? ktime_get_ts64+0x257/0x420 [ 221.177587][ T8224] __x64_sys_poll+0x1b3/0x420 [ 221.177603][ T8224] ? __pfx___x64_sys_poll+0x10/0x10 [ 221.177622][ T8224] do_syscall_64+0x121/0x770 [ 221.177638][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.177651][ T8224] RIP: 0033:0x7f1c7679e159 [ 221.177662][ T8224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.177674][ T8224] RSP: 002b:00007f1c7758a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 221.177687][ T8224] RAX: ffffffffffffffda RBX: 00007f1c76a26450 RCX: 00007f1c7679e159 [ 221.177694][ T8224] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 221.177708][ T8224] RBP: 00007f1c7683506b R08: 0000000000000000 R09: 0000000000000000 [ 221.177715][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.177723][ T8224] R13: 00007f1c76a264e8 R14: 00007f1c76a26450 R15: 00007ffffa4f5948 [ 221.177739][ T8224] [ 224.545922][ T8277] program syz.1.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.506862][ T8315] FAULT_INJECTION: forcing a failure. [ 226.506862][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 226.506894][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 226.506910][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.506918][ T8315] Call Trace: [ 226.506924][ T8315] [ 226.506929][ T8315] dump_stack_lvl+0x100/0x190 [ 226.506952][ T8315] should_fail_ex.cold+0x5/0xa [ 226.506970][ T8315] should_failslab+0xc2/0x120 [ 226.506989][ T8315] __kmalloc_noprof+0xfc/0x840 [ 226.507005][ T8315] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 226.507026][ T8315] vb2_core_allocated_buffers_storage+0x184/0x220 [ 226.507045][ T8315] vb2_core_reqbufs+0x382/0xf30 [ 226.507065][ T8315] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 226.507089][ T8315] ? __vb2_init_fileio+0x18f/0x1000 [ 226.507109][ T8315] __vb2_init_fileio+0x32d/0x1000 [ 226.507126][ T8315] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.507141][ T8315] ? __pollwait+0x276/0x490 [ 226.507157][ T8315] vb2_core_poll+0x611/0x740 [ 226.507175][ T8315] vb2_poll+0x4b/0xe0 [ 226.507192][ T8315] vb2_fop_poll+0x10e/0x350 [ 226.507210][ T8315] ? __pfx_vb2_fop_poll+0x10/0x10 [ 226.507225][ T8315] v4l2_poll+0x15f/0x220 [ 226.507239][ T8315] ? __pfx_v4l2_poll+0x10/0x10 [ 226.507252][ T8315] do_sys_poll+0x6e5/0xe90 [ 226.507265][ T8315] ? rcu_is_watching+0x13/0xc0 [ 226.507284][ T8315] ? __pfx_do_sys_poll+0x10/0x10 [ 226.507312][ T8315] ? __futex_wait+0x256/0x300 [ 226.507329][ T8315] ? __pfx___pollwait+0x10/0x10 [ 226.507345][ T8315] ? __pfx_pollwake+0x10/0x10 [ 226.507384][ T8315] ? ktime_get_ts64+0x306/0x420 [ 226.507406][ T8315] ? ktime_get_ts64+0x318/0x420 [ 226.507423][ T8315] ? ktime_get_ts64+0x257/0x420 [ 226.507445][ T8315] __x64_sys_poll+0x1b3/0x420 [ 226.507461][ T8315] ? __pfx___x64_sys_poll+0x10/0x10 [ 226.507480][ T8315] do_syscall_64+0x121/0x770 [ 226.507496][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.507509][ T8315] RIP: 0033:0x7f286f19e159 [ 226.507521][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.507532][ T8315] RSP: 002b:00007f286c7ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 226.507545][ T8315] RAX: ffffffffffffffda RBX: 00007f286f426450 RCX: 00007f286f19e159 [ 226.507552][ T8315] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 226.507559][ T8315] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 226.507566][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.507573][ T8315] R13: 00007f286f4264e8 R14: 00007f286f426450 R15: 00007fffa35a07c8 [ 226.507589][ T8315] [ 231.989078][ T8395] program syz.1.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.293038][ T8405] FAULT_INJECTION: forcing a failure. [ 232.293038][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 232.293064][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 232.293079][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.293087][ T8405] Call Trace: [ 232.293091][ T8405] [ 232.293097][ T8405] dump_stack_lvl+0x100/0x190 [ 232.293118][ T8405] should_fail_ex.cold+0x5/0xa [ 232.293136][ T8405] should_failslab+0xc2/0x120 [ 232.293155][ T8405] __kmalloc_noprof+0xfc/0x840 [ 232.293172][ T8405] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 232.293194][ T8405] vb2_core_allocated_buffers_storage+0x184/0x220 [ 232.293212][ T8405] vb2_core_reqbufs+0x382/0xf30 [ 232.293233][ T8405] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 232.293255][ T8405] ? __vb2_init_fileio+0x18f/0x1000 [ 232.293276][ T8405] __vb2_init_fileio+0x32d/0x1000 [ 232.293293][ T8405] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.293308][ T8405] ? __pollwait+0x276/0x490 [ 232.293324][ T8405] vb2_core_poll+0x611/0x740 [ 232.293342][ T8405] vb2_poll+0x4b/0xe0 [ 232.293357][ T8405] vb2_fop_poll+0x10e/0x350 [ 232.293374][ T8405] ? __pfx_vb2_fop_poll+0x10/0x10 [ 232.293389][ T8405] v4l2_poll+0x15f/0x220 [ 232.293403][ T8405] ? __pfx_v4l2_poll+0x10/0x10 [ 232.293425][ T8405] do_sys_poll+0x6e5/0xe90 [ 232.293439][ T8405] ? rcu_is_watching+0x13/0xc0 [ 232.293460][ T8405] ? __pfx_do_sys_poll+0x10/0x10 [ 232.293488][ T8405] ? __futex_wait+0x256/0x300 [ 232.293505][ T8405] ? __pfx___pollwait+0x10/0x10 [ 232.293520][ T8405] ? __pfx_pollwake+0x10/0x10 [ 232.293558][ T8405] ? ktime_get_ts64+0x306/0x420 [ 232.293576][ T8405] ? ktime_get_ts64+0x318/0x420 [ 232.293593][ T8405] ? ktime_get_ts64+0x257/0x420 [ 232.293615][ T8405] __x64_sys_poll+0x1b3/0x420 [ 232.293630][ T8405] ? __pfx___x64_sys_poll+0x10/0x10 [ 232.293650][ T8405] do_syscall_64+0x121/0x770 [ 232.293665][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.293678][ T8405] RIP: 0033:0x7fe81e19e159 [ 232.293689][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.293700][ T8405] RSP: 002b:00007fe81f02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 232.293713][ T8405] RAX: ffffffffffffffda RBX: 00007fe81e426450 RCX: 00007fe81e19e159 [ 232.293721][ T8405] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 232.293729][ T8405] RBP: 00007fe81e23506b R08: 0000000000000000 R09: 0000000000000000 [ 232.293737][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.293744][ T8405] R13: 00007fe81e4264e8 R14: 00007fe81e426450 R15: 00007ffd70260b78 [ 232.293760][ T8405] [ 232.667768][ T8406] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 234.496926][ T8432] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5611] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[8432] [ 238.341050][ T8503] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 249.188908][ T8685] FAULT_INJECTION: forcing a failure. [ 249.188908][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 249.188931][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 249.188946][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.188964][ T8685] Call Trace: [ 249.188969][ T8685] [ 249.188975][ T8685] dump_stack_lvl+0x100/0x190 [ 249.188997][ T8685] should_fail_ex.cold+0x5/0xa [ 249.189015][ T8685] should_failslab+0xc2/0x120 [ 249.189033][ T8685] kmem_cache_alloc_noprof+0x92/0x6a0 [ 249.189049][ T8685] ? key_alloc+0xc0f/0x1310 [ 249.189065][ T8685] key_alloc+0xc0f/0x1310 [ 249.189082][ T8685] ? __pfx_assoc_array_find+0x10/0x10 [ 249.189100][ T8685] ? __pfx_key_alloc+0x10/0x10 [ 249.189114][ T8685] ? find_held_lock+0x2b/0x80 [ 249.189131][ T8685] keyring_alloc+0x44/0xc0 [ 249.189146][ T8685] keyctl_get_persistent+0x6c7/0x8b0 [ 249.189184][ T8685] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 249.189202][ T8685] ? __x64_sys_futex+0x34f/0x4d0 [ 249.189215][ T8685] ? __x64_sys_futex+0x358/0x4d0 [ 249.189230][ T8685] ? xfd_validate_state+0x129/0x190 [ 249.189254][ T8685] __do_sys_keyctl+0x3b2/0x5a0 [ 249.189274][ T8685] do_syscall_64+0x121/0x770 [ 249.189290][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.189303][ T8685] RIP: 0033:0x7f1c7679e159 [ 249.189315][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.189326][ T8685] RSP: 002b:00007f1c7758a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 249.189338][ T8685] RAX: ffffffffffffffda RBX: 00007f1c76a26450 RCX: 00007f1c7679e159 [ 249.189346][ T8685] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 249.189354][ T8685] RBP: 00007f1c7683506b R08: 0000000000001000 R09: 0000000000000000 [ 249.189361][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.189368][ T8685] R13: 00007f1c76a264e8 R14: 00007f1c76a26450 R15: 00007ffffa4f5948 [ 249.189385][ T8685] [ 255.587920][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.587955][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.138161][ T8947] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 267.305429][ T8989] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 268.808028][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 273.988682][ T9104] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 279.733752][ T9186] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 281.499028][ T9203] netlink: 342 bytes leftover after parsing attributes in process `syz.1.464'. [ 282.391816][ T9222] usbcore.quirks: string doesn't fit in 127 chars. [ 284.522461][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 286.922706][ T9275] input: jJǸ-9%vJ86 as /devices/virtual/input/input9 [ 287.059589][ T9284] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5610] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9284] [ 290.339997][ T9319] usbcore.quirks: string doesn't fit in 127 chars. [ 290.617314][ T9324] netlink: 338 bytes leftover after parsing attributes in process `syz.1.474'. [ 292.440111][ T9360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.440420][ T9360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.440609][ T9360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.440788][ T9360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.225056][ T9394] FAULT_INJECTION: forcing a failure. [ 294.225056][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 294.225078][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.1.481 Not tainted syzkaller #0 PREEMPT(full) [ 294.225094][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.225101][ T9394] Call Trace: [ 294.225105][ T9394] [ 294.225110][ T9394] dump_stack_lvl+0x100/0x190 [ 294.225133][ T9394] should_fail_ex.cold+0x5/0xa [ 294.225151][ T9394] should_failslab+0xc2/0x120 [ 294.225171][ T9394] __kmalloc_cache_noprof+0x91/0x6d0 [ 294.225184][ T9394] ? sget_fc+0x117/0x1f70 [ 294.225198][ T9394] ? sget_fc+0x1ba/0x1f70 [ 294.225214][ T9394] sget_fc+0x1ba/0x1f70 [ 294.225230][ T9394] ? __pfx_set_anon_super_fc+0x10/0x10 [ 294.225243][ T9394] ? __pfx_sget_fc+0x10/0x10 [ 294.225255][ T9394] ? refcount_dec_not_one+0x136/0x1c0 [ 294.225272][ T9394] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 294.225287][ T9394] ? __kasan_kmalloc+0xaa/0xb0 [ 294.225303][ T9394] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 294.225315][ T9394] ? __kasan_kmalloc+0xaa/0xb0 [ 294.225332][ T9394] ? __pfx_mqueue_fill_super+0x10/0x10 [ 294.225348][ T9394] get_tree_nodev+0x28/0x190 [ 294.225363][ T9394] mqueue_get_tree+0xf1/0x130 [ 294.225379][ T9394] vfs_get_tree+0x92/0x320 [ 294.225390][ T9394] fc_mount_longterm+0x1a/0x270 [ 294.225405][ T9394] mq_init_ns+0x482/0x820 [ 294.225423][ T9394] copy_ipcs+0x3dd/0x7e0 [ 294.225435][ T9394] create_new_namespaces+0x20a/0xac0 [ 294.225454][ T9394] ? security_capable+0x80/0x260 [ 294.225473][ T9394] unshare_nsproxy_namespaces+0xf2/0x220 [ 294.225492][ T9394] ksys_unshare+0x4a2/0xa70 [ 294.225505][ T9394] ? __pfx_ksys_unshare+0x10/0x10 [ 294.225523][ T9394] __x64_sys_unshare+0x31/0x40 [ 294.225534][ T9394] do_syscall_64+0x121/0x770 [ 294.225550][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.225563][ T9394] RIP: 0033:0x7f286f19e159 [ 294.225574][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.225585][ T9394] RSP: 002b:00007f286c7ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.225598][ T9394] RAX: ffffffffffffffda RBX: 00007f286f426450 RCX: 00007f286f19e159 [ 294.225606][ T9394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 294.225612][ T9394] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 294.225620][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.225626][ T9394] R13: 00007f286f4264e8 R14: 00007f286f426450 R15: 00007fffa35a07c8 [ 294.225641][ T9394] [ 294.469821][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.469848][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.469863][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.469907][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.380753][ T9395] i2c i2c-0: delete_device: Can't find device in list [ 298.249466][ T9426] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5610] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9426] [ 300.047630][ T31] audit: type=1800 audit(18646.587:3): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.498" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 306.298658][ T9549] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 309.306432][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 309.346447][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'. [ 312.863428][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 317.026718][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.026752][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.378422][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 323.215800][ T9790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.215911][ T9790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.215992][ T9790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.216986][ T9790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.180082][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 325.259895][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.259921][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 325.259965][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.955716][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 331.244438][ T9892] IPVS: length: 8 != 21224 [ 331.367501][ T9893] random: crng reseeded on system resumption [ 332.047297][ T9902] netlink: 342 bytes leftover after parsing attributes in process `syz.3.556'. [ 333.787163][ T9932] netlink: 338 bytes leftover after parsing attributes in process `syz.3.560'. [ 337.295254][ T9990] IPVS: length: 8 != 21224 [ 339.859547][T10024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.859663][T10024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.859923][T10024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.859997][T10024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.819833][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.899800][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.900744][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.900764][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.836446][T10112] FAULT_INJECTION: forcing a failure. [ 344.836446][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 344.836482][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.3.582 Not tainted syzkaller #0 PREEMPT(full) [ 344.836497][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.836505][T10112] Call Trace: [ 344.836510][T10112] [ 344.836515][T10112] dump_stack_lvl+0x100/0x190 [ 344.836538][T10112] should_fail_ex.cold+0x5/0xa [ 344.836555][T10112] should_failslab+0xc2/0x120 [ 344.836573][T10112] __kmalloc_cache_noprof+0x91/0x6d0 [ 344.836587][T10112] ? sget_fc+0x117/0x1f70 [ 344.836599][T10112] ? sget_fc+0x1ba/0x1f70 [ 344.836615][T10112] sget_fc+0x1ba/0x1f70 [ 344.836632][T10112] ? __pfx_set_anon_super_fc+0x10/0x10 [ 344.836644][T10112] ? __pfx_sget_fc+0x10/0x10 [ 344.836656][T10112] ? refcount_dec_not_one+0x136/0x1c0 [ 344.836673][T10112] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 344.836689][T10112] ? __kasan_kmalloc+0xaa/0xb0 [ 344.836704][T10112] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 344.836716][T10112] ? __kasan_kmalloc+0xaa/0xb0 [ 344.836733][T10112] ? __pfx_mqueue_fill_super+0x10/0x10 [ 344.836750][T10112] get_tree_nodev+0x28/0x190 [ 344.836764][T10112] mqueue_get_tree+0xf1/0x130 [ 344.836780][T10112] vfs_get_tree+0x92/0x320 [ 344.836792][T10112] fc_mount_longterm+0x1a/0x270 [ 344.836807][T10112] mq_init_ns+0x482/0x820 [ 344.836825][T10112] copy_ipcs+0x3dd/0x7e0 [ 344.836837][T10112] create_new_namespaces+0x20a/0xac0 [ 344.836855][T10112] ? security_capable+0x80/0x260 [ 344.836874][T10112] unshare_nsproxy_namespaces+0xf2/0x220 [ 344.836893][T10112] ksys_unshare+0x4a2/0xa70 [ 344.836907][T10112] ? __pfx_ksys_unshare+0x10/0x10 [ 344.836930][T10112] __x64_sys_unshare+0x31/0x40 [ 344.836946][T10112] do_syscall_64+0x121/0x770 [ 344.836962][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.836975][T10112] RIP: 0033:0x7fe81e19e159 [ 344.836987][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.836999][T10112] RSP: 002b:00007fe81f02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.837017][T10112] RAX: ffffffffffffffda RBX: 00007fe81e426450 RCX: 00007fe81e19e159 [ 344.837026][T10112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 344.837034][T10112] RBP: 00007fe81e23506b R08: 0000000000000000 R09: 0000000000000000 [ 344.837041][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.837049][T10112] R13: 00007fe81e4264e8 R14: 00007fe81e426450 R15: 00007ffd70260b78 [ 344.837065][T10112] [ 346.699869][T10129] IPVS: length: 8 != 7912 [ 348.989960][T10139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.990128][T10139] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.990209][T10139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.990286][T10139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.115624][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 351.020425][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.020456][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.020472][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.020487][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 355.004949][T10235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.010530][T10235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.010629][T10235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 355.010706][T10235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.020917][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 357.020943][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.020959][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 357.021003][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.166213][T10336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.166340][T10336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.166420][T10336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.166502][T10336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.891868][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.892219][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.027258][T10366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.027382][T10366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.027458][T10366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.027539][T10366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.738645][T10400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.738761][T10400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.738838][T10400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.738913][T10400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.660481][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.739968][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.739995][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.740028][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.032437][T10513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.032552][T10513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.032627][T10513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.032791][T10513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.020024][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.101063][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.101091][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.101135][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.501340][T10550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.501432][T10550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.501505][T10550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.501577][T10550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.581853][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.581881][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.581898][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.581935][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.461734][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.461767][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.039765][ T31] audit: type=1800 audit(4294967315.810:4): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.649" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 386.759174][T10715] netlink: 338 bytes leftover after parsing attributes in process `syz.2.661'. [ 398.269121][T10877] netlink: 338 bytes leftover after parsing attributes in process `syz.1.687'. [ 399.115882][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 400.967396][T10918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 400.967514][T10918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.967591][T10918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.967675][T10918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.074994][ T31] audit: type=1800 audit(4294967336.850:5): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.696" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 403.029483][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.029513][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.029530][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.029546][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 408.447075][T11018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.447254][T11018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.447368][T11018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.447504][T11018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.816563][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 410.460351][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.460377][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.460393][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.460407][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.517689][T11076] random: crng reseeded on system resumption [ 410.586493][T11076] hub 1-0:1.0: USB hub found [ 410.607921][T11076] hub 1-0:1.0: 1 port detected [ 412.796102][T11102] FAULT_INJECTION: forcing a failure. [ 412.796102][T11102] name failslab, interval 1, probability 0, space 0, times 0 [ 412.796150][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 412.796167][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.796180][T11102] Call Trace: [ 412.796206][T11102] [ 412.796231][T11102] dump_stack_lvl+0x100/0x190 [ 412.796293][T11102] should_fail_ex.cold+0x5/0xa [ 412.796322][T11102] should_failslab+0xc2/0x120 [ 412.796390][T11102] __kmalloc_cache_noprof+0x91/0x6d0 [ 412.796428][T11102] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 412.796441][T11102] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 412.796578][T11102] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 412.796593][T11102] vidtv_channel_s302m_init+0x302/0x9b0 [ 412.796610][T11102] ? __kasan_kmalloc+0xaa/0xb0 [ 412.796627][T11102] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 412.796642][T11102] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 412.796661][T11102] ? __asan_memcpy+0x3c/0x60 [ 412.796676][T11102] vidtv_channels_init+0x4c/0xb0 [ 412.796690][T11102] vidtv_mux_init+0x9d9/0xbf0 [ 412.796707][T11102] vidtv_start_feed+0x34e/0x500 [ 412.796733][T11102] ? __pfx_vidtv_start_feed+0x10/0x10 [ 412.796750][T11102] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 412.796776][T11102] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 412.796797][T11102] ? mark_held_locks+0x40/0x70 [ 412.796818][T11102] ? __pfx_vidtv_start_feed+0x10/0x10 [ 412.796835][T11102] dmx_ts_feed_start_filtering+0xf6/0x220 [ 412.796900][T11102] dvb_dmxdev_start_feed+0x273/0x3f0 [ 412.796920][T11102] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 412.796939][T11102] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 412.796960][T11102] dvb_demux_do_ioctl+0xe64/0x1200 [ 412.796982][T11102] dvb_usercopy+0x167/0x340 [ 412.796997][T11102] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 412.797015][T11102] ? __pfx_dvb_usercopy+0x10/0x10 [ 412.797028][T11102] ? __fget_files+0x34/0x3d0 [ 412.797073][T11102] ? __fget_files+0x21f/0x3d0 [ 412.797092][T11102] dvb_demux_ioctl+0x29/0x40 [ 412.797107][T11102] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 412.797124][T11102] __x64_sys_ioctl+0x18e/0x210 [ 412.797156][T11102] do_syscall_64+0x121/0x770 [ 412.797230][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.797251][T11102] RIP: 0033:0x7f286f19e159 [ 412.797263][T11102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.797275][T11102] RSP: 002b:00007f286ffc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.797314][T11102] RAX: ffffffffffffffda RBX: 00007f286f425fa0 RCX: 00007f286f19e159 [ 412.797322][T11102] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000005 [ 412.797330][T11102] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 412.797337][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.797345][T11102] R13: 00007f286f426038 R14: 00007f286f425fa0 R15: 00007fffa35a07c8 [ 412.797363][T11102] [ 413.860245][T11127] FAULT_INJECTION: forcing a failure. [ 413.860245][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 413.860273][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 413.860291][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.860300][T11127] Call Trace: [ 413.860305][T11127] [ 413.860310][T11127] dump_stack_lvl+0x100/0x190 [ 413.860335][T11127] should_fail_ex.cold+0x5/0xa [ 413.860353][T11127] should_failslab+0xc2/0x120 [ 413.860374][T11127] __kmalloc_noprof+0xfc/0x840 [ 413.860406][T11127] ? tracepoint_add_func+0x3a8/0x1150 [ 413.860440][T11127] ? __pfx_blk_add_trace_split+0x10/0x10 [ 413.860460][T11127] tracepoint_add_func+0x3a8/0x1150 [ 413.860479][T11127] ? __pfx_blk_add_trace_split+0x10/0x10 [ 413.860499][T11127] ? __pfx_blk_add_trace_split+0x10/0x10 [ 413.860515][T11127] tracepoint_probe_register+0xc4/0x110 [ 413.860534][T11127] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 413.860552][T11127] ? __pfx_blk_add_trace_split+0x10/0x10 [ 413.860569][T11127] ? relay_open+0x793/0xa00 [ 413.860586][T11127] blk_register_tracepoints+0x2be/0x440 [ 413.860600][T11127] blk_trace_setup_finalize+0x320/0x3a0 [ 413.860615][T11127] blk_trace_setup+0x254/0x440 [ 413.860634][T11127] ? __pfx_blk_trace_setup+0x10/0x10 [ 413.860655][T11127] ? vsnprintf+0x4c5/0x1300 [ 413.860677][T11127] ? __pfx_vsnprintf+0x10/0x10 [ 413.860701][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.860719][T11127] ? do_vfs_ioctl+0x226/0x13e0 [ 413.860736][T11127] blk_trace_ioctl+0x245/0x320 [ 413.860754][T11127] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 413.860773][T11127] ? find_held_lock+0x2b/0x80 [ 413.860788][T11127] ? hook_file_ioctl_common+0x140/0x440 [ 413.860851][T11127] blkdev_ioctl+0x17c/0x6f0 [ 413.860916][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 413.860938][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 413.860958][T11127] __x64_sys_ioctl+0x18e/0x210 [ 413.860973][T11127] do_syscall_64+0x121/0x770 [ 413.860989][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.861003][T11127] RIP: 0033:0x7f286f19e159 [ 413.861015][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.861027][T11127] RSP: 002b:00007f286ffa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.861039][T11127] RAX: ffffffffffffffda RBX: 00007f286f426090 RCX: 00007f286f19e159 [ 413.861048][T11127] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 413.861056][T11127] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 413.861064][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.861073][T11127] R13: 00007f286f426128 R14: 00007f286f426090 R15: 00007fffa35a07c8 [ 413.861090][T11127] [ 413.861222][T11127] ------------[ cut here ]------------ [ 413.861241][T11127] ret [ 413.861252][T11127] WARNING: kernel/trace/blktrace.c:1365 at blk_register_tracepoints+0x40e/0x440, CPU#0: syz.1.722/11127 [ 414.163872][T11127] Modules linked in: [ 414.168828][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 414.178204][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.188343][T11127] RIP: 0010:blk_register_tracepoints+0x40e/0x440 [ 414.194757][T11127] Code: 0f 0b 90 e9 5e fe ff ff e8 4f 85 f7 ff 90 0f 0b 90 e9 7d fe ff ff e8 41 85 f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 33 85 f7 ff 90 <0f> 0b 90 e9 bb fe ff ff e8 25 85 f7 ff 90 0f 0b 90 e9 da fe ff ff [ 414.214595][T11127] RSP: 0018:ffffc900053dfb00 EFLAGS: 00010283 [ 414.221486][T11127] RAX: 0000000000042d70 RBX: 00000000fffffff4 RCX: ffffc9000ec5a000 [ 414.229523][T11127] RDX: 0000000000080000 RSI: ffffffff82140bbd RDI: ffff888029f65dc0 [ 414.237575][T11127] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 414.245625][T11127] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 414.254421][T11127] R13: ffff88802797a540 R14: ffffc900053dfda0 R15: 0000000000000001 [ 414.263069][T11127] FS: 00007f286ffa56c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 414.272261][T11127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.278868][T11127] CR2: 00002000009de000 CR3: 0000000074bd6000 CR4: 00000000003526f0 [ 414.287033][T11127] Call Trace: [ 414.290533][T11127] [ 414.293478][T11127] blk_trace_setup_finalize+0x320/0x3a0 [ 414.299063][T11127] blk_trace_setup+0x254/0x440 [ 414.304152][T11127] ? __pfx_blk_trace_setup+0x10/0x10 [ 414.309546][T11127] ? vsnprintf+0x4c5/0x1300 [ 414.314100][T11127] ? __pfx_vsnprintf+0x10/0x10 [ 414.318891][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.324879][T11127] ? do_vfs_ioctl+0x226/0x13e0 [ 414.329741][T11127] blk_trace_ioctl+0x245/0x320 [ 414.334550][T11127] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 414.339923][T11127] ? find_held_lock+0x2b/0x80 [ 414.344643][T11127] ? hook_file_ioctl_common+0x140/0x440 [ 414.351118][T11127] blkdev_ioctl+0x17c/0x6f0 [ 414.356134][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.361280][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.366567][T11127] __x64_sys_ioctl+0x18e/0x210 [ 414.371422][T11127] do_syscall_64+0x121/0x770 [ 414.376056][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.382385][T11127] RIP: 0033:0x7f286f19e159 [ 414.386915][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.406651][T11127] RSP: 002b:00007f286ffa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.415270][T11127] RAX: ffffffffffffffda RBX: 00007f286f426090 RCX: 00007f286f19e159 [ 414.423348][T11127] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 414.431505][T11127] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 414.439513][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.447553][T11127] R13: 00007f286f426128 R14: 00007f286f426090 R15: 00007fffa35a07c8 [ 414.456387][T11127] [ 414.459935][T11127] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 414.467207][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 414.476490][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.486532][T11127] Call Trace: [ 414.489893][T11127] [ 414.492871][T11127] dump_stack_lvl+0x100/0x190 [ 414.497568][T11127] vpanic+0x553/0x970 [ 414.501546][T11127] ? __pfx_vpanic+0x10/0x10 [ 414.506034][T11127] panic+0xd1/0xe0 [ 414.509818][T11127] ? __pfx_panic+0x10/0x10 [ 414.514220][T11127] check_panic_on_warn.cold+0x19/0x34 [ 414.519581][T11127] ? blk_register_tracepoints+0x40e/0x440 [ 414.525286][T11127] __warn.cold+0x191/0x318 [ 414.529680][T11127] __report_bug+0x30f/0x440 [ 414.534241][T11127] ? blk_register_tracepoints+0x40e/0x440 [ 414.539978][T11127] ? __pfx___report_bug+0x10/0x10 [ 414.545009][T11127] ? __mutex_unlock_slowpath+0x35d/0x930 [ 414.550785][T11127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 414.556840][T11127] ? blk_register_tracepoints+0x40e/0x440 [ 414.562570][T11127] report_bug+0xb3/0x220 [ 414.566811][T11127] ? blk_register_tracepoints+0x40e/0x440 [ 414.572526][T11127] handle_bug+0x16a/0x2a0 [ 414.576867][T11127] exc_invalid_op+0x17/0x50 [ 414.581368][T11127] asm_exc_invalid_op+0x1a/0x20 [ 414.586322][T11127] RIP: 0010:blk_register_tracepoints+0x40e/0x440 [ 414.592765][T11127] Code: 0f 0b 90 e9 5e fe ff ff e8 4f 85 f7 ff 90 0f 0b 90 e9 7d fe ff ff e8 41 85 f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 33 85 f7 ff 90 <0f> 0b 90 e9 bb fe ff ff e8 25 85 f7 ff 90 0f 0b 90 e9 da fe ff ff [ 414.612389][T11127] RSP: 0018:ffffc900053dfb00 EFLAGS: 00010283 [ 414.618442][T11127] RAX: 0000000000042d70 RBX: 00000000fffffff4 RCX: ffffc9000ec5a000 [ 414.626399][T11127] RDX: 0000000000080000 RSI: ffffffff82140bbd RDI: ffff888029f65dc0 [ 414.634790][T11127] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 414.642764][T11127] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 414.650737][T11127] R13: ffff88802797a540 R14: ffffc900053dfda0 R15: 0000000000000001 [ 414.658762][T11127] ? blk_register_tracepoints+0x40d/0x440 [ 414.664591][T11127] blk_trace_setup_finalize+0x320/0x3a0 [ 414.670146][T11127] blk_trace_setup+0x254/0x440 [ 414.674912][T11127] ? __pfx_blk_trace_setup+0x10/0x10 [ 414.680196][T11127] ? vsnprintf+0x4c5/0x1300 [ 414.684813][T11127] ? __pfx_vsnprintf+0x10/0x10 [ 414.689565][T11127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.695545][T11127] ? do_vfs_ioctl+0x226/0x13e0 [ 414.700379][T11127] blk_trace_ioctl+0x245/0x320 [ 414.705132][T11127] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 414.710400][T11127] ? find_held_lock+0x2b/0x80 [ 414.715058][T11127] ? hook_file_ioctl_common+0x140/0x440 [ 414.720595][T11127] blkdev_ioctl+0x17c/0x6f0 [ 414.725125][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.730163][T11127] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.735255][T11127] __x64_sys_ioctl+0x18e/0x210 [ 414.740108][T11127] do_syscall_64+0x121/0x770 [ 414.744700][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.750598][T11127] RIP: 0033:0x7f286f19e159 [ 414.755188][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.774967][T11127] RSP: 002b:00007f286ffa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.783392][T11127] RAX: ffffffffffffffda RBX: 00007f286f426090 RCX: 00007f286f19e159 [ 414.791362][T11127] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 414.799411][T11127] RBP: 00007f286f23506b R08: 0000000000000000 R09: 0000000000000000 [ 414.807373][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.815345][T11127] R13: 00007f286f426128 R14: 00007f286f426090 R15: 00007fffa35a07c8 [ 414.823323][T11127] [ 414.826385][T11127] Kernel Offset: disabled [ 414.830738][T11127] Rebooting in 86400 seconds..