last executing test programs: 15.3337445s ago: executing program 2 (id=1403): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000200)='\x00', 0x269) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1015a0, 0x0) r2 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028bd700003dcdf25010000000c3fd164cb19715e7f7ab38fceef349be9d7d72a83ee9480b3a42cdcdb3d7c8881fad4ea0f8811bac94a6993e8ab12c8e93d518f6c43f6474a207bd8da1bdf21fd8c32e63314700273e0e99ef0f3120ad85acdd7a6dc0680e1c0bca3030ae1e57398f3bcd1baa22d6f11ea03f32149179a7590f3873effb36c784c08d8f63c0b43078fed8f67887e8e1d1816776cf52af670ae80668eccbca242a0af85f16cb6aba8adea710da6eb177a9d31e0f5a067a5a8818a6cf431ea4b47dc5d"], 0x14}}, 0xc0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) pread64$auto(r5, 0x0, 0x100006, 0xc982) read$auto_proc_pid_smaps_operations_internal(r2, &(0x7f00000002c0)=""/190, 0xfffffe39) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20009) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(0x0, 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 12.803736464s ago: executing program 3 (id=1405): unshare$auto(0x40000080) r0 = prctl$auto(0x200000, 0xffffffffffffff01, 0x0, 0xee2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socketpair$auto(0x4, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000, 0x1) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) fgetxattr$auto(r0, &(0x7f0000000180)='*\x00', &(0x7f0000000340)="29c8ebaf6947f3ffe0dbb507862dce7684a9ce6f6102bafc819c51267530a8993117f18ac399be48f79e58448426cc9d266d8bf870a48d77a21382c16a529b73e1bf97c470fa8c936a02ff2b2b6d470e27c15b66b80b57663bc80a7d43fa1978131ee3b22b909d8b4584a64ca680746fdce6287bdfe725d47c8aaa85ecc55eb29324b6d3627671f06d2bca1cd51f200cf60fa212a9b7bceb60399dc10c06ca027225fa8fb357450f80a1374f38d625d341198604e9bdd890e010da15b2f4575507166edd9c39ab6b395fe5cfd73963475e70418707e1fa6dcce7940f0121aa9f19f919b283", 0x8) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r3, 0x1, 0x44, &(0x7f0000000000)='\xa0\xbe:\xc9\x00', 0x5) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer\x00', 0x103143, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) open_by_handle_at$auto(r5, &(0x7f0000000140)={0x8, 0x20002, "0100000001000000"}, 0xc) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99\x88\xa2\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x10, 0x3) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x5, 0x9, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x4fa5}, 0x1, 0x4000081, 0x3, @inferred, @integer={0x0, 0x2, 0x8001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b6427a441b078fb2c1c61c328894e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, 0x0) 12.729011634s ago: executing program 0 (id=1406): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000240)=""/203, 0xcb) prctl$auto(0x38, 0x634, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) swapon$auto(0x0, 0x2) swapon$auto(&(0x7f0000000140)='.)\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex$auto(&(0x7f0000002b80)=0x80000000, 0x0, 0x8, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) read$auto(r2, 0x0, 0x7) mmap$auto(0x0, 0x5, 0xdf, 0x9972, 0xffffffffffffffff, 0x8000) write$auto(r1, &(0x7f0000000040)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) ioctl$auto(r3, 0x4008556c, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty60\x00', 0x24900, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x404, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x2, 0xffffffff7ffffffc, 0x8009, 0xb, 0x5}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/147, 0x93) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 12.57147678s ago: executing program 2 (id=1407): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = setfsgid$auto(0x0) quotactl_fd$auto(0xffffffffffffffff, 0x7, r2, &(0x7f00000033c0)="c6e7ceafec467c07a9371614b896f9d1797dd49271f66699e24deaac5fcfe05cd1977860304976aafe7b369144b0b80eb948e6ac09a2f4cc54b7b707c95d92d9d642330363cd2c63b172de9bd00ab739f094a3b8e686d9663d37307a95") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x200000403000}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, 0x0, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0xfffffffc, 0xee01, 0xee01, 0xffc, 0x87, 0x40, 0x3}, 0x0, &(0x7f0000000080)=0x8, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff}) setfsuid$auto(0xee00) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x10000009, 0xffffffffffff7ffd, 0x5, 0x1de, 0x2, 0x8, 0x10000, 0x4007, "00000000ce7b070040005e6b00", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x86, 0xb92, 0xffff, 0x3ff, 0x1, @attach_prog_fd=r0, 0x440, 0xb, 0x5, 0x202, 0x200000, 0xffffffffffffffff, r3}, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0xc00, 0x70bd27, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0xf8e2b211c1709eaa}, 0x24044020) setuid$auto(0xe) unshare$auto(0xb) bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_7={@start_id=0x1, 0x4, 0x5}, 0x6) setresgid$auto(0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000680)='\\@', 0x100000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.517367787s ago: executing program 1 (id=1408): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x1, 0x5, 0x0) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x1014a0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x3ffffffffffffc, 0x400005, 0x800000000000002, 0x19, r2, 0x8001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 11.57915068s ago: executing program 0 (id=1409): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_BUF_LOCK(r0, 0x3, 0x48, &(0x7f00000000c0)='-\\%.[:\x00', &(0x7f0000000100)=0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x900064b6, 0x6162) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000700}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) socket(0x15, 0x5, 0x0) r3 = clone$auto(0x2, 0x9, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x9b, 0xa35) prctl$auto(0x0, 0x1, r3, 0x5, 0x7f) unshare$auto(0x40000080) 10.580984693s ago: executing program 1 (id=1410): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)={0x0, 0xc7, {0xfffffffb, 0x7, 0x5, 0x0, 0x0, 0x1, 0x101, 0x7, 0x2}}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0xf) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) mmap$auto(0x230c11000000, 0x3, 0x1000000000001, 0x11, r3, 0x0) r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r2, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r4, @new_prog_fd, 0x403, @old_prog_fd=r4}, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = setfsgid$auto(0x0) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x383) quotactl$auto(0x7, &(0x7f0000000340)='/dev/snd/controlC0\x00', r5, &(0x7f0000000380)="ea47c21dabc3b73027dffbd27c575aa0d8e4cd9c9ff6b6eb2240cbf5ee5013fd94e534f1974a0078a734f7112afcd367e1fedf0fcef840a252a244b9e6ea12e359df829b66d2c8d7464cbbc887") bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0xfffffffffffffffd, 0xff) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) setfsuid$auto(0xee00) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4}) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40103d0b, 0x0) 10.577156514s ago: executing program 3 (id=1418): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r0, 0x0, 0x101400000000006) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x570, 0x0, 0x6}]}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 10.491136606s ago: executing program 2 (id=1411): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x1, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/mq/0/cpu_list\x00', 0x672461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) write$auto(r0, 0x0, 0x7) unshare$auto(0x40000080) madvise$auto(0x800, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x6) setns(0xc9, 0x0) socket(0x24, 0x3, 0x4e3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) keyctl$auto(0x41803206, 0x0, 0x6, 0x0, 0x8000000000000000) chown$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) connect$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xfffffffc) r2 = gettid() sched_getaffinity$auto(r2, 0xd0700000, &(0x7f0000000000)=0x401) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 9.158126191s ago: executing program 0 (id=1412): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x202, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd2\x00', 0x40000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000040)=0x7a, 0x4) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000ec0)=""/4096, 0x1000) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0x80c84d0a, r2) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) 7.118309054s ago: executing program 1 (id=1413): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, 0x0, 0x0) r1 = socket(0x22, 0x5, 0x84) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x181000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x84183, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r4) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14e0}, 0x1, 0x0, 0x0, 0x4004020}, 0x40090) socket(0xf, 0x3, 0xdfb1) select$auto(0x6, 0x0, &(0x7f0000000140)={[0x7fffffffffffffff, 0x1000, 0x5, 0x4000004, 0x24, 0x6, 0x20000010001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x100000000, 0x5, 0x9, 0x6, 0x4, 0x0, 0xd, 0x7, 0xf, 0x1, 0x1, 0x61b, 0x7, 0x0, 0xf, 0xffff]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) epoll_ctl$auto(r2, 0x2e, r1, &(0x7f0000000100)={0x200, 0x10004}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 7.013757183s ago: executing program 3 (id=1414): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x46, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x800, 0xe) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x1b0) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) lsetxattr$auto(0x0, &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0xf4e9, 0x2) write$auto(r4, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r5, &(0x7f0000000000)='system.posix_a)\xb0_access\x00') read$auto_ima_measurements_count_ops_ima_fs(r3, 0x0, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon38\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), r1) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7333876265d82f89}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x16d080, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x5, @broadcast}, 0x50) 4.95583238s ago: executing program 1 (id=1415): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) acct$auto(0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fadvise64$auto(0xffffffffffffffff, 0x20000008002, 0x9, 0x3) read$auto_udf_dir_operations_udfdecl(0xffffffffffffffff, &(0x7f0000000580)=""/129, 0x81) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0x5) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(r0, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x95) listen$auto(r1, 0x1) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) r2 = prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) statmount$auto(0x0, 0x0, 0x800000000001fe, 0x807ff) sched_getattr$auto(0x0, 0x0, 0xd33, 0x0) statmount$auto(&(0x7f0000000000)={0x18, @inferred, 0x400000080000029, 0x100000001, 0x8}, 0x0, 0x80000000000206, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) ioctl$auto_UI_END_FF_ERASE(r2, 0x400c55cb, 0x0) 4.955655547s ago: executing program 2 (id=1416): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x902, 0x0) r0 = prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket(0x15, 0x6, 0x1) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x108002, 0x0) kcmp$auto_KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4020ae76, &(0x7f0000000040)={0x4}) r3 = open(&(0x7f0000000800)='./file0\x00', 0xcae41, 0x154) fcntl$auto(r3, 0x400, 0x1) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1445baf6", @ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.94304706s ago: executing program 0 (id=1424): setns(0xc9, 0x0) ioctl$auto(0x3, 0x8946, 0x7f) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev5\x00', 0x0, 0x0) ioctl$auto(r0, 0x80885659, 0xffffffffffffffff) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x11, 0xa, 0x300) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101041, 0x0) write$auto(r2, &(0x7f0000000180)='/sys/kernel/se\x06\x00rity\xee\xa1\x00\x00rity/\xefvL/evm_xattss\x00\x00\x00z\x01t\x7f\xedn1\xc9?\x8a{T\xad#*\xe5<\xe40\xb3\x82\x1d\x18\xfa{F\xd4\xd8rUI\xe2B!\xd5U\xfb\x17\x92\xd4\x83aQ\xc5\xfc\x96R\xb4\x943?\x98\xe3\xd4\x12W/`\x1a$\xe8\xeaA\xe0\xd0\xa3J\x02\x00\x00\x005\xe6mD\x94\xfbr\x88\xad\x9f\xe3\xd9\xd1\x10\x0fZ\xbeM\x8b\b\xfe|M\xc3\xec\xa4\xff\xf0\x83\x885\x9ax\xbb\xf1\x95>\x82\x01\xead\xf5\xeb\x1c_\xab=\t\x00\xc6CZ\x901\x84A!\xccjoW\xeae\x92\xb7\x86\xf1\xe7i~KD\xdaG0:\xfe\x98\xe2\x8aS\x80\x00\x00\x02\x00\x00\x00\x00\x00\x00\x86$\xd21\x1d\xfd\x00\x86\x94_[\\\x15\x03\x00\x88\xf4\x15t\xa17#\\', 0x20000002) lseek$auto(0x3, 0x0, 0x1) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={0x0, 0x10, 0x7fff, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x7ff, 0x4, 0x2, 0x1, 0xffffffffffffff7e, 0x2eb, 0x9, 0xcda4, 0x2, 0x80}, 0xfffffffc) ioctl$auto(0x3, 0x541b, 0x38) stat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0xffffffffffff0001, 0x3ff, 0xbb, 0x38, 0x0, r3, 0x0, 0xe745, 0x43e, 0x8, 0x0, 0xfffffffffffffffa, 0x6fda889f, 0x10000, 0x4, 0x2, 0x9}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000001c0)='1\xc7k\x04\x00'/14, 0x81) move_pages$auto(0x0, 0x5, &(0x7f0000000480)=&(0x7f0000000380)="36b8f7a3ad74b71309369daf592099eda47c36c28b0c5d75830b5ed3cdeea863e071b958279d9767f929658294f1df36d07adc3b87b0746f5ad16eda135b5b79cfd8f988d956806fe56611fb05cb917571fb0abc94f063ae341bdc0178c32061aca85769d4c1a7c47e25ff8e6cb954f88cd63f1db9aa5da6900c50854aaf43455949add35398bcc99b1bc4a75868162eca1f944cad470346b9b8cec0f0f22ef0533643df58bb561cad154e44fe31d592f21ffbc0f8459df800db6db9fd9129d6281e0842b23291c81d3db0c9b04552c4ef3f", &(0x7f00000004c0)=0x8, &(0x7f0000000500)=0x5, 0xf) setreuid$auto(0x80000000, 0x7fffffffffffffff) setreuid$auto(0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.857429641s ago: executing program 2 (id=1417): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x22) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000180)={{@raw=0x4, 0x8046, 0x9, 0x3, "466ec7a142dc3fc3cc899d90d2c4041b3a965ea38906629273d96a8a2caf80eaa5a2633952a1d542a4106586", @raw=0x2}, 0x1, @bytes=@data_ptr=&(0x7f0000000100)='\x00', "6e25eddb6294aa652deb351db1439d1963b6317458ee37183ac0ee7d2acea15a2cf4b58ff74ed704789e4c5954c5f1e65981fa1c3805f7b312232b606ffaca5404f327a11854f31f47bc3997d28699002c74aaf5170ccef091963fe08e11c751316215b6d9caed7993017a68ce215fa4dcb4f89646fd9e8515a198089ef21753"}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = setfsgid$auto(0xee01) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) mseal$auto(0x0, 0x7dda, 0x0) r1 = socket(0x1, 0x1, 0x1) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0xfdf3) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x0) epoll_pwait2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0x3}, 0x2, 0x0, &(0x7f00000000c0)={0xfff}, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'pim6reg1\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.857229915s ago: executing program 3 (id=1419): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x10b703, 0x0) unshare$auto(0x40000080) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) write$auto(0x3, 0x0, 0x81) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4000085) r2 = prctl$auto_PR_SET_MM_ENV_START(0x1, 0xa, 0xffffffffffffffff, 0x5, 0xf3) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), r2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) setresgid$auto(0x0, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x174) lsetxattr$auto(0x0, 0x0, 0x0, 0x2, 0x0) futimesat$auto(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1f, &(0x7f0000000040)='\xd7\x00', 0x1ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.810166406s ago: executing program 0 (id=1420): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x1, 0x5, 0x0) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x1014a0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x3ffffffffffffc, 0x400005, 0x800000000000002, 0x19, r2, 0x8001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 2.775294746s ago: executing program 1 (id=1421): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0xfff, 0x1ff, 0xfffffffd) unshare$auto(0x7) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xb, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x1816c0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setns(0xc9, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x805, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0xba342, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) unshare$auto(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$auto(r1, 0x0, 0x7) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$auto(0x2, 0x24, 0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 943.197687ms ago: executing program 3 (id=1422): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r2, r1, 0x0, 0x10000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/030/001\x00', 0x2901, 0x0) ioctl$auto(r3, 0x40085511, r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) unshare$auto(0x40000080) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x7ffffffc}, 0x6, 0x3, 0x4, 0x2e) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000100)="c1a08ff911e70f9bd45dc76dce469ba07ac57e84832083467f915366951f892324992b3af7c92258b5eb456997d119d51563fe86deb22d74fac958212ea013de33d9bbf4ba7c420738a015bb047da13661314ecc6e4c883bbfa8f17e5483ccbb5bf2494fa9875d6d57089e69af8a28f4bb08b1816be4ba78292a686b121f6d", 0xc) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0xff0f000000000000) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x4104c0, 0x0) socket(0xb, 0x800, 0x4) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x101040, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f0000002040)) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) 22.276262ms ago: executing program 3 (id=1423): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x202, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd2\x00', 0x40000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000040)=0x7a, 0x4) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0x80c84d0a, r1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(r2, 0x0, 0xfff) 20.920234ms ago: executing program 1 (id=1432): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.0/power/control\x00', 0x1c1903, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) unshare$auto(0x0) mmap$auto(0x0, 0xffffffffffffff00, 0xfffd, 0xfffffffffffff19f, r0, 0x100008000) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r0, 0x84, 0x18, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0x40000000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) set_mempolicy$auto(0xfffffffe, &(0x7f00000000c0)=0x5, 0x8000000000000002) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/mac80211/parameters/ieee80211_default_rc_algo\x00', 0x189002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) unshare$auto(0xe8) sendfile$auto(0x3, r1, 0x0, 0x101400000000006) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) socket(0x27, 0x3, 0x1) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.451092ms ago: executing program 0 (id=1425): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r1, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6") write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="158f4a2b") r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r4, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) poll$auto(0x0, 0x8, 0x4) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92d, 0x285, 0xf8, r1, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) 0s ago: executing program 2 (id=1426): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x1, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mremap$auto(0x0, 0x9, 0x3fd6, 0x0, 0x1ffffffa) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x3) io_uring_setup$auto(0x59, 0x0) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy10/airtime_flags\x00', 0x2641, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = gettid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0) write$auto(r1, 0x0, 0x40100000a3d5) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r1, 0x0, 0xa10) close_range$auto(0x2, 0x8, 0x0) kill$auto(r0, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unlink$auto(&(0x7f00000002c0)='}[,&*}\x00') sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250400000008000800", @ANYRES32=0x0, @ANYBLOB="f86f18814ae58bc2d13367adb86d64292801d202cec0a3d422e0f95077eb01314c245affad09b75af55fdb653616fe8c6ab4eac68ffaf22465fae93b0e522f7b9536154c24934aa2471255c16e4973803fbbc7670041b3212fb8b4bcd0ac"], 0x1c}}, 0x10) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(0xffffffffffffffff, 0x40184152, &(0x7f00000000c0)={0xd819, &(0x7f0000000100)=0x0, 0x1}) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) semtimedop$auto(0x40, &(0x7f0000000180)={0xbcf, 0x6, 0xfffe}, 0x7, &(0x7f00000001c0)={0x3106}) ioctl$auto_LOOP_CTL_GET_FREE(r4, 0x4c82, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 83.957520][ T5606] cgroup: Unknown subsys name 'net' [ 84.052986][ T5606] cgroup: Unknown subsys name 'cpuset' [ 84.056570][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.822584][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.243666][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.248030][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.256574][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.272346][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.273115][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.391942][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.395076][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.396156][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.397661][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.398384][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.515173][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.516404][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.517810][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.518587][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.518858][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.538870][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.544834][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.546386][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.572757][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.580189][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.118424][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.118593][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.118752][ T5616] bridge_slave_0: entered allmulticast mode [ 90.125097][ T5616] bridge_slave_0: entered promiscuous mode [ 90.187445][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.187545][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.187644][ T5616] bridge_slave_1: entered allmulticast mode [ 90.189091][ T5616] bridge_slave_1: entered promiscuous mode [ 90.280156][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.315095][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.340415][ T52] Bluetooth: hci0: command tx timeout [ 90.380363][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.380537][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.380671][ T5622] bridge_slave_0: entered allmulticast mode [ 90.382116][ T5622] bridge_slave_0: entered promiscuous mode [ 90.438290][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.438397][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.438532][ T5622] bridge_slave_1: entered allmulticast mode [ 90.447660][ T5622] bridge_slave_1: entered promiscuous mode [ 90.454803][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.455130][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.455500][ T5626] bridge_slave_0: entered allmulticast mode [ 90.463887][ T5626] bridge_slave_0: entered promiscuous mode [ 90.485896][ T5616] team0: Port device team_slave_0 added [ 90.486403][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.486698][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.487080][ T5625] bridge_slave_0: entered allmulticast mode [ 90.499595][ T52] Bluetooth: hci1: command tx timeout [ 90.505245][ T5625] bridge_slave_0: entered promiscuous mode [ 90.539681][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.539799][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.539948][ T5626] bridge_slave_1: entered allmulticast mode [ 90.541731][ T5626] bridge_slave_1: entered promiscuous mode [ 90.553549][ T5616] team0: Port device team_slave_1 added [ 90.554132][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.554438][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.557131][ T5625] bridge_slave_1: entered allmulticast mode [ 90.562586][ T5625] bridge_slave_1: entered promiscuous mode [ 90.581392][ T52] Bluetooth: hci2: command tx timeout [ 90.645627][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.659763][ T52] Bluetooth: hci3: command tx timeout [ 90.694161][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.704072][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.708998][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.709017][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.710542][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.731065][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.776071][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.776793][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.776813][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.776851][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.788574][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.885178][ T5622] team0: Port device team_slave_0 added [ 90.918112][ T5626] team0: Port device team_slave_0 added [ 90.925322][ T5622] team0: Port device team_slave_1 added [ 90.927330][ T5625] team0: Port device team_slave_0 added [ 90.933863][ T5626] team0: Port device team_slave_1 added [ 90.967913][ T5625] team0: Port device team_slave_1 added [ 91.037378][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.037402][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.037439][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.038638][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.038658][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.038706][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.068492][ T5616] hsr_slave_0: entered promiscuous mode [ 91.073686][ T5616] hsr_slave_1: entered promiscuous mode [ 91.141297][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.141329][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.141367][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.143471][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.143487][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.143518][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.163674][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.163722][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.163818][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.264497][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.265277][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.265376][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.397207][ T5626] hsr_slave_0: entered promiscuous mode [ 91.398029][ T5626] hsr_slave_1: entered promiscuous mode [ 91.398729][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 91.398810][ T5626] Cannot create hsr debugfs directory [ 91.473147][ T5622] hsr_slave_0: entered promiscuous mode [ 91.473957][ T5622] hsr_slave_1: entered promiscuous mode [ 91.474530][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 91.474562][ T5622] Cannot create hsr debugfs directory [ 91.485766][ T5625] hsr_slave_0: entered promiscuous mode [ 91.488557][ T5625] hsr_slave_1: entered promiscuous mode [ 91.490756][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 91.490782][ T5625] Cannot create hsr debugfs directory [ 91.954264][ T190] cfg80211: failed to load regulatory.db [ 91.995160][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.012560][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.013772][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.016590][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.017475][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.050699][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.052049][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.056173][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.155217][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.166189][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.167690][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.185613][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.188856][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.205207][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.206141][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.224808][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.329814][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.334314][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.335219][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.338952][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.371785][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.376175][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.377333][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.386048][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.420056][ T52] Bluetooth: hci0: command tx timeout [ 92.514595][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.516866][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.529308][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.550487][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.554152][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.556005][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.565853][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.579817][ T52] Bluetooth: hci1: command tx timeout [ 92.587569][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.605007][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.620379][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.654211][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.654491][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.659265][ T52] Bluetooth: hci2: command tx timeout [ 92.714626][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.714713][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.741443][ T52] Bluetooth: hci3: command tx timeout [ 92.805650][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.848992][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.904142][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.936261][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.958068][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.958210][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.998671][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.998801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.018323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.018454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.066680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.066834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.129374][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.205068][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.244344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.244433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.246510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.246601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.277239][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.010629][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.205499][ T5616] veth0_vlan: entered promiscuous mode [ 94.244435][ T5616] veth1_vlan: entered promiscuous mode [ 94.368382][ T5616] veth0_macvtap: entered promiscuous mode [ 94.387370][ T5616] veth1_macvtap: entered promiscuous mode [ 94.436880][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.479458][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.500387][ T52] Bluetooth: hci0: command tx timeout [ 94.572254][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.624748][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.640082][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.640145][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.640200][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646954][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.659933][ T52] Bluetooth: hci1: command tx timeout [ 94.740486][ T52] Bluetooth: hci2: command tx timeout [ 94.820686][ T52] Bluetooth: hci3: command tx timeout [ 94.835800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.835840][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.885578][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.938861][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.938889][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.013553][ T5626] veth0_vlan: entered promiscuous mode [ 95.018705][ T5625] veth0_vlan: entered promiscuous mode [ 95.062647][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.067423][ T5626] veth1_vlan: entered promiscuous mode [ 95.106878][ T5625] veth1_vlan: entered promiscuous mode [ 95.168474][ T5622] veth0_vlan: entered promiscuous mode [ 95.228679][ T5622] veth1_vlan: entered promiscuous mode [ 95.281598][ T5626] veth0_macvtap: entered promiscuous mode [ 95.331655][ T5625] veth0_macvtap: entered promiscuous mode [ 95.333984][ T5626] veth1_macvtap: entered promiscuous mode [ 95.399627][ T5625] veth1_macvtap: entered promiscuous mode [ 95.478888][ T5622] veth0_macvtap: entered promiscuous mode [ 95.613034][ T5622] veth1_macvtap: entered promiscuous mode [ 95.687630][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.881129][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.932334][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.963026][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.005147][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.034706][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.060089][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.061142][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.061198][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.068506][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.230459][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230523][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230575][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230628][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230682][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230734][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.230787][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420988][ T1301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.516120][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.516151][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.576648][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.576677][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.593340][ T52] Bluetooth: hci0: command tx timeout [ 96.663666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.663696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.698163][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.698189][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.749670][ T52] Bluetooth: hci1: command tx timeout [ 96.776688][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.776721][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.815553][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.815581][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837197][ T52] Bluetooth: hci2: command tx timeout [ 96.909603][ T52] Bluetooth: hci3: command tx timeout [ 103.776976][ T5874] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 104.125045][ T5875] Zero length message leads to an empty skb [ 105.808172][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.958719][ T5896] netlink: 342 bytes leftover after parsing attributes in process `syz.0.16'. [ 108.637346][ T5932] vivid-007: ================= START STATUS ================= [ 108.637410][ T5932] vivid-007: Generate PTS: true [ 108.637455][ T5932] vivid-007: Generate SCR: true [ 108.637490][ T5932] tpg source WxH: 320x240 (Y'CbCr) [ 108.637509][ T5932] tpg field: 1 [ 108.637520][ T5932] tpg crop: (0,0)/320x240 [ 108.637541][ T5932] tpg compose: (0,0)/320x240 [ 108.637560][ T5932] tpg colorspace: 8 [ 108.637572][ T5932] tpg transfer function: 0/0 [ 108.637586][ T5932] tpg Y'CbCr encoding: 0/0 [ 108.637601][ T5932] tpg quantization: 0/0 [ 108.637615][ T5932] tpg RGB range: 0/2 [ 108.637629][ T5932] vivid-007: ================== END STATUS ================== [ 108.765031][ T5932] process 'syz.2.21' launched ':,' with NULL argv: empty string added [ 112.646772][ T5989] nfs4: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 121.681162][ T6126] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 121.681224][ T6126] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 122.382378][ T6145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.382521][ T6145] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.411845][ T6145] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.433043][ T6145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.433160][ T6145] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.435090][ T6145] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.462945][ T6145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.463522][ T6145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.465794][ T6145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.475649][ T6145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.475748][ T6145] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.510801][ T6145] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.419374][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.499466][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.499526][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.499636][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.501842][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.579587][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.579635][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.579669][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.579229][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.664521][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.664542][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.664570][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.903206][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903299][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.681821][ T6383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.682070][ T6383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.682267][ T6383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.682458][ T6383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.179357][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.749263][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.749312][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.749346][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.493176][ T6424] usb usb13: usbfs: process 6424 (syz.2.83) did not claim interface 0 before use [ 147.541768][ T6510] syz.3.97 (6510) used greatest stack depth: 18688 bytes left [ 149.032225][ T6538] netlink: 338 bytes leftover after parsing attributes in process `syz.3.101'. [ 149.373260][ T6541] netlink: 338 bytes leftover after parsing attributes in process `syz.3.101'. [ 153.600338][ T6600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.682634][ T5695] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 154.005987][ T6611] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 156.197133][ T6634] usb usb13: usbfs: process 6634 (syz.3.112) did not claim interface 0 before use [ 158.809641][ T6671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.813539][ T6671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.813740][ T6671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.813926][ T6671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.169705][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 160.826454][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.826477][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.826505][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.829752][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.454161][ T6737] mmap: syz.3.122 (6737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.499908][ T6734] usb usb13: usbfs: process 6734 (syz.1.125) did not claim interface 0 before use [ 165.035999][ T6769] random: crng reseeded on system resumption [ 165.394542][ T6773] usb usb13: usbfs: process 6773 (syz.1.138) did not claim interface 0 before use [ 172.068952][ T6872] usb usb13: usbfs: process 6872 (syz.1.144) did not claim interface 0 before use [ 172.090901][ T6874] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 173.906099][ T6896] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 173.994742][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 174.561410][ T6889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.561642][ T6889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.561983][ T6889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.562187][ T6889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.499241][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.580529][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.580582][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.580653][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.491655][ T6971] Setting dangerous option i915.mitigations - tainting kernel [ 180.104083][ T6990] usb usb13: usbfs: process 6990 (syz.3.157) did not claim interface 0 before use [ 181.589385][ T5696] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 187.284572][ T7083] usb usb13: usbfs: process 7083 (syz.3.170) did not claim interface 0 before use [ 191.102033][ T5695] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 193.046254][ T7149] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.046311][ T7149] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 194.342226][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342308][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.225099][ T7301] Ignoring unsupported numa_zonelist_order value: [ 204.238533][ T7301] random: crng reseeded on system resumption [ 206.334104][ T7342] syz.2.205 uses obsolete (PF_INET,SOCK_PACKET) [ 206.894617][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 209.717311][ T7391] random: crng reseeded on system resumption [ 213.811108][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 214.273717][ T7445] random: crng reseeded on system resumption [ 215.722581][ T7476] bonding: no command found in bonding_masters - use +ifname or -ifname [ 217.904818][ T7499] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 223.764956][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 225.610384][ T7596] bonding: no command found in bonding_masters - use +ifname or -ifname [ 230.242168][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 231.187306][ T7658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.187526][ T7658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.187711][ T7658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.187900][ T7658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.019243][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.135272][ T7697] FAULT_INJECTION: forcing a failure. [ 232.135272][ T7697] name failslab, interval 1, probability 0, space 0, times 1 [ 232.135351][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.0.258 Tainted: G U syzkaller #0 PREEMPT(full) [ 232.135397][ T7697] Tainted: [U]=USER [ 232.135409][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 232.135434][ T7697] Call Trace: [ 232.135447][ T7697] [ 232.135460][ T7697] dump_stack_lvl+0x100/0x190 [ 232.135529][ T7697] should_fail_ex.cold+0x5/0xa [ 232.135576][ T7697] should_failslab+0xc2/0x120 [ 232.135634][ T7697] kmem_cache_alloc_noprof+0x92/0x6a0 [ 232.135682][ T7697] ? dup_fd+0x4d/0xd10 [ 232.135736][ T7697] dup_fd+0x4d/0xd10 [ 232.135781][ T7697] ? __pfx_get_nodes+0x10/0x10 [ 232.135844][ T7697] __x64_sys_close_range+0x405/0x5d0 [ 232.135899][ T7697] ? __pfx___x64_sys_close_range+0x10/0x10 [ 232.135963][ T7697] do_syscall_64+0x121/0x770 [ 232.136013][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.136049][ T7697] RIP: 0033:0x7f10e879e159 [ 232.136083][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.136116][ T7697] RSP: 002b:00007f10e5d8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.136150][ T7697] RAX: ffffffffffffffda RBX: 00007f10e8a26450 RCX: 00007f10e879e159 [ 232.136174][ T7697] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 232.136197][ T7697] RBP: 00007f10e883506b R08: 0000000000000000 R09: 0000000000000000 [ 232.136218][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.136239][ T7697] R13: 00007f10e8a264e8 R14: 00007f10e8a26450 R15: 00007fff0a085ae8 [ 232.136283][ T7697] [ 233.220568][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.220628][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.220704][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.123640][ T7711] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.123692][ T7711] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 236.452734][ T7732] hub 1-0:1.0: USB hub found [ 236.453229][ T7732] hub 1-0:1.0: 1 port detected [ 239.679555][ T7797] random: crng reseeded on system resumption [ 239.705819][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 242.075280][ T7824] random: crng reseeded on system resumption [ 243.904157][ T7858] netlink: 25 bytes leftover after parsing attributes in process `syz.0.272'. [ 246.042174][ T7888] random: crng reseeded on system resumption [ 250.458035][ T7938] ubi0: attaching mtd0 [ 250.502194][ T7938] ubi0: scanning is finished [ 250.502233][ T7938] ubi0: empty MTD device detected [ 250.811684][ T7938] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 250.811720][ T7938] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 250.811748][ T7938] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 250.811775][ T7938] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 250.811801][ T7938] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 250.811827][ T7938] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 250.811854][ T7938] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 628759376 [ 250.811887][ T7938] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 250.812673][ T7952] ubi0: background thread "ubi_bgt0d" started, PID 7952 [ 251.040810][ T7953] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 251.555307][ T7962] random: crng reseeded on system resumption [ 253.115889][ T7973] kstrtoul() returned -22 for lu_gp_id [ 253.212196][ T7985] random: crng reseeded on system resumption [ 255.784011][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.784083][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.312094][ T8043] usbip-vudc usbip-vudc.0: gadget not bound [ 256.550493][ T8050] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 259.718800][ T8085] netlink: 342 bytes leftover after parsing attributes in process `syz.0.313'. [ 259.881970][ T8101] netlink: 25 bytes leftover after parsing attributes in process `syz.3.305'. [ 261.740424][ T8114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.740702][ T8114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.742500][ T8114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.742707][ T8114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.249902][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 263.730462][ T8145] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.730520][ T8145] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 263.779287][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.779336][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.779373][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.779487][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.525216][ T8209] random: crng reseeded on system resumption [ 270.492191][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 275.098266][ T8291] __vm_enough_memory: pid: 8291, comm: syz.3.332, bytes: 4398046457856 not enough memory for the allocation [ 276.369297][ T8292] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 278.909902][ T8333] random: crng reseeded on system resumption [ 279.065993][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 282.689333][ T8380] __vm_enough_memory: pid: 8380, comm: syz.1.345, bytes: 4398046457856 not enough memory for the allocation [ 282.728614][ T8382] openvswitch: netlink: Message has 4 unknown bytes. [ 283.669283][ T8387] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 285.168679][ T8427] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 289.736630][ T8493] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 289.736945][ T8493] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 293.764772][ T8548] random: crng reseeded on system resumption [ 308.310261][ T8773] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 310.011373][ T8802] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 314.237624][ T8866] FAULT_INJECTION: forcing a failure. [ 314.237624][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 314.237693][ T8866] CPU: 1 UID: 0 PID: 8866 Comm: syz.2.402 Tainted: G U syzkaller #0 PREEMPT(full) [ 314.237740][ T8866] Tainted: [U]=USER [ 314.237752][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.237776][ T8866] Call Trace: [ 314.237788][ T8866] [ 314.237801][ T8866] dump_stack_lvl+0x100/0x190 [ 314.237861][ T8866] should_fail_ex.cold+0x5/0xa [ 314.237908][ T8866] should_failslab+0xc2/0x120 [ 314.237971][ T8866] __kmalloc_noprof+0xfc/0x840 [ 314.238015][ T8866] ? rcu_is_watching+0x13/0xc0 [ 314.238054][ T8866] ? tomoyo_realpath_from_path+0xb6/0x690 [ 314.238110][ T8866] tomoyo_realpath_from_path+0xb6/0x690 [ 314.238162][ T8866] tomoyo_path_number_perm+0x23c/0x580 [ 314.238199][ T8866] ? tomoyo_path_number_perm+0x22e/0x580 [ 314.238241][ T8866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.238283][ T8866] ? futex_unqueue+0x133/0x2c0 [ 314.238334][ T8866] ? __futex_wait+0x256/0x300 [ 314.238412][ T8866] ? from_kgid+0x8f/0xd0 [ 314.238462][ T8866] ? __pfx_from_kgid+0x10/0x10 [ 314.238534][ T8866] tomoyo_path_chown+0x14b/0x1b0 [ 314.238585][ T8866] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 314.238632][ T8866] ? __pfx_make_vfsgid+0x10/0x10 [ 314.238670][ T8866] ? from_vfsuid+0xea/0x140 [ 314.238707][ T8866] ? __pfx_from_vfsuid+0x10/0x10 [ 314.238751][ T8866] security_path_chown+0x12a/0x2d0 [ 314.238793][ T8866] chown_common+0x3da/0x6e0 [ 314.238854][ T8866] ? __pfx_chown_common+0x10/0x10 [ 314.238908][ T8866] ? lock_acquire+0x1d1/0x380 [ 314.238967][ T8866] ? vfs_fchown+0x20/0x110 [ 314.239035][ T8866] ? rcu_read_lock_any_held+0x6a/0x90 [ 314.239084][ T8866] vfs_fchown+0xcd/0x110 [ 314.239136][ T8866] __x64_sys_fchown+0xad/0x130 [ 314.239191][ T8866] do_syscall_64+0x121/0x770 [ 314.239239][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.239280][ T8866] RIP: 0033:0x7fc833f9e159 [ 314.239309][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.239342][ T8866] RSP: 002b:00007fc8315cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 314.239385][ T8866] RAX: ffffffffffffffda RBX: 00007fc834226450 RCX: 00007fc833f9e159 [ 314.239407][ T8866] RDX: 0000000000000005 RSI: 0000000000000e5a RDI: 0000000000000006 [ 314.239428][ T8866] RBP: 00007fc83403506b R08: 0000000000000000 R09: 0000000000000000 [ 314.239449][ T8866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.239468][ T8866] R13: 00007fc8342264e8 R14: 00007fc834226450 R15: 00007ffcaf4b3fb8 [ 314.239515][ T8866] [ 314.504427][ T8866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.147611][ T8879] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.2228742657), cmd(3) [ 316.705340][ T5758] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 317.224291][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224360][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.266193][ T8906] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 323.799893][ T9007] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 328.725323][ T9057] Process accounting resumed [ 331.518458][ T9122] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 331.665814][ T9124] deleting an unspecified loop device is not supported. [ 334.471303][ T9154] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 334.471340][ T9154] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 341.015416][ T9252] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1907.0.2191072422), cmd(3) [ 346.411098][ T31] audit: type=1804 audit(8345.430:2): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.464" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048588 res=1 errno=0 [ 350.856620][ T9383] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 350.856662][ T9383] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 356.230084][ T9465] FAULT_INJECTION: forcing a failure. [ 356.230084][ T9465] name failslab, interval 1, probability 0, space 0, times 0 [ 356.230137][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.1.483 Tainted: G U syzkaller #0 PREEMPT(full) [ 356.230183][ T9465] Tainted: [U]=USER [ 356.230194][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.230213][ T9465] Call Trace: [ 356.230313][ T9465] [ 356.230327][ T9465] dump_stack_lvl+0x100/0x190 [ 356.230501][ T9465] should_fail_ex.cold+0x5/0xa [ 356.230549][ T9465] should_failslab+0xc2/0x120 [ 356.230633][ T9465] __kmalloc_cache_noprof+0x91/0x6d0 [ 356.230687][ T9465] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 356.230780][ T9465] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 356.230817][ T9465] ? rcu_is_watching+0x13/0xc0 [ 356.230859][ T9465] ? trace_contention_end+0x126/0x160 [ 356.230913][ T9465] ? snd_pcm_oss_write+0x49a/0xa30 [ 356.230943][ T9465] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 356.230978][ T9465] ? __pfx___mutex_lock+0x10/0x10 [ 356.231153][ T9465] ? get_pid_task+0xfc/0x250 [ 356.231184][ T9465] ? get_pid_task+0xfc/0x250 [ 356.231213][ T9465] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 356.231246][ T9465] snd_pcm_oss_write+0x4bb/0xa30 [ 356.231277][ T9465] ? bpf_lsm_file_permission+0x9/0x10 [ 356.231358][ T9465] ? security_file_permission+0x76/0x210 [ 356.231449][ T9465] vfs_write+0x2aa/0x1050 [ 356.231502][ T9465] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 356.231532][ T9465] ? lock_acquire+0x1d1/0x380 [ 356.231568][ T9465] ? __fget_files+0x34/0x3d0 [ 356.231635][ T9465] ? __pfx_vfs_write+0x10/0x10 [ 356.231663][ T9465] ? find_held_lock+0x2b/0x80 [ 356.231691][ T9465] ? __fget_files+0x215/0x3d0 [ 356.231722][ T9465] ? __fget_files+0x215/0x3d0 [ 356.231759][ T9465] ? __fget_files+0x21f/0x3d0 [ 356.231799][ T9465] ksys_write+0x12a/0x250 [ 356.231832][ T9465] ? __pfx_ksys_write+0x10/0x10 [ 356.231870][ T9465] do_syscall_64+0x121/0x770 [ 356.231920][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.231954][ T9465] RIP: 0033:0x7fbd4d99e159 [ 356.231974][ T9465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.231997][ T9465] RSP: 002b:00007fbd4e888028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.232043][ T9465] RAX: ffffffffffffffda RBX: 00007fbd4dc26090 RCX: 00007fbd4d99e159 [ 356.232060][ T9465] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 356.232075][ T9465] RBP: 00007fbd4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 356.232090][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.232104][ T9465] R13: 00007fbd4dc26128 R14: 00007fbd4dc26090 R15: 00007fff956d4108 [ 356.232135][ T9465] [ 358.740540][ T9488] hub 1-0:1.0: USB hub found [ 358.747138][ T9488] hub 1-0:1.0: 1 port detected [ 361.216552][ T9498] Process accounting paused [ 361.271273][ T9547] Setting dangerous option i915.mitigations - tainting kernel [ 361.271424][ T9547] Bad "i915.mitigations=,!];", '];' is unknown [ 361.469191][ T31] audit: type=1804 audit(8360.490:3): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.490" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048593 res=1 errno=0 [ 361.766830][ T9560] Setting dangerous option i915.mitigations - tainting kernel [ 361.767239][ T9560] Bad "i915.mitigations=", '' is unknown [ 363.205158][ T9572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.205524][ T9572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.223114][ T9572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.226646][ T9572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.219480][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.219549][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.299357][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.299427][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.633777][ T31] audit: type=1804 audit(8366.660:4): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.501" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048598 res=1 errno=0 [ 369.537398][ T9658] misc userio: The device must be registered before sending interrupts [ 369.585206][ T9658] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 371.715553][ T9698] binder: 9683:9698 ioctl c00c620f 200000000c40 returned -22 [ 378.664753][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.664822][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.452058][ T9892] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 390.849692][ T9998] dump_stack_lvl+0x100/0x190 [ 390.849748][ T9998] should_fail_ex.cold+0x5/0xa [ 390.849794][ T9998] should_failslab+0xc2/0x120 [ 390.849856][ T9998] __kmalloc_noprof+0xfc/0x840 [ 390.849903][ T9998] ? tomoyo_encode2+0xfb/0x3c0 [ 390.850058][ T9998] tomoyo_encode2+0xfb/0x3c0 [ 390.850109][ T9998] tomoyo_encode+0x29/0x50 [ 390.850151][ T9998] tomoyo_realpath_from_path+0x18c/0x690 [ 390.850207][ T9998] tomoyo_path_number_perm+0x23c/0x580 [ 390.850247][ T9998] ? tomoyo_path_number_perm+0x22e/0x580 [ 390.850287][ T9998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 390.850327][ T9998] ? preempt_schedule_common+0x3c/0xb0 [ 390.850406][ T9998] ? plist_check_list+0x1b8/0x280 [ 390.850480][ T9998] ? plist_del+0x308/0x510 [ 390.850519][ T9998] ? from_kgid+0x8f/0xd0 [ 390.850583][ T9998] ? __pfx_from_kgid+0x10/0x10 [ 390.850640][ T9998] tomoyo_path_chown+0x14b/0x1b0 [ 390.850687][ T9998] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 390.850735][ T9998] ? __pfx_make_vfsgid+0x10/0x10 [ 390.850809][ T9998] ? from_vfsuid+0xea/0x140 [ 390.850852][ T9998] ? __pfx_from_vfsuid+0x10/0x10 [ 390.850896][ T9998] security_path_chown+0x12a/0x2d0 [ 390.850934][ T9998] chown_common+0x3da/0x6e0 [ 390.851014][ T9998] ? __pfx_chown_common+0x10/0x10 [ 390.851066][ T9998] ? lock_acquire+0x1d1/0x380 [ 390.851117][ T9998] ? vfs_fchown+0x20/0x110 [ 390.851181][ T9998] ? rcu_read_lock_any_held+0x6a/0x90 [ 390.851229][ T9998] vfs_fchown+0xcd/0x110 [ 390.851281][ T9998] __x64_sys_fchown+0xad/0x130 [ 390.851336][ T9998] do_syscall_64+0x121/0x770 [ 390.851385][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.851421][ T9998] RIP: 0033:0x7fbd4d99e159 [ 390.851448][ T9998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.851479][ T9998] RSP: 002b:00007fbd4e804028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 390.851512][ T9998] RAX: ffffffffffffffda RBX: 00007fbd4dc26450 RCX: 00007fbd4d99e159 [ 390.851533][ T9998] RDX: 0000000000000005 RSI: 0000000000000e5a RDI: 0000000000000006 [ 390.851553][ T9998] RBP: 00007fbd4da3506b R08: 0000000000000000 R09: 0000000000000000 [ 390.851574][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.851594][ T9998] R13: 00007fbd4dc264e8 R14: 00007fbd4dc26450 R15: 00007fff956d4108 [ 390.851639][ T9998] [ 390.851816][ T9998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.069981][ T9988] Process accounting resumed [ 392.760088][ T31] audit: type=1804 audit(8391.780:6): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.553" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048588 res=1 errno=0 [ 395.046667][T10052] random: crng reseeded on system resumption [ 397.275590][T10080] openvswitch: netlink: Message has 4 unknown bytes. [ 399.467536][ T31] audit: type=1804 audit(8398.490:7): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.566" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048583 res=1 errno=0 [ 402.665111][T10129] Process accounting resumed [ 405.303098][T10198] openvswitch: netlink: Message has 4 unknown bytes. [ 405.733367][ T31] audit: type=1326 audit(8404.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.2.577" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc833f9e159 code=0x0 [ 407.430613][T10224] openvswitch: netlink: Message has 4 unknown bytes. [ 407.868107][ T31] audit: type=1804 audit(8406.890:9): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.578" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048593 res=1 errno=0 [ 409.328386][T10228] Process accounting resumed [ 410.970157][T10274] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 411.327011][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 411.327060][T10277] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 412.445417][ T5695] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 412.863664][ T31] audit: type=1804 audit(8411.890:10): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.593" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048593 res=1 errno=0 [ 414.592882][T10329] openvswitch: netlink: Message has 4 unknown bytes. [ 417.107374][T10358] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.566576][T10358] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.759473][T10358] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.108027][T10358] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.457663][T10415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 421.457882][T10415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 421.458069][T10415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.458270][T10415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.465795][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 423.465844][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 423.465879][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 423.465975][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 424.762832][T10432] Process accounting paused [ 427.559641][ T31] audit: type=1326 audit(8426.580:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.3.618" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47fed9e159 code=0x0 [ 427.597176][T10506] ubi: mtd0 is already attached to ubi0 [ 431.882896][ T1294] Bluetooth: hci4: Frame reassembly failed (-84) [ 432.804215][ T31] audit: type=1806 audit(8431.830:12): xattr="" res=-22 [ 433.413114][T10558] Process accounting paused [ 433.939197][ T5617] Bluetooth: hci4: command 0x1003 tx timeout [ 433.939215][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 436.043300][T10604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.043528][T10604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.043725][T10604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.043929][T10604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.448650][T10624] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 437.466171][T10639] hub 1-0:1.0: USB hub found [ 437.468099][T10639] hub 1-0:1.0: 1 port detected [ 438.019257][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.109321][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 438.109370][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 438.109433][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.459535][T10664] Process accounting paused [ 439.516527][T10671] vhci_hcd vhci_hcd.1: invalid port number 41 [ 439.516563][T10671] vhci_hcd vhci_hcd.1: default hub control req: ec2a v6846 i0029 l41133 [ 440.101193][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.101266][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.907242][T10707] binder: 10704:10707 ioctl c018620c 9 returned -1 [ 444.326795][T10729] sd 0:0:1:0: PR command failed: 1026 [ 444.326902][T10729] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 444.326963][T10729] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 446.143179][T10772] random: crng reseeded on system resumption [ 447.889457][T10784] hub 1-0:1.0: USB hub found [ 447.891455][T10784] hub 1-0:1.0: 1 port detected [ 448.615731][T10787] ubi: mtd0 is already attached to ubi0 [ 451.529184][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 453.318077][T10872] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10872] [ 454.837021][T10889] hub 1-0:1.0: USB hub found [ 454.838432][T10889] hub 1-0:1.0: 1 port detected [ 455.075328][T10897] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 457.013371][T10892] Process accounting resumed [ 457.179333][ T84] Bluetooth: hci4: Frame reassembly failed (-84) [ 457.180961][ T1157] Bluetooth: hci4: Frame reassembly failed (-84) [ 459.223032][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 459.224288][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 461.147951][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.536335][T10988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.536585][T10988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 462.536771][T10988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.537115][T10988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.219141][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 463.221575][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 464.579482][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.579529][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 464.579564][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.579609][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.962083][T11012] Process accounting resumed [ 469.764979][T11079] Process accounting resumed [ 473.999923][T11121] kafs: addr_prefs: Invalid Command [ 474.538219][T11140] vhci_hcd vhci_hcd.1: invalid port number 41 [ 474.538255][T11140] vhci_hcd vhci_hcd.1: default hub control req: ec2a v6846 i0029 l41133 [ 476.518896][T11147] sd 0:0:1:0: PR command failed: 1026 [ 476.520046][T11147] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 476.520194][T11147] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 488.134322][T11318] Process accounting paused [ 495.275644][T11400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.277547][T11400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.277849][T11400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.309366][T11400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.193440][T11409] Process accounting paused [ 497.299834][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.299885][T11022] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.299923][T11022] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.379567][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.807623][T11444] vhci_hcd vhci_hcd.1: invalid port number 41 [ 497.807657][T11444] vhci_hcd vhci_hcd.1: default hub control req: ec2a v6846 i0029 l41133 [ 499.249780][T11461] kafs: addr_prefs: Invalid Command [ 499.348422][T11463] hub 1-0:1.0: USB hub found [ 499.348849][T11463] hub 1-0:1.0: 1 port detected [ 501.245061][T11470] Process accounting paused [ 501.541719][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541793][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.273083][T11513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 503.273325][T11513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.273528][T11513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.273729][T11513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.822673][T11533] netlink: 'syz.1.754': attribute type 11 has an invalid length. [ 505.299163][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 505.299213][T11022] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.299248][T11022] Bluetooth: hci0: command 0x0c1a tx timeout [ 505.299327][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 505.948448][T11568] hub 1-0:1.0: USB hub found [ 505.948901][T11568] hub 1-0:1.0: 1 port detected [ 511.285265][T11643] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5616] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11643] [ 515.888321][T11712] kafs: addr_prefs: Invalid Command [ 518.605326][T11710] Process accounting resumed [ 519.489466][T11747] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11747] [ 524.648786][T11821] kafs: addr_prefs: Invalid Command [ 525.896560][T11841] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5622] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11841] [ 527.282541][T11854] Process accounting resumed [ 531.173387][T11912] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 531.983592][T11905] Process accounting resumed [ 532.175052][T11931] kafs: addr_prefs: Invalid Command [ 533.404018][T11946] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.808'. [ 537.910539][ T5617] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 538.182116][T12016] FAULT_INJECTION: forcing a failure. [ 538.182116][T12016] name failslab, interval 1, probability 0, space 0, times 0 [ 538.182191][T12016] CPU: 1 UID: 0 PID: 12016 Comm: syz.2.817 Tainted: G U syzkaller #0 PREEMPT(full) [ 538.182241][T12016] Tainted: [U]=USER [ 538.182254][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 538.182275][T12016] Call Trace: [ 538.182288][T12016] [ 538.182303][T12016] dump_stack_lvl+0x100/0x190 [ 538.182374][T12016] should_fail_ex.cold+0x5/0xa [ 538.182427][T12016] should_failslab+0xc2/0x120 [ 538.182497][T12016] kmem_cache_alloc_noprof+0x92/0x6a0 [ 538.182558][T12016] ? ep_ptable_queue_proc+0x5b/0x280 [ 538.182727][T12016] ep_ptable_queue_proc+0x5b/0x280 [ 538.182784][T12016] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 538.182838][T12016] snd_seq_oss_readq_poll+0x56/0xa0 [ 538.182981][T12016] snd_seq_oss_poll+0x122/0x1d0 [ 538.183029][T12016] ? __pfx_odev_poll+0x10/0x10 [ 538.183066][T12016] odev_poll+0x4a/0x90 [ 538.183105][T12016] ep_item_poll+0x141/0x1f0 [ 538.183166][T12016] do_epoll_ctl_file+0x1e6e/0x36e0 [ 538.183246][T12016] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 538.183308][T12016] ? lock_acquire+0x1d1/0x380 [ 538.183367][T12016] ? __fget_files+0x34/0x3d0 [ 538.183418][T12016] ? find_held_lock+0x2b/0x80 [ 538.183462][T12016] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 538.183518][T12016] ? __fget_files+0x215/0x3d0 [ 538.183579][T12016] ? __fget_files+0x21f/0x3d0 [ 538.183653][T12016] ? do_epoll_ctl+0xfd/0x1a0 [ 538.183711][T12016] do_epoll_ctl+0xfd/0x1a0 [ 538.183774][T12016] ? __pfx_do_epoll_ctl+0x10/0x10 [ 538.183850][T12016] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 538.183915][T12016] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 538.183992][T12016] do_syscall_64+0x121/0x770 [ 538.184048][T12016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.184089][T12016] RIP: 0033:0x7fc833f9e159 [ 538.184121][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.184159][T12016] RSP: 002b:00007fc8311ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 538.184196][T12016] RAX: ffffffffffffffda RBX: 00007fc834226540 RCX: 00007fc833f9e159 [ 538.184221][T12016] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000009 [ 538.184244][T12016] RBP: 00007fc83403506b R08: 0000000000000000 R09: 0000000000000000 [ 538.184267][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.184290][T12016] R13: 00007fc8342265d8 R14: 00007fc834226540 R15: 00007ffcaf4b3fb8 [ 538.184341][T12016] [ 539.725270][T12031] kafs: addr_prefs: Invalid Command [ 545.243223][T12101] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12101] [ 546.792116][T12118] kafs: addr_prefs: Invalid Command [ 548.090967][T12127] zram: Removed device: zram0 [ 548.860349][T12136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.860624][T12136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.862462][T12136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.862773][T12136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.333845][T12119] Process accounting paused [ 550.899329][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 550.899378][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.899415][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.899603][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.834679][T12220] openvswitch: netlink: Key type 130 is out of range max 32 [ 555.854454][T12220] ======================================================= [ 555.854454][T12220] WARNING: The mand mount option has been deprecated and [ 555.854454][T12220] and is ignored by this kernel. Remove the mand [ 555.854454][T12220] option from the mount to silence this warning. [ 555.854454][T12220] ======================================================= [ 556.365337][T12226] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2180951657 (279161812096 ns) > initial count (279161754624 ns). Using initial count to start timer. [ 560.601964][T12239] Process accounting paused [ 562.831098][T12295] sock: sock_timestamping_bind_phc: sock not bind to device [ 562.989558][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.989627][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.613323][T12278] Process accounting paused [ 563.690908][T12306] kafs: addr_prefs: Invalid Command [ 570.513512][T12365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.513853][T12365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.514668][T12365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.514966][T12365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 572.499081][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 572.579300][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 572.579346][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.579351][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 572.714420][T12405] kafs: addr_prefs: Invalid Command [ 573.543679][T12421] bond0: option arp_interval: invalid value (/dev/vmci) [ 573.543730][T12421] bond0: option arp_interval: allowed values 0 - 2147483647 [ 575.103237][T12444] hub 1-0:1.0: USB hub found [ 575.103640][T12444] hub 1-0:1.0: 1 port detected [ 580.185999][T12481] Process accounting resumed [ 580.438559][T12503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.439288][T12503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.439565][T12503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.439956][T12503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.324905][T12525] kafs: addr_prefs: Invalid Command [ 582.349104][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.509075][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 582.509131][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.509170][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 582.930435][T12545] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5622] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12545] [ 585.590239][T12575] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.893'. [ 587.684710][ T52] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 590.553757][T12657] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12657] [ 592.130587][T12645] Process accounting resumed [ 594.247418][T12676] Process accounting resumed [ 598.417593][T12770] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12770] [ 599.787575][T12777] kafs: addr_prefs: Invalid Command [ 600.055533][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 602.860382][ T52] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 610.755166][T12940] Process accounting paused [ 610.811879][ T52] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 615.560201][T12999] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.946'. [ 615.764511][T13002] random: crng reseeded on system resumption [ 617.896268][ T52] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 622.272690][T13064] Process accounting paused [ 624.398650][T13093] Process accounting paused [ 624.421904][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.421976][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.136864][T13129] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.962'. [ 632.091561][T13226] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.980'. [ 634.193034][T13255] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.993'. [ 640.037613][T13321] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5616] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13321] [ 641.743507][T13305] Process accounting resumed [ 648.305250][ T52] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 652.612332][T13472] Process accounting resumed [ 652.838898][ T30] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 655.044757][T13504] Process accounting resumed [ 673.929868][T13758] Process accounting paused [ 674.039839][ T30] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 674.157590][T13809] hub 1-0:1.0: USB hub found [ 674.170378][T13809] hub 1-0:1.0: 1 port detected [ 676.222609][ T52] Bluetooth: hci3: unexpected subevent 0x12 length: 123 > 5 [ 676.226375][T13832] : Can't lookup blockdev [ 676.376609][T13839] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1058'. [ 683.696309][T13911] Process accounting paused [ 685.861971][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.862046][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.757996][T13943] Process accounting paused [ 687.264014][T13985] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.0.4294967293), cmd(3) [ 687.275728][T13985] syz.3.1075 (13985): attempted to duplicate a private mapping with mremap. This is not supported. [ 690.392429][T14019] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [105] [ 695.939135][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 698.059118][ T30] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 698.308098][T14109] sg_write: data in/out 220/1048664 bytes for SCSI command 0x0-- guessing data in; [ 698.308098][T14109] program syz.2.1094 not setting count and/or reply_len properly [ 703.408619][T14181] random: crng reseeded on system resumption [ 704.474284][T14162] Process accounting resumed [ 715.662010][T14335] Process accounting resumed [ 719.091499][T14381] Process accounting resumed [ 721.762452][T14439] capability: warning: `syz.3.1136' uses deprecated v2 capabilities in a way that may be insecure [ 722.077722][T14454] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5616] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14454] [ 726.337363][T14494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.337597][T14494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 726.337785][T14494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.337982][T14494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.348971][T11022] Bluetooth: hci3: command 0x0c1a tx timeout [ 728.349021][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 728.349114][T11022] Bluetooth: hci1: command 0x0c1a tx timeout [ 728.349150][T11022] Bluetooth: hci0: command 0x0c1a tx timeout [ 733.398733][ T30] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 733.477646][T14604] futex_wake_op: syz.0.1156 tries to shift op by -2048; fix this program [ 735.319437][T14612] Process accounting paused [ 740.379520][T14694] i2c i2c-0: delete_device: Can't find device in list [ 745.026700][T14761] random: crng reseeded on system resumption [ 747.202632][T14758] Process accounting paused [ 747.300644][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.300700][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.398931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 749.285277][T14782] Process accounting paused [ 749.508927][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 765.928743][T15012] Process accounting resumed [ 768.698713][T15088] FAULT_INJECTION: forcing a failure. [ 768.698713][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 768.698765][T15088] CPU: 1 UID: 0 PID: 15088 Comm: syz.3.1220 Tainted: G U syzkaller #0 PREEMPT(full) [ 768.698815][T15088] Tainted: [U]=USER [ 768.698826][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.698844][T15088] Call Trace: [ 768.698856][T15088] [ 768.698867][T15088] dump_stack_lvl+0x100/0x190 [ 768.698925][T15088] should_fail_ex.cold+0x5/0xa [ 768.698971][T15088] should_failslab+0xc2/0x120 [ 768.699025][T15088] __kmalloc_noprof+0xfc/0x840 [ 768.699069][T15088] ? rcu_is_watching+0x13/0xc0 [ 768.699108][T15088] ? tomoyo_realpath_from_path+0xb6/0x690 [ 768.699164][T15088] tomoyo_realpath_from_path+0xb6/0x690 [ 768.699228][T15088] tomoyo_check_open_permission+0x2af/0x3c0 [ 768.699266][T15088] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 768.699304][T15088] ? __lock_acquire+0x5c0/0x1f40 [ 768.699368][T15088] ? hook_file_open+0x248/0x8e0 [ 768.699561][T15088] ? path_get+0x61/0x80 [ 768.699671][T15088] tomoyo_file_open+0x6b/0x90 [ 768.699724][T15088] security_file_open+0xb5/0x1e0 [ 768.699767][T15088] do_dentry_open+0x588/0x14d0 [ 768.699827][T15088] vfs_open+0x82/0x3f0 [ 768.699896][T15088] path_openat+0x19fa/0x2440 [ 768.699963][T15088] ? __pfx_path_openat+0x10/0x10 [ 768.700029][T15088] do_file_open+0x20e/0x430 [ 768.700078][T15088] ? __pfx_do_file_open+0x10/0x10 [ 768.700158][T15088] ? _raw_spin_unlock+0x28/0x50 [ 768.700195][T15088] ? alloc_fd+0x471/0x7a0 [ 768.700237][T15088] do_sys_openat2+0x10f/0x1e0 [ 768.700278][T15088] ? __pfx_do_sys_openat2+0x10/0x10 [ 768.700320][T15088] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 768.700377][T15088] __x64_sys_openat+0x12d/0x210 [ 768.700402][T15088] ? __pfx___x64_sys_openat+0x10/0x10 [ 768.700437][T15088] do_syscall_64+0x121/0x770 [ 768.700471][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.700496][T15088] RIP: 0033:0x7f47fed9e159 [ 768.700516][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.700539][T15088] RSP: 002b:00007f47ffbb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 768.700563][T15088] RAX: ffffffffffffffda RBX: 00007f47ff026450 RCX: 00007f47fed9e159 [ 768.700579][T15088] RDX: 0000000000048000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 768.700595][T15088] RBP: 00007f47fee3506b R08: 0000000000000000 R09: 0000000000000000 [ 768.700610][T15088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.700624][T15088] R13: 00007f47ff0264e8 R14: 00007f47ff026450 R15: 00007ffffe399258 [ 768.700655][T15088] [ 768.872734][T15088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 770.621768][T15097] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.1233'. [ 771.285804][T15122] netlink: 'syz.2.1227': attribute type 22 has an invalid length. [ 771.285837][T15122] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1227'. [ 771.357745][T15106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 771.357971][T15106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 771.358166][T15106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 771.358355][T15106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 771.486533][T15122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1227'. [ 771.570450][T15122] macvlan0: entered promiscuous mode [ 771.570726][T15122] macvlan0: entered allmulticast mode [ 771.570749][T15122] veth1_vlan: entered allmulticast mode [ 773.379601][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 773.379651][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 773.379687][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 773.379738][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 775.528254][T15189] i2c i2c-0: delete_device: Can't find device in list [ 779.241101][T15220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 779.245472][T15220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 779.245785][T15220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 779.246054][T15220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 779.799905][T15248] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 781.219013][T11022] Bluetooth: hci0: command 0x0c1a tx timeout [ 781.299072][T11022] Bluetooth: hci3: command 0x0c1a tx timeout [ 781.299120][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 781.299156][T11022] Bluetooth: hci1: command 0x0c1a tx timeout [ 781.751689][T15231] Process accounting resumed [ 781.831504][T15238] Process accounting resumed [ 782.586695][T15278] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.1256'. [ 788.380939][T15340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 788.381229][T15340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.382398][T15340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.384753][T15340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 789.450473][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 789.570958][T15350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.570993][T15350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.574033][T15350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.574063][T15350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.419381][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 790.419432][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 790.419469][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 790.419504][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 792.728661][T15397] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15397] [ 796.316630][T15458] i2c i2c-0: delete_device: Can't find device in list [ 798.242710][T15453] Process accounting paused [ 801.940382][T15510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 801.940616][T15510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 801.940798][T15510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 801.940989][T15510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 803.779051][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 804.019262][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 804.019311][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 804.019391][T11022] Bluetooth: hci2: command 0x0c1a tx timeout [ 808.379426][T15611] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15611] [ 808.742449][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.742523][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.154294][T15630] FAULT_INJECTION: forcing a failure. [ 809.154294][T15630] name failslab, interval 1, probability 0, space 0, times 0 [ 809.154350][T15630] CPU: 1 UID: 0 PID: 15630 Comm: syz.0.1297 Tainted: G U syzkaller #0 PREEMPT(full) [ 809.154397][T15630] Tainted: [U]=USER [ 809.154410][T15630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 809.154430][T15630] Call Trace: [ 809.154442][T15630] [ 809.154454][T15630] dump_stack_lvl+0x100/0x190 [ 809.154510][T15630] should_fail_ex.cold+0x5/0xa [ 809.154556][T15630] should_failslab+0xc2/0x120 [ 809.154609][T15630] __kmalloc_noprof+0xfc/0x840 [ 809.154654][T15630] ? rcu_is_watching+0x13/0xc0 [ 809.154685][T15630] ? tomoyo_realpath_from_path+0xb6/0x690 [ 809.154724][T15630] tomoyo_realpath_from_path+0xb6/0x690 [ 809.154763][T15630] tomoyo_check_open_permission+0x2af/0x3c0 [ 809.154796][T15630] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 809.154823][T15630] ? __lock_acquire+0x5c0/0x1f40 [ 809.154868][T15630] ? hook_file_open+0x248/0x8e0 [ 809.154918][T15630] ? path_get+0x61/0x80 [ 809.154958][T15630] tomoyo_file_open+0x6b/0x90 [ 809.154995][T15630] security_file_open+0xb5/0x1e0 [ 809.155026][T15630] do_dentry_open+0x588/0x14d0 [ 809.155065][T15630] vfs_open+0x82/0x3f0 [ 809.155114][T15630] path_openat+0x19fa/0x2440 [ 809.155154][T15630] ? __pfx_path_openat+0x10/0x10 [ 809.155197][T15630] do_file_open+0x20e/0x430 [ 809.155234][T15630] ? __pfx_do_file_open+0x10/0x10 [ 809.155288][T15630] ? _raw_spin_unlock+0x28/0x50 [ 809.155314][T15630] ? alloc_fd+0x471/0x7a0 [ 809.155354][T15630] do_sys_openat2+0x10f/0x1e0 [ 809.155395][T15630] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.155436][T15630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 809.155478][T15630] __x64_sys_openat+0x12d/0x210 [ 809.155502][T15630] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.155536][T15630] do_syscall_64+0x121/0x770 [ 809.155570][T15630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.155597][T15630] RIP: 0033:0x7f10e879e159 [ 809.155617][T15630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.155640][T15630] RSP: 002b:00007f10e5d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.155664][T15630] RAX: ffffffffffffffda RBX: 00007f10e8a26450 RCX: 00007f10e879e159 [ 809.155681][T15630] RDX: 0000000000048000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 809.155696][T15630] RBP: 00007f10e883506b R08: 0000000000000000 R09: 0000000000000000 [ 809.155712][T15630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.155726][T15630] R13: 00007f10e8a264e8 R14: 00007f10e8a26450 R15: 00007fff0a085ae8 [ 809.155757][T15630] [ 809.165281][T15630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 811.567730][T15652] zram: Added device: zram0 [ 811.828976][T15625] Process accounting paused [ 813.540226][T15648] Process accounting paused [ 817.136810][T15722] i2c i2c-0: delete_device: Can't find device in list [ 819.040910][ T5695] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 820.018701][T15748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 820.019282][T15748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 820.019467][T15748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 820.019642][T15748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 820.952747][T15697] Bluetooth: hci2: unexpected event 0x10 length: 124 > 1 [ 820.954773][T15697] Bluetooth: hci2: hardware error 0x00 [ 821.939028][T15775] Bluetooth: hci0: command 0x0c1a tx timeout [ 822.105271][T15775] Bluetooth: hci3: command 0x0c1a tx timeout [ 822.105319][T15775] Bluetooth: hci1: command 0x0c1a tx timeout [ 823.059050][T15697] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 829.130296][T15856] Process accounting resumed [ 830.972312][T15891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.972529][T15891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.972714][T15891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 832.899042][T15697] Bluetooth: hci0: command 0x0c1a tx timeout [ 832.980026][T15798] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.980099][T15697] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.783125][T15943] block loop4: the capability attribute has been deprecated. [ 833.912483][T15946] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5622] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15946] [ 834.412004][T15935] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1338'. [ 834.838436][T15954] syz.2.1339 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 836.723937][T15985] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 840.403447][T16037] nfsd: Unknown parameter 'k8D' [ 842.118089][T16024] Process accounting resumed [ 842.769719][T16068] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5616] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16068] [ 844.237715][T16060] Process accounting resumed [ 845.543544][T16102] random: crng reseeded on system resumption [ 847.492519][T16133] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191072422), cmd(3) [ 849.163948][T16161] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5622] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16161] [ 851.767734][T16179] usb usb2: usbfs: process 16179 (syz.2.1369) did not claim interface 0 before use [ 851.941976][T16199] zram: Added device: zram1 [ 857.079024][T16251] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 857.509250][T16255] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16255] [ 858.784961][T16271] zram: Added device: zram2 [ 867.944030][T16399] hub 1-0:1.0: USB hub found [ 867.944905][T16399] hub 1-0:1.0: 1 port detected [ 870.188966][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.189049][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.054125][T16448] bridge0: port 3(team0) entered blocking state [ 873.054393][T16448] bridge0: port 3(team0) entered disabled state [ 873.054541][T16448] team0: entered allmulticast mode [ 873.054559][T16448] team_slave_0: entered allmulticast mode [ 873.054585][T16448] team_slave_1: entered allmulticast mode [ 873.065807][T16448] team0: entered promiscuous mode [ 873.065827][T16448] team_slave_0: entered promiscuous mode [ 873.106662][T16448] team_slave_1: entered promiscuous mode [ 873.118114][T16448] bridge0: port 3(team0) entered blocking state [ 873.118237][T16448] bridge0: port 3(team0) entered forwarding state [ 876.218548][T16505] zram: Added device: zram3 [ 877.647411][T16489] Process accounting paused [ 881.082151][T16530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1416'. [ 882.476319][T16575] random: crng reseeded on system resumption [ 885.063485][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 885.449355][T16606] smpboot: CPU 1 is now offline [ 885.993075][T16601] ------------[ cut here ]------------ [ 885.993090][T16601] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 885.993106][T16601] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.2.1426/16601 [ 886.018567][T16601] Modules linked in: [ 886.023701][T16601] CPU: 0 UID: 0 PID: 16601 Comm: syz.2.1426 Tainted: G U syzkaller #0 PREEMPT(full) [ 886.034956][T16601] Tainted: [U]=USER [ 886.038776][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.050159][T16601] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 886.057045][T16601] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 886.076847][T16601] RSP: 0018:ffffc90003b1fd80 EFLAGS: 00010206 [ 886.082933][T16601] RAX: 0000000000000003 RBX: ffffe8ffffc06c80 RCX: ffffc90005d3a000 [ 886.090997][T16601] RDX: ffffe8ffffc06e00 RSI: ffffffff81f6794f RDI: ffff88807f91ddc0 [ 886.099062][T16601] RBP: ffff888027b29000 R08: 0000000000000005 R09: 00000000ffffffff [ 886.107295][T16601] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880273a22f0 [ 886.115762][T16601] R13: 0000000000000000 R14: ffffffff8e65c0b0 R15: ffff8880273a2330 [ 886.123760][T16601] FS: 00007fc834de56c0(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 886.132811][T16601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.139508][T16601] CR2: 0000001b33ea3ff8 CR3: 000000004de7c000 CR4: 00000000003526f0 [ 886.148767][T16601] Call Trace: [ 886.152062][T16601] [ 886.155690][T16601] blk_mq_free_tag_set+0x354/0x550 [ 886.160912][T16601] loop_control_ioctl+0x504/0x620 [ 886.166093][T16601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 886.171672][T16601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 886.177380][T16601] __x64_sys_ioctl+0x18e/0x210 [ 886.182329][T16601] do_syscall_64+0x121/0x770 [ 886.187035][T16601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.192948][T16601] RIP: 0033:0x7fc833f9e159 [ 886.197921][T16601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.217766][T16601] RSP: 002b:00007fc834de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.226284][T16601] RAX: ffffffffffffffda RBX: 00007fc834225fa0 RCX: 00007fc833f9e159 [ 886.234269][T16601] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 886.242300][T16601] RBP: 00007fc83403506b R08: 0000000000000000 R09: 0000000000000000 [ 886.251345][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.260038][T16601] R13: 00007fc834226038 R14: 00007fc834225fa0 R15: 00007ffcaf4b3fb8 [ 886.268097][T16601] [ 886.271132][T16601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 886.278421][T16601] CPU: 0 UID: 0 PID: 16601 Comm: syz.2.1426 Tainted: G U syzkaller #0 PREEMPT(full) [ 886.289381][T16601] Tainted: [U]=USER [ 886.293207][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.303292][T16601] Call Trace: [ 886.306580][T16601] [ 886.309521][T16601] dump_stack_lvl+0x100/0x190 [ 886.314228][T16601] vpanic+0x553/0x970 [ 886.318225][T16601] ? __pfx_vpanic+0x10/0x10 [ 886.322751][T16601] panic+0xd1/0xe0 [ 886.326501][T16601] ? __pfx_panic+0x10/0x10 [ 886.331123][T16601] check_panic_on_warn.cold+0x19/0x34 [ 886.336526][T16601] ? cleanup_srcu_struct+0x6e4/0xb30 [ 886.341843][T16601] __warn.cold+0x191/0x318 [ 886.346291][T16601] __report_bug+0x30f/0x440 [ 886.350885][T16601] ? cleanup_srcu_struct+0x6e4/0xb30 [ 886.356191][T16601] ? __pfx___report_bug+0x10/0x10 [ 886.361242][T16601] ? __pfx_debug_object_deactivate+0x10/0x10 [ 886.367418][T16601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 886.372816][T16601] ? _raw_spin_lock_irqsave+0x52/0x60 [ 886.378210][T16601] ? find_held_lock+0x2b/0x80 [ 886.382926][T16601] ? cleanup_srcu_struct+0x6e4/0xb30 [ 886.388223][T16601] report_bug+0xb3/0x220 [ 886.392485][T16601] ? cleanup_srcu_struct+0x6e4/0xb30 [ 886.397797][T16601] handle_bug+0x16a/0x2a0 [ 886.402169][T16601] exc_invalid_op+0x17/0x50 [ 886.406698][T16601] asm_exc_invalid_op+0x1a/0x20 [ 886.411577][T16601] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 886.417502][T16601] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 886.437120][T16601] RSP: 0018:ffffc90003b1fd80 EFLAGS: 00010206 [ 886.443201][T16601] RAX: 0000000000000003 RBX: ffffe8ffffc06c80 RCX: ffffc90005d3a000 [ 886.451182][T16601] RDX: ffffe8ffffc06e00 RSI: ffffffff81f6794f RDI: ffff88807f91ddc0 [ 886.459162][T16601] RBP: ffff888027b29000 R08: 0000000000000005 R09: 00000000ffffffff [ 886.467143][T16601] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880273a22f0 [ 886.475127][T16601] R13: 0000000000000000 R14: ffffffff8e65c0b0 R15: ffff8880273a2330 [ 886.483120][T16601] ? __timer_delete_sync+0x10f/0x1c0 [ 886.488474][T16601] blk_mq_free_tag_set+0x354/0x550 [ 886.493608][T16601] loop_control_ioctl+0x504/0x620 [ 886.498691][T16601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 886.504284][T16601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 886.509870][T16601] __x64_sys_ioctl+0x18e/0x210 [ 886.514669][T16601] do_syscall_64+0x121/0x770 [ 886.519287][T16601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.525201][T16601] RIP: 0033:0x7fc833f9e159 [ 886.529632][T16601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.549406][T16601] RSP: 002b:00007fc834de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.557832][T16601] RAX: ffffffffffffffda RBX: 00007fc834225fa0 RCX: 00007fc833f9e159 [ 886.565824][T16601] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 886.573803][T16601] RBP: 00007fc83403506b R08: 0000000000000000 R09: 0000000000000000 [ 886.581782][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.589776][T16601] R13: 00007fc834226038 R14: 00007fc834225fa0 R15: 00007ffcaf4b3fb8 [ 886.597774][T16601] [ 886.600872][T16601] Kernel Offset: disabled [ 886.605219][T16601] Rebooting in 86400 seconds..