last executing test programs: 19m33.991802425s ago: executing program 3 (id=1184): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x7}, 0x339) 19m33.629064971s ago: executing program 3 (id=1185): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x40002, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) sendfile$auto(r0, r1, &(0x7f0000000040)=0x8010, 0x80000001) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r3 = open(0x0, 0x80400, 0x1ef) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x2, 0x2, "0200"}, 0x3ffff) r4 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000000)=0xb7d5) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000006c0)={0x3}) ioctl$auto_BLKCRYPTOPREPAREKEY(r4, 0xc040128b, &(0x7f0000000040)={0xb929, 0xffffffffffffff81, 0x338, 0xd2d, [0x1, 0xd, 0xbe000000000, 0x7]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r6 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r6, &(0x7f00000051c0)=""/103, 0x67) eventfd$auto(0x8c) socket(0x18, 0x2, 0x4) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r7 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) recvmsg$auto(r3, &(0x7f0000000380)={&(0x7f0000000200)="16cff74261eb402ce292c6e4cbb64fe4d20e2e9096acb4eaf94547b550915a68cd8dd7cbf2a748939724ac4c9a8a77696d5f52d794fd57633ef2a06e494472bab3471eb2367753a8c12c017c1a26b7cfed50cafddb7f1b061a6cef5dececa0d81b053a582c46f872974311de0bd59b8ec029aa074822b10b71f8fa1620933650cbf617697280fc092916d98037539be6e443c1766ed1f92a3f3d99fa6142ac5b", 0x6, &(0x7f0000000300)={&(0x7f00000002c0), 0x1}, 0x80000000, &(0x7f0000000340)="e70a6dd0", 0x4, 0x7}, 0x1) r8 = getpgrp(0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)=@task_fd_query={r8, r7, 0x81, 0x220, 0x2, 0x4, 0xffffffffffffffff, 0x7, 0x2}, 0x9) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000100)={{0x5, 0xee00, 0x0, 0x9, 0x8, 0x0, 0xffff}, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x7, 0x5, 0x9, 0x4, 0x40, 0x7, 0x9, 0x1, 0x1}) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0xffff, &(0x7f0000000180)={@siginfo_0_0={0x1, 0x557b, 0x3, @_kill={r8, r9}}}, 0x80000000) ioctl$auto(r2, 0x40044620, 0xffffffffffffffff) 19m33.109284093s ago: executing program 3 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x105000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r2, 0x4b3a, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x8, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x4, 0x804, 0x13, 0x46) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x99d5, 0x7, 0xf, 0x7, 0x948b, 0x3, 0x7f, 0x3, 0x8000000003, 0x62, 0x80001019, 0x40007, 0x4, 0x9, 0x1, 0x8]}, 0x0) 19m31.848486455s ago: executing program 3 (id=1194): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x10ffff}, 0x18) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a124437c3303efdaea14284ea051911d982703916a3f34e0c89480014f473c0ff7dc811d675c55aafeab4d5d79dd93004732cfecf02265e2993274e159f1788f1f775bbefa7dc340bd198fa7cfeb7b5eee7dae5e118a7f160e9e3f016e93bc1cf8d297c2528030dee4f73abb51c22b64bbc744da934cb7396ef4d43cef20800a100", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r5, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0xa, 0x0) 19m30.718463325s ago: executing program 3 (id=1198): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x24040001) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 19m30.503792748s ago: executing program 3 (id=1200): mmap$auto(0x0, 0x2020009, 0x8000002, 0xd54, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x4, 0x0, 0x5, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r0 = socket(0xa, 0x3, 0x3b) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio31\x00', 0x28400, 0x0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYRES8=r4, @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRESHEX=r1, @ANYBLOB="14000200697036746e6c30000000000000000000050006001000000048000180080003000000080008000100", @ANYRES64=r0, @ANYBLOB="08000100", @ANYRES8=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xb48, 0x0, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1004, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 19m15.355786965s ago: executing program 32 (id=1200): mmap$auto(0x0, 0x2020009, 0x8000002, 0xd54, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x4, 0x0, 0x5, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r0 = socket(0xa, 0x3, 0x3b) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio31\x00', 0x28400, 0x0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYRES8=r4, @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRESHEX=r1, @ANYBLOB="14000200697036746e6c30000000000000000000050006001000000048000180080003000000080008000100", @ANYRES64=r0, @ANYBLOB="08000100", @ANYRES8=r0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xb48, 0x0, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1004, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 16m57.712040627s ago: executing program 4 (id=1733): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="e96026bd7000fcdbdf25630000040800", @ANYRES32=r1], 0x1c}}, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x105000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r4, 0x4b3a, 0x1) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x8, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x4, 0x804, 0x13, 0x46) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x99d5, 0x7, 0xf, 0x7, 0x948b, 0x3, 0x7f, 0x3, 0x8000000003, 0x62, 0x80001019, 0x40007, 0x4, 0x9, 0x1, 0x8]}, 0x0) 16m56.260802081s ago: executing program 4 (id=1736): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xf5020000, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) 16m55.947297965s ago: executing program 4 (id=1740): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 16m55.724527329s ago: executing program 4 (id=1741): mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x58400, 0x22) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0x4, 0x8) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) r1 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getsockopt$auto(r1, 0x11c, 0x2, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000002c0)="ddc47ce8", 0x4) socket(0x9, 0x5, 0x7fff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0xf, &(0x7f00000001c0)=@bpf_attr_3={0x5, 0xaa, 0x276, 0x0, 0x3, 0x2, 0x8, 0x33, 0xd, "6326bcc7c57ffed984639b375ee8d538", 0x0, 0x3, 0xffffffffffffffff, 0xfffffffc, 0x6, 0x5, 0x0, 0x9, 0x2, 0x7f, @attach_prog_fd, 0xce51, 0x0, 0x7, 0x92c, 0x8}, 0xc) 16m55.386226664s ago: executing program 4 (id=1742): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_enter$auto(r0, 0x101, 0x3, 0x57d, &(0x7f0000000300)="58fb977cfe52166959a621678be305fd59196952886592f485aca5270a7532ad0066a692d3b7df471fa9d74743e6f37f63705aae169b8f581d72c5ad42b807d8e800ef50fd66d37684b1f42ca5f12a685d18d41f9bf8c853818f696b35caccac0803907fcb867c214c4a21a91d3d765dceae4be7b58e74149baaa685bf4140ab73de0b6f3d7bb1edbaeb8ddada3d", 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c00, 0xb5d1af1605322df2) r2 = syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/target/dbroot\x00', 0x80280, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xe49}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x10001}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r3, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_enter$auto(r0, 0x101, 0x3, 0x57d, &(0x7f0000000300)="58fb977cfe52166959a621678be305fd59196952886592f485aca5270a7532ad0066a692d3b7df471fa9d74743e6f37f63705aae169b8f581d72c5ad42b807d8e800ef50fd66d37684b1f42ca5f12a685d18d41f9bf8c853818f696b35caccac0803907fcb867c214c4a21a91d3d765dceae4be7b58e74149baaa685bf4140ab73de0b6f3d7bb1edbaeb8ddada3d", 0x7) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) open(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2c00, 0xb5d1af1605322df2) (async) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/target/dbroot\x00', 0x80280, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xe49}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x10001}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) tkill$auto(0x1, 0x7) (async) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r3, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) (async) 16m54.307266599s ago: executing program 4 (id=1746): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x80000000) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r3, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 16m53.738961298s ago: executing program 33 (id=1746): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x80000000) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r3, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 8.911849899s ago: executing program 5 (id=4287): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) adjtimex$auto(&(0x7f0000000300)={0x3, 0x0, 0x7fffffff, 0x55d, 0x12, 0xf2, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffb, {0x9, 0xa7}, 0x9, 0x7, 0x1, 0x8, 0x0, 0x8, 0xce34, 0x6, 0x3, 0xfff, 0x3}) getsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x40f4, 0x41, &(0x7f0000000100)='nlctrl\x00', &(0x7f0000000140)=0x2) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000740)={@siginfo_0_0={0xfffffe00, 0xfffffffd, 0x6, @_sigpoll={0x3, r2}}}, 0x80000000, &(0x7f00000007c0)={{0xffff, 0x1}, {0x9, 0xffffffffffffffff}, 0x800, 0x10, 0x7, 0xfffffffffffffffb, 0xfff, 0x7, 0x401, 0xfffffffffffff001, 0x100, 0x10000000000000, 0xfff, 0x1, 0x4, 0x3}) pread64$auto(r5, &(0x7f0000000140)=']}\x00', 0x101, 0x8) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r4, 0x454f, 0x5f, 0x0, 0x0, r4, 0x80000001}, 0x6d4) mmap$auto(0x1, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x15, 0x5, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg1\x00', 0x224a00, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000500)="4b6ae5a86f3e0896077902fc8f82ac5cb8f94c1757788661e5ada565ee130f2b21dcd686d6b7bde10f9b118083c706021357747ec7d9b1d7b1434d4b6e8231f6700860eaf8cd33328886a3ccba4f6664af143341598b695ccde77fbb68e441242248de69729a6bc2d5c85cbb16360ce93c7826e93bf96e10d76f8eac711ac0f68dfc18ab026af1875a9e618fe36dbf3c79cb9b8e79dba179b23be9de0c69918f0d71603abf9bb1b8894e65c338b9320b5502561bedb5e5bc608a305e7fd0b3e966a277478be2373c73b9cbc62ade124976") setsockopt$auto(r6, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) lsm_get_self_attr$auto(0xad2, &(0x7f0000000400)={0x7, 0x0, 0x0, 0xa6, "27aeab7b97f28a830d14acb4dc1b98b43e60ba140404888593d1583b4ed6af8562e854222f03cbc3443df095aca5ecee5c9f40a5feaefabcebc7d7d7b4b54dfb680e773e70b0e5ce2b094cbeea1517608701e5b13060497bb11a2f859e56a0323df29ca42c20daddc8251b2800a8a545eb787ea54b159864069e9384173133cc7e56915050c933a0f538214224ae79433c1d4b68916176f2b4709a0060d5b9888b4fb9cd6a8b"}, &(0x7f0000000000), 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf250a0000074be4a5cd904d5ddbf747098a03440e0f6848e8a274cc7365e1837a2bc926f6fed91187f2d434287e5487057d98b9551e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) link$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 8.612639912s ago: executing program 1 (id=4291): io_submit$auto(0x8000000000000001, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x28800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x23, 0x80805, 0x0) 7.364296335s ago: executing program 0 (id=4293): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x111000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (fail_nth: 2) mbind$auto(0x2000, 0x100000006, 0x100000000, 0x0, 0x6, 0x2) 7.133451414s ago: executing program 5 (id=4294): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x1) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) 6.652946614s ago: executing program 2 (id=4295): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x8a700, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000140)={0x80000000, 0x2, 0x7, 0x9, 0xc, 0x9}) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') 6.247988273s ago: executing program 2 (id=4296): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x111000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r1) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, 0x0, 0x448240, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r4, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0x44010) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (fail_nth: 2) 5.990891843s ago: executing program 0 (id=4297): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) mmap$auto(0x0, 0x100009, 0x1df, 0x1200000eb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf2502000000070003000000000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x1000, 0xb029, 0x0) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r3, 0x6) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000) 4.897646794s ago: executing program 2 (id=4298): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x301682, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() waitid$auto_P_PGID(0x2, r0, 0x0, 0x7, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0xa0000, 0x0) sendfile$auto(r1, r2, 0x0, 0x1000200) r3 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80900, 0x0) listmount$auto(&(0x7f0000000200)={0x10000, @inferred=r3, 0x3, 0x493e, 0x1}, &(0x7f0000000280)=0x450, 0x5, 0x1ff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000000032c700"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x202, 0xfffd, 0x4000000000e6, 0x8010, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, 0x0, 0x0, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) 4.794847294s ago: executing program 1 (id=4299): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x111000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r1) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, 0x0, 0x448240, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r4, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0x44010) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 4.761914968s ago: executing program 5 (id=4300): mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) preadv$auto(r0, &(0x7f0000000040)={&(0x7f0000000000)="9ae58517041efa896d96f208a99bfac4e16dd787285f1853ce684d3798b4c8e97c", 0x7ff}, 0x3, 0x836, 0xb239) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) 4.527161287s ago: executing program 0 (id=4301): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0xffffffffffffffff, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x5, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000300)=0x8) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf2502000000060001005e680000060001000500000006000100c6f000000600010009000000060001000800000006000100080000000600010075b2000006000100010000000600010003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x40072) pread64$auto(r3, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) 3.936771224s ago: executing program 5 (id=4302): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 3.741642916s ago: executing program 2 (id=4303): r0 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x301000, 0x0) r1 = timerfd_create$auto(0x6, 0x3c12) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) r3 = getuid() shmctl$auto_IPC_RMID(0xaa, 0x0, &(0x7f0000000280)={{0x0, 0xee00, 0xee00, 0x4, 0x9f, 0x8, 0xb}, 0x3, 0x2, 0x7fff, 0x0, @inferred=0xffffffffffffffff, @raw=0x22, 0x6, 0x0, &(0x7f00000000c0)="c70fab88de22ee3b9d6f9edf2b9b62cb26d8bd1f3d55eb6162143be56a50510c86db20f516ccfdf2c966c13a4e921cd85c06f78a9fb8fdc04de1c908780ae42f6f6e26a4ce5cfcc95cf65661686cfcc1863d74a7babdc583252fb7ff1505ce7022a4e84660020feafefd2da8872d3c1b5fd6017f749b4a2ffeaaa63f8b864568d1ee83926ff4c879eac08e53b57a30b35503a531b98b152316fce5cd7a900410e59d7bfaae5c8177f6846ce4e4ed2883590c7fe86d68d1cee9eedc2f68c6a1d3543b2a8e1517e69178b35454b12302f6479fed630671c9302b636d56c910fc44d528a8e688c1a6d493413e", &(0x7f00000001c0)="55e6fa01bd09c35a2df8cc9822231aaf87d344955f392480b35d5e06a4c6f7a8c621a7a33fc764cca73a2491c0e744ddfa78f321725e794acf850d9f9f29658b6b93ef7009e0ec2b422360d6d6ca6eb43edbc5de9031bca4acea70193da8124d9f1fd03c0baf6fc510d425e9e533bf582b2e5e027396a44b959aad99e036d50f1baf38ce5fff4968ca77d778b83ec298be1c114ade5b3245058f9b92731a705bd8f4a6b4762c4f670d1c4f14704f67fba4218c5d2754e5bbd92350"}) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000000300)={0x1488, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x8de0}, @OVS_FLOW_ATTR_MASK={0x1259, 0x7, 0x0, 0x1, [@generic="53ecd3c3458d5ef691c97e813cca543bf03bd36109732ae53a11c99d2800171906b4698242e5831e6cbb476d6b375f36ca9cfdbb16b6f3846936feddc6bdc1c3051ecfa9edec4dd831dfde5ebe38ced3ca52b4cc30afad6c0088e8b42736df76ff333b06b1f68374d1b1d2247f1d54a18b7d6ba4f3c51c8a7fa7eddcad887f5a2e7cf0bb7fdb76300f63edf409d022f0a1e0270269ececd246b300ac634fbd6d718a6ffcd8feb2c45d7287375230fc0015746dc0b5405139c010a9586b6aafd00dca11f43ae5105e45", @nested={0x118c, 0xf2, 0x0, 0x1, [@generic="03a6388f45d5cbecbb20d08f5428345ecef42e9ac0754075cf097d0a56bf2a79144ff7b24bf2eb9aed87088ca4912d2ad714e5472bf6ad3f006d6a244a3dfefdacd097990cc046914541a85aac03c1934e19adb3053a8e3b20e2b0835fe72b41ed51b78591c70b6881a2234ec93d9880a398ad46f3cf19c9b36478c8d93a9956b128bf0a181bde4d25addd5a7ec4517a6f2d47404bcda6e95960cdc6260d543761b94a85655187ba99e0e3ffbd6174514a92af80e352a719b9ba16bdc4a3ae71e91b9e1424768aba060e", @nested={0x4, 0x2a}, @typed={0x8, 0xf3, 0x0, 0x0, @uid=r3}, @generic="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", @nested={0x4, 0x58}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xe8}, @nested={0x4, 0x10e}, @typed={0x8, 0xb5, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="fc763f727803a0d8ed0c3376891d2febb6e2854665061f2aa5477323e8e10e4f3b79c80907c2c7ab8c1a192ba8561671b5a9dcc84b70af97d2462b28c290eac13865716be0aa1986188556ec929362598157129d8c5dd36bd6b1700726767497bb6db41d87fe01f53a921e3e7291fc7d85d422598c8d2a02c3b2229deb9cd8ccf925457f56ee326c0964"]}]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x81}, @OVS_FLOW_ATTR_MASK={0x1c4, 0x7, 0x0, 0x1, [@nested={0x1be, 0x116, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="ff9090272b3470bbdbda9354d1dfe1c9d5697d3b638df53c62fcbb09f84e2631d32590a2ecac1c0a401d4ff0c52b50d3e9fe651f9f41d842e33d2554860251882f9e31e54bae8a38bbd51225fc67c2555744d1b9cbf0617b301cc6ce710a5487965e7dade29919971ec5dcea66d0dc229bbb8d6acdfdbc147402f7bf0ca3fb3cf8e950f045cb6db217c8820d3102a96183cc29252a29e5c695c6ed3cc0edc6c0a4a9a6874f7fb90b1ef2e3e8e92ac9fa58b1b1b7ffb15e0c1a1b2525d46a8370dfdaf79cc6749c30452c72ae60b777b8b944c91836562278a5", @generic="90554c86bb2b9230213d3d142aa501429e638205cb352b5663e30c64ac7af049a906332ac41a0d327358efc648442715ec0d9c4149214277291f893d69f6c2c16141ec5930a3dadce815ba061d1006aa695d3c5a61216a75c88dba4094f037eed52f7e8431c590f35063746fc91c4c6d614ca53dcbd49e27869b858ed9a8efa65baad151408a20983a7b9c1849c578d47eb6733b716dfd51e1226769dd4b5534862d9675352b90bdd1645b4e61f0e1ce9cfa63d1c3e32d3b355697df680ab6ed404fd975b95c57259b699c5dc9369fdb48f3634fded4945d6ad4c51f11"]}]}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @uid=r4}]}, @OVS_FLOW_ATTR_KEY={0x34, 0x1, 0x0, 0x1, [@nested={0x2d, 0xa6, 0x0, 0x1, [@generic="aeb0ef82b514fe26a232453c3d1f49953eceb80cee7142531ce70f92bc5e681143", @nested={0x4, 0x75}, @nested={0x4, 0xee}]}]}]}, 0x1488}, 0x1, 0x0, 0x0, 0x20}, 0x0) r6 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001840)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/snd/controlC2\x00', 0x40802, 0x0) r7 = epoll_create$auto(0xfffffffc) r8 = ioctl$auto_UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000001900)={r1, 0xfff, 0xfffffffffffffff8, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001980), r7) sendmsg$auto_NL80211_CMD_SET_CQM(r10, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_PMK={0x8, 0xfe, "8056b12b"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) setsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x80000000, 0x15, &(0x7f0000001a80)='{^-%]\x00', 0x8000) ioctl$auto_RTC_EPOCH_SET(r9, 0x4008700e, &(0x7f0000001ac0)=0x401) execveat$auto(r0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b80)=&(0x7f0000001b40)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', &(0x7f0000001c00)=&(0x7f0000001bc0)='{&]*\xef:,!\'.$\x00', 0x4) sendmsg$auto_NL80211_CMD_FRAME(r8, &(0x7f0000002dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d80)={&(0x7f0000001c80)={0x10ec, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_NONCES={0x39, 0xf3, "cbd8dd317ccda259d4ae17c69539dda48044969ceb3a500cba51993ef4db7f5839c6941708a8a8cb307a75084aff0da6d4b2e01a25"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "c44ae10c7f88c15d792b2ae30255"}, @NL80211_ATTR_MAC_MASK={0x1004, 0xd7, "3d2ef529b62cc147e39931e626f80803664f0f659f889f34947ea05fe1e3b4fcdffac0976749e0a0b80c67dd58a1b289ff89d0ae2cdd5eed581b798f9cd00da75526206078af272e2d13402bbb9f9ad2919f2e72845f6e7f5f0f0c29a68c4cdb749d5b4953ada23a4edc19465b4b2ce36b1d46e8e912f5a69c33a873cac7a6df18399d9cdd7136f50845def17b0904f8594f4cd0afd0acfdd061ed94b6eec967a34d5915928dee91ed049d2ba2c66483027f9c882232b1cfcdbd70b2a0b65633df84a530f587d1053caf887b180ed0ac888d851006869eec4f425075f050077882213e6b8235c4cd34e7079a3e387d4ae6c7b8acd421f45ebd81f12c0352db9558f11c4a23d986e5d9578b28ae3471519b3bf0caef5753226f18ad1f3b3c0e6ec1a88d49582bdd53cb0d96e2c8dbcef7c2bc781d13f9c321a71c2142f8544d156177cf3c80e4b25553ffe54b5eab738d049ea67712a3e38891b43af0ccf58e11693e00f579f9d7dad5e195be989eddab0999ea33cd1b7207ecb4086c91d72e679fa9fabd4b314984c1047a93c599f97c60c69b1d31193ac76edb289124a2ec408d6ee5610ef50e0d5a0986c5cd933cc490a765ca9782468cdc7b53fbe542de65e2dbd5f12061bda1311f73919920372936b4a0dfda81a3d2abf4b30ac4f3490f50ffdd05842b77e98294885915fdda2c3e452bd95d9ceab53734fecee3f5db59e52b5d837136e39b9beca898796488a76e35239917c6325a93f11e20618bd8f19532d7db0540630d740957a1fbbb95483555bf96f100f70dce4116e1e1d582a3a9a2d79e8cdc2b5d32ec8be58cd960cc9e23d54967abc7b5aabb1b45c27950b1bcfac85ca3d3eac722c29b61e8d4f9f56079a39f7e182d6c59754176a24d9abda6c931517daebc2b135492610d44602df07057269ba91fa1a03b931664d2414ea2812714cc594767dbae07e431bf757edfbce169c17c746e1d66322c511a6fb162ebf0b97839bd9469f6c2ae4712264a8329c4be0315075ad4da923e5840ff5062d3507e511076ab188ae52f14c8eba25e9ccf8dd53129474b70283e48df647d7a985abe674c2dd8b9d55fa0954779ded881b480b62206b1590b9f494ecf98672c13661820e9cb6f0a1c6c362f3238607f1b42dd62a32cb24fc47f47f20233186973c141cbb6ce2bf5d6db551a5f1f686a614facbf813be9df23188f38686eb8bebb6df822ed90a10c36e4c97934caececacc5b7b4f6f65ae0cfe2d69ef743ba9deec2fccb5c6cf879ef58095270445d7a1ee6444a40cf634734978ab65b5ac2a5c0acd80a4dfe72a18586f1c2d86045ed49f939b8b0e1d91c159fd3dabfd0dfbde0b25a639957494fb325cbca2ec5784a4c1fbed4ea41aa49726254857679c5f37ee60ff04d9ac95e4f6e58d751bd6016fef082978bd7e487411c0ad10008791144fedd82e43e8350d135f6d284a4f425df62f240aed90a540dd045e374ad5cb9ae73d4e174c337d0cd9d386a86f8cf1bcdf2409ac3bc7764bd27312a784288605c20c709d98dae47d81e9544cc2e715d954d1eddb66c0660f3a4bf4af5b80494c7e5c0e3a31dd6d688bb91f4c010dceee15485be554824932a5646545225601ec488caf717046a643771dd92334079105d84b4fcc26a3a398fd03aded513eeff51bd7321769e0150d31924641627f9e57a0a1383d202a92ebcca496a138a1c40b5a69d0ca377049cb77787a8d3b43158607f30739005b0bf902ac71865eb6c427b9e9c6c911554fedbd37098e6a46a364ba482b810ee3b04f266d22a18a060e23d12bddbdff2b3938e264dc9467fe835f2aec05af6525cea83fe8610423606df1598da2cfe42420016bb18570abe31857e6d77eae9cf9812630cf5796ad65ba26c4b4350106fd4014aec3bfa151ba12530eaf6f83220d81f6f166674a94aa80ab853b46b0b8e25dbbf943907c3d3918649479be2e95576e275d20a618c273cf054fa756f89c55341006185798db3a57b61a2ea6e24ca542ee37f64e0c54ca9ecd19e506acaee5f1115e4ea99fd3d7d4f4ffe7cf45c607e256862528cd3cee6b452722c0114730fe01385447d35ff76c9056d5a9403fd58d47e8e157fec8e51201a5d4a8de0897f9f17997c385dc2658b29c0e8dc3cf45d8995668acbf2a8492be324afcfb78290c08be328aa8a5e8da9db77ca6dbdb80ec93262000c9a263cc8e74d1159b140a10f0f4ec9b5d6ba8053fed46dc56da88bb4636a418ed1d0b1af6c8d5ec485b22ee780bbe44736cbec5993efe3ce28f5f6161d54be3c028e2ce5240d6cda37b571a95466e9eb189e6f886caa94634415e232ac0578aeb4208d3ff91e2910a62126447fae3c905a5b4309e39494382b00291168318bfebb1513029b28abc3fbd2112c4d79c4300f37aa3f3af07c06d6d04e52b5d42fe05202d1453410e12011323607e0fa56129cb0bcc709d730814a3806393759da97a3951e3b51d06472986d628f455c2049c0659eaea4cf5a0df71bc30f705178514b4bc2b7489ce15f7b3d4430a3b9caa0f3eb8dc335f7a781d261b14c8bd44e3b34a79f434f78846de5c154c640ba0ad3c1cc7e9d4818c0a25e61003239d7672ea143fdfcf19b40fedac2a66788d40328323c06fd54ee466eb3c0b7204d53e6fce897ad2a6c51cac2c1db89853c6b1d05bcebc31e93e467632d939ff5a8db762b211f7e852047d692a58716f8eec45d826ce5a60bac710912e03e3389507528a666b5feaf5526e5a4a7000273fea42ba1195c3b43ec9220dde4d4f28143b3ed6d7bb8416292ef5c8894fcac0ee7efdbf3b3e3881b8cd0f2ca758814acd9eb5be339d9a011c17e47ba479e79079bbdd3674a49107fde3c3e893cec9c460fa93ce6966952704df43924fb562cd8f45beb758fc99b12b5c5913ebff963ad92f5469d6fd9a0e03661f8bcf5e141c4d2d052833bab70a4b0aa0c876b3d95d354563af66113ec99fb93a5a02bdd0017ccb60fc5f107ce26bcda777cf3374b3ccd12a0f6d07b67e92104befef04381420475fe715b754089a236be887acfa5bce73c78b72bf8b4ab6ba43d18a4cfa3af4471904de6a2727d598e0c443a313b796330522e521d9512990a358ec50e25b44534bc5f71530e929e38f50e9a9e1620c8bce02e2f46425f51586c5893567e46e72c9e060ceb40ae0d2652a09d772f58135f9d901340228239b5e199ec9bcc945a157bb63e7de383a556b672bb70afe23826bb8e7d5e4baca78a003a5c4e19e9bfd3da4c1e40a98c60cafb10f549a9e1ad233b3d78610ecf2297e5a371f50144a8e907e34d2ba1a9b867e343f4fc1b791dad68f61959e7c174151ca5f5cecddb2f759ffa5c00c1906855a09cbbefed716944085b10b4be17c39e39f3ba3868eef698b294e25e3f9de0c8869160a1900d1753b13218fab8900226a4a349cf95e577f10f3983a996fcc32c469c79a401dd86aba03190e39e63189a8de706e098c44e6658856b581ae901e078e94f7c2f73072c31a5f61f7e7ae369fab6ea2424528be5c19c1af365d544b9bc9aeb334b26215e57bf258a7161f5e4b8f728b4701e1d70e10976b94ccff442c7c1d71f251d0982bbe16b3d2d39aa8bfb5e72bde4ad8664c7d5ebb9a2383ec868e40f4ed05c9cac41560460a23b7bbc52900da25790d18816ef20017c9ba015625b2b86a2da2f03cc41bcee3d6327ff212be16e03b736f115b33f29d8c6fdb39e59929214dc856c5c3564ae700f85a27a9bf3e7c8e1cd55ba9825abc674dc54ddf9ed1de6fae33c35216e823e75ffd9847b72a26662de69d7ecde889f693a0fae10e0dfa2ea3bb1e8714d7042918f69cc727a7abcce94967191385e0a5b3e8f17801f511d66d6ee5d2901d3423ceec0de692cd1bf33e9059d8d1a36a820b1a2f175868fe00b8f039ded95ce9fd17a81d260698fe28f98b2ab3d619707caf00228f329632ed34f6f9e33270bcce5d929d18cd0fdd46b52c6e22d357acfcb719f9995fd89ddac6a6793f71b2d18f390ab20fb3b8d94b8883bb24d41450eaf61ce5df0073dfa6af06e182a304383b65182ae4ef6f81afcefaab90abea071e3b9de71dc9b90513bddf28092118bd68050feeefaa8ab7cd3b060b87a750d3bd0da81b26fe59dc97504099232f9347be80cc2f84eeeee618ee4eb1f834d102cf7dce31d79778e1b8410465ff046c649147e57b5a3deadbbd260dbac45710f01abe62f05886267ec25129df18145f776cdf97783d2b9874013fe89833f874070220474513e0bbcdfd6879a38b587d3c7ab4656453b441c7457fd9f3d21962bca62fdc11e4c046a6c683b38e33c2100fb1f657de92ed4c2287c3aa7f50a8c42f5cec652132109ff70dc97836bd84cb3f5b3356c5683b921db69922c03adeb81035dad4d450c2e86b4b516e0fad8d7b2a704931ac685a5775b17dad1788ee47d1277f81944856e1c16237fab8c2548ebd91b6eb43de4997f3ed7a0a5c76b4bb3c31449b8e2fd487808197ff1b6bdda1848b78d2d11c0113d2e9afe1bf9b33376cf1cfd6e1d24d491c89092b02cdc718b7354f6fe0efee87a45517525f99f1a1e8c47c71db14736f28a403ebc1111f3e21e864d60cbf96f2a48ba7acc35172d0c6c5222d67070ef9f82244f34abf1c1c6b670fc89efc4e0711fbd405e87173e263c02baf566261be706b009e6108a91d9bd59cbca3398c7c03900feacca1c9b2b5b39af7cfd0880f128fe6b97d1f6ddce7ee38fa4bc3ff2c83359e23511850ef5d3a75527e2dc12992c6b6c2f19987b8a527ddf7fadae9c11154c67c21d5c70df7d9706bc0defe9d34baa877905a09ab063eca1c9a61482428768ea61d9c19f17b74bbb074a3a6d772ca83e339de39964a754c069b41d8bdd309154323ff802e8c8aa85eb1e19fd0ca81e09174629f6b72c209fabbd141def8eb83b4cbbeb7ce36e2d3368daaa8f39b62343f5b80b2af09fdc45b61759f3b2c53aa0f737871e2fb2f80700d0b09639a04dc30dff2f4ba9f478141b255f5e512d660f6fb7f901eebd925319036753fcf52f04a04ecddd883abb59709844d4d6b9678cb62b82999384a389d15295ffb3e64b9df02e101411f955b1324eb690c1042687eed659364ef18357e0e3c8fcd19fbaf41aeb9859d6a01afd9b6327f887f12a0aaa51afc446ed503efdcbb219087951854bff3f5c6cfee314efebe1b1114f86527c8392e38f7f293fb4ebaf13f31f1fec553a257495caedb7118b035c49e0bed542e189649cc254a10576e3a43f9347714f0b17aba9ec5cc54b70c391582483f082a62aa6092f2539e3312b3033130d64c77103d655ffdce2704d742ace1157c90b6104beed04e89528b360d1fbcb452c57b4119f67e6402619c0e2eec5d49e68bcc032a61ac6f1e7323ffaf026e2bf173b4b29847542b4906118ece1984d6b55fd3f69ec69cf02d80ab7cf375e17f7239dc71f64b819d10454cbc2c0486e6118d3085b1c81641c2c21a23e5512e5545b32e0981fedbeee0d46a5c4391b8fdf187b3129bf96d85b0f64c17e0eff38fb101b35e38982a0b91a72959272520978fd50689a6ab7a6ad6012f86cd3d910bb1d2372616062730ecdfbf4dd78464c0154fddb491b483c1f1499ee9e9d89b44deeeedb5d13b71aa1d34eb412f4ba8cfb098fab7bf62940f318d23b5a96dc03abfdf52340db09f5d1efdff7b46eb89cfd6f3d88111b8ea0bae42cabbaeb5677508a66eefa696641c45249463e3d018c1f786b4fb6fa68126c2b4432bdee96e3ddb5aee6b6ead23b"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x71}, @NL80211_ATTR_MLO_TTLM_DLINK={0x79, 0x148, "1c6b0ca72698bc91600d0869598c4515b9f063aa81fc99b8ef5a24e64e17b121d1d50562fc6095316e1702530511fa78375181018f8379f4c3132ce187dd80110710aef8c02f4b937f67490fb1fa5132cba8a89655c766c4b13b9dcf760d262a8a6d089546599ea6692b617dab640d57e0afc9882d"}]}, 0x10ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) fstat$auto(r8, &(0x7f0000002e00)={0xfffffffffffffff8, 0x9, 0x0, 0x10000, r4, 0x0, 0x0, 0xde, 0x10001, 0x2, 0x2, 0xc, 0x10, 0x1ff, 0x5e9, 0x3, 0x1}) r14 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002f00), r8) msgctl$auto_IPC_INFO(0xe, 0x3, &(0x7f0000002fc0)={{0x2, r12, r13, 0xc648, 0x3, 0x1c4, 0x4}, &(0x7f0000002f40), &(0x7f0000002f80)=0x3, 0x73adffd3, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x340, 0x3, @inferred=r5, @raw=0x1}) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000031c0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003180)={&(0x7f0000003040)={0x12c, r14, 0x73c, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_DEVICE={0xfc, 0x2e, 0x0, 0x1, [@typed={0x17, 0x78, 0x0, 0x0, @str='/dev/snd/controlC2\x00'}, @generic="f56cbf8a61785a028790df2a7e562fc9ddb4bbb67a71877dfe0f80397982ed1f9b122c5ccb8a8d9c976e40f3119374fd0c3ef719bc4d6856cbf717729d7cf6cfe55e8ac3da2d23272244ba21cc3331732124e60862afa339bf8ea26c67db7087c67ca1817a9be2e869436800307ab70751f48f2c862ef27e45e30590f2ba0ece91b919033a6ec9030ab2cc8e317fdc20a50acc528d1aff7924a1daddaaf3f69ea01abe16c9839cb497b5eae7543f823e302cfafc806e8ef18cbec7b2b19224cb8ced887aec8bbd7b2d9823c62484ab8f36326cba315f5a662d61a2831b6d50a5"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r15}, @generic]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000003200)='/sys/kernel/debug/usb/usbmon/3u\x00', 0x20883, 0x0) r16 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000003240)='/dev/tty29\x00', 0x0, 0x0) ioctl$auto_TIOCSTI2(r16, 0x5412, &(0x7f0000003280)="508b6c0ec9ea70c1e34a2acc07b54da6e36b35d608179323e29a2997a1391be6dcde54a7e87bed8f506f2a607f2fda3eb45aba4ef2395a1f223166b8a4de0e108662a64e731e796e566a62317d4a75ca3854f556707f26195bb63d5a18d33cbdc06180883698d5236bd6d3451f543352514badde7110ec44b777dffc2970d5591825335792da342ed66dabefe5a43700aca7c3df0c28f368") ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000003340)=0x5) r17 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000033c0), r9) sendmsg$auto_VDPA_CMD_DEV_NEW(r8, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, r17, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@VDPA_ATTR_MGMTDEV_BUS_NAME={0x5, 0x1, '\x00'}, @VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) io_uring_register$auto_IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f00000034c0)="99094e31b02be2b0a57489b0e0e9077477ac6d6b7115342cd2bdf53d2e7e5b28d0e34d16c1d28077bba792ac3af95b395a73b9f1959a8e2b79cbe35929e0b41d2331b83d27422ae392c0c77b3c8f19abfdbc5acefb0d05b2d98593acb8780e80f52c5a945d02eaaade1eaa404da0dc88326126010b5eb27f32078dd7f649bd1fbca4732f24786ae1c3a6fd607bff9332046107948c0396dc06bc0b120293bedcc6727153eac81812b344c28747d023e7d691598987f214b77c92d642180ff380c447df775a1dce788decf855eec44b34343601504a1ad3b62408c93b", 0x15) r18 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003600), r9) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x74, r18, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 3.478918204s ago: executing program 1 (id=4304): mbind$auto(0x5, 0x8, 0x0, 0x0, 0x5, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0xf, 0x7fffffff, 0x2, 0x6d3c, 0x9, 0x7, 0x6]}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x401, 0x1) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e21, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 3.075859433s ago: executing program 2 (id=4305): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 2.338127466s ago: executing program 1 (id=4306): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) fstatfs$auto(0x3, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bind$auto(0x3, 0x0, 0x6a) connect$auto(r0, &(0x7f00000000c0)=@ax25={0x3, @default, 0x1}, 0x8) socket(0x10, 0x2, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000140)={r2, &(0x7f0000000380)="3f3f5f98f2527978536014245720a5ab5d293a6dd93937e271c164d0873ca91196da70789a1758236c1e9a2e302ba8d840a1033140a32902e2606475f81f091b4675834348c5d7ab5799df1f0142860cbf4d312ba9433947ff12badcb2e83504cddf3b4df08e002fa8bd875042a78d8d52c16874a369ddcc842c1c64c7cd5b0b47bbe888338246d1b64eb89efcf43a6bd0385309f0201d52d45bcca0717691653b4562378c9c8ad36166c9b741011ff0cf44f58d83f5c802e95cbca7af0e7c1990bfbd73ad83c096ee8064bca4a68bdb35ba96240ca2ade312a1ed2045d15c", 0xd4, &(0x7f0000000840)="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", 0x36, &(0x7f0000000080)="3dc63fc5595b1684fc3bf0d81af34656e1ba71c6ed9522d1320707bf2d8cb90c6a44bec96b069d0a6a32e796b524307f0d4b", &(0x7f0000000100)=0x3}) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x5, 0x7, 0x200003, 0x2, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x800007f, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xe) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x400c800}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) setsockopt$auto_SO_BINDTOIFINDEX(r0, 0x3, 0x3e, &(0x7f0000000480)='/dev/vmci\x00', 0x2357) 1.718062369s ago: executing program 1 (id=4307): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) (fail_nth: 2) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1.243712309s ago: executing program 5 (id=4308): sysfs$auto(0x2, 0x4d, 0x0) r0 = socket(0x3, 0x3, 0x86) setsockopt$auto(r0, 0x800, 0x78f7c1c9, 0x0, 0x6) r1 = socket(0x1b, 0x3, 0x76) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000380), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="045626"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r3) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=r2, 0x7, @old_map_fd=r3}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd=r5, 0x1, 0x187, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x2, 0x9, 0x100000000}, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002cc0)={0x0, 0xff9e, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250a0000ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x811) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x80044944, 0x0) r7 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r7, 0x17, 0x0, 0x1) read$auto_vhci_fops_hci_vhci(r7, &(0x7f0000000000)=""/253, 0xfd) setresuid$auto(0x2, 0x7, 0x0) setfsuid$auto(0x0) madvise$auto(0x80000000, 0xffffffffffff0005, 0x19) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 838.879972ms ago: executing program 0 (id=4309): ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ca6ffff", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 731.647496ms ago: executing program 5 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffff, 0x3fc, 0xdf, 0xfb, r0, 0xffffffff) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder1\x00', 0x8080, 0x0) dup$auto(r1) socket(0x2, 0x1, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xab\x12\xfa\b\x1c\xc7k', 0x4008) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7ff, 0x6d40, 0x9, 0x4, 0x1]}, 0x0) write$auto(r3, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x4000040000000007, 0xd, 0x7, 0x9588, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5, 0x40008000001f, 0x7, 0x7ff, 0xd, 0x10000, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x7, 0x4, 0x7ff, 0x9, "0800aafc241cd010c7543bfbca2ce1", '\x00', '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0100000000ff00", '\x00\a\x00']}) sysfs$auto(0x2, 0x23, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/mpls/conf/batadv_slave_0/input\x00', 0xda622, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r6, 0x0, 0x1ff) write$auto(r5, 0x0, 0x2) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x6cc702, 0x0) write$auto(r7, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 717.49163ms ago: executing program 0 (id=4311): mmap$auto(0x81, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x7ff) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a3c3e3efd6ea3d31791840bd70c00000082574c58e9865c42d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db4b519958c62bf692d2c9df7a9a2e8a556b30aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a25e65be53e69c6369b67a4cbd6383a0d766de0287d84516183587530a17dbfd83a7678c6dad9917b91c7c9de3d61af452f90cf22400c4bcbb8410703641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b2537b0a63a5cf6ae230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6b59bce357b9a8b05b4ad586c7b72db5ae55e9d149330720a", 0x119) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x5, r2, @relative_id=0x7, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf250500000008000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r7, 0x7aa, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r9 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r9, 0x10f, 0x87, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00\b\x00b'], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000005af09595b41691638faed440050efc1f6804004917170bc68cf9603182daa30de3bc5b9e9223d0dd4e0db029cd4eca2104e3913e66c3b483af6820aa186f7273730a82f8dd997dffb9786bab5b1ab85e5329af40cbf3430dedc33602f010d2cf74bbf7f60e5b0fc4ff9af10d6d2b0194a74c42f7e25920e87e61483fc64fd9cd43866c5c7ee5c181f943247e62c10398a573bd9756b671c0324d3096e56b46e802e4a4faf2e5531e458aeba82c434781c3937018656a486f8eac007d603e105099f22fb62fca873c1fc65a430f07b15bc269fb74f76d0e593071f790e9eca1bb9735d273b283dfe664367433d887c55409ea5499d8f94802dad757f2522dc04081b6b8d55301cc1734e54bb0c66918c436439f31db8abf64af9a0000000000000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf251f000000640001800800030008000000080003000700000008000300fbffffff08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r8, @ANYBLOB="14000200766972745f7769666930000000000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r11], 0x98}, 0x1, 0x0, 0x0, 0x814}, 0x8000) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5, @ANYBLOB="000425bd7000ffdbdf2520000042f400b7ee00083a57e843699ef1102d7800050003000200040000000000dcf3cf493c91b468f453cc86a166539b761055eeca5bfdcb8d8248fa1615ccdee04a147c42f9228e4d30b6a3ff7c2f1413ed328dc9413b251119e368c72af2ac7f5676576c0531b7b4729cec42933c56d796462c863f5686c1b6a6e31b9c1c60549b0667ca5258098b6cd5e28de336fd8f145d810ce4ebeba1b197396854ce0e774d341d7aada1d2e0b1b5362dbfac969fd1a125cc22e7cab2549661cc04c9863c86b07ab445d05f50377e815fba36837fb83e4d904a36fd65635443322c9c9bbfc179fac1c45488094a0768db2096423e75ac74bcd7e1312119c4f695537dd1b0"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040094) 623.241185ms ago: executing program 2 (id=4312): io_submit$auto(0x8000000000000001, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x28800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x23, 0x80805, 0x0) 435.183256ms ago: executing program 1 (id=4313): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x6, 0x40000003) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0x62d84, 0x0) ioctl$auto(r1, 0x80045500, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1c, 0x81, 0x8000000000000000, 0x0) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socket(0x2, 0x5, 0x0) 0s ago: executing program 0 (id=4314): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x141e01, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x2102, 0x0) (async) r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x2102, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000000)="e08791ded46ac64eb24fbc5f87a64ae372ac2faee75ca1ae976ca9fca0f9", 0x1e) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000002c40)=0xd0) (async) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000002c40)=0xd0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, r0, 0x0, 0x74c) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): ] hsr_slave_0: entered promiscuous mode [ 831.800576][T17587] hsr_slave_1: entered promiscuous mode [ 831.849166][T17587] debugfs: 'hsr0' already exists in 'hsr' [ 831.863330][T17587] Cannot create hsr debugfs directory [ 832.013305][T13951] Bluetooth: hci1: command tx timeout [ 832.074069][T17702] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 832.094152][T17702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 832.163980][T17702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 832.223592][T17702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 832.254750][T17702] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 832.415950][T17702] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.322522][T12836] hsr_slave_0: left promiscuous mode [ 833.339021][T12836] hsr_slave_1: left promiscuous mode [ 833.352692][T12836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.370322][T12836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.392470][T12836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.406422][T12836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.457305][T12836] veth0_macvtap: left promiscuous mode [ 833.469496][T12836] veth1_vlan: left promiscuous mode [ 833.480803][T12836] veth0_vlan: left promiscuous mode [ 834.094183][T13951] Bluetooth: hci2: command 0x0c1a tx timeout [ 834.174523][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 834.180598][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 834.253328][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 834.559494][T12836] team0 (unregistering): Port device team_slave_1 removed [ 834.613980][T12836] team0 (unregistering): Port device team_slave_0 removed [ 836.211026][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2403'. [ 836.333501][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 838.508453][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 838.557832][T17587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.692117][T17587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.765686][T17587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.790062][T17587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 839.289343][T17587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.369249][T17587] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.405653][T12840] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.412870][T12840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.495947][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.503132][T12840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.853409][T17587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.039004][T17587] veth0_vlan: entered promiscuous mode [ 841.086679][T17587] veth1_vlan: entered promiscuous mode [ 841.341662][T17587] veth0_macvtap: entered promiscuous mode [ 841.417492][T17587] veth1_macvtap: entered promiscuous mode [ 841.450147][T17587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.486245][T17587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.687579][T12836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.717624][T12836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.730006][T12836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.759023][T12836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.213490][T11371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.252512][T11371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.487147][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.498469][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.550185][T17863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 843.568467][T17863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 843.576414][T17863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 843.584141][T17863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 845.298259][T15781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 845.368629][T15781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 845.386620][T15781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 845.398924][T15781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 845.406629][T15781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 845.614238][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 845.620326][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 845.628023][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 845.634235][T15438] Bluetooth: hci2: command 0x0c1a tx timeout [ 846.372933][T12834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.979751][T12834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.103800][T17909] chnl_net:caif_netlink_parms(): no params data found [ 847.316421][T12834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.456453][T17919] Bluetooth: hci4: command tx timeout [ 847.688836][T12834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.121915][T17909] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.132867][T17909] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.145934][T17909] bridge_slave_0: entered allmulticast mode [ 848.171118][T17909] bridge_slave_0: entered promiscuous mode [ 848.185263][T17909] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.192404][T17909] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.209576][T17909] bridge_slave_1: entered allmulticast mode [ 848.239639][T17909] bridge_slave_1: entered promiscuous mode [ 848.511272][T17909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.579156][T17909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.818076][T17909] team0: Port device team_slave_0 added [ 848.946885][T17909] team0: Port device team_slave_1 added [ 849.017787][T12834] bridge_slave_1: left allmulticast mode [ 849.026931][T12834] bridge_slave_1: left promiscuous mode [ 849.033123][T12834] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.066255][T12834] bridge_slave_0: left allmulticast mode [ 849.087217][T12834] bridge_slave_0: left promiscuous mode [ 849.093137][T12834] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.533252][T17919] Bluetooth: hci4: command tx timeout [ 849.965331][T12834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.978490][T12834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.989480][T12834] bond0 (unregistering): Released all slaves [ 850.066956][T17909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.086930][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.117647][T17909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.131148][T17909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.142891][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.175304][T17909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.339898][T17909] hsr_slave_0: entered promiscuous mode [ 850.349958][T17909] hsr_slave_1: entered promiscuous mode [ 850.359405][T17909] debugfs: 'hsr0' already exists in 'hsr' [ 850.368559][T17909] Cannot create hsr debugfs directory [ 851.613237][T17919] Bluetooth: hci4: command tx timeout [ 853.039109][T18027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2431'. [ 853.693680][T17919] Bluetooth: hci4: command tx timeout [ 853.745630][T17909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.829955][T17909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 854.077025][T17909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 854.171102][T12834] hsr_slave_0: left promiscuous mode [ 854.194647][T12834] hsr_slave_1: left promiscuous mode [ 854.209728][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.233378][T12834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.244382][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.251813][T12834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.335686][T12834] veth1_macvtap: left promiscuous mode [ 854.341629][T12834] veth0_macvtap: left promiscuous mode [ 854.416656][T12834] veth1_vlan: left promiscuous mode [ 854.449062][T12834] veth0_vlan: left promiscuous mode [ 855.437960][T12834] team0 (unregistering): Port device team_slave_1 removed [ 855.506542][T12834] team0 (unregistering): Port device team_slave_0 removed [ 855.971665][T17909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 856.487852][T17909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.567663][T17909] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.641962][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.649135][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.670902][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.678043][T12840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.793649][T18069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 856.814311][T18069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 856.820470][T18069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 856.858656][T18069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 856.869450][T18069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 857.048531][T18069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 857.415485][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 857.632957][T17909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.022537][T17909] veth0_vlan: entered promiscuous mode [ 858.096723][T17909] veth1_vlan: entered promiscuous mode [ 858.277711][T17909] veth0_macvtap: entered promiscuous mode [ 858.323374][T17909] veth1_macvtap: entered promiscuous mode [ 858.376568][T17909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.446291][T17909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.496740][T12836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.562709][T12836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.584692][T12836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.645871][T12836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.725766][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 858.882450][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 858.922263][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 858.928781][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 858.934889][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 858.940974][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 860.128274][T12834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.210196][T12834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.505187][T12836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.581586][T12836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.974295][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 863.053937][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 864.346567][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 865.097457][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 868.043290][T18252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 868.074796][T18252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 868.191855][T18252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 868.248698][T18252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 868.814557][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 870.093152][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 870.099189][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 870.258442][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 870.264855][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 875.058172][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.064700][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.589274][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 876.404331][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'. [ 877.590893][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 880.121578][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 880.547134][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 885.696271][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 886.315477][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 886.923737][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 899.957348][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 908.192834][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 909.085638][T18827] nfs: Unknown parameter 'w¾Ã`_…à‚ûÏI+;ýá ÑöHYø º†»·«ÏLuõ>>ËÕuh' [ 909.168188][T18830] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 910.090862][T18832] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 916.706459][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 922.015615][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'. [ 934.217326][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 936.497176][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.504074][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.003626][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 943.241202][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 947.643903][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 951.949901][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 961.583166][T19565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 962.170513][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 963.906466][T19598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 964.087481][T19598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.183323][T19598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 964.189516][T19598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 965.933703][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 966.095009][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 966.253465][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 966.253623][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 969.013654][T19680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.067795][T19680] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 969.136847][T19680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.191495][T19680] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 971.054826][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 971.133204][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 971.220838][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.231093][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.123437][T19771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 975.152382][T19771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 975.194636][T19771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.217918][T19771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 977.133349][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 977.213189][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 977.219333][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 977.300799][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 978.400068][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 979.532762][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 980.618183][T19854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 980.646401][T19854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 980.663367][T19854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 980.670082][T19854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 982.655279][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 982.661381][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 982.740354][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 982.749494][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 985.606312][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 991.593485][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 993.103857][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 994.117640][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 997.133214][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 997.144033][T20071] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 997.331533][T20071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 997.364024][T20071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 997.378641][T20071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 997.391554][T20081] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 998.109787][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.125376][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.213340][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 999.373680][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 999.454497][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1001.673277][T20162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1001.679491][T20162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1001.694988][T20162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.701483][T20162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1003.700360][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1003.706465][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1003.777829][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1003.783906][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 1005.550368][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2771'. [ 1009.879331][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1014.062905][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2794'. [ 1015.696538][T20362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1015.713444][T20362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1015.719559][T20362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1015.750250][T20362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1017.773219][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1017.779265][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1017.785296][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1017.791398][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1022.658371][T20464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1022.689399][T20464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1022.740248][T20464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.749560][T20464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1024.742644][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1024.748796][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1024.813505][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1024.819530][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1025.781710][T20513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1025.823466][T20513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1025.880884][T20513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1025.921511][T20513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1027.266287][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'. [ 1027.855469][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1027.862332][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1027.939918][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1027.946266][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1029.910023][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1032.858280][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2836'. [ 1040.011244][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1043.723682][T20779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1043.730509][T20779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1043.736678][T20779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1043.743305][T20779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1044.273168][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 1044.585975][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1044.690581][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2862'. [ 1044.786651][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 1045.773830][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1045.779884][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 1045.786882][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1048.753762][T20854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1048.760024][T20854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.786235][T20854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1048.855006][T20854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1049.369893][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 1050.760079][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 1050.819997][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1050.826083][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1050.893244][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1050.899284][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1051.843641][T20905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1051.849692][T20905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1052.029397][T20905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1052.096688][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 1052.169510][T20905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.933170][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1053.939361][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1054.105007][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1054.173604][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1055.362653][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 1056.824437][T20974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1056.832913][T20974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1056.852690][T20974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1056.883391][T20974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1058.898338][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1058.904637][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1058.910750][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1059.043192][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1059.376643][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.383551][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.985789][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2896'. [ 1066.274038][T21125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1066.306178][T21125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1066.312351][T21125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1066.379525][T21125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1066.404140][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1068.340023][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 1068.346506][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1068.354170][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1068.413149][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1069.942821][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1070.917612][T21188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1071.035498][T21188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1071.065542][T21188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1071.127896][T21188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1072.987236][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1073.053107][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1073.135509][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1073.214647][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1085.883110][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'. [ 1089.714094][T21464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1089.753229][T21464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1089.769799][T21464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1089.796912][T21464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1091.819189][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1091.825818][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1091.832761][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1091.856872][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1094.709746][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1094.993796][T21544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.999902][T21544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1095.006943][T21544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1095.015666][T21544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1097.053743][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1097.061992][T10220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1097.074954][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1097.081142][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1108.823813][T21748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1108.852771][T21748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1109.089034][T21748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1109.193256][T21748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1110.893624][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1110.899994][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1111.193113][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 1111.213175][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1112.403579][T21799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1112.552660][T21799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1112.615521][T21799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.650246][T21799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1113.145591][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 1114.413389][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1114.591852][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1114.693129][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1114.700034][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1120.820685][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.827070][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.669217][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1129.857302][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'. [ 1150.333134][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1150.343737][T22332] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1150.951734][T22332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.972558][T22332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1150.984722][T22332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1151.005356][T22344] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1152.413134][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1152.994717][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1153.065696][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1155.263164][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1182.255711][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.262196][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.193841][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1193.469122][T23028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1193.537610][T23028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1193.628079][T23028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1193.643265][T23028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1195.533220][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1195.616593][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1195.693151][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1195.699614][T17919] Bluetooth: hci1: command 0x0c1a tx timeout [ 1213.195746][T23328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1213.205928][T23328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1213.212167][T23328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1213.246593][T23328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1215.213374][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1215.219582][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1215.226307][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1215.293099][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1217.184273][T23389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1217.195651][T23389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1217.201843][T23389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1217.208528][T23389] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1219.255432][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1219.306037][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1219.313068][T17919] Bluetooth: hci4: command 0x0c1a tx timeout [ 1219.332993][T10220] Bluetooth: hci1: command 0x0c1a tx timeout [ 1221.823302][T23461] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1221.830299][T23461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1221.836718][T23461] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1221.843288][T23461] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1223.853361][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1223.859985][T10220] Bluetooth: hci1: command 0x0c1a tx timeout [ 1223.866431][T17919] Bluetooth: hci3: command 0x0c1a tx timeout [ 1223.872619][T10220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1241.577572][T23742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.683606][T23742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.717609][T23742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.742429][T23742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1241.749364][T23750] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1243.613101][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1243.710567][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.717106][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.724549][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1243.773006][T23502] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.855848][T23502] Bluetooth: hci4: command 0x0c1a tx timeout [ 1247.118025][T23839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1247.124584][T23839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1247.130674][T23839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1247.154828][T23839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1249.133098][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1249.213227][T23502] Bluetooth: hci4: command 0x0c1a tx timeout [ 1249.219520][T23502] Bluetooth: hci1: command 0x0c1a tx timeout [ 1249.228364][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1251.150602][T23902] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1251.162456][T23902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1251.211044][T23902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1251.219147][T23902] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1253.216697][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1253.222844][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1253.228991][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1253.305773][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1255.025669][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1264.508714][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1273.823323][T24246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1273.833617][T24246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1273.840345][T24246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1273.847379][T24246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1273.855056][T24243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1274.098611][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1275.855697][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1275.861750][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1275.934099][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1278.876865][T24319] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1278.883238][T24319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1278.889313][T24319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.893343][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1278.901573][T24319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1278.923932][T24329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1280.893243][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1280.908352][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1280.973040][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1286.125340][T24453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1286.173389][T24453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1286.274959][T24453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1286.298267][T24453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1288.184340][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1288.253303][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1288.393916][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1288.399963][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1304.027875][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1304.043444][T24688] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1304.177864][T24688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1304.195627][T24688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1304.212721][T24688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1304.228163][T24691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1305.135910][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.153369][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.093323][T13951] Bluetooth: hci3: command 0x0c1a tx timeout [ 1306.254016][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1306.263207][T23502] Bluetooth: hci1: command 0x0c1a tx timeout [ 1313.954621][T24866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1313.968039][T24866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1313.976183][T24866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1313.982645][T24866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1313.989563][T24872] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1313.990271][T24874] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1314.893086][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1316.015736][T13951] Bluetooth: hci4: command 0x0c1a tx timeout [ 1316.021823][T23502] Bluetooth: hci1: command 0x0c1a tx timeout [ 1316.027936][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1332.750050][T25215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1332.788335][T25215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1332.830588][T25215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1332.851517][T25215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1334.815741][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1334.830145][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1334.898520][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1334.904696][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1337.448972][T25296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1337.468908][T25296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1337.525529][T25296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1337.549962][T25296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1339.536796][T13951] Bluetooth: hci1: command 0x0c1a tx timeout [ 1339.539030][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1339.551779][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1339.619663][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1345.293490][T25421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1345.307963][T25421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1345.323982][T25421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1345.330261][T25421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1347.383160][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1347.389464][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1347.395677][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1347.403855][T15781] Bluetooth: hci0: command 0x0c1a tx timeout [ 1351.707076][T25527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1351.721699][T25527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1351.738808][T25527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1351.766245][T25527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1353.773364][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1353.779433][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1353.785698][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1353.791734][T10220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1356.118339][T25596] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1356.133405][T25596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1356.177395][T25596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1356.202563][T25596] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1358.175993][T15781] Bluetooth: hci3: command 0x0c1a tx timeout [ 1358.182150][T10220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1358.259056][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1358.266208][T10220] Bluetooth: hci1: command 0x0c1a tx timeout [ 1365.367512][T25765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1365.525219][T25765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1365.583095][T25765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1365.589349][T25765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1366.630851][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.638502][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.379079][T10220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1367.532959][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1367.696301][T10220] Bluetooth: hci4: command 0x0c1a tx timeout [ 1367.704225][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1370.522991][T25849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1370.529199][T25849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1370.554996][T25849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1370.614192][T25849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1372.576364][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1372.582605][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1372.588657][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1372.653092][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1388.605192][T26136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1388.625150][T26136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1388.632729][T26136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1388.640194][T26136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1390.653143][T15781] Bluetooth: hci4: command 0x0c1a tx timeout [ 1390.659200][T10220] Bluetooth: hci1: command 0x0c1a tx timeout [ 1390.666106][T23502] Bluetooth: hci3: command 0x0c1a tx timeout [ 1390.672134][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1401.146991][T26333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1401.163067][T26333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1401.178395][T26333] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1401.195014][T26333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1403.213036][T23502] Bluetooth: hci4: command 0x0c1a tx timeout [ 1403.219091][T15781] Bluetooth: hci1: command 0x0c1a tx timeout [ 1403.225194][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1403.231908][T13951] Bluetooth: hci0: command 0x0c1a tx timeout [ 1428.019787][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.026275][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.517498][T26829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1431.545202][T26829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1431.562920][T26829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1431.581982][T26829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1433.533862][T23502] Bluetooth: hci0: command 0x0c1a tx timeout [ 1433.621516][T23502] Bluetooth: hci4: command 0x0c1a tx timeout [ 1433.627588][T26375] Bluetooth: hci1: command 0x0c1a tx timeout [ 1433.633735][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1436.913553][T26930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1436.940530][T26930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.950885][T26930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1436.958657][T26930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1438.973463][T23502] Bluetooth: hci4: command 0x0c1a tx timeout [ 1438.979669][T26375] Bluetooth: hci1: command 0x0c1a tx timeout [ 1438.993020][T10220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1438.999635][T17919] Bluetooth: hci0: command 0x0c1a tx timeout [ 1486.243607][T27747] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1486.407063][T27747] netlink: 'syz.0.3914': attribute type 10 has an invalid length. [ 1486.425069][T27747] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3914'. [ 1489.469362][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.478376][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.400520][T27949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3951'. [ 1497.962315][ T30] audit: type=1400 audit(1843105353.930:11): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=27963 comm="syz.1.3953" [ 1498.907726][T27988] net_ratelimit: 673 callbacks suppressed [ 1498.907744][T27988] openvswitch: netlink: IP tunnel dst address not specified [ 1501.163779][T28034] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3967'. [ 1502.984874][T28080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1503.036097][T28082] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1505.016113][T28080] random: crng reseeded on system resumption [ 1506.427694][ T30] audit: type=1800 audit(1843105362.400:12): pid=28138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3987" name="dbroot" dev="configfs" ino=113636 res=0 errno=0 [ 1509.396993][T23502] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 1514.750182][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1516.501401][T28300] zswap: compressor not available [ 1518.059532][T28331] random: crng reseeded on system resumption [ 1519.190018][T28345] FAULT_INJECTION: forcing a failure. [ 1519.190018][T28345] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.226665][T28345] CPU: 0 UID: 0 PID: 28345 Comm: syz.0.4023 Tainted: G U syzkaller #0 PREEMPT(full) [ 1519.226707][T28345] Tainted: [U]=USER [ 1519.226718][T28345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1519.226735][T28345] Call Trace: [ 1519.226745][T28345] [ 1519.226757][T28345] dump_stack_lvl+0x16c/0x1f0 [ 1519.226799][T28345] should_fail_ex+0x512/0x640 [ 1519.226844][T28345] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1519.226884][T28345] should_failslab+0xc2/0x120 [ 1519.226924][T28345] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1519.226958][T28345] ? alloc_empty_file+0x55/0x1e0 [ 1519.227006][T28345] alloc_empty_file+0x55/0x1e0 [ 1519.227049][T28345] path_openat+0xda/0x2cb0 [ 1519.227091][T28345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.227133][T28345] ? __pfx_path_openat+0x10/0x10 [ 1519.227178][T28345] do_filp_open+0x20b/0x470 [ 1519.227213][T28345] ? __pfx_do_filp_open+0x10/0x10 [ 1519.227291][T28345] ? alloc_fd+0x471/0x7d0 [ 1519.227339][T28345] do_sys_openat2+0x11b/0x1d0 [ 1519.227387][T28345] ? __pfx_do_sys_openat2+0x10/0x10 [ 1519.227450][T28345] __x64_sys_openat+0x174/0x210 [ 1519.227498][T28345] ? __pfx___x64_sys_openat+0x10/0x10 [ 1519.227561][T28345] do_syscall_64+0xcd/0x490 [ 1519.227608][T28345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.227638][T28345] RIP: 0033:0x7f681b38d550 [ 1519.227663][T28345] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1519.227694][T28345] RSP: 002b:00007f681c156f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1519.227723][T28345] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f681b38d550 [ 1519.227744][T28345] RDX: 0000000000000002 RSI: 00007f681c156fa0 RDI: 00000000ffffff9c [ 1519.227764][T28345] RBP: 00007f681c156fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1519.227783][T28345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1519.227801][T28345] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1519.227842][T28345] [ 1519.538178][T28347] FAULT_INJECTION: forcing a failure. [ 1519.538178][T28347] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.551243][T28347] CPU: 1 UID: 0 PID: 28347 Comm: syz.5.4024 Tainted: G U syzkaller #0 PREEMPT(full) [ 1519.551284][T28347] Tainted: [U]=USER [ 1519.551292][T28347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1519.551306][T28347] Call Trace: [ 1519.551314][T28347] [ 1519.551323][T28347] dump_stack_lvl+0x16c/0x1f0 [ 1519.551357][T28347] should_fail_ex+0x512/0x640 [ 1519.551389][T28347] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1519.551421][T28347] should_failslab+0xc2/0x120 [ 1519.551452][T28347] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1519.551478][T28347] ? __local_bh_enable_ip+0xa4/0x120 [ 1519.551505][T28347] ? __alloc_skb+0x2b2/0x380 [ 1519.551538][T28347] __alloc_skb+0x2b2/0x380 [ 1519.551565][T28347] ? __pfx___alloc_skb+0x10/0x10 [ 1519.551592][T28347] ? __pfx_tcp_set_state+0x10/0x10 [ 1519.551626][T28347] ? stack_depot_put+0x130/0x160 [ 1519.551666][T28347] tcp_send_active_reset+0x8b/0x830 [ 1519.551699][T28347] tcp_disconnect+0x15c9/0x1ef0 [ 1519.551724][T28347] ? __local_bh_enable_ip+0xa4/0x120 [ 1519.551754][T28347] __mptcp_close_ssk+0xe29/0x14d0 [ 1519.551780][T28347] ? __lock_acquire+0xb97/0x1ce0 [ 1519.551812][T28347] ? __pfx___mptcp_close_ssk+0x10/0x10 [ 1519.551839][T28347] ? trace_inet_sock_set_state+0x194/0x220 [ 1519.551866][T28347] mptcp_do_fastclose+0x16c/0x270 [ 1519.551894][T28347] __mptcp_close+0x1ea/0xba0 [ 1519.551919][T28347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1519.551959][T28347] ? __pfx___mptcp_close+0x10/0x10 [ 1519.551988][T28347] ? __local_bh_enable_ip+0xa4/0x120 [ 1519.552018][T28347] mptcp_close+0x28/0xe0 [ 1519.552062][T28347] inet_release+0xed/0x200 [ 1519.552087][T28347] __sock_release+0xb3/0x270 [ 1519.552124][T28347] ? __pfx_sock_close+0x10/0x10 [ 1519.552157][T28347] sock_close+0x1c/0x30 [ 1519.552190][T28347] __fput+0x3ff/0xb70 [ 1519.552233][T28347] task_work_run+0x14d/0x240 [ 1519.552274][T28347] ? __pfx_task_work_run+0x10/0x10 [ 1519.552329][T28347] ? __pfx___do_sys_close_range+0x10/0x10 [ 1519.552367][T28347] exit_to_user_mode_loop+0xeb/0x110 [ 1519.552407][T28347] do_syscall_64+0x3f6/0x490 [ 1519.552444][T28347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.552470][T28347] RIP: 0033:0x7f03c6d8ebe9 [ 1519.552489][T28347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.552514][T28347] RSP: 002b:00007f03c7c0a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1519.552537][T28347] RAX: 0000000000000000 RBX: 00007f03c6fb5fa0 RCX: 00007f03c6d8ebe9 [ 1519.552553][T28347] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1519.552569][T28347] RBP: 00007f03c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1519.552584][T28347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1519.552600][T28347] R13: 00007f03c6fb6038 R14: 00007f03c6fb5fa0 R15: 00007ffc014b7958 [ 1519.552631][T28347] [ 1520.604926][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1520.703084][T28359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1520.703422][T28361] ipvlan0: entered allmulticast mode [ 1520.741773][T28361] veth0_vlan: entered allmulticast mode [ 1533.671274][T28599] usb usb39: usbfs: process 28599 (syz.5.4068) did not claim interface 0 before use [ 1533.845128][T28602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1533.904454][T28605] FAULT_INJECTION: forcing a failure. [ 1533.904454][T28605] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.935529][T28605] CPU: 1 UID: 0 PID: 28605 Comm: syz.0.4071 Tainted: G U syzkaller #0 PREEMPT(full) [ 1533.935570][T28605] Tainted: [U]=USER [ 1533.935580][T28605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.935596][T28605] Call Trace: [ 1533.935605][T28605] [ 1533.935615][T28605] dump_stack_lvl+0x16c/0x1f0 [ 1533.935654][T28605] should_fail_ex+0x512/0x640 [ 1533.935692][T28605] ? fs_reclaim_acquire+0xae/0x150 [ 1533.935736][T28605] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1533.935774][T28605] should_failslab+0xc2/0x120 [ 1533.935811][T28605] __kmalloc_noprof+0xd2/0x510 [ 1533.935851][T28605] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1533.935896][T28605] ? tomoyo_profile+0x47/0x60 [ 1533.935924][T28605] tomoyo_path_number_perm+0x245/0x580 [ 1533.935958][T28605] ? tomoyo_path_number_perm+0x237/0x580 [ 1533.935996][T28605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1533.936034][T28605] ? find_held_lock+0x2b/0x80 [ 1533.936094][T28605] ? find_held_lock+0x2b/0x80 [ 1533.936121][T28605] ? hook_file_ioctl_common+0x145/0x410 [ 1533.936165][T28605] ? __fget_files+0x20e/0x3c0 [ 1533.936203][T28605] security_file_ioctl+0x9b/0x240 [ 1533.936242][T28605] __x64_sys_ioctl+0xb7/0x210 [ 1533.936289][T28605] do_syscall_64+0xcd/0x490 [ 1533.936330][T28605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.936357][T28605] RIP: 0033:0x7f681b38ebe9 [ 1533.936379][T28605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.936405][T28605] RSP: 002b:00007f681c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.936438][T28605] RAX: ffffffffffffffda RBX: 00007f681b5b5fa0 RCX: 00007f681b38ebe9 [ 1533.936456][T28605] RDX: 0000200000000240 RSI: 000000008038550a RDI: 0000000000000003 [ 1533.936472][T28605] RBP: 00007f681c157090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.936489][T28605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.936505][T28605] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1533.936540][T28605] [ 1533.936551][T28605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1533.937912][T28608] usb usb39: usbfs: process 28608 (syz.5.4072) did not claim interface 0 before use [ 1534.193165][T28605] usb usb39: usbfs: process 28605 (syz.0.4071) did not claim interface 0 before use [ 1537.281007][T28675] FAULT_INJECTION: forcing a failure. [ 1537.281007][T28675] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.358016][T28675] CPU: 0 UID: 0 PID: 28675 Comm: syz.1.4082 Tainted: G U syzkaller #0 PREEMPT(full) [ 1537.358061][T28675] Tainted: [U]=USER [ 1537.358068][T28675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1537.358082][T28675] Call Trace: [ 1537.358090][T28675] [ 1537.358098][T28675] dump_stack_lvl+0x16c/0x1f0 [ 1537.358131][T28675] should_fail_ex+0x512/0x640 [ 1537.358162][T28675] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1537.358195][T28675] should_failslab+0xc2/0x120 [ 1537.358230][T28675] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1537.358262][T28675] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1537.358298][T28675] kstrdup+0x53/0x100 [ 1537.358338][T28675] apply_subsystem_event_filter+0x47f/0x17e0 [ 1537.358374][T28675] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1537.358408][T28675] ? _copy_from_user+0x59/0xd0 [ 1537.358463][T28675] subsystem_filter_write+0x95/0x120 [ 1537.358493][T28675] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1537.358520][T28675] vfs_write+0x29d/0x11d0 [ 1537.358549][T28675] ? __pfx___mutex_lock+0x10/0x10 [ 1537.358578][T28675] ? __pfx_vfs_write+0x10/0x10 [ 1537.358611][T28675] ? __fget_files+0x20e/0x3c0 [ 1537.358642][T28675] ksys_write+0x12a/0x250 [ 1537.358667][T28675] ? __pfx_ksys_write+0x10/0x10 [ 1537.358700][T28675] do_syscall_64+0xcd/0x490 [ 1537.358731][T28675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.358754][T28675] RIP: 0033:0x7f1db6f8ebe9 [ 1537.358771][T28675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1537.358792][T28675] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1537.358811][T28675] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1537.358826][T28675] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1537.358839][T28675] RBP: 00007f1db7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1537.358852][T28675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1537.358876][T28675] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1537.358903][T28675] [ 1541.557878][T28776] FAULT_INJECTION: forcing a failure. [ 1541.557878][T28776] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.576091][T28776] CPU: 0 UID: 0 PID: 28776 Comm: syz.0.4095 Tainted: G U syzkaller #0 PREEMPT(full) [ 1541.576157][T28776] Tainted: [U]=USER [ 1541.576168][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1541.576188][T28776] Call Trace: [ 1541.576199][T28776] [ 1541.576212][T28776] dump_stack_lvl+0x16c/0x1f0 [ 1541.576259][T28776] should_fail_ex+0x512/0x640 [ 1541.576305][T28776] ? fs_reclaim_acquire+0xae/0x150 [ 1541.576359][T28776] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1541.576410][T28776] should_failslab+0xc2/0x120 [ 1541.576456][T28776] __kmalloc_noprof+0xd2/0x510 [ 1541.576505][T28776] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1541.576563][T28776] ? tomoyo_profile+0x47/0x60 [ 1541.576598][T28776] tomoyo_path_number_perm+0x245/0x580 [ 1541.576639][T28776] ? tomoyo_path_number_perm+0x237/0x580 [ 1541.576686][T28776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1541.576732][T28776] ? find_held_lock+0x2b/0x80 [ 1541.576804][T28776] ? find_held_lock+0x2b/0x80 [ 1541.576849][T28776] ? hook_file_ioctl_common+0x145/0x410 [ 1541.576902][T28776] ? __fget_files+0x20e/0x3c0 [ 1541.576946][T28776] security_file_ioctl+0x9b/0x240 [ 1541.576997][T28776] __x64_sys_ioctl+0xb7/0x210 [ 1541.577054][T28776] do_syscall_64+0xcd/0x490 [ 1541.577101][T28776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.577133][T28776] RIP: 0033:0x7f681b38ebe9 [ 1541.577158][T28776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.577201][T28776] RSP: 002b:00007f681c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.577229][T28776] RAX: ffffffffffffffda RBX: 00007f681b5b5fa0 RCX: 00007f681b38ebe9 [ 1541.577249][T28776] RDX: 0000000000000001 RSI: 0000000000004b3a RDI: 0000000000000009 [ 1541.577268][T28776] RBP: 00007f681c157090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.577286][T28776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.577304][T28776] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1541.577353][T28776] [ 1541.830319][T28776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1544.216802][T28817] FAULT_INJECTION: forcing a failure. [ 1544.216802][T28817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.234345][T28817] CPU: 1 UID: 0 PID: 28817 Comm: syz.5.4103 Tainted: G U syzkaller #0 PREEMPT(full) [ 1544.234385][T28817] Tainted: [U]=USER [ 1544.234395][T28817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1544.234409][T28817] Call Trace: [ 1544.234419][T28817] [ 1544.234430][T28817] dump_stack_lvl+0x16c/0x1f0 [ 1544.234468][T28817] should_fail_ex+0x512/0x640 [ 1544.234513][T28817] _copy_from_user+0x2e/0xd0 [ 1544.234560][T28817] copy_msghdr_from_user+0x98/0x160 [ 1544.234598][T28817] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1544.234649][T28817] ? __pfx__kstrtoull+0x10/0x10 [ 1544.234691][T28817] ___sys_sendmsg+0xfe/0x1d0 [ 1544.234731][T28817] ? __pfx____sys_sendmsg+0x10/0x10 [ 1544.234785][T28817] ? find_held_lock+0x2b/0x80 [ 1544.234834][T28817] __sys_sendmmsg+0x200/0x420 [ 1544.234876][T28817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1544.234926][T28817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1544.234979][T28817] ? fput+0x9b/0xd0 [ 1544.235018][T28817] ? ksys_write+0x1ac/0x250 [ 1544.235051][T28817] ? __pfx_ksys_write+0x10/0x10 [ 1544.235110][T28817] __x64_sys_sendmmsg+0x9c/0x100 [ 1544.235148][T28817] ? lockdep_hardirqs_on+0x7c/0x110 [ 1544.235185][T28817] do_syscall_64+0xcd/0x490 [ 1544.235229][T28817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.235259][T28817] RIP: 0033:0x7f03c6d8ebe9 [ 1544.235282][T28817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.235312][T28817] RSP: 002b:00007f03c7ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1544.235341][T28817] RAX: ffffffffffffffda RBX: 00007f03c6fb6270 RCX: 00007f03c6d8ebe9 [ 1544.235360][T28817] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1544.235378][T28817] RBP: 00007f03c7ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.235414][T28817] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 1544.235435][T28817] R13: 00007f03c6fb6308 R14: 00007f03c6fb6270 R15: 00007ffc014b7958 [ 1544.235475][T28817] [ 1546.066805][T28858] FAULT_INJECTION: forcing a failure. [ 1546.066805][T28858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.094211][T28858] CPU: 1 UID: 0 PID: 28858 Comm: syz.2.4108 Tainted: G U syzkaller #0 PREEMPT(full) [ 1546.094251][T28858] Tainted: [U]=USER [ 1546.094258][T28858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1546.094271][T28858] Call Trace: [ 1546.094278][T28858] [ 1546.094286][T28858] dump_stack_lvl+0x16c/0x1f0 [ 1546.094317][T28858] should_fail_ex+0x512/0x640 [ 1546.094348][T28858] _copy_from_user+0x2e/0xd0 [ 1546.094380][T28858] get_itimerval+0xae/0x270 [ 1546.094403][T28858] ? find_held_lock+0x2b/0x80 [ 1546.094424][T28858] ? __pfx_get_itimerval+0x10/0x10 [ 1546.094447][T28858] ? ksys_write+0x190/0x250 [ 1546.094474][T28858] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1546.094505][T28858] __x64_sys_setitimer+0x15f/0x370 [ 1546.094532][T28858] ? __pfx___x64_sys_setitimer+0x10/0x10 [ 1546.094556][T28858] ? __fget_files+0x20e/0x3c0 [ 1546.094584][T28858] ? ksys_write+0x1ac/0x250 [ 1546.094606][T28858] ? __pfx_ksys_write+0x10/0x10 [ 1546.094638][T28858] do_syscall_64+0xcd/0x490 [ 1546.094675][T28858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.094696][T28858] RIP: 0033:0x7fcc4e38ebe9 [ 1546.094712][T28858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.094733][T28858] RSP: 002b:00007fcc4f272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 1546.094752][T28858] RAX: ffffffffffffffda RBX: 00007fcc4e5b5fa0 RCX: 00007fcc4e38ebe9 [ 1546.094766][T28858] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000002 [ 1546.094780][T28858] RBP: 00007fcc4f272090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.094792][T28858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.094805][T28858] R13: 00007fcc4e5b6038 R14: 00007fcc4e5b5fa0 R15: 00007ffd0c677248 [ 1546.094830][T28858] [ 1550.683787][T28923] FAULT_INJECTION: forcing a failure. [ 1550.683787][T28923] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.696557][T28923] CPU: 1 UID: 0 PID: 28923 Comm: syz.0.4123 Tainted: G U syzkaller #0 PREEMPT(full) [ 1550.696597][T28923] Tainted: [U]=USER [ 1550.696607][T28923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1550.696622][T28923] Call Trace: [ 1550.696631][T28923] [ 1550.696642][T28923] dump_stack_lvl+0x16c/0x1f0 [ 1550.696681][T28923] should_fail_ex+0x512/0x640 [ 1550.696719][T28923] ? fs_reclaim_acquire+0xae/0x150 [ 1550.696766][T28923] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1550.696806][T28923] should_failslab+0xc2/0x120 [ 1550.696844][T28923] __kmalloc_noprof+0xd2/0x510 [ 1550.696885][T28923] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1550.696931][T28923] ? tomoyo_profile+0x47/0x60 [ 1550.696960][T28923] tomoyo_path_number_perm+0x245/0x580 [ 1550.696993][T28923] ? tomoyo_path_number_perm+0x237/0x580 [ 1550.697031][T28923] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1550.697069][T28923] ? find_held_lock+0x2b/0x80 [ 1550.697125][T28923] ? __pfx_do_sys_openat2+0x10/0x10 [ 1550.697172][T28923] ? __pfx___might_resched+0x10/0x10 [ 1550.697201][T28923] ? hook_file_ioctl_common+0x145/0x410 [ 1550.697256][T28923] security_file_ioctl+0x9b/0x240 [ 1550.697295][T28923] __x64_sys_ioctl+0xb7/0x210 [ 1550.697342][T28923] do_syscall_64+0xcd/0x490 [ 1550.697382][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.697419][T28923] RIP: 0033:0x7f681b38ebe9 [ 1550.697440][T28923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.697466][T28923] RSP: 002b:00007f681c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.697492][T28923] RAX: ffffffffffffffda RBX: 00007f681b5b5fa0 RCX: 00007f681b38ebe9 [ 1550.697508][T28923] RDX: 0010000000000402 RSI: 0000000000008925 RDI: 0000000000000003 [ 1550.697525][T28923] RBP: 00007f681c157090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.697540][T28923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.697556][T28923] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1550.697590][T28923] [ 1550.697602][T28923] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1550.910043][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.932875][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.094086][T23502] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1552.473297][T28965] FAULT_INJECTION: forcing a failure. [ 1552.473297][T28965] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.521447][T28965] CPU: 0 UID: 0 PID: 28965 Comm: syz.2.4131 Tainted: G U syzkaller #0 PREEMPT(full) [ 1552.521497][T28965] Tainted: [U]=USER [ 1552.521508][T28965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1552.521527][T28965] Call Trace: [ 1552.521538][T28965] [ 1552.521550][T28965] dump_stack_lvl+0x16c/0x1f0 [ 1552.521592][T28965] should_fail_ex+0x512/0x640 [ 1552.521633][T28965] ? __kvmalloc_node_noprof+0x124/0x620 [ 1552.521672][T28965] should_failslab+0xc2/0x120 [ 1552.521711][T28965] __kvmalloc_node_noprof+0x137/0x620 [ 1552.521743][T28965] ? find_held_lock+0x2b/0x80 [ 1552.521773][T28965] ? seq_read_iter+0x826/0x12c0 [ 1552.521798][T28965] ? aa_file_perm+0x28f/0x12e0 [ 1552.521851][T28965] ? seq_read_iter+0x826/0x12c0 [ 1552.521880][T28965] seq_read_iter+0x826/0x12c0 [ 1552.521918][T28965] ? __pfx_aa_file_perm+0x10/0x10 [ 1552.521974][T28965] seq_read+0x3a3/0x570 [ 1552.522005][T28965] ? __pfx_seq_read+0x10/0x10 [ 1552.522055][T28965] ? get_pid_task+0xfc/0x250 [ 1552.522122][T28965] ? rw_verify_area+0xcf/0x6c0 [ 1552.522156][T28965] ? __pfx_seq_read+0x10/0x10 [ 1552.522189][T28965] vfs_read+0x1e4/0xcf0 [ 1552.522237][T28965] ? __pfx_vfs_read+0x10/0x10 [ 1552.522289][T28965] ? do_sys_openat2+0x157/0x1d0 [ 1552.522342][T28965] ? __pfx_do_sys_openat2+0x10/0x10 [ 1552.522414][T28965] ksys_read+0x12a/0x250 [ 1552.522453][T28965] ? __pfx_ksys_read+0x10/0x10 [ 1552.522504][T28965] do_syscall_64+0xcd/0x490 [ 1552.522552][T28965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.522586][T28965] RIP: 0033:0x7fcc4e38ebe9 [ 1552.522610][T28965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.522640][T28965] RSP: 002b:00007fcc4f272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1552.522671][T28965] RAX: ffffffffffffffda RBX: 00007fcc4e5b5fa0 RCX: 00007fcc4e38ebe9 [ 1552.522693][T28965] RDX: 0000000000000067 RSI: 00002000000051c0 RDI: 0000000000000000 [ 1552.522712][T28965] RBP: 00007fcc4f272090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.522736][T28965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.522754][T28965] R13: 00007fcc4e5b6038 R14: 00007fcc4e5b5fa0 R15: 00007ffd0c677248 [ 1552.522803][T28965] [ 1554.293494][T29004] FAULT_INJECTION: forcing a failure. [ 1554.293494][T29004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.323618][T29004] CPU: 1 UID: 0 PID: 29004 Comm: syz.1.4139 Tainted: G U syzkaller #0 PREEMPT(full) [ 1554.323660][T29004] Tainted: [U]=USER [ 1554.323669][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1554.323686][T29004] Call Trace: [ 1554.323695][T29004] [ 1554.323705][T29004] dump_stack_lvl+0x16c/0x1f0 [ 1554.323740][T29004] should_fail_ex+0x512/0x640 [ 1554.323792][T29004] _copy_from_user+0x2e/0xd0 [ 1554.323829][T29004] __sys_bpf+0x21d/0x4de0 [ 1554.323867][T29004] ? __pfx___sys_bpf+0x10/0x10 [ 1554.323919][T29004] ? ksys_write+0x190/0x250 [ 1554.323950][T29004] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1554.323996][T29004] ? fput+0x9b/0xd0 [ 1554.324027][T29004] ? ksys_write+0x1ac/0x250 [ 1554.324052][T29004] ? __pfx_ksys_write+0x10/0x10 [ 1554.324082][T29004] __x64_sys_bpf+0x78/0xc0 [ 1554.324116][T29004] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.324144][T29004] do_syscall_64+0xcd/0x490 [ 1554.324176][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.324199][T29004] RIP: 0033:0x7f1db6f8ebe9 [ 1554.324216][T29004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.324245][T29004] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1554.324267][T29004] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1554.324283][T29004] RDX: 00000000000006d4 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1554.324298][T29004] RBP: 00007f1db7d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.324312][T29004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.324327][T29004] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1554.324356][T29004] [ 1554.505405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.001823][T29015] FAULT_INJECTION: forcing a failure. [ 1555.001823][T29015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.061012][T29015] CPU: 1 UID: 0 PID: 29015 Comm: syz.0.4142 Tainted: G U syzkaller #0 PREEMPT(full) [ 1555.061054][T29015] Tainted: [U]=USER [ 1555.061062][T29015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1555.061078][T29015] Call Trace: [ 1555.061087][T29015] [ 1555.061098][T29015] dump_stack_lvl+0x16c/0x1f0 [ 1555.061144][T29015] should_fail_ex+0x512/0x640 [ 1555.061187][T29015] _copy_from_user+0x2e/0xd0 [ 1555.061232][T29015] core_sys_select+0x35b/0xc10 [ 1555.061269][T29015] ? __pfx_core_sys_select+0x10/0x10 [ 1555.061304][T29015] ? proc_fail_nth_write+0x9f/0x220 [ 1555.061364][T29015] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1555.061411][T29015] kern_select+0x15d/0x1e0 [ 1555.061441][T29015] ? __pfx_kern_select+0x10/0x10 [ 1555.061477][T29015] ? __pfx_ksys_write+0x10/0x10 [ 1555.061515][T29015] __x64_sys_select+0xbd/0x160 [ 1555.061542][T29015] ? do_syscall_64+0x91/0x490 [ 1555.061579][T29015] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.061612][T29015] do_syscall_64+0xcd/0x490 [ 1555.061650][T29015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.061677][T29015] RIP: 0033:0x7f681b38ebe9 [ 1555.061698][T29015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.061724][T29015] RSP: 002b:00007f681c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1555.061750][T29015] RAX: ffffffffffffffda RBX: 00007f681b5b5fa0 RCX: 00007f681b38ebe9 [ 1555.061767][T29015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1555.061784][T29015] RBP: 00007f681c157090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.061801][T29015] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1555.061818][T29015] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1555.061855][T29015] [ 1555.243357][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.263680][T29008] random: crng reseeded on system resumption [ 1556.975587][T29043] FAULT_INJECTION: forcing a failure. [ 1556.975587][T29043] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.988467][T29043] CPU: 1 UID: 0 PID: 29043 Comm: syz.2.4146 Tainted: G U syzkaller #0 PREEMPT(full) [ 1556.988513][T29043] Tainted: [U]=USER [ 1556.988523][T29043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1556.988543][T29043] Call Trace: [ 1556.988554][T29043] [ 1556.988566][T29043] dump_stack_lvl+0x16c/0x1f0 [ 1556.988611][T29043] should_fail_ex+0x512/0x640 [ 1556.988657][T29043] ? __kvmalloc_node_noprof+0x124/0x620 [ 1556.988699][T29043] should_failslab+0xc2/0x120 [ 1556.988742][T29043] __kvmalloc_node_noprof+0x137/0x620 [ 1556.988781][T29043] ? io_sqe_buffers_register+0x12c/0x860 [ 1556.988843][T29043] ? io_sqe_buffers_register+0x12c/0x860 [ 1556.988892][T29043] io_sqe_buffers_register+0x12c/0x860 [ 1556.988965][T29043] ? __lock_acquire+0xb97/0x1ce0 [ 1556.989026][T29043] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1556.989084][T29043] ? __mutex_trylock_common+0xe9/0x250 [ 1556.989131][T29043] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1556.989184][T29043] __io_uring_register+0x21e2/0x23c0 [ 1556.989232][T29043] ? trace_contention_end+0xdd/0x130 [ 1556.989280][T29043] ? __pfx___io_uring_register+0x10/0x10 [ 1556.989339][T29043] ? __pfx___mutex_lock+0x10/0x10 [ 1556.989397][T29043] ? __fget_files+0x20e/0x3c0 [ 1556.989447][T29043] __x64_sys_io_uring_register+0x169/0x280 [ 1556.989501][T29043] do_syscall_64+0xcd/0x490 [ 1556.989550][T29043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.989583][T29043] RIP: 0033:0x7fcc4e38ebe9 [ 1556.989609][T29043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.989640][T29043] RSP: 002b:00007fcc4f230038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1556.989671][T29043] RAX: ffffffffffffffda RBX: 00007fcc4e5b6180 RCX: 00007fcc4e38ebe9 [ 1556.989705][T29043] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1556.989726][T29043] RBP: 00007fcc4f230090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.989745][T29043] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1556.989764][T29043] R13: 00007fcc4e5b6218 R14: 00007fcc4e5b6180 R15: 00007ffd0c677248 [ 1556.989825][T29043] [ 1557.205136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.305729][T29062] FAULT_INJECTION: forcing a failure. [ 1558.305729][T29062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1558.357639][T29062] CPU: 1 UID: 0 PID: 29062 Comm: syz.5.4151 Tainted: G U syzkaller #0 PREEMPT(full) [ 1558.357699][T29062] Tainted: [U]=USER [ 1558.357710][T29062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1558.357729][T29062] Call Trace: [ 1558.357741][T29062] [ 1558.357753][T29062] dump_stack_lvl+0x16c/0x1f0 [ 1558.357797][T29062] should_fail_ex+0x512/0x640 [ 1558.357840][T29062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1558.357892][T29062] get_futex_key+0x1d0/0x1560 [ 1558.357934][T29062] ? __pfx_get_futex_key+0x10/0x10 [ 1558.357970][T29062] ? mas_next_slot+0x12d3/0x21b0 [ 1558.358027][T29062] futex_wait_setup+0x9d/0x550 [ 1558.358085][T29062] __futex_wait+0x194/0x2f0 [ 1558.358134][T29062] ? __pfx___futex_wait+0x10/0x10 [ 1558.358188][T29062] ? __pfx_futex_wake_mark+0x10/0x10 [ 1558.358243][T29062] ? futex_private_hash_put+0x176/0x300 [ 1558.358286][T29062] ? futex_private_hash_put+0x18a/0x300 [ 1558.358327][T29062] futex_wait+0xe8/0x380 [ 1558.358377][T29062] ? __pfx_futex_wait+0x10/0x10 [ 1558.358439][T29062] ? up_write+0x1b2/0x520 [ 1558.358492][T29062] do_futex+0x229/0x350 [ 1558.358530][T29062] ? __pfx_do_futex+0x10/0x10 [ 1558.358592][T29062] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1558.358635][T29062] __x64_sys_futex+0x1e0/0x4c0 [ 1558.358693][T29062] ? __pfx___x64_sys_futex+0x10/0x10 [ 1558.358734][T29062] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1558.358776][T29062] ? xfd_validate_state+0x61/0x180 [ 1558.358822][T29062] ? __pfx___do_sys_prctl+0x10/0x10 [ 1558.358884][T29062] do_syscall_64+0xcd/0x490 [ 1558.358932][T29062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.358965][T29062] RIP: 0033:0x7f03c6d8ebe9 [ 1558.358989][T29062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.359021][T29062] RSP: 002b:00007f03c7c0a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1558.359051][T29062] RAX: ffffffffffffffda RBX: 00007f03c6fb5fa8 RCX: 00007f03c6d8ebe9 [ 1558.359073][T29062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03c6fb5fa8 [ 1558.359092][T29062] RBP: 00007f03c6fb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1558.359111][T29062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.359129][T29062] R13: 00007f03c6fb6038 R14: 00007ffc014b7870 R15: 00007ffc014b7958 [ 1558.359170][T29062] [ 1558.644120][T29062] FAULT_INJECTION: forcing a failure. [ 1558.644120][T29062] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.657468][T29062] CPU: 1 UID: 0 PID: 29062 Comm: syz.5.4151 Tainted: G U syzkaller #0 PREEMPT(full) [ 1558.657513][T29062] Tainted: [U]=USER [ 1558.657521][T29062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1558.657536][T29062] Call Trace: [ 1558.657545][T29062] [ 1558.657555][T29062] dump_stack_lvl+0x16c/0x1f0 [ 1558.657591][T29062] should_fail_ex+0x512/0x640 [ 1558.657625][T29062] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1558.657659][T29062] should_failslab+0xc2/0x120 [ 1558.657699][T29062] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1558.657729][T29062] ? ptlock_alloc+0x1f/0x70 [ 1558.657758][T29062] ptlock_alloc+0x1f/0x70 [ 1558.657782][T29062] pte_alloc_one+0x82/0x3a0 [ 1558.657810][T29062] __pte_alloc+0x6d/0x3c0 [ 1558.657843][T29062] ? __pfx___pte_alloc+0x10/0x10 [ 1558.657876][T29062] ? __pfx___might_resched+0x10/0x10 [ 1558.657900][T29062] ? copy_page_range+0x1fa8/0x5c80 [ 1558.657930][T29062] copy_page_range+0x3b83/0x5c80 [ 1558.657988][T29062] ? __pfx_copy_page_range+0x10/0x10 [ 1558.658023][T29062] ? __pfx___might_resched+0x10/0x10 [ 1558.658046][T29062] ? __pfx_mas_store+0x10/0x10 [ 1558.658080][T29062] ? __vma_enter_locked+0x163/0x3f0 [ 1558.658107][T29062] ? dup_mmap+0xe38/0x21d0 [ 1558.658144][T29062] ? down_write+0x14d/0x200 [ 1558.658182][T29062] ? up_write+0x1b2/0x520 [ 1558.658221][T29062] dup_mmap+0xe88/0x21d0 [ 1558.658269][T29062] ? __pfx_dup_mmap+0x10/0x10 [ 1558.658326][T29062] copy_process+0x4081/0x7690 [ 1558.658371][T29062] ? __pfx_copy_process+0x10/0x10 [ 1558.658401][T29062] ? futex_private_hash_put+0x176/0x300 [ 1558.658434][T29062] ? futex_private_hash_put+0x18a/0x300 [ 1558.658473][T29062] kernel_clone+0xfc/0x930 [ 1558.658505][T29062] ? __pfx_futex_wake+0x10/0x10 [ 1558.658555][T29062] ? __pfx_kernel_clone+0x10/0x10 [ 1558.658623][T29062] __do_sys_clone+0xce/0x120 [ 1558.658654][T29062] ? __pfx___do_sys_clone+0x10/0x10 [ 1558.658691][T29062] ? ksys_unshare+0x687/0xa40 [ 1558.658737][T29062] ? xfd_validate_state+0x61/0x180 [ 1558.658786][T29062] do_syscall_64+0xcd/0x490 [ 1558.658823][T29062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.658848][T29062] RIP: 0033:0x7f03c6d8ebe9 [ 1558.658868][T29062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.658893][T29062] RSP: 002b:00007f03c7c09fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1558.658915][T29062] RAX: ffffffffffffffda RBX: 00007f03c6fb5fa0 RCX: 00007f03c6d8ebe9 [ 1558.658932][T29062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1558.658948][T29062] RBP: 00007f03c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1558.658963][T29062] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1558.658978][T29062] R13: 00007f03c6fb6038 R14: 00007f03c6fb5fa0 R15: 00007ffc014b7958 [ 1558.659010][T29062] [ 1560.618147][T29100] FAULT_INJECTION: forcing a failure. [ 1560.618147][T29100] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.630876][T29100] CPU: 1 UID: 0 PID: 29100 Comm: syz.2.4158 Tainted: G U syzkaller #0 PREEMPT(full) [ 1560.630919][T29100] Tainted: [U]=USER [ 1560.630929][T29100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1560.630946][T29100] Call Trace: [ 1560.630956][T29100] [ 1560.630968][T29100] dump_stack_lvl+0x16c/0x1f0 [ 1560.631013][T29100] should_fail_ex+0x512/0x640 [ 1560.631054][T29100] ? __kvmalloc_node_noprof+0x124/0x620 [ 1560.631093][T29100] should_failslab+0xc2/0x120 [ 1560.631134][T29100] __kvmalloc_node_noprof+0x137/0x620 [ 1560.631170][T29100] ? io_sqe_buffers_register+0x12c/0x860 [ 1560.631226][T29100] ? io_sqe_buffers_register+0x12c/0x860 [ 1560.631273][T29100] io_sqe_buffers_register+0x12c/0x860 [ 1560.631323][T29100] ? __lock_acquire+0xb97/0x1ce0 [ 1560.631370][T29100] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1560.631425][T29100] ? __mutex_trylock_common+0xe9/0x250 [ 1560.631469][T29100] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1560.631518][T29100] __io_uring_register+0x21e2/0x23c0 [ 1560.631563][T29100] ? trace_contention_end+0xdd/0x130 [ 1560.631606][T29100] ? __pfx___io_uring_register+0x10/0x10 [ 1560.631660][T29100] ? __pfx___mutex_lock+0x10/0x10 [ 1560.631712][T29100] ? __fget_files+0x20e/0x3c0 [ 1560.631758][T29100] __x64_sys_io_uring_register+0x169/0x280 [ 1560.631817][T29100] do_syscall_64+0xcd/0x490 [ 1560.631861][T29100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.631892][T29100] RIP: 0033:0x7fcc4e38ebe9 [ 1560.631915][T29100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1560.631945][T29100] RSP: 002b:00007fcc4f20f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1560.631971][T29100] RAX: ffffffffffffffda RBX: 00007fcc4e5b6270 RCX: 00007fcc4e38ebe9 [ 1560.631991][T29100] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1560.632009][T29100] RBP: 00007fcc4f20f090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.632027][T29100] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1560.632045][T29100] R13: 00007fcc4e5b6308 R14: 00007fcc4e5b6270 R15: 00007ffd0c677248 [ 1560.632104][T29100] [ 1562.096127][T29120] netlink: 'syz.1.4162': attribute type 2 has an invalid length. [ 1562.142963][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 1562.399400][T29128] netlink: 'syz.0.4163': attribute type 2 has an invalid length. [ 1562.423170][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1565.124860][T29194] FAULT_INJECTION: forcing a failure. [ 1565.124860][T29194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.167423][T29194] CPU: 0 UID: 0 PID: 29194 Comm: syz.1.4174 Tainted: G U syzkaller #0 PREEMPT(full) [ 1565.167454][T29194] Tainted: [U]=USER [ 1565.167460][T29194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1565.167471][T29194] Call Trace: [ 1565.167478][T29194] [ 1565.167485][T29194] dump_stack_lvl+0x16c/0x1f0 [ 1565.167521][T29194] should_fail_ex+0x512/0x640 [ 1565.167554][T29194] _copy_from_user+0x2e/0xd0 [ 1565.167590][T29194] core_sys_select+0x35b/0xc10 [ 1565.167619][T29194] ? __pfx_core_sys_select+0x10/0x10 [ 1565.167646][T29194] ? proc_fail_nth_write+0x9f/0x220 [ 1565.167689][T29194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1565.167724][T29194] kern_select+0x15d/0x1e0 [ 1565.167746][T29194] ? __pfx_kern_select+0x10/0x10 [ 1565.167772][T29194] ? __pfx_ksys_write+0x10/0x10 [ 1565.167800][T29194] __x64_sys_select+0xbd/0x160 [ 1565.167821][T29194] ? do_syscall_64+0x91/0x490 [ 1565.167849][T29194] ? lockdep_hardirqs_on+0x7c/0x110 [ 1565.167875][T29194] do_syscall_64+0xcd/0x490 [ 1565.167905][T29194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.167926][T29194] RIP: 0033:0x7f1db6f8ebe9 [ 1565.167942][T29194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.167962][T29194] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1565.167982][T29194] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1565.167996][T29194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1565.168009][T29194] RBP: 00007f1db7d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.168022][T29194] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1565.168035][T29194] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1565.168060][T29194] [ 1567.487721][T29224] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1568.720125][T29231] FAULT_INJECTION: forcing a failure. [ 1568.720125][T29231] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.793676][T29231] CPU: 0 UID: 0 PID: 29231 Comm: syz.0.4179 Tainted: G U syzkaller #0 PREEMPT(full) [ 1568.793726][T29231] Tainted: [U]=USER [ 1568.793737][T29231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1568.793756][T29231] Call Trace: [ 1568.793767][T29231] [ 1568.793779][T29231] dump_stack_lvl+0x16c/0x1f0 [ 1568.793826][T29231] should_fail_ex+0x512/0x640 [ 1568.793870][T29231] ? __kmalloc_noprof+0xbf/0x510 [ 1568.793909][T29231] ? trace_parser_get_init+0x30/0xc0 [ 1568.793955][T29231] should_failslab+0xc2/0x120 [ 1568.793997][T29231] __kmalloc_noprof+0xd2/0x510 [ 1568.794042][T29231] trace_parser_get_init+0x30/0xc0 [ 1568.794093][T29231] ftrace_event_write+0x177/0x290 [ 1568.794125][T29231] ? __pfx_ftrace_event_write+0x10/0x10 [ 1568.794172][T29231] ? __pfx_ftrace_event_write+0x10/0x10 [ 1568.794203][T29231] vfs_write+0x29d/0x11d0 [ 1568.794244][T29231] ? __pfx___mutex_lock+0x10/0x10 [ 1568.794286][T29231] ? __pfx_vfs_write+0x10/0x10 [ 1568.794347][T29231] ? __fget_files+0x20e/0x3c0 [ 1568.794390][T29231] ksys_write+0x12a/0x250 [ 1568.794423][T29231] ? __pfx_ksys_write+0x10/0x10 [ 1568.794465][T29231] do_syscall_64+0xcd/0x490 [ 1568.794506][T29231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.794535][T29231] RIP: 0033:0x7f681b38ebe9 [ 1568.794556][T29231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.794585][T29231] RSP: 002b:00007f681c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1568.794612][T29231] RAX: ffffffffffffffda RBX: 00007f681b5b5fa0 RCX: 00007f681b38ebe9 [ 1568.794631][T29231] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1568.794647][T29231] RBP: 00007f681c157090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.794663][T29231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.794680][T29231] R13: 00007f681b5b6038 R14: 00007f681b5b5fa0 R15: 00007fff5cedb168 [ 1568.794718][T29231] [ 1570.332061][T29261] ptrace attach of "./syz-executor exec"[17256] was attempted by ""[29261] [ 1571.422001][T29276] FAULT_INJECTION: forcing a failure. [ 1571.422001][T29276] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.457700][T29276] CPU: 0 UID: 0 PID: 29276 Comm: syz.1.4188 Tainted: G U syzkaller #0 PREEMPT(full) [ 1571.457776][T29276] Tainted: [U]=USER [ 1571.457784][T29276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.457798][T29276] Call Trace: [ 1571.457807][T29276] [ 1571.457815][T29276] dump_stack_lvl+0x16c/0x1f0 [ 1571.457850][T29276] should_fail_ex+0x512/0x640 [ 1571.457883][T29276] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1571.457917][T29276] should_failslab+0xc2/0x120 [ 1571.457948][T29276] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1571.457976][T29276] ? acpi_ps_alloc_op+0x25f/0x310 [ 1571.458011][T29276] acpi_ps_alloc_op+0x25f/0x310 [ 1571.458039][T29276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1571.458076][T29276] acpi_ps_create_op+0x3dc/0xc20 [ 1571.458105][T29276] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1571.458142][T29276] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 1571.458180][T29276] ? acpi_ut_push_generic_state+0x13/0x70 [ 1571.458211][T29276] acpi_ps_parse_loop+0xdd8/0x1d00 [ 1571.458247][T29276] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1571.458275][T29276] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1571.458303][T29276] ? acpi_ut_create_thread_state+0x63/0x170 [ 1571.458336][T29276] acpi_ps_parse_aml+0x3c1/0xcb0 [ 1571.458370][T29276] acpi_ps_execute_method+0x55a/0xb30 [ 1571.458419][T29276] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1571.458459][T29276] acpi_ns_evaluate+0x76c/0xca0 [ 1571.458498][T29276] ? kasan_save_track+0x14/0x30 [ 1571.458527][T29276] acpi_evaluate_object+0x1fa/0xa90 [ 1571.458556][T29276] ? do_syscall_64+0xcd/0x490 [ 1571.458585][T29276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.458610][T29276] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1571.458638][T29276] ? __mutex_trylock_common+0xe9/0x250 [ 1571.458675][T29276] acpi_evaluate_integer+0xdd/0x200 [ 1571.458698][T29276] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1571.458733][T29276] ? __pfx_status_show+0x10/0x10 [ 1571.458761][T29276] status_show+0xa0/0x120 [ 1571.458788][T29276] ? __pfx_status_show+0x10/0x10 [ 1571.458823][T29276] dev_attr_show+0x53/0xe0 [ 1571.458860][T29276] ? __pfx_dev_attr_show+0x10/0x10 [ 1571.458894][T29276] sysfs_kf_seq_show+0x216/0x3e0 [ 1571.458925][T29276] seq_read_iter+0x506/0x12c0 [ 1571.458959][T29276] kernfs_fop_read_iter+0x40f/0x5a0 [ 1571.458980][T29276] ? rw_verify_area+0xcf/0x6c0 [ 1571.459011][T29276] vfs_read+0x8bf/0xcf0 [ 1571.459040][T29276] ? __pfx___mutex_lock+0x10/0x10 [ 1571.459071][T29276] ? __pfx_vfs_read+0x10/0x10 [ 1571.459115][T29276] ksys_read+0x12a/0x250 [ 1571.459145][T29276] ? __pfx_ksys_read+0x10/0x10 [ 1571.459185][T29276] do_syscall_64+0xcd/0x490 [ 1571.459218][T29276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.459241][T29276] RIP: 0033:0x7f1db6f8ebe9 [ 1571.459259][T29276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.459282][T29276] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1571.459303][T29276] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1571.459319][T29276] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000002 [ 1571.459333][T29276] RBP: 00007f1db7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1571.459347][T29276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.459361][T29276] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1571.459390][T29276] [ 1571.460636][T29276] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 1571.928395][T29280] FAULT_INJECTION: forcing a failure. [ 1571.928395][T29280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1571.943436][T29280] CPU: 0 UID: 0 PID: 29280 Comm: syz.5.4189 Tainted: G U syzkaller #0 PREEMPT(full) [ 1571.943481][T29280] Tainted: [U]=USER [ 1571.943489][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1571.943502][T29280] Call Trace: [ 1571.943510][T29280] [ 1571.943518][T29280] dump_stack_lvl+0x16c/0x1f0 [ 1571.943551][T29280] should_fail_ex+0x512/0x640 [ 1571.943604][T29280] _copy_from_user+0x2e/0xd0 [ 1571.943641][T29280] core_sys_select+0x35b/0xc10 [ 1571.943673][T29280] ? __pfx_core_sys_select+0x10/0x10 [ 1571.943703][T29280] ? proc_fail_nth_write+0x9f/0x220 [ 1571.943750][T29280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1571.943787][T29280] kern_select+0x15d/0x1e0 [ 1571.943811][T29280] ? __pfx_kern_select+0x10/0x10 [ 1571.943838][T29280] ? __pfx_ksys_write+0x10/0x10 [ 1571.943876][T29280] __x64_sys_select+0xbd/0x160 [ 1571.943900][T29280] ? do_syscall_64+0x91/0x490 [ 1571.943931][T29280] ? lockdep_hardirqs_on+0x7c/0x110 [ 1571.943971][T29280] do_syscall_64+0xcd/0x490 [ 1571.944002][T29280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.944025][T29280] RIP: 0033:0x7f03c6d8ebe9 [ 1571.944041][T29280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.944063][T29280] RSP: 002b:00007f03c7c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1571.944083][T29280] RAX: ffffffffffffffda RBX: 00007f03c6fb5fa0 RCX: 00007f03c6d8ebe9 [ 1571.944098][T29280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1571.944117][T29280] RBP: 00007f03c7c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.944135][T29280] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1571.944152][T29280] R13: 00007f03c6fb6038 R14: 00007f03c6fb5fa0 R15: 00007ffc014b7958 [ 1571.944188][T29280] [ 1572.820857][T29304] FAULT_INJECTION: forcing a failure. [ 1572.820857][T29304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.883766][T29304] CPU: 0 UID: 0 PID: 29304 Comm: syz.1.4193 Tainted: G U syzkaller #0 PREEMPT(full) [ 1572.883816][T29304] Tainted: [U]=USER [ 1572.883825][T29304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.883840][T29304] Call Trace: [ 1572.883849][T29304] [ 1572.883859][T29304] dump_stack_lvl+0x16c/0x1f0 [ 1572.883909][T29304] should_fail_ex+0x512/0x640 [ 1572.883953][T29304] _copy_from_user+0x2e/0xd0 [ 1572.883997][T29304] __do_sys_adjtimex+0x92/0x140 [ 1572.884033][T29304] ? __pfx___do_sys_adjtimex+0x10/0x10 [ 1572.884065][T29304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1572.884114][T29304] ? __pfx_ksys_write+0x10/0x10 [ 1572.884146][T29304] ? rcu_is_watching+0x12/0xc0 [ 1572.884174][T29304] do_syscall_64+0xcd/0x490 [ 1572.884208][T29304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.884232][T29304] RIP: 0033:0x7f1db6f8ebe9 [ 1572.884250][T29304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.884273][T29304] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009f [ 1572.884295][T29304] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1572.884311][T29304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 1572.884326][T29304] RBP: 00007f1db7d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.884340][T29304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.884354][T29304] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1572.884383][T29304] [ 1575.009899][T29332] FAULT_INJECTION: forcing a failure. [ 1575.009899][T29332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.135177][T29332] CPU: 1 UID: 0 PID: 29332 Comm: syz.5.4198 Tainted: G U syzkaller #0 PREEMPT(full) [ 1575.135216][T29332] Tainted: [U]=USER [ 1575.135225][T29332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1575.135239][T29332] Call Trace: [ 1575.135247][T29332] [ 1575.135256][T29332] dump_stack_lvl+0x16c/0x1f0 [ 1575.135291][T29332] should_fail_ex+0x512/0x640 [ 1575.135328][T29332] _copy_to_user+0x32/0xd0 [ 1575.135351][T29332] simple_read_from_buffer+0xcb/0x170 [ 1575.135378][T29332] proc_fail_nth_read+0x197/0x240 [ 1575.135403][T29332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1575.135431][T29332] ? rw_verify_area+0xcf/0x6c0 [ 1575.135454][T29332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1575.135479][T29332] vfs_read+0x1e4/0xcf0 [ 1575.135509][T29332] ? __pfx___mutex_lock+0x10/0x10 [ 1575.135539][T29332] ? __pfx_vfs_read+0x10/0x10 [ 1575.135573][T29332] ? __fget_files+0x20e/0x3c0 [ 1575.135607][T29332] ksys_read+0x12a/0x250 [ 1575.135633][T29332] ? __pfx_ksys_read+0x10/0x10 [ 1575.135674][T29332] do_syscall_64+0xcd/0x490 [ 1575.135710][T29332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.135736][T29332] RIP: 0033:0x7f03c6d8d5fc [ 1575.135754][T29332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1575.135779][T29332] RSP: 002b:00007f03c7bc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1575.135801][T29332] RAX: ffffffffffffffda RBX: 00007f03c6fb6180 RCX: 00007f03c6d8d5fc [ 1575.135818][T29332] RDX: 000000000000000f RSI: 00007f03c7bc80a0 RDI: 0000000000000004 [ 1575.135833][T29332] RBP: 00007f03c7bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.135849][T29332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.135863][T29332] R13: 00007f03c6fb6218 R14: 00007f03c6fb6180 R15: 00007ffc014b7958 [ 1575.135894][T29332] [ 1576.134415][T29342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 1576.878989][T29356] vivid-003: ================= START STATUS ================= [ 1576.887323][T29356] vivid-003: Radio HW Seek Mode: Bounded [ 1576.902167][T29356] vivid-003: Radio Programmable HW Seek: false [ 1576.929295][T29356] vivid-003: RDS Rx I/O Mode: Block I/O [ 1576.959488][T29356] vivid-003: Generate RBDS Instead of RDS: false [ 1576.973738][T29356] vivid-003: RDS Reception: true [ 1576.984238][T29356] vivid-003: RDS Program Type: 0 inactive [ 1576.997101][T29356] vivid-003: RDS PS Name: inactive [ 1577.011557][T29356] vivid-003: RDS Radio Text: inactive [ 1577.019942][T29356] vivid-003: RDS Traffic Announcement: false inactive [ 1577.029531][T29356] vivid-003: RDS Traffic Program: false inactive [ 1577.041751][T29356] vivid-003: RDS Music: false inactive [ 1577.051761][T29356] vivid-003: ================== END STATUS ================== [ 1577.713242][T29381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1578.425296][T29391] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 1578.812861][T23502] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1580.349115][T29437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1581.460439][T29441] delete_channel: no stack [ 1583.687728][T29490] could not allocate digest TFM handle [ 1585.876844][T29531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4245'. [ 1586.254717][T29537] netlink: 'syz.2.4247': attribute type 16 has an invalid length. [ 1586.281188][T29537] netlink: 226 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1586.362897][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1589.003572][T10220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1589.025081][T10220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1589.033661][T10220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1589.041524][T10220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1589.049554][T10220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1589.982378][T29587] FAULT_INJECTION: forcing a failure. [ 1589.982378][T29587] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.004200][T29587] CPU: 1 UID: 0 PID: 29587 Comm: syz.1.4257 Tainted: G U syzkaller #0 PREEMPT(full) [ 1590.004264][T29587] Tainted: [U]=USER [ 1590.004275][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.004294][T29587] Call Trace: [ 1590.004304][T29587] [ 1590.004317][T29587] dump_stack_lvl+0x16c/0x1f0 [ 1590.004373][T29587] should_fail_ex+0x512/0x640 [ 1590.004414][T29587] ? fs_reclaim_acquire+0xae/0x150 [ 1590.004459][T29587] ? tomoyo_encode2+0x100/0x3e0 [ 1590.004499][T29587] should_failslab+0xc2/0x120 [ 1590.004538][T29587] __kmalloc_noprof+0xd2/0x510 [ 1590.004573][T29587] ? d_absolute_path+0x136/0x1a0 [ 1590.004623][T29587] tomoyo_encode2+0x100/0x3e0 [ 1590.004670][T29587] tomoyo_encode+0x29/0x50 [ 1590.004711][T29587] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1590.004766][T29587] tomoyo_path_number_perm+0x245/0x580 [ 1590.004801][T29587] ? tomoyo_path_number_perm+0x237/0x580 [ 1590.004842][T29587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1590.004882][T29587] ? find_held_lock+0x2b/0x80 [ 1590.004963][T29587] ? find_held_lock+0x2b/0x80 [ 1590.004993][T29587] ? hook_file_ioctl_common+0x145/0x410 [ 1590.005044][T29587] ? __fget_files+0x20e/0x3c0 [ 1590.005093][T29587] security_file_ioctl+0x9b/0x240 [ 1590.005137][T29587] __x64_sys_ioctl+0xb7/0x210 [ 1590.005190][T29587] do_syscall_64+0xcd/0x490 [ 1590.005236][T29587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.005268][T29587] RIP: 0033:0x7f1db6f8ebe9 [ 1590.005293][T29587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.005323][T29587] RSP: 002b:00007f1db7d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.005351][T29587] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 1590.005372][T29587] RDX: 0000200000000240 RSI: 000000008038550a RDI: 0000000000000003 [ 1590.005390][T29587] RBP: 00007f1db7d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.005426][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.005442][T29587] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007fff81155df8 [ 1590.005495][T29587] [ 1590.005522][T29587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1590.229468][T29587] usb usb39: usbfs: process 29587 (syz.1.4257) did not claim interface 0 before use [ 1590.494096][T29578] chnl_net:caif_netlink_parms(): no params data found [ 1590.544669][T29610] FAULT_INJECTION: forcing a failure. [ 1590.544669][T29610] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.574896][T29610] CPU: 0 UID: 0 PID: 29610 Comm: syz.1.4261 Tainted: G U syzkaller #0 PREEMPT(full) [ 1590.574944][T29610] Tainted: [U]=USER [ 1590.574955][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.574973][T29610] Call Trace: [ 1590.574985][T29610] [ 1590.574997][T29610] dump_stack_lvl+0x16c/0x1f0 [ 1590.575044][T29610] should_fail_ex+0x512/0x640 [ 1590.575090][T29610] ? __kmalloc_noprof+0xbf/0x510 [ 1590.575129][T29610] ? constrain_params_by_rules+0x175/0xca0 [ 1590.575160][T29610] should_failslab+0xc2/0x120 [ 1590.575201][T29610] __kmalloc_noprof+0xd2/0x510 [ 1590.575231][T29610] ? kasan_quarantine_put+0x10a/0x240 [ 1590.575256][T29610] ? lockdep_hardirqs_on+0x7c/0x110 [ 1590.575290][T29610] constrain_params_by_rules+0x175/0xca0 [ 1590.575311][T29610] ? constrain_params_by_rules+0xa09/0xca0 [ 1590.575339][T29610] ? constrain_params_by_rules+0xa0e/0xca0 [ 1590.575365][T29610] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1590.575394][T29610] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1590.575434][T29610] snd_pcm_hw_refine+0x7de/0xad0 [ 1590.575471][T29610] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1590.575497][T29610] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1590.575541][T29610] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1590.575581][T29610] snd_pcm_hw_param_first+0x334/0x6f0 [ 1590.575620][T29610] ? trace_hw_mask_param+0x18b/0x200 [ 1590.575657][T29610] snd_pcm_hw_params+0x5eb/0x1ba0 [ 1590.575687][T29610] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1590.575715][T29610] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1590.575758][T29610] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1590.575806][T29610] ? __asan_memset+0x23/0x50 [ 1590.575831][T29610] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1590.575859][T29610] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1590.575896][T29610] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1590.575942][T29610] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1590.575970][T29610] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1590.575994][T29610] ? hook_file_ioctl_common+0x145/0x410 [ 1590.576026][T29610] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1590.576053][T29610] ? __fget_files+0x20e/0x3c0 [ 1590.576082][T29610] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1590.576107][T29610] __x64_sys_ioctl+0x18e/0x210 [ 1590.576145][T29610] do_syscall_64+0xcd/0x490 [ 1590.576178][T29610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.576201][T29610] RIP: 0033:0x7f1db6f8ebe9 [ 1590.576219][T29610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.576241][T29610] RSP: 002b:00007f1db7d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1590.576262][T29610] RAX: ffffffffffffffda RBX: 00007f1db71b6090 RCX: 00007f1db6f8ebe9 [ 1590.576277][T29610] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1590.576291][T29610] RBP: 00007f1db7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1590.576305][T29610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.576319][T29610] R13: 00007f1db71b6128 R14: 00007f1db71b6090 R15: 00007fff81155df8 [ 1590.576348][T29610] [ 1591.132852][T10220] Bluetooth: hci2: command tx timeout [ 1591.355504][T29578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.369426][T29578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.398707][T29578] bridge_slave_0: entered allmulticast mode [ 1591.407717][T29578] bridge_slave_0: entered promiscuous mode [ 1591.457743][T29578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.483074][T29578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.490435][T29578] bridge_slave_1: entered allmulticast mode [ 1591.498678][T29578] bridge_slave_1: entered promiscuous mode [ 1591.599357][T29578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.638096][T29622] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4263'. [ 1591.676403][T29578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.809376][T29578] team0: Port device team_slave_0 added [ 1591.856047][T29578] team0: Port device team_slave_1 added [ 1592.185525][T29578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.192518][T29578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.322792][T29578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.903372][T29578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.938461][T29578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.973147][T29578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.114146][T29578] hsr_slave_0: entered promiscuous mode [ 1593.134668][T29578] hsr_slave_1: entered promiscuous mode [ 1593.141162][T29578] debugfs: 'hsr0' already exists in 'hsr' [ 1593.158349][T29578] Cannot create hsr debugfs directory [ 1593.213468][T10220] Bluetooth: hci2: command tx timeout [ 1593.911543][T29578] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.105043][T29578] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.245895][T29578] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.428039][T29578] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.494712][T29650] FAULT_INJECTION: forcing a failure. [ 1594.494712][T29650] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.542390][T29650] CPU: 1 UID: 0 PID: 29650 Comm: syz.2.4268 Tainted: G U syzkaller #0 PREEMPT(full) [ 1594.542444][T29650] Tainted: [U]=USER [ 1594.542454][T29650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1594.542474][T29650] Call Trace: [ 1594.542485][T29650] [ 1594.542497][T29650] dump_stack_lvl+0x16c/0x1f0 [ 1594.542545][T29650] should_fail_ex+0x512/0x640 [ 1594.542591][T29650] ? fs_reclaim_acquire+0xae/0x150 [ 1594.542643][T29650] ? tomoyo_encode2+0x100/0x3e0 [ 1594.542688][T29650] should_failslab+0xc2/0x120 [ 1594.542740][T29650] __kmalloc_noprof+0xd2/0x510 [ 1594.542780][T29650] ? d_absolute_path+0x136/0x1a0 [ 1594.542836][T29650] tomoyo_encode2+0x100/0x3e0 [ 1594.542891][T29650] tomoyo_encode+0x29/0x50 [ 1594.542937][T29650] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1594.542998][T29650] tomoyo_path_number_perm+0x245/0x580 [ 1594.543038][T29650] ? tomoyo_path_number_perm+0x237/0x580 [ 1594.543084][T29650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1594.543128][T29650] ? find_held_lock+0x2b/0x80 [ 1594.543208][T29650] ? find_held_lock+0x2b/0x80 [ 1594.543238][T29650] ? hook_file_ioctl_common+0x145/0x410 [ 1594.543298][T29650] ? __fget_files+0x20e/0x3c0 [ 1594.543330][T29650] security_file_ioctl+0x9b/0x240 [ 1594.543362][T29650] __x64_sys_ioctl+0xb7/0x210 [ 1594.543402][T29650] do_syscall_64+0xcd/0x490 [ 1594.543442][T29650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.543467][T29650] RIP: 0033:0x7fcc4e38ebe9 [ 1594.543488][T29650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.543513][T29650] RSP: 002b:00007fcc4f272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1594.543538][T29650] RAX: ffffffffffffffda RBX: 00007fcc4e5b5fa0 RCX: 00007fcc4e38ebe9 [ 1594.543556][T29650] RDX: 0000000000000001 RSI: 0000000000004b3a RDI: 0000000000000009 [ 1594.543571][T29650] RBP: 00007fcc4f272090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.543586][T29650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.543601][T29650] R13: 00007fcc4e5b6038 R14: 00007fcc4e5b5fa0 R15: 00007ffd0c677248 [ 1594.543635][T29650] [ 1594.766182][T29650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1594.829520][T29578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1594.866887][T29578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1594.887214][T29578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1594.899765][T29578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1595.218030][T29578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.292999][T10220] Bluetooth: hci2: command tx timeout [ 1595.624124][T29578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.688099][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.695279][T12833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.779829][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.787105][T12833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.848238][T29578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.340301][T29578] veth0_vlan: entered promiscuous mode [ 1597.360448][T29578] veth1_vlan: entered promiscuous mode [ 1597.373620][T10220] Bluetooth: hci2: command tx timeout [ 1597.434406][T29578] veth0_macvtap: entered promiscuous mode [ 1597.479863][T29578] veth1_macvtap: entered promiscuous mode [ 1597.596780][T29578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.613692][T29578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.650029][T23433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.755453][T23433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.802132][T23433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.825619][T23433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.924490][T12833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.952272][T12833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.023427][T12833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.052114][T12833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.249073][T29731] usb usb39: usbfs: process 29731 (syz.5.4254) did not claim interface 0 before use [ 1600.134443][T29757] FAULT_INJECTION: forcing a failure. [ 1600.134443][T29757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.149915][T29757] CPU: 1 UID: 0 PID: 29757 Comm: syz.0.4284 Tainted: G U syzkaller #0 PREEMPT(full) [ 1600.149958][T29757] Tainted: [U]=USER [ 1600.149968][T29757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1600.149986][T29757] Call Trace: [ 1600.149996][T29757] [ 1600.150007][T29757] dump_stack_lvl+0x16c/0x1f0 [ 1600.150050][T29757] should_fail_ex+0x512/0x640 [ 1600.150099][T29757] core_sys_select+0x4c5/0xc10 [ 1600.150141][T29757] ? __pfx_core_sys_select+0x10/0x10 [ 1600.150192][T29757] ? proc_fail_nth_write+0x9f/0x220 [ 1600.150253][T29757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1600.150302][T29757] kern_select+0x15d/0x1e0 [ 1600.150333][T29757] ? __pfx_kern_select+0x10/0x10 [ 1600.150368][T29757] ? __pfx_ksys_write+0x10/0x10 [ 1600.150414][T29757] __x64_sys_select+0xbd/0x160 [ 1600.150443][T29757] ? do_syscall_64+0x91/0x490 [ 1600.150479][T29757] ? lockdep_hardirqs_on+0x7c/0x110 [ 1600.150514][T29757] do_syscall_64+0xcd/0x490 [ 1600.150554][T29757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.150583][T29757] RIP: 0033:0x7f681b38ebe9 [ 1600.150605][T29757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.150632][T29757] RSP: 002b:00007f681c136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1600.150658][T29757] RAX: ffffffffffffffda RBX: 00007f681b5b6090 RCX: 00007f681b38ebe9 [ 1600.150674][T29757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1600.150690][T29757] RBP: 00007f681c136090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.150705][T29757] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1600.150720][T29757] R13: 00007f681b5b6128 R14: 00007f681b5b6090 R15: 00007fff5cedb168 [ 1600.150753][T29757] [ 1600.328683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.713642][T29807] FAULT_INJECTION: forcing a failure. [ 1602.713642][T29807] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.726464][T29807] CPU: 0 UID: 0 PID: 29807 Comm: syz.0.4293 Tainted: G U syzkaller #0 PREEMPT(full) [ 1602.726506][T29807] Tainted: [U]=USER [ 1602.726517][T29807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1602.726533][T29807] Call Trace: [ 1602.726544][T29807] [ 1602.726555][T29807] dump_stack_lvl+0x16c/0x1f0 [ 1602.726598][T29807] should_fail_ex+0x512/0x640 [ 1602.726642][T29807] ? __kmalloc_noprof+0xbf/0x510 [ 1602.726680][T29807] ? io_cache_alloc_new+0x45/0xf0 [ 1602.726722][T29807] should_failslab+0xc2/0x120 [ 1602.726762][T29807] __kmalloc_noprof+0xd2/0x510 [ 1602.726806][T29807] io_cache_alloc_new+0x45/0xf0 [ 1602.726852][T29807] io_rsrc_node_alloc+0x221/0x2b0 [ 1602.726899][T29807] io_sqe_buffer_register+0x104/0x2010 [ 1602.726970][T29807] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1602.727019][T29807] ? rcu_is_watching+0x12/0xc0 [ 1602.727060][T29807] ? iovec_from_user+0xbb/0x140 [ 1602.727093][T29807] io_sqe_buffers_register+0x1ed/0x860 [ 1602.727153][T29807] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1602.727207][T29807] ? __mutex_trylock_common+0xe9/0x250 [ 1602.727250][T29807] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1602.727304][T29807] __io_uring_register+0x21e2/0x23c0 [ 1602.727349][T29807] ? trace_contention_end+0xdd/0x130 [ 1602.727394][T29807] ? __pfx___io_uring_register+0x10/0x10 [ 1602.727448][T29807] ? __pfx___mutex_lock+0x10/0x10 [ 1602.727498][T29807] ? __fget_files+0x20e/0x3c0 [ 1602.727542][T29807] __x64_sys_io_uring_register+0x169/0x280 [ 1602.727592][T29807] do_syscall_64+0xcd/0x490 [ 1602.727637][T29807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.727667][T29807] RIP: 0033:0x7f681b38ebe9 [ 1602.727690][T29807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.727720][T29807] RSP: 002b:00007f681c115038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1602.727746][T29807] RAX: ffffffffffffffda RBX: 00007f681b5b6180 RCX: 00007f681b38ebe9 [ 1602.727765][T29807] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1602.727782][T29807] RBP: 00007f681c115090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.727799][T29807] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1602.727816][T29807] R13: 00007f681b5b6218 R14: 00007f681b5b6180 R15: 00007fff5cedb168 [ 1602.727853][T29807] [ 1603.330717][T29813] FAULT_INJECTION: forcing a failure. [ 1603.330717][T29813] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.484113][T29813] CPU: 0 UID: 0 PID: 29813 Comm: syz.5.4294 Tainted: G U syzkaller #0 PREEMPT(full) [ 1603.484164][T29813] Tainted: [U]=USER [ 1603.484175][T29813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1603.484194][T29813] Call Trace: [ 1603.484205][T29813] [ 1603.484217][T29813] dump_stack_lvl+0x16c/0x1f0 [ 1603.484274][T29813] should_fail_ex+0x512/0x640 [ 1603.484324][T29813] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1603.484364][T29813] should_failslab+0xc2/0x120 [ 1603.484404][T29813] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1603.484440][T29813] ? __kernfs_new_node+0xd2/0x8e0 [ 1603.484483][T29813] __kernfs_new_node+0xd2/0x8e0 [ 1603.484523][T29813] ? kernfs_add_one+0x14e/0x840 [ 1603.484582][T29813] ? __pfx___kernfs_new_node+0x10/0x10 [ 1603.484649][T29813] ? find_held_lock+0x2b/0x80 [ 1603.484685][T29813] ? kernfs_root+0xee/0x2a0 [ 1603.484732][T29813] kernfs_new_node+0x13c/0x1e0 [ 1603.484805][T29813] kernfs_create_link+0xcc/0x240 [ 1603.484845][T29813] sysfs_do_create_link_sd+0x90/0x140 [ 1603.484891][T29813] sysfs_create_link+0x61/0xc0 [ 1603.484933][T29813] device_add+0x50a/0x1aa0 [ 1603.484964][T29813] ? rcu_is_watching+0x12/0xc0 [ 1603.484999][T29813] ? __pfx_device_add+0x10/0x10 [ 1603.485044][T29813] device_create_groups_vargs+0x1f8/0x270 [ 1603.485084][T29813] device_create+0xed/0x130 [ 1603.485117][T29813] ? __pfx_device_create+0x10/0x10 [ 1603.485153][T29813] ? do_init_timer+0xc9/0x110 [ 1603.485193][T29813] ? ieee80211_roc_setup+0x136/0x270 [ 1603.485230][T29813] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 1603.485282][T29813] mac80211_hwsim_new_radio+0x369/0x54d0 [ 1603.485344][T29813] ? __asan_memset+0x23/0x50 [ 1603.485380][T29813] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1603.485430][T29813] hwsim_new_radio_nl+0xb51/0x12c0 [ 1603.485466][T29813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1603.485512][T29813] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1603.485568][T29813] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1603.485631][T29813] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1603.485699][T29813] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1603.485761][T29813] ? bpf_lsm_capable+0x9/0x10 [ 1603.485790][T29813] ? security_capable+0x7e/0x260 [ 1603.485824][T29813] ? ns_capable+0xd7/0x110 [ 1603.485860][T29813] genl_rcv_msg+0x55c/0x800 [ 1603.485914][T29813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1603.485972][T29813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1603.486017][T29813] netlink_rcv_skb+0x158/0x420 [ 1603.486058][T29813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1603.486123][T29813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1603.486182][T29813] ? netlink_deliver_tap+0x1ae/0xd30 [ 1603.486227][T29813] genl_rcv+0x28/0x40 [ 1603.486270][T29813] netlink_unicast+0x5a7/0x870 [ 1603.486325][T29813] ? __pfx_netlink_unicast+0x10/0x10 [ 1603.486367][T29813] ? __pfx___might_resched+0x10/0x10 [ 1603.486399][T29813] ? __lock_acquire+0xb97/0x1ce0 [ 1603.486458][T29813] netlink_sendmsg+0x8d1/0xdd0 [ 1603.486509][T29813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1603.486558][T29813] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1603.486599][T29813] ____sys_sendmsg+0xa98/0xc70 [ 1603.486634][T29813] ? copy_msghdr_from_user+0x10a/0x160 [ 1603.486680][T29813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1603.486720][T29813] ? __pfx_futex_wake_mark+0x10/0x10 [ 1603.486771][T29813] ___sys_sendmsg+0x134/0x1d0 [ 1603.486815][T29813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1603.486914][T29813] __sys_sendmsg+0x16d/0x220 [ 1603.486956][T29813] ? __pfx___sys_sendmsg+0x10/0x10 [ 1603.487001][T29813] ? __x64_sys_futex+0x1e0/0x4c0 [ 1603.487065][T29813] do_syscall_64+0xcd/0x490 [ 1603.487128][T29813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.487162][T29813] RIP: 0033:0x7fe408b8ebe9 [ 1603.487188][T29813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.487219][T29813] RSP: 002b:00007fe409a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1603.487251][T29813] RAX: ffffffffffffffda RBX: 00007fe408db6180 RCX: 00007fe408b8ebe9 [ 1603.487272][T29813] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 1603.487306][T29813] RBP: 00007fe408c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1603.487327][T29813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.487347][T29813] R13: 00007fe408db6218 R14: 00007fe408db6180 R15: 00007fff56b726f8 [ 1603.487390][T29813] [ 1604.195109][T29818] FAULT_INJECTION: forcing a failure. [ 1604.195109][T29818] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.207965][T29818] CPU: 1 UID: 0 PID: 29818 Comm: syz.2.4296 Tainted: G U syzkaller #0 PREEMPT(full) [ 1604.208003][T29818] Tainted: [U]=USER [ 1604.208010][T29818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1604.208023][T29818] Call Trace: [ 1604.208031][T29818] [ 1604.208039][T29818] dump_stack_lvl+0x16c/0x1f0 [ 1604.208070][T29818] should_fail_ex+0x512/0x640 [ 1604.208100][T29818] ? __kmalloc_noprof+0xbf/0x510 [ 1604.208126][T29818] ? io_cache_alloc_new+0x45/0xf0 [ 1604.208163][T29818] should_failslab+0xc2/0x120 [ 1604.208193][T29818] __kmalloc_noprof+0xd2/0x510 [ 1604.208225][T29818] io_cache_alloc_new+0x45/0xf0 [ 1604.208259][T29818] io_rsrc_node_alloc+0x221/0x2b0 [ 1604.208294][T29818] io_sqe_buffer_register+0x104/0x2010 [ 1604.208346][T29818] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1604.208382][T29818] ? rcu_is_watching+0x12/0xc0 [ 1604.208411][T29818] ? iovec_from_user+0xbb/0x140 [ 1604.208434][T29818] io_sqe_buffers_register+0x1ed/0x860 [ 1604.208477][T29818] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1604.208517][T29818] ? __mutex_trylock_common+0xe9/0x250 [ 1604.208549][T29818] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1604.208584][T29818] __io_uring_register+0x21e2/0x23c0 [ 1604.208616][T29818] ? trace_contention_end+0xdd/0x130 [ 1604.208648][T29818] ? __pfx___io_uring_register+0x10/0x10 [ 1604.208686][T29818] ? __pfx___mutex_lock+0x10/0x10 [ 1604.208723][T29818] ? __fget_files+0x20e/0x3c0 [ 1604.208756][T29818] __x64_sys_io_uring_register+0x169/0x280 [ 1604.208792][T29818] do_syscall_64+0xcd/0x490 [ 1604.208824][T29818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.208847][T29818] RIP: 0033:0x7fcc4e38ebe9 [ 1604.208864][T29818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.208887][T29818] RSP: 002b:00007fcc4f272038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1604.208908][T29818] RAX: ffffffffffffffda RBX: 00007fcc4e5b5fa0 RCX: 00007fcc4e38ebe9 [ 1604.208923][T29818] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1604.208936][T29818] RBP: 00007fcc4f272090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.208950][T29818] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1604.208964][T29818] R13: 00007fcc4e5b6038 R14: 00007fcc4e5b5fa0 R15: 00007ffd0c677248 [ 1604.208991][T29818] [ 1606.157013][ T30] audit: type=1800 audit(1843104562.920:13): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4303" name="lu_gp_id" dev="configfs" ino=122365 res=0 errno=0 [ 1607.488097][T29881] bond0: option all_slaves_active: invalid value () [ 1607.504444][T29892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1607.747945][T29892] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 1608.491907][T29900] FAULT_INJECTION: forcing a failure. [ 1608.491907][T29900] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.505582][T29900] CPU: 1 UID: 0 PID: 29900 Comm: syz.1.4307 Tainted: G U syzkaller #0 PREEMPT(full) [ 1608.505631][T29900] Tainted: [U]=USER [ 1608.505642][T29900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1608.505661][T29900] Call Trace: [ 1608.505672][T29900] [ 1608.505685][T29900] dump_stack_lvl+0x16c/0x1f0 [ 1608.505732][T29900] should_fail_ex+0x512/0x640 [ 1608.505777][T29900] ? __kmalloc_noprof+0xbf/0x510 [ 1608.505820][T29900] ? tracepoint_add_func+0x2a6/0xea0 [ 1608.505869][T29900] should_failslab+0xc2/0x120 [ 1608.505923][T29900] __kmalloc_noprof+0xd2/0x510 [ 1608.505968][T29900] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1608.506019][T29900] tracepoint_add_func+0x2a6/0xea0 [ 1608.506069][T29900] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1608.506127][T29900] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1608.506177][T29900] tracepoint_probe_register+0xbf/0x100 [ 1608.506230][T29900] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1608.506281][T29900] ? irqentry_exit+0x3b/0x90 [ 1608.506323][T29900] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1608.506386][T29900] tracing_start_sched_switch+0xaf/0x1e0 [ 1608.506434][T29900] __ftrace_event_enable_disable+0x694/0x810 [ 1608.506496][T29900] __ftrace_set_clr_event_nolock+0x390/0xb70 [ 1608.506565][T29900] ftrace_set_clr_event+0x16e/0x330 [ 1608.506601][T29900] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1608.506651][T29900] ftrace_event_write+0x243/0x290 [ 1608.506687][T29900] ? __pfx_ftrace_event_write+0x10/0x10 [ 1608.506738][T29900] ? __pfx_ftrace_event_write+0x10/0x10 [ 1608.506771][T29900] vfs_write+0x29d/0x11d0 [ 1608.506818][T29900] ? __pfx___mutex_lock+0x10/0x10 [ 1608.506863][T29900] ? __pfx_vfs_write+0x10/0x10 [ 1608.506933][T29900] ? __fget_files+0x20e/0x3c0 [ 1608.506982][T29900] ksys_write+0x12a/0x250 [ 1608.507021][T29900] ? __pfx_ksys_write+0x10/0x10 [ 1608.507073][T29900] do_syscall_64+0xcd/0x490 [ 1608.507119][T29900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.507150][T29900] RIP: 0033:0x7f1db6f8ebe9 [ 1608.507176][T29900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1608.507208][T29900] RSP: 002b:00007f1db7d2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1608.507236][T29900] RAX: ffffffffffffffda RBX: 00007f1db71b6180 RCX: 00007f1db6f8ebe9 [ 1608.507257][T29900] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1608.507275][T29900] RBP: 00007f1db7d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.507293][T29900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.507311][T29900] R13: 00007f1db71b6218 R14: 00007f1db71b6180 R15: 00007fff81155df8 [ 1608.507354][T29900] [ 1608.507421][T29900] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 1609.414432][T29921] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1609.784342][T29932] ------------[ cut here ]------------ [ 1609.790134][T29932] WARNING: CPU: 0 PID: 29932 at kernel/tracepoint.c:358 tracepoint_probe_unregister+0x894/0xd70 [ 1609.801949][T29932] Modules linked in: [ 1609.807254][T29932] CPU: 0 UID: 0 PID: 29932 Comm: syz.1.4313 Tainted: G U syzkaller #0 PREEMPT(full) [ 1609.818496][T29932] Tainted: [U]=USER [ 1609.822340][T29932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1609.833230][T29932] RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 [ 1609.839902][T29932] Code: 41 5e 41 5f e9 3d ab d6 09 e8 28 23 fe ff 48 c7 c6 40 d4 bc 81 48 89 df e8 b9 ac e4 ff eb 9f bb fe ff ff ff e8 0d 23 fe ff 90 <0f> 0b 90 eb 91 e8 02 23 fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff [ 1609.859981][T29932] RSP: 0018:ffffc9001568f8a0 EFLAGS: 00010283 [ 1609.866470][T29932] RAX: 000000000004c970 RBX: 00000000fffffffe RCX: ffffc9000c90d000 [ 1609.875215][T29932] RDX: 0000000000080000 RSI: ffffffff81bce583 RDI: 0000000000000005 [ 1609.883714][T29932] RBP: ffff88801c68db48 R08: 0000000000000005 R09: 0000000000000000 [ 1609.891688][T29932] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81c2dca0 [ 1609.899888][T29932] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff8e98fd40 [ 1609.908463][T29932] FS: 00007f1db7d2d6c0(0000) GS:ffff8881246c3000(0000) knlGS:0000000000000000 [ 1609.918103][T29932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.925022][T29932] CR2: 0000001b327f6ff8 CR3: 0000000034f9c000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1609.933051][T29932] Call Trace: [ 1609.936334][T29932] [ 1609.939287][T29932] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1609.945694][T29932] tracing_stop_cmdline_record+0x66/0xa0 [ 1609.951352][T29932] __ftrace_event_enable_disable+0x708/0x810 [ 1609.957411][T29932] ftrace_event_set_open+0x232/0x380 [ 1609.962786][T29932] do_dentry_open+0x97f/0x1530 [ 1609.967781][T29932] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1609.973822][T29932] vfs_open+0x82/0x3f0 [ 1609.979186][T29932] path_openat+0x1de4/0x2cb0 [ 1609.984682][T29932] ? __pfx_path_openat+0x10/0x10 [ 1609.989693][T29932] do_filp_open+0x20b/0x470 [ 1609.994307][T29932] ? __pfx_do_filp_open+0x10/0x10 [ 1609.999392][T29932] ? alloc_fd+0x471/0x7d0 [ 1610.003807][T29932] do_sys_openat2+0x11b/0x1d0 [ 1610.009077][T29932] ? __pfx_do_sys_openat2+0x10/0x10 [ 1610.015225][T29932] __x64_sys_openat+0x174/0x210 [ 1610.020145][T29932] ? __pfx___x64_sys_openat+0x10/0x10 [ 1610.025961][T29932] do_syscall_64+0xcd/0x490 [ 1610.030520][T29932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.036526][T29932] RIP: 0033:0x7f1db6f8ebe9 [ 1610.040983][T29932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.060685][T29932] RSP: 002b:00007f1db7d2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1610.069374][T29932] RAX: ffffffffffffffda RBX: 00007f1db71b6180 RCX: 00007f1db6f8ebe9 [ 1610.077419][T29932] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1610.086066][T29932] RBP: 00007f1db7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1610.094760][T29932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.103047][T29932] R13: 00007f1db71b6218 R14: 00007f1db71b6180 R15: 00007fff81155df8 [ 1610.111970][T29932] [ 1610.115817][T29932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1610.123140][T29932] CPU: 0 UID: 0 PID: 29932 Comm: syz.1.4313 Tainted: G U syzkaller #0 PREEMPT(full) [ 1610.134126][T29932] Tainted: [U]=USER [ 1610.137940][T29932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1610.148011][T29932] Call Trace: [ 1610.151303][T29932] [ 1610.154233][T29932] dump_stack_lvl+0x3d/0x1f0 [ 1610.158841][T29932] vpanic+0x6e8/0x7a0 [ 1610.162837][T29932] ? __pfx_vpanic+0x10/0x10 [ 1610.167367][T29932] ? tracepoint_probe_unregister+0x894/0xd70 [ 1610.173394][T29932] panic+0xca/0xd0 [ 1610.177149][T29932] ? __pfx_panic+0x10/0x10 [ 1610.181591][T29932] check_panic_on_warn+0xab/0xb0 [ 1610.186566][T29932] __warn+0xf6/0x3c0 [ 1610.190481][T29932] ? tracepoint_probe_unregister+0x894/0xd70 [ 1610.196485][T29932] report_bug+0x3c3/0x580 [ 1610.200832][T29932] ? tracepoint_probe_unregister+0x894/0xd70 [ 1610.206848][T29932] handle_bug+0x184/0x210 [ 1610.211212][T29932] exc_invalid_op+0x17/0x50 [ 1610.215862][T29932] asm_exc_invalid_op+0x1a/0x20 [ 1610.220730][T29932] RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 [ 1610.227345][T29932] Code: 41 5e 41 5f e9 3d ab d6 09 e8 28 23 fe ff 48 c7 c6 40 d4 bc 81 48 89 df e8 b9 ac e4 ff eb 9f bb fe ff ff ff e8 0d 23 fe ff 90 <0f> 0b 90 eb 91 e8 02 23 fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff [ 1610.246957][T29932] RSP: 0018:ffffc9001568f8a0 EFLAGS: 00010283 [ 1610.253028][T29932] RAX: 000000000004c970 RBX: 00000000fffffffe RCX: ffffc9000c90d000 [ 1610.261005][T29932] RDX: 0000000000080000 RSI: ffffffff81bce583 RDI: 0000000000000005 [ 1610.268975][T29932] RBP: ffff88801c68db48 R08: 0000000000000005 R09: 0000000000000000 [ 1610.276981][T29932] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81c2dca0 [ 1610.284951][T29932] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff8e98fd40 [ 1610.292949][T29932] ? __pfx_probe_sched_switch+0x10/0x10 [ 1610.298549][T29932] ? tracepoint_probe_unregister+0x893/0xd70 [ 1610.304566][T29932] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1610.310931][T29932] tracing_stop_cmdline_record+0x66/0xa0 [ 1610.316583][T29932] __ftrace_event_enable_disable+0x708/0x810 [ 1610.322584][T29932] ftrace_event_set_open+0x232/0x380 [ 1610.327895][T29932] do_dentry_open+0x97f/0x1530 [ 1610.332674][T29932] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1610.338539][T29932] vfs_open+0x82/0x3f0 [ 1610.342636][T29932] path_openat+0x1de4/0x2cb0 [ 1610.347254][T29932] ? __pfx_path_openat+0x10/0x10 [ 1610.352236][T29932] do_filp_open+0x20b/0x470 [ 1610.356773][T29932] ? __pfx_do_filp_open+0x10/0x10 [ 1610.361833][T29932] ? alloc_fd+0x471/0x7d0 [ 1610.366184][T29932] do_sys_openat2+0x11b/0x1d0 [ 1610.370885][T29932] ? __pfx_do_sys_openat2+0x10/0x10 [ 1610.376116][T29932] __x64_sys_openat+0x174/0x210 [ 1610.380999][T29932] ? __pfx___x64_sys_openat+0x10/0x10 [ 1610.386417][T29932] do_syscall_64+0xcd/0x490 [ 1610.390965][T29932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.396868][T29932] RIP: 0033:0x7f1db6f8ebe9 [ 1610.401279][T29932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.420901][T29932] RSP: 002b:00007f1db7d2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1610.429319][T29932] RAX: ffffffffffffffda RBX: 00007f1db71b6180 RCX: 00007f1db6f8ebe9 [ 1610.437288][T29932] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1610.445258][T29932] RBP: 00007f1db7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1610.453239][T29932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.461221][T29932] R13: 00007f1db71b6218 R14: 00007f1db71b6180 R15: 00007fff81155df8 [ 1610.469223][T29932] [ 1610.472497][T29932] Kernel Offset: disabled [ 1610.476847][T29932] Rebooting in 86400 seconds..