last executing test programs: 10.797476166s ago: executing program 3 (id=177): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x86, 0x34, &(0x7f0000000240)='wlan0\x00', 0x90e7) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x406, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffffe, 0x7, 0x11, 0xdd, 0x0) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r3, 0x0, 0x0) setresuid$auto(0x8, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="04000b00"], 0x20}}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68842e0ac16e58f8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="00022dbd000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000004) brk$auto(0x7fffffffafff) r7 = syz_clone(0x3112c011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xc, r7, 0x9, 0x0) sched_rr_get_interval$auto(r7, &(0x7f0000000140)={0x35aeea04, 0xa}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 10.676577722s ago: executing program 2 (id=178): mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffe) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r4, 0x5646, r4) r5 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r5, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0xa7) setfsuid$auto(0xee00) 8.755691763s ago: executing program 2 (id=180): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x44102, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev\b\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xdc5, 0x100, 0x1, 0x948b, 0x9, 0x15f4da09, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x8, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x80000004, 0x9, 0xffffdfffffffff81, 0x7]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x0, 0xe3, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) close_range$auto(0x0, r2, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0xc, 0x1000, 0x0) msgctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000080)={{0x0, 0xee00, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xf8b4}, 0x0, 0x0, 0x4, 0x6dfe, 0x3, 0x8000000000000000, 0x9, 0x4000, 0x9, 0xa5ff, @inferred, @raw=0x6}) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r4, 0x0, 0xc3) ioctl$auto(r0, 0x9000643b, r3) socket$nl_generic(0x10, 0x3, 0x10) 8.737071314s ago: executing program 3 (id=181): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec4\x00', 0x622002, 0x0) sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000000500)=0x100000000001, 0x0) r2 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) mmap$auto(0x10, 0x5020009, 0x10001, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pwrite64$auto(0xc8, 0x0, 0x8fdef, 0x4000000000000007) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r1, r0, 0x0, 0x100000000) mmap$auto(0x633, 0x2020009, 0x800000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x4, 0x5, 0x1, 0xebe, r0, 0xd22400000) 8.674491812s ago: executing program 0 (id=182): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8202, 0x0) close_range$auto(0x0, 0x5, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x5, 0x3c2a19d6, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x3ff, 0xa, 0xfffffffffffffffe]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0xffe4) 7.602645099s ago: executing program 2 (id=183): socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0xffffffff, 0x1, 0x0, 0x9, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20040804) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/printk_formats\x00', 0x30000, 0x0) mmap$auto(0x0, 0x6, 0xe3, 0x100000eb1, r3, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) 7.536647364s ago: executing program 0 (id=184): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) r3 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000180)=@query={@target_fd, 0x9, 0x0, 0x4, 0x40, @count=0x2c, 0x0, 0x8, 0x3ff, 0x80, 0xd}, 0x80000000) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), r2) sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e8f8de340e1e6fb27643afd6fb0c9d0d8", @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf250200000008000900", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) keyctl$auto(0x8, 0x1, 0x6, 0x3, 0x3ff) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x4, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x3ff}) arch_prctl$auto(0x1004, 0xe735) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x18}, 0x8) ioctl$auto_UI_SET_FFBIT(r5, 0x4004556b, 0x0) bpf$auto(0x15, 0x0, 0x0) socket(0x10, 0x3, 0x6) prctl$auto(0x1000000001c, 0x5, 0x8, 0xc, 0x80001) setfsuid$auto(0xee00) 7.436321925s ago: executing program 3 (id=185): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') pselect6$auto(0x6, &(0x7f0000000000)={[0x0, 0x4c5e, 0x0, 0x80000001, 0xcdb, 0xe114, 0x4, 0x1, 0x4, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x7, 0x8000]}, &(0x7f0000000140)={[0x7b, 0x7, 0x3, 0x6, 0x3fe, 0x2, 0x0, 0x2, 0x6, 0x7, 0xffff, 0xfffffffffffffff7, 0x7f, 0x400, 0x9, 0x200]}, &(0x7f00000001c0)={[0x3, 0x2, 0x34, 0x1, 0x100000000, 0x8000, 0x101, 0x3, 0x5, 0x1, 0x7, 0x0, 0x6, 0xd3d, 0x7, 0x4]}, &(0x7f0000000240)={0x4, 0x100000001}, &(0x7f0000000280)="5f63b02da995ea2218325b0ad7d3064d0cea74ca91b425c12aaed1cb74b019247e1929fc29e16132c0d742b24c76097d6f1310d7783eab57caf3cbe6b0d62efcab4d6a5a7ab5cbf2faa81011197557a0092e2ca8d3de232ae01fe716739b3d4227ce3795e923498506957ac832fa089b0ea1faed3f65982cc6794c6ced") r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r0, @new_prog_fd, 0x2c}, 0x92) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) fchmod$auto(r2, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r3 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r4 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r6, 0xa01, 0x70bd27, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r4}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) setresgid$auto(0xa05, 0x4, 0x0) sysfs$auto(0xfffffffe, 0x3b, 0x0) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) 7.210232524s ago: executing program 1 (id=187): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, r2, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x72, 0x4, 0x8, 0x3, 0x5, 0x7, @raw=0x8, @raw=0x9}) setresgid$auto(r3, r3, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) setns(0xffffffffffffffff, 0x60020000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.511181996s ago: executing program 1 (id=188): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a) setns(0xc9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x2) pipe2$auto(0x0, 0x80) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@phonet={0x23, 0x0, 0xb, 0x1}, 0x6a) socket(0x2, 0xa, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x1) connect$auto(0x3, 0x0, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x68000, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x18}, 0x1) 5.218117133s ago: executing program 0 (id=189): mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_reset\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvmet-wq/affinity_strict\x00', 0x20461, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x4b2f, 0x0) mmap$auto(0x0, 0x20002020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffe) unshare$auto(0x20000) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(0xffffffffffffffff, 0x4004550a, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio13\x00', 0x8a2c0, 0x0) prctl$auto_PR_GET_AUXV(0x41555856, 0x5400000000000000, 0x5, 0x0, 0x5) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/213, 0xd5) ioctl$auto(r3, 0x5646, r3) r4 = pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x153326100, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0xa7) setfsuid$auto(0xee00) 5.138558295s ago: executing program 3 (id=190): mmap$auto(0x7fffffffffffffff, 0x400104, 0xffffffffffffffff, 0x9b71, 0xffffffffffffffff, 0x8000000007fff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r1, &(0x7f0000007b00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007a80)={0x14, r2, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x800) r3 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto_SO_RCVBUF(r3, 0x0, 0x8, &(0x7f0000000040)='\x00', 0x4) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x535d43, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) lstat$auto(0x0, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x4, 0x400, 0xee00, 0xee01, 0x0, 0x5, 0x4, 0x0, 0xd, 0x3, 0x2, 0x7, 0x7f, 0x2, 0x4}) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x141501, 0x0) msgctl$auto_IPC_INFO(0x33, 0x3, 0x0) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, 0x0, 0x0, 0x5) setresuid$auto(0x0, 0x0, 0x0) ioprio_set$auto(0x2, 0x0, 0x4b34) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.038154672s ago: executing program 2 (id=191): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x109500, 0x0) fcntl$auto_F_SETLK(r0, 0x6, 0x4) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/veth1_to_batadv/mtu\x00', 0x101382, 0x0) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2000, 0x80005, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = bpf$auto(0x8, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x9, 0x80000009, 0xfffffe01, 0xe6d6}, 0x92) mprotect$auto(0x110d22fffc, 0xa588, 0x6) mremap$auto(0x110c231000, 0x7, 0x101, 0x3, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x18) ioctl$auto(0x3, 0x894b, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x410900, 0x0) mmap$auto(0x0, 0x100000000, 0x4000000000e3, 0x40eb2, r2, 0x300000000000) keyctl$auto_KEYCTL_REJECT(0x13, 0x0, 0x101, 0x1, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x202281, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000480)={0xf, 0x4, 0x17, 0x9, 0x878, 0xca4, 0x3, 0x4, 0xfffffffb}) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9a168b755e9469b4d7faeed89e43a5012505000000080001000000000000000002dc9c1549bb739b3b1376e0756048f1cae779548eb41158630bb21c55ef1e08827dfaa8aeb7aa65b70141bf3ee296f24a988982e081bdb4efe9f5dceca3371d436d904b8ae909d3042f2a0fe4107ee8695dd3e4dd188502f585f78f7e6c5a3bfb74dfeb142fb98ae653b71511407ea6ced29364894aec530037acb78e7809d7", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0a000100", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) 4.523839274s ago: executing program 1 (id=192): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'ip6tnl0\x00'}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x0, 0x1002}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r2, 0xc058560f, r2) writev$auto(0xca, &(0x7f0000000080)={0x0, 0x1}, 0x200) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) getsockopt$auto_SO_RESERVE_MEM(r3, 0x7, 0x49, 0x0, &(0x7f00000000c0)=0x9b) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000b00)={0xe, 0x0}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/platform/drivers/hid_sensor_incl_3d/bind\x00', 0xa481, 0x0) write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04\x82\a\xc3\xd0\x11\x03\aKk+\xf4\xcd\x12\xa6\x85\xd6Y\'\x8a`@??\xd60\xc8\xaf\x18\xf9\\\xdd\xc3\x91m\xc9{;\b\x04\x94\xf18', 0x3) 4.067502806s ago: executing program 1 (id=193): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec4\x00', 0x622002, 0x0) sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000000500)=0x100000000001, 0x0) r2 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) mmap$auto(0x10, 0x5020009, 0x10001, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pwrite64$auto(0xc8, 0x0, 0x8fdef, 0x4000000000000007) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r1, r0, 0x0, 0x100000000) mmap$auto(0x633, 0x2020009, 0x800000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x4, 0x5, 0x1, 0xebe, r0, 0xd22400000) 3.426054547s ago: executing program 2 (id=194): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x801, 0x100) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0xffff0001, 0x83, 0x6, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x103, 0x876c5, 0xc9, 0x3}}) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0x5) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x12, 0x0) r2 = gettid() rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) kill$auto(r2, 0x14) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000280)="76675062f96b6333664d21f6526f5e1a8adb790e40b2b40f15bea5bd6010587e75c0c640858efdab990b6fba8c8fc1cd22a40e7c1535f91d69b7d17e2428172cbaaa22cdab481010bb641c6781100ca463b81cda4a096609482333e6a7285e4f9d778b7bc82d3508f83b2c5523a25fc54bbfae0fc6a812bb9eaa90cc29d2ad72f8f1a8a59b58912b53d1d48273e6b9228a98818a6513", 0x3ab9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x8201, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\\\xa0\x04\x82\a\xc3\xd0\a\x00\x00\x00\x00\x00\x00\x00\x12\xa6\x85\xd6Y\'\x8a`@??\xd60\xca\xaf\x18\xf9\\\xf2\xe3\xee\xb3\xden\xb8\xdc \xe6D\x86\x80\x96\xa5\xe9\xc2\xbc\xb7\xee\x1c\xda`\x8c\x04\x94\xf18', 0x3) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x18040, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x800, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)=@link_create={@prog_fd=r1, @target_fd=r0, 0x8, 0x8, @netkit={@relative_id=0x9f, 0x4}}, 0x400) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x400, "9d000000f0ff0000000008ff00", "05db3d57", "050500", "2ff43123", ["f5404de9641f8bf1bad22a9f", "a1679d340ad98fad2453f86d", "b06f8ca10c6607bcbd6f17c8", "5fe14b353c392a92e800"]}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x5, 0x40000000) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xffff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.135255866s ago: executing program 3 (id=195): socket(0xa, 0x5, 0x84) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x68182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) socket(0x27, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x8, 0xff) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000040)=0x9) clock_nanosleep$auto(0x9, 0x1000000, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x44102, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) clock_nanosleep$auto(0xbb, 0x7, &(0x7f0000000280)={0x101, 0xfffffffffffffffb}, &(0x7f0000000340)={0x8, 0x2}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xdc5, 0x100, 0x1, 0x948b, 0x9, 0x15f4da09, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) 3.036919728s ago: executing program 1 (id=196): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) capset$auto(&(0x7f0000000180)={0xd, r1}, &(0x7f0000000240)={0x1, 0xc9f, 0x6}) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107300, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x2000044f, 0xa, 0xfffffffb, 0x1007181, 0x8a0b, 0x5, 0xb9, 0x247, 0xd281, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xf7fffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22405, 0x9, 0x0, 0x84, 0xfffffffffffffff9, 0xfffffffd, 0x714, 0x0, 0x1ff, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x10000000, 0x8, 0x200, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x0, 0x3a, 0x6, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x12, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x8, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd04, &(0x7f00000001c0)) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x101000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) sysfs$auto(0x2, 0x3b, 0x0) (fail_nth: 1) 2.86415834s ago: executing program 0 (id=197): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, r2, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x72, 0x4, 0x8, 0x3, 0x5, 0x7, @raw=0x8, @raw=0x9}) setresgid$auto(r3, r3, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) setns(0xffffffffffffffff, 0x60020000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 384.969538ms ago: executing program 2 (id=198): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) fcntl$auto(0xffffffffffffffff, 0xb, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x107300, 0x0) mq_timedsend$auto(r0, 0x0, 0x5, 0x2b3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret$auto(0x101) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212cbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="45da8d1ae732374483bb23fce8f63fd9512c294669ac1c74ebc097d8f629f2fb179c4a4cd2cacb"], 0x24}}, 0x4000000) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xf9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40012) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x101000, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) ioctl$auto_BINDER_FREEZE(r6, 0x400c620e, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 284.561618ms ago: executing program 1 (id=199): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) capset$auto(&(0x7f0000000180)={0xd, r1}, &(0x7f0000000240)={0x1, 0xc9f, 0x6}) fcntl$auto(r0, 0xb, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107300, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x2000044f, 0xa, 0xfffffffb, 0x1007181, 0x8a0b, 0x5, 0xb9, 0x247, 0xd281, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xf7fffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22405, 0x9, 0x0, 0x84, 0xfffffffffffffff9, 0xfffffffd, 0x714, 0x0, 0x1ff, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x10000000, 0x8, 0x200, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x0, 0x3a, 0x6, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x12, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x8, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd04, &(0x7f00000001c0)) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x101000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/binderfs/binder1\x00', 0x101003, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 212.34815ms ago: executing program 3 (id=200): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='16\f', 0x3) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x34) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000a80), 0x101, 0x0) writev$auto(r2, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) (async) writev$auto(r2, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r3 = socket(0x10, 0x2, 0x4) bind$auto(r3, 0x0, 0xe) bind$auto(r3, 0x0, 0x65) socket(0xa, 0x5, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3, 0x0) (async) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/pcm\x00', 0x2440, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) setns(0xc9, 0x40000000) socket(0x8, 0x80000, 0x80000003) (async) r6 = socket(0x8, 0x80000, 0x80000003) setsockopt$auto_SO_BROADCAST(r6, 0x71, 0x42020054, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) (async) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 168.77752ms ago: executing program 0 (id=201): readv$auto(0x3, &(0x7f0000001100)={0x0, 0x18}, 0x1) 0s ago: executing program 0 (id=202): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000140)) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0xb, 0x4, 0x3, 0x400000200000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) unshare$auto(0x40000080) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_FIONREAD(r2, 0x5411, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 93.436607][ T5617] cgroup: Unknown subsys name 'net' [ 93.538103][ T5617] cgroup: Unknown subsys name 'cpuset' [ 93.547673][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.366084][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.217523][ T9] cfg80211: failed to load regulatory.db [ 97.644203][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.649461][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.660032][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.666746][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.676065][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.685902][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.686106][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.701643][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.702953][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.714089][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.723145][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.731662][ T5647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.732158][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.746103][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.753995][ T5647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.757207][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.769431][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.778049][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.794070][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.804839][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.630423][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.637803][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.645260][ T5633] bridge_slave_0: entered allmulticast mode [ 99.653354][ T5633] bridge_slave_0: entered promiscuous mode [ 99.714889][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.722220][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.729412][ T5633] bridge_slave_1: entered allmulticast mode [ 99.737249][ T5633] bridge_slave_1: entered promiscuous mode [ 99.745393][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.752641][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.759914][ T5632] bridge_slave_0: entered allmulticast mode [ 99.767594][ T5632] bridge_slave_0: entered promiscuous mode [ 99.774066][ T5643] Bluetooth: hci3: command tx timeout [ 99.787929][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.795319][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.802943][ T5631] bridge_slave_0: entered allmulticast mode [ 99.810385][ T5631] bridge_slave_0: entered promiscuous mode [ 99.830170][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.837532][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.845014][ T5632] bridge_slave_1: entered allmulticast mode [ 99.851393][ T5634] Bluetooth: hci1: command tx timeout [ 99.851403][ T5647] Bluetooth: hci2: command tx timeout [ 99.856790][ T5632] bridge_slave_1: entered promiscuous mode [ 99.859352][ T5643] Bluetooth: hci0: command tx timeout [ 99.911690][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.918948][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.926515][ T5631] bridge_slave_1: entered allmulticast mode [ 99.935133][ T5631] bridge_slave_1: entered promiscuous mode [ 99.967146][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.974500][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.981846][ T5630] bridge_slave_0: entered allmulticast mode [ 99.989211][ T5630] bridge_slave_0: entered promiscuous mode [ 100.012140][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.024905][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.048521][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.058168][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.066040][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.073357][ T5630] bridge_slave_1: entered allmulticast mode [ 100.080935][ T5630] bridge_slave_1: entered promiscuous mode [ 100.114293][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.138432][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.150249][ T5633] team0: Port device team_slave_0 added [ 100.183278][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.194577][ T5633] team0: Port device team_slave_1 added [ 100.218607][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.254374][ T5632] team0: Port device team_slave_0 added [ 100.263023][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.298331][ T5632] team0: Port device team_slave_1 added [ 100.317825][ T5631] team0: Port device team_slave_0 added [ 100.324685][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.331987][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.358429][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.397259][ T5631] team0: Port device team_slave_1 added [ 100.403808][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.410892][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.438409][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.464430][ T5630] team0: Port device team_slave_0 added [ 100.495173][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.503442][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.529613][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.543140][ T5630] team0: Port device team_slave_1 added [ 100.562078][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.569067][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.595045][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.608004][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.615072][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.641288][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.653049][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.660136][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.686511][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.749914][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.757355][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.783490][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.796473][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.803792][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.829839][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.894950][ T5633] hsr_slave_0: entered promiscuous mode [ 100.902184][ T5633] hsr_slave_1: entered promiscuous mode [ 100.929480][ T5631] hsr_slave_0: entered promiscuous mode [ 100.936446][ T5631] hsr_slave_1: entered promiscuous mode [ 100.943009][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 100.948849][ T5631] Cannot create hsr debugfs directory [ 101.008072][ T5632] hsr_slave_0: entered promiscuous mode [ 101.015198][ T5632] hsr_slave_1: entered promiscuous mode [ 101.021577][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 101.027373][ T5632] Cannot create hsr debugfs directory [ 101.066217][ T5630] hsr_slave_0: entered promiscuous mode [ 101.072899][ T5630] hsr_slave_1: entered promiscuous mode [ 101.079103][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 101.085201][ T5630] Cannot create hsr debugfs directory [ 101.576003][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.594476][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.602893][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.614846][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.627403][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.639916][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.648296][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.661627][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.749906][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.762411][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.773482][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.786022][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.794525][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.806944][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.830488][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.840669][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.853732][ T5643] Bluetooth: hci3: command tx timeout [ 101.916580][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.932078][ T5643] Bluetooth: hci0: command tx timeout [ 101.932102][ T5634] Bluetooth: hci1: command tx timeout [ 101.941764][ T5643] Bluetooth: hci2: command tx timeout [ 101.947316][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.956878][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.967064][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.994896][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.006286][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.030155][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.043204][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.136976][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.148516][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.157161][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.167732][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.176863][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.187468][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.205731][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.217141][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.286826][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.370132][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.397485][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.406357][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.442359][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.449556][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.467360][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.486863][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.530221][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.554121][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.561388][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.612902][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.622069][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.639897][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.647100][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.682548][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.689757][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.717719][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.724909][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.739840][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.765914][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.773393][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.805779][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.813041][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.848419][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.933103][ T5643] Bluetooth: hci3: command tx timeout [ 104.011565][ T5643] Bluetooth: hci2: command tx timeout [ 104.016280][ T5647] Bluetooth: hci0: command tx timeout [ 104.023371][ T5634] Bluetooth: hci1: command tx timeout [ 104.046188][ T5631] veth0_vlan: entered promiscuous mode [ 104.094403][ T5631] veth1_vlan: entered promiscuous mode [ 104.157011][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.249493][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.259236][ T5631] veth0_macvtap: entered promiscuous mode [ 104.286132][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.299751][ T5631] veth1_macvtap: entered promiscuous mode [ 104.359420][ T5632] veth0_vlan: entered promiscuous mode [ 104.377536][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.394824][ T5632] veth1_vlan: entered promiscuous mode [ 104.409882][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.500104][ T5630] veth0_vlan: entered promiscuous mode [ 104.509588][ T27] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.522391][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.551372][ T158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.589228][ T5630] veth1_vlan: entered promiscuous mode [ 104.611374][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.628445][ T5633] veth0_vlan: entered promiscuous mode [ 104.637639][ T5632] veth0_macvtap: entered promiscuous mode [ 104.660606][ T5632] veth1_macvtap: entered promiscuous mode [ 104.689144][ T5633] veth1_vlan: entered promiscuous mode [ 104.748697][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.758742][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.800824][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.832411][ T5630] veth0_macvtap: entered promiscuous mode [ 104.853402][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.862506][ T5633] veth0_macvtap: entered promiscuous mode [ 104.870212][ T5630] veth1_macvtap: entered promiscuous mode [ 104.890792][ T5633] veth1_macvtap: entered promiscuous mode [ 104.905111][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.914367][ T158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.921699][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.951979][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.982922][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.011015][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.042503][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.065470][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.107339][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.250299][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.269402][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.322143][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.440935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.440965][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.513408][ T1180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513533][ T1180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513588][ T1180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513641][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513694][ T1180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513746][ T1180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513798][ T1180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.513851][ T1180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.514952][ T3307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.514978][ T3307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.561498][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.674158][ T3307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.674188][ T3307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.794998][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.795029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.865228][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.865258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.016299][ T5634] Bluetooth: hci3: command tx timeout [ 106.093331][ T5634] Bluetooth: hci1: command tx timeout [ 106.098860][ T5634] Bluetooth: hci2: command tx timeout [ 106.101415][ T5647] Bluetooth: hci0: command tx timeout [ 106.320318][ T5797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.315983][ T5850] i2c i2c-0: new_device: Missing parameters [ 111.849410][ T5883] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.924373][ T5879] FAULT_INJECTION: forcing a failure. [ 111.924373][ T5879] name failslab, interval 1, probability 0, space 0, times 1 [ 111.924462][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 111.924512][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.924537][ T5879] Call Trace: [ 111.924549][ T5879] [ 111.924561][ T5879] dump_stack_lvl+0x100/0x190 [ 111.924613][ T5879] should_fail_ex.cold+0x5/0xa [ 111.924653][ T5879] should_failslab+0xc2/0x120 [ 111.924704][ T5879] __kmalloc_cache_noprof+0x91/0x6c0 [ 111.924746][ T5879] ? vc_allocate+0x1a6/0x880 [ 111.924803][ T5879] vc_allocate+0x1a6/0x880 [ 111.924852][ T5879] ? __pfx_vc_allocate+0x10/0x10 [ 111.924912][ T5879] con_install+0xa1/0x620 [ 111.924964][ T5879] ? __pfx_con_install+0x10/0x10 [ 111.925019][ T5879] ? __pfx_con_install+0x10/0x10 [ 111.925070][ T5879] tty_init_dev.part.0+0x9e/0x470 [ 111.925128][ T5879] tty_open+0xa63/0xfa0 [ 111.925187][ T5879] ? __pfx_tty_open+0x10/0x10 [ 111.925237][ T5879] ? chrdev_open+0x589/0x6a0 [ 111.925272][ T5879] ? chrdev_open+0x589/0x6a0 [ 111.925314][ T5879] ? __pfx_tty_open+0x10/0x10 [ 111.925365][ T5879] chrdev_open+0x234/0x6a0 [ 111.925403][ T5879] ? __pfx_chrdev_open+0x10/0x10 [ 111.925443][ T5879] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 111.925520][ T5879] do_dentry_open+0x6ab/0x14d0 [ 111.925557][ T5879] ? __pfx_chrdev_open+0x10/0x10 [ 111.925604][ T5879] vfs_open+0x82/0x3f0 [ 111.925656][ T5879] path_openat+0x2873/0x4280 [ 111.925713][ T5879] ? __pfx_path_openat+0x10/0x10 [ 111.925762][ T5879] do_file_open+0x20e/0x430 [ 111.925803][ T5879] ? __pfx_do_file_open+0x10/0x10 [ 111.925871][ T5879] ? alloc_fd+0x471/0x7a0 [ 111.925910][ T5879] ? do_getname+0x191/0x390 [ 111.925959][ T5879] do_sys_openat2+0x10f/0x1e0 [ 111.926007][ T5879] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.926056][ T5879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.926119][ T5879] __x64_sys_openat+0x12d/0x210 [ 111.926169][ T5879] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.926235][ T5879] do_syscall_64+0x115/0x840 [ 111.926281][ T5879] ? clear_bhb_loop+0x40/0x90 [ 111.926324][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.926361][ T5879] RIP: 0033:0x7fe53c59e019 [ 111.926398][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.926432][ T5879] RSP: 002b:00007fe53d4d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.926470][ T5879] RAX: ffffffffffffffda RBX: 00007fe53c826270 RCX: 00007fe53c59e019 [ 111.926500][ T5879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 111.926522][ T5879] RBP: 00007fe53c63500c R08: 0000000000000000 R09: 0000000000000000 [ 111.926543][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.926564][ T5879] R13: 00007fe53c826308 R14: 00007fe53c826270 R15: 00007ffc59cfe9b8 [ 111.926608][ T5879] [ 112.161730][ T5896] i2c i2c-0: new_device: Missing parameters [ 118.382979][ T5972] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.746962][ T5982] Zero length message leads to an empty skb [ 118.760665][ T5981] usbip-vudc usbip-vudc.0: gadget not bound [ 123.884995][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.617333][ T6046] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.538303][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 127.379348][ T6098] usbip-vudc usbip-vudc.0: gadget not bound [ 129.003564][ T6111] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 133.055083][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.062338][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.752542][ T6231] FAULT_INJECTION: forcing a failure. [ 136.752542][ T6231] name failslab, interval 1, probability 0, space 0, times 0 [ 136.752604][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT(full) [ 136.752643][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.752662][ T6231] Call Trace: [ 136.752673][ T6231] [ 136.752685][ T6231] dump_stack_lvl+0x100/0x190 [ 136.752749][ T6231] should_fail_ex.cold+0x5/0xa [ 136.752790][ T6231] should_failslab+0xc2/0x120 [ 136.752840][ T6231] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.752887][ T6231] ? __kernfs_new_node+0xd2/0xa10 [ 136.752928][ T6231] __kernfs_new_node+0xd2/0xa10 [ 136.752970][ T6231] ? __pfx___kernfs_new_node+0x10/0x10 [ 136.753015][ T6231] ? find_held_lock+0x2b/0x80 [ 136.753058][ T6231] ? kernfs_root+0xee/0x2a0 [ 136.753119][ T6231] ? kernfs_root+0xee/0x2a0 [ 136.753180][ T6231] kernfs_create_dir_ns+0xa6/0x2b0 [ 136.753225][ T6231] internal_create_group+0x36f/0xfb0 [ 136.753288][ T6231] ? kernfs_add_one+0x214/0xaa0 [ 136.753324][ T6231] ? __pfx_internal_create_group+0x10/0x10 [ 136.753378][ T6231] ? bus_add_device+0x2e2/0x6c0 [ 136.753426][ T6231] ? __pfx_bus_add_device+0x10/0x10 [ 136.753472][ T6231] ? __pfx_dev_add_physical_location+0x10/0x10 [ 136.753517][ T6231] dpm_sysfs_add+0x80/0x280 [ 136.753552][ T6231] device_add+0x9f4/0x1970 [ 136.753590][ T6231] ? __pfx_device_add+0x10/0x10 [ 136.753622][ T6231] ? kfree_const+0x5a/0x70 [ 136.753659][ T6231] ? kfree+0x1e5/0x6c0 [ 136.753701][ T6231] device_create_groups_vargs+0x1f8/0x270 [ 136.753742][ T6231] device_create+0xed/0x130 [ 136.753779][ T6231] ? __pfx_device_create+0x10/0x10 [ 136.753811][ T6231] ? do_raw_spin_lock+0x128/0x260 [ 136.753853][ T6231] ? is_console_locked+0x9/0x20 [ 136.753903][ T6231] ? con_is_visible+0x65/0x150 [ 136.753941][ T6231] ? csi_J+0x57e/0xad0 [ 136.753993][ T6231] vcs_make_sysfs+0x55/0x80 [ 136.754033][ T6231] vc_allocate+0x539/0x880 [ 136.754090][ T6231] ? __pfx_vc_allocate+0x10/0x10 [ 136.754151][ T6231] con_install+0xa1/0x620 [ 136.754202][ T6231] ? __pfx_con_install+0x10/0x10 [ 136.754259][ T6231] ? __pfx_con_install+0x10/0x10 [ 136.754309][ T6231] tty_init_dev.part.0+0x9e/0x470 [ 136.754368][ T6231] tty_open+0xa63/0xfa0 [ 136.754427][ T6231] ? __pfx_tty_open+0x10/0x10 [ 136.754476][ T6231] ? chrdev_open+0x10b/0x6a0 [ 136.754510][ T6231] ? chrdev_open+0x10b/0x6a0 [ 136.754553][ T6231] ? __pfx_tty_open+0x10/0x10 [ 136.754604][ T6231] chrdev_open+0x234/0x6a0 [ 136.754639][ T6231] ? __pfx_apparmor_file_open+0x10/0x10 [ 136.754682][ T6231] ? __pfx_chrdev_open+0x10/0x10 [ 136.754721][ T6231] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 136.754772][ T6231] do_dentry_open+0x6ab/0x14d0 [ 136.754808][ T6231] ? __pfx_chrdev_open+0x10/0x10 [ 136.754855][ T6231] vfs_open+0x82/0x3f0 [ 136.754905][ T6231] path_openat+0x2873/0x4280 [ 136.754960][ T6231] ? __pfx_path_openat+0x10/0x10 [ 136.755009][ T6231] do_file_open+0x20e/0x430 [ 136.755049][ T6231] ? __pfx_do_file_open+0x10/0x10 [ 136.755125][ T6231] ? alloc_fd+0x471/0x7a0 [ 136.755164][ T6231] ? do_getname+0x191/0x390 [ 136.755210][ T6231] do_sys_openat2+0x10f/0x1e0 [ 136.755256][ T6231] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.755306][ T6231] ? __fget_files+0x21f/0x3d0 [ 136.755347][ T6231] __x64_sys_openat+0x12d/0x210 [ 136.755395][ T6231] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.755460][ T6231] do_syscall_64+0x115/0x840 [ 136.755507][ T6231] ? clear_bhb_loop+0x40/0x90 [ 136.755551][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.755587][ T6231] RIP: 0033:0x7fabfd99e019 [ 136.755625][ T6231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.755657][ T6231] RSP: 002b:00007fabfe8c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.755690][ T6231] RAX: ffffffffffffffda RBX: 00007fabfdc25fa0 RCX: 00007fabfd99e019 [ 136.755712][ T6231] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 136.755733][ T6231] RBP: 00007fabfda3500c R08: 0000000000000000 R09: 0000000000000000 [ 136.755753][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.755771][ T6231] R13: 00007fabfdc26038 R14: 00007fabfdc25fa0 R15: 00007ffe3ad6e248 [ 136.755813][ T6231] [ 149.785430][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 149.818147][ T6417] ipvlan1: entered promiscuous mode [ 149.836246][ T6417] ipvlan1: entered allmulticast mode [ 149.846030][ T6417] veth0_vlan: entered allmulticast mode [ 149.985302][ T5847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.206460][ T5847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.548592][ T6555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.560067][ T6555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.570504][ T6555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.582629][ T6555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.602624][ T6555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.729952][ T5847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.228530][ T5847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.547787][ T5847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.267770][ T5847] bridge_slave_1: left allmulticast mode [ 160.281286][ T5847] bridge_slave_1: left promiscuous mode [ 160.294259][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.335903][ T5847] bridge_slave_0: left allmulticast mode [ 160.367959][ T5847] bridge_slave_0: left promiscuous mode [ 160.375912][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.651650][ T5864] Bluetooth: hci2: command tx timeout [ 161.218985][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.254346][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.357226][ T5847] bond0 (unregistering): Released all slaves [ 161.804337][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.638002][ T5847] hsr_slave_0: left promiscuous mode [ 162.660977][ T5847] hsr_slave_1: left promiscuous mode [ 162.690861][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.710483][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.724540][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.734706][ T5864] Bluetooth: hci2: command tx timeout [ 162.742824][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.768945][ T5847] veth1_macvtap: left promiscuous mode [ 162.775592][ T5847] veth0_macvtap: left promiscuous mode [ 162.786263][ T5847] veth1_vlan: left promiscuous mode [ 162.794149][ T5847] veth0_vlan: left promiscuous mode [ 163.120581][ T5847] team0 (unregistering): Port device team_slave_1 removed [ 163.148705][ T5847] team0 (unregistering): Port device team_slave_0 removed [ 163.329250][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.895621][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.911776][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.928220][ T6554] bridge_slave_0: entered allmulticast mode [ 163.941533][ T6554] bridge_slave_0: entered promiscuous mode [ 163.993001][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.023650][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.041885][ T6554] bridge_slave_1: entered allmulticast mode [ 164.067240][ T6554] bridge_slave_1: entered promiscuous mode [ 164.388978][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.486288][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.605947][ T6640] zswap: compressor û not available [ 164.708026][ T6554] team0: Port device team_slave_0 added [ 164.758872][ T6554] team0: Port device team_slave_1 added [ 164.811369][ T5864] Bluetooth: hci2: command tx timeout [ 165.184988][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.203242][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.248171][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.274212][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.290565][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.348126][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.400157][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 166.159031][ T6554] hsr_slave_0: entered promiscuous mode [ 166.173762][ T6554] hsr_slave_1: entered promiscuous mode [ 166.185242][ T6554] debugfs: 'hsr0' already exists in 'hsr' [ 166.201570][ T6554] Cannot create hsr debugfs directory [ 166.891675][ T5864] Bluetooth: hci2: command tx timeout [ 167.283361][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 171.319653][ T6554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.385558][ T6554] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.411003][ T6554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.487993][ T6554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.549167][ T6554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.589420][ T6554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.617488][ T6554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.664048][ T6554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.316020][ T6799] FAULT_INJECTION: forcing a failure. [ 172.316020][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 172.352306][ T6799] CPU: 1 UID: 0 PID: 6799 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 172.352354][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.352375][ T6799] Call Trace: [ 172.352386][ T6799] [ 172.352399][ T6799] dump_stack_lvl+0x100/0x190 [ 172.352445][ T6799] should_fail_ex.cold+0x5/0xa [ 172.352484][ T6799] should_failslab+0xc2/0x120 [ 172.352534][ T6799] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 172.352585][ T6799] ? __d_alloc+0x35/0xa50 [ 172.352630][ T6799] __d_alloc+0x35/0xa50 [ 172.352673][ T6799] d_alloc_pseudo+0x1c/0xc0 [ 172.352722][ T6799] alloc_file_pseudo+0x118/0x290 [ 172.352768][ T6799] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 172.352815][ T6799] ? alloc_fd+0x471/0x7a0 [ 172.352865][ T6799] sock_alloc_file+0x50/0x210 [ 172.352923][ T6799] __sys_socket+0x1c0/0x260 [ 172.352962][ T6799] ? exc_page_fault+0x6f/0xd0 [ 172.353006][ T6799] ? __pfx___sys_socket+0x10/0x10 [ 172.353058][ T6799] __x64_sys_socket+0x72/0xb0 [ 172.353097][ T6799] ? lockdep_hardirqs_on+0x78/0x100 [ 172.353143][ T6799] do_syscall_64+0x115/0x840 [ 172.353188][ T6799] ? clear_bhb_loop+0x40/0x90 [ 172.353231][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.353267][ T6799] RIP: 0033:0x7fe53c59f887 [ 172.353295][ T6799] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.353326][ T6799] RSP: 002b:00007fe53d536f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 172.353357][ T6799] RAX: ffffffffffffffda RBX: 00007fe53c825fa0 RCX: 00007fe53c59f887 [ 172.353378][ T6799] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 172.353398][ T6799] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 172.353418][ T6799] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 172.353438][ T6799] R13: 00007fe53c826038 R14: 00007fe53c825fa0 R15: 00007ffc59cfe9b8 [ 172.353481][ T6799] [ 174.538451][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.969564][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.048065][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.055398][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.222511][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.229811][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.454963][ T6554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.468910][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.062276][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.513305][ T6554] veth0_vlan: entered promiscuous mode [ 179.543029][ T6554] veth1_vlan: entered promiscuous mode [ 179.605644][ T6554] veth0_macvtap: entered promiscuous mode [ 179.642649][ T6554] veth1_macvtap: entered promiscuous mode [ 179.694540][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.725392][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.773398][ T6068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.822233][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.912357][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.912422][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.007670][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.035089][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.299704][ T5855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.308918][ T5855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.705541][ T6980] i2c i2c-0: new_device: Missing parameters [ 184.987846][ T7008] input: f¬ as /devices/virtual/input/input5 [ 188.807839][ T7073] FAULT_INJECTION: forcing a failure. [ 188.807839][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 188.883507][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) [ 188.883552][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.883573][ T7073] Call Trace: [ 188.883584][ T7073] [ 188.883596][ T7073] dump_stack_lvl+0x100/0x190 [ 188.883642][ T7073] should_fail_ex.cold+0x5/0xa [ 188.883680][ T7073] should_failslab+0xc2/0x120 [ 188.883729][ T7073] kmem_cache_alloc_noprof+0x91/0x6a0 [ 188.883775][ T7073] ? do_getname+0x35/0x390 [ 188.883820][ T7073] do_getname+0x35/0x390 [ 188.883860][ T7073] do_sys_openat2+0xc7/0x1e0 [ 188.883899][ T7073] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.883952][ T7073] ? find_held_lock+0x2b/0x80 [ 188.883997][ T7073] __x64_sys_openat+0x12d/0x210 [ 188.884038][ T7073] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.884091][ T7073] do_syscall_64+0x115/0x840 [ 188.884131][ T7073] ? clear_bhb_loop+0x40/0x90 [ 188.884174][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.884209][ T7073] RIP: 0033:0x7fe53c59e019 [ 188.884236][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.884268][ T7073] RSP: 002b:00007fe53d4d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.884299][ T7073] RAX: ffffffffffffffda RBX: 00007fe53c826270 RCX: 00007fe53c59e019 [ 188.884320][ T7073] RDX: 000000000008a2c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 188.884339][ T7073] RBP: 00007fe53c63500c R08: 0000000000000000 R09: 0000000000000000 [ 188.884358][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.884375][ T7073] R13: 00007fe53c826308 R14: 00007fe53c826270 R15: 00007ffc59cfe9b8 [ 188.884411][ T7073] [ 188.894926][ T7076] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 190.373844][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 193.427364][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 193.525046][ T7151] FAULT_INJECTION: forcing a failure. [ 193.525046][ T7151] name fail_futex, interval 1, probability 0, space 0, times 1 [ 193.573100][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(full) [ 193.573144][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.573163][ T7151] Call Trace: [ 193.573175][ T7151] [ 193.573188][ T7151] dump_stack_lvl+0x100/0x190 [ 193.573232][ T7151] should_fail_ex.cold+0x5/0xa [ 193.573266][ T7151] ? __fput_deferred+0x217/0x4a0 [ 193.573314][ T7151] get_futex_key+0x1d2/0x14f0 [ 193.573353][ T7151] ? __pfx_get_futex_key+0x10/0x10 [ 193.573496][ T7151] ? putname+0xb1/0x110 [ 193.573543][ T7151] futex_wait_setup+0x91/0x540 [ 193.573604][ T7151] __futex_wait+0x19f/0x300 [ 193.573662][ T7151] ? __pfx___futex_wait+0x10/0x10 [ 193.573719][ T7151] ? futex_hash+0x311/0x400 [ 193.573756][ T7151] ? __pfx_futex_wake_mark+0x10/0x10 [ 193.573835][ T7151] ? __pfx_futex_hash+0x10/0x10 [ 193.573881][ T7151] futex_wait+0xe6/0x370 [ 193.573928][ T7151] ? __pfx_futex_wait+0x10/0x10 [ 193.573984][ T7151] ? putname+0xb1/0x110 [ 193.574019][ T7151] ? kmem_cache_free+0x127/0x6b0 [ 193.574055][ T7151] ? do_sys_openat2+0x1b6/0x1e0 [ 193.574106][ T7151] do_futex+0x265/0x440 [ 193.574145][ T7151] ? __pfx_do_futex+0x10/0x10 [ 193.574180][ T7151] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.574228][ T7151] ? find_held_lock+0x2b/0x80 [ 193.574290][ T7151] __x64_sys_futex+0x34f/0x4d0 [ 193.574331][ T7151] ? __x64_sys_openat+0x12d/0x210 [ 193.574378][ T7151] ? __pfx___x64_sys_futex+0x10/0x10 [ 193.574434][ T7151] do_syscall_64+0x115/0x840 [ 193.574481][ T7151] ? clear_bhb_loop+0x40/0x90 [ 193.574525][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.574562][ T7151] RIP: 0033:0x7f48c5f9e019 [ 193.574591][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.574623][ T7151] RSP: 002b:00007f48c3df40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.574655][ T7151] RAX: ffffffffffffffda RBX: 00007f48c6226278 RCX: 00007f48c5f9e019 [ 193.574678][ T7151] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f48c6226278 [ 193.574698][ T7151] RBP: 00007f48c6226270 R08: 0000000000000000 R09: 0000000000000000 [ 193.574719][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.574739][ T7151] R13: 00007f48c6226308 R14: 00007ffee1f8efa0 R15: 00007ffee1f8f088 [ 193.574783][ T7151] [ 194.494736][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.501390][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.580715][ T7171] i2c i2c-0: new_device: Missing parameters [ 198.572793][ T7230] FAULT_INJECTION: forcing a failure. [ 198.572793][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 198.618275][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT(full) [ 198.618319][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.618339][ T7230] Call Trace: [ 198.618349][ T7230] [ 198.618362][ T7230] dump_stack_lvl+0x100/0x190 [ 198.618410][ T7230] should_fail_ex.cold+0x5/0xa [ 198.618449][ T7230] should_failslab+0xc2/0x120 [ 198.618498][ T7230] kmem_cache_alloc_noprof+0x91/0x6a0 [ 198.618543][ T7230] ? do_getname+0x35/0x390 [ 198.618594][ T7230] do_getname+0x35/0x390 [ 198.618640][ T7230] do_sys_openat2+0xc7/0x1e0 [ 198.618685][ T7230] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.618734][ T7230] ? find_held_lock+0x2b/0x80 [ 198.618788][ T7230] __x64_sys_openat+0x12d/0x210 [ 198.618838][ T7230] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.618917][ T7230] do_syscall_64+0x115/0x840 [ 198.618965][ T7230] ? clear_bhb_loop+0x40/0x90 [ 198.619008][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.619046][ T7230] RIP: 0033:0x7f9b1b59e019 [ 198.619074][ T7230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.619107][ T7230] RSP: 002b:00007f9b1c400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.619136][ T7230] RAX: ffffffffffffffda RBX: 00007f9b1b825fa0 RCX: 00007f9b1b59e019 [ 198.619156][ T7230] RDX: 000000000008a2c0 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 198.619175][ T7230] RBP: 00007f9b1b63500c R08: 0000000000000000 R09: 0000000000000000 [ 198.619192][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.619209][ T7230] R13: 00007f9b1b826038 R14: 00007f9b1b825fa0 R15: 00007ffca5a938f8 [ 198.619249][ T7230] [ 202.257786][ T7312] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 206.168502][ T7376] FAULT_INJECTION: forcing a failure. [ 206.168502][ T7376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 206.194460][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) [ 206.194501][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.194520][ T7376] Call Trace: [ 206.194531][ T7376] [ 206.194543][ T7376] dump_stack_lvl+0x100/0x190 [ 206.194585][ T7376] should_fail_ex.cold+0x5/0xa [ 206.194620][ T7376] _copy_to_user+0x32/0xd0 [ 206.194674][ T7376] fs_name+0x25e/0x4a0 [ 206.194716][ T7376] __x64_sys_sysfs+0xe6/0x120 [ 206.194756][ T7376] do_syscall_64+0x115/0x840 [ 206.194799][ T7376] ? clear_bhb_loop+0x40/0x90 [ 206.194837][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.194871][ T7376] RIP: 0033:0x7f5f4a39e019 [ 206.194897][ T7376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.194927][ T7376] RSP: 002b:00007f5f4b20c028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 206.194958][ T7376] RAX: ffffffffffffffda RBX: 00007f5f4a626360 RCX: 00007f5f4a39e019 [ 206.194979][ T7376] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 206.194998][ T7376] RBP: 00007f5f4b20c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.195020][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.195038][ T7376] R13: 00007f5f4a6263f8 R14: 00007f5f4a626360 R15: 00007fff8d5b8ac8 [ 206.195079][ T7376] [ 208.762426][ T7407] BUG: unable to handle page fault for address: ffffc9001b651fe8 [ 208.770232][ T7407] #PF: supervisor write access in kernel mode [ 208.776346][ T7407] #PF: error_code(0x0002) - not-present page [ 208.782366][ T7407] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 77df1067 PTE 0 [ 208.789910][ T7407] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 208.795333][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 208.804571][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.814843][ T7407] RIP: 0010:write_comp_data+0x75/0x90 [ 208.820277][ T7407] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 208.839929][ T7407] RSP: 0018:ffffc90004e57e78 EFLAGS: 00050257 [ 208.846047][ T7407] RAX: ffffc9001b652000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 208.854072][ T7407] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 208.862084][ T7407] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 208.870085][ T7407] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 208.878123][ T7407] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 208.886135][ T7407] FS: 00007f5f4b1eb6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 208.895106][ T7407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.901739][ T7407] CR2: ffffc9001b651fe8 CR3: 000000007a8ee000 CR4: 00000000003526f0 [ 208.909745][ T7407] Call Trace: [ 208.913047][ T7407] [ 208.916004][ T7407] rseq_register+0x115/0x350 [ 208.920649][ T7407] __x64_sys_rseq+0x1b8/0x2e0 [ 208.925379][ T7407] do_syscall_64+0x115/0x840 [ 208.930019][ T7407] ? clear_bhb_loop+0x40/0x90 [ 208.934734][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.940666][ T7407] RIP: 0033:0x7f5f4a39e019 [ 208.945109][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.964760][ T7407] RSP: 002b:00007f5f4b1eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 208.973209][ T7407] RAX: ffffffffffffffda RBX: 00007f5f4a626450 RCX: 00007f5f4a39e019 [ 208.981211][ T7407] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 208.989217][ T7407] RBP: 00007f5f4a43500c R08: 0000000000000000 R09: 0000000000000000 [ 208.997226][ T7407] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 209.005279][ T7407] R13: 00007f5f4a6264e8 R14: 00007f5f4a626450 R15: 00007fff8d5b8ac8 [ 209.013302][ T7407] [ 209.016360][ T7407] Modules linked in: [ 209.020294][ T7407] CR2: ffffc9001b651fe8 [ 209.024478][ T7407] ---[ end trace 0000000000000000 ]--- [ 209.029955][ T7407] RIP: 0010:write_comp_data+0x75/0x90 [ 209.035403][ T7407] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 209.055054][ T7407] RSP: 0018:ffffc90004e57e78 EFLAGS: 00050257 [ 209.061159][ T7407] RAX: ffffc9001b652000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 209.069162][ T7407] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 209.077159][ T7407] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 209.085155][ T7407] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 209.093158][ T7407] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 209.101165][ T7407] FS: 00007f5f4b1eb6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 209.110135][ T7407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.116747][ T7407] CR2: ffffc9001b651fe8 CR3: 000000007a8ee000 CR4: 00000000003526f0 [ 209.124763][ T7407] Kernel panic - not syncing: Fatal exception [ 209.131487][ T7407] Kernel Offset: disabled [ 209.135832][ T7407] Rebooting in 86400 seconds..