last executing test programs:

7m53.90052528s ago: executing program 0 (id=286):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
set_mempolicy$auto(0x1, &(0x7f0000000180)=0x2, 0x6)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x4000000000, 0x2003f2, 0xfffffff6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
madvise$auto(0x0, 0x200007, 0x19)
userfaultfd$auto(0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
madvise$auto(0x7, 0x338d, 0x6)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189500, 0x0)
socket(0x2c, 0x800, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)

7m49.830762578s ago: executing program 0 (id=301):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0)
close_range$auto(0x2, 0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x801, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x8040)
r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2200, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
r3 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r3, 0x7, 0x0, &(0x7f00000000c0)=0x8, 0x0, 0x81)
mmap$auto(0x0, 0xbb09, 0x2000000df, 0x20000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2002, 0x0)
close_range$auto(r2, r0, 0xffffffff)
r4 = io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1d, 0x5, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(r4, 0x5423, &(0x7f0000000140)="c52418ade777b29a6b5eb37cf867f0cb761d6ff5f138996b8d790c66823e3161754a49ebcb8eafaf22389a203001376928c8657290e0f6f84385368e21618cb2f31085c5b2d649f70ccfd2a8cdedd5f4a048db6bf149b936b5e14f334baef14f50c677e061febbb17654e8aed3165ee3ffaa88ef39ff85ff65f2efe48af96062a99ea9a7d9315943aaf74b774df6b2e9775fee111bab1e025b92710fad883f0caf23161f6f554fd72af13a93e237446d8150846f9799e547e10ef5ff9e883bca4a3dddb436fd608eae4b2cfabcf64ab5ba5845f7435b8d91c21ea8")
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x2, 0x88)
readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da)
bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0xfffe, 0x1}, 0x6d)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0xfdf3)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
epoll_create$auto(0x8800001)

7m48.167043783s ago: executing program 0 (id=311):
mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = getpid()
creat$auto(&(0x7f0000000680)='./file0\x00', 0x3)
pidfd_open$auto(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x4, 0x2, 0x400, 0x0)
socket(0xa, 0x801, 0x84)
r2 = io_uring_setup$auto(0x6, 0x0)
r3 = socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=<r5=>r1}, 0xa3)
bpf$auto(0x4, &(0x7f0000000040)=@link_update={r4, @new_map_fd=r5, 0x1, @old_prog_fd=r2}, 0x9)

7m46.97480757s ago: executing program 0 (id=313):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_apple/uevent\x00', 0xb02, 0x0)
vmsplice$auto(0xffffffffffffffff, 0x0, 0x9347, 0xe1)
r1 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8905, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/rc_rateidx_mask_5ghz\x00', 0x2600, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7400fcdbdf250800000008000b00000000080009000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fedbdf250100000008000a000300000008001800350d0000080018000300000006000200060000000c001600080000000000000008000a000400000006000e00c1000000"], 0x50}}, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty38\x00', 0x301, 0x0)
write$auto_tty_fops_tty_io(r4, &(0x7f0000000080)="976f09bd689a850edbe36136c8515f5b3331280bb0b4ba0edd7932ab185cca0dd500a70a2c064833fd9b4b", 0x2b)
sendfile$auto(r0, r0, 0x0, 0xa41)

7m46.605923817s ago: executing program 0 (id=316):
mmap$auto(0x0, 0x4000002020009, 0x9, 0x13, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (rerun: 32)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getrlimit$auto(0x3, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x101, 0xffffffffffff0005, 0x19) (async, rerun: 32)
lgetxattr$auto(0x0, 0x0, 0x0, 0x100) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) (async)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0)
r3 = fsmount$auto(r2, 0x5, 0x1ff)
sendfile$auto(r3, r0, 0x0, 0x400000000006) (async, rerun: 64)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 64)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) (async, rerun: 64)
init_module$auto(0x0, 0xffff9, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x8000000000000000, 0x2) (async)
madvise$auto(0x0, 0x2000000080000001, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async)
pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0)

7m45.779539682s ago: executing program 0 (id=319):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
faccessat$auto(0xffffffffffffffff, 0x0, 0x4)
socket(0x2, 0x3, 0xa)

7m30.59655571s ago: executing program 32 (id=319):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
faccessat$auto(0xffffffffffffffff, 0x0, 0x4)
socket(0x2, 0x3, 0xa)

4m16.569305482s ago: executing program 4 (id=1097):
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = eventfd2$auto(0x51000000, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8)
ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0)=0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_SET(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000580)={0x30, r7, 0x601, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_KEY={0x3a, 0x1, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="ef6735f5058af96b26651160dfbb140872"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$auto_OVS_FLOW_CMD_SET(r4, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r8 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop7/hctx0/sched_tags_bitmap\x00', 0x2, 0x0)
pread64$auto(r8, 0x0, 0x3, 0x8)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)

4m15.158865722s ago: executing program 4 (id=1103):
mmap$auto(0x1, 0x2020009, 0x3, 0xe91, 0xffffffffffffffff, 0x8002)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = epoll_create$auto(0x3a)
epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x333480, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
ioctl$auto(r4, 0x540a, 0x0)
unshare$auto(0x40000080)
open(&(0x7f00000000c0)='./file0\x00', 0x4020c0, 0x140)
r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0)
semctl$auto(0x201, 0x2, 0x13, 0x1)
setsockopt$auto(r0, 0x10000000084, 0x11, 0x0, 0x8)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0xa, 0x5, 0x20000084)
init_module$auto(0x0, 0xffff9, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0)
r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r6, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

4m13.780281784s ago: executing program 4 (id=1107):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram0\x00', 0xdd01, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x22000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ieee80211/phy2/rfkill4/state\x00', 0x4382, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
socket(0x2, 0x5, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000600", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25050000000800010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/27t\x00', 0x545102, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0)
r5 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802)
write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
io_uring_setup$auto(0x101, 0x0)
ioctl$auto(0x3, 0x5420, 0x38)
socket(0x29, 0x2, 0x0)
socket(0x2, 0x5, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xb, 0x101, 0x948b, 0x3, 0xfffffffffffffff8, 0x2, 0x3, 0x62, 0x80000000, 0x4000000000000004, 0x80000001, 0x6, 0x100000000000005, 0x5]}, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0)
write$auto(r2, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kC\xec\xd7\x88TO\xd6\x8e\x83\xa9\v\xf2\xc8Y\x1c\xd9}\xf9S\x8e\xdf\'O\xc5\xa2tH\x83m\xce<\x85\x9e\xe4\xfe\x88\xb6\xb0\xa0\xb2;\xae\xf2\x02\x00\xb08\xbe\xf0\x1ct\xa4\xe8<\xbb\x83\xebw6\xf6\xd3\t\xcb\xd6\xd7\xa5\bU\f\xb6v\x99r\x87\xafZ\xdfrY\xde\xb1\xd0\vT`\x92\nE>\xf6q1\xf2\\\n\x94\x86#\x93(\x83\r2\x95\xc5[\x8b\x018\x19\xe3 \x034\xf1ux\xa8\x1a\x87o\xe4\x98\xc8\x85\xae\xce\xc8.\xcf:\xd8\x92}\xfd67\x93|\xdc\x06\x1cE\xb1+\xc0}\x8e{Si\xbfxV5\xfc1\f\x02\xc61\x8cY\x95~\xc5A~\xf5\xcc\x82\xc9\xbb\xe8\x1a\xab\x82\x1a\xaf\xd4\x02\x7f\xdb-\xac', 0x81)
r6 = getsockopt$auto(r1, 0x5, 0x1, &(0x7f0000000040)='/dev/ram14\x00', &(0x7f00000000c0)=0x1000)
ioctl$auto_BLKFRASET(r1, 0x1264, 0x0)
ioctl$auto_BLKRRPART(r0, 0x125f, 0x700000000000000)
fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0xac4e, &(0x7f0000000100)='/dev/ram14\x00', &(0x7f0000000540)="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", 0x4)
fcntl$auto_F_GETOWNER_UIDS(r6, 0x11, 0x7fffffff)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

4m12.479060815s ago: executing program 4 (id=1110):
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range$auto(0x2, 0xa, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x2, "0100000000000000"}, 0xc)

4m11.313133431s ago: executing program 4 (id=1115):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000)
getsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x47, 0x23, &(0x7f0000000140)='-\x00', &(0x7f0000000280)=0x80000000)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x181, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f00000002c0)="65507307ff6587a725ca87720ef9769f20592e77a8977acfd064c712782b89f145862d9956b07a7c40f8a41e4c4cd45ac0bdf9b7d5cf78f6b7b354a69aaecc3922f2e2df504d01273dd7e6e3c25f55a98d1f81", 0x53)
r3 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r4 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000340)={@_si_pad}, 0x0, &(0x7f00000003c0)={{0x8e90, 0x8000000000000000}, {0x241, 0x9}, 0xff, 0x0, 0xa, 0x81, 0xd4, 0xffffffffffffffd9, 0x200, 0x0, 0x9, 0x1, 0xa, 0x9, 0x6, 0xb})
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r4, 0x9, 0x9)
fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r3, 0x8, &(0x7f0000000040)='\x00', 0x0, 0x40)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09536be2e0c7d3b3c20066021edf355edf0090bd7000fbdbdf25023483b9"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfffffffe, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0)
madvise$auto(0x0, 0x9, 0x40000000)
fchmod$auto(r5, 0x7)
r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0xa00, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000080)="d7c788")

4m10.921575743s ago: executing program 4 (id=1116):
rt_sigtimedwait$auto(0x0, &(0x7f0000000300)={@siginfo_0_0={0x0, 0x3, 0x0, @_sigpoll={0xc8}}}, 0x0, 0x8)
r0 = io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0xf5e, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
r1 = socket(0x9, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0x9, &(0x7f0000000540)="5084ffe0930de979c68aaf3bd2559391700897010e984c66e28c38f519e234832be890a23de5efd97afbe5ab45ad182cab27bb463d338ce7f63aca58c9", 0x5, 0x40001000}, 0x5}, 0x2, 0x100)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
cachestat$auto(r3, 0x0, 0x0, 0x0)
r4 = ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, &(0x7f0000000040)=0x2)
write$auto(0x3, 0x0, 0xfdf3)
r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0)
rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0xab0, 0x0, 0x8000003)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_mempolicy$auto(0x0, &(0x7f0000000100)=0x6, 0xffff, 0x2, 0x2)
r8 = ioctl$auto_NS_GET_NSTYPE(r0, 0xb703, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000740)={r6, &(0x7f0000000440)="373abf563d9e1b7d1fcab508483ddbdd5f7940df69c1b7e11b1290bf36df6d1608cd4662fea7ce1ce57164d809dfee2d97f194f6a90df977491fab453b479be2cc04cea505125da1c21b576609e5d16ce279651cc1cf700dc66cb64f02e419d612cf4facc25e8904bb37eb895016fbc45b337c96e41b702f6f7b6d0a68b310f785f6e2c2bddc992aa9604e9dd5371c4e10bdf5260d953923d501ed787cde894953331a328a1d8c882ba2f5558c0a534f44e073ce07e51d6a9d5d4ace11aa758101ccce1e459c3382e1", 0x0, &(0x7f00000007c0)="a101a6449fabfeb4a0732b4eb032c897ac9e3d2912bb6dbb95c1da3e95932ee7ddfe5749b8d98d0ba738055102adde6d58e8d0fce47d2b4afef1f6072e865e949447f6c65e7773f2051863821a93c3d5f8a5b00b137a680ce1b7a49e13696ba012f039d33f6af0000040000000a7a3bacb9963d7e29572d5905d320e4847ec4f92e0ef1ed50f16941bfa5d29385be5ea18e564f4fcdab726cf48e53707753cc49c4c76025515ab4add245418e82591dbd5d4", 0x9, &(0x7f0000000600)="68ea90ca60c4429713277eb9b5e77b461f70dc7230909882eeba5b5a10c74979e2c40931d9e562b3fffd5422a0e8b245f9c93541f10c68384734eaf66ace5b0a6c4521bd399b928934a891d2c0eb9de1384c2ec5143aff51ae58ff09fdd1500ce09ce14fec347f5c7422f8d90ce88bb62dbeb63707a06655fae2955c880b5bd24df2d043b6f0200ed85be3dad26f2ba6ca8b9d6c0dfa24656f085ec109467bb96d6cdd3092ada5991565c5b2d465636088243e9580941cedeb058800ee51a35c917b42a257987a933ffbf7", &(0x7f0000000780)=0x100})
getsockopt$auto_SO_TIMESTAMP_OLD(r4, 0x8, 0x1d, &(0x7f00000003c0)='/dev/ptyaf\x00', &(0x7f0000000400)=0x47b)
ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000280)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x285, 0xff, 0x5, 0xd, 0xfbfffffe, 0x6, 0x7fb, 0x1, 0x5})
select$auto(0x3ff, &(0x7f0000000100)={[0x3, 0x7ffffffffffffffc, 0x80000000, 0x101, 0x4, 0x1, 0x8000, 0x3, 0xffff, 0x6, 0x4000000100, 0xf65, 0x5, 0x6, 0x9, 0x2]}, &(0x7f0000000180)={[0x7f, 0x4, 0x5fb8, 0x21, 0xffffffffffff51ad, 0x5, 0x7, 0x3, 0x100, 0x7fffffff, 0x6, 0x80000001, 0xff, 0x31, 0x40400000, 0x81]}, &(0x7f0000000200)={[0x9, 0x2, 0x2, 0xffffffff, 0x7394, 0x7f, 0xffffffffffffffff, 0x80000001, 0x7, 0x4, 0x9, 0x39, 0xd2a4, 0xda, 0x1, 0x4]}, &(0x7f0000000000)={0x8000000000200001, 0x5})
close_range$auto(r5, r5, 0x3)
rt_sigtimedwait$auto(&(0x7f00000000c0)={0x3}, &(0x7f0000000300)={@_si_pad}, &(0x7f0000000380)={0x1d, 0x4}, 0x8)

3m55.785785194s ago: executing program 33 (id=1116):
rt_sigtimedwait$auto(0x0, &(0x7f0000000300)={@siginfo_0_0={0x0, 0x3, 0x0, @_sigpoll={0xc8}}}, 0x0, 0x8)
r0 = io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0xf5e, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
r1 = socket(0x9, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0x9, &(0x7f0000000540)="5084ffe0930de979c68aaf3bd2559391700897010e984c66e28c38f519e234832be890a23de5efd97afbe5ab45ad182cab27bb463d338ce7f63aca58c9", 0x5, 0x40001000}, 0x5}, 0x2, 0x100)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
cachestat$auto(r3, 0x0, 0x0, 0x0)
r4 = ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, &(0x7f0000000040)=0x2)
write$auto(0x3, 0x0, 0xfdf3)
r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0)
rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0xab0, 0x0, 0x8000003)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
get_mempolicy$auto(0x0, &(0x7f0000000100)=0x6, 0xffff, 0x2, 0x2)
r8 = ioctl$auto_NS_GET_NSTYPE(r0, 0xb703, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000740)={r6, &(0x7f0000000440)="373abf563d9e1b7d1fcab508483ddbdd5f7940df69c1b7e11b1290bf36df6d1608cd4662fea7ce1ce57164d809dfee2d97f194f6a90df977491fab453b479be2cc04cea505125da1c21b576609e5d16ce279651cc1cf700dc66cb64f02e419d612cf4facc25e8904bb37eb895016fbc45b337c96e41b702f6f7b6d0a68b310f785f6e2c2bddc992aa9604e9dd5371c4e10bdf5260d953923d501ed787cde894953331a328a1d8c882ba2f5558c0a534f44e073ce07e51d6a9d5d4ace11aa758101ccce1e459c3382e1", 0x0, &(0x7f00000007c0)="a101a6449fabfeb4a0732b4eb032c897ac9e3d2912bb6dbb95c1da3e95932ee7ddfe5749b8d98d0ba738055102adde6d58e8d0fce47d2b4afef1f6072e865e949447f6c65e7773f2051863821a93c3d5f8a5b00b137a680ce1b7a49e13696ba012f039d33f6af0000040000000a7a3bacb9963d7e29572d5905d320e4847ec4f92e0ef1ed50f16941bfa5d29385be5ea18e564f4fcdab726cf48e53707753cc49c4c76025515ab4add245418e82591dbd5d4", 0x9, &(0x7f0000000600)="68ea90ca60c4429713277eb9b5e77b461f70dc7230909882eeba5b5a10c74979e2c40931d9e562b3fffd5422a0e8b245f9c93541f10c68384734eaf66ace5b0a6c4521bd399b928934a891d2c0eb9de1384c2ec5143aff51ae58ff09fdd1500ce09ce14fec347f5c7422f8d90ce88bb62dbeb63707a06655fae2955c880b5bd24df2d043b6f0200ed85be3dad26f2ba6ca8b9d6c0dfa24656f085ec109467bb96d6cdd3092ada5991565c5b2d465636088243e9580941cedeb058800ee51a35c917b42a257987a933ffbf7", &(0x7f0000000780)=0x100})
getsockopt$auto_SO_TIMESTAMP_OLD(r4, 0x8, 0x1d, &(0x7f00000003c0)='/dev/ptyaf\x00', &(0x7f0000000400)=0x47b)
ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000280)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x285, 0xff, 0x5, 0xd, 0xfbfffffe, 0x6, 0x7fb, 0x1, 0x5})
select$auto(0x3ff, &(0x7f0000000100)={[0x3, 0x7ffffffffffffffc, 0x80000000, 0x101, 0x4, 0x1, 0x8000, 0x3, 0xffff, 0x6, 0x4000000100, 0xf65, 0x5, 0x6, 0x9, 0x2]}, &(0x7f0000000180)={[0x7f, 0x4, 0x5fb8, 0x21, 0xffffffffffff51ad, 0x5, 0x7, 0x3, 0x100, 0x7fffffff, 0x6, 0x80000001, 0xff, 0x31, 0x40400000, 0x81]}, &(0x7f0000000200)={[0x9, 0x2, 0x2, 0xffffffff, 0x7394, 0x7f, 0xffffffffffffffff, 0x80000001, 0x7, 0x4, 0x9, 0x39, 0xd2a4, 0xda, 0x1, 0x4]}, &(0x7f0000000000)={0x8000000000200001, 0x5})
close_range$auto(r5, r5, 0x3)
rt_sigtimedwait$auto(&(0x7f00000000c0)={0x3}, &(0x7f0000000300)={@_si_pad}, &(0x7f0000000380)={0x1d, 0x4}, 0x8)

3m53.785033121s ago: executing program 2 (id=1170):
mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = socketcall$auto(0x8000, 0x0) (async)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0x3, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3) (async)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40101}, 0x40d1) (async)
ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
close_range$auto(0x2, 0x8, 0x0)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async)
write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) (async)
r6 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0)
read$auto(r6, 0x0, 0x9) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
madvise$auto(0x0, 0x1010001, 0x100000003) (async)
madvise$auto(0x1000, 0x400050, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) (rerun: 64)

3m53.015985848s ago: executing program 2 (id=1171):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x8000001)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000000000), 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0x6, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0xb, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x9})
setresgid$auto(0x0, 0xffffffffffffffff, r4)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x86, 0x2, 0x1a7b870c, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x9, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x7, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = socket(0x10, 0x2, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0)
sendfile$auto(r6, r6, 0x0, 0x8080000001)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x8044)
close_range$auto(0x2, r0, 0x0)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0)
fanotify_init$auto(0x65, 0x2)

3m52.764592797s ago: executing program 2 (id=1172):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = socket(0x23, 0x80805, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
fanotify_init$auto(0x5, 0x2000000000002) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) (async, rerun: 64)
socket(0x2, 0x1, 0x106) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2)
socketpair$auto(0xb, 0x9, 0x800, 0x0) (async)
r1 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/stations/08:02:11:00:00:00/rx_duplicates\x00', 0x2, 0x0)
getdents64$auto(r1, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, "000322d9ac270dff94f12db277349c34772e3771c1a4946a58f1a23ff22f9433e8c86c845c8717f6cca0f173e0e6d6be77f2789dd689937cf9ef04de1cf8eb3ca2d7ec0058e4f75fc22fcf3dc20ce9"}, 0x7) (async)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0x1ff) (async, rerun: 32)
mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
ioctl$auto(0x3, 0xc060ff0b, r0)

3m51.532173925s ago: executing program 2 (id=1175):
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, 0x0)
mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff)
r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6)
r3 = getsockopt$auto_SO_PEERPIDFD(r2, 0x312a, 0x4d, &(0x7f0000000040)='.:**&&${\x00', &(0x7f0000000100)=0xdc0)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x800)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
fcntl$auto_F_OFD_SETLK(r2, 0x25, 0x101)
openat$auto(r2, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff)
unlinkat$auto(r2, &(0x7f00000001c0)='./file0\x00', 0x0)

3m46.570597727s ago: executing program 2 (id=1182):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x48080, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000002c0))
connect$auto(r0, &(0x7f0000000140)=@isdn={0x22, 0x9, 0x4, 0xa, 0x59}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
open(&(0x7f0000000000)='./file0\x00', 0x20100, 0xd0)
getxattrat$auto(r0, &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f00000001c0)='-^.\x00', &(0x7f0000000200)={0x0, 0x4, 0x4}, 0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x200000, 0x2000000005, 0x6)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r2, 0x0, 0x3f1)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000540)=0x2)
syz_clone3(&(0x7f00000005c0)={0x100100000, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x27}, &(0x7f0000000340)=""/91, 0x5b, &(0x7f00000003c0)=""/193, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3], 0x7}, 0x58)
getdents$auto(r2, 0x0, 0xa2b0)

3m39.504954773s ago: executing program 2 (id=1190):
mmap$auto(0x0, 0x20009, 0x4000000000dd, 0x8000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (fail_nth: 8)
shutdown$auto(0x200000003, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r0=>0x0)
connect$auto(0x3, &(0x7f00000018c0)=@nfc={0x27, r0, 0x1, 0x3}, 0x55)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/43, 0x2b)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9)

3m23.557930764s ago: executing program 34 (id=1190):
mmap$auto(0x0, 0x20009, 0x4000000000dd, 0x8000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x88)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (fail_nth: 8)
shutdown$auto(0x200000003, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r0=>0x0)
connect$auto(0x3, &(0x7f00000018c0)=@nfc={0x27, r0, 0x1, 0x3}, 0x55)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/43, 0x2b)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9)

1m34.613345613s ago: executing program 3 (id=1561):
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x101101, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
r1 = socketcall$auto(0xffe, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r3 = io_uring_setup$auto(0x6, 0x0)
ioctl$auto(0x3, 0x4008ae61, r1)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x2342, 0x0)
socket(0xa, 0x1, 0x100)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setsockopt$auto(r3, 0x80000, 0x485, 0xfffffffffffffffe, 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptye1\x00', 0x208002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffff7, 0x0, 0xfffffffe)
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, 0x0, 0x400c000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim1/power/runtime_suspended_time\x00', 0x9c0302, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x405, 0x0)
io_uring_register$auto(0x2, 0x8, &(0x7f0000000000), 0x3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

1m34.315007529s ago: executing program 3 (id=1563):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r0 = socket(0x2c, 0x5, 0x9)
bpf$auto(0x28be, &(0x7f0000000200)=@raw_tracepoint={0x4, r0, 0x0, 0x3}, 0x9)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffeffffffffefffd, 0x17)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x4, 0x0, 0x8, 0x7, 0xffffffffffffffff, 0x6, 0x8001}, 0x101)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2517290900a1cc8efe0000dbdf2501000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x9, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto(0x3, 0x540b, 0x1)
fcntl$auto_F_GETOWN(r1, 0x9, 0x8001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/ip_vs_stats_percpu\x00', 0x80300, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cf9de45386579c1522f6bac52184f6f5b5b35ab1daa4609898967145bc35fcbbc9c36007eb5f0eb1aa055a1dd186c3f29bd55479928162fe503d71c03d2a351e602934000bf44572b8db735afa04d851ecf0a5a21d69f20d4726936268043394cd674afabd6ea9fddb61110400"/122, @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250f0000000500380000000000050002002700000008001a000900000007000200145e2d0008003c00feffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x40005)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)

1m32.820804549s ago: executing program 3 (id=1569):
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score_adj\x00', 0x200000, 0x0)
socket(0xa, 0x1, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x50d00, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
socket(0x10, 0x6, 0x4)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01003780010000000000040000f70000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000)
close_range$auto(0x2, r1, 0x7fff)
socket(0x10, 0x2, 0xc)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='\x00\x00', 0x3)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket(0x22, 0x3, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
io_uring_setup$auto(0xf0, &(0x7f0000000200)={0x7, 0x1c, 0xd64, 0x4, 0x10001, 0x7, r2, [0xfffffffd, 0xfffffff7, 0x1000], {0x3ff, 0x3, 0x800001, 0x20d5, 0x95, 0xf4c, 0x6e8, 0x3, 0x65f29f6f}, {0x5, 0x1, 0xc5, 0x1, 0x5, 0xffffffff, 0x1000, 0x54f, 0xfffffffffffffff8}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0)
socket(0xa, 0x3, 0x100)

1m32.554701608s ago: executing program 3 (id=1570):
mmap$auto(0x2, 0x4020009, 0x9, 0x2c11, 0x401, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioperm$auto(0x4, 0xbc6, 0x81)
quotactl$auto(0x2, 0x0, 0x62a0, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
mmap$auto(0x4, 0x400007, 0x76cf, 0x100000009b72, r1, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0)
mmap$auto(0x0, 0x100000000010000, 0xe0, 0x11, r2, 0x28000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0xffffffffffff0005, 0x15)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/aiptek/bind\x00', 0x74b601, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/112, 0x70)
close_range$auto(r1, r0, 0x6)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x401782, 0x0)
sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x45)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x80000000, 0x2020009, 0x9, 0x252, 0xfffffffffffffffa, 0x4)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x240007, 0x19)
msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x608000, 0x0)
mmap$auto(0xd2b, 0x6, 0x5, 0xeb1, r4, 0x8000)
close_range$auto(r5, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop10\x00', 0x14f602, 0x0)

1m30.717165835s ago: executing program 3 (id=1573):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (rerun: 32)
ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, &(0x7f0000000240)="e8643ac695f1ef599b606763f61b36b614b4fc77f91bce8c66523370ffaea6ded428c7cead48e0ae2bfbc8a72cc1412b1db22e261fc8d74a9668ba95e2fbba87b7c9751988f1b0ee3b526da0a7226d45ae228b20238d16b3436a8007aef1cf08d6b9e2f124b124f9b0675390b0f08fcaa6e5d7690bde1fbd8dad5f7b04f521a5ffa6da5ad581bfdcde2bdb90aa86107b656c7e68ae3224e478df64bab784937d9ac9ef19cc2e2b8e07ff8bdb2da02e6fb779447ce0fe533dd73865bd5e42a4a8c6fbdba6ae6f832098e9d75239d8aba3d01b6fd69fe39af62f34975ce6") (async)
ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0)
read$auto(r1, 0x0, 0x1f40) (async, rerun: 64)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64)
futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) (async)
r2 = socket(0x15, 0x5, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) (async)
read$auto(0x3, 0x0, 0x80)
sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async, rerun: 64)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 64)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/11/smp_affinity\x00', 0x111842, 0x0) (async)
io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000040)="f71b", 0x5)

1m29.408319124s ago: executing program 3 (id=1578):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/250, 0x129)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
creat$auto(&(0x7f0000000180)='./file0\x00', 0x5)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000106, 0x400, 0x718c1257}]})
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000280), 0x181000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r0, 0x9)

1m14.329824022s ago: executing program 35 (id=1578):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/250, 0x129)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
creat$auto(&(0x7f0000000180)='./file0\x00', 0x5)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000106, 0x400, 0x718c1257}]})
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000280), 0x181000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r0, 0x9)

12.699808418s ago: executing program 5 (id=1824):
openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x40340, 0x0) (async)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
capset$auto(&(0x7f00000000c0)={0xff, <r1=>0x0}, &(0x7f0000000100)={0x5, 0xfb, 0x1})
sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000140)={0x1048, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1031, 0x25, 0x0, 0x1, [@nested={0x1010, 0x150, 0x0, 0x1, [@nested={0x4, 0x9f}, @generic="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", @typed={0x8, 0xc6, 0x0, 0x0, @pid=r1}]}, @typed={0x5, 0xe6, 0x0, 0x0, @str='\x00'}, @generic="eaaa59d82c77bf705d31d3766e304741bd3565f82f"]}]}, 0x1048}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001240), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001280), r4) (async)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001300), r2)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x74, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_FRAME={0x3e, 0x3, "f17b067c36a3dd94d41368bbaeec9b1f3b6dd47cafb442f1f575176c8ad8b1d33517716c613fa80416efa6aee9005b4121e153b84ae2019feca5"}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0xfffffff9}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0xc4) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x60, r3, 0x304, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "4972f73b19"}, @NL80211_ATTR_MESH_ID={0x14, 0x18, "e586b669fb8467094654c087702e1526"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_PMK={0x1d, 0xfe, "48712dceea8d5030f6f54d278d4f3ff54f9b9143a90305a94d"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x20008801) (async, rerun: 64)
pidfd_send_signal$auto(r4, 0xc43e, &(0x7f0000001580)={@siginfo_0_0={0x3419, 0x5, 0x1, @_timer={<r6=>0x0, 0x1, @sival_int, 0x3ea79bf}}}, 0xd) (async)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000001600), 0x80100, 0x0)
r7 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001640)='/dev/snd/pcmC1D0c\x00', 0x802, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r7, 0x40184152, &(0x7f00000017c0)={0x1, &(0x7f0000001780)=&(0x7f0000001680)="a4ca55c53626787eff791dfbd847d8f02f3f50e41d15b15bb7dcd18f91bdcbd0f4ccf68383542bce1e870dde0d832fd035bf3f12b6292d751534c3c47e04fc4eb57e7cf3f0ae99b4e8ee8584bb0272babda34fb6e23ed43698143fc5904dd4516229466d78c7785541980fd53f3eba770511baeab5ce87fb792ffce826362677888c2a9683c4090c35fc6897710fc9219cef8b3895b2806093bce2d0c14a1eee16ba41859ff597ae21cdd501288eb15f51bd760cd2b9fae5f1727f2c1241a6ea50fe2aa802438806755061c82fcdd1a0bc372c157ae70fb3666e939517efd567", 0x6}) (async)
rt_sigqueueinfo$auto_SIGCONT(r6, 0x12, &(0x7f0000001900)={@siginfo_0_0={0x7fff, 0x1, 0xffffff81, @_sigfault={&(0x7f0000001800)="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", @_addr_pkey={"1439f79201497d36", 0x4}}}}) (async)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000019c0), r2)
sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000002780)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002740)={&(0x7f0000001a00)={0xd04, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_IE_RIC={0x674, 0xb2, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x607, 0x7f, "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"}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, 'nl80211\x00'}, @NL80211_ATTR_MNTR_FLAGS={0x53, 0x17, "5eeb069d2395a4e7e89234ce92b8ea538aa25931453fa65717228813cc2b6d80ed298dcd11ada46f6c1533c61dc223dd48d313b57c0a5a1955e1128ca001151d40840b67d8c9cc75727d82000b86e9"}]}, 0xd04}, 0x1, 0x0, 0x0, 0x20008400}, 0x20008000) (async, rerun: 64)
r9 = prctl$auto(0x1, 0x81, r6, 0x9, 0x5) (rerun: 64)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000002880)={&(0x7f00000027c0), 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002900), r9) (rerun: 32)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r9, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x2c, r10, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x498a}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) (async, rerun: 64)
r11 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000002a00)=0x8b94) (rerun: 64)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r11, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_MM_TX_ENABLED={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20045000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/tty31\x00', 0x2, 0x0) (async, rerun: 64)
setsockopt$auto_SO_TIMESTAMPING_NEW(r11, 0x2aab, 0x41, &(0x7f0000002b80)='/dev/mapper/control\x00', 0x7) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_NEW_STATION(r9, &(0x7f0000003580)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003540)={&(0x7f0000002c00)={0x904, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x5e, 0x14e, "0192386b96e5ce81679741238204100af5325695a0d580c226f4e468acf5a4a3570aec857290d757f435ad56533fc41620c2a92bf605ab8cbb95660d24032fb2d03f9238cccda307614e5f9a78ec9d794258276036ad82448fa5"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0xb}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x87, 0x125, "45336322d1da90eab34996e5e22df3eea50d3c1cbdbfa56bb88c722e3b617b8916c2b31cb00bedc500f31be0d2f296db15b0ee0b287368c7fe04532788c590248073c2a0d32228018601b2b906221b3e587251ef93ea330ae3b17cc493fe62290cfdfadc8b06e11650dc13ca5b867046d77ca20b9e9411cc07fa2a4bdce674d0b13450"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_IE={0x7f7, 0x2a, "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"}]}, 0x904}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) (async)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/fb0\x00', 0x381200, 0x0) (async)
r12 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000003640), r2)
sendmsg$auto_NET_DM_CMD_STATS_GET(r4, &(0x7f0000003880)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003840)={&(0x7f0000003680)={0x190, r12, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NET_DM_ATTR_UNSPEC={0x71, 0x0, "0a3034ddd43f8825313979c3517350042a8c3732c40b9b635dcaf59245529edb04df5ea32000ed06fac7a0d968f1b0bd098d4cd4d5cd2db9fae6841b644637b29b8ee47a88e4e4025d90ba4cfcb84f371ef83cd93ca59e8304472480de047b6dede62e61aac8b31cdc55183636"}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x5}, @NET_DM_ATTR_UNSPEC={0xdc, 0x0, "b3a95b336e012229dfd2bf9b8c3bed45bd5901f1a99029440fd8ec3009b6223e371557a07b74bdc655e1a6885c24bcbf6710b7dbe485d55185533917cf761edb079a3563b4a3a5daa2f218396845522250e7dfeed950951fd8847be0b39cc1edcadf2bc398f14794b0eaa55eff3517e01df53794e7bf90531dd470a22a0e2908c37498a0be16c44c4262e6a5a7772a702ecbf4bf7c9908486dad6f69aceab4eb8b5deda315770eaa1558279e777fa6e65f2bdcfb32fd9252d5b22b8826f1f8fb91de82b0ff0e1d1e0fc49907a99aad7212d4d50c5adccb32"}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xfffffffa}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

12.462667413s ago: executing program 5 (id=1825):
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2)
madvise$auto(0x0, 0x20499d, 0x9)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
r0 = socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
socket(0xa, 0x80000, 0x20b)
connect$auto(0x3, 0x0, 0x54)
ioprio_set$auto(0x3, 0x0, 0x4b34)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, r0, 0x8000)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/config/nullb/features\x00', 0x109103, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x1000000, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x16)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

12.212429108s ago: executing program 7 (id=1827):
sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e86f", @ANYBLOB="a086e8018f4ee94ea96c7d77256a2a5a514f2f90d9257307adfd59a424589e10ecf521a55b8b82979d7b57e6d91dd716a36af3e82b5f63f9ac9b2af567f50981fcae08fe956669f363962071f1876eb620c1269e9e51ea56029a4ea4b7e965834ca4caecd2d6922420fb0bbfc0087c3bf217cb7a36c74cebd7562ba66c96e3b06e54f3bb7198433cdb9a98a57fc15fff25970b8d55ac6cf90903292c8d3987ba44f7425e578a25135bf2de8835d5bad544be99178f"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]})

11.435676005s ago: executing program 7 (id=1829):
r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, r1, 0x8000)
unshare$auto(0x40000080)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto(0xa, 0x2, 0x13, 0xde)
r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(r3, 0x1, 0xcc, 0x0, 0x2)
ioctl$auto_I2C_SMBUS(r3, 0x720, &(0x7f0000000080)="8ec40fd419ba7ea6214186c0a8f940989326669cebe4ae7665bd85eca41bd7b66dced4c378a423dd1fc256f984c0a71ff7")
recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0)
write$auto(r2, 0x0, 0x5)
r4 = socket(0x11, 0xa, 0x9)
bind$auto(r4, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x1, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy5/statistics/dot11FCSErrorCount\x00', 0x0, 0x0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="10082abd7000fcdb256c0000000800dc00ff7f000032000d013c266a1750eab7dca22385d5e7d13d01830a650ecdd540fbd242c68986a1d81cde9c5f09688b6ac2e61c52732f4900006d004f00dce97421525824374bdb205a8d66e186aa2657dc07d0f34c220ea5e9f29cc32d34ba4ebc6fb6cc24bb9b39514812ab9dbfbdb45519ec7eb1cf84619087f8a5c95a9a6e163ef18b989098b775a35237840dffa7341de203cfb4c4aa8d46da96c8d4294fceaf69bf245800000000"], 0xc0}, 0x1, 0x0, 0x0, 0x44004}, 0x1)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)
write$auto(r0, 0x0, 0x6)

9.779992886s ago: executing program 5 (id=1832):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/config.gz\x00', 0x20000, 0x0)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/wchan\x00', 0xc8400, 0x0)
read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/112, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0)
r3 = getpid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000200)={@siginfo_0_0={0x87b, 0xff, 0x8, @_sigsys={&(0x7f0000000180)="a066b8e840c6311618ee915dcba2b561883f43193d2a5631fe8489c54c2e58e828919abdaea9ede3515e3e06ef5d9e26a356338ed2792d285c9166f052064c40c858589a8fc08743324746bfd929a8d9ab975df177246f1824ee62a621dc9c9b00fe", 0xffffffff, 0x7}}}, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x8, 0x1, 0x9, 0x6, 0x69, 0x3, 0x6, 0x0, 0x2, 0x37, 0x4, 0x6})
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x8, 0xffffffffffff0005, 0x19)
r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x113801, 0xaa)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000480)=""/4083, 0xff3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3a)

8.768014509s ago: executing program 6 (id=1834):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000)
r0 = socketcall$auto(0xffe, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000328bd7000fddbdf257700000037002901ba8d569e857f9851eadd94a28d74f2604a03c7ddeccceed28eb029c7c2b98d2ecd477aca3dff1335e738bd9c83107d44719a110015004701"], 0x50}}, 0x4000000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0)
mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7ffffffff001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0xa, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0x8, 0x0, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)="8ea8f9290f3adc8b3ed542d9065c7b6592a1ceeaa4117b44694f85043e94695ae0e3d937ea7639f9b559f20bc7d7d03e6d4228", 0x33)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto(0x3, 0x4008ae61, r0)

8.497182069s ago: executing program 7 (id=1835):
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0xd, 0x100, 0x4000000000df, 0x19, 0x4, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1, 0x7fffffff, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x200, 0x1000, 0x7, 0x1ff, 0x1}, "654c6b7b1328d2787000000000000000ba1e1844abcc9f74e82a3fa6c3ccf1be"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
mbind$auto(0x8000000000000002, 0x400100000004, 0x100000000, 0x0, 0x9, 0x802)
madvise$auto(0x0, 0x20499d, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, r1)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000)
mmap$auto(0xfffffffffffffffd, 0x40000000a00006, 0x400006, 0x40eb1, 0xffffffffffffffff, 0x8)
connect$auto(0x3, 0x0, 0xd)
ioprio_set$auto(0x3, 0x0, 0x4b34)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x3, 0x2000080, 0x0, 0x0, 0x1)
mbind$auto(0x1, 0x100000008, 0xb43f, 0x0, 0x5, 0x2)
madvise$auto(0x1000000, 0xffffffffffff0006, 0x17)
madvise$auto(0xf6, 0xffffffffffff0005, 0x19)
clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
socket(0x1e, 0x4, 0x0)
socketpair$auto(0x6e, 0xfffffff9, 0x0, &(0x7f0000000000)=0x9)
symlink$auto(0x0, 0x0)
socket(0x1d, 0x2, 0x7)

8.31287508s ago: executing program 6 (id=1836):
r0 = socket(0x1, 0x5, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)
getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8)
capget$auto(0x0, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x8000000000000001})
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), r0)
ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0xfffffff5, 0x7fff, [{r2, 0x0, 0x2, 0x1}, {r0, 0x0, 0x80000000, 0x7}, {r2, 0x0, 0x8, 0x4}, {r0, 0x0, 0x6, 0x7fff}, {r0, 0x0, 0x10001, 0x80}]})
select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x8000000000007, 0x0, 0x8fd6, 0xfffffffffffff800, 0x803, 0x15f4da0a, 0x80, 0x20000003, 0x62, 0x79f, 0xa, 0x1, 0x9, 0xec1a, 0x770]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000040)={0x80})
getpid()

7.078518273s ago: executing program 6 (id=1839):
syz_open_procfs$namespace(0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0)
mmap$auto(0x0, 0x10001, 0x6, 0xeb1, 0xffffffffffffffff, 0x7)
r0 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0)
socket(0x2, 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d, <r3=>0x0})
ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x307082, 0x0)
recvmmsg$auto(r4, 0x0, 0xd, 0xc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000180)=0x4, r4, &(0x7f00000001c0)=0x10004, 0x0, 0xd3)
socket(0x2, 0x80002, 0x73)
r5 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000001680)=ANY=[@ANYRESOCT=r5, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00Q\x00', @ANYRES32=r3, @ANYBLOB="ff507a6be597dd3a9cc5dc1e59f5db0062ece87e6037d7b07690bc2c16af02b40f79d57f6521eed457ee3635fe83fcfd6c88c1b819de53c2e505d97e83ec8c9e8f2f58e599ba1330ccbae7f222dfb9a0b72a260e988ec4e3e72ca536b51aedf9f716ac8d249775838f5ccbeceadfad4c9d82775cf4e25a25901bb82b5f191c894c3b42e0d1e8106f48d69211ec07dd78a3d4aae845e62304c043607e0fd00ca53a863863b345467ba92c1959aee9f208002000", @ANYRES32=0x0, @ANYBLOB='\b\x00O\x00', @ANYRES32=0x0, @ANYBLOB="0810088051d2cc02ce674fe745267e7aeb90e8d6f502195068e30039780ffc6f9e163a1de5b7eb0769c313b36274e452840f62735cc0e90fa03e047b712c3c917be6aac4c76de511448de54d78ec1ca23a83d9eeddae9cfb7f9e1fbaeb78759585e15596afef07d88a74c1320ea365ac1e7e77c146a47207071757b32a624a7ab1b37c54b8fd297df40d97406eaf3964ce90b220ca87eed4bc11242bd4bef13eedcc6c9ca8d9e25461de0d8a93135f65bf1e3bdc19d7413f5f42e360f21d20c75be132848d3ca165ce9278afb62d2b4bca0777bf6e2e8761144c4007a5dcb3b4b0b683b5c87614eed9d05af809f07eab3a48889625d2e1d0f4b2861d8e53f8ceb198fcc69cd10da020af8ef14a2a4ab5aafa7e78b83afad502ee81405f2620297e3831d3127b68843cbd290d99ffb1786abc3b943d30f6e677e3a012beaf4cbe5ff38c1e124596740bea5345ea2980a2fe59ad9e9fd1ae2bee6e4445a6297ed64142d4ab69b74d8f102b857f858c3d2494d65bc07b47cd42744f50e08c037e660e0b67f5217e7c227e97d383cad964fe892b89fcb9d9ecfdd4e344cc3ff1ac36d156526a39a8dab1b9c2eaa3aec14a8fce1d24513562ec13211bc600ad73cc001dea444974a89b24278ce71a150c0b1abe718dbfa924b225f52a5d649a95da77e94c7fd4b45188acf130056b66bff93c01ebf86486b0878437b0626be411cdf74e0ff370dc0bf6e6913813052d5e609d0937d0607ae21789494dc8e8a0331d3f00ff738c97df884f0856d44c56d4e5ad06144ff18ce51d32773b34c785ef62ced571872d80a81ebb8b5b69f9685efd0049e23782fa6b5ae8e1fd8370d3842a629d65b4fe706cd47d933e56896b24a46a662a19caae8207b5721165fd8f81fcdb3acff44078664f37068802b35470550375717ec3b60b8d1c61831245b0076be0e434f0516a9fea308bb930bcb95c94e6baab442f19d6a4594fd97cd51b2356d07024b3d4413d3a7687e34ed4a3131feb7e94ab8beee6afa33c7e3f127c6087bdcd3bc546bdd2a1a7338c6bcc14d3faa8089c6d4a5ba22545bd155bda2a58fde6096d88a13d6805e862443af67f44768d158aeb0c481d4b5528759805234d25bb7f3bbb5d9d1c48e61bc2fc7f15cb7fe74677bfe2bb1e409d9c485d79290988956389c91767a1d3f702d2343db8049a9c175e08ad006279126e1278f74d612dae9846a8d454070b7a986feece9a1e39d45d1cde6c396b41d66b157fb5b08b4e22a298fd2c46160644729c1ffffd40f96697756331706e4dc61aa69ac162a02fb4f6018f91084c809906b4c8fd6e31a96a3992d2902218cbd99fcfffd7e63832d5298f56aee66665b585d55801625848eaa6cce42f1b0e7fafc6d8c3dad822792ef6e689cc096a092d3a10020aece15e11e857387e1faad0768a7759aabdc00accfe5a06a7f23653df07a8b90a9b74e7cc042dbebd032a7c27042944e8694c4593775ad460b4e34273e2108fae122e67e42c0dfb64824f413d1178279615f0426934c64b733343cb32cda1b4c438224689815cee50c8ef250ba7653d194e86fbe9ac0acfe4b9f6480b4a8218a555adff36e569a722b76b9055c760578e01b85d39d3d1a9764cc2bb4a2c3f62d58995385437f2898a1164487e80a664a4ee5f0fcfd81fa3e4da8e2ad921839f032060a179962e848afc623561968a259c81989447d0ee9143fcf6955e18f5596afc8aa2990043590531ee1bd8c7ebd2e7825f3482b99a0c5d966a458537c98b174b2d25ef9f75a93fd897876ab04d55b31157c14245d9a8a21d0adb5b30bb34130652a7c577438a207d9790a3b8847ed42ef14558f0b70200fa3ea0040a53fde8fc8937c42822e5c34664877ef222220c0e99eb351ff253b93624f675ca7c443b6a0f984b05a210a71559898948297bde1c36094ff609fd2cb9ced8884fe25bbd5ec513117397171701044c7180e2873bf37a697e71a0c7443eff52ac18c4e06d59819fa4b192b364958d5f57938ab98bdf112b9cde010af12be55b4b50b5e41ca988fc272de1cca34653a099eb9a7aec644d0e3abf3f03d89108ddcdd08459bfbabb6cf164ae5bcbaf3ecc017497aa09f64aad4432fe6f9f1b38328d74e6eacf287cc6ccf81dcc7ccce430602bd28beeb77be21cf02e06b28c58308e1f794bc3e4bbc2fbd51869cabbe9e37a2b2f921a4b3928d054cdf27186e34c16781186e12d76dceb24d5e61d0e7aed66dccd2ed50a75b72eaab2efee2d5092c18ef52c0eed6cabd48c57707363079b81ed232702fc75db97a60c4903de693891310133175304020d7db5c7015635f5dcb194cbc509a3598a6b48f7ccfb44782e8110909a695a5f958b6d054994803c63253f5af55d9cead46bfd06e7a860c02df9474ef2ad269aacf8cc51d2e050f003b08ece32a2a471a831fcc5869a8e5feb1b033fd09a6483f4a36761ba44225ea42e28135a7818f540c20e25a78d6a88f941d66c349f2e9ee437bc88800364b6b334d88bd82e384b9feb9c01a60bf6bd52e3cbd5ab4e59f5784b75b90315c1b9c6194415cc5b780292e9665c65c15047fb70859a8ea5edd32813aed2235fa1bb14024af9084161f9968631327d8854ff242f68e47a03306556a454f2c785b5ba430fe3a83d66afaff0ad35fa8e7d3e62cb3c21372e54a33a52db302cc79a6f0cf115b0d66208985df2c47fb5c23ff7390030af7dc74e416781ad500b3e3082c36a50a31d9e34558f7e88df263c6e8bf606e06a7bc504f6e7ef767ba51b4032e9085675266b28b67591b6f5f90aa0b8d93fe50c4b2df8b5b6e53f4914c78be7ffe0cda33f324b03e3f5956aaca0ba96cf76690e956ddc17bca7d37672ba35ecc21b83fa614c45caca7de541adb4655fb0076818f434612b5f7880b84047faac90a9ec5eb83af85d93b5b84e4d4b0bf28f8a4b7204cf88c869674144310ba38e52bb921b8f90d952320526834dee5b922f30faec1a2184072ef2b453aefe61b9b42bf6bb569cf5e54d5585ab067e1fb643dabc5aa78cf829ab84091600b57760b98efbcf3c82687c748f20cda1b2aae78585029b9103d8e58482c7ab9dc43d2c5e15cd5f84883d057011349d3f398ec344515f7cb20b0bdf291cd6f8528943090ce32a076c773ae08e8efbbf7e848479c31b0a8a8c7a6f2bc3f3477ef74f3f96958ad4b0d155d05140212d37150f0b031580f05e3ea98daa996f629ab44021f6faf4b5c403f209c6eb27a4d95d1b1af519bb63d2ed0e72e076c34a36138e0456626095374b97d9d2d39175463edad65997abac2c2f529e7b52361c1909926e6997bdb25ecd7ce77d092c7566ecbe762c879392ff4f2ebf773669c1af0451521245630985c5495acfa61a8eb5f9b9f51e0b98f7cc66a5f6eb5e98cb3eae1b40d97c5d1ed1270204fbbb94eb667cc106bf5c2a13955ee1703ba5883df3f1015365fb88cffba4d265d27b0bb3fa2925183d518e7eb2d988b9a25c14652664c5ee4906533507ba18babad0d751d087cfc8a6d549056135c11b753269be278619f3916ad8cbe0ec9413cd1d8873fc4036477896c6395178209638d3ed7239754591cf6d66240dfc72fe1d29214e88d722cb17fdda5e318908e9f1b561a34af59e4d04fe70308a3d16c5e8712db94340b447dd96476de164434c8fb813da890dc9c2d63a644fec5f7a558271e8a1c8bac4283de000cb47cba994a425dda3e82122ab38480b8ef34c95f88af41bab6f636ab00219ad7bfeba2674ba4827d2cefdf36585c7f8f7af065e0389a016e71889ba0dcf63c7cf23a1afcb6e62fdd91c721f4f587bef45a3253734a341cc0b8be14c938396f675ea1d29da93c42f5e61f98adecd684749d54fcf6d06f8e1bf6ca5847b3223c3addc93b342663fd9ed5185ff308234d01942e49d3e9004533760da300179166d745de3c579974fe53410c07d63a58e6425bedab5250649088ab1720409d520cde3d61808512839001aa0111a2cd8fb28e1cba9c4e8777fb12122ce7a17111f08fabc05ad4188dcb9abb093804add686af83e3734958cb1e64aef9819cdd8572ac28d95ec25eff1d3835508dbbb223195c4cf3ad56f7fccc9b600033b17c5f3abde7b02be756f4d3e52befe68c01363afe4c69594f9484bbd6d11a9d44dfd3174252601a5da56c0bc30f1aaf724a58d15269da0892dd49bd864c6dbe84bd7eb0def95d1e4af6a0d037b0fdc345ed8e69f7c3a3378f881ad53e5581beea9ea665f14af7b45bacc9fc3206e87e55ef8904295d4df98aefdfb2a4069138bbe8dac4865772454d9e318414628612e96fd01e66918304897f5a302e05d35d9bab4330d17fe469357811baf2eef77614d102956d49defd3c322ff8bd1a170dac001210189178dc4391be13ed9a73cc20b81eaeae8e751187a5f114fb5ece6daf9e1a3a2bc705fcd6d697a231fc0352ae83b3e7c38bf0093094e103f5b5a78d4f2b8fc90c74ed823c625e17014ac9e513f153524361b91c7a7e79d068193734546565ad091490ae123b15b26477bdb6caa8761816084a157274b3e6184eab5d33504a6595df146342e52b23ec085e8872193e37a003b2aca6ea386b872df798d367886619d3661a83241a88022e24b817470e35d0e1b0e7ecf5ae387dbaa2895b5c1c05f663784ab0611fbd447b28962e43a7cf2eb8baf58f81bb024cc2775f4b12df376d086410adc5c240264d9e814a723fc7ce267ceb4994f63db1cd474f29471d3d6336851313a02fceddd56a0a05cf4d13b436eb5cb553d6e189eb3d83d3b21ee5e48ccaccbb0c945455f766a497f8845c960962684d4b77105d592c53e000908215251c852bc434e2ae06d74a4acede0de5b7012c09b46d60392e326b5625e1e30e13bc9d35083a049b61513bd23aec0530fc87e9f6ed598a616df95a84402b2240ef670c646191fc1b78dc571f5669a6a2897c6b6b4fb1c683ec4c0ff4c153fc1f503faa03abbe2d97771473aa09a276a2832cb5bf07eff1691ccb7997ea5e5088410c1e9d58f17137986a14c3b42d6e6fd06c0b280a2ea5f9a239bd53acf476c87bd6f5ec2051e2b34a95bd4cd97cc70b104ff3a8c89af095a80c791ff0d83102b5dad888139128449a3b9d2ea24b469ab1301002f352c3c56f0e25f2d093d37b267c28eaf6e7fb541ffe16f3b3d075877781544c153cc25a3955025feb2955dc8a72a7d06f0669ff54cf3134f2960ddbf42258b74bbce1fcc504734a5ceef6af5e9354cdc7c84b0abcea531374c4907173253433262d256359def0c9fc6507dc46e96eb09e9f8b7674b0a7ee4827eebe40e8a7a1556587a1b3062b829f2f761b900bb8ddc966b3015dd150015813975dd87cba187d7c2646ceab68e90fb6bb8b33314ef0d4ca446916d386120e026468d2567e93513f19cfe2f59d651e19b33d8433bef0432e0aae482aabc691d4948a8b288de0249be910bae37924c53f96aa713ac317c3409d1eca5013b02e36b922b3adc7ce364c0ee2e72396f94ab841aa030be07112a0974eee053c69aaafb29c262c0bbaa5f924cddb6f4929c2fb4d8deb983f1a0e55531fe8ba9f749fa2f78c4965cc3cc6acb83746a3e88852200934510745f8d70a9ab766df0a429770932d8abb48a8a4b952363830ce15326ab91d3c4fe030d77a831cca0e76f95e590b114eaf36aa27aeecd492d8a0a87eca4d13dad6146bd648138e88fd40fa60ad153d1cbc157d3b399fe143b93785f34b11ab1a65b1b252721797980a8d93c514f7a8031d383c4a5f2ba2626167c0400718008005a00", @ANYRES32=0xee00, @ANYBLOB="efff670000"], 0x11e0}, 0x1, 0x0, 0x0, 0x800}, 0x44804)
write$auto(0x3, 0x0, 0xfdef)
write$auto(0x3, 0x0, 0xfded)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r6 = socket(0x11, 0xe4c1f1d3fdfee405, 0x84)
getsockopt$auto(r6, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8)

6.537054222s ago: executing program 7 (id=1841):
sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e86f", @ANYBLOB="a086e8018f4ee94ea96c7d77256a2a5a514f2f90d9257307adfd59a424589e10ecf521a55b8b82979d7b57e6d91dd716a36af3e82b5f63f9ac9b2af567f50981fcae08fe956669f363962071f1876eb620c1269e9e51ea56029a4ea4b7e965834ca4caecd2d6922420fb0bbfc0087c3bf217cb7a36c74cebd7562ba66c96e3b06e54f3bb7198433cdb9a98a57fc15fff25970b8d55ac6cf90903292c8d3987ba44f7425e578a25135bf2de8835d5bad544be99178f"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x0, 0x0, 0x7}]})

5.730824059s ago: executing program 5 (id=1842):
mmap$auto(0x2, 0x4020009, 0x9, 0x2c11, 0x401, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioperm$auto(0x4, 0xbc6, 0x81)
quotactl$auto(0x2, 0x0, 0x62a0, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
mmap$auto(0x4, 0x400007, 0x76cf, 0x100000009b72, r1, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0)
mmap$auto(0x0, 0x100000000010000, 0xe0, 0x11, r2, 0x28000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0xffffffffffff0005, 0x15)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/aiptek/bind\x00', 0x74b601, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/112, 0x70)
close_range$auto(r1, r0, 0x6)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x401782, 0x0)
sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x45)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x80000000, 0x2020009, 0x9, 0x252, 0xfffffffffffffffa, 0x4)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x240007, 0x19)
msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x608000, 0x0)
mmap$auto(0xd2b, 0x6, 0x5, 0xeb1, r4, 0x8000)
close_range$auto(r5, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop10\x00', 0x14f602, 0x0)

5.400628129s ago: executing program 6 (id=1844):
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x25, 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x48080, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f00000002c0))
connect$auto(r0, &(0x7f0000000140)=@isdn={0x22, 0x9, 0x4, 0xa, 0x59}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
open(&(0x7f0000000000)='./file0\x00', 0x20100, 0xd0)
getxattrat$auto(r0, 0x0, 0x10, &(0x7f00000001c0)='-^.\x00', &(0x7f0000000200)={0x0, 0x4, 0x4}, 0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x200000, 0x2000000005, 0x6)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r2, 0x0, 0x3f1)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000540)=0x2)
syz_clone3(&(0x7f00000005c0)={0x100100000, &(0x7f0000000240), 0x0, &(0x7f0000000300), {0x27}, &(0x7f0000000340)=""/91, 0x5b, &(0x7f00000003c0)=""/193, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3], 0x7}, 0x58)
getdents$auto(r2, 0x0, 0xa2b0)

5.069602645s ago: executing program 7 (id=1845):
r0 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000000c0)={0x4, 0x0})
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)="da518ed75fcc9f1a8be03501757c05ab6f5a5b36148695b3115a77b09872bf8a5e4c18ed50fc7653bb12525189093819ba59de56fb2504684cfb4f2a2fd2f9f6e2b9418bd2758adb0f57e8ddd982db4206c2b33c55455cfc5dfe1ddc725fd46849d1dcb59678cc1f78ecec38868c1f514ed226e66821923de93165e2805e2e89f8c1d14629e9cea74e8bb76297e617accc6b9d8242", 0x95)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0)
writev$auto(r1, &(0x7f0000000c00)={&(0x7f0000000180), 0x7}, 0x4)
mmap$auto(0x0, 0x6, 0x1ff, 0x14, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
r2 = socket(0x1d, 0x2, 0x7)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
bind$auto(r2, &(0x7f0000000000)=@can={0x1d, <r5=>r4}, 0x67)
connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18)
unshare$auto(0x40000080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x800)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x760, 0xeb3, r6, 0x8000)
close_range$auto(0xffffffffffffffff, r0, 0xffffffff)
socket(0x10, 0x2, 0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
read$auto(r7, 0x0, 0x1)
select$auto(0x5, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x0, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x80)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0)

3.68283743s ago: executing program 6 (id=1849):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8})
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000200)={0xb213, 0x2c, 0x800})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r2)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)

2.803087726s ago: executing program 1 (id=1850):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto_IORING_REGISTER_PERSONALITY(r0, 0x9, &(0x7f0000000040)="006f3642d60a57407c281a02fdebfe5c0ff08a827f22e49c272e70021c2e79db7dbb991b55595a696bbf6150e2e245428978f70e65af6a7deeba425db4c4d6df61b248984a04d5fc25c6ed2f315da5aa9d01b974333c86ab1da7caca447b704b58932884e06219febd501f445c941a16", 0xffff)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000101, 0x400, 0x2}]})

2.595927893s ago: executing program 1 (id=1851):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb")
mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/ep_81/type\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_FILS_AAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1743}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0xc5)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2.331593196s ago: executing program 1 (id=1852):
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x20007)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x29, 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptysd\x00', 0xa0000, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xc, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x4346, 0x8fd6, 0x1, 0x3, 0x15f4da0b, 0x3, 0x3, 0x62, 0x80000004, 0x7, 0xffffffffffffffff, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffe]}, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdf1)
sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, 0x0, 0x2002c055)
unshare$auto(0x40000080)
exit$auto(0xffffff9f)

896.368438ms ago: executing program 7 (id=1853):
mmap$auto(0x0, 0x420009, 0xfff, 0x13, 0x401, 0x8)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = socket(0xa, 0x1, 0xfffffeff)
r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
pread64$auto(r2, 0x0, 0x2, 0x3)
prctl$auto(0x3, 0x2, 0x0, 0x1, 0x9)
write$auto(r0, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
open(0x0, 0x22040, 0x124)
socket(0x840000000002, 0x3, 0xff)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x9, &(0x7f0000000480)={@siginfo_0_0={0x1, 0x401, 0x1, @_sigfault={&(0x7f0000000400)="cf6283aba4bb00dd8c1863c998d124173c2007bd687371443ab6c316b41117db9f8b0369777d9f5ac3a510843d65227adc1fed9e16033f4a6eba5be70c9648888fa48bc0dc497646383ff6c78eb80e660ee5f5852aef89a9d580e8d3abf140606b6cb2d6bd82434f3c1939fc58920045a0d8c9fdf0ef1e8f8c5fcd", @_perf={0x3, 0x4, 0x666}}}}, 0xf1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5de1", @ANYBLOB="120027", @ANYBLOB="72010000", @ANYRESOCT=r1], 0x1ac}}, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x11, 0xa, 0x9)
socket(0xa, 0x2, 0x3a)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyz9\x00', 0x600882, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)

645.627102ms ago: executing program 5 (id=1854):
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000800)=ANY=[@ANYBLOB="18030000", @ANYRES16, @ANYBLOB="010025bd7000fedbdf2502000000040002000c000500d308000000000000f102048014004100fe8000000000000000000000000000bb08003a00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="d3011e800800b900", @ANYRES32=0xee00, @ANYBLOB="040018801727009a3a9332585c61433e77d74db5383557a346e0372ec06567dbe6e86d98885b5294af804e537cae8de2ecfdc003cbf1712b2514eebb05609a38f3fd1abdbd37473c9e67313f09967014d2917259c6b75b6b066aa6ff2a84407c984a4335d3e56bbe221e9649849341d505ffd1f33e97de2cd287b0cb575451194971b31c025634a1efd953e271a2b683021436263808003700", @ANYRES32=0x0, @ANYBLOB="0800c700640101002be15789716f695d9e1843a94d8ec3c3616a0eec8722c7b2a60dee1256209f934f8ff5e08a2802c313c65e3567d46af6557a677728db3dea07ff5c11547246d09446a3e7e4703a49ab0d50b1ca263b3ca6f387903e44f981093bc6b3e7113910110236b3eeaa0ff1839107ec015728a2396675103187392e1728201de0843b13ef153507a0192c9469992305fa46abb5ca189ed7e08ac2dabda2f7197cc0dbb688ff6456bf3ea5a1c67c73bde72035b9da4d2b50673ebd36892bd3af87335dbeb71fc1e398d2d3e6bca040d25850039e525b522f89f61ce63e8c16e5ff45f8ba6bcadb9c7d9f16d497331b4d6d0e4515f7c5ca46ad423845dcbc7f15a1e1321a803b05181c86245d4a99a3ba1854a6cc95bfc22084b179e1eeb1c0b53e60dddaa64d00000000"], 0x318}, 0x1, 0x0, 0x0, 0x48000}, 0x8011)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.2/usb14/bMaxPower\x00', 0x121681, 0x0)
mmap$auto(0x7, 0xfffffffffffffffe, 0xdf, 0x19, 0xffffffffffffffff, 0x28000)
write$auto(0x3, 0x0, 0x1000000ffde)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2028c2, 0x0)
writev$auto(r3, &(0x7f0000000240)={0x0, 0x80}, 0x7f)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2415, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r2}})
poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8)
keyctl$auto_KEYCTL_SETPERM(0x5, 0x8001, 0xdbf7, 0x5, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0)
fstat$auto(0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0)
ioctl$auto(0x3, 0xc0285628, 0x8)

462.832144ms ago: executing program 1 (id=1855):
sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e86f", @ANYBLOB="a086e8018f4ee94ea96c7d77256a2a5a514f2f90d9257307adfd59a424589e10ecf521a55b8b82979d7b57e6d91dd716a36af3e82b5f63f9ac9b2af567f50981fcae08fe956669f363962071f1876eb620c1269e9e51ea56029a4ea4b7e965834ca4caecd2d6922420fb0bbfc0087c3bf217cb7a36c74cebd7562ba66c96e3b06e54f3bb7198433cdb9a98a57fc15fff25970b8d55ac6cf90903292c8d3987ba44f7425e578a25135bf2de8835d5bad544be99178f"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]})

274.310099ms ago: executing program 6 (id=1856):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/mdio_bus/drivers/Microchip LAN937x TX/bind\x00', 0x4a000, 0x0)
socket(0x6, 0x3, 0x37)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC2\x00', 0xa802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5)
read$auto(r0, 0x0, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x26, 0x5, 0x8c68)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x101e41, 0x0)
ioperm$auto(0x4, 0x100000001, 0x4000005)
futex_waitv$auto(&(0x7f0000000040)={0x4000000000009, 0xffffffffffffffff, 0xc}, 0x7ff, 0x3, &(0x7f0000000100)={0x3, 0x10}, 0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty56\x00', 0x74c40, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x7, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r4 = ioctl$auto_TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)={0x7, 0x3e, 0x80, @raw=0x9}})
ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x6, &(0x7f00000001c0)="46a03e98c00d5dd3b483d34ba198d5e2a0677bf40564840c4f26027c")
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0)
r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0)
read$auto(r6, 0x0, 0xb4d3)

232.132627ms ago: executing program 1 (id=1857):
r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0)
lseek$auto(r0, 0x7ff, 0x7) (async)
r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) (async)
r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) (async)
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000000500"/17, 0x11)
open_by_handle_at$auto(r2, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af67fffffff23b40e62"}, 0x80000001) (async)
close_range$auto(r2, 0xffffffffffffffff, 0x9) (async)
preadv$auto(r1, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5)
read$auto(r0, &(0x7f0000001200)='\x00', 0x4)

130.046798ms ago: executing program 5 (id=1858):
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r0 = set_tid_address$auto(0x0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080))
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = pipe$auto(0x0)
read$auto(r2, 0x0, 0x15)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4)
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)
getdents$auto(r1, 0x0, 0x10040)
getdents$auto(r1, 0x0, 0xa2b0)
semtimedop$auto(0x7fff, &(0x7f0000000000)={0xcb, 0x82c8, 0x9}, 0x1, &(0x7f0000000040)={0xfffffffffffffff9, 0x7})
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000180)="0a1b9a5c4000006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38)

0s ago: executing program 1 (id=1859):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0)
r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), r0)
sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000810)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x5, 0x84)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r5 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r5, 0x114, 0x3, 0xfffffffffffffffc, 0x0)
r6 = semctl$auto(0x2, 0x5, 0x13, 0x9)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r1, 0x7, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)="01ee3f7326b13aac7481592f21d68357f264e2fd", 0x1)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
prctl$auto(0xce, 0x2, r6, 0x1, 0x44)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x100040dd, 0x0, [{0x8, 0xfffeffff, 0x1fc}, {0x18, 0x8, 0xe}, {0x4, 0x2b, 0x3}, {0xffff8001}]})

kernel console output (not intermixed with test programs):

]  ? folio_remove_rmap_pmd+0x69c/0xed0
[  298.140564][ T9440]  ? split_huge_pmd_locked+0x3ba/0x3cf0
[  298.140612][ T9440]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  298.140673][ T9440]  ? policy_nodemask+0xed/0x4f0
[  298.140711][ T9440]  alloc_pages_mpol+0x1fb/0x550
[  298.140746][ T9440]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  298.140778][ T9440]  ? __split_huge_pmd+0x203/0x350
[  298.140821][ T9440]  ? __split_huge_pmd+0x203/0x350
[  298.140874][ T9440]  alloc_pages_noprof+0x131/0x390
[  298.140911][ T9440]  pte_alloc_one+0x1e/0x3e0
[  298.140951][ T9440]  __pte_alloc+0x6d/0x3f0
[  298.140983][ T9440]  ? __pfx___pte_alloc+0x10/0x10
[  298.141016][ T9440]  ? _raw_spin_unlock+0x28/0x50
[  298.141049][ T9440]  ? __pmd_alloc+0x6aa/0x9c0
[  298.141090][ T9440]  move_page_tables+0x257e/0x4500
[  298.141142][ T9440]  ? __pfx_copy_vma+0x10/0x10
[  298.141190][ T9440]  ? __pfx_css_rstat_updated+0x10/0x10
[  298.141242][ T9440]  ? __pfx_move_page_tables+0x10/0x10
[  298.141315][ T9440]  ? finish_task_switch.isra.0+0x200/0xb80
[  298.141359][ T9440]  copy_vma_and_data+0x25c/0x7c0
[  298.141412][ T9440]  ? __pfx_copy_vma_and_data+0x10/0x10
[  298.141480][ T9440]  ? __vma_start_write+0x17f/0x280
[  298.141522][ T9440]  ? __pfx___vma_start_write+0x10/0x10
[  298.141584][ T9440]  move_vma+0x51b/0x1890
[  298.141638][ T9440]  ? __pfx_move_vma+0x10/0x10
[  298.141690][ T9440]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  298.141728][ T9440]  ? cap_mmap_addr+0x4b/0x120
[  298.141772][ T9440]  ? bpf_lsm_mmap_addr+0x9/0x30
[  298.141823][ T9440]  ? security_mmap_addr+0x71/0x1e0
[  298.141854][ T9440]  ? __get_unmapped_area+0x255/0x3e0
[  298.141894][ T9440]  ? vrm_set_new_addr+0x204/0x290
[  298.141945][ T9440]  mremap_to+0x1b7/0x450
[  298.141994][ T9440]  do_mremap+0xb76/0x2130
[  298.142060][ T9440]  ? __pfx_do_mremap+0x10/0x10
[  298.142118][ T9440]  ? ksys_write+0x190/0x250
[  298.142181][ T9440]  __do_sys_mremap+0x126/0x170
[  298.142232][ T9440]  ? __pfx___do_sys_mremap+0x10/0x10
[  298.142293][ T9440]  ? __x64_sys_futex+0x34f/0x4d0
[  298.142366][ T9440]  do_syscall_64+0x106/0xf80
[  298.142405][ T9440]  ? clear_bhb_loop+0x40/0x90
[  298.142449][ T9440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.142485][ T9440] RIP: 0033:0x7fa6acb9c799
[  298.142514][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.142558][ T9440] RSP: 002b:00007fa6ad9fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  298.142592][ T9440] RAX: ffffffffffffffda RBX: 00007fa6ace16090 RCX: 00007fa6acb9c799
[  298.142615][ T9440] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000
[  298.142636][ T9440] RBP: 00007fa6acc32bd9 R08: 0000000100000000 R09: 0000000000000000
[  298.142656][ T9440] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  298.142676][ T9440] R13: 00007fa6ace16128 R14: 00007fa6ace16090 R15: 00007ffda5987898
[  298.142721][ T9440]  </TASK>
[  300.286287][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'.
[  302.364322][ T9513] =======================================================
[  302.364322][ T9513] WARNING: The mand mount option has been deprecated and
[  302.364322][ T9513]          and is ignored by this kernel. Remove the mand
[  302.364322][ T9513]          option from the mount to silence this warning.
[  302.364322][ T9513] =======================================================
[  302.478826][ T9513] openvswitch: netlink: Key type 317 is out of range max 32
[  302.563910][ T9517] netlink: 'syz.4.778': attribute type 23 has an invalid length.
[  303.734932][ T9530] delete_channel: no stack
[  304.106507][ T9552] FAULT_INJECTION: forcing a failure.
[  304.106507][ T9552] name failslab, interval 1, probability 0, space 0, times 0

syzkaller
syzkaller login: [  304.140894][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.2.784 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  304.140950][ T9552] Tainted: [L]=SOFTLOCKUP
[  304.140963][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  304.140989][ T9552] Call Trace:
[  304.141001][ T9552]  <TASK>
[  304.141014][ T9552]  dump_stack_lvl+0x100/0x190
[  304.141075][ T9552]  should_fail_ex.cold+0x5/0xa
[  304.141115][ T9552]  ? constrain_params_by_rules+0x175/0xcc0
[  304.141150][ T9552]  should_failslab+0xc2/0x120
[  304.141184][ T9552]  __kmalloc_noprof+0xe0/0x850
[  304.141242][ T9552]  ? unwind_get_return_address+0x59/0xa0
[  304.141289][ T9552]  constrain_params_by_rules+0x175/0xcc0
[  304.141336][ T9552]  ? stack_trace_save+0x8e/0xc0
[  304.141376][ T9552]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  304.141423][ T9552]  ? __kasan_kmalloc+0xaa/0xb0
[  304.141472][ T9552]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  304.141526][ T9552]  ? snd_pcm_oss_get_active_substream+0x175/0x1d0
[  304.141580][ T9552]  ? snd_pcm_oss_ioctl+0x1c08/0x3720
[  304.141648][ T9552]  ? snd_interval_refine+0x2d0/0x580
[  304.141697][ T9552]  snd_pcm_hw_refine+0x7e7/0xad0
[  304.141740][ T9552]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  304.141796][ T9552]  ? snd_interval_refine+0x2d0/0x580
[  304.141841][ T9552]  snd_pcm_oss_change_params_locked+0xdb3/0x39f0
[  304.141914][ T9552]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  304.141970][ T9552]  ? __pfx___mutex_lock+0x10/0x10
[  304.142044][ T9552]  snd_pcm_oss_get_active_substream+0x175/0x1d0
[  304.142108][ T9552]  snd_pcm_oss_ioctl+0x1c08/0x3720
[  304.142165][ T9552]  ? __fget_files+0x215/0x3d0
[  304.142225][ T9552]  ? hook_file_ioctl_common+0x146/0x410
[  304.142283][ T9552]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  304.142355][ T9552]  ? __fget_files+0x21f/0x3d0
[  304.142414][ T9552]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  304.142470][ T9552]  __x64_sys_ioctl+0x18e/0x210
[  304.142518][ T9552]  do_syscall_64+0x106/0xf80
[  304.142555][ T9552]  ? clear_bhb_loop+0x40/0x90
[  304.142598][ T9552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.142633][ T9552] RIP: 0033:0x7fa6acb9c799
[  304.142659][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.142691][ T9552] RSP: 002b:00007fa6ada1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  304.142732][ T9552] RAX: ffffffffffffffda RBX: 00007fa6ace15fa0 RCX: 00007fa6acb9c799
[  304.142755][ T9552] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007
[  304.142777][ T9552] RBP: 00007fa6acc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  304.142798][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.142818][ T9552] R13: 00007fa6ace16038 R14: 00007fa6ace15fa0 R15: 00007ffda5987898
[  304.142863][ T9552]  </TASK>
[  304.624848][ T9563] FAULT_INJECTION: forcing a failure.
[  304.624848][ T9563] name fail_futex, interval 1, probability 0, space 0, times 0
[  304.667454][ T9563] CPU: 1 UID: 0 PID: 9563 Comm: syz.2.786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  304.667494][ T9563] Tainted: [L]=SOFTLOCKUP
[  304.667502][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  304.667517][ T9563] Call Trace:
[  304.667525][ T9563]  <TASK>
[  304.667534][ T9563]  dump_stack_lvl+0x100/0x190
[  304.667577][ T9563]  should_fail_ex.cold+0x5/0xa
[  304.667605][ T9563]  get_futex_key+0x1d2/0x1620
[  304.667639][ T9563]  ? __pfx_get_futex_key+0x10/0x10
[  304.667672][ T9563]  ? __fput+0x68a/0xb40
[  304.667703][ T9563]  futex_wait_setup+0x81/0x500
[  304.667750][ T9563]  __futex_wait+0x19f/0x300
[  304.667791][ T9563]  ? __pfx___futex_wait+0x10/0x10
[  304.667834][ T9563]  ? __pfx_futex_wake_mark+0x10/0x10
[  304.667922][ T9563]  ? futex_hash+0x2c5/0x380
[  304.667976][ T9563]  futex_wait+0xed/0x380
[  304.668029][ T9563]  ? __pfx_futex_wait+0x10/0x10
[  304.668092][ T9563]  do_futex+0x1ef/0x350
[  304.668131][ T9563]  ? __pfx_do_futex+0x10/0x10
[  304.668165][ T9563]  ? __pfx___might_resched+0x10/0x10
[  304.668201][ T9563]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  304.668236][ T9563]  __x64_sys_futex+0x34f/0x4d0
[  304.668271][ T9563]  ? __pfx_task_work_run+0x10/0x10
[  304.668307][ T9563]  ? __pfx___x64_sys_futex+0x10/0x10
[  304.668341][ T9563]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  304.668382][ T9563]  do_syscall_64+0x106/0xf80
[  304.668410][ T9563]  ? clear_bhb_loop+0x40/0x90
[  304.668440][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.668465][ T9563] RIP: 0033:0x7fa6acb9c799
[  304.668485][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.668510][ T9563] RSP: 002b:00007fa6ad9fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  304.668533][ T9563] RAX: ffffffffffffffda RBX: 00007fa6ace16098 RCX: 00007fa6acb9c799
[  304.668550][ T9563] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa6ace16098
[  304.668565][ T9563] RBP: 00007fa6ace16090 R08: 0000000000000000 R09: 0000000000000000
[  304.668580][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.668596][ T9563] R13: 00007fa6ace16128 R14: 00007ffda59877b0 R15: 00007ffda5987898
[  304.668628][ T9563]  </TASK>
[  305.269382][ T9560] kvm_intel: kvm [9559]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe
[  305.330933][ T5827] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7
[  305.396079][ T9570] binder: 9569:9570 ioctl c018620c 2000000000c0 returned -22
[  307.628496][ T9566] Setting dangerous option i915.mitigations - tainting kernel
[  307.638240][ T9602] openvswitch: netlink: Flow actions attr not present in new flow.
[  307.896136][ T9605] FAULT_INJECTION: forcing a failure.
[  307.896136][ T9605] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  307.929809][ T9605] CPU: 1 UID: 0 PID: 9605 Comm: syz.4.797 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  307.929872][ T9605] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  307.929886][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  307.929906][ T9605] Call Trace:
[  307.929918][ T9605]  <TASK>
[  307.929931][ T9605]  dump_stack_lvl+0x100/0x190
[  307.929991][ T9605]  should_fail_ex.cold+0x5/0xa
[  307.930025][ T9605]  ? prepare_alloc_pages+0x16d/0x5f0
[  307.930069][ T9605]  should_fail_alloc_page+0xeb/0x140
[  307.930108][ T9605]  prepare_alloc_pages+0x1f0/0x5f0
[  307.930154][ T9605]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  307.930218][ T9605]  ? __pfx_vmap_small_pages_range_noflush+0x10/0x10
[  307.930280][ T9605]  ? __split_page_owner+0x1f9/0x350
[  307.930347][ T9605]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  307.930400][ T9605]  ? is_vmalloc_addr+0x86/0xa0
[  307.930448][ T9605]  ? kasan_unpoison+0x27/0x60
[  307.930496][ T9605]  ? __kasan_unpoison_vmalloc+0x22/0x30
[  307.930547][ T9605]  ? __vmalloc_node_range_noprof+0x11eb/0x1530
[  307.930601][ T9605]  ? bdev_disk_changed+0x44b/0xc80
[  307.930672][ T9605]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  307.930732][ T9605]  ? policy_nodemask+0xed/0x4f0
[  307.930770][ T9605]  alloc_pages_mpol+0x1fb/0x550
[  307.930808][ T9605]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  307.930855][ T9605]  alloc_pages_noprof+0x131/0x390
[  307.930892][ T9605]  get_free_pages_noprof+0x10/0xb0
[  307.930949][ T9605]  bdev_disk_changed+0x4b6/0xc80
[  307.931013][ T9605]  ? lockdep_init_map_type+0x5c/0x250
[  307.931068][ T9605]  ? __pfx_bdev_disk_changed+0x10/0x10
[  307.931127][ T9605]  ? file_init_path+0x48e/0x670
[  307.931175][ T9605]  blkdev_get_whole+0x187/0x290
[  307.931212][ T9605]  bdev_open+0x2c7/0xe40
[  307.931257][ T9605]  bdev_file_open_by_dev+0x179/0x210
[  307.931300][ T9605]  disk_scan_partitions+0x1ef/0x320
[  307.931354][ T9605]  blkdev_common_ioctl+0x12a1/0x2ba0
[  307.931409][ T9605]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  307.931461][ T9605]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  307.931536][ T9605]  ? do_vfs_ioctl+0x226/0x13e0
[  307.931585][ T9605]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  307.931652][ T9605]  ? find_held_lock+0x2b/0x80
[  307.931685][ T9605]  ? __fget_files+0x215/0x3d0
[  307.931746][ T9605]  blkdev_ioctl+0x43b/0x6f0
[  307.931787][ T9605]  ? __pfx_blkdev_ioctl+0x10/0x10
[  307.931833][ T9605]  ? __pfx_blkdev_ioctl+0x10/0x10
[  307.931875][ T9605]  __x64_sys_ioctl+0x18e/0x210
[  307.931927][ T9605]  do_syscall_64+0x106/0xf80
[  307.931965][ T9605]  ? clear_bhb_loop+0x40/0x90
[  307.932009][ T9605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.932045][ T9605] RIP: 0033:0x7fdaf979c799
[  307.932075][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.932109][ T9605] RSP: 002b:00007fdafa672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  307.932142][ T9605] RAX: ffffffffffffffda RBX: 00007fdaf9a16090 RCX: 00007fdaf979c799
[  307.932165][ T9605] RDX: 0000000000000000 RSI: 000000000000125f RDI: 000000000000000b
[  307.932185][ T9605] RBP: 00007fdaf9832bd9 R08: 0000000000000000 R09: 0000000000000000
[  307.932205][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.932225][ T9605] R13: 00007fdaf9a16128 R14: 00007fdaf9a16090 R15: 00007ffe82dbaf78
[  307.932270][ T9605]  </TASK>
[  308.496554][ T9609] nvme_fcloop: unknown parameter or missing value '7'
[  308.945645][   T29] audit: type=1800 audit(4294967435.570:13): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.801" name="dbroot" dev="configfs" ino=27298 res=0 errno=0
[  309.639283][ T5827] Bluetooth: hci4: Malformed LE Event: 0x0b
[  309.807644][ T9633] FAULT_INJECTION: forcing a failure.
[  309.807644][ T9633] name failslab, interval 1, probability 0, space 0, times 0
[  309.889317][ T9633] CPU: 0 UID: 0 PID: 9633 Comm: syz.1.803 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  309.889360][ T9633] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  309.889370][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  309.889385][ T9633] Call Trace:
[  309.889392][ T9633]  <TASK>
[  309.889401][ T9633]  dump_stack_lvl+0x100/0x190
[  309.889444][ T9633]  should_fail_ex.cold+0x5/0xa
[  309.889472][ T9633]  should_failslab+0xc2/0x120
[  309.889496][ T9633]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  309.889534][ T9633]  ? ptlock_alloc+0x1f/0x70
[  309.889596][ T9633]  ptlock_alloc+0x1f/0x70
[  309.889637][ T9633]  pte_alloc_one+0x84/0x3e0
[  309.889674][ T9633]  __pte_alloc+0x6d/0x3f0
[  309.889709][ T9633]  ? __pfx___pte_alloc+0x10/0x10
[  309.889733][ T9633]  ? _raw_spin_unlock+0x28/0x50
[  309.889761][ T9633]  ? __pmd_alloc+0x6aa/0x9c0
[  309.889790][ T9633]  move_page_tables+0x257e/0x4500
[  309.889828][ T9633]  ? __pfx_copy_vma+0x10/0x10
[  309.889874][ T9633]  ? __pfx_move_page_tables+0x10/0x10
[  309.889932][ T9633]  copy_vma_and_data+0x25c/0x7c0
[  309.889970][ T9633]  ? __pfx_copy_vma_and_data+0x10/0x10
[  309.890017][ T9633]  ? __vma_start_write+0x17f/0x280
[  309.890048][ T9633]  ? __pfx___vma_start_write+0x10/0x10
[  309.890086][ T9633]  move_vma+0x51b/0x1890
[  309.890125][ T9633]  ? __pfx_move_vma+0x10/0x10
[  309.890162][ T9633]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  309.890189][ T9633]  ? cap_mmap_addr+0x4b/0x120
[  309.890221][ T9633]  ? bpf_lsm_mmap_addr+0x9/0x30
[  309.890258][ T9633]  ? security_mmap_addr+0x71/0x1e0
[  309.890282][ T9633]  ? __get_unmapped_area+0x255/0x3e0
[  309.890310][ T9633]  ? vrm_set_new_addr+0x204/0x290
[  309.890347][ T9633]  mremap_to+0x1b7/0x450
[  309.890382][ T9633]  do_mremap+0xb76/0x2130
[  309.890429][ T9633]  ? __pfx_do_mremap+0x10/0x10
[  309.890469][ T9633]  ? ksys_write+0x190/0x250
[  309.890535][ T9633]  __do_sys_mremap+0x126/0x170
[  309.890583][ T9633]  ? __pfx___do_sys_mremap+0x10/0x10
[  309.890638][ T9633]  ? __x64_sys_futex+0x34f/0x4d0
[  309.890689][ T9633]  do_syscall_64+0x106/0xf80
[  309.890717][ T9633]  ? clear_bhb_loop+0x40/0x90
[  309.890748][ T9633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.890779][ T9633] RIP: 0033:0x7f685019c799
[  309.890800][ T9633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.890824][ T9633] RSP: 002b:00007f6851107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  309.890848][ T9633] RAX: ffffffffffffffda RBX: 00007f6850416090 RCX: 00007f685019c799
[  309.890865][ T9633] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000
[  309.890881][ T9633] RBP: 00007f6850232bd9 R08: 0000000100000000 R09: 0000000000000000
[  309.890896][ T9633] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  309.890911][ T9633] R13: 00007f6850416128 R14: 00007f6850416090 R15: 00007ffdad79d958
[  309.890943][ T9633]  </TASK>
[  310.264444][ T9621] kexec: Could not allocate control_code_buffer
[  312.239411][ T9681] FAULT_INJECTION: forcing a failure.
[  312.239411][ T9681] name fail_futex, interval 1, probability 0, space 0, times 0
[  312.253356][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.2.817 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  312.253422][ T9681] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  312.253436][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  312.253456][ T9681] Call Trace:
[  312.253466][ T9681]  <TASK>
[  312.253479][ T9681]  dump_stack_lvl+0x100/0x190
[  312.253536][ T9681]  should_fail_ex.cold+0x5/0xa
[  312.253576][ T9681]  get_futex_key+0x1d2/0x1620
[  312.253623][ T9681]  ? __pfx_get_futex_key+0x10/0x10
[  312.253678][ T9681]  futex_wait_setup+0x81/0x500
[  312.253743][ T9681]  __futex_wait+0x19f/0x300
[  312.253799][ T9681]  ? __pfx___futex_wait+0x10/0x10
[  312.253849][ T9681]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  312.253892][ T9681]  ? __pfx_futex_wake_mark+0x10/0x10
[  312.253950][ T9681]  ? futex_hash+0x2c5/0x380
[  312.254003][ T9681]  futex_wait+0xed/0x380
[  312.254054][ T9681]  ? __pfx_futex_wait+0x10/0x10
[  312.254116][ T9681]  ? ksys_shmctl.constprop.0+0x19b/0x390
[  312.254160][ T9681]  do_futex+0x1ef/0x350
[  312.254210][ T9681]  ? __pfx_do_futex+0x10/0x10
[  312.254264][ T9681]  __x64_sys_futex+0x34f/0x4d0
[  312.254312][ T9681]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  312.254357][ T9681]  ? __pfx___x64_sys_futex+0x10/0x10
[  312.254425][ T9681]  do_syscall_64+0x106/0xf80
[  312.254463][ T9681]  ? clear_bhb_loop+0x40/0x90
[  312.254506][ T9681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.254540][ T9681] RIP: 0033:0x7fa6acb9c799
[  312.254568][ T9681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.254601][ T9681] RSP: 002b:00007fa6ada1c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  312.254635][ T9681] RAX: ffffffffffffffda RBX: 00007fa6ace15fa8 RCX: 00007fa6acb9c799
[  312.254659][ T9681] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa6ace15fa8
[  312.254680][ T9681] RBP: 00007fa6ace15fa0 R08: 0000000000000000 R09: 0000000000000000
[  312.254700][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.254718][ T9681] R13: 00007fa6ace16038 R14: 00007ffda59877b0 R15: 00007ffda5987898
[  312.254760][ T9681]  </TASK>
[  313.235306][ T5827] Bluetooth: hci1: Malformed LE Event: 0x0b
[  313.874073][ T9734] netlink: 334 bytes leftover after parsing attributes in process `syz.2.831'.
[  315.137270][ T9756] hub 1-0:1.0: USB hub found
[  315.197544][ T9756] hub 1-0:1.0: 1 port detected
[  316.480414][ T9779] random: crng reseeded on system resumption
[  316.623663][ T9782] hub 1-0:1.0: USB hub found
[  316.645744][ T9782] hub 1-0:1.0: 1 port detected
[  316.998599][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  317.363282][ T9794] FAULT_INJECTION: forcing a failure.
[  317.363282][ T9794] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  317.418219][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.424848][ T9794] CPU: 0 UID: 0 PID: 9794 Comm: syz.2.844 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  317.424905][ T9794] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  317.424919][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  317.424940][ T9794] Call Trace:
[  317.424950][ T9794]  <TASK>
[  317.424964][ T9794]  dump_stack_lvl+0x100/0x190
[  317.425023][ T9794]  should_fail_ex.cold+0x5/0xa
[  317.425057][ T9794]  ? prepare_alloc_pages+0x16d/0x5f0
[  317.425099][ T9794]  should_fail_alloc_page+0xeb/0x140
[  317.425137][ T9794]  prepare_alloc_pages+0x1f0/0x5f0
[  317.425181][ T9794]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  317.425243][ T9794]  ? __pfx_css_rstat_updated+0x10/0x10
[  317.425285][ T9794]  ? lock_acquire+0x1cf/0x380
[  317.425337][ T9794]  ? rcu_is_watching+0x12/0xc0
[  317.425390][ T9794]  ? mod_memcg_lruvec_state+0x1a6/0x630
[  317.425440][ T9794]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  317.425492][ T9794]  ? rcu_read_unlock+0x17/0x60
[  317.425544][ T9794]  ? folio_remove_rmap_pmd+0x69c/0xed0
[  317.425596][ T9794]  ? split_huge_pmd_locked+0x3ba/0x3cf0
[  317.425641][ T9794]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  317.425700][ T9794]  ? policy_nodemask+0xed/0x4f0
[  317.425737][ T9794]  alloc_pages_mpol+0x1fb/0x550
[  317.425774][ T9794]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  317.425804][ T9794]  ? __split_huge_pmd+0x203/0x350
[  317.425845][ T9794]  ? __split_huge_pmd+0x203/0x350
[  317.425898][ T9794]  alloc_pages_noprof+0x131/0x390
[  317.425934][ T9794]  pte_alloc_one+0x1e/0x3e0
[  317.425974][ T9794]  __pte_alloc+0x6d/0x3f0
[  317.426006][ T9794]  ? __pfx___pte_alloc+0x10/0x10
[  317.426039][ T9794]  ? _raw_spin_unlock+0x28/0x50
[  317.426071][ T9794]  ? __pmd_alloc+0x6aa/0x9c0
[  317.426113][ T9794]  move_page_tables+0x257e/0x4500
[  317.426165][ T9794]  ? __pfx_copy_vma+0x10/0x10
[  317.426237][ T9794]  ? __pfx_move_page_tables+0x10/0x10
[  317.426310][ T9794]  ? finish_task_switch.isra.0+0x200/0xb80
[  317.426354][ T9794]  copy_vma_and_data+0x25c/0x7c0
[  317.426407][ T9794]  ? __pfx_copy_vma_and_data+0x10/0x10
[  317.426475][ T9794]  ? __vma_start_write+0x17f/0x280
[  317.426518][ T9794]  ? __pfx___vma_start_write+0x10/0x10
[  317.426572][ T9794]  move_vma+0x51b/0x1890
[  317.426626][ T9794]  ? __pfx_move_vma+0x10/0x10
[  317.426678][ T9794]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  317.426717][ T9794]  ? cap_mmap_addr+0x4b/0x120
[  317.426761][ T9794]  ? bpf_lsm_mmap_addr+0x9/0x30
[  317.426810][ T9794]  ? security_mmap_addr+0x71/0x1e0
[  317.426841][ T9794]  ? __get_unmapped_area+0x255/0x3e0
[  317.426848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.426881][ T9794]  ? vrm_set_new_addr+0x204/0x290
[  317.426998][ T9794]  mremap_to+0x1b7/0x450
[  317.427162][ T9794]  do_mremap+0xb76/0x2130
[  317.427352][ T9794]  ? __pfx_do_mremap+0x10/0x10
[  317.427494][ T9794]  ? ksys_write+0x190/0x250
[  317.427658][ T9794]  __do_sys_mremap+0x126/0x170
[  317.427795][ T9794]  ? __pfx___do_sys_mremap+0x10/0x10
[  317.427950][ T9794]  ? __x64_sys_futex+0x34f/0x4d0
[  317.428105][ T9794]  do_syscall_64+0x106/0xf80
[  317.428207][ T9794]  ? clear_bhb_loop+0x40/0x90
[  317.428312][ T9794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.428410][ T9794] RIP: 0033:0x7fa6acb9c799
[  317.428510][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.428600][ T9794] RSP: 002b:00007fa6ad9fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  317.428683][ T9794] RAX: ffffffffffffffda RBX: 00007fa6ace16090 RCX: 00007fa6acb9c799
[  317.428738][ T9794] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000
[  317.428790][ T9794] RBP: 00007fa6acc32bd9 R08: 0000000100000000 R09: 0000000000000000
[  317.428845][ T9794] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  317.428898][ T9794] R13: 00007fa6ace16128 R14: 00007fa6ace16090 R15: 00007ffda5987898
[  317.428999][ T9794]  </TASK>
[  317.939288][ T9799] zram: Added device: zram1
[  318.502235][ T9812] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.850: bg 7: bad block bitmap checksum
[  318.514455][ T9812] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74
[  318.541813][ T9812] EXT4-fs (sda1): This should not happen!! Data will be lost
[  318.541813][ T9812] 
[  318.594765][ T5827] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5
[  318.886909][ T9825] FAULT_INJECTION: forcing a failure.
[  318.886909][ T9825] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  318.919763][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.2.852 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  318.919818][ T9825] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  318.919831][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  318.919851][ T9825] Call Trace:
[  318.919862][ T9825]  <TASK>
[  318.919875][ T9825]  dump_stack_lvl+0x100/0x190
[  318.919931][ T9825]  should_fail_ex.cold+0x5/0xa
[  318.919974][ T9825]  ? prepare_alloc_pages+0x16d/0x5f0
[  318.920015][ T9825]  should_fail_alloc_page+0xeb/0x140
[  318.920051][ T9825]  prepare_alloc_pages+0x1f0/0x5f0
[  318.920094][ T9825]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  318.920146][ T9825]  ? __pfx_css_rstat_updated+0x10/0x10
[  318.920186][ T9825]  ? lock_acquire+0x1cf/0x380
[  318.920239][ T9825]  ? rcu_is_watching+0x12/0xc0
[  318.920288][ T9825]  ? mod_memcg_lruvec_state+0x1a6/0x630
[  318.920338][ T9825]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  318.920388][ T9825]  ? rcu_read_unlock+0x17/0x60
[  318.920436][ T9825]  ? folio_remove_rmap_pmd+0x69c/0xed0
[  318.920487][ T9825]  ? split_huge_pmd_locked+0x3ba/0x3cf0
[  318.920531][ T9825]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  318.920591][ T9825]  ? policy_nodemask+0xed/0x4f0
[  318.920628][ T9825]  alloc_pages_mpol+0x1fb/0x550
[  318.920662][ T9825]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  318.920693][ T9825]  ? __split_huge_pmd+0x203/0x350
[  318.920734][ T9825]  ? __split_huge_pmd+0x203/0x350
[  318.920786][ T9825]  alloc_pages_noprof+0x131/0x390
[  318.920822][ T9825]  pte_alloc_one+0x1e/0x3e0
[  318.920863][ T9825]  __pte_alloc+0x6d/0x3f0
[  318.920895][ T9825]  ? __pfx___pte_alloc+0x10/0x10
[  318.920927][ T9825]  ? _raw_spin_unlock+0x28/0x50
[  318.920971][ T9825]  ? __pmd_alloc+0x6aa/0x9c0
[  318.921012][ T9825]  move_page_tables+0x257e/0x4500
[  318.921063][ T9825]  ? __pfx_copy_vma+0x10/0x10
[  318.921110][ T9825]  ? __pfx_css_rstat_updated+0x10/0x10
[  318.921162][ T9825]  ? __pfx_move_page_tables+0x10/0x10
[  318.921235][ T9825]  ? finish_task_switch.isra.0+0x200/0xb80
[  318.921278][ T9825]  copy_vma_and_data+0x25c/0x7c0
[  318.921331][ T9825]  ? __pfx_copy_vma_and_data+0x10/0x10
[  318.921398][ T9825]  ? __vma_start_write+0x17f/0x280
[  318.921441][ T9825]  ? __pfx___vma_start_write+0x10/0x10
[  318.921495][ T9825]  move_vma+0x51b/0x1890
[  318.921551][ T9825]  ? __pfx_move_vma+0x10/0x10
[  318.921602][ T9825]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  318.921640][ T9825]  ? cap_mmap_addr+0x4b/0x120
[  318.921684][ T9825]  ? bpf_lsm_mmap_addr+0x9/0x30
[  318.921735][ T9825]  ? security_mmap_addr+0x71/0x1e0
[  318.921768][ T9825]  ? __get_unmapped_area+0x255/0x3e0
[  318.921808][ T9825]  ? vrm_set_new_addr+0x204/0x290
[  318.921859][ T9825]  mremap_to+0x1b7/0x450
[  318.921909][ T9825]  do_mremap+0xb76/0x2130
[  318.921982][ T9825]  ? __pfx_do_mremap+0x10/0x10
[  318.922042][ T9825]  ? ksys_write+0x190/0x250
[  318.922106][ T9825]  __do_sys_mremap+0x126/0x170
[  318.922155][ T9825]  ? __pfx___do_sys_mremap+0x10/0x10
[  318.922217][ T9825]  ? __x64_sys_futex+0x34f/0x4d0
[  318.922289][ T9825]  do_syscall_64+0x106/0xf80
[  318.922327][ T9825]  ? clear_bhb_loop+0x40/0x90
[  318.922370][ T9825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.922406][ T9825] RIP: 0033:0x7fa6acb9c799
[  318.922434][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.922468][ T9825] RSP: 002b:00007fa6ad9fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  318.922501][ T9825] RAX: ffffffffffffffda RBX: 00007fa6ace16090 RCX: 00007fa6acb9c799
[  318.922524][ T9825] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000
[  318.922544][ T9825] RBP: 00007fa6acc32bd9 R08: 0000000100000000 R09: 0000000000000000
[  318.922565][ T9825] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  318.922585][ T9825] R13: 00007fa6ace16128 R14: 00007fa6ace16090 R15: 00007ffda5987898
[  318.922629][ T9825]  </TASK>
[  320.168660][ T9852] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  320.181412][ T9852] EXT4-fs (sda1): This should not happen!! Data will be lost
[  320.181412][ T9852] 
[  322.653505][ T9908] netlink: 'syz.4.875': attribute type 1 has an invalid length.
[  322.672678][ T9908] netlink: 'syz.4.875': attribute type 1 has an invalid length.
[  322.680754][ T9908] netlink: 124 bytes leftover after parsing attributes in process `syz.4.875'.
[  322.691212][ T9908] netlink: 100 bytes leftover after parsing attributes in process `syz.4.875'.
[  323.171615][ T9921] random: crng reseeded on system resumption
[  323.251780][ T9921] hub 1-0:1.0: USB hub found
[  323.270521][ T9921] hub 1-0:1.0: 1 port detected
[  323.336812][ T9902] hub 1-0:1.0: USB hub found
[  323.352324][ T9902] hub 1-0:1.0: 1 port detected
[  323.415158][ T9925] Process accounting resumed
[  324.700860][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.889'.
[  325.221904][ T9988] smpboot: CPU 1 is now offline
[  325.246036][ T9996] vivid-007: =================  START STATUS  =================
[  325.263942][ T9996] vivid-007: Generate PTS: true
[  325.289201][ T9996] vivid-007: Generate SCR: true
[  325.301062][ T9996] tpg source WxH: 320x240 (Y'CbCr)
[  325.335001][ T9996] tpg field: 1
[  325.347218][ T9996] tpg crop: (0,0)/320x240
[  325.383394][ T9996] tpg compose: (0,0)/320x240
[  325.403703][ T9996] tpg colorspace: 8
[  325.423615][ T9996] tpg transfer function: 0/0
[  325.437555][ T9996] tpg Y'CbCr encoding: 0/0
[  325.457237][ T9996] tpg quantization: 0/0
[  325.475826][ T9996] tpg RGB range: 0/2
[  325.493174][ T9996] vivid-007: ==================  END STATUS  ==================
[  325.866702][T10003] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  325.912579][T10003] EXT4-fs (sda1): This should not happen!! Data will be lost
[  325.912579][T10003] 
[  327.706523][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  328.456172][T10043] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.907'.
[  328.816317][T10047] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  328.874447][T10047] EXT4-fs (sda1): This should not happen!! Data will be lost
[  328.874447][T10047] 
[  331.270449][T10084] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  331.360576][T10084] EXT4-fs (sda1): This should not happen!! Data will be lost
[  331.360576][T10084] 
[  332.870725][T10118] Invalid ELF header magic: != ELF
[  333.844605][T10133] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  333.936355][T10133] EXT4-fs (sda1): This should not happen!! Data will be lost
[  333.936355][T10133] 
[  335.543907][T10156] NFSD: Failed to start, no listeners configured.
[  336.132150][T10167] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  336.183539][T10167] EXT4-fs (sda1): This should not happen!! Data will be lost
[  336.183539][T10167] 
[  337.472759][T10182] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  337.745845][T10182] EXT4-fs (sda1): This should not happen!! Data will be lost
[  337.745845][T10182] 
[  338.022932][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'.
[  338.979233][T10202] Invalid ELF header magic: != ELF
[  339.139318][T10209] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  339.209726][T10209] EXT4-fs (sda1): This should not happen!! Data will be lost
[  339.209726][T10209] 
[  340.580093][T10235] bond0: no command found in slaves file - use +ifname or -ifname
[  342.497887][T10264] perf: Dynamic interrupt throttling disabled, can hang your system!
[  344.056169][T10296] Invalid ELF header magic: != ELF
[  344.968621][  T140] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  345.059820][  T140] EXT4-fs (sda1): This should not happen!! Data will be lost
[  345.059820][  T140] 
[  345.225324][T10318] perf: Dynamic interrupt throttling disabled, can hang your system!
[  345.924408][T10322] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  346.039771][T10322] EXT4-fs (sda1): This should not happen!! Data will be lost
[  346.039771][T10322] 
[  347.000354][T10334] netlink: 342 bytes leftover after parsing attributes in process `syz.4.971'.
[  347.181985][T10334] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  347.777937][T10343] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  348.017556][T10343] EXT4-fs (sda1): This should not happen!! Data will be lost
[  348.017556][T10343] 
[  349.278368][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'.
[  349.449443][T10385] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  349.639680][T10385] EXT4-fs (sda1): This should not happen!! Data will be lost
[  349.639680][T10385] 
[  350.210505][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'.
[  350.291537][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'.
[  350.433315][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'.
[  350.505435][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'.
[  350.598908][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'.
[  351.154074][T10417] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  351.226327][T10417] EXT4-fs (sda1): This should not happen!! Data will be lost
[  351.226327][T10417] 
[  354.733317][T10497] sp0: Synchronizing with TNC
[  355.356578][T10514] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  355.462381][T10514] EXT4-fs (sda1): This should not happen!! Data will be lost
[  355.462381][T10514] 
[  356.397469][T10542] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  356.495667][T10542] EXT4-fs (sda1): This should not happen!! Data will be lost
[  356.495667][T10542] 
[  357.409409][T10441] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  357.508065][T10441] EXT4-fs (sda1): This should not happen!! Data will be lost
[  357.508065][T10441] 
[  359.270082][T10589] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  359.462048][T10589] EXT4-fs (sda1): This should not happen!! Data will be lost
[  359.462048][T10589] 
[  360.220647][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'.
[  360.565040][T10602] team0: Port device team_slave_1 removed
[  360.812846][T10610] FAULT_INJECTION: forcing a failure.
[  360.812846][T10610] name failslab, interval 1, probability 0, space 0, times 0
[  360.919751][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.1.1028 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  360.919795][T10610] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  360.919804][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  360.919819][T10610] Call Trace:
[  360.919827][T10610]  <TASK>
[  360.919837][T10610]  dump_stack_lvl+0x100/0x190
[  360.919967][T10610]  should_fail_ex.cold+0x5/0xa
[  360.919996][T10610]  should_failslab+0xc2/0x120
[  360.920020][T10610]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  360.920057][T10610]  ? ptlock_alloc+0x1f/0x70
[  360.920095][T10610]  ptlock_alloc+0x1f/0x70
[  360.920132][T10610]  pte_alloc_one+0x84/0x3e0
[  360.920163][T10610]  do_fault+0x8cc/0x1950
[  360.920188][T10610]  ? __pmd_alloc+0x6aa/0x9c0
[  360.920217][T10610]  __handle_mm_fault+0x180f/0x2b60
[  360.920254][T10610]  ? mt_find+0x45e/0x8e0
[  360.920287][T10610]  ? __pfx___handle_mm_fault+0x10/0x10
[  360.920324][T10610]  ? __pfx_mt_find+0x10/0x10
[  360.920380][T10610]  handle_mm_fault+0x36d/0xa20
[  360.920419][T10610]  __get_user_pages+0xf9c/0x34d0
[  360.920456][T10610]  ? __pfx___get_user_pages+0x10/0x10
[  360.920491][T10610]  populate_vma_page_range+0x267/0x3f0
[  360.920522][T10610]  ? __pfx_populate_vma_page_range+0x10/0x10
[  360.920551][T10610]  ? __pfx_find_vma_intersection+0x10/0x10
[  360.920595][T10610]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  360.920640][T10610]  __mm_populate+0x107/0x3a0
[  360.920670][T10610]  ? __pfx___mm_populate+0x10/0x10
[  360.920699][T10610]  ? up_write+0x290/0x4f0
[  360.920739][T10610]  do_mlock+0x3f0/0x7f0
[  360.920778][T10610]  ? __pfx_do_mlock+0x10/0x10
[  360.920810][T10610]  ? __x64_sys_futex+0x34f/0x4d0
[  360.920843][T10610]  ? __x64_sys_futex+0x358/0x4d0
[  360.920966][T10610]  ? xfd_validate_state+0x129/0x190
[  360.921012][T10610]  __x64_sys_mlock+0x59/0x80
[  360.921050][T10610]  do_syscall_64+0x106/0xf80
[  360.921078][T10610]  ? clear_bhb_loop+0x40/0x90
[  360.921115][T10610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.921145][T10610] RIP: 0033:0x7f685019c799
[  360.921168][T10610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.921194][T10610] RSP: 002b:00007f6851128028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  360.921219][T10610] RAX: ffffffffffffffda RBX: 00007f6850415fa0 RCX: 00007f685019c799
[  360.921236][T10610] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112
[  360.921252][T10610] RBP: 00007f6850232bd9 R08: 0000000000000000 R09: 0000000000000000
[  360.921267][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  360.921283][T10610] R13: 00007f6850416038 R14: 00007f6850415fa0 R15: 00007ffdad79d958
[  360.921316][T10610]  </TASK>
[  362.933560][T10630] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  362.995334][T10630] EXT4-fs (sda1): This should not happen!! Data will be lost
[  362.995334][T10630] 
[  364.868095][T10647] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  366.051663][T10654] zswap: compressor  not available
[  366.094042][T10663] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead.
[  366.558377][T10672] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  366.738994][T10672] EXT4-fs (sda1): This should not happen!! Data will be lost
[  366.738994][T10672] 
[  367.903521][T10703] netlink: NAT attribute has 4 unknown bytes
[  368.260420][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  368.317525][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  370.441338][T10748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  370.601685][T10748] EXT4-fs (sda1): This should not happen!! Data will be lost
[  370.601685][T10748] 
[  372.336145][T10780] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  372.816422][T10780] EXT4-fs (sda1): This should not happen!! Data will be lost
[  372.816422][T10780] 
[  373.577790][T10806] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  373.747564][T10806] EXT4-fs (sda1): This should not happen!! Data will be lost
[  373.747564][T10806] 
[  374.614468][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  378.460950][T10875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'.
[  378.841773][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.850940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  380.071167][T10900] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  380.163472][T10900] EXT4-fs (sda1): This should not happen!! Data will be lost
[  380.163472][T10900] 
[  382.060391][T10769] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  382.139916][T10769] EXT4-fs (sda1): This should not happen!! Data will be lost
[  382.139916][T10769] 
[  382.212084][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'.
[  383.921117][T10922] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  384.059876][T10922] EXT4-fs (sda1): This should not happen!! Data will be lost
[  384.059876][T10922] 
[  384.167230][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'.
[  384.237142][T10926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.280563][T10926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.330825][T10926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.330859][T10926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.855198][T10971] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  387.965895][T10971] EXT4-fs (sda1): This should not happen!! Data will be lost
[  387.965895][T10971] 
[  388.399265][T10976] __vm_enough_memory: pid: 10976, comm: syz.2.1093, bytes: 4398046511104 not enough memory for the allocation
[  390.602629][T10989] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  390.643241][T10989] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  390.825924][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'.
[  390.893739][T10989] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  390.960957][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  391.923173][T11014] Invalid ELF header magic: != ELF
[  394.531971][T11050] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  394.593528][T11050] netlink: 318 bytes leftover after parsing attributes in process `syz.2.1111'.
[  395.470004][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'.
[  395.503373][   T29] audit: type=1800 audit(4294967522.120:14): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1115" name="features" dev="configfs" ino=35238 res=0 errno=0
[  396.072269][T11072] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  396.101551][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'.
[  396.150013][T11072] EXT4-fs (sda1): This should not happen!! Data will be lost
[  396.150013][T11072] 
[  397.019834][T11081] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  397.181794][T11081] EXT4-fs (sda1): This should not happen!! Data will be lost
[  397.181794][T11081] 
[  399.851736][T11121] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  401.167138][T11134] FAULT_INJECTION: forcing a failure.
[  401.167138][T11134] name failslab, interval 1, probability 0, space 0, times 0
[  401.282740][T11134] CPU: 0 UID: 0 PID: 11134 Comm: syz.1.1134 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  401.282780][T11134] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  401.282789][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  401.282803][T11134] Call Trace:
[  401.282811][T11134]  <TASK>
[  401.282820][T11134]  dump_stack_lvl+0x100/0x190
[  401.282861][T11134]  should_fail_ex.cold+0x5/0xa
[  401.282889][T11134]  should_failslab+0xc2/0x120
[  401.282911][T11134]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  401.282945][T11134]  ? vm_area_dup+0x27/0x8e0
[  401.282981][T11134]  vm_area_dup+0x27/0x8e0
[  401.283012][T11134]  __split_vma+0x18c/0xd90
[  401.283047][T11134]  ? __pfx___split_vma+0x10/0x10
[  401.283077][T11134]  ? mas_ascend+0x53d/0xb30
[  401.283118][T11134]  vma_modify+0x197d/0x2250
[  401.283165][T11134]  ? __pfx_vma_modify+0x10/0x10
[  401.283206][T11134]  vma_modify_flags+0x257/0x3d0
[  401.283239][T11134]  ? __pfx_vma_modify_flags+0x10/0x10
[  401.283293][T11134]  ? rcu_is_watching+0x12/0xc0
[  401.283328][T11134]  ? percpu_counter_add_batch+0xb9/0x230
[  401.283375][T11134]  mprotect_fixup+0x209/0xb70
[  401.283410][T11134]  ? __pfx_mprotect_fixup+0x10/0x10
[  401.283442][T11134]  ? __pfx_mas_prev+0x10/0x10
[  401.283477][T11134]  do_mprotect_pkey+0x9e1/0xe70
[  401.283515][T11134]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  401.283577][T11134]  __x64_sys_mprotect+0x78/0xc0
[  401.283606][T11134]  ? lockdep_hardirqs_on+0x78/0x100
[  401.283633][T11134]  do_syscall_64+0x106/0xf80
[  401.283658][T11134]  ? clear_bhb_loop+0x40/0x90
[  401.283687][T11134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.283711][T11134] RIP: 0033:0x7f685019c597
[  401.283731][T11134] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.283754][T11134] RSP: 002b:00007ffdad79d8f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  401.283776][T11134] RAX: ffffffffffffffda RBX: 00007f68510e66c0 RCX: 00007f685019c597
[  401.283792][T11134] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f68510c7000
[  401.283806][T11134] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  401.283820][T11134] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdad79da50
[  401.283834][T11134] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  401.283864][T11134]  </TASK>
[  403.331598][T11161] zswap: compressor  not available
[  403.401008][T11164] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  406.976411][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'.
[  407.091815][T11222] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  407.101555][T11221] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1155'.
[  407.148157][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1155'.
[  408.096683][T11238] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1159'.
[  410.678248][T11273] FAULT_INJECTION: forcing a failure.
[  410.678248][T11273] name failslab, interval 1, probability 0, space 0, times 0
[  411.204639][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.1.1163 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  411.204683][T11273] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  411.204693][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  411.204709][T11273] Call Trace:
[  411.204717][T11273]  <TASK>
[  411.204726][T11273]  dump_stack_lvl+0x100/0x190
[  411.204768][T11273]  should_fail_ex.cold+0x5/0xa
[  411.204808][T11273]  ? copy_splice_read+0x1a3/0xb90
[  411.204848][T11273]  should_failslab+0xc2/0x120
[  411.204872][T11273]  __kmalloc_noprof+0xe0/0x850
[  411.204915][T11273]  copy_splice_read+0x1a3/0xb90
[  411.204955][T11273]  ? __pfx_pipe_to_null+0x10/0x10
[  411.204991][T11273]  ? __pfx_copy_splice_read+0x10/0x10
[  411.205042][T11273]  ? __pfx_splice_from_pipe+0x10/0x10
[  411.205091][T11273]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  411.205131][T11273]  ? __pfx_copy_splice_read+0x10/0x10
[  411.205171][T11273]  do_splice_read+0x285/0x370
[  411.205213][T11273]  splice_direct_to_actor+0x2a1/0xa30
[  411.205262][T11273]  ? __pfx_direct_splice_actor+0x10/0x10
[  411.205308][T11273]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  411.205358][T11273]  do_splice_direct+0x174/0x240
[  411.205399][T11273]  ? __pfx_do_splice_direct+0x10/0x10
[  411.205441][T11273]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  411.205482][T11273]  ? bpf_lsm_file_permission+0x9/0x10
[  411.205520][T11273]  ? security_file_permission+0x76/0x210
[  411.205569][T11273]  ? rw_verify_area+0xce/0x6d0
[  411.205613][T11273]  do_sendfile+0xadc/0xe20
[  411.205655][T11273]  ? __pfx_do_sendfile+0x10/0x10
[  411.205697][T11273]  ? __x64_sys_futex+0x34f/0x4d0
[  411.205729][T11273]  ? __x64_sys_futex+0x358/0x4d0
[  411.205765][T11273]  __x64_sys_sendfile64+0x1d8/0x220
[  411.205792][T11273]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  411.205829][T11273]  do_syscall_64+0x106/0xf80
[  411.205857][T11273]  ? clear_bhb_loop+0x40/0x90
[  411.205887][T11273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.205913][T11273] RIP: 0033:0x7f685019c799
[  411.205933][T11273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.205958][T11273] RSP: 002b:00007f68510c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  411.205981][T11273] RAX: ffffffffffffffda RBX: 00007f6850416270 RCX: 00007f685019c799
[  411.205998][T11273] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  411.206012][T11273] RBP: 00007f6850232bd9 R08: 0000000000000000 R09: 0000000000000000
[  411.206027][T11273] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000
[  411.206049][T11273] R13: 00007f6850416308 R14: 00007f6850416270 R15: 00007ffdad79d958
[  411.206080][T11273]  </TASK>
[  412.464375][T10349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  412.600295][T11289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  412.666238][T10348] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  412.692653][T11289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  412.707682][T11291] delete_channel: no stack
[  412.759682][T10348] EXT4-fs (sda1): This should not happen!! Data will be lost
[  412.759682][T10348] 
[  412.868552][T11289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  412.929279][T11289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  414.255510][T11286] chnl_net:caif_netlink_parms(): no params data found
[  415.069676][T11289] Bluetooth: hci3: command tx timeout
[  415.323856][T11286] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.359820][T11286] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.412239][T11286] bridge_slave_0: entered allmulticast mode
[  415.459947][T11286] bridge_slave_0: entered promiscuous mode
[  415.506500][T11286] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.571320][T11286] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.611669][T11286] bridge_slave_1: entered allmulticast mode
[  415.660268][T11286] bridge_slave_1: entered promiscuous mode
[  416.623762][T11286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.687600][T11286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.905048][T11286] team0: Port device team_slave_0 added
[  416.988585][T11286] team0: Port device team_slave_1 added
[  417.151418][T11289] Bluetooth: hci3: command tx timeout
[  417.241461][T11286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.289669][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.439692][T11286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.522266][T11286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.584441][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.759696][T11286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.947147][T11286] hsr_slave_0: entered promiscuous mode
[  418.977009][T11286] hsr_slave_1: entered promiscuous mode
[  419.008541][T11286] debugfs: 'hsr0' already exists in 'hsr'
[  419.035435][T11286] Cannot create hsr debugfs directory
[  419.229633][T11289] Bluetooth: hci3: command tx timeout
[  420.880972][T11286] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  421.024477][T11286] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  421.310295][T11289] Bluetooth: hci3: command tx timeout
[  421.402873][T11286] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  421.716239][T11376] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  422.345737][T11286] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  422.393137][T11376] EXT4-fs (sda1): This should not happen!! Data will be lost
[  422.393137][T11376] 
[  423.145340][T11286] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.221778][T11286] 8021q: adding VLAN 0 to HW filter on device team0
[  423.281655][T10769] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.292288][T10769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.360170][T10769] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.369302][T10769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.942548][T11399] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  427.932776][T11286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.012883][T10766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.932446][T11286] veth0_vlan: entered promiscuous mode
[  431.012111][T10766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.314990][T11286] veth1_vlan: entered promiscuous mode
[  431.448308][T11286] veth0_macvtap: entered promiscuous mode
[  431.495663][T11286] veth1_macvtap: entered promiscuous mode
[  431.578535][T11286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.629060][T11286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.096278][T10793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.146274][T10793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.434097][T10766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.553286][T10793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.587680][T10793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.707239][T10766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.331824][T10791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.429906][T10791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.715753][T10793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.728602][T10766] bridge_slave_0: left allmulticast mode
[  433.772378][T10766] bridge_slave_0: left promiscuous mode
[  433.793165][T10793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.845819][T10766] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.428666][T10766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.496212][T10766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.553800][T10766] bond0 (unregistering): Released all slaves
[  437.370687][T11475] futex_wake_op: syz.5.1167 tries to shift op by -2048; fix this program
[  437.430447][T11475] futex_wake_op: syz.5.1167 tries to shift op by -2048; fix this program
[  437.484747][T11475] 0x000000000001-0x000000020000 : ""
[  437.630406][T11475] ftl_cs: FTL header corrupt!
[  438.210466][   T29] audit: type=1326 audit(4294967564.830:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.3.1198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f99b9c799 code=0x0
[  438.703404][T11495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  439.893173][T11504] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  439.931065][T11504] EXT4-fs (sda1): This should not happen!! Data will be lost
[  439.931065][T11504] 
[  440.293916][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.304842][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  442.221123][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1204'.
[  442.312896][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.670218][T11520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.154848][T10769] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  443.306119][T10769] EXT4-fs (sda1): This should not happen!! Data will be lost
[  443.306119][T10769] 
[  443.449278][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1207'.
[  443.916476][T10353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.932961][T10353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.942531][T10353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.965122][T10353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.976494][T10353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  444.921899][T11532] team0: Port device team_slave_1 removed
[  445.436210][T11548] NFSD: Failed to start, no listeners configured.
[  446.017269][T11555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967104 (549755789312 ns) > initial count (26496 ns). Using initial count to start timer.
[  446.061639][T10353] Bluetooth: hci4: command tx timeout
[  448.110155][T10353] Bluetooth: hci4: command tx timeout
[  449.171145][T11322] syz.2.1172 (11322) used greatest stack depth: 19536 bytes left
[  449.855067][T11323] syz.2.1172 (11323) used greatest stack depth: 19448 bytes left
[  450.189689][T10353] Bluetooth: hci4: command tx timeout
[  450.224694][T11316] syz.2.1172 (11316) used greatest stack depth: 19256 bytes left
[  450.492897][T10766] hsr_slave_0: left promiscuous mode
[  450.530000][T10766] hsr_slave_1: left promiscuous mode
[  450.570346][T10766] veth1_macvtap: left promiscuous mode
[  450.576322][T10766] veth0_macvtap: left promiscuous mode
[  450.612004][T10766] veth1_vlan: left promiscuous mode
[  450.618060][T10766] veth0_vlan: left promiscuous mode
[  451.023387][T11594] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  451.049683][T11594] EXT4-fs (sda1): This should not happen!! Data will be lost
[  451.049683][T11594] 
[  451.296674][T10766] team0 (unregistering): Port device team_slave_1 removed
[  451.339800][T10766] team0 (unregistering): Port device team_slave_0 removed
[  451.826584][T11598] FAULT_INJECTION: forcing a failure.
[  451.826584][T11598] name failslab, interval 1, probability 0, space 0, times 0
[  451.927858][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.1.1214 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  451.927902][T11598] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  451.927911][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.927927][T11598] Call Trace:
[  451.927936][T11598]  <TASK>
[  451.927945][T11598]  dump_stack_lvl+0x100/0x190
[  451.927989][T11598]  should_fail_ex.cold+0x5/0xa
[  451.928017][T11598]  should_failslab+0xc2/0x120
[  451.928041][T11598]  __kmalloc_cache_noprof+0x7a/0x6f0
[  451.928072][T11598]  ? percpu_ref_init+0xec/0x3f0
[  451.928108][T11598]  ? __pfx_free_ioctx_users+0x10/0x10
[  451.928132][T11598]  percpu_ref_init+0xec/0x3f0
[  451.928163][T11598]  ? __init_waitqueue_head+0xca/0x150
[  451.928206][T11598]  ioctx_alloc+0x2f0/0x21d0
[  451.928240][T11598]  ? find_held_lock+0x2b/0x80
[  451.928263][T11598]  ? __pfx_ioctx_alloc+0x10/0x10
[  451.928296][T11598]  __x64_sys_io_setup+0xc9/0x220
[  451.928325][T11598]  do_syscall_64+0x106/0xf80
[  451.928361][T11598]  ? clear_bhb_loop+0x40/0x90
[  451.928396][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.928422][T11598] RIP: 0033:0x7f685019c799
[  451.928443][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.928467][T11598] RSP: 002b:00007f6851128028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  451.928492][T11598] RAX: ffffffffffffffda RBX: 00007f6850415fa0 RCX: 00007f685019c799
[  451.928509][T11598] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e
[  451.928529][T11598] RBP: 00007f6850232bd9 R08: 0000000000000000 R09: 0000000000000000
[  451.928563][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.928583][T11598] R13: 00007f6850416038 R14: 00007f6850415fa0 R15: 00007ffdad79d958
[  451.928615][T11598]  </TASK>
[  452.549714][T10353] Bluetooth: hci4: command tx timeout
[  452.576018][T11542] chnl_net:caif_netlink_parms(): no params data found
[  453.543113][T11542] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.576958][T11542] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.624728][T11542] bridge_slave_0: entered allmulticast mode
[  453.652346][T11618] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  453.678023][T11542] bridge_slave_0: entered promiscuous mode
[  453.693980][T11618] EXT4-fs (sda1): This should not happen!! Data will be lost
[  453.693980][T11618] 
[  453.748799][T11542] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.788828][T11542] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.825277][T11542] bridge_slave_1: entered allmulticast mode
[  453.876122][T11620] __vm_enough_memory: pid: 11620, comm: syz.3.1216, bytes: 4398046511104 not enough memory for the allocation
[  453.901402][T11542] bridge_slave_1: entered promiscuous mode
[  454.178340][T11542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.496298][T10766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.701239][T11542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.108531][T10766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.150536][T11637] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  455.225292][T11542] team0: Port device team_slave_0 added
[  455.235965][T11637] EXT4-fs (sda1): This should not happen!! Data will be lost
[  455.235965][T11637] 
[  455.270974][T11542] team0: Port device team_slave_1 added
[  455.477914][T10766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.030912][T10766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.161902][T11542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.199605][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.333778][T11542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.386509][T11542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.420339][T11542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.543784][T11542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.312017][T11542] hsr_slave_0: entered promiscuous mode
[  457.353145][T11542] hsr_slave_1: entered promiscuous mode
[  457.393679][T11542] debugfs: 'hsr0' already exists in 'hsr'
[  457.429448][T11542] Cannot create hsr debugfs directory
[  458.643213][T10766] bridge_slave_1: left allmulticast mode
[  458.684465][T10766] bridge_slave_1: left promiscuous mode
[  458.727597][T10766] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.845058][T10766] bridge_slave_0: left allmulticast mode
[  458.888724][T10766] bridge_slave_0: left promiscuous mode
[  458.956750][T10766] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.017161][T11675] random: crng reseeded on system resumption
[  460.508042][T11683] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  460.590195][T11683] EXT4-fs (sda1): This should not happen!! Data will be lost
[  460.590195][T11683] 
[  460.808483][T10766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.837097][T10766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.858632][T10766] bond0 (unregistering): Released all slaves
[  462.055504][T10766] hsr_slave_0: left promiscuous mode
[  462.097471][T10766] hsr_slave_1: left promiscuous mode
[  462.131326][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.161634][T10766] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.217945][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.260757][T10766] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.362695][T10766] veth0_macvtap: left promiscuous mode
[  462.386168][T10766] veth1_vlan: left promiscuous mode
[  462.416587][T10766] veth0_vlan: left promiscuous mode
[  463.979178][T10766] team0 (unregistering): Port device team_slave_0 removed
[  464.608644][T11542] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  464.710332][T11542] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  464.817045][T11542] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  464.944971][T11542] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  465.151129][T11714] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  465.233473][T11714] EXT4-fs (sda1): This should not happen!! Data will be lost
[  465.233473][T11714] 
[  466.153515][T11542] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.305582][T11542] 8021q: adding VLAN 0 to HW filter on device team0
[  466.412659][T10769] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.422327][T10769] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.558980][T10769] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.566647][T10769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.232582][T11542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.365222][T11781] random: crng reseeded on system resumption
[  469.414085][T11795] netlink: zone id is out of range
[  469.455681][T11795] netlink: zone id is out of range
[  469.501799][T11795] netlink: zone id is out of range
[  469.542645][T11798] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1241'.
[  469.615968][T11542] veth0_vlan: entered promiscuous mode
[  469.622432][T11795] netlink: zone id is out of range
[  469.665858][T11795] netlink: zone id is out of range
[  469.704726][T11795] netlink: zone id is out of range
[  469.716326][T11542] veth1_vlan: entered promiscuous mode
[  469.745623][T11795] netlink: zone id is out of range
[  469.770688][T11795] netlink: zone id is out of range
[  469.818594][T11795] netlink: zone id is out of range
[  469.850469][T11795] netlink: zone id is out of range
[  469.877109][T11542] veth0_macvtap: entered promiscuous mode
[  469.946885][T11542] veth1_macvtap: entered promiscuous mode
[  470.211937][T11542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.499187][T11542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.617341][T11810] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  470.648350][T10348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.683887][T11810] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  470.696332][T10348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.739302][T11810] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  470.779800][T11810] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  470.814316][T11810] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  470.835532][T11810] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  470.865306][T11810] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  470.885102][T10348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.916567][T11810] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  470.937634][T10348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.403479][T10769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.452915][T10769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.610656][T10769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.676200][T10769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.669681][T10353] Bluetooth: hci0: command 0x0c1a tx timeout
[  472.750016][T10353] Bluetooth: hci3: command 0x0c1a tx timeout
[  472.756791][T10353] Bluetooth: hci2: command 0x0c1a tx timeout
[  472.910054][T10353] Bluetooth: hci4: command 0x0c1a tx timeout
[  473.630184][T10791] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  473.736982][T10791] EXT4-fs (sda1): This should not happen!! Data will be lost
[  473.736982][T10791] 
[  474.831501][T10353] Bluetooth: hci3: command 0x0c1a tx timeout
[  475.001068][T10353] Bluetooth: hci4: command 0x0c1a tx timeout
[  476.090319][T11902] FAULT_INJECTION: forcing a failure.
[  476.090319][T11902] name failslab, interval 1, probability 0, space 0, times 0
[  476.182977][T11902] CPU: 0 UID: 0 PID: 11902 Comm: syz.6.1256 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  476.183016][T11902] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  476.183026][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  476.183039][T11902] Call Trace:
[  476.183046][T11902]  <TASK>
[  476.183056][T11902]  dump_stack_lvl+0x100/0x190
[  476.183094][T11902]  should_fail_ex.cold+0x5/0xa
[  476.183122][T11902]  should_failslab+0xc2/0x120
[  476.183145][T11902]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  476.183180][T11902]  ? sk_prot_alloc+0x60/0x2a0
[  476.183211][T11902]  ? kmem_cache_alloc_noprof+0x292/0x6e0
[  476.183243][T11902]  ? security_inode_alloc+0x3b/0x2c0
[  476.183282][T11902]  sk_prot_alloc+0x60/0x2a0
[  476.183317][T11902]  sk_alloc+0x36/0xe80
[  476.183341][T11902]  unix_create1+0xa6/0x700
[  476.183375][T11902]  unix_create+0x145/0x270
[  476.183406][T11902]  __sock_create+0x339/0x860
[  476.183447][T11902]  __sys_socketpair+0x1e4/0x5b0
[  476.183485][T11902]  ? __pfx___sys_socketpair+0x10/0x10
[  476.183527][T11902]  ? __pfx_ksys_write+0x10/0x10
[  476.183562][T11902]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  476.183597][T11902]  __x64_sys_socketpair+0x96/0x100
[  476.183634][T11902]  ? lockdep_hardirqs_on+0x78/0x100
[  476.183661][T11902]  do_syscall_64+0x106/0xf80
[  476.183686][T11902]  ? clear_bhb_loop+0x40/0x90
[  476.183715][T11902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.183746][T11902] RIP: 0033:0x7fe3fa99c799
[  476.183766][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.183788][T11902] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  476.183811][T11902] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  476.183827][T11902] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  476.183840][T11902] RBP: 00007fe3fb844090 R08: 0000000000000000 R09: 0000000000000000
[  476.183854][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.183868][T11902] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  476.183897][T11902]  </TASK>
[  476.995379][T10353] Bluetooth: hci3: command 0x0c1a tx timeout
[  477.159899][T10353] Bluetooth: hci4: command 0x0c1a tx timeout
[  478.728343][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1266'.
[  479.421447][T11966] FAULT_INJECTION: forcing a failure.
[  479.421447][T11966] name failslab, interval 1, probability 0, space 0, times 0
[  479.537235][T11966] CPU: 0 UID: 0 PID: 11966 Comm: syz.6.1269 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  479.537275][T11966] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  479.537284][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  479.537298][T11966] Call Trace:
[  479.537306][T11966]  <TASK>
[  479.537314][T11966]  dump_stack_lvl+0x100/0x190
[  479.537354][T11966]  should_fail_ex.cold+0x5/0xa
[  479.537381][T11966]  ? lsm_blob_alloc+0x68/0x90
[  479.537406][T11966]  should_failslab+0xc2/0x120
[  479.537429][T11966]  __kmalloc_noprof+0xe0/0x850
[  479.537464][T11966]  ? trace_kmem_cache_alloc+0xf3/0x120
[  479.537491][T11966]  lsm_blob_alloc+0x68/0x90
[  479.537525][T11966]  security_sk_alloc+0x2d/0x290
[  479.537559][T11966]  sk_prot_alloc+0x1d1/0x2a0
[  479.537594][T11966]  sk_alloc+0x36/0xe80
[  479.537619][T11966]  unix_create1+0xa6/0x700
[  479.537652][T11966]  unix_create+0x145/0x270
[  479.537684][T11966]  __sock_create+0x339/0x860
[  479.537724][T11966]  __sys_socketpair+0x1e4/0x5b0
[  479.537763][T11966]  ? __pfx___sys_socketpair+0x10/0x10
[  479.537804][T11966]  ? __pfx_ksys_write+0x10/0x10
[  479.537840][T11966]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  479.537874][T11966]  __x64_sys_socketpair+0x96/0x100
[  479.537911][T11966]  ? lockdep_hardirqs_on+0x78/0x100
[  479.537938][T11966]  do_syscall_64+0x106/0xf80
[  479.537964][T11966]  ? clear_bhb_loop+0x40/0x90
[  479.537992][T11966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.538016][T11966] RIP: 0033:0x7fe3fa99c799
[  479.538035][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.538057][T11966] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  479.538079][T11966] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  479.538094][T11966] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  479.538108][T11966] RBP: 00007fe3fb844090 R08: 0000000000000000 R09: 0000000000000000
[  479.538123][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.538136][T11966] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  479.538166][T11966]  </TASK>
[  480.300262][T11978] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  480.392811][T11981] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  480.438335][T11981] EXT4-fs (sda1): This should not happen!! Data will be lost
[  480.438335][T11981] 
[  481.117040][T11993] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[11993]
[  482.081479][T10353] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13
[  482.321113][T12011] random: crng reseeded on system resumption
[  482.444831][T12015] net_ratelimit: 48 callbacks suppressed
[  482.444851][T12015] openvswitch: netlink: Key 25 has unexpected len 4 expected 16
[  487.068125][T12102] zswap: compressor  not available
[  487.411685][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'.
[  487.493708][T12126] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1302'.
[  487.627755][T12130] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1302'.
[  487.838434][T12139] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  488.494281][T12147] FAULT_INJECTION: forcing a failure.
[  488.494281][T12147] name failslab, interval 1, probability 0, space 0, times 0
[  488.563080][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.1.1304 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  488.563120][T12147] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  488.563129][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.563143][T12147] Call Trace:
[  488.563150][T12147]  <TASK>
[  488.563159][T12147]  dump_stack_lvl+0x100/0x190
[  488.563214][T12147]  should_fail_ex.cold+0x5/0xa
[  488.563242][T12147]  should_failslab+0xc2/0x120
[  488.563266][T12147]  __kmalloc_cache_noprof+0x7a/0x6f0
[  488.563296][T12147]  ? alloc_pipe_info+0x10e/0x590
[  488.563318][T12147]  ? find_held_lock+0x2b/0x80
[  488.563343][T12147]  alloc_pipe_info+0x10e/0x590
[  488.563368][T12147]  splice_direct_to_actor+0x78f/0xa30
[  488.563410][T12147]  ? __lock_acquire+0x4a5/0x2630
[  488.563437][T12147]  ? __pfx_direct_splice_actor+0x10/0x10
[  488.563477][T12147]  ? __pfx_aa_file_perm+0x10/0x10
[  488.563504][T12147]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  488.563553][T12147]  do_splice_direct+0x174/0x240
[  488.563591][T12147]  ? __pfx_do_splice_direct+0x10/0x10
[  488.563629][T12147]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  488.563895][T12147]  ? rw_verify_area+0xce/0x6d0
[  488.563932][T12147]  do_sendfile+0xadc/0xe20
[  488.563973][T12147]  ? __pfx_do_sendfile+0x10/0x10
[  488.564009][T12147]  ? __fget_files+0x21f/0x3d0
[  488.564055][T12147]  __x64_sys_sendfile64+0x1d8/0x220
[  488.564080][T12147]  ? ksys_write+0x1ac/0x250
[  488.564118][T12147]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  488.564152][T12147]  do_syscall_64+0x106/0xf80
[  488.564178][T12147]  ? clear_bhb_loop+0x40/0x90
[  488.564208][T12147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.564231][T12147] RIP: 0033:0x7f685019c799
[  488.564251][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.564274][T12147] RSP: 002b:00007f6851128028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  488.564296][T12147] RAX: ffffffffffffffda RBX: 00007f6850415fa0 RCX: 00007f685019c799
[  488.564311][T12147] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008
[  488.564325][T12147] RBP: 00007f6851128090 R08: 0000000000000000 R09: 0000000000000000
[  488.564339][T12147] R10: 0000000008000001 R11: 0000000000000246 R12: 0000000000000001
[  488.564353][T12147] R13: 00007f6850416038 R14: 00007f6850415fa0 R15: 00007ffdad79d958
[  488.564384][T12147]  </TASK>
[  490.862838][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'.
[  492.788593][T12197] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  492.935121][T12197] EXT4-fs (sda1): This should not happen!! Data will be lost
[  492.935121][T12197] 
[  495.040232][T12232] netlink: 3784 bytes leftover after parsing attributes in process `syz.5.1324'.
[  496.308704][T12258] FAULT_INJECTION: forcing a failure.
[  496.308704][T12258] name failslab, interval 1, probability 0, space 0, times 0
[  496.588926][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.1.1330 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  496.588967][T12258] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  496.588976][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  496.588991][T12258] Call Trace:
[  496.588998][T12258]  <TASK>
[  496.589007][T12258]  dump_stack_lvl+0x100/0x190
[  496.589047][T12258]  should_fail_ex.cold+0x5/0xa
[  496.589073][T12258]  ? copy_splice_read+0x1a3/0xb90
[  496.589109][T12258]  should_failslab+0xc2/0x120
[  496.589131][T12258]  __kmalloc_noprof+0xe0/0x850
[  496.589172][T12258]  copy_splice_read+0x1a3/0xb90
[  496.589215][T12258]  ? __pfx_copy_splice_read+0x10/0x10
[  496.589260][T12258]  ? look_up_lock_class+0x55/0x120
[  496.589299][T12258]  ? lockdep_init_map_type+0x5c/0x250
[  496.589332][T12258]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  496.589370][T12258]  ? __pfx_copy_splice_read+0x10/0x10
[  496.589407][T12258]  do_splice_read+0x285/0x370
[  496.589448][T12258]  splice_direct_to_actor+0x2a1/0xa30
[  496.589492][T12258]  ? __pfx_direct_splice_actor+0x10/0x10
[  496.589535][T12258]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  496.589581][T12258]  do_splice_direct+0x174/0x240
[  496.589624][T12258]  ? __pfx_do_splice_direct+0x10/0x10
[  496.589663][T12258]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  496.589703][T12258]  ? rw_verify_area+0xce/0x6d0
[  496.589737][T12258]  do_sendfile+0xadc/0xe20
[  496.589777][T12258]  ? __pfx_do_sendfile+0x10/0x10
[  496.589811][T12258]  ? __fget_files+0x21f/0x3d0
[  496.589856][T12258]  __x64_sys_sendfile64+0x1d8/0x220
[  496.589880][T12258]  ? ksys_write+0x1ac/0x250
[  496.589915][T12258]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  496.589949][T12258]  do_syscall_64+0x106/0xf80
[  496.589975][T12258]  ? clear_bhb_loop+0x40/0x90
[  496.590012][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.590035][T12258] RIP: 0033:0x7f685019c799
[  496.590053][T12258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.590076][T12258] RSP: 002b:00007f6851128028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  496.590097][T12258] RAX: ffffffffffffffda RBX: 00007f6850415fa0 RCX: 00007f685019c799
[  496.590113][T12258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008
[  496.590127][T12258] RBP: 00007f6851128090 R08: 0000000000000000 R09: 0000000000000000
[  496.590141][T12258] R10: 0000000008000001 R11: 0000000000000246 R12: 0000000000000001
[  496.590155][T12258] R13: 00007f6850416038 R14: 00007f6850415fa0 R15: 00007ffdad79d958
[  496.590185][T12258]  </TASK>
[  501.741669][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.748009][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  502.873442][T12368] bridge0: port 3(team0) entered blocking state
[  502.965436][T12368] bridge0: port 3(team0) entered disabled state
[  503.082444][T12368] team0: entered allmulticast mode
[  503.087635][T12368] team_slave_0: entered allmulticast mode
[  503.100343][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'.
[  503.197096][T12368] team_slave_1: entered allmulticast mode
[  503.399998][T12368] team0: entered promiscuous mode
[  503.489949][T12368] team_slave_0: entered promiscuous mode
[  503.604966][T12368] team_slave_1: entered promiscuous mode
[  503.646255][T12368] bridge0: port 3(team0) entered blocking state
[  503.652774][T12368] bridge0: port 3(team0) entered forwarding state
[  504.293497][T10791] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  504.400276][T10791] EXT4-fs (sda1): This should not happen!! Data will be lost
[  504.400276][T10791] 
[  506.460402][T12421] FAULT_INJECTION: forcing a failure.
[  506.460402][T12421] name failslab, interval 1, probability 0, space 0, times 0
[  506.566205][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.6.1355 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  506.566248][T12421] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  506.566258][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  506.566273][T12421] Call Trace:
[  506.566281][T12421]  <TASK>
[  506.566291][T12421]  dump_stack_lvl+0x100/0x190
[  506.566333][T12421]  should_fail_ex.cold+0x5/0xa
[  506.566363][T12421]  should_failslab+0xc2/0x120
[  506.566386][T12421]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  506.566423][T12421]  ? key_alloc+0xc0f/0x1310
[  506.566444][T12421]  ? __lock_acquire+0x4a5/0x2630
[  506.566487][T12421]  key_alloc+0xc0f/0x1310
[  506.566521][T12421]  ? __pfx_key_alloc+0x10/0x10
[  506.566548][T12421]  ? __asan_memcpy+0x3c/0x60
[  506.566588][T12421]  keyring_alloc+0x44/0xc0
[  506.566618][T12421]  keyctl_get_persistent+0x779/0x8b0
[  506.566649][T12421]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  506.566675][T12421]  ? fd_install+0x24f/0x580
[  506.566716][T12421]  ? __x64_sys_futex+0x34f/0x4d0
[  506.566748][T12421]  ? __x64_sys_futex+0x358/0x4d0
[  506.566784][T12421]  ? xfd_validate_state+0x129/0x190
[  506.566827][T12421]  __do_sys_keyctl+0x3b2/0x5a0
[  506.566864][T12421]  do_syscall_64+0x106/0xf80
[  506.566892][T12421]  ? clear_bhb_loop+0x40/0x90
[  506.566922][T12421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.566949][T12421] RIP: 0033:0x7fe3fa99c799
[  506.566969][T12421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.566994][T12421] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  506.567017][T12421] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  506.567033][T12421] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016
[  506.567049][T12421] RBP: 00007fe3faa32bd9 R08: 000000000000000c R09: 0000000000000000
[  506.567064][T12421] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000
[  506.567079][T12421] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  506.567111][T12421]  </TASK>
[  508.551718][T12459] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  508.639928][T12459] EXT4-fs (sda1): This should not happen!! Data will be lost
[  508.639928][T12459] 
[  509.520650][T12476] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  509.672376][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'.
[  509.717166][T12476] EXT4-fs (sda1): This should not happen!! Data will be lost
[  509.717166][T12476] 
[  509.783873][T12481] ipvlan0: entered promiscuous mode
[  509.861567][T12481] ipvlan0: entered allmulticast mode
[  509.932766][T12481] veth0_vlan: entered allmulticast mode
[  510.282840][T12491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'.
[  510.542947][T12491] vlan1: entered promiscuous mode
[  510.689911][T12491] vlan1: entered allmulticast mode
[  510.802774][T12491] veth0_vlan: entered allmulticast mode
[  512.402573][T12543] netlink: 'syz.1.1378': attribute type 1 has an invalid length.
[  512.559201][T12543] netlink: 'syz.1.1378': attribute type 1 has an invalid length.
[  512.692688][T12543] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1378'.
[  512.816627][T12543] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1378'.
[  515.201223][T12604] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  515.234550][T12604] EXT4-fs (sda1): This should not happen!! Data will be lost
[  515.234550][T12604] 
[  515.305915][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1398'.
[  515.635206][T12604] vlan1: entered promiscuous mode
[  515.656136][T12604] vlan1: entered allmulticast mode
[  515.680345][T12604] veth0_vlan: entered allmulticast mode
[  516.459299][T12615] bridge0: port 3(team0) entered blocking state
[  516.517646][T12615] bridge0: port 3(team0) entered disabled state
[  516.580615][T12615] team0: entered allmulticast mode
[  516.628220][T12615] team_slave_0: entered allmulticast mode
[  516.710546][T12615] team0: entered promiscuous mode
[  516.778470][T12615] team_slave_0: entered promiscuous mode
[  516.842257][T12615] bridge0: port 3(team0) entered blocking state
[  516.848701][T12615] bridge0: port 3(team0) entered forwarding state
[  518.822555][T12647] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1405'.
[  519.008698][T12647] gretap0: refused to change device tx_queue_len
[  519.822722][T12668] Invalid ELF header magic: != ELF
[  520.531952][T12686] cgroup: fork rejected by pids controller in /syz6
[  520.696891][T12694] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1420'.
[  522.042874][T12891] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  522.073215][T12891] EXT4-fs (sda1): This should not happen!! Data will be lost
[  522.073215][T12891] 
[  523.363110][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1440'.
[  523.855963][T12915] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.6.1437: Error -117 reading block bitmap for 7
[  524.106870][T12910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  524.134504][T12924] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1444'.
[  525.783984][T12942] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  527.601588][T12982] zswap: compressor � not available
[  528.223217][T12996] netlink: 350 bytes leftover after parsing attributes in process `syz.6.1461'.
[  529.827349][T13035] zswap: compressor  not available
[  530.199236][T13046] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(905090050.201326592.142606592), cmd(16)
[  530.546994][T13023] kexec: Could not allocate control_code_buffer
[  532.101947][T13074] Invalid ELF header magic: != ELF
[  532.275702][T10353] Bluetooth: hci3: unexpected event for opcode 0x7c89
[  532.954254][T13093] can: request_module (can-proto-0) failed.
[  535.749409][T13141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1500'.
[  536.910183][T13166] tipc: Enabling of bearer <@):^\/\> rejected, media not registered
[  537.648946][   T29] audit: type=1107 audit(4294967381.960:16): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tem'
[  537.729588][   T29] audit: type=1107 audit(4294967382.000:17): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='tem/memory/memory12/power/co'
[  538.167120][T13184] FAULT_INJECTION: forcing a failure.
[  538.167120][T13184] name failslab, interval 1, probability 0, space 0, times 0
[  538.319629][T13184] CPU: 0 UID: 0 PID: 13184 Comm: syz.6.1510 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  538.319673][T13184] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  538.319683][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  538.319698][T13184] Call Trace:
[  538.319706][T13184]  <TASK>
[  538.319715][T13184]  dump_stack_lvl+0x100/0x190
[  538.319759][T13184]  should_fail_ex.cold+0x5/0xa
[  538.319788][T13184]  should_failslab+0xc2/0x120
[  538.319811][T13184]  __kvmalloc_node_noprof+0xfa/0xa00
[  538.319849][T13184]  ? file_tty_write.isra.0+0x64e/0x890
[  538.319888][T13184]  file_tty_write.isra.0+0x64e/0x890
[  538.319917][T13184]  ? security_file_permission+0x76/0x210
[  538.319961][T13184]  ? rw_verify_area+0xce/0x6d0
[  538.319999][T13184]  vfs_write+0x6ac/0x1070
[  538.320038][T13184]  ? __pfx_tty_write+0x10/0x10
[  538.320069][T13184]  ? __pfx_vfs_write+0x10/0x10
[  538.320105][T13184]  ? find_held_lock+0x2b/0x80
[  538.320147][T13184]  ksys_write+0x12a/0x250
[  538.320185][T13184]  ? __pfx_ksys_write+0x10/0x10
[  538.320232][T13184]  do_syscall_64+0x106/0xf80
[  538.320260][T13184]  ? clear_bhb_loop+0x40/0x90
[  538.320290][T13184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.320316][T13184] RIP: 0033:0x7fe3fa99c799
[  538.320344][T13184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.320369][T13184] RSP: 002b:00007fe3fb823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  538.320393][T13184] RAX: ffffffffffffffda RBX: 00007fe3fac16090 RCX: 00007fe3fa99c799
[  538.320410][T13184] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  538.320425][T13184] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  538.320440][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.320455][T13184] R13: 00007fe3fac16128 R14: 00007fe3fac16090 R15: 00007ffd9ccdb128
[  538.320487][T13184]  </TASK>
[  540.483226][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'.
[  540.700861][T13210] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1516'.
[  541.744954][T13230] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1523'.
[  542.757892][T13241] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[  542.946267][T13237] zswap: compressor  not available
[  545.028778][T13275] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1531'.
[  545.100504][T10353] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7
[  545.198837][T13275] �: renamed from bond_slave_0 (while UP)
[  546.657523][T13309] netlink: 'syz.6.1540': attribute type 1 has an invalid length.
[  547.183790][T13329] FAULT_INJECTION: forcing a failure.
[  547.183790][T13329] name failslab, interval 1, probability 0, space 0, times 0
[  547.299952][T13329] CPU: 0 UID: 0 PID: 13329 Comm: syz.1.1544 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  547.299995][T13329] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  547.300005][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  547.300020][T13329] Call Trace:
[  547.300028][T13329]  <TASK>
[  547.300037][T13329]  dump_stack_lvl+0x100/0x190
[  547.300079][T13329]  should_fail_ex.cold+0x5/0xa
[  547.300108][T13329]  should_failslab+0xc2/0x120
[  547.300131][T13329]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  547.300167][T13329]  ? ptlock_alloc+0x1f/0x70
[  547.300204][T13329]  ptlock_alloc+0x1f/0x70
[  547.300238][T13329]  pte_alloc_one+0x84/0x3e0
[  547.300267][T13329]  do_huge_pmd_anonymous_page+0x835/0x1a60
[  547.300306][T13329]  ? __pmd_alloc+0x6aa/0x9c0
[  547.300334][T13329]  __handle_mm_fault+0x1e9e/0x2b60
[  547.300372][T13329]  ? mt_find+0x45e/0x8e0
[  547.300404][T13329]  ? __pfx___handle_mm_fault+0x10/0x10
[  547.300434][T13329]  ? __pfx_mt_find+0x10/0x10
[  547.300481][T13329]  ? find_vma+0xbf/0x140
[  547.300519][T13329]  ? __pfx_find_vma+0x10/0x10
[  547.300562][T13329]  handle_mm_fault+0x36d/0xa20
[  547.300600][T13329]  do_user_addr_fault+0x74c/0x12f0
[  547.300649][T13329]  exc_page_fault+0x6f/0xd0
[  547.300677][T13329]  asm_exc_page_fault+0x26/0x30
[  547.300702][T13329] RIP: 0010:check_zeroed_user+0x8d/0x190
[  547.300743][T13329] Code: 0f 82 dc 00 00 00 e8 a2 c5 14 fd 48 89 de 4c 89 e7 e8 b7 bf 14 fd 4d 85 ff 0f 85 c3 00 00 00 e8 89 c5 14 fd 0f 01 cb 0f ae e8 <49> 8b 1c 24 e8 7a c5 14 fd 31 ff 48 89 ee e8 50 c0 14 fd 48 85 ed
[  547.300768][T13329] RSP: 0018:ffffc9000482fb58 EFLAGS: 00050287
[  547.300788][T13329] RAX: 000000000000000a RBX: 0000000000000b46 RCX: ffffc9000f8a2000
[  547.300804][T13329] RDX: 0000000000080000 RSI: ffffffff84f33517 RDI: ffff8880232e0000
[  547.300820][T13329] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000000000a8
[  547.300836][T13329] R10: 0000000000000b46 R11: 0000000000000000 R12: 00000000000000a8
[  547.300850][T13329] R13: 0000000000000a9e R14: 00007ffffffff000 R15: 0000000000000000
[  547.300875][T13329]  ? check_zeroed_user+0x87/0x190
[  547.300917][T13329]  ? check_zeroed_user+0x87/0x190
[  547.300966][T13329]  bpf_check_uarg_tail_zero+0x16e/0x1b0
[  547.301008][T13329]  ? __pfx_bpf_check_uarg_tail_zero+0x10/0x10
[  547.301052][T13329]  ? find_held_lock+0x2b/0x80
[  547.301078][T13329]  __sys_bpf+0x15f/0x4b90
[  547.301103][T13329]  ? futex_private_hash_put+0x107/0x1c0
[  547.301137][T13329]  ? __pfx___sys_bpf+0x10/0x10
[  547.301166][T13329]  ? __pfx_futex_wake+0x10/0x10
[  547.301208][T13329]  ? ksys_write+0x190/0x250
[  547.301253][T13329]  ? do_futex+0x192/0x350
[  547.301303][T13329]  ? xfd_validate_state+0x129/0x190
[  547.301346][T13329]  __x64_sys_bpf+0x7b/0xc0
[  547.301374][T13329]  ? lockdep_hardirqs_on+0x78/0x100
[  547.301402][T13329]  do_syscall_64+0x106/0xf80
[  547.301429][T13329]  ? clear_bhb_loop+0x40/0x90
[  547.301459][T13329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.301485][T13329] RIP: 0033:0x7f685019c799
[  547.301504][T13329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.301528][T13329] RSP: 002b:00007f6851107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  547.301550][T13329] RAX: ffffffffffffffda RBX: 00007f6850416090 RCX: 00007f685019c799
[  547.301566][T13329] RDX: 0000000000000b46 RSI: 0000000000000000 RDI: 0000000000000004
[  547.301581][T13329] RBP: 00007f6850232bd9 R08: 0000000000000000 R09: 0000000000000000
[  547.301596][T13329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  547.301610][T13329] R13: 00007f6850416128 R14: 00007f6850416090 R15: 00007ffdad79d958
[  547.301642][T13329]  </TASK>
[  548.446821][T13344] netlink: 'syz.5.1546': attribute type 2 has an invalid length.
[  549.214731][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'.
[  549.971101][T13368] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1551'.
[  550.207750][T10353] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  550.487142][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1555'.
[  551.658198][T13399] netlink: 6168 bytes leftover after parsing attributes in process `syz.6.1559'.
[  551.711042][T13399] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  556.410833][T13463] cgroup: fork rejected by pids controller in /syz3
[  556.852664][T13504] tc_dump_action: action bad kind
[  558.370647][   T29] audit: type=1800 audit(4294967402.690:18): pid=13536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1584" name="members" dev="configfs" ino=47564 res=0 errno=0
[  562.432740][T10353] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  563.155458][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  563.169983][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  567.678330][T13610] netlink: 158 bytes leftover after parsing attributes in process `syz.1.1602'.
[  571.012440][   T29] audit: type=1800 audit(4294967415.330:19): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=48368 res=0 errno=0
[  572.924982][T11289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  572.947161][T11289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  572.957818][T11289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  572.967833][T11289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  572.975516][T11289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  573.944423][T13674] FAULT_INJECTION: forcing a failure.
[  573.944423][T13674] name failslab, interval 1, probability 0, space 0, times 0
[  574.001320][T13674] CPU: 0 UID: 0 PID: 13674 Comm: syz.6.1615 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  574.001362][T13674] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  574.001372][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  574.001388][T13674] Call Trace:
[  574.001396][T13674]  <TASK>
[  574.001406][T13674]  dump_stack_lvl+0x100/0x190
[  574.001449][T13674]  should_fail_ex.cold+0x5/0xa
[  574.001478][T13674]  ? tomoyo_realpath_from_path+0xb6/0x690
[  574.001506][T13674]  should_failslab+0xc2/0x120
[  574.001530][T13674]  __kmalloc_noprof+0xe0/0x850
[  574.001573][T13674]  tomoyo_realpath_from_path+0xb6/0x690
[  574.001606][T13674]  tomoyo_check_open_permission+0x2af/0x3c0
[  574.001648][T13674]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  574.001729][T13674]  ? do_raw_spin_lock+0x128/0x260
[  574.001770][T13674]  ? path_get+0x61/0x80
[  574.001798][T13674]  tomoyo_file_open+0x6b/0x90
[  574.001830][T13674]  security_file_open+0xb5/0x1e0
[  574.001855][T13674]  do_dentry_open+0x5aa/0x1660
[  574.001902][T13674]  ? security_inode_permission+0xbf/0x250
[  574.001946][T13674]  vfs_open+0x82/0x3f0
[  574.001978][T13674]  path_openat+0x208c/0x31a0
[  574.002007][T13674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.002043][T13674]  ? __pfx_path_openat+0x10/0x10
[  574.002078][T13674]  do_file_open+0x20e/0x430
[  574.002104][T13674]  ? __pfx_do_file_open+0x10/0x10
[  574.002148][T13674]  ? _raw_spin_unlock+0x28/0x50
[  574.002171][T13674]  ? alloc_fd+0x476/0x790
[  574.002220][T13674]  do_sys_openat2+0x10d/0x1e0
[  574.002251][T13674]  ? __pfx_do_sys_openat2+0x10/0x10
[  574.002293][T13674]  __x64_sys_open+0xfe/0x1d0
[  574.002324][T13674]  ? __pfx___x64_sys_open+0x10/0x10
[  574.002366][T13674]  do_syscall_64+0x106/0xf80
[  574.002393][T13674]  ? clear_bhb_loop+0x40/0x90
[  574.002423][T13674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.002449][T13674] RIP: 0033:0x7fe3fa99c799
[  574.002469][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.002493][T13674] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  574.002517][T13674] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  574.002533][T13674] RDX: 0000000000000160 RSI: 0000000000000000 RDI: 0000200000000000
[  574.002548][T13674] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  574.002563][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  574.002578][T13674] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  574.002610][T13674]  </TASK>
[  574.009184][T13674] ERROR: Out of memory at tomoyo_realpath_from_path.
[  574.607771][T13660] chnl_net:caif_netlink_parms(): no params data found
[  574.654649][   T29] audit: type=1800 audit(4294967418.930:20): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1616" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  575.069792][T11289] Bluetooth: hci1: command tx timeout
[  575.552260][T13692] hub 1-0:1.0: USB hub found
[  575.576263][T13692] hub 1-0:1.0: 1 port detected
[  577.150624][T11289] Bluetooth: hci1: command tx timeout
[  579.229557][T11289] Bluetooth: hci1: command tx timeout
[  581.309593][T11289] Bluetooth: hci1: command tx timeout
[  581.981692][T13660] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.988919][T13660] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.029873][T13660] bridge_slave_0: entered allmulticast mode
[  582.051036][T13660] bridge_slave_0: entered promiscuous mode
[  582.548214][T13660] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.571126][T13660] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.578487][T13660] bridge_slave_1: entered allmulticast mode
[  582.602464][T13465] syz.3.1573 (13465) used greatest stack depth: 18560 bytes left
[  582.611292][T13660] bridge_slave_1: entered promiscuous mode
[  582.816463][T13660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.853227][T13660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.385009][T13716] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1624'.
[  583.477550][T13660] team0: Port device team_slave_0 added
[  583.603861][T13660] team0: Port device team_slave_1 added
[  583.837838][T13660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.877183][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.995220][T13660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.017285][T13721] FAULT_INJECTION: forcing a failure.
[  584.017285][T13721] name failslab, interval 1, probability 0, space 0, times 0
[  584.082440][T13721] CPU: 0 UID: 0 PID: 13721 Comm: syz.1.1625 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  584.082482][T13721] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  584.082491][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  584.082506][T13721] Call Trace:
[  584.082514][T13721]  <TASK>
[  584.082523][T13721]  dump_stack_lvl+0x100/0x190
[  584.082564][T13721]  should_fail_ex.cold+0x5/0xa
[  584.082593][T13721]  ? tomoyo_realpath_from_path+0xb6/0x690
[  584.082620][T13721]  should_failslab+0xc2/0x120
[  584.082644][T13721]  __kmalloc_noprof+0xe0/0x850
[  584.082687][T13721]  tomoyo_realpath_from_path+0xb6/0x690
[  584.082721][T13721]  tomoyo_check_open_permission+0x2af/0x3c0
[  584.082762][T13721]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  584.082831][T13721]  ? do_raw_spin_lock+0x128/0x260
[  584.082870][T13721]  ? path_get+0x61/0x80
[  584.082899][T13721]  tomoyo_file_open+0x6b/0x90
[  584.082930][T13721]  security_file_open+0xb5/0x1e0
[  584.082955][T13721]  do_dentry_open+0x5aa/0x1660
[  584.082997][T13721]  ? security_inode_permission+0xbf/0x250
[  584.083041][T13721]  vfs_open+0x82/0x3f0
[  584.083080][T13721]  path_openat+0x208c/0x31a0
[  584.083113][T13721]  ? __pfx_path_openat+0x10/0x10
[  584.083148][T13721]  do_file_open+0x20e/0x430
[  584.083177][T13721]  ? __pfx_do_file_open+0x10/0x10
[  584.083222][T13721]  ? alloc_fd+0x476/0x790
[  584.083268][T13721]  ? do_getname+0x191/0x390
[  584.083301][T13721]  do_sys_openat2+0x10d/0x1e0
[  584.083332][T13721]  ? __pfx_do_sys_openat2+0x10/0x10
[  584.083374][T13721]  __x64_sys_openat+0x12d/0x210
[  584.083406][T13721]  ? __pfx___x64_sys_openat+0x10/0x10
[  584.083449][T13721]  do_syscall_64+0x106/0xf80
[  584.083477][T13721]  ? clear_bhb_loop+0x40/0x90
[  584.083507][T13721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.083532][T13721] RIP: 0033:0x7f685019c799
[  584.083552][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.083577][T13721] RSP: 002b:00007f6851128028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  584.083601][T13721] RAX: ffffffffffffffda RBX: 00007f6850415fa0 RCX: 00007f685019c799
[  584.083618][T13721] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  584.083634][T13721] RBP: 00007f6850232bd9 R08: 0000000000000000 R09: 0000000000000000
[  584.083650][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.083665][T13721] R13: 00007f6850416038 R14: 00007f6850415fa0 R15: 00007ffdad79d958
[  584.083696][T13721]  </TASK>
[  584.083734][T13721] ERROR: Out of memory at tomoyo_realpath_from_path.
[  584.412442][T13660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.437030][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.476610][T13660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.078481][T10788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.181116][T13660] hsr_slave_0: entered promiscuous mode
[  585.219825][T13660] hsr_slave_1: entered promiscuous mode
[  585.253201][T13660] debugfs: 'hsr0' already exists in 'hsr'
[  585.258978][T13660] Cannot create hsr debugfs directory
[  585.488353][T10788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.810163][T10788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.840907][T13734] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1628'.
[  585.914436][T13734] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1628'.
[  586.250507][T10788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.678972][T13738] zswap: compressor  not available
[  587.381819][T10788] team0: left allmulticast mode
[  587.419021][T10788] team_slave_0: left allmulticast mode
[  587.442885][T10788] team_slave_1: left allmulticast mode
[  587.449422][T10788] team0: left promiscuous mode
[  587.518610][T10788] team_slave_0: left promiscuous mode
[  587.544377][T10788] team_slave_1: left promiscuous mode
[  587.574876][T10788] bridge0: port 3(team0) entered disabled state
[  587.656506][T10788] bridge_slave_1: left allmulticast mode
[  587.691085][T10788] bridge_slave_1: left promiscuous mode
[  587.743343][T10788] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.873962][T10788] bridge_slave_0: left allmulticast mode
[  587.911933][T10788] bridge_slave_0: left promiscuous mode
[  587.967274][T10788] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.398513][T10788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.421341][T10788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.439136][T10788] bond0 (unregistering): Released all slaves
[  589.539082][T10788] tipc: Left network mode
[  589.856089][T13660] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  589.964486][T13660] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  590.143139][T13660] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  590.180518][T13660] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  590.366331][T10788] hsr_slave_0: left promiscuous mode
[  590.413203][T10788] hsr_slave_1: left promiscuous mode
[  590.439022][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  590.477246][T10788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.550269][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  590.579781][T10788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.668513][T13804] block2mtd: Using custom MTD label '' for dev 
[  590.699329][T13804] block2mtd: error: cannot open device 
[  590.710191][T10788] veth1_macvtap: left promiscuous mode
[  590.728217][T10788] veth0_macvtap: left promiscuous mode
[  590.765215][T10788] veth1_vlan: left promiscuous mode
[  590.795780][T10788] veth0_vlan: left promiscuous mode
[  592.046579][T10788] team0 (unregistering): Port device team_slave_1 removed
[  592.086691][T10788] team0 (unregistering): Port device team_slave_0 removed
[  593.098713][T13660] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.225799][T13660] 8021q: adding VLAN 0 to HW filter on device team0
[  593.306384][T10788] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.313604][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.427101][T10788] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.434330][T10788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.687612][T13660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  594.806258][T13660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.823710][T13867] sd 0:0:1:0: PR command failed: 1026
[  594.829352][T13867] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  594.912951][T13867] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  595.721116][T13889] FAULT_INJECTION: forcing a failure.
[  595.721116][T13889] name failslab, interval 1, probability 0, space 0, times 0
[  595.802604][T13889] CPU: 0 UID: 0 PID: 13889 Comm: syz.6.1652 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  595.802648][T13889] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  595.802657][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  595.802672][T13889] Call Trace:
[  595.802681][T13889]  <TASK>
[  595.802690][T13889]  dump_stack_lvl+0x100/0x190
[  595.802733][T13889]  should_fail_ex.cold+0x5/0xa
[  595.802763][T13889]  should_failslab+0xc2/0x120
[  595.802787][T13889]  __kmalloc_cache_noprof+0x7a/0x6f0
[  595.802819][T13889]  ? single_open+0x4d/0x1d0
[  595.802853][T13889]  ? __pfx_blk_mq_debugfs_show+0x10/0x10
[  595.802883][T13889]  single_open+0x4d/0x1d0
[  595.802916][T13889]  blk_mq_debugfs_open+0xde/0x1b0
[  595.802947][T13889]  ? __pfx_blk_mq_debugfs_open+0x10/0x10
[  595.802974][T13889]  full_proxy_open_regular+0x1b6/0x370
[  595.803009][T13889]  do_dentry_open+0x6d8/0x1660
[  595.803049][T13889]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  595.803089][T13889]  vfs_open+0x82/0x3f0
[  595.803122][T13889]  path_openat+0x208c/0x31a0
[  595.803155][T13889]  ? __pfx_path_openat+0x10/0x10
[  595.803237][T13889]  do_file_open+0x20e/0x430
[  595.803263][T13889]  ? __pfx_do_file_open+0x10/0x10
[  595.803307][T13889]  ? alloc_fd+0x476/0x790
[  595.803351][T13889]  ? do_getname+0x191/0x390
[  595.803383][T13889]  do_sys_openat2+0x10d/0x1e0
[  595.803414][T13889]  ? __pfx_do_sys_openat2+0x10/0x10
[  595.803447][T13889]  ? __fget_files+0x21f/0x3d0
[  595.803492][T13889]  __x64_sys_openat+0x12d/0x210
[  595.803524][T13889]  ? __pfx___x64_sys_openat+0x10/0x10
[  595.803567][T13889]  do_syscall_64+0x106/0xf80
[  595.803595][T13889]  ? clear_bhb_loop+0x40/0x90
[  595.803625][T13889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.803651][T13889] RIP: 0033:0x7fe3fa99c799
[  595.803672][T13889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.803696][T13889] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  595.803720][T13889] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  595.803736][T13889] RDX: 0000000000060100 RSI: 0000200000000900 RDI: ffffffffffffff9c
[  595.803752][T13889] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  595.803767][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.803782][T13889] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  595.803813][T13889]  </TASK>
[  597.098899][T13660] veth0_vlan: entered promiscuous mode
[  597.292761][T13660] veth1_vlan: entered promiscuous mode
[  597.454462][T13660] veth0_macvtap: entered promiscuous mode
[  597.522434][T13660] veth1_macvtap: entered promiscuous mode
[  597.589252][T13660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.866584][T13660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.061683][T10793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.104629][T10793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.196945][T13925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'.
[  598.466505][T10793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.522774][T10793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.595377][T13923] zswap: compressor  not available
[  598.680597][T13925] bond0: (slave bond_slave_1): Releasing backup interface
[  599.341173][T10350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.405654][T10350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.569105][T10783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.636374][T10783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.465786][T13952] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input22
[  602.014508][T13980] bond0: no command found in slaves file - use +ifname or -ifname
[  604.226249][T14019] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1673'.
[  607.135820][T14076] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  607.260857][T14079] netlink: 29 bytes leftover after parsing attributes in process `syz.7.1686'.
[  607.326940][T11289] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260
[  609.370770][T11289] Bluetooth: hci1: Malformed Event: 0x02
[  609.787366][T14137] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1704'.
[  610.055323][T14141] FAULT_INJECTION: forcing a failure.
[  610.055323][T14141] name failslab, interval 1, probability 0, space 0, times 0
[  610.117452][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'.
[  610.150199][T14141] CPU: 0 UID: 0 PID: 14141 Comm: syz.6.1705 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  610.150250][T14141] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  610.150259][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  610.150274][T14141] Call Trace:
[  610.150282][T14141]  <TASK>
[  610.150291][T14141]  dump_stack_lvl+0x100/0x190
[  610.150333][T14141]  should_fail_ex.cold+0x5/0xa
[  610.150361][T14141]  should_failslab+0xc2/0x120
[  610.150385][T14141]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  610.150421][T14141]  ? security_inode_alloc+0x3b/0x2c0
[  610.150457][T14141]  ? lockdep_init_map_type+0x5c/0x250
[  610.150494][T14141]  security_inode_alloc+0x3b/0x2c0
[  610.150531][T14141]  inode_init_always_gfp+0xced/0x1040
[  610.150603][T14141]  alloc_inode+0x8e/0x250
[  610.150634][T14141]  path_from_stashed+0x25b/0x750
[  610.150665][T14141]  ns_get_path+0x60/0x80
[  610.150688][T14141]  proc_ns_get_link+0x121/0x230
[  610.150720][T14141]  ? __pfx_proc_ns_get_link+0x10/0x10
[  610.150757][T14141]  ? atime_needs_update+0x8b/0x6b0
[  610.150792][T14141]  pick_link+0xd17/0x13c0
[  610.150826][T14141]  ? __pfx_proc_ns_get_link+0x10/0x10
[  610.150863][T14141]  step_into_slowpath+0x9ba/0xf90
[  610.150904][T14141]  ? __pfx_step_into_slowpath+0x10/0x10
[  610.150939][T14141]  ? find_held_lock+0x2b/0x80
[  610.150971][T14141]  path_openat+0xf95/0x31a0
[  610.151003][T14141]  ? __pfx_path_openat+0x10/0x10
[  610.151037][T14141]  do_file_open+0x20e/0x430
[  610.151062][T14141]  ? __pfx_do_file_open+0x10/0x10
[  610.151106][T14141]  ? alloc_fd+0x476/0x790
[  610.151149][T14141]  ? do_getname+0x191/0x390
[  610.151180][T14141]  do_sys_openat2+0x10d/0x1e0
[  610.151217][T14141]  ? __pfx_do_sys_openat2+0x10/0x10
[  610.151255][T14141]  ? ksys_semctl.constprop.0+0x14e/0x2e0
[  610.151300][T14141]  __x64_sys_openat+0x12d/0x210
[  610.151332][T14141]  ? __pfx___x64_sys_openat+0x10/0x10
[  610.151375][T14141]  do_syscall_64+0x106/0xf80
[  610.151403][T14141]  ? clear_bhb_loop+0x40/0x90
[  610.151434][T14141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.151460][T14141] RIP: 0033:0x7fe3fa95cfce
[  610.151479][T14141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  610.151504][T14141] RSP: 002b:00007fe3fb843ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  610.151527][T14141] RAX: ffffffffffffffda RBX: 00007fe3fb8446c0 RCX: 00007fe3fa95cfce
[  610.151544][T14141] RDX: 0000000000000002 RSI: 00007fe3fb843f90 RDI: ffffffffffffff9c
[  610.151560][T14141] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  610.151575][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.151590][T14141] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  610.151621][T14141]  </TASK>
[  610.476836][T14148] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1706'.
[  611.805836][T14169] Console: switching to colour VGA+ 80x25
[  613.818427][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1722'.
[  614.253404][T14222] mkiss: ax0: crc mode is auto.
[  614.402735][T14227] netlink: 354 bytes leftover after parsing attributes in process `syz.5.1726'.
[  615.015392][T14236] [U] ^C
[  622.452593][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'.
[  624.619763][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  624.626146][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  624.707370][T14502] random: crng reseeded on system resumption
[  624.876938][T14493] can0: slcan on ptm0.
[  625.203485][T14507] can0 (unregistered): slcan off ptm0.
[  625.726227][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1792'.
[  626.491318][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1798'.
[  626.531798][T14554] netlink: 'syz.5.1798': attribute type 1 has an invalid length.
[  627.787291][T14586] ptrace attach of "./syz-executor exec"[11542] was attempted by "./syz-executor exec"[14586]
[  631.330092][T14634] FAULT_INJECTION: forcing a failure.
[  631.330092][T14634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  631.493618][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.7.1817 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  631.493659][T14634] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  631.493667][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  631.493681][T14634] Call Trace:
[  631.493688][T14634]  <TASK>
[  631.493707][T14634]  dump_stack_lvl+0x100/0x190
[  631.493746][T14634]  should_fail_ex.cold+0x5/0xa
[  631.493773][T14634]  _copy_from_user+0x2e/0xd0
[  631.493811][T14634]  copy_msghdr_from_user+0x9f/0x4f0
[  631.493848][T14634]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  631.493890][T14634]  ? __pfx__kstrtoull+0x10/0x10
[  631.493922][T14634]  ___sys_sendmsg+0x106/0x1e0
[  631.493959][T14634]  ? __pfx____sys_sendmsg+0x10/0x10
[  631.494007][T14634]  ? find_held_lock+0x2b/0x80
[  631.494047][T14634]  __sys_sendmmsg+0x205/0x430
[  631.494078][T14634]  ? __pfx___sys_sendmmsg+0x10/0x10
[  631.494114][T14634]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  631.494155][T14634]  ? fput+0x79/0x100
[  631.494180][T14634]  ? ksys_write+0x1ac/0x250
[  631.494216][T14634]  ? __pfx_ksys_write+0x10/0x10
[  631.494256][T14634]  __x64_sys_sendmmsg+0x9c/0x100
[  631.494283][T14634]  ? lockdep_hardirqs_on+0x78/0x100
[  631.494309][T14634]  do_syscall_64+0x106/0xf80
[  631.494334][T14634]  ? clear_bhb_loop+0x40/0x90
[  631.494363][T14634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.494387][T14634] RIP: 0033:0x7f58a1f9c799
[  631.494406][T14634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.494428][T14634] RSP: 002b:00007f58a2d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  631.494450][T14634] RAX: ffffffffffffffda RBX: 00007f58a2215fa0 RCX: 00007f58a1f9c799
[  631.494466][T14634] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003
[  631.494479][T14634] RBP: 00007f58a2d8d090 R08: 0000000000000000 R09: 0000000000000000
[  631.494493][T14634] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001
[  631.494507][T14634] R13: 00007f58a2216038 R14: 00007f58a2215fa0 R15: 00007ffd5edf0f98
[  631.494537][T14634]  </TASK>
[  632.527242][T14644] �: entered promiscuous mode
[  633.346841][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1822'.
[  635.736282][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'.
[  639.872276][T14755] blktrace: Concurrent blktraces are not allowed on loop2
[  643.358850][T14796] CIFS mount error: No usable UNC path provided in device string!
[  643.358850][T14796] 
[  643.559978][T14796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  646.691287][T14818] FAULT_INJECTION: forcing a failure.
[  646.691287][T14818] name failslab, interval 1, probability 0, space 0, times 0
[  646.795739][T14818] CPU: 0 UID: 0 PID: 14818 Comm: syz.6.1856 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  646.795782][T14818] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  646.795792][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  646.795806][T14818] Call Trace:
[  646.795814][T14818]  <TASK>
[  646.795824][T14818]  dump_stack_lvl+0x100/0x190
[  646.795865][T14818]  should_fail_ex.cold+0x5/0xa
[  646.795895][T14818]  should_failslab+0xc2/0x120
[  646.795923][T14818]  __kmalloc_cache_noprof+0x7a/0x6f0
[  646.795955][T14818]  ? vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  646.795981][T14818]  ? vidtv_psi_pmt_table_init+0x363/0x430
[  646.796011][T14818]  vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  646.796039][T14818]  vidtv_channel_si_init+0x1289/0x18d0
[  646.796078][T14818]  vidtv_mux_init+0x526/0xbf0
[  646.796113][T14818]  vidtv_start_feed+0x33e/0x4c0
[  646.796150][T14818]  ? __pfx_vidtv_start_feed+0x10/0x10
[  646.796189][T14818]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  646.796235][T14818]  ? mark_held_locks+0x40/0x70
[  646.796271][T14818]  ? __pfx_vidtv_start_feed+0x10/0x10
[  646.796308][T14818]  dmx_ts_feed_start_filtering+0xf6/0x220
[  646.796354][T14818]  dvb_dmxdev_start_feed+0x273/0x3f0
[  646.796393][T14818]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  646.796433][T14818]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  646.796472][T14818]  dvb_demux_do_ioctl+0xe64/0x1200
[  646.796519][T14818]  dvb_usercopy+0x167/0x340
[  646.796550][T14818]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  646.796595][T14818]  ? __pfx_dvb_usercopy+0x10/0x10
[  646.796639][T14818]  ? __fget_files+0x21f/0x3d0
[  646.796711][T14818]  dvb_demux_ioctl+0x29/0x40
[  646.796744][T14818]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  646.796782][T14818]  __x64_sys_ioctl+0x18e/0x210
[  646.796819][T14818]  do_syscall_64+0x106/0xf80
[  646.796847][T14818]  ? clear_bhb_loop+0x40/0x90
[  646.796879][T14818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.796904][T14818] RIP: 0033:0x7fe3fa99c799
[  646.796925][T14818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.796949][T14818] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  646.796972][T14818] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  646.796989][T14818] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002
[  646.797004][T14818] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  646.797019][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.797033][T14818] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  646.797066][T14818]  </TASK>
[  647.344825][T14818] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  647.357038][T14818] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  647.365540][T14818] CPU: 0 UID: 0 PID: 14818 Comm: syz.6.1856 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  647.376553][T14818] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  647.381757][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  647.391839][T14818] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90
[  647.397782][T14818] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 3d 68 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 19 68 dc f9 4d 85 e4
[  647.417655][T14818] RSP: 0018:ffffc90003727a10 EFLAGS: 00010247
[  647.423960][T14818] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc900052d1000
[  647.432039][T14818] RDX: 0000000000000000 RSI: ffffffff882b9263 RDI: 0000000000000005
[  647.440158][T14818] RBP: ffff88802a0b9360 R08: 0000000000000000 R09: 4453534204050000
[  647.448155][T14818] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
[  647.456243][T14818] R13: ffff8880865242c0 R14: ffff88807878cfa0 R15: ffff888086524180
[  647.464234][T14818] FS:  00007fe3fb8446c0(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000
[  647.473186][T14818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  647.479792][T14818] CR2: 00007f68503e6158 CR3: 000000008653a000 CR4: 00000000003526f0
[  647.487865][T14818] Call Trace:
[  647.491167][T14818]  <TASK>
[  647.494126][T14818]  vidtv_channel_si_init+0x12fc/0x18d0
[  647.499671][T14818]  vidtv_mux_init+0x526/0xbf0
[  647.504376][T14818]  vidtv_start_feed+0x33e/0x4c0
[  647.509449][T14818]  ? __pfx_vidtv_start_feed+0x10/0x10
[  647.514980][T14818]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  647.521718][T14818]  ? mark_held_locks+0x40/0x70
[  647.526528][T14818]  ? __pfx_vidtv_start_feed+0x10/0x10
[  647.531944][T14818]  dmx_ts_feed_start_filtering+0xf6/0x220
[  647.537708][T14818]  dvb_dmxdev_start_feed+0x273/0x3f0
[  647.543125][T14818]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  647.548632][T14818]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  647.553873][T14818]  dvb_demux_do_ioctl+0xe64/0x1200
[  647.559130][T14818]  dvb_usercopy+0x167/0x340
[  647.563687][T14818]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  647.569428][T14818]  ? __pfx_dvb_usercopy+0x10/0x10
[  647.574556][T14818]  ? __fget_files+0x21f/0x3d0
[  647.579362][T14818]  dvb_demux_ioctl+0x29/0x40
[  647.584029][T14818]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  647.589481][T14818]  __x64_sys_ioctl+0x18e/0x210
[  647.594298][T14818]  do_syscall_64+0x106/0xf80
[  647.598915][T14818]  ? clear_bhb_loop+0x40/0x90
[  647.603614][T14818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.609535][T14818] RIP: 0033:0x7fe3fa99c799
[  647.613969][T14818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.633608][T14818] RSP: 002b:00007fe3fb844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  647.643184][T14818] RAX: ffffffffffffffda RBX: 00007fe3fac15fa0 RCX: 00007fe3fa99c799
[  647.651210][T14818] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002
[  647.659202][T14818] RBP: 00007fe3faa32bd9 R08: 0000000000000000 R09: 0000000000000000
[  647.667636][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.675738][T14818] R13: 00007fe3fac16038 R14: 00007fe3fac15fa0 R15: 00007ffd9ccdb128
[  647.683749][T14818]  </TASK>
[  647.686785][T14818] Modules linked in:
[  647.691841][T14818] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  648.239495][T13652] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  648.280611][T13652] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  649.043751][T10790] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.094678][T14818] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90
[  649.109709][T14818] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 3d 68 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 19 68 dc f9 4d 85 e4
[  649.192541][T14818] RSP: 0018:ffffc90003727a10 EFLAGS: 00010247
[  649.198677][T14818] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc900052d1000
[  649.239567][T14818] RDX: 0000000000000000 RSI: ffffffff882b9263 RDI: 0000000000000005
[  649.247612][T14818] RBP: ffff88802a0b9360 R08: 0000000000000000 R09: 4453534204050000
[  649.302825][T14818] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
[  649.319567][T14818] R13: ffff8880865242c0 R14: ffff88807878cfa0 R15: ffff888086524180
[  649.327679][T14818] FS:  00007fe3fb8446c0(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000
[  649.379762][T14818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  649.386398][T14818] CR2: 0000001b2d324220 CR3: 000000008653a000 CR4: 00000000003526f0
[  649.427815][T10790] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.469718][T14818] Kernel panic - not syncing: Fatal exception
[  649.475900][T14818] Kernel Offset: disabled
[  649.480269][T14818] Rebooting in 86400 seconds..