last executing test programs:

7.082314999s ago: executing program 1 (id=317):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x7, 0x0)
socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) (async)
r0 = socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) (async)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4d, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r2, 0x4, &(0x7f00000001c0)='\x00\x14\x86\x12/\xdd\x1d\xd9iu\xd7_\xd8\xde\x89\xea|d\xac\x11\x06\x9f\t\x9f\x91\xeb\xaf\x8d\x8d$\x19\x13\xa1\x97\xaey\xf9\x1b_g\xb0\x8bN\xe1c[\x01\x10\x97\xcd\xdf\xc1^(\x9b\xd9EC\xb3R\xdfDC\xcdt\x17\xefS\xe1\x85\x8a\x87f\xa3]\xc0\xac\x86\xc8*;\nD\x92\x9f\xf3\x90\xb0\xd8Y\xbep\xb1\x14\x89\xb1\n!b\x10\xedS\xca\x8c&\xbf\xca\x1d\xccnw\xd9T\x044\xc6\x96\xfc\x02j!\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0xffffff9c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye0\x00', 0x109441, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye0\x00', 0x109441, 0x0)
ioctl$auto(r2, 0x5408, r0) (async)
ioctl$auto(r2, 0x5408, r0)
r3 = socket(0xa, 0x5, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r5, 0x107, 0x7, 0x0, 0x4) (async)
setsockopt$auto(r5, 0x107, 0x7, 0x0, 0x4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x830, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x4, 0xffffffffffffffff, [0x7ff], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x8, 0x2}, {0x100, 0x1, 0x4e, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)

6.09837082s ago: executing program 0 (id=322):
mmap$auto(0x0, 0x2020006, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mounts\x00', 0x20040, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
close_range$auto(0x2, r0, 0x1)
io_uring_setup$auto(0x20a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010b27bd7000fcd8eefcbb630ca8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084)
unshare$auto(0x40000080)
read$auto(0x3, 0x0, 0x13)
mmap$auto(0x0, 0x2020006, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mounts\x00', 0x20040, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
close_range$auto(0x2, r0, 0x1) (async)
io_uring_setup$auto(0x20a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010b27bd7000fcd8eefcbb630ca8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) (async)
unshare$auto(0x40000080) (async)
read$auto(0x3, 0x0, 0x13) (async)

4.919668698s ago: executing program 0 (id=329):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x0) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x4, 0xfffffffe, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x180002, 0xdf, 0x9b72, 0x4, 0x400000008000) (async)
mmap$auto(0x0, 0x180002, 0xdf, 0x9b72, 0x4, 0x400000008000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6})
prctl$auto(0x39, 0x0, 0x0, 0x0, 0x10000000000) (async)
prctl$auto(0x39, 0x0, 0x0, 0x0, 0x10000000000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x900, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

4.855911853s ago: executing program 1 (id=330):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x6, 0x7, 0x23e, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x7, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200d)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = eventfd$auto(0x80)
readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8)
read$auto(r0, 0x0, 0xcc9c)
write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
shutdown$auto(0x200000003, 0x2)
listen$auto(0x3, 0xfffffff9)

4.604636119s ago: executing program 2 (id=332):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0)
ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000500)={0x40000000008, 0x6, 0x5, 0x0, 0x401, 0x80000000, "00f0ffffff0000000000000000000f00", 0x8, 0x2, 0x82, 0x5, 0x4, 0x2, 0x3})

4.368590902s ago: executing program 2 (id=334):
inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) (async)
r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x1, 0x3, 0xffffffffffffffff, 0x3, 0x1)
ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r0, 0x40184150, &(0x7f0000000580)={0x7, &(0x7f00000004c0)="8cb49db27e9bfd3d7ca21d1f3f2be78d46cef4729de268e8b6e6e398a355532453d7e9e7d9b8cdd070c7e69011f7ee2def56eff0371d04e0718b81c08de4421c6275863ebafd3ab76363198b6d466161c566b19d18ec504f994b8d63ae1b343631460f554ba334f2b28739b38aed3e89fcaa8f961a0e63458cad2e80340b0ac84c302b051b3a575e"})
socket(0x29, 0x6, 0x0) (async)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) (rerun: 64)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4) (async)
socket(0x2, 0x3, 0x4) (async)
r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
newfstatat$auto(r2, 0x0, 0x0, 0xfffffffe) (async, rerun: 64)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) (rerun: 64)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async)
write$auto(0x3, 0x0, 0xffeb) (async)
select$auto(0xe98, 0x0, 0x0, &(0x7f0000000040)={[0x54e, 0x10000000000005, 0x1, 0x8fd6, 0x948b, 0x3, 0x3392, 0x200004, 0x40, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x5, 0xfffffffffffffffe]}, 0x0) (async)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7fffffff, 0x8fb, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000000000000005, 0x62, 0x8000001f, 0x4, 0x2, 0x9, 0x2, 0x6]}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x400e42, 0x0)
pread64$auto(r4, 0x0, 0x80000006, 0x3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0}) (async)
read$auto_vrr_range_fops_(r1, &(0x7f0000000480)=""/3, 0x3) (async)
r6 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0xffffffff, 0x81, 0x9, @_rt={<r7=>0x0, 0x0, @sival_int=0xfffffffd}}}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000001, 0x9, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0x8205, 0x3, 0xe, 0x0, 0xe})
msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7fffffff, 0x2, 0x1}, 0x0, 0x0, 0x80000003, 0x9, 0x8000006, 0xffffffff, 0xfffffffffffffffe, 0x7ffe, 0xfc2, 0x400, @inferred=r6, @inferred=r7})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x100)

4.265690924s ago: executing program 1 (id=335):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
bpf$auto(0x0, 0x0, 0x4f4) (async)
bpf$auto(0x0, 0x0, 0x4f4)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) (async)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/hid/drivers/smartjoyplus/new_id\x00', 0x0, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/hid/drivers/smartjoyplus/new_id\x00', 0x0, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1) (async)
ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x0, 0x4000000d3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x3, 0x4000080000005, 0x50ab, 0x4, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) (async)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x0, 0x4000000d3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x3, 0x4000080000005, 0x50ab, 0x4, 0x9, 0x2, 0xffffffffffffffff]}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3.983295218s ago: executing program 2 (id=336):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x7f, 0x0, 0x0, 0xdd)
madvise$auto(0x0, 0x2003ee, 0x15)
futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
timer_create$auto(0x3, 0x0, 0x0)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r0 = socket(0x2a, 0x2, 0x8001)
close_range$auto(0xffffffffffffffff, r0, 0xb)
socket(0x15, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x4, 0x20, 0x0, 0x2c, 0x2d, 0x7, 0x3})
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x5, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80010023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x101501, 0x0)

3.923380767s ago: executing program 0 (id=337):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
close_range$auto(r0, r0, 0x0)
io_uring_setup$auto(0xa, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
timerfd_create$auto(0x8, 0x800)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r2, r2, 0x0, 0x2)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x10941, 0x0)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)

2.782598444s ago: executing program 3 (id=339):
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800)
timer_settime$auto(0xfffffffe, 0x9, 0x0, 0x0) (async)
timer_settime$auto(0xfffffffe, 0x9, 0x0, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0xa0342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180))
r1 = socket(0x10, 0x2, 0x0)
socket(0xa, 0x2, 0x0) (async)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) (async)
setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
sendmsg$auto_NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fbdbdf250a000000c3009d00efe3fef6d71fd37090b5bcf4f9d6eb568333ad4d8122ac934b381859e68be08c6af46a1ed408f687232647cc901776864c29756f381153d8ca6fdcf72bd990606e5f2c9662757d2bb5f05b12447958aa18e879c4bb5a507243153e34dfd09830dee00e096084691283b340b05ecc6cb886ac30680ea9ab63db0890137d7f02db3e878b168bd30b97882d868006bea1e007a49598f645e69e576a214c3f0c7cc039c2b940c1f8fd76c37f5f5e244b6b356f651b4edcad61ba250d30e984241200"], 0xd8}, 0x1, 0x0, 0x0, 0x240440d0}, 0x20000010) (async)
sendmsg$auto_NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fbdbdf250a000000c3009d00efe3fef6d71fd37090b5bcf4f9d6eb568333ad4d8122ac934b381859e68be08c6af46a1ed408f687232647cc901776864c29756f381153d8ca6fdcf72bd990606e5f2c9662757d2bb5f05b12447958aa18e879c4bb5a507243153e34dfd09830dee00e096084691283b340b05ecc6cb886ac30680ea9ab63db0890137d7f02db3e878b168bd30b97882d868006bea1e007a49598f645e69e576a214c3f0c7cc039c2b940c1f8fd76c37f5f5e244b6b356f651b4edcad61ba250d30e984241200"], 0xd8}, 0x1, 0x0, 0x0, 0x240440d0}, 0x20000010)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14008601", @ANYRES16=0x0, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) (async)
mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000)
inotify_init1$auto(0x7fff)
socketpair$auto(0x4, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$auto_SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)="351547")
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r5, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="741625b260", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r6, 0x4143, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2.772637773s ago: executing program 2 (id=340):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
socket(0x15, 0x5, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x40107446, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4a8c81, 0x0) (async)
socket(0xa, 0x5, 0x0) (async, rerun: 64)
ioctl$auto_FITRIM3(0xffffffffffffffff, 0xc0185879, 0x0) (async, rerun: 64)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mmap$auto(0x0, 0x20008, 0x4, 0x3b, 0xffffffffffffffff, 0x8000)
socket(0x2a, 0x2, 0x0) (async, rerun: 32)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x5, 0x7fff, 0x19fff, 0x800009487, 0x8, 0x200000000008, 0x7f, 0x100000000003, 0x1000000009, 0x9, 0x3, 0x6, 0x400005, 0x5, 0x2]}, 0x0) (rerun: 32)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)

2.423195564s ago: executing program 1 (id=341):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x2, 0x300)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x1, 0x0)
socket(0x18, 0x0, 0xfffffffd)
r1 = socket(0x1d, 0x2, 0x7)
socket(0x1d, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x11, 0x2, 0x8)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4fe0e6f498f9841313ecfcd221000004756f692", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x21, 0x0)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
close_range$auto(r0, r4, 0x3)
ioctl$auto(0x3, 0x4020565a, 0x38)

2.392615217s ago: executing program 3 (id=342):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec4\x00', 0x183e02, 0x0)
ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000500)={0x40000000008, 0x6, 0x5, 0x0, 0x401, 0x80000000, "00f0ffffff00", 0x8, 0x2, 0x82, 0x5, 0x4, 0x2, 0x3})

2.301628574s ago: executing program 0 (id=343):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r0, 0x1, 0x820, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x40000023}, 0x96)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
poll$auto(&(0x7f0000000180)={r2, 0x3569, 0x8}, 0x34, 0x5)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

2.182404064s ago: executing program 3 (id=344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0xb4, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x30, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x100000, 0x800000001, 0x6, 0x7, 0x2, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x5, 0xffff, 0x50ce0883, 0xbd6, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, <r1=>0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}})
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00', @ANYBLOB, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008)
sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="340200", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250a0000008b0000005be2fdb89a4555bc0ab8fe1b8e4b4655d23babd081a509722b09545c7ad5b15ca3467eb11f74ec1e377cded66879fbe15c54ec9992338ae2d0a419c32c522f30bc4e4370bfae178ac65e63fbd8e692413b826bc301c4542c7efb16e35c150064a9e4e8259c24b140a3a8591f066a48f8c356516fe9edbf6a68cb"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
open(0x0, 0x22040, 0x75)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x1, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
ioctl$auto(r2, 0x540a, 0x0)
socket(0xa, 0x5, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
timer_create$auto(0x0, 0x0, 0x0)
prctl$auto(0xffffff57, 0x1, 0x0, 0x1, 0x2000000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)

1.886406582s ago: executing program 1 (id=345):
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x9, 0x5, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(r2, 0x89f0, r2)
mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.519966652s ago: executing program 2 (id=346):
openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
socket(0x10, 0x6, 0x100000ec)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x86, 0x0)
open(0x0, 0x305481, 0x3b5)
syz_clone(0x20000100, 0x0, 0x3c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
fcntl$auto(0x3, 0x4, 0xa553)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r0 = socket(0x2b, 0x1, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0)
ioctl$auto(r1, 0xc0045627, r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)

1.22876845s ago: executing program 3 (id=347):
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xff)
r1 = socket(0x2b, 0x1, 0x0)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40)
setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000003", @ANYRES16=r3, @ANYBLOB="010327bd700003dcdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800)
msgctl$auto_MSG_INFO(0x6, 0xc, &(0x7f0000000140)={{0xffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x3, 0x6, 0x101}, &(0x7f00000000c0)=0x30, &(0x7f0000000100)=0xf7, 0x200, 0x81, 0x5, 0x6, 0xffffffffffffffc0, 0xfffe, 0x101, 0x6c9, @raw=0xfffff5bf, @inferred=0xffffffffffffffff})
sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x1458, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x115b, 0x1, 0x0, 0x1, [@nested={0x10b6, 0x3c9d, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@multicast2}, @generic="1316cfa9cf90b6a502de5eec7ed612b7f548ae63e5d28953d67c4e1f1350cbcf8888234757bab2bfcb9d8d49d04a6ead5d30bdd50c6501e932a479b695d676dc67e52facd395f55e4977228cd176b5ba145d0113904b7a50a15b7496b6adc8fa5a7eeca76a751e0e6a9e3c4b893d4605", @generic="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", @generic="ed67b57cd83e28d6f1c05130588e665de77d3872af13a71dce67fac54ba0b03c9a13", @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x9e}]}, @typed={0x8, 0x83, 0x0, 0x0, @pid}, @generic="69e300df3f60fad6b6e9ff1a3edf39fcdf925df170218cffe2421481552f276bb738ec3ce1f2cfced215a6cfcae62ca96eed3d7753be4a917c441b35a90c96395365138eef35241f763edff716498e2c7ee827294cf61236dfaf4a74a65fe206d5193274767be82f6f68ac2aaccac93258ea0302fb0d0850b79703947e2f87702733f8", @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x84, 0x0, 0x0, @u64}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2d6, 0x3, 0x0, 0x1, [@generic="7bcd4e50e3ab63e3246e45a2019fcf7aeb7ece262bcab1bdccb83f66b12509316fd70d9e1a6e3c58606f1c40a9e634c1400dabe79d9ebefdee0ce6cc2b3b5296c4e83a6412e361357402b78a42b1c968333ceaa37308649b20bae055d16df33b3a57d01c6e9fee3a04f3a7f3d732143bb3d7f40e4f6b9f0cd6e66d5bcae829bfda58b9eafe3930ef1590f01961ef5e576fb8", @nested={0xa9, 0x83, 0x0, 0x1, [@generic="1728d88a357c8401901fab931cf8fd5e6afaeeaea20879fec04b979f212b2840d5489b19fd39bf1798cf74feb5bddcbab0658e890d8e8878f99eb53e8d4f6d294e59a123074de892ade8c27e38fafc0690e0687b315c38274cf8496daa9ac2886b3855912a5a0fbed869f8463d654841a426a145c5e8bc8dbb2528ee0cbb6fe2cf0bae3fc415561a31e1500efee6f01060691864359805f42de1cd19b0", @typed={0x8, 0x121, 0x0, 0x0, @uid=r4}]}, @generic="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", @nested={0x8f, 0xa7, 0x0, 0x1, [@generic="5d016c68d4f89f8eb59245db518c9f32b01d02c8531fc490f86c096a54f58537fead94e5e8d41d87d0303963bf8e42eb51b950a57a91291dce204aaf1de4809f6c65feb9ee1c8bfca0510e0dfb18a9dd3685e7654176d97280239f8f2f83dd126d31a0390a73d8184240f1e374f4db6e45ded7aae7894384d9a51157acd41dd92ee72fec5bafa9d094fdf9"]}, @generic="77a76739a03e"]}]}, 0x1458}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000001)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy$auto(0x1, 0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop1/queue/zone_append_max_bytes\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x6)
write$auto(0x3, 0x0, 0x80000001)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r6, 0x0, 0x1ff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r7 = epoll_create$auto(0x3e)
epoll_ctl$auto(r7, 0x1, 0xffffffffffffffff, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r8, 0x5408, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

1.024062996s ago: executing program 0 (id=348):
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
socket(0xa, 0x1, 0x7)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x18, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x5, 0x0)
getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
ioctl$auto(r2, 0x4008af24, r1)

915.569625ms ago: executing program 3 (id=349):
write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05cab20eabc25b6240b084785dac9ddeceedcf0c288633b6a40eb3c9a9a00a8140c1a5d3f4418e6820622dc5e8f300f88254e3b7a4052254f9c40b62b89841b2", 0x7b) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async)
r2 = open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
msync$auto(0x200000, 0x2000000005, 0x6) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r4 = socket(0x2, 0x80002, 0x73) (async)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sysfs$auto(0x2, 0x23, 0x0) (async)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee00", @ANYRES16=r3, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) (async)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r4) (async)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2) (async)
r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
r7 = socket(0x10, 0x2, 0x6)
getsockopt$auto(r7, 0x2, 0x0, &(0x7f0000000180)='%\x00', &(0x7f00000001c0)=0x8)

479.609726ms ago: executing program 2 (id=350):
socket(0xa, 0x3, 0xff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/devices/system/memory/memory0/state\x00', 0xea)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r1, 0x0, 0x3f1)
setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b)
close_range$auto(0xffffffffffffffff, 0x8, 0x7fff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0xfffffffffffffffd, 0x200006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
waitid$auto(0x80, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x5, 0x2}}}, 0x1ff, &(0x7f0000000180)={{0xfffffffffffffff9, 0x1}, {0x5, 0x5}, 0x4000000004, 0x5, 0x1, 0x20100000000, 0xfffffffffffffffd, 0x8000, 0x401, 0x7, 0x9, 0x5d9, 0x5, 0xd, 0xfffffffffffffff7, 0x3})
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x20000000008000)
preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x8, 0x4, 0x7b)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1e8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}, @NL80211_ATTR_HT_CAPABILITY={0x9b, 0x1f, "10908af1c8b6d579e07aeb49c947e066585b587447e1ef5ed0a9cbcb5a75e9460f442b9365c24c95f5aa619bdb7a32a6809963cf7f2ad79d4e62aff192619fdbea944a70f0b71a830a660ffb1944dcb826badff31f1a6a595f3840ec9b66502212bafa68f504e00fb8ceb12467c5ecf73b62ad46dd72a83bab1ce38c9976ac8e19afc92e66695fe5f75bff616f95cca5dcdac3fec83352"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_VENDOR_DATA={0xfd, 0xc5, "9c7003ddf8e1a64970ebe2723dbe3f4f327a92a8af853e4e894cd3a0817daff502c4a1ea2581dc38b9ad39e1a3e900913be6fc3614d1b5b0108eaf003cddaea803fbeb5b0e17656162e5cd72ceca53281046d293e058c63aeae62cab9323036b816e6ad940b86aaff94450b8e589ddcaa501790530fca26d977a405183bde12c4bab6698c806afe74732ac002366a37ce84b901f706569c8457781e7ef8be9d916568a68a7647f3f79164f8cbb9ec74db63404148fc571bbf514d7a84b356c3af4584c54c2d5ae2bd7f764eda0f6ccd7d19213984a7e97b251e4ca47e5d806cf6793265bdd0fc8df286c2ee09dfacec270ab1533a3738b68b3"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xfff}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
write$auto(r4, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

360.463288ms ago: executing program 1 (id=351):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x4d, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r1, 0x0, 0x400100000001, 0x1ff)
readv$auto(0x3, 0x0, 0x4)
unshare$auto(0x40000080)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103})
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r2=>0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYBLOB="136019ba9d582bb92154c6d35a49cdeae0a350524b937f7abf07b25f3d2a5a0abcc40346aee89e223c8fc4a769196cdcfc8318860b2f91acefc47bb3a80af24c7d1b95300856682aed8a440baa5b2cda3e76bcbd24cf453ef25a73b04b71259413709ec776a1543377e340dee3675806dcd63867d989faacdab08f10ddbdf0471ef1b044784f5c58c71aa4bba3e194ad27d39330a9e1e097864a5fb0c9d3324f3ce3904f79c494c63e68488770a395b68afafaffa7d8cf7e8d7f4d204ad480ed510eb059cc5565e8fc635be57063886445a87a6d4234f615e1a6be2077c98f"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d)
ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8)
mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, r3, 0x0)
openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)

319.736989ms ago: executing program 0 (id=352):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a101a00, 0x0)
socketpair$auto(0x20004, 0x1, 0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x5cf440, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x35f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x40001)
mmap$auto(0xfffffffffffffffc, 0xa, 0xffffffffffff19f1, 0xeb1, r1, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0xcc5, 0x0)
utimensat$auto(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38)
mmap$auto(0x3, 0x400000e983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)

0s ago: executing program 3 (id=353):
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0x2b3f) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x46a982, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x20000, 0x0) (async)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x200, 0x43, &(0x7f0000000100)='C[\x00', 0x7)
io_uring_setup$auto(0xa, 0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0)
socket(0x15, 0x5, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) (async)
setresuid$auto(0x0, 0x8, 0x8000)
setgid$auto(0x0) (async)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0)
userfaultfd$auto(0x1)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0xc00, 0x0) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) (async)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0xffffffffffff8000, 0x8, 0x3, 0x800295f4da0b, 0x7, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
[   96.568414][ T5814] cgroup: Unknown subsys name 'net'
[   96.743761][ T5814] cgroup: Unknown subsys name 'cpuset'
[   96.752883][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   97.543589][   T43] cfg80211: failed to load regulatory.db
[   98.635307][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  100.395622][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.411487][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.420849][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.429771][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.437892][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.490736][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.499463][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.507997][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.516635][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.524930][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  100.576291][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.584978][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.601591][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.621150][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  100.630764][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  100.638758][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.647510][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  100.656683][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.666286][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  100.675783][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  101.037430][ T5828] chnl_net:caif_netlink_parms(): no params data found
[  101.231197][ T5831] chnl_net:caif_netlink_parms(): no params data found
[  101.302927][ T5834] chnl_net:caif_netlink_parms(): no params data found
[  101.331428][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.339302][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.347138][ T5828] bridge_slave_0: entered allmulticast mode
[  101.354813][ T5828] bridge_slave_0: entered promiscuous mode
[  101.383098][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.390531][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.398271][ T5828] bridge_slave_1: entered allmulticast mode
[  101.406930][ T5828] bridge_slave_1: entered promiscuous mode
[  101.538687][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.573490][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.583490][ T5833] chnl_net:caif_netlink_parms(): no params data found
[  101.601083][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.608738][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.616617][ T5831] bridge_slave_0: entered allmulticast mode
[  101.624147][ T5831] bridge_slave_0: entered promiscuous mode
[  101.668132][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.675779][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.684653][ T5831] bridge_slave_1: entered allmulticast mode
[  101.692379][ T5831] bridge_slave_1: entered promiscuous mode
[  101.722512][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.729905][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.737282][ T5834] bridge_slave_0: entered allmulticast mode
[  101.745282][ T5834] bridge_slave_0: entered promiscuous mode
[  101.766323][ T5828] team0: Port device team_slave_0 added
[  101.783026][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.791049][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.798408][ T5834] bridge_slave_1: entered allmulticast mode
[  101.806994][ T5834] bridge_slave_1: entered promiscuous mode
[  101.828445][ T5828] team0: Port device team_slave_1 added
[  101.853800][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.896575][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.925721][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.946276][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.953437][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.980223][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.006140][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.027207][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.035278][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.063284][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.097420][ T5831] team0: Port device team_slave_0 added
[  102.113677][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.121564][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.129056][ T5833] bridge_slave_0: entered allmulticast mode
[  102.137029][ T5833] bridge_slave_0: entered promiscuous mode
[  102.158584][ T5831] team0: Port device team_slave_1 added
[  102.165465][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.173689][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.186105][ T5833] bridge_slave_1: entered allmulticast mode
[  102.194398][ T5833] bridge_slave_1: entered promiscuous mode
[  102.203639][ T5834] team0: Port device team_slave_0 added
[  102.234170][ T5834] team0: Port device team_slave_1 added
[  102.281283][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.289370][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.316965][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.343348][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.365404][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.372969][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.400934][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.418749][ T5828] hsr_slave_0: entered promiscuous mode
[  102.426225][ T5828] hsr_slave_1: entered promiscuous mode
[  102.435759][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.445910][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.453505][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.480361][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.500572][   T52] Bluetooth: hci0: command tx timeout
[  102.541465][ T5833] team0: Port device team_slave_0 added
[  102.547805][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.556166][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.584149][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.590521][   T52] Bluetooth: hci1: command tx timeout
[  102.606069][ T5833] team0: Port device team_slave_1 added
[  102.719658][ T5831] hsr_slave_0: entered promiscuous mode
[  102.726678][ T5831] hsr_slave_1: entered promiscuous mode
[  102.733367][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[  102.739451][ T5831] Cannot create hsr debugfs directory
[  102.745965][ T5146] Bluetooth: hci2: command tx timeout
[  102.749741][   T52] Bluetooth: hci3: command tx timeout
[  102.764873][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.772598][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.800196][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.825147][ T5834] hsr_slave_0: entered promiscuous mode
[  102.832367][ T5834] hsr_slave_1: entered promiscuous mode
[  102.838660][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[  102.844700][ T5834] Cannot create hsr debugfs directory
[  102.851207][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.858409][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.885463][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.075141][ T5833] hsr_slave_0: entered promiscuous mode
[  103.082184][ T5833] hsr_slave_1: entered promiscuous mode
[  103.089143][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[  103.095908][ T5833] Cannot create hsr debugfs directory
[  103.365328][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  103.378905][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  103.414630][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  103.433492][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.510777][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.528253][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.542017][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.565306][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.654422][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.671274][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.701670][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.715744][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.808560][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.826804][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.839653][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.865981][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.914197][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.965340][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[  103.996288][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.003984][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.044551][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.052075][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.067182][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.161064][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[  104.183854][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.208167][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.216064][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.249115][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.256800][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.285863][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[  104.332016][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.339237][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.376548][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.383895][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.402196][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.505665][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  104.553993][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.561521][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.580261][   T52] Bluetooth: hci0: command tx timeout
[  104.617401][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.625291][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.660572][   T52] Bluetooth: hci1: command tx timeout
[  104.743030][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.825119][   T52] Bluetooth: hci2: command tx timeout
[  104.825133][ T5146] Bluetooth: hci3: command tx timeout
[  104.963577][ T5828] veth0_vlan: entered promiscuous mode
[  105.023807][ T5828] veth1_vlan: entered promiscuous mode
[  105.074682][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.173551][ T5828] veth0_macvtap: entered promiscuous mode
[  105.202185][ T5828] veth1_macvtap: entered promiscuous mode
[  105.215963][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.268583][ T5831] veth0_vlan: entered promiscuous mode
[  105.284891][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.298294][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.333742][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.355198][ T5831] veth1_vlan: entered promiscuous mode
[  105.378919][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.391617][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.411404][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.422078][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.484088][ T5834] veth0_vlan: entered promiscuous mode
[  105.499222][ T5833] veth0_vlan: entered promiscuous mode
[  105.519774][ T5834] veth1_vlan: entered promiscuous mode
[  105.568781][ T5833] veth1_vlan: entered promiscuous mode
[  105.607502][ T5831] veth0_macvtap: entered promiscuous mode
[  105.616370][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.634987][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.655271][ T5831] veth1_macvtap: entered promiscuous mode
[  105.697964][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.713720][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.724831][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.738707][ T5834] veth0_macvtap: entered promiscuous mode
[  105.758246][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.775892][ T5834] veth1_macvtap: entered promiscuous mode
[  105.805468][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.818843][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  105.829924][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.853409][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.865802][ T5833] veth0_macvtap: entered promiscuous mode
[  105.893921][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.953692][ T5833] veth1_macvtap: entered promiscuous mode
[  105.997691][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.053740][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.102241][ T4415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.122992][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.139530][ T4415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.163281][ T4415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.177658][ T4415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.196474][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.210731][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.222320][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.262632][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.274704][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.315344][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.351434][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.382789][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.391561][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.662359][   T52] Bluetooth: hci0: command tx timeout
[  106.693719][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.709126][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.740735][   T52] Bluetooth: hci1: command tx timeout
[  106.900169][   T52] Bluetooth: hci2: command tx timeout
[  106.905765][   T52] Bluetooth: hci3: command tx timeout
[  106.906919][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.935238][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.964373][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.978270][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.113700][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.123597][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.668543][ T5929] FAULT_INJECTION: forcing a failure.
[  107.668543][ T5929] name failslab, interval 1, probability 0, space 0, times 1
[  107.704456][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) 
[  107.704493][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  107.704502][ T5929] Call Trace:
[  107.704510][ T5929]  <TASK>
[  107.704518][ T5929]  dump_stack_lvl+0x16c/0x1f0
[  107.704549][ T5929]  should_fail_ex+0x512/0x640
[  107.704573][ T5929]  should_failslab+0xc2/0x120
[  107.704599][ T5929]  __kmalloc_noprof+0xeb/0x910
[  107.704621][ T5929]  ? memcg_list_lru_alloc+0x4e9/0x740
[  107.704645][ T5929]  ? memcg_list_lru_alloc+0x4e9/0x740
[  107.704663][ T5929]  memcg_list_lru_alloc+0x4e9/0x740
[  107.704688][ T5929]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  107.704718][ T5929]  ? get_mem_cgroup_from_objcg+0x149/0x620
[  107.704739][ T5929]  ? zswap_store+0x62c/0x2800
[  107.704756][ T5929]  zswap_store+0x6b8/0x2800
[  107.704779][ T5929]  ? __schedule+0x1091/0x6150
[  107.704812][ T5929]  ? __pfx_zswap_store+0x10/0x10
[  107.704830][ T5929]  ? folio_free_swap+0x229/0x740
[  107.704855][ T5929]  ? do_raw_spin_unlock+0x172/0x230
[  107.704875][ T5929]  ? _raw_spin_unlock+0x28/0x50
[  107.704897][ T5929]  ? folio_free_swap+0x285/0x740
[  107.704919][ T5929]  ? preempt_schedule_thunk+0x16/0x30
[  107.704940][ T5929]  swap_writeout+0x3f4/0x1090
[  107.704964][ T5929]  shmem_writeout+0xc21/0x1140
[  107.704986][ T5929]  ? __pfx_shmem_writeout+0x10/0x10
[  107.705007][ T5929]  ? inode_to_bdi+0x9e/0x160
[  107.705027][ T5929]  ? folio_clear_dirty_for_io+0x112/0x6b0
[  107.705053][ T5929]  shrink_folio_list+0x3003/0x4a70
[  107.705079][ T5929]  ? __pfx_shrink_folio_list+0x10/0x10
[  107.705100][ T5929]  ? __kasan_check_byte+0x13/0x50
[  107.705126][ T5929]  ? rcu_is_watching+0x12/0xc0
[  107.705154][ T5929]  ? __kasan_check_byte+0x13/0x50
[  107.705179][ T5929]  ? is_bpf_text_address+0x8a/0x1a0
[  107.705199][ T5929]  ? rcu_is_watching+0x12/0xc0
[  107.705221][ T5929]  ? lock_release+0x201/0x2d0
[  107.705253][ T5929]  ? lock_acquire+0x179/0x330
[  107.705268][ T5929]  ? find_held_lock+0x2b/0x80
[  107.705293][ T5929]  reclaim_folio_list+0xda/0x5a0
[  107.705312][ T5929]  ? __pfx_reclaim_folio_list+0x10/0x10
[  107.705342][ T5929]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  107.705366][ T5929]  reclaim_pages+0x3ec/0x570
[  107.705385][ T5929]  ? __pfx_reclaim_pages+0x10/0x10
[  107.705400][ T5929]  ? find_held_lock+0x2b/0x80
[  107.705421][ T5929]  ? madvise_cold_or_pageout_pte_range+0x739/0x2100
[  107.705442][ T5929]  madvise_cold_or_pageout_pte_range+0x1624/0x2100
[  107.705468][ T5929]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  107.705488][ T5929]  ? stack_trace_save+0x8e/0xc0
[  107.705520][ T5929]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  107.705538][ T5929]  walk_pgd_range+0xc10/0x1f80
[  107.705578][ T5929]  ? __pfx_walk_pgd_range+0x10/0x10
[  107.705598][ T5929]  ? finish_task_switch.isra.0+0x2e0/0xbd0
[  107.705623][ T5929]  ? rcu_is_watching+0x12/0xc0
[  107.705647][ T5929]  __walk_page_range+0x163/0x820
[  107.705679][ T5929]  walk_page_range_vma_unsafe+0x23f/0x9e0
[  107.705704][ T5929]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  107.705729][ T5929]  ? find_held_lock+0x2b/0x80
[  107.705750][ T5929]  ? mlock_drain_local+0x22d/0x4e0
[  107.705783][ T5929]  walk_page_range_vma+0x63/0x90
[  107.705807][ T5929]  madvise_pageout+0x257/0x540
[  107.705832][ T5929]  ? __pfx_madvise_pageout+0x10/0x10
[  107.705874][ T5929]  madvise_vma_behavior+0x912/0x29e0
[  107.705891][ T5929]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  107.705918][ T5929]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  107.705935][ T5929]  ? mas_prev+0x9b/0xf0
[  107.705952][ T5929]  ? __pfx_mas_prev+0x10/0x10
[  107.705973][ T5929]  ? find_vma_prev+0xd3/0x150
[  107.705997][ T5929]  ? __pfx_find_vma_prev+0x10/0x10
[  107.706033][ T5929]  madvise_walk_vmas+0x31f/0xac0
[  107.706052][ T5929]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  107.706075][ T5929]  madvise_do_behavior+0x1e2/0x530
[  107.706093][ T5929]  ? __pfx_madvise_do_behavior+0x10/0x10
[  107.706110][ T5929]  ? down_read+0x13d/0x460
[  107.706130][ T5929]  ? rcu_is_watching+0x12/0xc0
[  107.706151][ T5929]  ? finish_task_switch.isra.0+0x207/0xbd0
[  107.706178][ T5929]  do_madvise+0x176/0x240
[  107.706193][ T5929]  ? __pfx_do_madvise+0x10/0x10
[  107.706230][ T5929]  __x64_sys_madvise+0xa9/0x110
[  107.706246][ T5929]  ? lockdep_hardirqs_on+0x7c/0x110
[  107.706270][ T5929]  do_syscall_64+0xcd/0xf80
[  107.706286][ T5929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.706303][ T5929] RIP: 0033:0x7f1910d8f7c9
[  107.706319][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.706334][ T5929] RSP: 002b:00007f1911b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  107.706351][ T5929] RAX: ffffffffffffffda RBX: 00007f1910fe6090 RCX: 00007f1910d8f7c9
[  107.706455][ T5929] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000
[  107.706475][ T5929] RBP: 00007f1910e13f91 R08: 0000000000000000 R09: 0000000000000000
[  107.706490][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.706591][ T5929] R13: 00007f1910fe6128 R14: 00007f1910fe6090 R15: 00007ffd385b8858
[  107.706635][ T5929]  </TASK>
[  108.380437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.392735][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  108.600765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.600808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.783050][   T52] Bluetooth: hci0: command tx timeout
[  108.837002][   T52] Bluetooth: hci1: command tx timeout
[  108.859711][ T5933] Zero length message leads to an empty skb
[  108.923342][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.983460][ T5146] Bluetooth: hci2: command tx timeout
[  108.990994][   T52] Bluetooth: hci3: command tx timeout
[  109.197210][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  109.580359][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5b7000: rx timeout, send abort
[  109.589538][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e5b7400: rx timeout, send abort
[  109.598318][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e5b7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  109.613916][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e5b7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  109.824628][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.850438][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.859975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.869257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  110.011454][ T5949] syz.2.7 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  110.025652][ T5949] binder: 5948:5949 ioctl c018620c 0 returned -1
[  110.124290][ T5950] kfence: disabled
[  110.495226][ T5965] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  110.510014][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  112.425798][ T5985] process 'syz.2.16' launched ':,' with NULL argv: empty string added

[  118.904533][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[  119.077336][ T6073] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  120.542471][ T6093] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  120.542471][ T6093] The task syz.1.37 (6093) triggered the difference, watch for misbehavior.
[  121.949913][ T6113] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  122.185056][ T6109] block nbd7: not configured, cannot reconfigure
[  122.469368][ T6115] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  123.480894][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[  124.028802][ T6133] FAULT_INJECTION: forcing a failure.
[  124.028802][ T6133] name failslab, interval 1, probability 0, space 0, times 0
[  124.210345][ T6149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.222660][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) 
[  124.222697][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  124.222712][ T6133] Call Trace:
[  124.222721][ T6133]  <TASK>
[  124.222732][ T6133]  dump_stack_lvl+0x16c/0x1f0
[  124.222779][ T6133]  should_fail_ex+0x512/0x640
[  124.222809][ T6133]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  124.222847][ T6133]  should_failslab+0xc2/0x120
[  124.222887][ T6133]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  124.222922][ T6133]  ? alloc_inode+0xc3/0x240
[  124.222959][ T6133]  ? alloc_inode+0xc3/0x240
[  124.222986][ T6133]  alloc_inode+0xc3/0x240
[  124.223016][ T6133]  path_from_stashed+0x25b/0x750
[  124.223056][ T6133]  ? do_raw_read_unlock+0x44/0xe0
[  124.223096][ T6133]  ns_get_path+0x60/0x80
[  124.223137][ T6133]  proc_ns_get_link+0x121/0x230
[  124.223169][ T6133]  ? __pfx_proc_ns_get_link+0x10/0x10
[  124.223204][ T6133]  ? atime_needs_update+0x8b/0x710
[  124.223241][ T6133]  pick_link+0xc96/0x13b0
[  124.223275][ T6133]  ? __pfx_proc_ns_get_link+0x10/0x10
[  124.223311][ T6133]  step_into_slowpath+0x6c6/0xf50
[  124.223352][ T6133]  ? __pfx_step_into_slowpath+0x10/0x10
[  124.223387][ T6133]  ? find_held_lock+0x2b/0x80
[  124.223444][ T6133]  path_openat+0x10db/0x3140
[  124.223497][ T6133]  ? __pfx_path_openat+0x10/0x10
[  124.223552][ T6133]  do_filp_open+0x20b/0x470
[  124.223595][ T6133]  ? __pfx_do_filp_open+0x10/0x10
[  124.223660][ T6133]  ? alloc_fd+0x471/0x7d0
[  124.223709][ T6133]  do_sys_openat2+0x121/0x290
[  124.223739][ T6133]  ? __pfx_do_sys_openat2+0x10/0x10
[  124.223784][ T6133]  __x64_sys_openat+0x174/0x210
[  124.223814][ T6133]  ? __pfx___x64_sys_openat+0x10/0x10
[  124.223856][ T6133]  do_syscall_64+0xcd/0xf80
[  124.223884][ T6133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.223912][ T6133] RIP: 0033:0x7f480058e010
[  124.223934][ T6133] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  124.223956][ T6133] RSP: 002b:00007f4801465f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  124.223982][ T6133] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f480058e010
[  124.223999][ T6133] RDX: 0000000000000002 RSI: 00007f4801465fa0 RDI: 00000000ffffff9c
[  124.224015][ T6133] RBP: 00007f4801465fa0 R08: 0000000000000000 R09: 0000000000000000
[  124.224030][ T6133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  124.224045][ T6133] R13: 00007f48007e6128 R14: 00007f48007e6090 R15: 00007ffe3ffeecd8
[  124.224079][ T6133]  </TASK>
[  124.876202][ T6137] cgroup: fork rejected by pids controller in /syz2
[  125.693080][   T30] audit: type=1804 audit(1768486917.927:2): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.48" name="/newroot/11/file0" dev="tmpfs" ino=79 res=1 errno=0

syzkaller
syzkaller login: [  131.132126][ T6232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  131.334141][ T6238] block nbd7: not configured, cannot reconfigure
[  132.000023][ T6236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  133.562492][   T30] audit: type=1804 audit(1768486925.767:3): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.62" name="/newroot/13/file0" dev="tmpfs" ino=111 res=1 errno=0
[  133.935203][ T6259] kafs: addr_prefs: Invalid Command
[  134.004847][ T6261] FAULT_INJECTION: forcing a failure.
[  134.004847][ T6261] name failslab, interval 1, probability 0, space 0, times 0
[  134.039787][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) 
[  134.039826][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.039844][ T6261] Call Trace:
[  134.039854][ T6261]  <TASK>
[  134.039865][ T6261]  dump_stack_lvl+0x16c/0x1f0
[  134.039918][ T6261]  should_fail_ex+0x512/0x640
[  134.039950][ T6261]  ? kmem_cache_alloc_noprof+0x62/0x770
[  134.039988][ T6261]  should_failslab+0xc2/0x120
[  134.040031][ T6261]  kmem_cache_alloc_noprof+0x83/0x770
[  134.040066][ T6261]  ? security_file_alloc+0x34/0x2b0
[  134.040109][ T6261]  ? security_file_alloc+0x34/0x2b0
[  134.040141][ T6261]  security_file_alloc+0x34/0x2b0
[  134.040175][ T6261]  init_file+0x93/0x4c0
[  134.040204][ T6261]  alloc_empty_file+0x73/0x1e0
[  134.040236][ T6261]  alloc_file_pseudo+0x13a/0x230
[  134.040269][ T6261]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  134.040301][ T6261]  ? alloc_fd+0x471/0x7d0
[  134.040348][ T6261]  sock_alloc_file+0x50/0x210
[  134.040380][ T6261]  __sys_socket+0x1c0/0x260
[  134.040400][ T6261]  ? __x64_sys_openat+0x174/0x210
[  134.040432][ T6261]  ? __pfx___sys_socket+0x10/0x10
[  134.040460][ T6261]  ? xfd_validate_state+0x61/0x180
[  134.040497][ T6261]  __x64_sys_socket+0x72/0xb0
[  134.040524][ T6261]  ? lockdep_hardirqs_on+0x7c/0x110
[  134.040567][ T6261]  do_syscall_64+0xcd/0xf80
[  134.040606][ T6261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.040646][ T6261] RIP: 0033:0x7f86f5d8f7c9
[  134.040670][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.040697][ T6261] RSP: 002b:00007f86f6c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  134.040725][ T6261] RAX: ffffffffffffffda RBX: 00007f86f5fe6090 RCX: 00007f86f5d8f7c9
[  134.040745][ T6261] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  134.040760][ T6261] RBP: 00007f86f5e13f91 R08: 0000000000000000 R09: 0000000000000000
[  134.040776][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.040791][ T6261] R13: 00007f86f5fe6128 R14: 00007f86f5fe6090 R15: 00007ffdd50d3598
[  134.040827][ T6261]  </TASK>
[  134.532080][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.64'.
[  134.541936][ T6269] veth0_macvtap: left promiscuous mode
[  134.547792][ T6269] macvtap0: entered promiscuous mode
[  134.557877][ T6269] macvtap0: entered allmulticast mode
[  136.330865][ T6288] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  136.375254][ T6288] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  136.402606][ T6288] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  136.433685][ T6288] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  136.467942][ T6288] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  136.494893][ T6288] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  136.516365][ T6288] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  136.532066][ T6288] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  136.731783][ T6288] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  136.807394][ T6288] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  136.826141][ T6288] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  136.889895][ T6288] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  137.381889][ T6309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  137.699199][ T6302] block nbd7: not configured, cannot reconfigure
[  138.342522][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.504582][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.506981][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  138.540056][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.579920][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.776579][ T6314] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  138.822865][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.411939][ T6334] kafs: addr_prefs: Invalid Command
[  140.419970][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.531316][ T6336] FAULT_INJECTION: forcing a failure.
[  140.531316][ T6336] name failslab, interval 1, probability 0, space 0, times 0
[  140.549749][ T6336] CPU: 1 UID: 0 PID: 6336 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) 
[  140.549782][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.549792][ T6336] Call Trace:
[  140.549798][ T6336]  <TASK>
[  140.549805][ T6336]  dump_stack_lvl+0x16c/0x1f0
[  140.549836][ T6336]  should_fail_ex+0x512/0x640
[  140.549855][ T6336]  ? kmem_cache_alloc_noprof+0x62/0x770
[  140.549878][ T6336]  should_failslab+0xc2/0x120
[  140.549904][ T6336]  kmem_cache_alloc_noprof+0x83/0x770
[  140.549923][ T6336]  ? alloc_empty_file+0x55/0x1e0
[  140.549946][ T6336]  ? alloc_empty_file+0x55/0x1e0
[  140.549962][ T6336]  alloc_empty_file+0x55/0x1e0
[  140.549980][ T6336]  alloc_file_pseudo+0x13a/0x230
[  140.549999][ T6336]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  140.550017][ T6336]  ? alloc_fd+0x471/0x7d0
[  140.550044][ T6336]  sock_alloc_file+0x50/0x210
[  140.550068][ T6336]  __sys_socket+0x1c0/0x260
[  140.550083][ T6336]  ? __x64_sys_openat+0x174/0x210
[  140.550102][ T6336]  ? __pfx___sys_socket+0x10/0x10
[  140.550118][ T6336]  ? xfd_validate_state+0x61/0x180
[  140.550138][ T6336]  __x64_sys_socket+0x72/0xb0
[  140.550154][ T6336]  ? lockdep_hardirqs_on+0x7c/0x110
[  140.550179][ T6336]  do_syscall_64+0xcd/0xf80
[  140.550212][ T6336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.550229][ T6336] RIP: 0033:0x7f480058f7c9
[  140.550244][ T6336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.550260][ T6336] RSP: 002b:00007f4801466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  140.550278][ T6336] RAX: ffffffffffffffda RBX: 00007f48007e6090 RCX: 00007f480058f7c9
[  140.550290][ T6336] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  140.550302][ T6336] RBP: 00007f4800613f91 R08: 0000000000000000 R09: 0000000000000000
[  140.550311][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.550321][ T6336] R13: 00007f48007e6128 R14: 00007f48007e6090 R15: 00007ffe3ffeecd8
[  140.550342][ T6336]  </TASK>
[  140.764852][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.771559][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  140.899920][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.941281][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'.
[  140.993870][ T6339] veth0_macvtap: left promiscuous mode
[  141.036167][ T6339] macvtap0: entered promiscuous mode
[  141.041702][ T6339] macvtap0: entered allmulticast mode
[  142.509792][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.821115][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout
[  142.821164][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.980014][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  143.320433][ T6366] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  143.337673][ T6366] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  143.363525][ T6366] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  143.403302][ T6366] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  145.380017][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.381940][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout
[  145.386340][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  145.462254][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  146.186881][ T6401] kafs: addr_prefs: Invalid Command
[  146.252723][ T6404] FAULT_INJECTION: forcing a failure.
[  146.252723][ T6404] name failslab, interval 1, probability 0, space 0, times 0
[  146.265942][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(full) 
[  146.265966][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  146.265975][ T6404] Call Trace:
[  146.265981][ T6404]  <TASK>
[  146.265988][ T6404]  dump_stack_lvl+0x16c/0x1f0
[  146.266018][ T6404]  should_fail_ex+0x512/0x640
[  146.266038][ T6404]  ? kmem_cache_alloc_noprof+0x62/0x770
[  146.266061][ T6404]  should_failslab+0xc2/0x120
[  146.266086][ T6404]  kmem_cache_alloc_noprof+0x83/0x770
[  146.266105][ T6404]  ? security_file_alloc+0x34/0x2b0
[  146.266130][ T6404]  ? security_file_alloc+0x34/0x2b0
[  146.266150][ T6404]  security_file_alloc+0x34/0x2b0
[  146.266246][ T6404]  init_file+0x93/0x4c0
[  146.266265][ T6404]  alloc_empty_file+0x73/0x1e0
[  146.266284][ T6404]  alloc_file_pseudo+0x13a/0x230
[  146.266304][ T6404]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  146.266322][ T6404]  ? alloc_fd+0x471/0x7d0
[  146.266350][ T6404]  sock_alloc_file+0x50/0x210
[  146.266375][ T6404]  __sys_socket+0x1c0/0x260
[  146.266393][ T6404]  ? __x64_sys_openat+0x174/0x210
[  146.266412][ T6404]  ? __pfx___sys_socket+0x10/0x10
[  146.266431][ T6404]  ? xfd_validate_state+0x61/0x180
[  146.266452][ T6404]  __x64_sys_socket+0x72/0xb0
[  146.266467][ T6404]  ? lockdep_hardirqs_on+0x7c/0x110
[  146.266492][ T6404]  do_syscall_64+0xcd/0xf80
[  146.266508][ T6404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.266524][ T6404] RIP: 0033:0x7f6f6938f7c9
[  146.266538][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.266554][ T6404] RSP: 002b:00007f6f6a18a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  146.266570][ T6404] RAX: ffffffffffffffda RBX: 00007f6f695e6090 RCX: 00007f6f6938f7c9
[  146.266580][ T6404] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e
[  146.266589][ T6404] RBP: 00007f6f69413f91 R08: 0000000000000000 R09: 0000000000000000
[  146.266598][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.266607][ T6404] R13: 00007f6f695e6128 R14: 00007f6f695e6090 R15: 00007fffe989a858
[  146.266627][ T6404]  </TASK>
[  146.574973][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'.
[  146.586245][ T6404] veth0_macvtap: left promiscuous mode
[  146.597477][ T6404] macvtap0: entered promiscuous mode
[  146.602996][ T6404] macvtap0: entered allmulticast mode
[  151.408588][ T6476] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  156.683442][ T6535] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  159.671970][ T6560] binder: 6558:6560 ioctl c018620c 0 returned -1
[  161.447699][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881413ef000: rx timeout, send abort
[  161.456378][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805d8fb400: rx timeout, send abort
[  161.464999][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881413ef000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  161.479576][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d8fb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  164.330689][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e993c00: rx timeout, send abort
[  164.339236][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e992000: rx timeout, send abort
[  164.349761][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e993c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  164.364581][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e992000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  166.330006][ T6633] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  167.268725][ T6662] FAULT_INJECTION: forcing a failure.
[  167.268725][ T6662] name failslab, interval 1, probability 0, space 0, times 0
[  167.395445][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) 
[  167.395472][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.395482][ T6662] Call Trace:
[  167.395488][ T6662]  <TASK>
[  167.395494][ T6662]  dump_stack_lvl+0x16c/0x1f0
[  167.395527][ T6662]  should_fail_ex+0x512/0x640
[  167.395551][ T6662]  should_failslab+0xc2/0x120
[  167.395577][ T6662]  kmem_cache_alloc_node_noprof+0x86/0x800
[  167.395597][ T6662]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  167.395615][ T6662]  ? zswap_store+0x850/0x2800
[  167.395636][ T6662]  ? zswap_store+0x850/0x2800
[  167.395652][ T6662]  zswap_store+0x850/0x2800
[  167.395678][ T6662]  ? __pfx_zswap_store+0x10/0x10
[  167.395697][ T6662]  ? folio_free_swap+0x229/0x740
[  167.395721][ T6662]  ? do_raw_spin_unlock+0x172/0x230
[  167.395742][ T6662]  ? _raw_spin_unlock+0x28/0x50
[  167.395764][ T6662]  ? folio_free_swap+0x285/0x740
[  167.395785][ T6662]  ? rcu_is_watching+0x12/0xc0
[  167.395811][ T6662]  swap_writeout+0x3f4/0x1090
[  167.395831][ T6662]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.395856][ T6662]  shmem_writeout+0xc21/0x1140
[  167.395878][ T6662]  ? __pfx_shmem_writeout+0x10/0x10
[  167.395898][ T6662]  ? inode_to_bdi+0x9e/0x160
[  167.395920][ T6662]  ? folio_clear_dirty_for_io+0x112/0x6b0
[  167.395945][ T6662]  shrink_folio_list+0x3003/0x4a70
[  167.395972][ T6662]  ? __pfx_shrink_folio_list+0x10/0x10
[  167.395989][ T6662]  ? find_held_lock+0x2b/0x80
[  167.396014][ T6662]  ? unwind_next_frame+0x3fe/0x20b0
[  167.396038][ T6662]  ? asm_exc_page_fault+0x26/0x30
[  167.396054][ T6662]  ? __kernel_text_address+0xd/0x40
[  167.396074][ T6662]  ? unwind_get_return_address+0x59/0xa0
[  167.396095][ T6662]  ? arch_stack_walk+0x88/0x100
[  167.396131][ T6662]  ? find_held_lock+0x2b/0x80
[  167.396157][ T6662]  reclaim_folio_list+0xda/0x5a0
[  167.396176][ T6662]  ? __pfx_reclaim_folio_list+0x10/0x10
[  167.396209][ T6662]  ? lru_gen_update_size+0x543/0xe10
[  167.396240][ T6662]  ? lru_gen_del_folio+0x32b/0x540
[  167.396266][ T6662]  reclaim_pages+0x3ec/0x570
[  167.396285][ T6662]  ? __pfx_reclaim_pages+0x10/0x10
[  167.396300][ T6662]  ? find_held_lock+0x2b/0x80
[  167.396322][ T6662]  ? madvise_cold_or_pageout_pte_range+0x739/0x2100
[  167.396344][ T6662]  madvise_cold_or_pageout_pte_range+0x1624/0x2100
[  167.396371][ T6662]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  167.396389][ T6662]  ? __lock_acquire+0x436/0x2890
[  167.396405][ T6662]  ? stack_trace_save+0x8e/0xc0
[  167.396433][ T6662]  ? stack_depot_save_flags+0x29/0x9b0
[  167.396454][ T6662]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  167.396472][ T6662]  walk_pgd_range+0xc10/0x1f80
[  167.396508][ T6662]  ? __pfx_walk_pgd_range+0x10/0x10
[  167.396530][ T6662]  ? folios_put_refs+0x51d/0x750
[  167.396552][ T6662]  __walk_page_range+0x163/0x820
[  167.396583][ T6662]  walk_page_range_vma_unsafe+0x23f/0x9e0
[  167.396608][ T6662]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  167.396634][ T6662]  ? find_held_lock+0x2b/0x80
[  167.396655][ T6662]  ? mlock_drain_local+0x22d/0x4e0
[  167.396677][ T6662]  walk_page_range_vma+0x63/0x90
[  167.396700][ T6662]  madvise_pageout+0x257/0x540
[  167.396726][ T6662]  ? __pfx_madvise_pageout+0x10/0x10
[  167.396768][ T6662]  madvise_vma_behavior+0x912/0x29e0
[  167.396785][ T6662]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  167.396811][ T6662]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  167.396828][ T6662]  ? mas_prev+0x9b/0xf0
[  167.396842][ T6662]  ? __pfx_mas_prev+0x10/0x10
[  167.396862][ T6662]  ? find_vma_prev+0xd3/0x150
[  167.396884][ T6662]  ? find_held_lock+0x2b/0x80
[  167.396904][ T6662]  ? __pfx_find_vma_prev+0x10/0x10
[  167.396935][ T6662]  ? __futex_wait+0x24b/0x2f0
[  167.396960][ T6662]  madvise_walk_vmas+0x31f/0xac0
[  167.396979][ T6662]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  167.397002][ T6662]  madvise_do_behavior+0x1e2/0x530
[  167.397017][ T6662]  ? futex_private_hash_put+0x160/0x1b0
[  167.397034][ T6662]  ? __pfx_madvise_do_behavior+0x10/0x10
[  167.397052][ T6662]  ? down_read+0x13d/0x460
[  167.397079][ T6662]  do_madvise+0x176/0x240
[  167.397094][ T6662]  ? __pfx_do_madvise+0x10/0x10
[  167.397108][ T6662]  ? do_futex+0x122/0x350
[  167.397141][ T6662]  ? xfd_validate_state+0x61/0x180
[  167.397161][ T6662]  __x64_sys_madvise+0xa9/0x110
[  167.397176][ T6662]  ? lockdep_hardirqs_on+0x7c/0x110
[  167.397209][ T6662]  do_syscall_64+0xcd/0xf80
[  167.397226][ T6662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.397243][ T6662] RIP: 0033:0x7f480058f7c9
[  167.397258][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.397274][ T6662] RSP: 002b:00007f4801466038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  167.397291][ T6662] RAX: ffffffffffffffda RBX: 00007f48007e6090 RCX: 00007f480058f7c9
[  167.397301][ T6662] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000
[  167.397311][ T6662] RBP: 00007f4800613f91 R08: 0000000000000000 R09: 0000000000000000
[  167.397320][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.397329][ T6662] R13: 00007f48007e6128 R14: 00007f48007e6090 R15: 00007ffe3ffeecd8
[  167.397360][ T6662]  </TASK>
[  167.969634][ T6656] binder: 6653:6656 ioctl c018620c 0 returned -1
[  171.422786][ T6685] binder: 6683:6685 ioctl c018620c 0 returned -1
[  174.834493][ T6718] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)

[  176.156580][ T6749] FAULT_INJECTION: forcing a failure.
[  176.156580][ T6749] name failslab, interval 1, probability 0, space 0, times 0
[  176.190422][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) 
[  176.190461][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.190475][ T6749] Call Trace:
[  176.190484][ T6749]  <TASK>
[  176.190494][ T6749]  dump_stack_lvl+0x16c/0x1f0
[  176.190541][ T6749]  should_fail_ex+0x512/0x640
[  176.190580][ T6749]  should_failslab+0xc2/0x120
[  176.190626][ T6749]  kmem_cache_alloc_node_noprof+0x86/0x800
[  176.190660][ T6749]  ? percpu_ref_put_many.constprop.0+0xc4/0x2a0
[  176.190689][ T6749]  ? zswap_store+0x850/0x2800
[  176.190726][ T6749]  ? zswap_store+0x850/0x2800
[  176.190752][ T6749]  zswap_store+0x850/0x2800
[  176.190797][ T6749]  ? __pfx_zswap_store+0x10/0x10
[  176.190827][ T6749]  ? folio_free_swap+0x229/0x740
[  176.190869][ T6749]  ? do_raw_spin_unlock+0x172/0x230
[  176.190902][ T6749]  ? _raw_spin_unlock+0x28/0x50
[  176.190939][ T6749]  ? folio_free_swap+0x285/0x740
[  176.190976][ T6749]  ? rcu_is_watching+0x12/0xc0
[  176.191015][ T6749]  swap_writeout+0x3f4/0x1090
[  176.191046][ T6749]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.191085][ T6749]  shmem_writeout+0xc21/0x1140
[  176.191121][ T6749]  ? __pfx_shmem_writeout+0x10/0x10
[  176.191156][ T6749]  ? inode_to_bdi+0x9e/0x160
[  176.191186][ T6749]  ? folio_clear_dirty_for_io+0x112/0x6b0
[  176.191220][ T6749]  shrink_folio_list+0x3003/0x4a70
[  176.191275][ T6749]  ? __pfx_shrink_folio_list+0x10/0x10
[  176.191301][ T6749]  ? find_held_lock+0x2b/0x80
[  176.191345][ T6749]  ? unwind_next_frame+0x3fe/0x20b0
[  176.191380][ T6749]  ? asm_exc_page_fault+0x26/0x30
[  176.191406][ T6749]  ? __kernel_text_address+0xd/0x40
[  176.191434][ T6749]  ? unwind_get_return_address+0x59/0xa0
[  176.191468][ T6749]  ? arch_stack_walk+0x88/0x100
[  176.191533][ T6749]  ? find_held_lock+0x2b/0x80
[  176.191577][ T6749]  reclaim_folio_list+0xda/0x5a0
[  176.191610][ T6749]  ? __pfx_reclaim_folio_list+0x10/0x10
[  176.191652][ T6749]  ? lru_gen_update_size+0x543/0xe10
[  176.191705][ T6749]  ? lru_gen_del_folio+0x32b/0x540
[  176.191747][ T6749]  reclaim_pages+0x3ec/0x570
[  176.191777][ T6749]  ? __pfx_reclaim_pages+0x10/0x10
[  176.191799][ T6749]  ? find_held_lock+0x2b/0x80
[  176.191827][ T6749]  ? madvise_cold_or_pageout_pte_range+0x739/0x2100
[  176.191859][ T6749]  madvise_cold_or_pageout_pte_range+0x1624/0x2100
[  176.191900][ T6749]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  176.191926][ T6749]  ? __lock_acquire+0x436/0x2890
[  176.191950][ T6749]  ? stack_trace_save+0x8e/0xc0
[  176.191988][ T6749]  ? stack_depot_save_flags+0x29/0x9b0
[  176.192196][ T6749]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  176.192228][ T6749]  walk_pgd_range+0xc10/0x1f80
[  176.192288][ T6749]  ? __pfx_walk_pgd_range+0x10/0x10
[  176.192323][ T6749]  ? folios_put_refs+0x51d/0x750
[  176.192460][ T6749]  __walk_page_range+0x163/0x820
[  176.192517][ T6749]  walk_page_range_vma_unsafe+0x23f/0x9e0
[  176.192632][ T6749]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  176.192682][ T6749]  ? find_held_lock+0x2b/0x80
[  176.192715][ T6749]  ? mlock_drain_local+0x22d/0x4e0
[  176.192763][ T6749]  walk_page_range_vma+0x63/0x90
[  176.192800][ T6749]  madvise_pageout+0x257/0x540
[  176.192842][ T6749]  ? __pfx_madvise_pageout+0x10/0x10
[  176.192928][ T6749]  madvise_vma_behavior+0x912/0x29e0
[  176.192960][ T6749]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  176.193003][ T6749]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  176.193029][ T6749]  ? mas_prev+0x9b/0xf0
[  176.193051][ T6749]  ? __pfx_mas_prev+0x10/0x10
[  176.193085][ T6749]  ? find_vma_prev+0xd3/0x150
[  176.193121][ T6749]  ? find_held_lock+0x2b/0x80
[  176.193154][ T6749]  ? __pfx_find_vma_prev+0x10/0x10
[  176.193209][ T6749]  ? __futex_wait+0x24b/0x2f0
[  176.193252][ T6749]  madvise_walk_vmas+0x31f/0xac0
[  176.193285][ T6749]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  176.193326][ T6749]  madvise_do_behavior+0x1e2/0x530
[  176.193352][ T6749]  ? futex_private_hash_put+0x160/0x1b0
[  176.193384][ T6749]  ? __pfx_madvise_do_behavior+0x10/0x10
[  176.193415][ T6749]  ? down_read+0x13d/0x460
[  176.193463][ T6749]  do_madvise+0x176/0x240
[  176.193488][ T6749]  ? __pfx_do_madvise+0x10/0x10
[  176.193513][ T6749]  ? do_futex+0x122/0x350
[  176.193568][ T6749]  ? xfd_validate_state+0x61/0x180
[  176.193604][ T6749]  __x64_sys_madvise+0xa9/0x110
[  176.193631][ T6749]  ? lockdep_hardirqs_on+0x7c/0x110
[  176.193673][ T6749]  do_syscall_64+0xcd/0xf80
[  176.193701][ T6749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.193730][ T6749] RIP: 0033:0x7f86f5d8f7c9
[  176.193755][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.193783][ T6749] RSP: 002b:00007f86f6c2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  176.193810][ T6749] RAX: ffffffffffffffda RBX: 00007f86f5fe6090 RCX: 00007f86f5d8f7c9
[  176.193828][ T6749] RDX: 0000000000000015 RSI: 00000000002003f0 RDI: 0000000000000000
[  176.193844][ T6749] RBP: 00007f86f5e13f91 R08: 0000000000000000 R09: 0000000000000000
[  176.193861][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.193877][ T6749] R13: 00007f86f5fe6128 R14: 00007f86f5fe6090 R15: 00007ffdd50d3598
[  176.194009][ T6749]  </TASK>
[  177.121475][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[  179.653077][ T6784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  182.442731][ T6793] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  182.775439][ T6811] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  182.900194][   T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  186.250941][   T30] audit: type=1326 audit(1768486978.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.3.199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86f5d8f7c9 code=0x0
[  186.650705][ T6871] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  186.683653][ T6874] program syz.1.202 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.290799][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  187.949506][ T6900] zero sized request

syzkaller
syzkaller login: [  189.400454][ T6911] Console: switching to colour VGA+ 80x25
[  189.453702][ T6912] bridge0: port 3(bond0) entered blocking state
[  189.469785][ T6912] bridge0: port 3(bond0) entered disabled state
[  189.487204][ T6912] bond0: entered allmulticast mode
[  189.508659][ T6912] bond_slave_0: entered allmulticast mode
[  189.556947][ T6912] bond_slave_1: entered allmulticast mode
[  189.575167][ T6912] bond0: entered promiscuous mode
[  189.586071][ T6912] bond_slave_0: entered promiscuous mode
[  189.603419][ T6912] bond_slave_1: entered promiscuous mode
[  189.617648][ T6912] bridge0: port 3(bond0) entered blocking state
[  189.624351][ T6912] bridge0: port 3(bond0) entered forwarding state
[  190.461738][ T6932] misc userio: No port type given on /dev/userio
[  191.397863][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'.
[  192.529620][ T6962] FAULT_INJECTION: forcing a failure.
[  192.529620][ T6962] name failslab, interval 1, probability 0, space 0, times 0
[  192.546280][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.3.225 Not tainted syzkaller #0 PREEMPT(full) 
[  192.546317][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.546333][ T6962] Call Trace:
[  192.546342][ T6962]  <TASK>
[  192.546352][ T6962]  dump_stack_lvl+0x16c/0x1f0
[  192.546397][ T6962]  should_fail_ex+0x512/0x640
[  192.546426][ T6962]  ? fs_reclaim_acquire+0xae/0x150
[  192.546468][ T6962]  should_failslab+0xc2/0x120
[  192.546507][ T6962]  __kmalloc_noprof+0xeb/0x910
[  192.546537][ T6962]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  192.546580][ T6962]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  192.546614][ T6962]  tomoyo_realpath_from_path+0xc2/0x6e0
[  192.546665][ T6962]  tomoyo_check_open_permission+0x2ab/0x3c0
[  192.546697][ T6962]  ? alloc_empty_file+0x73/0x1e0
[  192.546723][ T6962]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  192.546753][ T6962]  ? __x64_sys_open+0x153/0x1e0
[  192.546821][ T6962]  ? do_raw_spin_lock+0x12c/0x2b0
[  192.546861][ T6962]  tomoyo_file_open+0x6b/0x90
[  192.546901][ T6962]  security_file_open+0x84/0x1e0
[  192.546936][ T6962]  do_dentry_open+0x597/0x1590
[  192.546987][ T6962]  ? security_inode_permission+0xbf/0x260
[  192.547027][ T6962]  vfs_open+0x82/0x3f0
[  192.547058][ T6962]  path_openat+0x2078/0x3140
[  192.547109][ T6962]  ? __pfx_path_openat+0x10/0x10
[  192.547153][ T6962]  ? __lock_acquire+0x436/0x2890
[  192.547183][ T6962]  do_filp_open+0x20b/0x470
[  192.547222][ T6962]  ? __pfx_do_filp_open+0x10/0x10
[  192.547291][ T6962]  ? _raw_spin_unlock+0x28/0x50
[  192.547327][ T6962]  ? alloc_fd+0x471/0x7d0
[  192.547377][ T6962]  do_sys_openat2+0x121/0x290
[  192.547406][ T6962]  ? __pfx_do_sys_openat2+0x10/0x10
[  192.547450][ T6962]  __x64_sys_open+0x153/0x1e0
[  192.547479][ T6962]  ? __pfx___x64_sys_open+0x10/0x10
[  192.547524][ T6962]  ? rcu_is_watching+0x12/0xc0
[  192.547562][ T6962]  do_syscall_64+0xcd/0xf80
[  192.547589][ T6962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.547615][ T6962] RIP: 0033:0x7f86f5d8f7c9
[  192.547636][ T6962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.547661][ T6962] RSP: 002b:00007f86f6c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  192.547687][ T6962] RAX: ffffffffffffffda RBX: 00007f86f5fe5fa0 RCX: 00007f86f5d8f7c9
[  192.547704][ T6962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  192.547719][ T6962] RBP: 00007f86f5e13f91 R08: 0000000000000000 R09: 0000000000000000
[  192.547734][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.547748][ T6962] R13: 00007f86f5fe6038 R14: 00007f86f5fe5fa0 R15: 00007ffdd50d3598
[  192.547786][ T6962]  </TASK>
[  192.630076][ T6962] ERROR: Out of memory at tomoyo_realpath_from_path.
[  193.481392][ T6965] bridge0: port 3(bond0) entered blocking state
[  193.501021][ T6965] bridge0: port 3(bond0) entered disabled state
[  193.507835][ T6965] bond0: entered allmulticast mode
[  193.522304][ T6965] bond_slave_0: entered allmulticast mode
[  193.539722][ T6965] bond_slave_1: entered allmulticast mode
[  193.548414][ T6965] bond0: entered promiscuous mode
[  193.614267][ T6965] bond_slave_0: entered promiscuous mode
[  193.670435][ T6965] bond_slave_1: entered promiscuous mode
[  193.695871][ T6965] bridge0: port 3(bond0) entered blocking state
[  193.702642][ T6965] bridge0: port 3(bond0) entered forwarding state
[  194.790353][ T6995] misc userio: No port type given on /dev/userio
[  195.391077][   T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  197.238915][ T7033] capability: warning: `syz.3.241' uses 32-bit capabilities (legacy support in use)
[  198.888812][ T7073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  198.964500][ T7073] FAULT_INJECTION: forcing a failure.
[  198.964500][ T7073] name failslab, interval 1, probability 0, space 0, times 0
[  199.095093][ T7067] FAULT_INJECTION: forcing a failure.
[  199.095093][ T7067] name failslab, interval 1, probability 0, space 0, times 0
[  199.153429][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) 
[  199.153455][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.153464][ T7073] Call Trace:
[  199.153470][ T7073]  <TASK>
[  199.153477][ T7073]  dump_stack_lvl+0x16c/0x1f0
[  199.153507][ T7073]  should_fail_ex+0x512/0x640
[  199.153526][ T7073]  ? __kmalloc_noprof+0xca/0x910
[  199.153549][ T7073]  should_failslab+0xc2/0x120
[  199.153578][ T7073]  __kmalloc_noprof+0xeb/0x910
[  199.153596][ T7073]  ? sk_prot_alloc+0x1a8/0x2a0
[  199.153626][ T7073]  ? sk_prot_alloc+0x1a8/0x2a0
[  199.153650][ T7073]  sk_prot_alloc+0x1a8/0x2a0
[  199.153676][ T7073]  sk_alloc+0x36/0xe30
[  199.153700][ T7073]  __netlink_create+0x5e/0x2c0
[  199.153720][ T7073]  ? __wake_up+0x3f/0x60
[  199.153744][ T7073]  netlink_create+0x39e/0x620
[  199.153770][ T7073]  ? __pfx_genl_bind+0x10/0x10
[  199.153789][ T7073]  ? __pfx_genl_unbind+0x10/0x10
[  199.153803][ T7073]  ? __pfx_genl_release+0x10/0x10
[  199.153820][ T7073]  __sock_create+0x339/0x8a0
[  199.153840][ T7073]  __sys_socket+0x14d/0x260
[  199.153857][ T7073]  ? __pfx___sys_socket+0x10/0x10
[  199.153874][ T7073]  ? xfd_validate_state+0x61/0x180
[  199.153894][ T7073]  __x64_sys_socket+0x72/0xb0
[  199.153910][ T7073]  ? lockdep_hardirqs_on+0x7c/0x110
[  199.153935][ T7073]  do_syscall_64+0xcd/0xf80
[  199.153962][ T7073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.153979][ T7073] RIP: 0033:0x7f6f6938f7c9
[  199.153993][ T7073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.154010][ T7073] RSP: 002b:00007f6f6a1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  199.154026][ T7073] RAX: ffffffffffffffda RBX: 00007f6f695e5fa0 RCX: 00007f6f6938f7c9
[  199.154038][ T7073] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  199.154047][ T7073] RBP: 00007f6f69413f91 R08: 0000000000000000 R09: 0000000000000000
[  199.154057][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.154066][ T7073] R13: 00007f6f695e6038 R14: 00007f6f695e5fa0 R15: 00007fffe989a858
[  199.154087][ T7073]  </TASK>
[  199.175471][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(full) 
[  199.175508][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.175522][ T7067] Call Trace:
[  199.175532][ T7067]  <TASK>
[  199.175542][ T7067]  dump_stack_lvl+0x16c/0x1f0
[  199.175588][ T7067]  should_fail_ex+0x512/0x640
[  199.175615][ T7067]  ? __kmalloc_cache_noprof+0x5f/0x800
[  199.175647][ T7067]  should_failslab+0xc2/0x120
[  199.175683][ T7067]  __kmalloc_cache_noprof+0x80/0x800
[  199.175720][ T7067]  ? vidtv_psi_nit_table_init+0x9b/0x5f0
[  199.175753][ T7067]  ? vidtv_psi_nit_table_init+0x9b/0x5f0
[  199.175777][ T7067]  vidtv_psi_nit_table_init+0x9b/0x5f0
[  199.175800][ T7067]  ? kasan_save_track+0x14/0x30
[  199.175836][ T7067]  vidtv_channel_si_init+0xe19/0x1a50
[  199.175878][ T7067]  vidtv_mux_init+0x526/0xbe0
[  199.175911][ T7067]  vidtv_start_feed+0x33e/0x4d0
[  199.175946][ T7067]  ? __pfx_vidtv_start_feed+0x10/0x10
[  199.175981][ T7067]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  199.176021][ T7067]  ? mark_held_locks+0x49/0x80
[  199.176051][ T7067]  ? __pfx_vidtv_start_feed+0x10/0x10
[  199.176083][ T7067]  dmx_ts_feed_start_filtering+0xf6/0x220
[  199.176120][ T7067]  dvb_dmxdev_start_feed+0x273/0x3f0
[  199.176151][ T7067]  dvb_dmxdev_filter_start+0x1b6/0xe10
[  199.176182][ T7067]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  199.176213][ T7067]  dvb_demux_do_ioctl+0x9de/0x12f0
[  199.176252][ T7067]  dvb_usercopy+0x167/0x340
[  199.176274][ T7067]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  199.176303][ T7067]  ? __pfx_dvb_usercopy+0x10/0x10
[  199.176342][ T7067]  ? __fget_files+0x20e/0x3c0
[  199.176382][ T7067]  dvb_demux_ioctl+0x29/0x40
[  199.176405][ T7067]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  199.176430][ T7067]  __x64_sys_ioctl+0x18e/0x210
[  199.176463][ T7067]  do_syscall_64+0xcd/0xf80
[  199.176488][ T7067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.176513][ T7067] RIP: 0033:0x7f480058f7c9
[  199.176533][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.176555][ T7067] RSP: 002b:00007f4801487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.176579][ T7067] RAX: ffffffffffffffda RBX: 00007f48007e5fa0 RCX: 00007f480058f7c9
[  199.176595][ T7067] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003
[  199.176610][ T7067] RBP: 00007f4800613f91 R08: 0000000000000000 R09: 0000000000000000
[  199.176625][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.176639][ T7067] R13: 00007f48007e6038 R14: 00007f48007e5fa0 R15: 00007ffe3ffeecd8
[  199.176675][ T7067]  </TASK>
[  199.950780][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.959666][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  205.235727][ T7161] Invalid ELF header magic: != ELF
[  205.943045][ T7163] netlink: 342 bytes leftover after parsing attributes in process `syz.3.271'.
[  206.305427][ T7180] =======================================================
[  206.305427][ T7180] WARNING: The mand mount option has been deprecated and
[  206.305427][ T7180]          and is ignored by this kernel. Remove the mand
[  206.305427][ T7180]          option from the mount to silence this warning.
[  206.305427][ T7180] =======================================================
[  206.414146][ T7182] i2c i2c-0: delete_device: Can't parse I2C address
[  206.497522][ T7180] nfsd: Unknown parameter 'ˆ*Ú'
[  206.568314][ T7180] FAULT_INJECTION: forcing a failure.
[  206.568314][ T7180] name failslab, interval 1, probability 0, space 0, times 0
[  206.752119][ T7188] netlink: 186 bytes leftover after parsing attributes in process `syz.3.275'.
[  206.759163][ T7180] CPU: 0 UID: 0 PID: 7180 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(full) 
[  206.759200][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  206.759215][ T7180] Call Trace:
[  206.759225][ T7180]  <TASK>
[  206.759236][ T7180]  dump_stack_lvl+0x16c/0x1f0
[  206.759281][ T7180]  should_fail_ex+0x512/0x640
[  206.759311][ T7180]  ? kmem_cache_alloc_noprof+0x62/0x770
[  206.759344][ T7180]  should_failslab+0xc2/0x120
[  206.759380][ T7180]  kmem_cache_alloc_noprof+0x83/0x770
[  206.759410][ T7180]  ? security_file_alloc+0x34/0x2b0
[  206.759448][ T7180]  ? security_file_alloc+0x34/0x2b0
[  206.759477][ T7180]  security_file_alloc+0x34/0x2b0
[  206.759508][ T7180]  init_file+0x93/0x4c0
[  206.759540][ T7180]  alloc_empty_file+0x73/0x1e0
[  206.759568][ T7180]  alloc_file_pseudo+0x13a/0x230
[  206.759597][ T7180]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  206.759624][ T7180]  ? alloc_fd+0x471/0x7d0
[  206.759666][ T7180]  sock_alloc_file+0x50/0x210
[  206.759711][ T7180]  __sys_socket+0x1c0/0x260
[  206.759735][ T7180]  ? __x64_sys_mount+0x239/0x310
[  206.759759][ T7180]  ? __pfx___sys_socket+0x10/0x10
[  206.759785][ T7180]  ? xfd_validate_state+0x61/0x180
[  206.759806][ T7180]  ? __pfx___x64_sys_mount+0x10/0x10
[  206.759839][ T7180]  __x64_sys_socket+0x72/0xb0
[  206.759863][ T7180]  ? lockdep_hardirqs_on+0x7c/0x110
[  206.759900][ T7180]  do_syscall_64+0xcd/0xf80
[  206.759924][ T7180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.759949][ T7180] RIP: 0033:0x7f86f5d8f7c9
[  206.759970][ T7180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.759992][ T7180] RSP: 002b:00007f86f6c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  206.760015][ T7180] RAX: ffffffffffffffda RBX: 00007f86f5fe5fa0 RCX: 00007f86f5d8f7c9
[  206.760031][ T7180] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  206.760045][ T7180] RBP: 00007f86f5e13f91 R08: 0000000000000000 R09: 0000000000000000
[  206.760059][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.760073][ T7180] R13: 00007f86f5fe6038 R14: 00007f86f5fe5fa0 R15: 00007ffdd50d3598
[  206.760107][ T7180]  </TASK>

syzkaller
syzkaller login: [  211.569131][ T7252] netlink: 342 bytes leftover after parsing attributes in process `syz.2.292'.
[  211.980119][ T7252] netlink: 'syz.2.292': attribute type 5 has an invalid length.
[  211.999677][ T7252] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[  212.007924][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[  215.619799][ T7302] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  216.103925][ T7306] mkiss: ax0: crc mode is auto.
[  216.304927][ T7303] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  216.473624][ T7317] HfR: entered promiscuous mode
[  217.926062][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[  217.961211][ T7356] netlink: 'syz.2.313': attribute type 1 has an invalid length.
[  217.969465][ T7356] netlink: 342 bytes leftover after parsing attributes in process `syz.2.313'.
[  218.178735][ T7362] mmap: syz.0.314 (7362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  220.332594][ T7406] zswap: compressor  not available
[  220.829787][ T7418] batman_adv: Routing algorithm '7' is not supported
[  220.905692][ T6092] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.119334][ T7423] netlink: 342 bytes leftover after parsing attributes in process `syz.1.330'.
[  222.471149][ T7454] hub 1-0:1.0: USB hub found
[  222.509018][ T7454] hub 1-0:1.0: 1 port detected
[  224.625277][ T7501] mkiss: ax0: crc mode is auto.
[  224.954588][ T7512] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  225.317502][ T7514] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  225.891403][ T7536] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  225.899422][ T7536] #PF: supervisor instruction fetch in kernel mode
[  225.906021][ T7536] #PF: error_code(0x0010) - not-present page
[  225.912199][ T7536] PGD 8000000078cac067 P4D 8000000078cac067 PUD 0 
[  225.919206][ T7536] Oops: Oops: 0010 [#1] SMP KASAN PTI
[  225.924608][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(full) 
[  225.934350][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  225.945057][ T7536] RIP: 0010:0x0
[  225.949008][ T7536] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  225.956584][ T7536] RSP: 0018:ffffc9000218f988 EFLAGS: 00010293
[  225.962794][ T7536] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f6708e
[  225.971936][ T7536] RDX: ffff888028028000 RSI: ffffea000159aac0 RDI: ffff88807d1c2e00
[  225.980611][ T7536] RBP: ffffea000159aac0 R08: 0000000000000007 R09: 0000000000000000
[  225.988633][ T7536] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000431f32
[  225.996988][ T7536] R13: ffff88807d1c2e00 R14: 0000000000000000 R15: dffffc0000000000
[  226.005210][ T7536] FS:  00007f86f6c506c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000
[  226.014344][ T7536] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.021337][ T7536] CR2: ffffffffffffffd6 CR3: 0000000035776000 CR4: 00000000003526f0
[  226.029471][ T7536] Call Trace:
[  226.032785][ T7536]  <TASK>
[  226.035925][ T7536]  filemap_read_folio+0xc8/0x2a0
[  226.041134][ T7536]  ? __pfx_filemap_read_folio+0x10/0x10
[  226.046877][ T7536]  do_read_cache_folio+0x266/0x5c0
[  226.052040][ T7536]  freader_get_folio+0x33a/0x930
[  226.057049][ T7536]  freader_fetch+0xbd/0x740
[  226.061655][ T7536]  ? __asan_memset+0x23/0x50
[  226.066262][ T7536]  __build_id_parse.isra.0+0xdd/0x6c0
[  226.071664][ T7536]  ? query_matching_vma+0x48e/0x7d0
[  226.077148][ T7536]  ? __pfx___build_id_parse.isra.0+0x10/0x10
[  226.083196][ T7536]  do_procmap_query+0xb0e/0x1080
[  226.088148][ T7536]  ? __pfx_do_procmap_query+0x10/0x10
[  226.093655][ T7536]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  226.099753][ T7536]  ? do_vfs_ioctl+0x128/0x14f0
[  226.104629][ T7536]  ? __fget_files+0x20e/0x3c0
[  226.109330][ T7536]  procfs_procmap_ioctl+0x9d/0xe0
[  226.114449][ T7536]  ? __pfx_procfs_procmap_ioctl+0x10/0x10
[  226.120258][ T7536]  __x64_sys_ioctl+0x18e/0x210
[  226.125124][ T7536]  do_syscall_64+0xcd/0xf80
[  226.129722][ T7536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.135632][ T7536] RIP: 0033:0x7f86f5d8f7c9
[  226.140224][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.160272][ T7536] RSP: 002b:00007f86f6c50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  226.169039][ T7536] RAX: ffffffffffffffda RBX: 00007f86f5fe5fa0 RCX: 00007f86f5d8f7c9
[  226.177096][ T7536] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003
[  226.185339][ T7536] RBP: 00007f86f5e13f91 R08: 0000000000000000 R09: 0000000000000000
[  226.193677][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.202099][ T7536] R13: 00007f86f5fe6038 R14: 00007f86f5fe5fa0 R15: 00007ffdd50d3598
[  226.210508][ T7536]  </TASK>
[  226.213637][ T7536] Modules linked in:
[  226.217775][ T7536] CR2: 0000000000000000
[  226.221993][ T7536] ---[ end trace 0000000000000000 ]---
[  226.227710][ T7536] RIP: 0010:0x0
[  226.231351][ T7536] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  226.238726][ T7536] RSP: 0018:ffffc9000218f988 EFLAGS: 00010293
[  226.245238][ T7536] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f6708e
[  226.253388][ T7536] RDX: ffff888028028000 RSI: ffffea000159aac0 RDI: ffff88807d1c2e00
[  226.261362][ T7536] RBP: ffffea000159aac0 R08: 0000000000000007 R09: 0000000000000000
[  226.269458][ T7536] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000431f32
[  226.277439][ T7536] R13: ffff88807d1c2e00 R14: 0000000000000000 R15: dffffc0000000000
[  226.285833][ T7536] FS:  00007f86f6c506c0(0000) GS:ffff8881248f9000(0000) knlGS:0000000000000000
[  226.294797][ T7536] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.301564][ T7536] CR2: ffffffffffffffd6 CR3: 0000000035776000 CR4: 00000000003526f0
[  226.309978][ T7536] Kernel panic - not syncing: Fatal exception
[  226.316462][ T7536] Kernel Offset: disabled
[  226.320800][ T7536] Rebooting in 86400 seconds..