last executing test programs:

7m57.205567951s ago: executing program 32 (id=227):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000100)='1', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00a', @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)

7m55.685655742s ago: executing program 1 (id=250):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000100)='1', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x10, 0x2, 0x0)

7m39.960245172s ago: executing program 33 (id=250):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000100)='1', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x10, 0x2, 0x0)

3m24.56253343s ago: executing program 0 (id=859):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r1 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c")
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r5 = open(0x0, 0x7ffd, 0x12)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
mmap$auto(0x1ef9, 0x2020009, 0x3, 0xeb1, r5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}})
statmount$auto(&(0x7f0000000280)={0x9000, @inferred=r0, 0x16, 0xfff, 0x4760}, &(0x7f00000003c0)={0xd1e, 0x34c, 0x5, 0x8, 0x4, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0x6, 0x8, 0xb, 0x800, 0x8, 0x13, 0x8000000000000000, 0x3901, 0x853d, 0x7, 0xa00000, 0xfffffff7, 0x5, 0x7fffffff, 0x9, 0x6, 0x59d, 0x80000000, 0x5, 0xffffff01, 0x4, [0xffffffff, 0x7f, 0x9, 0x969, 0x91, 0x1, 0x3729, 0x7, 0x8, 0x10001, 0x9, 0x8, 0x7, 0x4, 0x100000000, 0xfe71, 0x5, 0xb, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x0, 0x0, 0x100, 0x8000000000000000, 0x1, 0x2, 0x1, 0x7fffffffffffffff, 0xc0, 0xb5d, 0xede, 0x7fffffffffffffff, 0x4, 0x8, 0x100000001, 0x1, 0x5, 0x3, 0x85b5, 0x6], "f7ef6921a6e25fecd9915203063e8d674c869a69763147d471df5a8938f1dd217592913f1b6781b2559757bd5f935ea52b03"}, 0x1, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)

3m21.568380502s ago: executing program 0 (id=867):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7)
getdents64$auto(0xffffffffffffffff, 0x0, 0x28)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mincore$auto(0x1000, 0x8001, 0x0)
r1 = fcntl$auto(0x8000000000000001, 0x7, 0x8)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a0dc0, 0x0)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
mount_setattr$auto(r1, &(0x7f0000000000)='./file0\x00', 0xfff, &(0x7f0000000040)={0x100000000, 0x0, 0x8, @raw=0x8001}, 0x5)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd})
socket$nl_generic(0x10, 0x3, 0x10)

3m20.090941995s ago: executing program 0 (id=871):
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x73)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x1d, 0x2, 0x7)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x1a, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$auto(r5, 0x3, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f0080000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08002c00ac1414aa08002400", @ANYRES32=0x0, @ANYBLOB="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"], 0x8f0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r7}, 0x18)
write$auto_tty_fops_tty_io(r2, 0x0, 0x0)

3m18.625259374s ago: executing program 0 (id=875):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
semctl$auto(0x7, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x40000000000006c, 0x6978}, 0xed71390}, 0x4, 0x14938c1c)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
socket(0x2, 0x2, 0xc)
getresuid$auto(&(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x3, &(0x7f0000000140))
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
socket(0x11, 0x80003, 0x300)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x40000, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)

3m3.02031248s ago: executing program 34 (id=875):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
semctl$auto(0x7, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x40000000000006c, 0x6978}, 0xed71390}, 0x4, 0x14938c1c)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r0, r1, 0x0, 0x5)
socket(0x2, 0x2, 0xc)
getresuid$auto(&(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x3, &(0x7f0000000140))
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)
socket(0x11, 0x80003, 0x300)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x40000, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)

3m1.193339162s ago: executing program 5 (id=919):
r0 = socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x7, <r1=>r0})
ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10013, 0x80200000008, 0x2, <r2=>0x5f, 0x20000000000803}, 0x6f0)
r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0xffffffffffffffff)
r4 = fcntl$auto_F_RDLCK(r2, 0xc4, 0x0)
sendmmsg$auto(r4, &(0x7f0000000100)={{&(0x7f0000000000)="38c20b562418d0c15fd55ce41f5e3c2cc83a2139954722f404c0d1eca4c37556a65cb73f", 0x23, &(0x7f0000000080)={&(0x7f0000000040), 0x2}, 0x7, &(0x7f00000000c0), 0xf, 0x2}, 0x74d0}, 0x401, 0x7)

3m0.759064184s ago: executing program 5 (id=921):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r1 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c")
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
r4 = open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
mmap$auto(0x1ef9, 0x2020009, 0x3, 0xeb1, r4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}})
statmount$auto(&(0x7f0000000280)={0x9000, @inferred=r0, 0x16, 0xfff, 0x4760}, &(0x7f00000003c0)={0xd1e, 0x34c, 0x5, 0x8, 0x4, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0x6, 0x8, 0xb, 0x800, 0x8, 0x13, 0x8000000000000000, 0x3901, 0x853d, 0x7, 0xa00000, 0xfffffff7, 0x5, 0x7fffffff, 0x9, 0x6, 0x59d, 0x80000000, 0x5, 0xffffff01, 0x4, [0xffffffff, 0x7f, 0x9, 0x969, 0x91, 0x1, 0x3729, 0x7, 0x8, 0x10001, 0x9, 0x8, 0x7, 0x4, 0x100000000, 0xfe71, 0x5, 0xb, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x0, 0x0, 0x100, 0x8000000000000000, 0x1, 0x2, 0x1, 0x7fffffffffffffff, 0xc0, 0xb5d, 0xede, 0x7fffffffffffffff, 0x4, 0x8, 0x100000001, 0x1, 0x5, 0x3, 0x85b5, 0x6], "f7ef6921a6e25fecd9915203063e8d674c869a69763147d471df5a8938f1dd217592913f1b6781b2559757bd5f935ea52b03"}, 0x1, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)

2m58.291096929s ago: executing program 5 (id=927):
r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0)
sendfile$auto(r1, r1, 0x0, 0x200)
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x7956, 0x0)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
writev$auto(r2, 0x0, 0x8)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x3, 0x100)
bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x1, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0xffffffff)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r3 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0c01, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3f, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80f02, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video25\x00', 0x189a40, 0x0)
setxattrat$auto(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0, 0x5d8)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)

2m57.348182298s ago: executing program 4 (id=928):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_FIOQSIZE(r1, 0x5460, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000380), 0xe)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0)
fcntl$auto_F_GETLEASE(r0, 0x401, 0x3)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0)
ioctl$auto(r3, 0x92106410, 0xffffffffffffffff)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2m57.202607653s ago: executing program 5 (id=930):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
setresuid$auto(0x8, 0x8, 0x0)
setfsuid$auto(0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendmsg$auto_BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={0x0, 0xf000, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f38327b97000fedbdf250500000008000300", @ANYRES32=r4], 0x1c}}, 0x4008000)

2m56.844248256s ago: executing program 5 (id=931):
r0 = socket(0x10, 0x3, 0x0)
sendto$auto(r0, 0x0, 0x18, 0x101, 0x0, 0x1d)
mmap$auto(0x0, 0x2020006, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8001)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(r2, 0x5413, r2)
mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r4, 0x80184132, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r7 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8000000040009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop3\x00', 0x82280, 0x0)
read$auto_gpiolib_fops_(r6, &(0x7f0000000240)=""/66, 0x42)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r7, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_counters/ncache\x00', 0xa001, 0x0)
write$auto(r8, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x7)

2m56.3554018s ago: executing program 4 (id=932):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
socket(0x10, 0x2, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x80000001, 0x311)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (fail_nth: 4)
read$auto(r0, 0x0, 0xcefbce6)
close_range$auto(0x2, 0xa, 0x0)
getsockname$auto(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x9a)

2m55.251932823s ago: executing program 5 (id=933):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x29, 0x5, 0x0)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r1, &(0x7f0000001280)={0x4, 0x2, "02000000"}, 0x6)
sendfile$auto(r0, r0, 0x0, 0x2)

2m54.075105774s ago: executing program 4 (id=935):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0xa, 0x1, 0x84)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
socket(0x2, 0x1, 0x0)
socket(0x11, 0x80003, 0x300)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x400, 0x0)
rt_sigpending$auto(0x0, 0x7ffffffff000)
ioctl$auto_CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000040)={0x4, 0x5, 0x101, 0xf, 0xb, 0x2e6f2, "2142cf5800008000", 0x6, 0xe, 0x7, 0x6, 0x7, 0x91, 0x9})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
msgctl$auto_IPC_INFO(0x8, 0x3, 0x0)

2m51.945057808s ago: executing program 4 (id=936):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000)
ftruncate$auto(0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
r0 = io_uring_setup$auto(0x4, 0x0)
close_range$auto(0x2, r0, 0x0)

2m51.699065294s ago: executing program 4 (id=937):
r0 = socket(0x15, 0xa, 0x0)
sendto$auto(r0, 0x0, 0x18, 0x101, 0x0, 0x1d)
mmap$auto(0x0, 0x2020006, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8001)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(r2, 0x89f0, r2)
mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r4, 0x80184132, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/profile\x00', 0x412640, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r7 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8000000040009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop3\x00', 0x82280, 0x0)
read$auto_gpiolib_fops_(r6, &(0x7f0000000240)=""/66, 0x42)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r7, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_counters/ncache\x00', 0xa001, 0x0)
write$auto(r8, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x5)

2m50.403429736s ago: executing program 4 (id=939):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x4, 0xffffffc0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328365e88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105d481a399a8262df0fd090807cdbb56033bbe801", 0x5)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x5, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x2, 0x8, 0x1, 0x1, 0x2, 0x100, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1)
mmap$auto(0x0, 0x400008, 0x2c5, 0x49b72, 0x2, 0x8000)
madvise$auto(0x0, 0x400, 0x751)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1ec}}, 0x4008041)
socket(0x27, 0x2, 0x9)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/pcm1c/sub2/sw_params\x00', 0x109500, 0x0)
pread64$auto(r2, 0x0, 0x8, 0xffff)
setresuid$auto(0x0, 0x7, 0x8080)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0201, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000600)="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", 0x119)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101a01, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200300, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebd, 0xffffffffffffffff, 0x300000000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)

2m41.718782823s ago: executing program 6 (id=956):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="05002bbd7000fddbdf25000000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
socket(0x1f, 0x5, 0x10000fd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x40300, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x104)
read$auto(r2, 0x0, 0x35cb)
write$auto(0x3, 0x0, 0xfdef)
ioperm$auto(0x7, 0x5ad2, 0xc)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x7ff, 0x400)
socket(0xa, 0x1, 0x100)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3)
socket(0x2, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r5, 0x29, 0x49, 0x0, 0x1)

2m40.638853984s ago: executing program 6 (id=958):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x202, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa)
keyctl$auto(0x6, 0xffffffffffffffff, 0x8, 0x803, 0x4)
ioctl$auto_IOC_PR_RELEASE(r1, 0x401070ca, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x100)
socket(0x29, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
io_uring_setup$auto(0xa, 0x0)
mmap$auto(0x0, 0x80000400008, 0xdf, 0x13, 0xffffffffffffffff, 0x48ff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x101)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x14, r2, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4)
mmap$auto(0x0, 0x6, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0, 0x0)
mmap$auto(0x0, 0x40000a, 0xdb, 0x10010, 0x2, 0x8003)
ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x1, 0x0)
socket(0x1e, 0x80000, 0x5c)
write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xfffffffffffffff7, 0x1fffffff, 0x40000, 0x401000000eb4, 0xffffffffffffffff, 0x800000000009)

2m40.173753022s ago: executing program 35 (id=933):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x29, 0x5, 0x0)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r1, &(0x7f0000001280)={0x4, 0x2, "02000000"}, 0x6)
sendfile$auto(r0, r0, 0x0, 0x2)

2m40.115700677s ago: executing program 6 (id=962):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r1)
sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000001d25c26be661ee5e9121b7c91e669c54db9fb304457871ee487c952e31f9a31fb83de627976b383ca9cb613a0494765a7fdedd77da79179ece965c4b62a18e205959e0cb56a9681f151a8d0c199ac173769f3912b215859e6809c7c2066ad848ce991e9d80f12667ed6befbcafa69126590c1b06e79335e2ab0522091d84fba72ef443", @ANYRES16=r2, @ANYBLOB="210026bd7000fadbdf250100000008000880040040801400020077673000"/42], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)={0x103c, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x1a, 0x3, "3e562d7273054ace19cca928dcc1443e73412703686e"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x1004, 0x3, "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"}]}, 0x103c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/psaux\x00', 0x305001, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
fcntl$auto_F_DUPFD_QUERY(r3, 0x403, 0xffffffffffffffff)

2m39.639575402s ago: executing program 6 (id=965):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x40000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto(0x0, 0xffffffffffff0005, 0x16)
prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x0, 0x8002, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = socket(0x10, 0xa, 0x1)
r4 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r3, 0x10000}, 0x10)
mmap$auto(0x0, 0xf05, 0xfffffffffffffffa, 0x8000200008011, r4, 0x0)
syz_clone3(0x0, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000180)={"c16f6303d5736a1b0feb8f6a0554277f3190781cfe525c42f1ebed0dc940e2fd", 0x3, 0xff, 0x3798, 0xd, 0x810})
fcntl$getown(r0, 0x9)
msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000000380)={{0x4468ebf0, 0xee01, 0x0, 0x10007, 0x6, 0x7, 0x102}, &(0x7f0000000100)=0x5, &(0x7f0000000040)=0xa, 0xfffffffffffffff8, 0x0, 0x3, 0x81, 0x3, 0x4, 0xf25, 0x5, @inferred, @raw=0x5})
gettid()
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0xb102, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m38.25938606s ago: executing program 6 (id=967):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
socket(0x28, 0x1, 0x106)
mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0)
kexec_load$auto(0x5, 0x2000000000002, &(0x7f0000000040)={@kbuf=0x0, 0x800c01f, 0x4800c000}, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r3, 0x110, 0x1, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

2m37.017828682s ago: executing program 6 (id=968):
mmap$auto(0x0, 0x20009, 0xdf, 0x10, 0x40000000000a5, 0x8000)
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xd74, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)

2m35.150229786s ago: executing program 36 (id=939):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x4, 0xffffffc0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328365e88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105d481a399a8262df0fd090807cdbb56033bbe801", 0x5)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x5, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x2, 0x8, 0x1, 0x1, 0x2, 0x100, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1)
mmap$auto(0x0, 0x400008, 0x2c5, 0x49b72, 0x2, 0x8000)
madvise$auto(0x0, 0x400, 0x751)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1ec}}, 0x4008041)
socket(0x27, 0x2, 0x9)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/pcm1c/sub2/sw_params\x00', 0x109500, 0x0)
pread64$auto(r2, 0x0, 0x8, 0xffff)
setresuid$auto(0x0, 0x7, 0x8080)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0201, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000600)="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", 0x119)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101a01, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200300, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebd, 0xffffffffffffffff, 0x300000000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)

2m21.907261206s ago: executing program 37 (id=968):
mmap$auto(0x0, 0x20009, 0xdf, 0x10, 0x40000000000a5, 0x8000)
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xd74, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)

2m16.478074579s ago: executing program 7 (id=1004):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram8\x00', 0xde02, 0x0)
mmap$auto(0x0, 0x40000810004, 0xffb, 0x8000000008011, 0x3, 0x7ffd)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x20202, 0x0)
write$auto_tty_fops_tty_io(r2, 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x2)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
mmap$auto(0x0, 0xffffffffffffffff, 0x800, 0x16, 0xffffffffffffffff, 0x20000008000)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0)
ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xc, 0x9, 0x42, 0x7, 0x95f4da0a, 0xefffffffffffffff, 0x2, 0x65, 0x5f, 0x50000000000004, 0x6d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x5, 0x1)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
write$auto(r0, &(0x7f0000000440)='dio\x06\x00\x1a\xd5\xbd\xcc>\xda\xfb\xcf\x93\xc9Z \x1f\xedxR\x04\x8f\x81H\xaa\xba&\xbb0\x9a\x9e\xfd<\xb7\xba{\xb7f\x9d\xff7w\x99\x1e\xeb\xbcX\x11\xce{\xbe\x7f\xf7\x174\xfb[4\xb6\x98\x80WxQN\xfd\xc2\x8a\xc7\x98][\xd0{\xd0-\xe8\xdd&xC]7\x99\x87\xd4l\xcb\xec\xdd\xf1]\xeb\xac\xed\xd7\x19\xaf0.\x14x\xf4b\xff\xf4\xb0(\x9e\x1aQ\x00\x84\x1dd$\xa3\xf9]\xe2\x8f\f\x19\xf3yD\x93\x05\x96\xa7\xeca\xe4\x1d\xb8\xca\x16\xc4r\xc8m\x93\xb8\x9e\xcd\xe0*&\xd3v\xd58\x95\x8c\xb3I\xeb\v\xc6\xe1\x1b\xd5\x7f[\xee\x9f\xd0\xbcb\xe6\xfc\xf0\x94\x16\x8e8;D\x18,\x87\x8f\tC%,\x8a\xf1\x1c,\xcd\x98\xf6w6\x0e\xf5\x19\x9ah\x7f2/\vnP}\x97\xe6\xc5m\xaf\x97\xe3mc\xa8\xb4|w\xd9\x01\x8d[pu\xbbZ!\x06\xe0w\xd5MK\xf3\x82\x15AM\x05\xd0m\x1f\xe1\xb0s\x8a\xbc5\"?5\x15\x9a\x9e\x822\x8a\xd0\xe8\x1eM\xbe\xb9\xf7\xe4riX\xd2m\x10\xcf\xd3\x18\xe6s\xcc\xea\x81\x00U\xc8\xc4gUd\xba\xce#\xf7;\xf7\xf5\xcb\xcfk8\x0f\xad\x14u\xff\x04\x17\xa7Q\xac\xe9\xe4\x80([\xb2#\xd2\x9c\x1a\x01\'#g\x83\xc7\xb6?P;\x18\xd1\x00\x9e\x00\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x96f, 0x2, 0x800000000006]}, 0x0)
mmap$auto(0x4, 0x40010c, 0xdf, 0xb97, r1, 0x726)
bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_7={@link_id=0x7, 0xf6, 0x6}, 0x70)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x200054)

2m14.988234679s ago: executing program 7 (id=1007):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "9de21f23fc0acb97ae1a01add8cecd437d2e69f1971f5a3a39c31a100fb84f81908ef49a8f47c84eaf980b9b7af5969da088e0de790d5d187d1bff9c935ab414753305f7b9b1157fcac9d9f18178ae0b1f23791a63d328d2ce8179705c3b4a935daa56000b8d87a7e1e216039d25bbe306e8700dd3bb7ec3ac54a32c52a97b3a527289f0c762a2a4d4b1249027fa5085b28cbcac5c846df2978451640afb9dfa99a79f082dc945c97568e5eae65550fc8f92f3640d066a47431248065fd7e4411926addf1b104ee0bdd8cb62c04e73cf8a97573428c7ad7223a81d1d0af1dc4f9e29d7edc07e8f61969179723fa92afd5552b80758990b15873c07c73d558ba3"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4)
unshare$auto(0x40000080)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

2m14.349335472s ago: executing program 7 (id=1008):
mmap$auto(0x0, 0x400008, 0xdf, 0x6a361e12, 0xffffffffffffffff, 0x7fff)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xf, 0x0, 0x0, &(0x7f0000000180)={[0x0, 0x7, 0x9, 0x1, 0x948b, 0x0, 0x15f4da0a, 0x7aa, 0x200000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x9]}, 0x0)
bind$auto(r2, &(0x7f0000000280)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4}, 0x3)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
readahead$auto(0xffffffffffffffff, 0x4, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000)
read$auto_dfs_cpu_ops_debugfs(0xffffffffffffffff, &(0x7f00000003c0)=""/213, 0xd5)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(r3, 0xc1205531, 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
sysfs$auto(0x5, 0x100000074e, 0x0)
madvise$auto(0x0, 0x100000000, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
iopl$auto(0x1000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400)

2m13.111431133s ago: executing program 7 (id=1010):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r1 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c")
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r5 = open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
mmap$auto(0x1ef9, 0x2020009, 0x3, 0xeb1, r5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}})
statmount$auto(&(0x7f0000000280)={0x9000, @inferred=r0, 0x16, 0xfff, 0x4760}, &(0x7f00000003c0)={0xd1e, 0x34c, 0x5, 0x8, 0x4, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0x6, 0x8, 0xb, 0x800, 0x8, 0x13, 0x8000000000000000, 0x3901, 0x853d, 0x7, 0xa00000, 0xfffffff7, 0x5, 0x7fffffff, 0x9, 0x6, 0x59d, 0x80000000, 0x5, 0xffffff01, 0x4, [0xffffffff, 0x7f, 0x9, 0x969, 0x91, 0x1, 0x3729, 0x7, 0x8, 0x10001, 0x9, 0x8, 0x7, 0x4, 0x100000000, 0xfe71, 0x5, 0xb, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x0, 0x0, 0x100, 0x8000000000000000, 0x1, 0x2, 0x1, 0x7fffffffffffffff, 0xc0, 0xb5d, 0xede, 0x7fffffffffffffff, 0x4, 0x8, 0x100000001, 0x1, 0x5, 0x3, 0x85b5, 0x6], "f7ef6921a6e25fecd9915203063e8d674c869a69763147d471df5a8938f1dd217592913f1b6781b2559757bd5f935ea52b03"}, 0x1, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)

2m10.898509687s ago: executing program 7 (id=1013):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
socket(0x28, 0x1, 0x106)
mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0)
kexec_load$auto(0x5, 0x2000000000002, &(0x7f0000000040)={@kbuf=0x0, 0x800c01f, 0x4800c000}, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r3, 0x110, 0x1, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

2m8.196345199s ago: executing program 7 (id=1015):
r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x90202, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x2000000006, 0x3, 0x0, 0x3, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
fchown$auto(r0, 0xffffffff, 0x0)

1m53.122214604s ago: executing program 38 (id=1015):
r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x90202, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x2000000006, 0x3, 0x0, 0x3, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
fchown$auto(r0, 0xffffffff, 0x0)

55.389811551s ago: executing program 3 (id=1150):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x200000000000000, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x8000000000000000, 0x4020009, 0x6, 0x18, 0x401, 0x9f)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r1, 0x57, r0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
getpid()
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000)
close_range$auto(0x2, 0xa, 0x0)

53.865550714s ago: executing program 3 (id=1154):
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x73)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xae00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x1a, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$auto(r6, 0x3, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f0080000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08002c00ac1414aa08002400", @ANYRES32=0x0, @ANYBLOB="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"], 0x8f0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r8}, 0x18)
write$auto_tty_fops_tty_io(r2, 0x0, 0x0)

53.094429285s ago: executing program 3 (id=1156):
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x73)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x1a, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$auto(r6, 0x3, &(0x7f0000000000)='4\x93f\x06\x04\x00\x00', &(0x7f0000000040), 0x7f)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f0080000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08002c00ac1414aa08002400", @ANYRES32=0x0, @ANYBLOB="0b689f1e461b73f35a80fb0c5d010da66ca2dc05b5d9d41f7ff9e77252f2256f1d06172eb12d4b1db5215d129508830557c006a8a410fc2884309a1926f3351815421a953d11af9152ab9bd8e829e43ff55f35bacd55d9520097c7c781ed37a1afdee98bce7e4d42ec51f4bef16412b45bb0577239c81a053c53a0700dd345cbb8c2f82fcf54530af042d1cb1df8fafbf221ffdeded9aded6429765a8d4f28fa549a04c0a8fc7d47e17a16da865d8757fa2a84752eb6ce18c329471d882954876edffd6e332e47703f5fff563b3f87861c905f1888b56f2c628bd8e5a12f97dcedd6faaad55b119926b7012a90c615b18346c8a695c124c4b9b5cb54210c0006000400000000000000050013000300000008002c0008000000cc042b809139c425a3560361440b42d64f4a1c9461ab61d8a29bc236da9b4f7c9589ae6428a65ec18b1a2d20b5071126657df1c8c9c2bbda82cc1ee72a1f7467ee9b2d06ded093defab13609770fd1c0ccdd6b7c7eac40c9056dabb2e2c59a229a1a02d800f7f9f97c2d3cdb04add6aaaed5dd49aef9d6d817eb5074abb80db623c2566a4f30781853e214f4a65e4b04ba8af0bf400cc63536afd4e70e6fc5c37d4c2850308e0d83ca735880170a5f8775ceced0617d29b93c014d8004001680362ca72615946b32886d2e1e42eae94d26390638a9973f05da4d72c2be05c57e45d34404ede1465880ab50900b9b34700140f34e0743dbc1b9185432ce65fb36e6c860449f57ded7b1e6bb0f82bc89eef73024ede9042fe673fe599ee446d73afbbd33420d1e800e1b2f1e3889553b4e5384c40c3bbd1c3bd58e291ff5d08b1743f45106dafd4f8cc56d04292ee62cd8d8fa8e99c89c6262271802b435e7f955a5f1db0880a508f522015ed6f52ba00cc2c318f7deec0a856a6997ec4d93e2f2f518218b251c86516a5479dbbb274b83a66969da4a0f8a14772301c9a600d4d777d9fc7fc26957288907c6f9f125dea5522e90c6ff31d17cc4ef8359f53278f77fbc8fc73c94bf66f5f8a9a81ebc8554a17aaf992bda85eb75ffbc00c3d484c014005800fe88000000000000000000000000000194028a8004000d80d815603d31765288ac0df755353abeb37ebe45d57130ccd67b35231d5899112c5c3be9d05830302fca2189f834d9de673abe460a2751aef14bdb24aac4ba169822d5a8e3409f22f3e3c9cf493471bd7c23f48ef044297504fdea4edd4f85648fde535503afdf66930f502114de06510689b48ce2b99ac68d528850c10bc2fad18e221eff5cb8fb8103a15df1ea8de7176011e6e7868bd9908123d5e38e40236ef279b1fd77bb63d356c5e3cba7c7cf8c7b2f773fbfd509e96814632e1103e89bb9d627def8b5ad124909ec4f0669c140de923af0a5f20fbb9a49e7ca7088970104004f8004004a8007006100277d00000164f56d8092c69fa470ca96f6457c6e40f65c15fd4bb0bea28f9481fba1622bde161a3e8241510380c13b66b6ccea6949dfa72d0d4d4e0312680a9f0ef310bff1fd61831a483a1e76d4d99fd85106be60b4ac47e278f4740fe8035788322327c05f4d1196632230ee82c32d89aa691a55a58a4ec1c79fd6d59c1c7ca8459297da3ec6df29f9fcab45c1ee07ca8cd71765bf11efabae84e8ed00a884d70bcb8895c95fcd8232a27fb186d4b49cd8f747d392509327562bca5b73520000b1c2f4f5624cfb7e061767c2e5a87652ed67aa476c84ff300687df9c138dcb44600edb0805446db0e95d31fdf3ebc9068d82305061fed5b85bb56bde64de9a04c8a57a893adc131f8b942f1d254f733d15a3dfa506ac6d4b8a196f8697ba19002f9e2930e0b09b0f814309219f844aef1dab445ca73679ce1d04808e728b6fddf4f5216fa778e4f1f75cd69220a34d4da0c913c1c14bbe8ca723e1d1f40d8cc471de73f21c53a8c14a8b1d2775e1cc35531d9b36e2ee93525fb9a34c25bd8447818f63d059e8194ec7217841266d00a92ffd146fc269981f9f298abe51fffe1b005a80741cb5d131120913c0d6f5c97bde484d5d46dc75e1f0f2001400f000fc00000000000000000000000000000014005d00fc020000000000000000000000000001050007000500000005001300fe000000"], 0x8f0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r8}, 0x18)
write$auto_tty_fops_tty_io(r2, 0x0, 0x0)

51.993564059s ago: executing program 3 (id=1159):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1)

48.211410584s ago: executing program 2 (id=1163):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "9de21f23fc0acb97ae1a01add8cecd437d2e69f1971f5a3a39c31a100fb84f81908ef49a8f47c84eaf980b9b7af5969da088e0de790d5d187d1bff9c935ab414753305f7b9b1157fcac9d9f18178ae0b1f23791a63d328d2ce8179705c3b4a935daa56000b8d87a7e1e216039d25bbe306e8700dd3bb7ec3ac54a32c52a97b3a527289f0c762a2a4d4b1249027fa5085b28cbcac5c846df2978451640afb9dfa99a79f082dc945c97568e5eae65550fc8f92f3640d066a47431248065fd7e4411926addf1b104ee0bdd8cb62c04e73cf8a97573428c7ad7223a81d1d0af1dc4f9e29d7edc07e8f61969179723fa92afd5552b80758990b15873c07c73d558ba3"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4)
unshare$auto(0x40000080)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

47.085890249s ago: executing program 2 (id=1167):
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
r0 = socket(0xa, 0x1, 0x100)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x40000a, 0x3, 0x20000000009b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x2)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0)
signalfd$auto(0xffffffff, 0x0, 0x8)

45.539685059s ago: executing program 2 (id=1169):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x200000000000000, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x8000000000000000, 0x4020009, 0x6, 0x18, 0x401, 0x9f)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r1, 0x57, r0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = getpid()
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)

43.983451352s ago: executing program 2 (id=1170):
r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
r1 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0)
ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000040)={r1, 0x7fff})
io_uring_setup$auto(0x2, 0x0)
bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)=@iter_create={0xffffffffffffffff, 0x5}, 0x2)
ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/free_buffer\x00', 0x40000, 0x0)

43.605309602s ago: executing program 2 (id=1173):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
socket(0x28, 0x1, 0x106)
mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0)
kexec_load$auto(0x5, 0x2000000000002, &(0x7f0000000040)={@kbuf=0x0, 0x800c01f, 0x4800c000}, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r3, 0x110, 0x1, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

42.763199827s ago: executing program 3 (id=1174):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
socket(0x28, 0x1, 0x106)
mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0)
kexec_load$auto(0x5, 0x2000000000002, &(0x7f0000000040)={@kbuf=0x0, 0x800c01f, 0x4800c000}, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r3, 0x110, 0x1, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

42.018001134s ago: executing program 2 (id=1175):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
r1 = socket(0x22, 0x2, 0x3)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311)
timer_settime$auto(0x66c8ece6, 0x617e, &(0x7f0000000000)={{0x9, 0xc}, {0xa, 0x3ff}}, 0x0)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0})
close_range$auto(r0, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = socket(0x2, 0x801, 0x106)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port2/power/runtime_active_time\x00', 0x82942, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mmap$auto(0x0, 0x8400008, 0xdf, 0x9b72, r3, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
setrlimit$auto(0xb, 0x0)

40.670143811s ago: executing program 3 (id=1178):
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x1, 0x8, 0x1, 0x4005, 0x0, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x9d96, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x80000002a0, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x10000, 0x96, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, 0x0, 0x100000a3da)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
write$auto(0xffffffffffffffff, 0x0, 0x0)

26.388487449s ago: executing program 39 (id=1175):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
r1 = socket(0x22, 0x2, 0x3)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x6)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311)
timer_settime$auto(0x66c8ece6, 0x617e, &(0x7f0000000000)={{0x9, 0xc}, {0xa, 0x3ff}}, 0x0)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0})
close_range$auto(r0, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = socket(0x2, 0x801, 0x106)
socket(0xa, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port2/power/runtime_active_time\x00', 0x82942, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mmap$auto(0x0, 0x8400008, 0xdf, 0x9b72, r3, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
setrlimit$auto(0xb, 0x0)

25.412170198s ago: executing program 40 (id=1178):
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x1, 0x8, 0x1, 0x4005, 0x0, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x9d96, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x80000002a0, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x10000, 0x96, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, 0x0, 0x100000a3da)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
write$auto(0xffffffffffffffff, 0x0, 0x0)

9.504368969s ago: executing program 9 (id=1216):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan1\x00'})
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cgroup\x00', 0x181100, 0x0)
read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/112, 0x70)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttye1\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb1, 0xd, 0x300000000000)
bpf$auto(0x5, 0x0, 0x4a)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
mmap$auto(0x0, 0x8000000004020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x200000000004)
close_range$auto(0x2, 0x8, 0x0)
semget$auto(0x8, 0x3, 0xfffffffe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x3, 0x100)

9.015900137s ago: executing program 8 (id=1218):
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x73)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x2, 0x3, 0x100)
r4 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x1a, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
fsconfig$auto(r6, 0x3, 0x0, &(0x7f0000000040), 0x7f)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f0080000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08002c00ac1414aa08002400", @ANYRES32=0x0, @ANYBLOB="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"], 0x8f0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r8}, 0x18)
write$auto_tty_fops_tty_io(r2, 0x0, 0x0)

8.418012245s ago: executing program 8 (id=1219):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x200000000000000, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x8000000000000000, 0x4020009, 0x6, 0x18, 0x401, 0x9f)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r1, 0x57, r0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)

8.369078288s ago: executing program 9 (id=1220):
write$auto(0xca, &(0x7f00000004c0)='\x04>\xea\x00\x00\x00\x00\x01\x00\xb6\xce7\xe9aku\x8e\x93\xec\xaecH0\xe2\xf0\xd23\xeb\xb7r9.5\x9c\xeeJ\x01\x19w\x002\xd4\x13\t.\xd8\xc9j\x1b0$\xa9\x1cMBr\xf4\xa0\x0e\x8c\xd5\x89\xcdZ\xbeX\xfa\xb5\xb4\xe0P\n\x1cSf$\xb0\xcb\xa2+{\xbf\xc1:\fo\xd3d\xed6\xb5\x89i\n/*\xcc\x00\x00\x00\x00\xf9\xd6=\xb3\xe1\x06\xb4^\xe9c\xd1q%\xf8\xe6\xf6\xccw\xbc\x85\xaa\x89\xb8\xdcBZf\xcf\x9a\xc9\xee\x8d(5\x85\a@', 0x7f)
r0 = creat$auto(0x0, 0x3f9)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x40081, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xe001}, 0x3, 0xe, 0x3)
read$auto(r1, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$auto_SO_REUSEPORT(r0, 0x829a27d4, 0xf, &(0x7f0000000240)='\x04>\xea\x00\x00\x00\x00\x01\x00\xb6\xce7\xe9aku\x8e\x93\xec\xaecH0\xe2\xf0\xd23\xeb\xb7r9.5\x9c\xeeJ\x01\x19w\x002\xd4\x13\t.\xd8\xc9j\x1b0$\xa9\x1cMBr\xf4\xa0\x0e\x8c\xd5\x89\xcdZ\xbeX\xfa\xb5\xb4\xe0P\n\x1cSf$\xb0\xcb\xa2+{\xbf\xc1:\fo\xd3d\xed6\xb5\x89i\n/*\xcc\x00\x00\x00\x00\xf9\xd6=\xb3\xe1\x06\xb4^\xe9c\xd1q%\xf8\xe6\xf6\xccw\xbc\x85\xaa\x89\xb8\xdcBZf\xcf\x9a\xc9\xee\x8d(5\x85\a@', 0x0)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)

8.273978531s ago: executing program 1 (id=1200):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x1, 0x8, 0x1, 0x4005, 0x0, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x9d96, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x80000002a0, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x10000, 0x96, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, 0x0, 0x100000a3da)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
write$auto(0xffffffffffffffff, 0x0, 0x0)

7.055271747s ago: executing program 9 (id=1221):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(0x0, 0x22240, 0x155)
r2 = socket(0x2, 0x80802, 0x0)
stat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xc13, 0xfff, 0x3, 0x4, 0x0, 0xee00, 0x0, 0x100, 0x5, 0x3, 0x9, 0x1, 0x10000, 0xffff, 0xbd2, 0x5, 0x6})
statx$auto(r0, &(0x7f0000000280)='./file0\x00', 0x7, 0x7, &(0x7f0000000300)={0x40, 0x45fa, 0x6, 0x10000, 0x0, 0xee00, 0x9, 0xa, 0x3, 0x1000, 0x2, 0x0, {0x0, 0x7f}, {0x2, 0x8}, {0x8f, 0x1}, {0x6, 0xb}, 0xff, 0x2, 0x9, 0x4000, 0x6, 0x1, 0x8, 0x3, 0xfffffff7, 0x8, 0x1000, 0x8, [0x66d, 0x5, 0x8, 0x80, 0x4, 0x5, 0x3, 0x9, 0x1]})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r1, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)={0x30, 0x0, 0x202, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20004010)
setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
keyctl$auto(0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
socket(0x29, 0x2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/19, 0x13)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty13\x00', 0x400, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
rmdir$auto(&(0x7f0000000040)='./file0\x00')
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff)
msgget$auto(0xc, 0x77d9)
msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0)
read$auto_proc_timers_operations_base(r1, &(0x7f0000000080)=""/170, 0x65)

6.796769527s ago: executing program 8 (id=1222):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x4, 0xffffffc0)
io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0), 0x5)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x5, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x2, 0x8, 0x1, 0x1, 0x2, 0x100, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0x2c5, 0x49b72, 0x2, 0x8000)
madvise$auto(0x0, 0x400, 0x751)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1ec}}, 0x4008041)
socket(0x27, 0x2, 0x9)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card1/pcm1c/sub2/sw_params\x00', 0x109500, 0x0)
pread64$auto(r2, 0x0, 0x8, 0xffff)
setresuid$auto(0x0, 0x7, 0x8080)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xc0201, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000600)="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", 0x119)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101a01, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200300, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebd, 0xffffffffffffffff, 0x300000000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)

6.442881384s ago: executing program 9 (id=1223):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x200000000000000, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x400c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x8000000000000000, 0x4020009, 0x6, 0x18, 0x401, 0x9f)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(r1, 0x57, r0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)

5.090556527s ago: executing program 1 (id=1224):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "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"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
unshare$auto(0x40000080)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xe}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x95, 0xbb, "d16ea4acf6a5c6970735014219a45f3ab21906094d58be70fa40e26ce2c6dce55e1ef578e5ff2cb65cacec795d6e9cd898dea7f5d6d488f75fccf6a13a113457381718ef340b2289f3c0b84f8180761131e8a6b46fa118eb0c155c09b87ed624bd8cc34e27c52d8a66cc08a85276695e9d69a61c8345d59bb18720a64f0ef285ca66894867fbd05d690af859e7966324b3"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "41214b6d29c940ba32c6ef"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x9}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xcb}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008000)
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

4.877125169s ago: executing program 8 (id=1225):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "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"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4)
unshare$auto(0x40000080)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

4.808533647s ago: executing program 0 (id=1202):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x1, 0x8, 0x1, 0x4005, 0x0, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x9d96, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x80000002a0, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x10000, 0x96, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000400))
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, 0x0, 0x100000a3da)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
write$auto(0xffffffffffffffff, 0x0, 0x0)

4.241985343s ago: executing program 1 (id=1226):
write$auto(0xca, &(0x7f00000004c0)='\x04>\xea\x00\x00\x00\x00\x01\x00\xb6\xce7\xe9aku\x8e\x93\xec\xaecH0\xe2\xf0\xd23\xeb\xb7r9.5\x9c\xeeJ\x01\x19w\x002\xd4\x13\t.\xd8\xc9j\x1b0$\xa9\x1cMBr\xf4\xa0\x0e\x8c\xd5\x89\xcdZ\xbeX\xfa\xb5\xb4\xe0P\n\x1cSf$\xb0\xcb\xa2+{\xbf\xc1:\fo\xd3d\xed6\xb5\x89i\n/*\xcc\x00\x00\x00\x00\xf9\xd6=\xb3\xe1\x06\xb4^\xe9c\xd1q%\xf8\xe6\xf6\xccw\xbc\x85\xaa\x89\xb8\xdcBZf\xcf\x9a\xc9\xee\x8d(5\x85\a@', 0x7f)
r0 = creat$auto(0x0, 0x3f9)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x40081, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xe001}, 0x3, 0xe, 0x3)
read$auto(r1, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto_SO_REUSEPORT(r0, 0x829a27d4, 0xf, &(0x7f0000000240)='\x04>\xea\x00\x00\x00\x00\x01\x00\xb6\xce7\xe9aku\x8e\x93\xec\xaecH0\xe2\xf0\xd23\xeb\xb7r9.5\x9c\xeeJ\x01\x19w\x002\xd4\x13\t.\xd8\xc9j\x1b0$\xa9\x1cMBr\xf4\xa0\x0e\x8c\xd5\x89\xcdZ\xbeX\xfa\xb5\xb4\xe0P\n\x1cSf$\xb0\xcb\xa2+{\xbf\xc1:\fo\xd3d\xed6\xb5\x89i\n/*\xcc\x00\x00\x00\x00\xf9\xd6=\xb3\xe1\x06\xb4^\xe9c\xd1q%\xf8\xe6\xf6\xccw\xbc\x85\xaa\x89\xb8\xdcBZf\xcf\x9a\xc9\xee\x8d(5\x85\a@', 0x0)
io_uring_setup$auto(0x6, 0x0)

3.640931916s ago: executing program 8 (id=1227):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r1 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c")
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r5 = open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
mmap$auto(0x1ef9, 0x2020009, 0x3, 0xeb1, r5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}})
statmount$auto(&(0x7f0000000280)={0x9000, @inferred=r0, 0x16, 0xfff, 0x4760}, &(0x7f00000003c0)={0xd1e, 0x34c, 0x5, 0x8, 0x4, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0x6, 0x8, 0xb, 0x800, 0x8, 0x13, 0x8000000000000000, 0x3901, 0x853d, 0x7, 0xa00000, 0xfffffff7, 0x5, 0x7fffffff, 0x9, 0x6, 0x59d, 0x80000000, 0x5, 0xffffff01, 0x4, [0xffffffff, 0x7f, 0x9, 0x969, 0x91, 0x1, 0x3729, 0x7, 0x8, 0x10001, 0x9, 0x8, 0x7, 0x4, 0x100000000, 0xfe71, 0x5, 0xb, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x0, 0x0, 0x100, 0x8000000000000000, 0x1, 0x2, 0x1, 0x7fffffffffffffff, 0xc0, 0xb5d, 0xede, 0x7fffffffffffffff, 0x4, 0x8, 0x100000001, 0x1, 0x5, 0x3, 0x85b5, 0x6], "f7ef6921a6e25fecd9915203063e8d674c869a69763147d471df5a8938f1dd217592913f1b6781b2559757bd5f935ea52b03"}, 0x1, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)

3.171896669s ago: executing program 0 (id=1228):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6)
socket(0x10, 0x4, 0xffffffc0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0)
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r4, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x1ef}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810)
r5 = socket(0x10, 0x2, 0xc)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r6, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
madvise$auto(0x0, 0xffffffffffff0004, 0x1a)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
pwrite64$auto(r0, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000)

2.91110459s ago: executing program 9 (id=1229):
write$auto(0xca, &(0x7f00000004c0)='\x04>\xea\x00\x00\x00\x00\x01\x00\xb6\xce7\xe9aku\x8e\x93\xec\xaecH0\xe2\xf0\xd23\xeb\xb7r9.5\x9c\xeeJ\x01\x19w\x002\xd4\x13\t.\xd8\xc9j\x1b0$\xa9\x1cMBr\xf4\xa0\x0e\x8c\xd5\x89\xcdZ\xbeX\xfa\xb5\xb4\xe0P\n\x1cSf$\xb0\xcb\xa2+{\xbf\xc1:\fo\xd3d\xed6\xb5\x89i\n/*\xcc\x00\x00\x00\x00\xf9\xd6=\xb3\xe1\x06\xb4^\xe9c\xd1q%\xf8\xe6\xf6\xccw\xbc\x85\xaa\x89\xb8\xdcBZf\xcf\x9a\xc9\xee\x8d(5\x85\a@', 0x7f)
creat$auto(0x0, 0x3f9)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x40081, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
pwritev$auto(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xe001}, 0x3, 0xe, 0x3)
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

2.702122843s ago: executing program 1 (id=1230):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "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"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4)
unshare$auto(0x40000080)
setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

862.472277ms ago: executing program 9 (id=1231):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
r1 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c")
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r5 = open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x4c2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x4200, 0x0)
mmap$auto(0x1ef9, 0x2020009, 0x3, 0xeb1, r5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}})
statmount$auto(&(0x7f0000000280)={0x9000, @inferred=r0, 0x16, 0xfff, 0x4760}, &(0x7f00000003c0)={0xd1e, 0x34c, 0x5, 0x8, 0x4, 0x9, 0x1, 0x7, 0xfffffffffffffff8, 0x7, 0x6, 0x8, 0xb, 0x800, 0x8, 0x13, 0x8000000000000000, 0x3901, 0x853d, 0x7, 0xa00000, 0xfffffff7, 0x5, 0x7fffffff, 0x9, 0x6, 0x59d, 0x80000000, 0x5, 0xffffff01, 0x4, [0xffffffff, 0x7f, 0x9, 0x969, 0x91, 0x1, 0x3729, 0x7, 0x8, 0x10001, 0x9, 0x8, 0x7, 0x4, 0x100000000, 0xfe71, 0x5, 0xb, 0x0, 0x7, 0x80000001, 0x4, 0x7, 0x0, 0x0, 0x100, 0x8000000000000000, 0x1, 0x2, 0x1, 0x7fffffffffffffff, 0xc0, 0xb5d, 0xede, 0x7fffffffffffffff, 0x4, 0x8, 0x100000001, 0x1, 0x5, 0x3, 0x85b5, 0x6], "f7ef6921a6e25fecd9915203063e8d674c869a69763147d471df5a8938f1dd217592913f1b6781b2559757bd5f935ea52b03"}, 0x1, 0x6)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)

94.529196ms ago: executing program 1 (id=1232):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x3, 0x8, 0xdf, 0x10, r0, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0xecff)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xa00c0, 0x0)
socket(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
shmget$auto(0x1, 0xcf, 0x9)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
clock_getres$auto(0xfffffffd, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000001240)='\t\x00', 0x2)
r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x62)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x7fffffff)
bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40)
mprotect$auto(0x110c230000, 0x85, 0x2)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x84182, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c0a, 0x0)
mremap$auto(0x110c230000, 0x0, 0xffff, 0x3, 0x0)

0s ago: executing program 8 (id=1233):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x2, "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"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/rose15/statistics/rx_compressed\x00', 0x84403, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4)
unshare$auto(0x40000080)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff)
unshare$auto(0xb6)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf5, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468"}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"})
sendmsg$auto_NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xe}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x95, 0xbb, "d16ea4acf6a5c6970735014219a45f3ab21906094d58be70fa40e26ce2c6dce55e1ef578e5ff2cb65cacec795d6e9cd898dea7f5d6d488f75fccf6a13a113457381718ef340b2289f3c0b84f8180761131e8a6b46fa118eb0c155c09b87ed624bd8cc34e27c52d8a66cc08a85276695e9d69a61c8345d59bb18720a64f0ef285ca66894867fbd05d690af859e7966324b3"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "41214b6d29c940ba32c6ef"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x9}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0xcb}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008000)
ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000080)=0x6)
futex$auto(&(0x7f0000000040)=0x2, 0x8, 0xac53, &(0x7f0000000080)={0x77e6}, &(0x7f00000000c0)=0xa, 0xea)

kernel console output (not intermixed with test programs):

ack_lvl+0x16c/0x1f0
[  464.826096][T10529]  should_fail_ex+0x512/0x640
[  464.826146][T10529]  _copy_to_user+0x32/0xd0
[  464.826199][T10529]  mousedev_read+0x3a9/0x7d0
[  464.826245][T10529]  ? __pfx_mousedev_read+0x10/0x10
[  464.826294][T10529]  ? __pfx_autoremove_wake_function+0x10/0x10
[  464.826339][T10529]  ? apparmor_file_permission+0x251/0x400
[  464.826377][T10529]  ? bpf_lsm_file_permission+0x9/0x10
[  464.826411][T10529]  ? security_file_permission+0x71/0x210
[  464.826452][T10529]  ? rw_verify_area+0xcf/0x680
[  464.826497][T10529]  ? __pfx_mousedev_read+0x10/0x10
[  464.826535][T10529]  vfs_readv+0x5c1/0x8b0
[  464.826586][T10529]  ? __pfx_vfs_readv+0x10/0x10
[  464.826659][T10529]  ? __fget_files+0x20e/0x3c0
[  464.826701][T10529]  ? __fget_files+0x180/0x3c0
[  464.826755][T10529]  ? do_readv+0x28c/0x340
[  464.826794][T10529]  do_readv+0x28c/0x340
[  464.826837][T10529]  ? __pfx_do_readv+0x10/0x10
[  464.826891][T10529]  do_syscall_64+0xcd/0x490
[  464.826941][T10529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.826977][T10529] RIP: 0033:0x7ff101f8e929
[  464.827002][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.827034][T10529] RSP: 002b:00007ff0ffdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  464.827064][T10529] RAX: ffffffffffffffda RBX: 00007ff1021b5fa0 RCX: 00007ff101f8e929
[  464.827085][T10529] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003
[  464.827105][T10529] RBP: 00007ff0ffdf6090 R08: 0000000000000000 R09: 0000000000000000
[  464.827125][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.827144][T10529] R13: 0000000000000000 R14: 00007ff1021b5fa0 R15: 00007ffdc4ccaa48
[  464.827186][T10529]  </TASK>
[  464.837250][T10533] FAULT_INJECTION: forcing a failure.
[  464.837250][T10533] name fail_futex, interval 1, probability 0, space 0, times 0
[  465.049559][T10533] CPU: 1 UID: 0 PID: 10533 Comm: syz.4.796 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  465.049608][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  465.049629][T10533] Call Trace:
[  465.049640][T10533]  <TASK>
[  465.049653][T10533]  dump_stack_lvl+0x16c/0x1f0
[  465.049711][T10533]  should_fail_ex+0x512/0x640
[  465.049769][T10533]  get_futex_key+0x1d0/0x1540
[  465.049817][T10533]  ? __pfx_get_futex_key+0x10/0x10
[  465.049862][T10533]  ? __destroy_inode+0x2e4/0x730
[  465.049915][T10533]  ? __pfx_sock_free_inode+0x10/0x10
[  465.049966][T10533]  futex_wake+0xe7/0x4e0
[  465.050017][T10533]  ? __pfx_evict+0x10/0x10
[  465.050048][T10533]  ? __pfx_futex_wake+0x10/0x10
[  465.050104][T10533]  ? iput+0x519/0x880
[  465.050147][T10533]  do_futex+0x1e3/0x350
[  465.050191][T10533]  ? __pfx_do_futex+0x10/0x10
[  465.050232][T10533]  ? __sock_release+0x20b/0x270
[  465.050295][T10533]  __x64_sys_futex+0x1e0/0x4c0
[  465.050339][T10533]  ? __sys_socket+0xac/0x260
[  465.050376][T10533]  ? fput+0x70/0xf0
[  465.050407][T10533]  ? __pfx___x64_sys_futex+0x10/0x10
[  465.050451][T10533]  ? xfd_validate_state+0x61/0x180
[  465.050496][T10533]  ? __pfx_ksys_read+0x10/0x10
[  465.050561][T10533]  do_syscall_64+0xcd/0x490
[  465.050616][T10533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.050650][T10533] RIP: 0033:0x7f17d4b8e929
[  465.050678][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.050711][T10533] RSP: 002b:00007f17d591c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  465.050743][T10533] RAX: ffffffffffffffda RBX: 00007f17d4db5fa8 RCX: 00007f17d4b8e929
[  465.050766][T10533] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f17d4db5fac
[  465.050787][T10533] RBP: 00007f17d4db5fa0 R08: 00007f17d591d000 R09: 0000000000000000
[  465.050809][T10533] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f17d4db5fac
[  465.050831][T10533] R13: 0000000000000000 R14: 00007fff0ba94cc0 R15: 00007fff0ba94da8
[  465.050874][T10533]  </TASK>
[  465.655361][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'.
[  466.213767][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.802'.
[  466.395697][T10565] FAULT_INJECTION: forcing a failure.
[  466.395697][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.416362][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.4.802 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  466.416408][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  466.416426][T10565] Call Trace:
[  466.416436][T10565]  <TASK>
[  466.416448][T10565]  dump_stack_lvl+0x16c/0x1f0
[  466.416504][T10565]  should_fail_ex+0x512/0x640
[  466.416556][T10565]  _copy_from_user+0x2e/0xd0
[  466.416610][T10565]  core_sys_select+0x35b/0xc10
[  466.416665][T10565]  ? __pfx_core_sys_select+0x10/0x10
[  466.416719][T10565]  ? proc_fail_nth_write+0x9f/0x250
[  466.416794][T10565]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  466.416854][T10565]  kern_select+0x15d/0x1e0
[  466.416911][T10565]  ? __pfx_kern_select+0x10/0x10
[  466.416962][T10565]  ? __pfx_ksys_write+0x10/0x10
[  466.417017][T10565]  __x64_sys_select+0xbd/0x160
[  466.417060][T10565]  ? do_syscall_64+0x91/0x490
[  466.417107][T10565]  ? lockdep_hardirqs_on+0x7c/0x110
[  466.417155][T10565]  do_syscall_64+0xcd/0x490
[  466.417207][T10565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.417239][T10565] RIP: 0033:0x7f17d4b8e929
[  466.417266][T10565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.417297][T10565] RSP: 002b:00007f17d29d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  466.417327][T10565] RAX: ffffffffffffffda RBX: 00007f17d4db6160 RCX: 00007f17d4b8e929
[  466.417349][T10565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e
[  466.417368][T10565] RBP: 00007f17d29d5090 R08: 0000000000000000 R09: 0000000000000000
[  466.417388][T10565] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  466.417409][T10565] R13: 0000000000000001 R14: 00007f17d4db6160 R15: 00007fff0ba94da8
[  466.417451][T10565]  </TASK>
[  466.686921][T10551] netlink: 'syz.2.800': attribute type 1 has an invalid length.
[  466.695234][T10551] netlink: 322 bytes leftover after parsing attributes in process `syz.2.800'.
[  468.427296][T10589] random: crng reseeded on system resumption
[  468.566344][T10591] vhci_hcd: invalid port number 16
[  468.581864][T10591] vhci_hcd: invalid port number 16
[  469.484092][T10602] netlink: 756 bytes leftover after parsing attributes in process `syz.0.811'.
[  469.896613][T10598] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  469.932218][T10598] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  469.945014][T10598] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  469.981180][T10598] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  470.218318][T10600] [U] QBer‘éÝf¿”ê2h’ƒ»‰]¼
[  470.277218][T10600] [U] —rÖâPÉt5i‰‹}H¬ìÝò€ÏmÔºÁª9(e…\ê°âóO7Ý쎥‡üMï‚V°«*nÊÄ b½<Xº`c·G ¤ú‹‘ÝäruqÄ씿½áß�̲eÿÚ7L˜ÿ±î"šóŠ? 2Û¾^˜ôEQpé¡7Q{›{ˆ@5™@«
[  470.322871][T10600] [U] �­õ—»MÀŸj]Sªÿw·|NBWaÜ	ÓD˜Áüç,¡™¸tŠ7Y{•gÍ¡Þ,¿ibyŽ^á÷Ë,p©P/3Ä;Ž]ÅMçC¢âL¹L"Öi´4ˆŠ|äËÍw³$%Ž¯2­ÀË8øÆ"Wƒö€NÜ9ûž˜ÅWúøÐöô4ÎKà
[  470.337220][T10600] [U] °óÝ0’O{Ðpi®)<L²1¹}k8Ýo»4)�S„î×îÙ3
[  470.343131][T10600] [U] œ^s+ÝQ
iÙÊ>B¢+ãw
[  470.374376][T10600] [U] µ˜À7¸ð‰Ï‹	BªûjÉ$ÏU-ñX§õœ&æ/?Ï2Ø`Â%œ±³Šw?óϺùÅ°hÚÞ\×w�©‡
[  470.382450][T10600] [U] R!Cu+°‰½ò³ƒ‡·.ŠS96b>Ööï”ÝüÊ{ò
[  470.390721][T10600] [U] oäP =í³jW5^%ÿW›\c	_H@~Ί|lO[%‚ao
[  470.396400][T10600] [U] kº˜À¢ƒUûÜîÉâ�dRÃ_ŠÙ?–ò.Y
"Ô?oÜ ùìÅQµqD;°�÷¨–`N¤óÄ0QBŒÉÛ²Œ*	`ž@�;^’§'¯§g±ù}ó5îr–†À>LÁŠ¥JØ+@<ÆÁÿcAU`A}}H�ðiÉ%Ê?Î`ÊzÇgýßaÊö/:¶}­?¯Ã4�>Aœ.—U>Ê­X¿	q’çnš¼\›é2qŠº2Í}¼Æ¼cJF<opœÈc³”BçÁL~{
[  470.466792][T10600] [U] ë{j?7W†
[  470.706787][T10600] [U] Ýtc'|CÎMÎÄŸEX•›õ‘‚ºôòPª_î8<êì(¿"-ûîÊŒÈG1v2lýIê+_<sóhe¶*•Á»vÏã—hHûË@ƒ�Ýïùâæ»þlïSì<G‡JS‘#Œ
[  470.719083][T10600] [U] k=³üéA'Ìœ˜¤!]‡?{H„m–¾-l¬S/Î
[  470.724566][T10600] [U] Þç7äÑݶ[‹$I˜J‰~@�DžÔû@û�>Q9mFd£ðÕŲG�ø8™y̵eÆFfÛq4Ñ\ÿZèù5¥¼²<ªÎ.Ý+7§&W^<°R�à^ÝŸãëawg¶¥W(
[  470.735733][T10600] [U] (‹R¯D¡`{`c†~\��VÄIhýP›Yƒúæ±îû/Œî´›‹Vœñ;w­¼"Η,×zÅqîA¤FÑ91øIÕclr™–³nÈAqýâ`¤à—pÏhu‘§˜3®dsÅÀú«–ï	>axÔ…Rm¿w\”2Lv½Jòe.�6±Ì
[  470.749719][T10600] [U] =ð\’2înï|OF¦ÏŠÑ`­zºi(¿kó­áÑ5©eÄ¢²ƒHW7Úgþ™"/¿³º§Muþ)*ßØ/Ë“%·ê‚jRU–TçmIJ7M•5úÏÍJ²HãˆÅ»Š
[  470.760460][T10600] [U] ÁQ±U~A�×Æ%Æz±Å
[  470.764434][T10600] [U] o¹{¡\Ucî¤K!©>­o{ý…n(x/
[  470.769847][T10600] [U] ÐPDÙ›—9ÒÌë†Ï&¬ëà‰¨a4ý
ầƒ*0ê.`R¸~ám~(¾CÑ+²¶y7Ý&¨®¸Oï/-R÷R2¤
[  470.778530][T10600] [U] ªoj3KQÒu)Øn¥Î‡Ebùù=¤]$B$¹6üí;eŠ»çª
[  470.784346][T10600] [U] P/ÿ΂?RŠ´~£T"ñDs6f"šàŒü~a$wBêN<	8®|{�Áî—\ƒyg.LïĘ”«s»¢X
[  470.793162][T10600] [U] ÄvÌV¶t‹ŽÛ³z?�ÚúÔì«Î|Mü2ä
[  470.798889][T10600] [U] Z�³{:n«í¾ú�Øîñ‰¹#cÓ98Jòk}G•�=‚„\›f�¥¼½d�ÉáÆÙ«]* IÑ—j0š¾ž[?žb2B±Ø›ÃiÑE§Š›ßT=¿þ‰Ÿù6`	£°BJcF�µ0ÚÙï#ñ6¡r‡ŽWóÂÞE­ð¡Ã(à[—�LªF²æᦺqÀd·©I{ä 	±�qb­ýM{d�úóx*’�3:Л„ŠµôÑU4¸Ää=É`K0øÓI²È
[  471.179817][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  471.959167][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  471.965335][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  472.038888][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  472.193243][T10637] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  472.278037][T10650] tty tty53: ldisc open failed (-12), clearing slot 52
[  473.211051][T10660] : Can't lookup blockdev
[  473.222319][T10660] FAULT_INJECTION: forcing a failure.
[  473.222319][T10660] name failslab, interval 1, probability 0, space 0, times 0
[  473.258904][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.5.821 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  473.258951][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  473.258971][T10660] Call Trace:
[  473.258983][T10660]  <TASK>
[  473.258996][T10660]  dump_stack_lvl+0x16c/0x1f0
[  473.259051][T10660]  should_fail_ex+0x512/0x640
[  473.259099][T10660]  ? __kmalloc_noprof+0xbf/0x510
[  473.259150][T10660]  ? constrain_params_by_rules+0x175/0xca0
[  473.259185][T10660]  should_failslab+0xc2/0x120
[  473.259220][T10660]  __kmalloc_noprof+0xd2/0x510
[  473.259269][T10660]  ? kasan_quarantine_put+0x10a/0x240
[  473.259318][T10660]  ? constrain_params_by_rules+0xa09/0xca0
[  473.259365][T10660]  constrain_params_by_rules+0x175/0xca0
[  473.259421][T10660]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  473.259479][T10660]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  473.259530][T10660]  ? __mutex_trylock_common+0xe9/0x250
[  473.259581][T10660]  ? snd_interval_refine+0x2fa/0x580
[  473.259636][T10660]  snd_pcm_hw_refine+0x7de/0xad0
[  473.259682][T10660]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  473.259728][T10660]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  473.259774][T10660]  ? snd_pcm_hw_param_value+0x266/0x5b0
[  473.259814][T10660]  snd_pcm_hw_param_first+0x334/0x6f0
[  473.259859][T10660]  snd_pcm_hw_params+0x5ad/0x1b40
[  473.259910][T10660]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[  473.259954][T10660]  ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0
[  473.260000][T10660]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  473.260039][T10660]  ? __asan_memset+0x23/0x50
[  473.260089][T10660]  snd_pcm_kernel_ioctl+0x147/0x2e0
[  473.260136][T10660]  snd_pcm_oss_change_params_locked+0x1432/0x3a30
[  473.260196][T10660]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  473.260271][T10660]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  473.260319][T10660]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  473.260361][T10660]  ? hook_file_ioctl_common+0x145/0x410
[  473.260399][T10660]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  473.260450][T10660]  ? __fget_files+0x20e/0x3c0
[  473.260507][T10660]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  473.260548][T10660]  __x64_sys_ioctl+0x18b/0x210
[  473.260595][T10660]  do_syscall_64+0xcd/0x490
[  473.260659][T10660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.260694][T10660] RIP: 0033:0x7fe98f58e929
[  473.260722][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.260758][T10660] RSP: 002b:00007fe99046a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  473.260792][T10660] RAX: ffffffffffffffda RBX: 00007fe98f7b5fa0 RCX: 00007fe98f58e929
[  473.260814][T10660] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007
[  473.260835][T10660] RBP: 00007fe98f610ca1 R08: 0000000000000000 R09: 0000000000000000
[  473.260856][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.260877][T10660] R13: 0000000000000000 R14: 00007fe98f7b5fa0 R15: 00007fffcee75d08
[  473.260927][T10660]  </TASK>
[  473.801860][T10666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69
[  474.179263][T10669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70
[  475.641443][T10690] FAULT_INJECTION: forcing a failure.
[  475.641443][T10690] name failslab, interval 1, probability 0, space 0, times 0
[  475.665678][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.0.826 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  475.665725][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  475.665745][T10690] Call Trace:
[  475.665755][T10690]  <TASK>
[  475.665764][T10690]  dump_stack_lvl+0x16c/0x1f0
[  475.665804][T10690]  should_fail_ex+0x512/0x640
[  475.665838][T10690]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  475.665878][T10690]  should_failslab+0xc2/0x120
[  475.665900][T10690]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  475.665936][T10690]  ? d_instantiate+0x77/0x90
[  475.665963][T10690]  ? alloc_empty_file+0x55/0x1e0
[  475.665992][T10690]  alloc_empty_file+0x55/0x1e0
[  475.666018][T10690]  alloc_file_pseudo+0x13a/0x230
[  475.666045][T10690]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  475.666075][T10690]  ? do_raw_spin_unlock+0x172/0x230
[  475.666101][T10690]  __anon_inode_getfile+0xe8/0x280
[  475.666139][T10690]  anon_inode_getfile_fmode+0x37/0xa0
[  475.666176][T10690]  do_signalfd4+0x206/0x430
[  475.666216][T10690]  __x64_sys_signalfd+0x120/0x1a0
[  475.666252][T10690]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  475.666296][T10690]  do_syscall_64+0xcd/0x490
[  475.666335][T10690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.666358][T10690] RIP: 0033:0x7fe14078e929
[  475.666376][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.666399][T10690] RSP: 002b:00007fe141555038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  475.666421][T10690] RAX: ffffffffffffffda RBX: 00007fe1409b6160 RCX: 00007fe14078e929
[  475.666436][T10690] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  475.666451][T10690] RBP: 00007fe140810ca1 R08: 0000000000000000 R09: 0000000000000000
[  475.666465][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.666479][T10690] R13: 0000000000000000 R14: 00007fe1409b6160 R15: 00007ffe3cd33ee8
[  475.666508][T10690]  </TASK>
[  475.863731][    C0] vkms_vblank_simulate: vblank timer overrun
[  476.500832][T10703] netlink: 756 bytes leftover after parsing attributes in process `syz.0.831'.
[  478.615895][T10723] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71
[  478.699477][T10722] random: crng reseeded on system resumption
[  479.318361][T10725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72
[  482.733260][T10780] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73
[  483.328582][T10789] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74
[  483.645375][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'.
[  484.060275][T10801] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75
[  484.685085][T10802] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76
[  486.617144][T10849] ima: policy update failed
[  486.637550][   T30] audit: type=1807 audit(1752735656.085:54): UNKNOWN=msdos res=0
[  486.695811][   T30] audit: type=1802 audit(1752735656.085:55): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.857" res=0 errno=0
[  486.767311][   T30] audit: type=1802 audit(1752735656.095:56): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.857" res=0 errno=0
[  488.059246][T10872] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  488.075778][T10872] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  488.146891][T10872] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  488.155171][T10872] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  488.455217][T10878] netlink: 64 bytes leftover after parsing attributes in process `syz.5.863'.
[  489.286793][T10860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  489.488963][T10860] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  489.495592][T10860] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  489.559783][T10860] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  489.832971][T10899] random: crng reseeded on system resumption
[  490.358216][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  491.557589][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  491.566314][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  491.637429][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  492.187263][   T30] audit: type=1807 audit(1752735661.637:57): UNKNOWN=msdos res=0
[  492.266780][   T30] audit: type=1802 audit(1752735661.737:58): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.871" res=0 errno=0
[  492.387220][T10932] ima: policy update failed
[  492.391983][   T30] audit: type=1802 audit(1752735661.867:59): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.871" res=0 errno=0
[  492.465851][T10944] random: crng reseeded on system resumption
[  494.406478][T10955] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  494.414355][T10955] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  494.493098][T10955] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  494.502880][T10955] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  495.898613][T10981] netlink: 756 bytes leftover after parsing attributes in process `syz.5.879'.
[  496.040840][T10984] sp0: Synchronizing with TNC
[  496.081532][T10980] sp0: Found TNC
[  496.435290][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  496.441506][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  496.515277][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  496.515358][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  496.966710][T10986] [U] ˜ýàF“þ
[  496.970229][T10986] [U] 
[  496.973009][T10986] [U] 
[  496.975787][T10986] [U] 
[  496.997641][T10986] [U] 
[  497.000461][T10986] [U] 
[  497.003232][T10986] [U] 
[  497.006005][T10986] [U] 
[  497.053670][T10986] [U] 
[  497.056496][T10986] [U] 
[  497.059251][T10986] [U] 
[  497.061993][T10986] [U] 
[  497.109619][T10986] [U] 
[  497.112531][T10986] [U] 
[  497.115306][T10986] [U] 
[  497.118090][T10986] [U] 
[  497.124866][T10986] [U] 
[  497.127668][T10986] [U] 
[  497.130445][T10986] [U] 
[  497.133217][T10986] [U] 
[  497.194787][T10986] [U] 
[  497.197621][T10986] [U] 
[  497.200402][T10986] [U] 
[  497.203277][T10986] [U] 
[  497.287428][T10986] [U] 
[  497.290273][T10986] [U] 
[  497.293065][T10986] [U] 
[  497.295844][T10986] [U] 
[  497.299383][T10986] [U] 
[  497.302186][T10986] [U] 
[  497.304970][T10986] [U] 
[  497.307740][T10986] [U] 
[  497.312481][T10986] [U] 
[  497.315285][T10986] [U] 
[  497.318061][T10986] [U] 
[  497.320830][T10986] [U] 
[  497.333369][T10986] [U] 
[  497.336195][T10986] [U] 
[  497.338972][T10986] [U] 
[  497.341766][T10986] [U] 
[  497.347846][T10986] [U] 
[  497.350660][T10986] [U] 
[  497.353342][T11004] random: crng reseeded on system resumption
[  497.353413][T10986] [U] 
[  497.362171][T10986] [U] 
[  497.368886][T10986] [U] 
[  497.371684][T10986] [U] 
[  497.374446][T10986] [U] 
[  497.377211][T10986] [U] 
[  497.449215][T10986] [U] 
[  497.451991][T10986] [U] 
[  497.454722][T10986] [U] 
[  497.457446][T10986] [U] 
[  497.539108][T10986] [U] 
[  498.724720][T11022] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77
[  499.489189][T11027] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78
[  501.001225][T11060] FAULT_INJECTION: forcing a failure.
[  501.001225][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.050579][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.2.896 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  501.050624][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  501.050643][T11060] Call Trace:
[  501.050654][T11060]  <TASK>
[  501.050666][T11060]  dump_stack_lvl+0x16c/0x1f0
[  501.050720][T11060]  should_fail_ex+0x512/0x640
[  501.050772][T11060]  _copy_from_iter+0x29f/0x16f0
[  501.050828][T11060]  ? __alloc_skb+0x200/0x380
[  501.050871][T11060]  ? __pfx__copy_from_iter+0x10/0x10
[  501.050922][T11060]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  501.050968][T11060]  netlink_sendmsg+0x829/0xdd0
[  501.051008][T11060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.051067][T11060]  ____sys_sendmsg+0xa95/0xc70
[  501.051104][T11060]  ? copy_msghdr_from_user+0x10a/0x160
[  501.051149][T11060]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.051203][T11060]  ___sys_sendmsg+0x134/0x1d0
[  501.051254][T11060]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.051298][T11060]  ? __lock_acquire+0x622/0x1c90
[  501.051392][T11060]  __sys_sendmsg+0x16d/0x220
[  501.051443][T11060]  ? __pfx___sys_sendmsg+0x10/0x10
[  501.051518][T11060]  do_syscall_64+0xcd/0x490
[  501.051570][T11060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.051602][T11060] RIP: 0033:0x7ff101f8e929
[  501.051628][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.051659][T11060] RSP: 002b:00007ff0ffdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.051687][T11060] RAX: ffffffffffffffda RBX: 00007ff1021b6080 RCX: 00007ff101f8e929
[  501.051708][T11060] RDX: 0000000004008000 RSI: 0000200000000980 RDI: 0000000000000003
[  501.051728][T11060] RBP: 00007ff0ffdd5090 R08: 0000000000000000 R09: 0000000000000000
[  501.051747][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.051766][T11060] R13: 0000000000000001 R14: 00007ff1021b6080 R15: 00007ffdc4ccaa48
[  501.051808][T11060]  </TASK>
[  501.546070][T11059] kafs: addr_prefs: Invalid Command
[  501.634346][T11068] random: crng reseeded on system resumption
[  501.677276][T11070] usb usb36: usbfs: process 11070 (syz.5.900) did not claim interface 0 before use
[  504.164922][T11088] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  504.175325][T11088] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  504.207802][T11088] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  504.217759][T11088] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  505.710455][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  506.192672][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  506.270184][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  506.270203][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  507.022757][T11119] random: crng reseeded on system resumption
[  507.137611][T11123] usb usb2: usbfs: process 11123 (syz.5.911) did not claim interface 1 before use
[  507.213415][T11125] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  507.444194][T11130] bridge0: port 3(bond0) entered blocking state
[  507.465353][T11130] bridge0: port 3(bond0) entered disabled state
[  507.506742][T11130] bond0: entered allmulticast mode
[  507.594611][T11130] bond_slave_0: entered allmulticast mode
[  507.623387][T11130] bond_slave_1: entered allmulticast mode
[  507.666801][T11130] bond0: entered promiscuous mode
[  507.684849][T11130] bond_slave_0: entered promiscuous mode
[  507.697675][T11126] FAULT_INJECTION: forcing a failure.
[  507.697675][T11126] name failslab, interval 1, probability 0, space 0, times 0
[  507.717020][T11130] bond_slave_1: entered promiscuous mode
[  507.738693][T11130] bridge0: port 3(bond0) entered blocking state
[  507.745498][T11130] bridge0: port 3(bond0) entered forwarding state
[  507.915647][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.4.910 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  507.915696][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.915717][T11126] Call Trace:
[  507.915728][T11126]  <TASK>
[  507.915741][T11126]  dump_stack_lvl+0x16c/0x1f0
[  507.915799][T11126]  should_fail_ex+0x512/0x640
[  507.915846][T11126]  ? __kmalloc_noprof+0xbf/0x510
[  507.915899][T11126]  ? realloc_user_queue+0x270/0x310
[  507.915932][T11126]  should_failslab+0xc2/0x120
[  507.915964][T11126]  __kmalloc_noprof+0xd2/0x510
[  507.916025][T11126]  realloc_user_queue+0x270/0x310
[  507.916072][T11126]  ? __pfx_snd_timer_user_open+0x10/0x10
[  507.916110][T11126]  snd_timer_user_open+0xfc/0x180
[  507.916147][T11126]  snd_open+0x201/0x450
[  507.916201][T11126]  ? __pfx_snd_open+0x10/0x10
[  507.916254][T11126]  chrdev_open+0x231/0x6a0
[  507.916308][T11126]  ? __pfx_apparmor_file_open+0x10/0x10
[  507.916352][T11126]  ? __pfx_chrdev_open+0x10/0x10
[  507.916409][T11126]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  507.916464][T11126]  do_dentry_open+0x744/0x1c10
[  507.916516][T11126]  ? __pfx_chrdev_open+0x10/0x10
[  507.916578][T11126]  vfs_open+0x82/0x3f0
[  507.916620][T11126]  path_openat+0x1de4/0x2cb0
[  507.916682][T11126]  ? __pfx_path_openat+0x10/0x10
[  507.916734][T11126]  ? __lock_acquire+0xb8a/0x1c90
[  507.916787][T11126]  do_filp_open+0x20b/0x470
[  507.916838][T11126]  ? __pfx_do_filp_open+0x10/0x10
[  507.916915][T11126]  ? alloc_fd+0x471/0x7d0
[  507.916971][T11126]  do_sys_openat2+0x11b/0x1d0
[  507.917005][T11126]  ? __pfx_do_sys_openat2+0x10/0x10
[  507.917058][T11126]  __x64_sys_openat+0x174/0x210
[  507.917106][T11126]  ? __pfx___x64_sys_openat+0x10/0x10
[  507.917163][T11126]  do_syscall_64+0xcd/0x490
[  507.917220][T11126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.917255][T11126] RIP: 0033:0x7f17d4b8e929
[  507.917283][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.917318][T11126] RSP: 002b:00007f17d29f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  507.917350][T11126] RAX: ffffffffffffffda RBX: 00007f17d4db6080 RCX: 00007f17d4b8e929
[  507.917373][T11126] RDX: 0000000000101440 RSI: 0000200000001cc0 RDI: ffffffffffffff9c
[  507.917396][T11126] RBP: 00007f17d4c10ca1 R08: 0000000000000000 R09: 0000000000000000
[  507.917416][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.917437][T11126] R13: 0000000000000000 R14: 00007f17d4db6080 R15: 00007fff0ba94da8
[  507.917479][T11126]  </TASK>
[  507.990520][T11133] Restarting kernel threads ...
[  508.210601][T11133] Done restarting kernel threads.
[  508.345226][T11139] usb usb2: usbfs: process 11139 (syz.2.914) did not claim interface 1 before use
[  508.579737][T11143] : Can't lookup blockdev
[  510.124862][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  510.134861][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  510.148457][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  510.159676][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  510.167656][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  510.310640][T11161] random: crng reseeded on system resumption
[  511.100051][T11156] chnl_net:caif_netlink_parms(): no params data found
[  511.319303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  511.325705][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  511.810839][T11156] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.838970][T11156] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.847203][T11156] bridge_slave_0: entered allmulticast mode
[  511.879302][T11156] bridge_slave_0: entered promiscuous mode
[  511.960019][T11156] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.967801][T11156] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.975890][T11156] bridge_slave_1: entered allmulticast mode
[  511.985319][T11156] bridge_slave_1: entered promiscuous mode
[  512.036079][T11156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.053131][T11156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.268977][ T5861] Bluetooth: hci2: command tx timeout
[  512.366222][T11156] team0: Port device team_slave_0 added
[  512.456770][T11156] team0: Port device team_slave_1 added
[  512.529493][T11195] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  512.549138][T11195] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  512.555274][T11195] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  512.581873][T11195] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  512.639675][T11195] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  512.645710][T11195] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  512.769350][T11195] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  513.019851][T11156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.026895][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.098978][T11156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.123332][T11156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.140072][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.140248][T11156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.313922][T11156] hsr_slave_0: entered promiscuous mode
[  513.321924][T11156] hsr_slave_1: entered promiscuous mode
[  513.322525][T11156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  513.322599][T11156] Cannot create hsr debugfs directory
[  514.044033][T11156] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  514.092223][T11156] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  514.127026][T11156] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  514.144607][T11156] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  514.589448][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  514.595867][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  514.596319][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout
[  514.602471][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  514.668989][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  514.794243][T11156] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.093096][T11156] 8021q: adding VLAN 0 to HW filter on device team0
[  515.396441][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.403704][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.616586][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.623867][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.759027][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  516.837527][T11156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.002311][T11156] veth0_vlan: entered promiscuous mode
[  518.123701][T11156] veth1_vlan: entered promiscuous mode
[  518.247941][T11156] veth0_macvtap: entered promiscuous mode
[  518.287389][T11156] veth1_macvtap: entered promiscuous mode
[  518.377496][T11156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.433476][T11156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.540141][T11156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.588894][T11156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.633277][T11156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.665395][T11156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.830654][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  519.117167][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.152814][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.242395][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.252425][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.501806][T11286] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  519.509610][T11286] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  519.647783][T11286] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  519.658155][T11286] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  519.666090][T11286] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  521.141149][   T30] audit: type=1800 audit(6047702984.619:60): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.938" name="version" dev="configfs" ino=26802 res=0 errno=0
[  521.173139][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  521.551829][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  521.710053][ T5860] Bluetooth: hci2: command 0x040f tx timeout
[  521.716247][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  521.722350][T11229] Bluetooth: hci4: command 0x0c1a tx timeout
[  523.754441][T11342] random: crng reseeded on system resumption
[  523.789948][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  524.352833][T11348] random: crng reseeded on system resumption
[  525.797769][T11362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  525.823597][T11362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  525.833498][T11362] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  525.843618][T11362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  525.854994][T11362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  527.559173][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  527.869937][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  527.877198][T11229] Bluetooth: hci3: command 0x040f tx timeout
[  527.883511][ T5860] Bluetooth: hci4: command 0x0c1a tx timeout
[  527.883558][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  528.758499][T11389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  528.784217][T11389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  528.867612][T11389] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  528.881905][T11389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  528.896903][T11389] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  530.109624][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  530.803523][   T30] audit: type=1807 audit(6047702994.279:61): UNKNOWN=msdos res=0
[  530.809904][T11410] ima: policy update failed
[  530.829010][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  530.835276][   T30] audit: type=1802 audit(6047702994.279:62): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.957" res=0 errno=0
[  530.898351][   T30] audit: type=1802 audit(6047702994.289:63): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.957" res=0 errno=0
[  530.909303][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  530.922287][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  530.928392][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  531.908574][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  531.923031][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  531.931357][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  531.958737][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  531.970836][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  532.461209][T11437] chnl_net:caif_netlink_parms(): no params data found
[  532.803704][T11437] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.815789][T11437] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.824938][T11437] bridge_slave_0: entered allmulticast mode
[  532.839023][T11437] bridge_slave_0: entered promiscuous mode
[  532.852523][T11437] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.859945][T11437] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.869771][T11437] bridge_slave_1: entered allmulticast mode
[  532.878216][T11437] bridge_slave_1: entered promiscuous mode
[  533.145260][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.173043][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.335226][T11437] team0: Port device team_slave_0 added
[  533.387890][T11437] team0: Port device team_slave_1 added
[  533.675271][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.696268][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.793515][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.811092][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.818395][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.844984][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.971543][T11437] hsr_slave_0: entered promiscuous mode
[  534.030060][ T5861] Bluetooth: hci5: command tx timeout
[  534.050841][T11437] hsr_slave_1: entered promiscuous mode
[  534.059685][T11437] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  534.070159][T11437] Cannot create hsr debugfs directory
[  534.681063][T11437] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  534.704396][T11437] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  534.743173][T11437] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  534.779938][T11437] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  535.024168][T11437] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.085104][T11437] 8021q: adding VLAN 0 to HW filter on device team0
[  535.141140][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.148401][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.177437][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.184773][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.673959][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.111506][ T5861] Bluetooth: hci5: command tx timeout
[  536.327328][T11437] veth0_vlan: entered promiscuous mode
[  536.349956][T11437] veth1_vlan: entered promiscuous mode
[  536.420688][T11437] veth0_macvtap: entered promiscuous mode
[  536.472051][T11437] veth1_macvtap: entered promiscuous mode
[  536.541817][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.555073][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.572335][T11437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.583110][T11437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.625219][T11437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.654623][T11437] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.821140][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  536.853152][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  536.871133][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  536.897741][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  536.906267][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  537.058768][  T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.066858][  T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.164606][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.183670][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.598107][T11484] chnl_net:caif_netlink_parms(): no params data found
[  537.937240][T11484] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.966660][T11484] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.974900][T11484] bridge_slave_0: entered allmulticast mode
[  537.992322][T11484] bridge_slave_0: entered promiscuous mode
[  538.003066][T11484] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.018640][T11484] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.027567][T11484] bridge_slave_1: entered allmulticast mode
[  538.084782][T11484] bridge_slave_1: entered promiscuous mode
[  538.189703][ T5861] Bluetooth: hci5: command tx timeout
[  538.989718][ T5861] Bluetooth: hci6: command tx timeout
[  539.100713][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.117448][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.386033][T11484] team0: Port device team_slave_0 added
[  539.440348][T11484] team0: Port device team_slave_1 added
[  539.697242][T11484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.704534][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.731680][T11484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.757350][T11484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.794681][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.918948][T11484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.270259][ T5861] Bluetooth: hci5: command tx timeout
[  540.378737][T11484] hsr_slave_0: entered promiscuous mode
[  540.394134][T11484] hsr_slave_1: entered promiscuous mode
[  540.426025][T11484] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  540.444843][T11484] Cannot create hsr debugfs directory
[  541.069790][ T5861] Bluetooth: hci6: command tx timeout
[  541.683946][T11484] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  541.703797][T11484] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  541.761238][T11484] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  541.791895][T11484] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  542.264063][T11484] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.299899][T11484] 8021q: adding VLAN 0 to HW filter on device team0
[  542.326323][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.333619][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.380639][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.387969][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.877987][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.150183][ T5861] Bluetooth: hci6: command tx timeout
[  543.881382][T11484] veth0_vlan: entered promiscuous mode
[  543.906395][T11484] veth1_vlan: entered promiscuous mode
[  544.064263][T11484] veth0_macvtap: entered promiscuous mode
[  544.091057][T11484] veth1_macvtap: entered promiscuous mode
[  544.121200][T11484] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.182054][T11484] batman_adv: batadv0: Interface activated: batadv_slave_1
[  544.222279][T11484] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.236483][T11484] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.257017][T11484] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.282514][T11484] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.551099][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.564473][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.666550][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.736292][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.195301][T11574] rnbd_client L202: map_device: Unknown parameter or missing value 'ÞÅ'
[  545.230586][ T5861] Bluetooth: hci6: command tx timeout
[  548.906951][T11612] ovs_ÿþ: entered promiscuous mode
[  550.334905][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  550.347052][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  550.357474][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  550.365951][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  550.376665][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  551.709227][T11646] FAULT_INJECTION: forcing a failure.
[  551.709227][T11646] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  551.709310][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.2.998 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  551.709347][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.709366][T11646] Call Trace:
[  551.709375][T11646]  <TASK>
[  551.709387][T11646]  dump_stack_lvl+0x16c/0x1f0
[  551.709438][T11646]  should_fail_ex+0x512/0x640
[  551.709489][T11646]  _copy_to_user+0x32/0xd0
[  551.709540][T11646]  simple_read_from_buffer+0xcb/0x170
[  551.709583][T11646]  proc_fail_nth_read+0x197/0x270
[  551.709624][T11646]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.709665][T11646]  ? rw_verify_area+0xcf/0x680
[  551.709704][T11646]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.709735][T11646]  vfs_read+0x1e4/0xc60
[  551.709771][T11646]  ? __pfx___mutex_lock+0x10/0x10
[  551.709806][T11646]  ? __pfx_vfs_read+0x10/0x10
[  551.709847][T11646]  ? __fget_files+0x20e/0x3c0
[  551.709888][T11646]  ksys_read+0x12a/0x250
[  551.709919][T11646]  ? __pfx_ksys_read+0x10/0x10
[  551.709960][T11646]  do_syscall_64+0xcd/0x490
[  551.709997][T11646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.710021][T11646] RIP: 0033:0x7ff101f8d33c
[  551.710039][T11646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  551.710062][T11646] RSP: 002b:00007ff0ffdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  551.710083][T11646] RAX: ffffffffffffffda RBX: 00007ff1021b5fa0 RCX: 00007ff101f8d33c
[  551.710098][T11646] RDX: 000000000000000f RSI: 00007ff0ffdf60a0 RDI: 0000000000000005
[  551.710112][T11646] RBP: 00007ff0ffdf6090 R08: 0000000000000000 R09: 0000000000000000
[  551.710136][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.710150][T11646] R13: 0000000000000000 R14: 00007ff1021b5fa0 R15: 00007ffdc4ccaa48
[  551.710179][T11646]  </TASK>
[  551.823548][T11650] Invalid ELF header magic: != ELF
[  551.841554][T11629] chnl_net:caif_netlink_parms(): no params data found
[  552.432348][ T5861] Bluetooth: hci7: command tx timeout
[  552.454801][T11655] FAULT_INJECTION: forcing a failure.
[  552.454801][T11655] name failslab, interval 1, probability 0, space 0, times 0
[  552.454849][T11655] CPU: 0 UID: 0 PID: 11655 Comm: syz.2.999 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  552.454891][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.454912][T11655] Call Trace:
[  552.454923][T11655]  <TASK>
[  552.454935][T11655]  dump_stack_lvl+0x16c/0x1f0
[  552.454991][T11655]  should_fail_ex+0x512/0x640
[  552.455037][T11655]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  552.455093][T11655]  should_failslab+0xc2/0x120
[  552.455126][T11655]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  552.455179][T11655]  ? vm_area_alloc+0x1f/0x160
[  552.455231][T11655]  vm_area_alloc+0x1f/0x160
[  552.455274][T11655]  create_init_stack_vma+0x29/0x700
[  552.455343][T11655]  alloc_bprm+0x420/0x6f0
[  552.455400][T11655]  do_execveat_common.isra.0+0x1ce/0x610
[  552.455456][T11655]  __x64_sys_execve+0x8e/0xb0
[  552.455506][T11655]  do_syscall_64+0xcd/0x490
[  552.455561][T11655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.455595][T11655] RIP: 0033:0x7ff101f8e929
[  552.455622][T11655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.455655][T11655] RSP: 002b:00007ff0ffdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  552.455686][T11655] RAX: ffffffffffffffda RBX: 00007ff1021b6080 RCX: 00007ff101f8e929
[  552.455709][T11655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  552.455731][T11655] RBP: 00007ff102010ca1 R08: 0000000000000000 R09: 0000000000000000
[  552.455752][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  552.455773][T11655] R13: 0000000000000000 R14: 00007ff1021b6080 R15: 00007ffdc4ccaa48
[  552.455817][T11655]  </TASK>
[  552.775408][T11629] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.775602][T11629] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.775850][T11629] bridge_slave_0: entered allmulticast mode
[  552.845277][T11629] bridge_slave_0: entered promiscuous mode
[  552.858017][T11629] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.858140][T11629] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.858348][T11629] bridge_slave_1: entered allmulticast mode
[  552.879273][T11629] bridge_slave_1: entered promiscuous mode
[  552.918190][T11660] FAULT_INJECTION: forcing a failure.
[  552.918190][T11660] name failslab, interval 1, probability 0, space 0, times 0
[  552.918227][T11660] CPU: 1 UID: 0 PID: 11660 Comm: syz.7.1000 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  552.918258][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.918273][T11660] Call Trace:
[  552.918280][T11660]  <TASK>
[  552.918289][T11660]  dump_stack_lvl+0x16c/0x1f0
[  552.918331][T11660]  should_fail_ex+0x512/0x640
[  552.918366][T11660]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  552.918406][T11660]  should_failslab+0xc2/0x120
[  552.918429][T11660]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  552.918465][T11660]  ? security_file_alloc+0x34/0x2b0
[  552.918502][T11660]  security_file_alloc+0x34/0x2b0
[  552.918533][T11660]  init_file+0x93/0x4c0
[  552.918558][T11660]  alloc_empty_file+0x73/0x1e0
[  552.918583][T11660]  alloc_file_pseudo+0x13a/0x230
[  552.918610][T11660]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  552.918639][T11660]  ? do_raw_spin_unlock+0x172/0x230
[  552.918665][T11660]  __anon_inode_getfile+0xe8/0x280
[  552.918706][T11660]  anon_inode_getfile_fmode+0x37/0xa0
[  552.918742][T11660]  do_signalfd4+0x206/0x430
[  552.918779][T11660]  __x64_sys_signalfd+0x120/0x1a0
[  552.918826][T11660]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  552.918876][T11660]  do_syscall_64+0xcd/0x490
[  552.918915][T11660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.918939][T11660] RIP: 0033:0x7f5363d8e929
[  552.918956][T11660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.918980][T11660] RSP: 002b:00007f5364bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  552.919001][T11660] RAX: ffffffffffffffda RBX: 00007f5363fb6160 RCX: 00007f5363d8e929
[  552.919017][T11660] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  552.919031][T11660] RBP: 00007f5363e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  552.919052][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  552.919066][T11660] R13: 0000000000000000 R14: 00007f5363fb6160 R15: 00007ffc8eed7ab8
[  552.919095][T11660]  </TASK>
[  553.282226][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.299499][T11668] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79
[  553.370717][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.786914][T11629] team0: Port device team_slave_0 added
[  553.818106][T11669] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80
[  553.834857][T11629] team0: Port device team_slave_1 added
[  554.436817][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.436837][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.436886][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.438572][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.438588][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  554.438634][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.467645][T11678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81
[  554.531420][ T5861] Bluetooth: hci7: command tx timeout
[  554.936593][T11629] hsr_slave_0: entered promiscuous mode
[  554.937768][T11629] hsr_slave_1: entered promiscuous mode
[  554.938575][T11629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  554.938603][T11629] Cannot create hsr debugfs directory
[  555.038239][T11681] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82
[  555.988623][T11629] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  556.050057][T11629] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  556.082180][T11629] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  556.115183][T11629] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  556.458380][T11707] random: crng reseeded on system resumption
[  556.599080][ T5861] Bluetooth: hci7: command tx timeout
[  557.277039][T11629] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.447777][T11629] 8021q: adding VLAN 0 to HW filter on device team0
[  557.497025][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.504257][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.562130][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.569348][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.506118][T11718] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  558.522152][T11718] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  558.556022][T11718] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  558.615807][T11718] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  558.646845][T11718] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  558.664940][T11718] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  558.672697][ T5861] Bluetooth: hci7: command tx timeout
[  558.713314][T11718] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  558.863119][T11718] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  559.000825][T11718] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  559.007477][T11718] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  559.119773][T11629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.132309][T11718] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  559.260645][T11718] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  559.303663][T11718] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  559.440337][T11718] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  559.469927][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  560.051946][T11733] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  560.059783][T11733] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  560.069377][T11733] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  560.079185][T11733] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  560.088634][T11733] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  560.100439][T11733] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  560.106799][T11733] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  560.159102][T11733] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  560.391947][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  561.377678][T11629] veth0_vlan: entered promiscuous mode
[  561.524835][T11629] veth1_vlan: entered promiscuous mode
[  561.667188][T11629] veth0_macvtap: entered promiscuous mode
[  561.804634][T11629] veth1_macvtap: entered promiscuous mode
[  561.894506][T11629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.944050][T11629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.015014][T11629] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.026929][T11629] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.037607][T11629] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.047347][T11629] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.108907][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  562.109149][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout
[  562.115022][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  562.127860][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  562.130212][ T5860] Bluetooth: hci4: command 0x0c1a tx timeout
[  562.135388][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  562.189328][   T51] Bluetooth: hci7: command 0x0c1a tx timeout
[  562.666304][T11748] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  562.702579][T11748] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  562.719422][T11748] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  562.725565][T11748] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  562.750061][T11748] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  562.760185][T11748] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  562.777971][T11748] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  562.787387][T11748] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  562.829236][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  562.901085][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.025916][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.226104][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.236865][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.803633][   T30] audit: type=1807 audit(6047703027.279:64): UNKNOWN=msdos res=0
[  563.815909][T11775] ima: policy update failed
[  563.823770][   T30] audit: type=1802 audit(6047703027.299:65): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.993" res=0 errno=0
[  563.902476][   T30] audit: type=1802 audit(6047703027.329:66): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.993" res=0 errno=0
[  564.211274][T11783] random: crng reseeded on system resumption
[  564.749060][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  564.749083][   T51] Bluetooth: hci4: command 0x0c1a tx timeout
[  564.749134][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  564.840495][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  564.840506][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout
[  564.840558][ T5861] Bluetooth: hci2: command 0x040f tx timeout
[  564.848520][   T51] Bluetooth: hci7: command 0x0c1a tx timeout
[  565.293148][   T30] audit: type=1807 audit(6047703028.769:67): UNKNOWN=msdos res=0
[  565.329205][   T30] audit: type=1802 audit(6047703028.789:68): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.1019" res=0 errno=0
[  565.330841][T11790] ima: policy update failed
[  565.370940][   T30] audit: type=1802 audit(6047703028.849:69): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1019" res=0 errno=0
[  566.816739][T11801] FAULT_INJECTION: forcing a failure.
[  566.816739][T11801] name failslab, interval 1, probability 0, space 0, times 0
[  566.838961][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.2.1022 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  566.839008][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  566.839027][T11801] Call Trace:
[  566.839044][T11801]  <TASK>
[  566.839056][T11801]  dump_stack_lvl+0x16c/0x1f0
[  566.839109][T11801]  should_fail_ex+0x512/0x640
[  566.839155][T11801]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  566.839212][T11801]  should_failslab+0xc2/0x120
[  566.839244][T11801]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  566.839296][T11801]  ? security_file_alloc+0x34/0x2b0
[  566.839347][T11801]  security_file_alloc+0x34/0x2b0
[  566.839392][T11801]  init_file+0x93/0x4c0
[  566.839423][T11801]  alloc_empty_file+0x73/0x1e0
[  566.839460][T11801]  alloc_file_pseudo+0x13a/0x230
[  566.839501][T11801]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  566.839543][T11801]  ? do_raw_spin_unlock+0x172/0x230
[  566.839579][T11801]  __anon_inode_getfile+0xe8/0x280
[  566.839631][T11801]  anon_inode_getfile_fmode+0x37/0xa0
[  566.839679][T11801]  do_signalfd4+0x206/0x430
[  566.839727][T11801]  __x64_sys_signalfd+0x120/0x1a0
[  566.839777][T11801]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  566.839843][T11801]  do_syscall_64+0xcd/0x490
[  566.839904][T11801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.839936][T11801] RIP: 0033:0x7ff101f8e929
[  566.839961][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.839993][T11801] RSP: 002b:00007ff0ffdb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  566.840024][T11801] RAX: ffffffffffffffda RBX: 00007ff1021b6160 RCX: 00007ff101f8e929
[  566.840046][T11801] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  566.840067][T11801] RBP: 00007ff102010ca1 R08: 0000000000000000 R09: 0000000000000000
[  566.840087][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.840107][T11801] R13: 0000000000000000 R14: 00007ff1021b6160 R15: 00007ffdc4ccaa48
[  566.840149][T11801]  </TASK>
[  567.049282][    C0] vkms_vblank_simulate: vblank timer overrun
[  567.133727][   T51] Bluetooth: hci7: command 0x0c1a tx timeout
[  567.140590][ T5861] Bluetooth: hci6: command 0x0c1a tx timeout
[  567.146684][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout
[  570.212413][T11825] random: crng reseeded on system resumption
[  571.660044][T11847] FAULT_INJECTION: forcing a failure.
[  571.660044][T11847] name failslab, interval 1, probability 0, space 0, times 0
[  571.672900][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.8.1031 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  571.672947][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  571.672967][T11847] Call Trace:
[  571.672978][T11847]  <TASK>
[  571.672990][T11847]  dump_stack_lvl+0x16c/0x1f0
[  571.673045][T11847]  should_fail_ex+0x512/0x640
[  571.673098][T11847]  should_failslab+0xc2/0x120
[  571.673133][T11847]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  571.673185][T11847]  ? security_file_alloc+0x34/0x2b0
[  571.673237][T11847]  security_file_alloc+0x34/0x2b0
[  571.673283][T11847]  init_file+0x93/0x4c0
[  571.673317][T11847]  alloc_empty_file+0x73/0x1e0
[  571.673362][T11847]  alloc_file_pseudo+0x13a/0x230
[  571.673403][T11847]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  571.673446][T11847]  ? do_raw_spin_unlock+0x172/0x230
[  571.673485][T11847]  __anon_inode_getfile+0xe8/0x280
[  571.673539][T11847]  anon_inode_getfile_fmode+0x37/0xa0
[  571.673589][T11847]  do_signalfd4+0x206/0x430
[  571.673643][T11847]  __x64_sys_signalfd+0x120/0x1a0
[  571.673691][T11847]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  571.673755][T11847]  do_syscall_64+0xcd/0x490
[  571.673810][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.673845][T11847] RIP: 0033:0x7ff62878e929
[  571.673871][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.673904][T11847] RSP: 002b:00007ff629575038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  571.673935][T11847] RAX: ffffffffffffffda RBX: 00007ff6289b6160 RCX: 00007ff62878e929
[  571.673958][T11847] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  571.673979][T11847] RBP: 00007ff628810ca1 R08: 0000000000000000 R09: 0000000000000000
[  571.673999][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.674020][T11847] R13: 0000000000000000 R14: 00007ff6289b6160 R15: 00007ffc87c9f308
[  571.674063][T11847]  </TASK>
[  571.873397][    C0] vkms_vblank_simulate: vblank timer overrun
[  572.779543][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  572.785949][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  575.467905][T11878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  575.500208][T11878] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  575.506346][T11878] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  575.581175][T11878] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  575.634625][T11878] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  575.687550][T11878] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  575.696564][T11878] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  575.774756][T11878] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  576.509076][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  577.167132][T11909] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83
[  577.468744][T11911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84
[  577.550540][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  577.556844][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  577.559033][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  577.718940][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  577.725225][ T5853] Bluetooth: hci5: command 0x0c1a tx timeout
[  577.731544][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  577.792677][ T5853] Bluetooth: hci7: command 0x0c1a tx timeout
[  579.176814][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  579.194723][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  579.204819][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  579.213778][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  579.228599][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  579.282379][   T30] audit: type=1807 audit(6047703042.739:70): UNKNOWN=msdos res=0
[  579.314234][T11929] ima: policy update failed
[  579.334645][   T30] audit: type=1802 audit(6047703042.739:71): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.1046" res=0 errno=0
[  579.491741][   T30] audit: type=1802 audit(6047703042.809:72): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1046" res=0 errno=0
[  579.731518][T11935] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  579.733166][T11940] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  579.749727][T11940] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  579.757766][T11940] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  579.767456][T11940] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  579.776434][T11940] page dumped because: unmovable page
[  579.782464][T11940] page_owner info is not present (never set?)
[  579.799467][T11935] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  579.842774][T11935] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  579.860076][T11935] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  579.899751][T11935] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  579.931645][T11935] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  579.961702][T11935] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  579.997396][T11935] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  580.021581][T11935] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  580.069710][T11935] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  580.155854][T11935] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  580.274014][T11942] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  580.690329][T11954] random: crng reseeded on system resumption
[  580.868202][T11932] chnl_net:caif_netlink_parms(): no params data found
[  580.876987][T11958] FAULT_INJECTION: forcing a failure.
[  580.876987][T11958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  580.920151][T11958] CPU: 1 UID: 0 PID: 11958 Comm: syz.9.1052 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  580.920197][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  580.920216][T11958] Call Trace:
[  580.920227][T11958]  <TASK>
[  580.920239][T11958]  dump_stack_lvl+0x16c/0x1f0
[  580.920291][T11958]  should_fail_ex+0x512/0x640
[  580.920343][T11958]  _copy_to_user+0x32/0xd0
[  580.920398][T11958]  simple_read_from_buffer+0xcb/0x170
[  580.920445][T11958]  proc_fail_nth_read+0x197/0x270
[  580.920486][T11958]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  580.920529][T11958]  ? rw_verify_area+0xcf/0x680
[  580.920571][T11958]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  580.920610][T11958]  vfs_read+0x1e4/0xc60
[  580.920662][T11958]  ? __pfx___mutex_lock+0x10/0x10
[  580.920710][T11958]  ? __pfx_vfs_read+0x10/0x10
[  580.920778][T11958]  ? __fget_files+0x20e/0x3c0
[  580.920839][T11958]  ksys_read+0x12a/0x250
[  580.920884][T11958]  ? __pfx_ksys_read+0x10/0x10
[  580.920942][T11958]  do_syscall_64+0xcd/0x490
[  580.920997][T11958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.921030][T11958] RIP: 0033:0x7f586eb8d33c
[  580.921055][T11958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  580.921087][T11958] RSP: 002b:00007f586f91b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  580.921117][T11958] RAX: ffffffffffffffda RBX: 00007f586edb5fa0 RCX: 00007f586eb8d33c
[  580.921139][T11958] RDX: 000000000000000f RSI: 00007f586f91b0a0 RDI: 0000000000000003
[  580.921159][T11958] RBP: 00007f586f91b090 R08: 0000000000000000 R09: 0000000000000000
[  580.921179][T11958] R10: fffffffffffffffc R11: 0000000000000246 R12: 0000000000000001
[  580.921200][T11958] R13: 0000000000000001 R14: 00007f586edb5fa0 R15: 00007ffc8fde3bd8
[  580.921243][T11958]  </TASK>
[  581.469095][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  581.521779][T11962] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85
[  581.868905][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  581.875024][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  581.881205][   T51] Bluetooth: hci3: command 0x040f tx timeout
[  581.949319][ T5853] Bluetooth: hci5: command 0x0c1a tx timeout
[  581.956120][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  582.029005][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  582.035939][   T51] Bluetooth: hci7: command 0x0c1a tx timeout
[  582.036022][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  582.072101][T11932] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.086106][T11932] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.097784][T11932] bridge_slave_0: entered allmulticast mode
[  582.115127][T11966] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86
[  582.129784][T11932] bridge_slave_0: entered promiscuous mode
[  582.160516][T11932] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.167714][T11932] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.216578][T11932] bridge_slave_1: entered allmulticast mode
[  582.230513][T11932] bridge_slave_1: entered promiscuous mode
[  582.704189][T11972] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1055'.
[  582.767939][T11932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.821686][T11932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.210628][T11932] team0: Port device team_slave_0 added
[  583.464110][T11932] team0: Port device team_slave_1 added
[  584.043519][T11932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.095480][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.134098][T11932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.148944][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  584.170978][T11932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.178003][T11932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  584.239873][T11932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.407102][T11932] hsr_slave_0: entered promiscuous mode
[  584.432577][T11932] hsr_slave_1: entered promiscuous mode
[  584.449128][T11932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  584.466237][T11932] Cannot create hsr debugfs directory
[  585.186879][T12005] FAULT_INJECTION: forcing a failure.
[  585.186879][T12005] name failslab, interval 1, probability 0, space 0, times 0
[  585.199844][T12005] CPU: 1 UID: 0 PID: 12005 Comm: syz.8.1061 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  585.199899][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  585.199920][T12005] Call Trace:
[  585.199932][T12005]  <TASK>
[  585.199944][T12005]  dump_stack_lvl+0x16c/0x1f0
[  585.200000][T12005]  should_fail_ex+0x512/0x640
[  585.200048][T12005]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  585.200111][T12005]  should_failslab+0xc2/0x120
[  585.200145][T12005]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  585.200196][T12005]  ? d_instantiate+0x77/0x90
[  585.200225][T12005]  ? alloc_empty_file+0x55/0x1e0
[  585.200269][T12005]  alloc_empty_file+0x55/0x1e0
[  585.200307][T12005]  alloc_file_pseudo+0x13a/0x230
[  585.200346][T12005]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  585.200388][T12005]  ? do_raw_spin_unlock+0x172/0x230
[  585.200426][T12005]  __anon_inode_getfile+0xe8/0x280
[  585.200478][T12005]  anon_inode_getfile_fmode+0x37/0xa0
[  585.200531][T12005]  do_signalfd4+0x206/0x430
[  585.200583][T12005]  __x64_sys_signalfd+0x120/0x1a0
[  585.200633][T12005]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  585.200696][T12005]  do_syscall_64+0xcd/0x490
[  585.200751][T12005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.200786][T12005] RIP: 0033:0x7ff62878e929
[  585.200812][T12005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  585.200846][T12005] RSP: 002b:00007ff629596038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  585.200877][T12005] RAX: ffffffffffffffda RBX: 00007ff6289b6080 RCX: 00007ff62878e929
[  585.200898][T12005] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  585.200918][T12005] RBP: 00007ff628810ca1 R08: 0000000000000000 R09: 0000000000000000
[  585.200937][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  585.200956][T12005] R13: 0000000000000000 R14: 00007ff6289b6080 R15: 00007ffc87c9f308
[  585.200997][T12005]  </TASK>
[  585.417125][T11994] ima: policy update failed
[  585.499239][   T30] audit: type=1802 audit(6047703048.929:73): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1060" res=0 errno=0
[  586.189610][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  586.325257][T12018] random: crng reseeded on system resumption
[  588.270410][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  588.633070][T11932] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  588.680830][T11932] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  588.726222][T11932] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  588.773199][T11932] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  589.547269][T11932] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.772201][T11932] 8021q: adding VLAN 0 to HW filter on device team0
[  589.780198][T12064] FAULT_INJECTION: forcing a failure.
[  589.780198][T12064] name fail_futex, interval 1, probability 0, space 0, times 0
[  589.935528][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.942766][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.989933][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.2.1068 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  589.989978][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  589.989996][T12064] Call Trace:
[  589.990006][T12064]  <TASK>
[  589.990018][T12064]  dump_stack_lvl+0x16c/0x1f0
[  589.990071][T12064]  should_fail_ex+0x512/0x640
[  589.990125][T12064]  get_futex_key+0x1d0/0x1540
[  589.990167][T12064]  ? __pfx_get_futex_key+0x10/0x10
[  589.990206][T12064]  ? __pfx___schedule+0x10/0x10
[  589.990246][T12064]  ? do_raw_spin_unlock+0x172/0x230
[  589.990277][T12064]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  589.990327][T12064]  futex_wait_setup+0x84/0x510
[  589.990385][T12064]  __futex_wait+0x194/0x2f0
[  589.990433][T12064]  ? __pfx___futex_wait+0x10/0x10
[  589.990486][T12064]  ? __pfx_futex_wake_mark+0x10/0x10
[  589.990537][T12064]  ? plist_check_head+0xa3/0x150
[  589.990574][T12064]  ? find_held_lock+0x2b/0x80
[  589.990619][T12064]  futex_wait+0xe8/0x380
[  589.990666][T12064]  ? __pfx_futex_wait+0x10/0x10
[  589.990723][T12064]  ? alloc_file_pseudo+0x1b3/0x230
[  589.990768][T12064]  do_futex+0x229/0x350
[  589.990824][T12064]  ? __pfx_do_futex+0x10/0x10
[  589.990879][T12064]  __x64_sys_futex+0x1e0/0x4c0
[  589.990927][T12064]  ? __pfx___x64_sys_futex+0x10/0x10
[  589.990970][T12064]  ? xfd_validate_state+0x61/0x180
[  589.991011][T12064]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  589.991074][T12064]  do_syscall_64+0xcd/0x490
[  589.991128][T12064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.991162][T12064] RIP: 0033:0x7ff101f8e929
[  589.991188][T12064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.991220][T12064] RSP: 002b:00007ff0ffdb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  589.991252][T12064] RAX: ffffffffffffffda RBX: 00007ff1021b6168 RCX: 00007ff101f8e929
[  589.991275][T12064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff1021b6168
[  589.991296][T12064] RBP: 00007ff1021b6160 R08: 0000000000000000 R09: 0000000000000000
[  589.991317][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff1021b616c
[  589.991338][T12064] R13: 0000000000000000 R14: 00007ffdc4cca960 R15: 00007ffdc4ccaa48
[  589.991382][T12064]  </TASK>
[  590.326629][T11932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  590.337969][T11932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  590.361390][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.368609][ T7493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.371027][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  591.108360][T12080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87
[  591.213414][T11932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.433812][T11932] veth0_vlan: entered promiscuous mode
[  591.524095][T11932] veth1_vlan: entered promiscuous mode
[  591.667482][T11932] veth0_macvtap: entered promiscuous mode
[  591.683840][T11932] veth1_macvtap: entered promiscuous mode
[  591.806385][T11932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.833372][T11932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.903134][T11932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.965339][T11932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.988487][   T30] audit: type=1807 audit(6047703055.459:74): UNKNOWN=msdos res=0
[  591.994585][T11932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.021079][T12085] ima: policy update failed
[  592.029401][T11932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.041511][   T30] audit: type=1802 audit(6047703055.459:75): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.1070" res=0 errno=0
[  592.169198][   T30] audit: type=1802 audit(6047703055.499:76): pid=12085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1070" res=0 errno=0
[  592.304155][T12081] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88
[  592.429136][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  592.871849][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.969012][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.354441][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.395639][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.284523][   T30] audit: type=1807 audit(6047703057.759:77): UNKNOWN=msdos res=0
[  594.297544][T12113] ima: policy update failed
[  594.302820][   T30] audit: type=1802 audit(6047703057.759:78): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1045" res=0 errno=0
[  594.355200][   T30] audit: type=1802 audit(6047703057.819:79): pid=12113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1045" res=0 errno=0
[  594.401660][T12123] random: crng reseeded on system resumption
[  594.708420][T12127] usb usb38: usbfs: process 12127 (syz.2.1074) did not claim interface 0 before use
[  595.731144][T12151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89
[  596.239335][T12145] random: crng reseeded on system resumption
[  597.132644][T12152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90
[  598.153380][T12179] FAULT_INJECTION: forcing a failure.
[  598.153380][T12179] name failslab, interval 1, probability 0, space 0, times 0
[  598.251445][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.3.1079 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  598.251488][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  598.251501][T12179] Call Trace:
[  598.251509][T12179]  <TASK>
[  598.251517][T12179]  dump_stack_lvl+0x16c/0x1f0
[  598.251556][T12179]  should_fail_ex+0x512/0x640
[  598.251591][T12179]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  598.251625][T12179]  should_failslab+0xc2/0x120
[  598.251648][T12179]  __kmalloc_cache_noprof+0x6a/0x3e0
[  598.251679][T12179]  ? snd_card_file_add+0x52/0x330
[  598.251706][T12179]  snd_card_file_add+0x52/0x330
[  598.251733][T12179]  snd_pcm_oss_open+0x1cf/0x1400
[  598.251757][T12179]  ? lockdep_hardirqs_on+0x7c/0x110
[  598.251793][T12179]  ? find_held_lock+0x2b/0x80
[  598.251819][T12179]  ? tomoyo_check_open_permission+0x1d8/0x3c0
[  598.251850][T12179]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  598.251875][T12179]  ? __lock_acquire+0xb8a/0x1c90
[  598.251911][T12179]  ? __lock_acquire+0xb8a/0x1c90
[  598.251958][T12179]  ? do_raw_spin_lock+0x12c/0x2b0
[  598.251998][T12179]  ? soundcore_open+0x35a/0x580
[  598.252035][T12179]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  598.252059][T12179]  soundcore_open+0x409/0x580
[  598.252097][T12179]  ? __pfx_soundcore_open+0x10/0x10
[  598.252131][T12179]  chrdev_open+0x231/0x6a0
[  598.252167][T12179]  ? __pfx_apparmor_file_open+0x10/0x10
[  598.252197][T12179]  ? __pfx_chrdev_open+0x10/0x10
[  598.252235][T12179]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  598.252272][T12179]  do_dentry_open+0x744/0x1c10
[  598.252311][T12179]  ? __pfx_chrdev_open+0x10/0x10
[  598.252357][T12179]  vfs_open+0x82/0x3f0
[  598.252385][T12179]  path_openat+0x1de4/0x2cb0
[  598.252429][T12179]  ? __pfx_path_openat+0x10/0x10
[  598.252464][T12179]  ? __lock_acquire+0xb8a/0x1c90
[  598.252499][T12179]  do_filp_open+0x20b/0x470
[  598.252533][T12179]  ? __pfx_do_filp_open+0x10/0x10
[  598.252587][T12179]  ? alloc_fd+0x471/0x7d0
[  598.252627][T12179]  do_sys_openat2+0x11b/0x1d0
[  598.252652][T12179]  ? __pfx_do_sys_openat2+0x10/0x10
[  598.252689][T12179]  __x64_sys_openat+0x174/0x210
[  598.252716][T12179]  ? __pfx___x64_sys_openat+0x10/0x10
[  598.252754][T12179]  do_syscall_64+0xcd/0x490
[  598.252791][T12179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.252815][T12179] RIP: 0033:0x7f1defb8e929
[  598.252833][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.252856][T12179] RSP: 002b:00007f1df0ac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  598.252885][T12179] RAX: ffffffffffffffda RBX: 00007f1defdb6080 RCX: 00007f1defb8e929
[  598.252900][T12179] RDX: 0000000000020b42 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  598.252914][T12179] RBP: 00007f1defc10ca1 R08: 0000000000000000 R09: 0000000000000000
[  598.252934][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.252947][T12179] R13: 0000000000000000 R14: 00007f1defdb6080 R15: 00007ffc18899658
[  598.252976][T12179]  </TASK>
[  600.563249][T12217] 0x000200000001-0xa29656a63616329 : ""
[  600.609229][T12217] mtd: partition "" is out of reach -- disabled
[  600.745406][T12217] ftl_cs: FTL header not found.
[  604.151109][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1089'.
[  604.350686][T12280] ipvlan1: entered allmulticast mode
[  604.371420][T12280] veth0_vlan: entered allmulticast mode
[  604.450952][T12260] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  604.489239][T12260] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  604.508153][T12260] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  604.516649][T12260] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  604.524730][T12260] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  604.538265][T12260] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  604.544892][T12260] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  604.553448][T12260] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  604.570322][T12260] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  604.699518][T12286] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078005000 pfn:0x78000
[  604.714782][T12286] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  604.751318][T12286] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  604.818950][T12286] page_type: f5(slab)
[  604.823797][T12286] raw: 00fff00000000240 ffff88801b842000 ffffea00015f5410 ffffea000163f410
[  604.841489][T12286] raw: ffff888078005000 0000000000080007 00000000f5000000 0000000000000000
[  604.857843][T12286] head: 00fff00000000240 ffff88801b842000 ffffea00015f5410 ffffea000163f410
[  604.996840][T12286] head: ffff888078005000 0000000000080007 00000000f5000000 0000000000000000
[  605.006764][T12286] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  605.016401][T12286] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  605.026496][T12286] page dumped because: unmovable page
[  605.032137][T12286] page_owner tracks the page as allocated
[  605.038218][T12286] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 105645667035, free_ts 105607247666
[  605.082811][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  605.170402][T12286]  post_alloc_hook+0x1c0/0x230
[  605.205348][T12286]  get_page_from_freelist+0x1321/0x3890
[  605.291432][T12286]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  605.301936][T12286]  alloc_pages_mpol+0x1fb/0x550
[  605.374315][T12286]  new_slab+0x23b/0x330
[  605.445384][T12286]  ___slab_alloc+0xd9c/0x1940
[  605.523430][T12286]  __slab_alloc.constprop.0+0x56/0xb0
[  605.575249][T12286]  __kvmalloc_node_noprof+0x3b1/0x620
[  605.581109][T12286]  page_pool_create_percpu+0x34e/0xc50
[  605.586665][T12286]  nsim_open+0x395/0x9d0
[  605.595426][T12286]  __dev_open+0x2e4/0x7d0
[  605.604441][T12286]  __dev_change_flags+0x55d/0x720
[  605.641138][T12286]  netif_change_flags+0x8d/0x160
[  605.646298][T12286]  do_setlink.constprop.0+0xb53/0x4380
[  605.718098][T12286]  rtnl_newlink+0x1446/0x2000
[  605.723437][T12286]  rtnetlink_rcv_msg+0x95e/0xe90
[  605.728552][T12286] page last free pid 5219 tgid 5219 stack trace:
[  605.735119][T12286]  __free_frozen_pages+0x7fe/0x1180
[  605.759138][T12286]  __put_partials+0x16d/0x1c0
[  605.763957][T12286]  qlist_free_all+0x4d/0x120
[  605.768638][T12286]  kasan_quarantine_reduce+0x195/0x1e0
[  605.774492][T12286]  __kasan_slab_alloc+0x69/0x90
[  605.779531][T12286]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  605.785077][T12286]  getname_flags.part.0+0x4c/0x550
[  605.790630][T12286]  __x64_sys_unlink+0xb0/0x110
[  605.795502][T12286]  do_syscall_64+0xcd/0x490
[  605.828725][T12286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.515003][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  606.521165][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  606.592608][ T5853] Bluetooth: hci8: command 0x041b tx timeout
[  606.598729][ T5853] Bluetooth: hci7: command 0x0c1a tx timeout
[  606.606310][   T51] Bluetooth: hci6: command 0x0c1a tx timeout
[  606.612439][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  606.619303][   T51] Bluetooth: hci2: command 0x040f tx timeout
[  606.625345][   T51] Bluetooth: hci3: command 0x040f tx timeout
[  608.754874][T12356] FAULT_INJECTION: forcing a failure.
[  608.754874][T12356] name failslab, interval 1, probability 0, space 0, times 0
[  608.769124][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.3.1099 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  608.769172][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  608.769193][T12356] Call Trace:
[  608.769203][T12356]  <TASK>
[  608.769216][T12356]  dump_stack_lvl+0x16c/0x1f0
[  608.769271][T12356]  should_fail_ex+0x512/0x640
[  608.769321][T12356]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  608.769378][T12356]  should_failslab+0xc2/0x120
[  608.769409][T12356]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  608.769462][T12356]  ? security_file_alloc+0x34/0x2b0
[  608.769514][T12356]  security_file_alloc+0x34/0x2b0
[  608.769560][T12356]  init_file+0x93/0x4c0
[  608.769594][T12356]  alloc_empty_file+0x73/0x1e0
[  608.769632][T12356]  alloc_file_pseudo+0x13a/0x230
[  608.769672][T12356]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  608.769714][T12356]  ? do_raw_spin_unlock+0x172/0x230
[  608.769752][T12356]  __anon_inode_getfile+0xe8/0x280
[  608.769806][T12356]  anon_inode_getfile_fmode+0x37/0xa0
[  608.769857][T12356]  do_signalfd4+0x206/0x430
[  608.769909][T12356]  __x64_sys_signalfd+0x120/0x1a0
[  608.769960][T12356]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  608.770033][T12356]  do_syscall_64+0xcd/0x490
[  608.770089][T12356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.770124][T12356] RIP: 0033:0x7f1defb8e929
[  608.770151][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.770185][T12356] RSP: 002b:00007f1df0aa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  608.770216][T12356] RAX: ffffffffffffffda RBX: 00007f1defdb6160 RCX: 00007f1defb8e929
[  608.770239][T12356] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  608.770261][T12356] RBP: 00007f1defc10ca1 R08: 0000000000000000 R09: 0000000000000000
[  608.770281][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  608.770302][T12356] R13: 0000000000000000 R14: 00007f1defdb6160 R15: 00007ffc18899658
[  608.770344][T12356]  </TASK>
[  608.978899][    C0] vkms_vblank_simulate: vblank timer overrun
[  610.095443][T12381] random: crng reseeded on system resumption
[  613.590171][T12429] netlink: 208 bytes leftover after parsing attributes in process `syz.9.1109'.
[  615.146813][   T30] audit: type=1807 audit(6047703078.619:80): UNKNOWN=msdos res=0
[  615.174724][   T30] audit: type=1802 audit(6047703078.619:81): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.1113" res=0 errno=0
[  615.234822][T12461] ima: policy update failed
[  615.290967][   T30] audit: type=1802 audit(6047703078.719:82): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1113" res=0 errno=0
[  616.726893][T12497] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91
[  616.810971][T12487] FAULT_INJECTION: forcing a failure.
[  616.810971][T12487] name failslab, interval 1, probability 0, space 0, times 0
[  616.823930][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.8.1116 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  616.823973][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  616.823993][T12487] Call Trace:
[  616.824004][T12487]  <TASK>
[  616.824016][T12487]  dump_stack_lvl+0x16c/0x1f0
[  616.824072][T12487]  should_fail_ex+0x512/0x640
[  616.824122][T12487]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  616.824181][T12487]  should_failslab+0xc2/0x120
[  616.824215][T12487]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  616.824265][T12487]  ? d_instantiate+0x77/0x90
[  616.824295][T12487]  ? alloc_empty_file+0x55/0x1e0
[  616.824337][T12487]  alloc_empty_file+0x55/0x1e0
[  616.824374][T12487]  alloc_file_pseudo+0x13a/0x230
[  616.824425][T12487]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  616.824467][T12487]  ? do_raw_spin_unlock+0x172/0x230
[  616.824507][T12487]  __anon_inode_getfile+0xe8/0x280
[  616.824561][T12487]  anon_inode_getfile_fmode+0x37/0xa0
[  616.824614][T12487]  do_signalfd4+0x206/0x430
[  616.824665][T12487]  __x64_sys_signalfd+0x120/0x1a0
[  616.824715][T12487]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  616.824779][T12487]  do_syscall_64+0xcd/0x490
[  616.824835][T12487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.824870][T12487] RIP: 0033:0x7ff62878e929
[  616.824897][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.824931][T12487] RSP: 002b:00007ff629596038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  616.824962][T12487] RAX: ffffffffffffffda RBX: 00007ff6289b6080 RCX: 00007ff62878e929
[  616.824985][T12487] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  616.825006][T12487] RBP: 00007ff628810ca1 R08: 0000000000000000 R09: 0000000000000000
[  616.825028][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.825049][T12487] R13: 0000000000000000 R14: 00007ff6289b6080 R15: 00007ffc87c9f308
[  616.825092][T12487]  </TASK>
[  618.628519][T12499] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92
[  619.771730][T12531] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93
[  620.695420][T12533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94
[  621.055309][T12530] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  621.071962][T12530] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  621.113511][T12530] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  621.188402][T12530] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  621.202510][T12530] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  621.265367][T12530] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  621.298232][T12530] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  621.345442][T12530] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  621.394859][T12530] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  621.720259][T12561] random: crng reseeded on system resumption
[  621.869551][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  623.148981][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout
[  623.149079][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  623.229131][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  623.235344][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  623.310715][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  623.311290][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout
[  623.396128][ T5861] Bluetooth: hci7: command 0x0c1a tx timeout
[  623.469170][ T5861] Bluetooth: hci8: command 0x041b tx timeout
[  624.108702][T12597] FAULT_INJECTION: forcing a failure.
[  624.108702][T12597] name failslab, interval 1, probability 0, space 0, times 0
[  624.132352][T12597] CPU: 0 UID: 0 PID: 12597 Comm: syz.3.1129 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  624.132399][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  624.132418][T12597] Call Trace:
[  624.132427][T12597]  <TASK>
[  624.132439][T12597]  dump_stack_lvl+0x16c/0x1f0
[  624.132496][T12597]  should_fail_ex+0x512/0x640
[  624.132543][T12597]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  624.132599][T12597]  should_failslab+0xc2/0x120
[  624.132630][T12597]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  624.132696][T12597]  ? d_instantiate+0x77/0x90
[  624.132726][T12597]  ? alloc_empty_file+0x55/0x1e0
[  624.132768][T12597]  alloc_empty_file+0x55/0x1e0
[  624.132804][T12597]  alloc_file_pseudo+0x13a/0x230
[  624.132844][T12597]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  624.132886][T12597]  ? do_raw_spin_unlock+0x172/0x230
[  624.132922][T12597]  __anon_inode_getfile+0xe8/0x280
[  624.132974][T12597]  anon_inode_getfile_fmode+0x37/0xa0
[  624.133024][T12597]  do_signalfd4+0x206/0x430
[  624.133075][T12597]  __x64_sys_signalfd+0x120/0x1a0
[  624.133118][T12597]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  624.133172][T12597]  do_syscall_64+0xcd/0x490
[  624.133213][T12597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.133239][T12597] RIP: 0033:0x7f1defb8e929
[  624.133260][T12597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.133289][T12597] RSP: 002b:00007f1df0ac2038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  624.133314][T12597] RAX: ffffffffffffffda RBX: 00007f1defdb6080 RCX: 00007f1defb8e929
[  624.133331][T12597] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  624.133348][T12597] RBP: 00007f1defc10ca1 R08: 0000000000000000 R09: 0000000000000000
[  624.133366][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  624.133383][T12597] R13: 0000000000000000 R14: 00007f1defdb6080 R15: 00007ffc18899658
[  624.133418][T12597]  </TASK>
[  625.734468][T12636] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95
[  625.768271][T12637] random: crng reseeded on system resumption
[  626.787391][T12638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96
[  631.531960][T12717] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97
[  632.322058][T12720] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98
[  632.869414][T12727] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99
[  633.943004][T12729] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100
[  634.199531][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  634.209297][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  637.896174][T12795] ima: policy update failed
[  637.915724][   T30] audit: type=1807 audit(6047703101.369:83): UNKNOWN=msdos res=0
[  637.939769][   T30] audit: type=1802 audit(6047703101.369:84): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1154" res=0 errno=0
[  637.988938][   T30] audit: type=1802 audit(6047703101.409:85): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1154" res=0 errno=0
[  638.184203][T12800] FAULT_INJECTION: forcing a failure.
[  638.184203][T12800] name failslab, interval 1, probability 0, space 0, times 0
[  638.213878][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.9.1153 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  638.213925][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  638.213945][T12800] Call Trace:
[  638.213956][T12800]  <TASK>
[  638.213967][T12800]  dump_stack_lvl+0x16c/0x1f0
[  638.214022][T12800]  should_fail_ex+0x512/0x640
[  638.214068][T12800]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  638.214124][T12800]  should_failslab+0xc2/0x120
[  638.214157][T12800]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  638.214204][T12800]  ? d_instantiate+0x77/0x90
[  638.214233][T12800]  ? alloc_empty_file+0x55/0x1e0
[  638.214274][T12800]  alloc_empty_file+0x55/0x1e0
[  638.214312][T12800]  alloc_file_pseudo+0x13a/0x230
[  638.214381][T12800]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  638.214422][T12800]  ? do_raw_spin_unlock+0x172/0x230
[  638.214458][T12800]  __anon_inode_getfile+0xe8/0x280
[  638.214510][T12800]  anon_inode_getfile_fmode+0x37/0xa0
[  638.214558][T12800]  do_signalfd4+0x206/0x430
[  638.214607][T12800]  __x64_sys_signalfd+0x120/0x1a0
[  638.214654][T12800]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  638.214714][T12800]  do_syscall_64+0xcd/0x490
[  638.214764][T12800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.214799][T12800] RIP: 0033:0x7f586eb8e929
[  638.214825][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.214858][T12800] RSP: 002b:00007f586c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  638.214890][T12800] RAX: ffffffffffffffda RBX: 00007f586edb6080 RCX: 00007f586eb8e929
[  638.214913][T12800] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  638.214934][T12800] RBP: 00007f586ec10ca1 R08: 0000000000000000 R09: 0000000000000000
[  638.214955][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.214975][T12800] R13: 0000000000000000 R14: 00007f586edb6080 R15: 00007ffc8fde3bd8
[  638.215017][T12800]  </TASK>
[  638.414041][    C0] vkms_vblank_simulate: vblank timer overrun
[  638.900690][   T30] audit: type=1807 audit(6047703102.379:86): UNKNOWN=msdos res=0
[  638.956432][   T30] audit: type=1802 audit(6047703102.399:87): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1156" res=0 errno=0
[  638.990206][T12806] ima: policy update failed
[  639.081850][   T30] audit: type=1802 audit(6047703102.509:88): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1156" res=0 errno=0
[  639.250906][T12820] usb usb36: usbfs: process 12820 (syz.9.1158) did not claim interface 0 before use
[  643.264304][T12868] random: crng reseeded on system resumption
[  644.888868][T12888] FAULT_INJECTION: forcing a failure.
[  644.888868][T12888] name failslab, interval 1, probability 0, space 0, times 0
[  644.930336][T12888] CPU: 1 UID: 0 PID: 12888 Comm: syz.2.1167 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  644.930370][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  644.930384][T12888] Call Trace:
[  644.930392][T12888]  <TASK>
[  644.930400][T12888]  dump_stack_lvl+0x16c/0x1f0
[  644.930441][T12888]  should_fail_ex+0x512/0x640
[  644.930476][T12888]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  644.930517][T12888]  should_failslab+0xc2/0x120
[  644.930540][T12888]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  644.930578][T12888]  ? security_file_alloc+0x34/0x2b0
[  644.930615][T12888]  security_file_alloc+0x34/0x2b0
[  644.930648][T12888]  init_file+0x93/0x4c0
[  644.930671][T12888]  alloc_empty_file+0x73/0x1e0
[  644.930698][T12888]  alloc_file_pseudo+0x13a/0x230
[  644.930726][T12888]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  644.930755][T12888]  ? do_raw_spin_unlock+0x172/0x230
[  644.930781][T12888]  __anon_inode_getfile+0xe8/0x280
[  644.930819][T12888]  anon_inode_getfile_fmode+0x37/0xa0
[  644.930864][T12888]  do_signalfd4+0x206/0x430
[  644.930901][T12888]  __x64_sys_signalfd+0x120/0x1a0
[  644.930936][T12888]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  644.930981][T12888]  do_syscall_64+0xcd/0x490
[  644.931019][T12888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.931043][T12888] RIP: 0033:0x7ff101f8e929
[  644.931062][T12888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  644.931085][T12888] RSP: 002b:00007ff0ffdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  644.931108][T12888] RAX: ffffffffffffffda RBX: 00007ff1021b5fa0 RCX: 00007ff101f8e929
[  644.931123][T12888] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff
[  644.931137][T12888] RBP: 00007ff102010ca1 R08: 0000000000000000 R09: 0000000000000000
[  644.931151][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.931165][T12888] R13: 0000000000000000 R14: 00007ff1021b5fa0 R15: 00007ffdc4ccaa48
[  644.931194][T12888]  </TASK>
[  647.884410][T12936] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101
[  649.027913][T12939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102
[  650.930359][T12967] zswap: compressor  not available
[  651.688692][   T30] audit: type=1807 audit(6047703115.159:89): UNKNOWN=msdos res=0
[  651.714634][T12989] ima: policy update failed
[  651.775267][   T30] audit: type=1802 audit(6047703115.159:90): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.1180" res=0 errno=0
[  651.794334][   T30] audit: type=1802 audit(6047703115.199:91): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1180" res=0 errno=0
[  653.529240][T13005] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  653.538710][T13005] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  653.558273][T13005] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  653.587052][T13005] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  653.599975][T13005] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  653.607646][T13005] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  653.614331][T13005] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  653.623557][T13005] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  653.637499][T13005] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  655.069181][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout
[  655.548977][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout
[  655.629835][ T5861] Bluetooth: hci7: command 0x0c1a tx timeout
[  655.629986][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  655.635958][ T5860] Bluetooth: hci2: command 0x040f tx timeout
[  655.642238][ T5853] Bluetooth: hci3: command 0x040f tx timeout
[  655.648655][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  655.654181][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  655.708983][T13028] Bluetooth: hci8: command 0x041b tx timeout
[  657.723540][T13042] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103
[  658.193997][T13043] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104
[  658.721645][T13048] random: crng reseeded on system resumption
[  658.968393][T13054] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105
[  659.197644][T13056] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106
[  660.759993][T13064] FAULT_INJECTION: forcing a failure.
[  660.759993][T13064] name fail_futex, interval 1, probability 0, space 0, times 0
[  660.779201][T13064] CPU: 0 UID: 0 PID: 13064 Comm: syz.9.1191 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  660.779248][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  660.779267][T13064] Call Trace:
[  660.779278][T13064]  <TASK>
[  660.779290][T13064]  dump_stack_lvl+0x16c/0x1f0
[  660.779346][T13064]  should_fail_ex+0x512/0x640
[  660.779385][T13064]  get_futex_key+0x1d0/0x1540
[  660.779418][T13064]  ? __pfx_get_futex_key+0x10/0x10
[  660.779446][T13064]  ? __pfx___schedule+0x10/0x10
[  660.779479][T13064]  ? trace_pid_list_is_set+0xfb/0x150
[  660.779513][T13064]  futex_wait_setup+0x84/0x510
[  660.779555][T13064]  __futex_wait+0x194/0x2f0
[  660.779591][T13064]  ? __pfx___futex_wait+0x10/0x10
[  660.779630][T13064]  ? __pfx_futex_wake_mark+0x10/0x10
[  660.779669][T13064]  ? plist_check_head+0xa3/0x150
[  660.779704][T13064]  ? find_held_lock+0x2b/0x80
[  660.779738][T13064]  futex_wait+0xe8/0x380
[  660.779773][T13064]  ? __pfx_futex_wait+0x10/0x10
[  660.779815][T13064]  ? alloc_file_pseudo+0x1b3/0x230
[  660.779848][T13064]  do_futex+0x229/0x350
[  660.779878][T13064]  ? __pfx_do_futex+0x10/0x10
[  660.779914][T13064]  __x64_sys_futex+0x1e0/0x4c0
[  660.779947][T13064]  ? __pfx___x64_sys_futex+0x10/0x10
[  660.779977][T13064]  ? xfd_validate_state+0x61/0x180
[  660.780008][T13064]  ? __pfx___x64_sys_signalfd+0x10/0x10
[  660.780052][T13064]  do_syscall_64+0xcd/0x490
[  660.780090][T13064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.780114][T13064] RIP: 0033:0x7f586eb8e929
[  660.780133][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  660.780160][T13064] RSP: 002b:00007f586c9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  660.780182][T13064] RAX: ffffffffffffffda RBX: 00007f586edb6088 RCX: 00007f586eb8e929
[  660.780197][T13064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f586edb6088
[  660.780212][T13064] RBP: 00007f586edb6080 R08: 0000000000000000 R09: 0000000000000000
[  660.780225][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f586edb608c
[  660.780240][T13064] R13: 0000000000000000 R14: 00007ffc8fde3af0 R15: 00007ffc8fde3bd8
[  660.780268][T13064]  </TASK>
[  661.005773][    C0] vkms_vblank_simulate: vblank timer overrun
[  666.124812][T11229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  666.136927][T11229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  666.145735][T11229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  666.161456][T11229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  666.172039][T11229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  666.843207][T13111] chnl_net:caif_netlink_parms(): no params data found
[  667.117414][T13028] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  667.148491][T13028] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  667.164753][T13028] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  667.205951][T13028] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  667.220192][T13028] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  667.840123][T13111] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.862634][T13111] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.921198][T13111] bridge_slave_0: entered allmulticast mode
[  667.984219][T13111] bridge_slave_0: entered promiscuous mode
[  668.022235][T13111] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.039043][T13111] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.046443][T13111] bridge_slave_1: entered allmulticast mode
[  668.081283][T13111] bridge_slave_1: entered promiscuous mode
[  668.224493][T13111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.268985][T13028] Bluetooth: hci9: command tx timeout
[  668.273798][T13111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.492848][T13111] team0: Port device team_slave_0 added
[  668.583610][T13111] team0: Port device team_slave_1 added
[  668.822842][T13111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.830548][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.857239][T13111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.870722][T13111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.879629][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.919821][T13111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.037635][T13111] hsr_slave_0: entered promiscuous mode
[  669.073774][T13111] hsr_slave_1: entered promiscuous mode
[  669.104169][T13111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  669.132562][T13111] Cannot create hsr debugfs directory
[  669.469088][T13028] Bluetooth: hci10: command tx timeout
[  670.202039][T13135] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  670.215875][T13135] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  670.223527][T13135] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  670.239495][T13135] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  670.246158][T13135] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  670.254995][T13135] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  670.261766][T13135] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  670.268275][T13135] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  670.274918][T13135] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  670.289035][T13135] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  670.305071][T13122] chnl_net:caif_netlink_parms(): no params data found
[  670.489470][T13135] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  670.736906][T13135] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  670.905588][T13135] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  670.935915][T13135] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  670.963741][T13135] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  671.077339][T13122] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.086120][T13122] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.095647][T13122] bridge_slave_0: entered allmulticast mode
[  671.105632][T13122] bridge_slave_0: entered promiscuous mode
[  671.199128][T13122] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.217829][T13122] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.228568][T13122] bridge_slave_1: entered allmulticast mode
[  671.240676][T13122] bridge_slave_1: entered promiscuous mode
[  671.879994][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.928686][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.949487][T11229] Bluetooth: hci1: command 0x0c1a tx timeout
[  672.075083][T13122] team0: Port device team_slave_0 added
[  672.099715][T13122] team0: Port device team_slave_1 added
[  672.269371][T11229] Bluetooth: hci4: command 0x0c1a tx timeout
[  672.269471][T13028] Bluetooth: hci0: command 0x0c1a tx timeout
[  672.275499][ T5853] Bluetooth: hci6: command 0x0c1a tx timeout
[  672.281690][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  672.289834][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[  672.293834][ T5861] Bluetooth: hci3: command 0x040f tx timeout
[  672.351820][T13160] Bluetooth: hci9: command 0x040f tx timeout
[  672.361214][ T5860] Bluetooth: hci8: command 0x041b tx timeout
[  672.361228][   T51] Bluetooth: hci7: command 0x0c1a tx timeout
[  672.909126][ T5860] Bluetooth: hci10: command 0x040f tx timeout
[  673.372155][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.383715][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.489464][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.896084][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.932491][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.020870][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.363091][T13122] hsr_slave_0: entered promiscuous mode
[  674.402828][T13122] hsr_slave_1: entered promiscuous mode
[  674.443053][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  674.455326][T13122] Cannot create hsr debugfs directory
[  674.471228][ T5860] Bluetooth: hci9: command 0x040f tx timeout
[  674.992549][ T5860] Bluetooth: hci10: command 0x040f tx timeout
[  675.346272][T13111] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  675.522191][T13111] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  675.563170][T13111] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  675.591807][T13111] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  676.320151][T13122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.509473][ T5860] Bluetooth: hci9: command 0x040f tx timeout
[  676.564701][T13122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.921995][T13122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.069087][ T5860] Bluetooth: hci10: command 0x040f tx timeout
[  677.408310][T13111] 8021q: adding VLAN 0 to HW filter on device bond0
[  677.434016][T13111] 8021q: adding VLAN 0 to HW filter on device team0
[  677.555803][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.563107][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.615056][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.622296][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.698441][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1212'.
[  677.830279][T13219] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  677.861482][T13219] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  677.874388][T13219] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  677.929523][T13219] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  677.945535][T13219] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  677.999915][T13219] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  678.011769][T13219] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  678.018065][T13219] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  678.025050][T13219] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  678.032057][T13219] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  678.039975][T13219] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  678.628385][T13122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  678.941248][T13122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  679.055600][T13122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  679.201662][T13122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  679.240448][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout
[  679.879744][ T5860] Bluetooth: hci4: command 0x0c1a tx timeout
[  679.885864][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout
[  679.959300][T13160] Bluetooth: hci3: command 0x040f tx timeout
[  679.965459][ T5860] Bluetooth: hci2: command 0x040f tx timeout
[  679.965805][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.029374][ T5860] Bluetooth: hci8: command 0x041b tx timeout
[  680.035491][ T5860] Bluetooth: hci7: command 0x0c1a tx timeout
[  680.043532][T13160] Bluetooth: hci6: command 0x0c1a tx timeout
[  680.051282][T13160] Bluetooth: hci5: command 0x0c1a tx timeout
[  680.113504][   T51] Bluetooth: hci10: command 0x040f tx timeout
[  680.113566][ T5860] Bluetooth: hci9: command 0x040f tx timeout
[  680.359268][T10953] svc: failed to register nfsdv3 RPC service (errno 512).
[  680.393247][T10953] svc: failed to register nfsaclv3 RPC service (errno 512).
[  680.454646][T13122] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.534877][T13111] veth0_vlan: entered promiscuous mode
[  680.655837][T13122] 8021q: adding VLAN 0 to HW filter on device team0
[  680.704534][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.711826][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.785405][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.792719][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.952421][T13111] veth1_vlan: entered promiscuous mode
[  681.186420][T13270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  681.203062][T13270] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  681.214857][T13270] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  681.249306][T13270] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  681.299851][T13270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  681.339200][T13270] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  681.364458][T13270] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  681.429107][T13270] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  681.492380][T13270] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  681.498512][T13270] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  681.521343][T13270] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  681.679015][T13111] veth0_macvtap: entered promiscuous mode
[  681.695976][T13122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  681.786943][T13111] veth1_macvtap: entered promiscuous mode
[  681.954784][T13111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  682.034984][T13111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  682.085814][T13111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  682.136329][T13111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  682.169059][T13111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  682.189342][T13111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  682.509546][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  682.549761][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.569385][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.586292][   T30] audit: type=1807 audit(6047703146.059:92): UNKNOWN=msdos res=0
[  682.587722][T13295] ima: policy update failed
[  682.617743][   T30] audit: type=1802 audit(6047703146.059:93): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.1218" res=0 errno=0
[  682.685337][   T30] audit: type=1802 audit(6047703146.119:94): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1218" res=0 errno=0
[  682.729539][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.737454][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.815537][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.995701][T13122] veth0_vlan: entered promiscuous mode
[  683.045967][T13122] veth1_vlan: entered promiscuous mode
[  683.187293][T13122] veth0_macvtap: entered promiscuous mode
[  683.229386][   T51] Bluetooth: hci4: command 0x0c1a tx timeout
[  683.229399][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout
[  683.308969][ T5860] Bluetooth: hci3: command 0x040f tx timeout
[  683.318070][   T51] Bluetooth: hci2: command 0x040f tx timeout
[  683.392279][   T51] Bluetooth: hci6: command 0x0c1a tx timeout
[  683.402268][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  683.478909][ T5860] Bluetooth: hci7: command 0x0c1a tx timeout
[  683.549527][ T5860] Bluetooth: hci8: command 0x041b tx timeout
[  683.558249][T13122] veth1_macvtap: entered promiscuous mode
[  683.567399][ T5860] Bluetooth: hci10: command 0x040f tx timeout
[  683.567436][   T51] Bluetooth: hci9: command 0x040f tx timeout
[  683.746125][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.935648][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.063459][T13122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.185925][T13122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.248846][T13122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.257663][T13122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.739279][T13336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107
[  685.638463][T13339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108
[  685.805222][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.835646][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.197209][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.234777][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.520659][T13356] random: crng reseeded on system resumption
[  688.970146][T13403] random: crng reseeded on system resumption
[  691.167676][   T31] INFO: task syz-executor:7269 blocked for more than 163 seconds.
[  691.193852][   T31]       Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  691.274499][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  691.336978][   T31] task:syz-executor    state:D stack:24168 pid:7269  tgid:7269  ppid:1      task_flags:0x400140 flags:0x00004004
[  691.439074][   T31] Call Trace:
[  691.442456][   T31]  <TASK>
[  691.445461][   T31]  __schedule+0x116a/0x5de0
[  691.497536][   T31]  ? __lock_acquire+0x622/0x1c90
[  691.525380][   T31]  ? __pfx___schedule+0x10/0x10
[  691.562483][   T31]  ? find_held_lock+0x2b/0x80
[  691.609143][   T31]  ? schedule+0x2d7/0x3a0
[  691.619836][   T31]  schedule+0xe7/0x3a0
[  691.634251][   T31]  schedule_preempt_disabled+0x13/0x30
[  691.644605][   T31]  __mutex_lock+0x6c7/0xb90
[  691.657667][T13433] random: crng reseeded on system resumption
[  691.698894][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  691.745349][T13433] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  691.758779][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  691.763954][   T31]  ? net_generic+0xea/0x2a0
[  691.768544][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  691.800794][T13433] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  691.810098][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  691.832738][   T31]  nfsd_umount+0x48/0xe0
[  691.837189][   T31]  deactivate_locked_super+0xbe/0x1a0
[  691.859392][T13433] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  691.881102][   T31]  deactivate_super+0xde/0x100
[  691.885982][   T31]  cleanup_mnt+0x225/0x450
[  691.939039][   T31]  task_work_run+0x150/0x240
[  691.943769][   T31]  ? __pfx_task_work_run+0x10/0x10
[  691.963712][T13433] PM: hibernation: Basic memory bitmaps created
[  692.059194][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  692.077135][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  692.163677][   T31]  do_syscall_64+0x3f6/0x490
[  692.180415][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.186573][   T31] RIP: 0033:0x7f17d4b8fc57
[  692.202307][   T31] RSP: 002b:00007fff0ba94038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  692.225898][   T31] RAX: 0000000000000000 RBX: 00007f17d4c10a8d RCX: 00007f17d4b8fc57
[  692.247020][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0ba940f0
[  692.259213][   T31] RBP: 00007fff0ba940f0 R08: 0000000000000000 R09: 0000000000000000
[  692.267291][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0ba95180
[  692.278946][   T31] R13: 00007f17d4c10a8d R14: 000000000007f2c4 R15: 00007fff0ba951c0
[  692.288506][   T31]  </TASK>
[  692.318928][   T31] INFO: task syz-executor:7370 blocked for more than 165 seconds.
[  692.378856][   T31]       Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0
[  692.386592][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  692.463731][   T31] task:syz-executor    state:D stack:23864 pid:7370  tgid:7370  ppid:1      task_flags:0x400140 flags:0x00004004
[  692.503936][   T31] Call Trace:
[  692.507329][   T31]  <TASK>
[  692.520609][   T31]  __schedule+0x116a/0x5de0
[  692.525253][   T31]  ? __lock_acquire+0x622/0x1c90
[  692.550918][   T31]  ? __pfx___schedule+0x10/0x10
[  692.555907][   T31]  ? find_held_lock+0x2b/0x80
[  692.578401][   T31]  ? schedule+0x2d7/0x3a0
[  692.583260][   T31]  schedule+0xe7/0x3a0
[  692.587421][   T31]  schedule_preempt_disabled+0x13/0x30
[  692.618868][   T31]  __mutex_lock+0x6c7/0xb90
[  692.623603][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  692.654591][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  692.688929][   T31]  ? net_generic+0xea/0x2a0
[  692.693543][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  692.743640][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  692.761571][   T31]  nfsd_umount+0x48/0xe0
[  692.766007][   T31]  deactivate_locked_super+0xbe/0x1a0
[  692.786186][   T31]  deactivate_super+0xde/0x100
[  692.799101][   T31]  cleanup_mnt+0x225/0x450
[  692.803636][   T31]  task_work_run+0x150/0x240
[  692.808306][   T31]  ? __pfx_task_work_run+0x10/0x10
[  692.828887][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  692.834388][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  692.858848][   T31]  do_syscall_64+0x3f6/0x490
[  692.863570][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.888877][   T31] RIP: 0033:0x7fe98f58fc57
[  692.893433][   T31] RSP: 002b:00007fffcee74f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  692.920480][   T31] RAX: 0000000000000000 RBX: 00007fe98f610a8d RCX: 00007fe98f58fc57
[  692.928560][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcee75050
[  692.979220][   T31] RBP: 00007fffcee75050 R08: 0000000000000000 R09: 0000000000000000
[  692.988007][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffcee760e0
[  693.009019][   T31] R13: 00007fe98f610a8d R14: 000000000007df64 R15: 00007fffcee76120
[  693.017122][   T31]  </TASK>
[  693.026819][   T31] INFO: task syz-executor:11156 blocked for more than 145 seconds.
[  693.098863][   T31]       Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0
[  693.106603][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  693.115971][   T31] task:syz-executor    state:D stack:23800 pid:11156 tgid:11156 ppid:1      task_flags:0x400140 flags:0x00004004
[  693.128549][   T31] Call Trace:
[  693.139146][   T31]  <TASK>
[  693.142174][   T31]  __schedule+0x116a/0x5de0
[  693.167551][   T31]  ? __lock_acquire+0x622/0x1c90
[  693.172754][   T31]  ? __pfx___schedule+0x10/0x10
[  693.177696][   T31]  ? find_held_lock+0x2b/0x80
[  693.182527][   T31]  ? schedule+0x2d7/0x3a0
[  693.186952][   T31]  schedule+0xe7/0x3a0
[  693.193343][   T31]  schedule_preempt_disabled+0x13/0x30
[  693.199051][   T31]  __mutex_lock+0x6c7/0xb90
[  693.207038][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  693.212548][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  693.217709][   T31]  ? net_generic+0xea/0x2a0
[  693.222394][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  693.227772][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  693.233428][   T31]  nfsd_umount+0x48/0xe0
[  693.237754][   T31]  deactivate_locked_super+0xbe/0x1a0
[  693.254849][   T31]  deactivate_super+0xde/0x100
[  693.262557][   T31]  cleanup_mnt+0x225/0x450
[  693.267081][   T31]  task_work_run+0x150/0x240
[  693.273183][   T31]  ? __pfx_task_work_run+0x10/0x10
[  693.278415][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  693.297246][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  693.303469][   T31]  do_syscall_64+0x3f6/0x490
[  693.308166][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.317231][   T31] RIP: 0033:0x7f5ab398fc57
[  693.324291][   T31] RSP: 002b:00007ffeb6fb0228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  693.333326][   T31] RAX: 0000000000000000 RBX: 00007f5ab3a10a8d RCX: 00007f5ab398fc57
[  693.341745][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb6fb1370
[  693.353719][   T31] RBP: 00007ffeb6fb135c R08: 0000000000000000 R09: 0000000000000000
[  693.363033][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb6fb1370
[  693.377988][   T31] R13: 00007f5ab3a10a8d R14: 00000000000827c6 R15: 00007ffeb6fb13b0
[  693.388175][   T31]  </TASK>
[  693.394319][   T31] 
[  693.394319][   T31] Showing all locks held in the system:
[  693.508372][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[  693.514456][   T31]  #0: ffff8880b843a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  693.525369][   T31] 1 lock held by khungtaskd/31:
[  693.530679][   T31]  #0: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  693.541051][   T31] 3 locks held by kworker/1:1/43:
[  693.546149][   T31]  #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  693.559848][   T31]  #1: ffffc90000b37d10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  693.588975][   T31]  #2: ffff88806c126240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80
[  693.618389][   T31] 3 locks held by kworker/u8:4/60:
[  693.628843][   T31]  #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  693.649515][   T31]  #1: ffffc9000211fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  693.669153][   T31]  #2: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  693.678407][   T31] 3 locks held by kworker/0:3/980:
[  693.693006][   T31]  #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  693.726782][   T31]  #1: ffffc90003a87d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  693.745594][   T31]  #2: ffffffff8e5d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  693.783004][   T31] 3 locks held by kworker/u8:7/2910:
[  693.788408][   T31] 3 locks held by kworker/u8:9/3012:
[  693.842704][   T31]  #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  693.878871][   T31]  #1: ffffc9000b9dfd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  693.899125][   T31]  #2: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  693.927945][   T31] 2 locks held by getty/5610:
[  693.941893][   T31]  #0: ffff88814cac70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  693.968867][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  693.988887][   T31] 2 locks held by syz-executor/5845:
[  693.994259][   T31]  #0: ffff88803100a0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.028989][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.059088][   T31] 2 locks held by syz-executor/7269:
[  694.066914][   T31]  #0: ffff8880331200e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.088880][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.098712][   T31] 2 locks held by syz-executor/7370:
[  694.116434][   T31]  #0: ffff88802897c0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.127294][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.142923][   T31] 2 locks held by syz.0.875/10953:
[  694.148127][   T31]  #0: ffffffff90408f90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  694.157558][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  694.170765][   T31] 2 locks held by syz-executor/11156:
[  694.176204][   T31]  #0: ffff88806c1640e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.187402][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.197589][   T31] 2 locks held by syz-executor/11437:
[  694.203413][   T31]  #0: ffff8880369840e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.216847][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.227071][   T31] 2 locks held by syz-executor/11932:
[  694.232928][   T31]  #0: ffff88803dfb60e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  694.243806][   T31]  #1: ffffffff8e9de628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  694.254050][   T31] 2 locks held by syz-executor/13122:
[  694.259823][   T31]  #0: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  694.272216][   T31]  #1: ffffffff8e5d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  694.284656][   T31] 2 locks held by syz.9.1231/13419:
[  694.290757][   T31]  #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  694.300661][   T31]  #1: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  694.310258][   T31] 1 lock held by syz.1.1232/13425:
[  694.315441][   T31]  #0: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  694.327200][   T31] 2 locks held by syz.8.1233/13429:
[  694.332930][   T31]  #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  694.355466][   T31]  #1: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  694.365989][   T31] 1 lock held by dhcpcd-run-hook/13457:
[  694.374081][   T31] 
[  694.389903][   T31] =============================================
[  694.389903][   T31] 
[  694.398450][   T31] NMI backtrace for cpu 0
[  694.398476][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  694.398510][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  694.398526][   T31] Call Trace:
[  694.398537][   T31]  <TASK>
[  694.398548][   T31]  dump_stack_lvl+0x116/0x1f0
[  694.398595][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  694.398626][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  694.398665][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  694.398705][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  694.398745][   T31]  watchdog+0xf70/0x12c0
[  694.398793][   T31]  ? __pfx_watchdog+0x10/0x10
[  694.398831][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  694.398873][   T31]  ? __kthread_parkme+0x19e/0x250
[  694.398909][   T31]  ? __pfx_watchdog+0x10/0x10
[  694.398949][   T31]  kthread+0x3c2/0x780
[  694.398990][   T31]  ? __pfx_kthread+0x10/0x10
[  694.399032][   T31]  ? rcu_is_watching+0x12/0xc0
[  694.399061][   T31]  ? __pfx_kthread+0x10/0x10
[  694.399104][   T31]  ret_from_fork+0x5d7/0x6f0
[  694.399145][   T31]  ? __pfx_kthread+0x10/0x10
[  694.399188][   T31]  ret_from_fork_asm+0x1a/0x30
[  694.399240][   T31]  </TASK>
[  694.521228][   T31] Sending NMI from CPU 0 to CPUs 1:
[  694.529671][    C1] NMI backtrace for cpu 1
[  694.529690][    C1] CPU: 1 UID: 0 PID: 2910 Comm: kworker/u8:7 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  694.529725][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  694.529743][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  694.529784][    C1] RIP: 0010:__lock_acquire+0x647/0x1c90
[  694.529824][    C1] Code: e8 9e ac ff ff 8b 4c 24 08 48 83 78 40 00 0f 84 a1 0a 00 00 0f b7 44 24 10 8b 74 24 18 44 8b 74 24 28 c1 e0 0d 66 0b 04 24 98 <29> f0 8b 74 24 20 31 f0 89 c2 41 29 c6 01 c8 c1 c2 06 41 31 d6 44
[  694.529850][    C1] RSP: 0018:ffffc9000b9bf538 EFLAGS: 00000002
[  694.529869][    C1] RAX: 0000000000004007 RBX: 0000000000000004 RCX: 000000004129942a
[  694.529885][    C1] RDX: 0000000000000000 RSI: 0000000061d710b5 RDI: ffff8880308b0b90
[  694.529902][    C1] RBP: ffff8880308b0000 R08: 0000000000000000 R09: 0000000000000000
[  694.529919][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880308b0af0
[  694.529935][    C1] R13: ffff8880308b0b90 R14: 00000000df528375 R15: 0000000000000001
[  694.529952][    C1] FS:  0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000
[  694.529977][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  694.529995][    C1] CR2: 00007f68755607e8 CR3: 000000000e382000 CR4: 00000000003526f0
[  694.530011][    C1] Call Trace:
[  694.530019][    C1]  <TASK>
[  694.530032][    C1]  ? lock_acquire+0x179/0x350
[  694.530070][    C1]  lock_acquire+0x179/0x350
[  694.530104][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  694.530147][    C1]  ? unwind_next_frame+0x3fe/0x20a0
[  694.530188][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  694.530221][    C1]  unwind_next_frame+0xd1/0x20a0
[  694.530261][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  694.530300][    C1]  ? stack_trace_save+0x8e/0xc0
[  694.530335][    C1]  ? __unwind_start+0x45f/0x7f0
[  694.530376][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  694.530408][    C1]  arch_stack_walk+0x94/0x100
[  694.530435][    C1]  ? stack_trace_save+0x8e/0xc0
[  694.530466][    C1]  stack_trace_save+0x8e/0xc0
[  694.530495][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  694.530528][    C1]  ? __lock_acquire+0xb8a/0x1c90
[  694.530564][    C1]  kasan_save_stack+0x33/0x60
[  694.530629][    C1]  kasan_save_track+0x14/0x30
[  694.530666][    C1]  __kasan_slab_alloc+0x89/0x90
[  694.530707][    C1]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  694.530748][    C1]  ? mark_held_locks+0x49/0x80
[  694.530780][    C1]  ? __alloc_skb+0x2b2/0x380
[  694.530816][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  694.530855][    C1]  __alloc_skb+0x2b2/0x380
[  694.530890][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  694.530924][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  694.530955][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  694.530985][    C1]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  694.531028][    C1]  process_one_work+0x9cf/0x1b70
[  694.531074][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  694.531110][    C1]  ? __pfx_process_one_work+0x10/0x10
[  694.531156][    C1]  ? assign_work+0x1a0/0x250
[  694.531195][    C1]  worker_thread+0x6c8/0xf10
[  694.531240][    C1]  ? __kthread_parkme+0x19e/0x250
[  694.531273][    C1]  ? __pfx_worker_thread+0x10/0x10
[  694.531320][    C1]  kthread+0x3c2/0x780
[  694.531357][    C1]  ? __pfx_kthread+0x10/0x10
[  694.531396][    C1]  ? rcu_is_watching+0x12/0xc0
[  694.531423][    C1]  ? __pfx_kthread+0x10/0x10
[  694.531461][    C1]  ret_from_fork+0x5d7/0x6f0
[  694.531497][    C1]  ? __pfx_kthread+0x10/0x10
[  694.531535][    C1]  ret_from_fork_asm+0x1a/0x30
[  694.531572][    C1]  </TASK>
[  694.599915][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  694.599947][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  694.599993][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  694.600017][   T31] Call Trace:
[  694.600029][   T31]  <TASK>
[  694.600045][   T31]  dump_stack_lvl+0x3d/0x1f0
[  694.600107][   T31]  panic+0x71c/0x800
[  694.600158][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  694.600219][   T31]  ? __pfx_panic+0x10/0x10
[  694.600272][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  694.600329][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  694.600382][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  694.600434][   T31]  ? watchdog+0xdda/0x12c0
[  694.600488][   T31]  ? watchdog+0xdcd/0x12c0
[  694.600547][   T31]  watchdog+0xdeb/0x12c0
[  694.600609][   T31]  ? __pfx_watchdog+0x10/0x10
[  694.600670][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  694.600726][   T31]  ? __kthread_parkme+0x19e/0x250
[  694.600776][   T31]  ? __pfx_watchdog+0x10/0x10
[  694.600830][   T31]  kthread+0x3c2/0x780
[  694.600884][   T31]  ? __pfx_kthread+0x10/0x10
[  694.600941][   T31]  ? rcu_is_watching+0x12/0xc0
[  694.600983][   T31]  ? __pfx_kthread+0x10/0x10
[  694.601038][   T31]  ret_from_fork+0x5d7/0x6f0
[  694.601090][   T31]  ? __pfx_kthread+0x10/0x10
[  694.601145][   T31]  ret_from_fork_asm+0x1a/0x30
[  694.601205][   T31]  </TASK>
[  695.018240][   T31] Kernel Offset: disabled
[  695.022580][   T31] Rebooting in 86400 seconds..