last executing test programs:

2m59.475258327s ago: executing program 1 (id=4633):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r2}, 0x1)
read$auto(0x3, 0x0, 0x80)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0)
write$auto(r3, 0x0, 0x6)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\a\x00'/21, 0x100000002, 0x100000001)

2m54.100615277s ago: executing program 1 (id=4642):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
read$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
rmdir$auto(&(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00')
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sysfs$auto(0x2, 0x23, 0x0)
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r0, 0x0, 0x4)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0xc8000, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sigaltstack$auto(&(0x7f00000000c0)={&(0x7f0000000040)="6fd0af149bdf33048b96d2a0be6ac3582690c7314696836e1fda106d3706d08af4d8b40e238e50fa1c4ced6a2fff933fe7", 0x9c, 0x5}, &(0x7f0000000140)={&(0x7f0000000440)="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", 0x3, 0x1})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)

2m53.426227505s ago: executing program 1 (id=4644):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001080)='/Eev*]\x8b\x97/0T\xa8\x87/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xcc\xb7\xd2S\xcb\xfa\xa1\xd8\xb1Z|\nGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x0e\xa8\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,', 0x80000004)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
write$auto(r0, 0x0, 0x3)
ioctl$auto_SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0)
statmount$auto(0x0, 0x0, 0x42, 0x2)
io_uring_setup$auto(0x59, 0x0)
r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0x3, 0x7, 0x0, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa42, 0x0)
socket(0x2c, 0x3, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mknod$auto(0x0, 0xca, 0xfffffffa)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
mlockall$auto(0x7)
socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, r3, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, <r5=>r4, 0x9, 0x3, 0x6, 0xfffffffffffffff3, r4, r4}, 0x7ff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5)

2m49.782212411s ago: executing program 1 (id=4653):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r2 = socket(0x18, 0x3, 0x2)
accept$auto(r2, 0x0, 0x0)
write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13)
sched_get_priority_min$auto(0x40)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0)
socket(0x6, 0x2, 0x80000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc)
setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16)

2m48.656593436s ago: executing program 1 (id=4655):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
socket(0x1d, 0x1, 0x7fff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x8)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, 0x0, 0x3a)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

2m47.236737989s ago: executing program 1 (id=4658):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/cec9\x00', 0x2000, 0x0)
ioctl$auto_CEC_G_MODE(r7, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
socket(0x18, 0xa, 0x1)
write$auto(0x3, 0x0, 0x100082)

2m39.260110548s ago: executing program 0 (id=4674):
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
socket(0x10, 0x3, 0x2)
socket(0x10, 0x2, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
getsockopt$auto(r1, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r0)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socketpair$auto(0x81, 0x0, 0x0, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya9\x00', 0xc7f16bff2a10ba01, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
socketpair$auto(0x20004, 0x7, 0x7fff, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0)

2m38.904145464s ago: executing program 0 (id=4675):
r0 = socket(0x25, 0x1, 0x0)
sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r1, 0x1, 0x2, 0x6653)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
socket(0x23, 0x80805, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0)
msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xa, 0x0, 0xfe01}, 0x0, 0x0, 0x6, 0xd, 0x6, 0x31f4, 0x51c, 0x3, 0x1, 0x3, @inferred=0xffffffffffffffff, @raw=0x8})
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0)

2m36.000712334s ago: executing program 0 (id=4679):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x234e40, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r0, 0x0, 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x801, 0x106)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x31c480, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x400caed0, r1)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0)
close_range$auto(0x2, 0x8, 0x0)

2m33.761617008s ago: executing program 0 (id=4680):
gettid()
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
read$auto(0x3, 0x0, 0x80)
socket(0x23, 0x1, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2080, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0)
ioperm$auto(0x1, 0x3, 0x2)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x8080)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x2000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100008001)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x250b, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x2067}, 0x1ed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

2m32.292483681s ago: executing program 0 (id=4683):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
socket(0x1d, 0x1, 0x7fff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x8)
writev$auto(r2, 0x0, 0x3)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, 0x0, 0x3a)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

2m32.19959814s ago: executing program 32 (id=4658):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/cec9\x00', 0x2000, 0x0)
ioctl$auto_CEC_G_MODE(r7, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
socket(0x18, 0xa, 0x1)
write$auto(0x3, 0x0, 0x100082)

2m30.861025308s ago: executing program 0 (id=4686):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0xcb00, 0x0)
getpid()
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1)
sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844)
getsockopt$auto_SO_MEMINFO(r1, 0x7, 0x37, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r4, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ffc300", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25450000002d001a006cb15d87dd4a2d46f7482597b3eb9f3d90a79bb5cfe2ecb05c9146711566246bdb523ea1eb07bfc32a00000012003400c4cd3d430fdc438a5627614ac47700000800dc00050000000500ee000d0000000500c20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

2m15.149386256s ago: executing program 33 (id=4686):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0xcb00, 0x0)
getpid()
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1)
sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844)
getsockopt$auto_SO_MEMINFO(r1, 0x7, 0x37, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r4, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ffc300", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25450000002d001a006cb15d87dd4a2d46f7482597b3eb9f3d90a79bb5cfe2ecb05c9146711566246bdb523ea1eb07bfc32a00000012003400c4cd3d430fdc438a5627614ac47700000800dc00050000000500ee000d0000000500c20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

1m51.83994335s ago: executing program 4 (id=4760):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x6, 0x16, 0x1001, 0x100000001, 0xc, 0x9, 0x0, 0x1, 0x7ff, 0xd59, 0x101, 0x6, 0x2, 0x80000001]}, 0x0, 0x0)
read$auto(0x4, 0x0, 0xfdef)
r0 = socket(0x1d, 0x3, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x7f, 0x400001, 0x800e2, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xa2102, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
read$auto(r1, 0x0, 0x2)
sysfs$auto(0x2, 0x4c, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x60020000)
setuid$auto(0xe)
syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getsockopt$auto(r0, 0x65, 0x3, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000001c0)={r4, &(0x7f0000000000)="e735ee9eecf3ffdb6a839352359a4599fd33ec6e008aa4e96b70fa61821f0ab89879007e6751da0cf793b33aeadb894084518793c68971e164319f83f3346b5afd448d4b20cee70246de01fe1e7be7fc72a8866a130f8f01455486ee24c05f6629cfc370a678ef44f84866a9e80b511a54e05a694bd8494a9b8ad342ea42a7e6fd22a96f34a54db8354b05aaf3eeb466095177b42363d8ad43e01b785b0e26022f73852b6bd2253286f464d02960e09529751e30fc7a03ef219c7958d0ed78c5c12a967a42e8924db6bf3957de200d720492d2023325e4082e84a561f0242fa567f0af470575eda0dd226395b3be4be3", 0x4, &(0x7f0000000100)="34ab71dae9ddb845688d7b06e9bf48628d3fa2abe19f9145947ce45269f446164584087efe690607a202e217ef49a9a9fb9c7ab6ff51c1b7441b75", 0xa068, &(0x7f0000000140)="41520392f8bea6334cd88e5c77f212c918ff828cd40ae7dbeb79c0137540f09e5681ebf0d343d1725b0e05d5eb3b04cbef7b6e63f4714f717651", &(0x7f0000000180)=0x1})

1m49.814014495s ago: executing program 4 (id=4763):
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
ioctl$auto_UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
read$auto(r0, &(0x7f0000000080)='/dev/uinput\x00', 0x7)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0x9, 0x3, {0xb, 0xe7f, 0x4, {0x3ff, 0x3}, {0x6fb4, 0x69b8}, @periodic={0x80, 0x4, 0x400, 0x8, 0x4, {0x0, 0x6, 0x1ff, 0x1}, 0xfffffffb, &(0x7f00000000c0)=0x9b}}, {0x9, 0x7, 0x800, {0xfffa, 0x8}, {0x101, 0x400}, @constant={0xe66, {0xff, 0x0, 0x3c6}}}})
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x204000, 0x0)
ioctl$auto_USBDEVFS_DISCSIGNAL32(r1, 0x8008550e, &(0x7f00000001c0)={0x4, 0x7})
ioctl$auto_USBDEVFS_BULK32(r1, 0xc0105502, &(0x7f0000000200)={0x2, 0x0, 0xfffff001, 0x2b})
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x4800, 0x0)
ustat$auto(0xffffffff, &(0x7f0000000280)={0x101, 0x8, "744d317c3ae5", "e5bdf31ed5d2"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0xffff9eb5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x20}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x800)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
r6 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000004c0)=@prog_bind_map={<r7=>r2, <r8=>r1, 0xfffffffa}, 0x9)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000580)={0xfffffffffffffff1, <r9=>r6, 0x0, "b26f5d12520629ccaa38bd800a7e0437"})
read$auto_page_owner_stack_operations_page_owner(r9, &(0x7f00000005c0)=""/77, 0x4d)
getsockopt$auto_SO_KEEPALIVE(r7, 0x1, 0x9, &(0x7f0000000640)='/dev/bus/usb/006/001\x00', &(0x7f0000000680)=0x4)
r10 = ioctl$auto_TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000006c0)=0x41)
close_range$auto(r10, r2, 0x7)
sendmsg$auto_GTP_CMD_ECHOREQ(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x14}, @GTPA_FLOW={0x6, 0x6, 0x8000}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x7}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x48014}, 0x41)
write$auto_event_trigger_fops_trace(r6, &(0x7f0000000a80)="db0583082ef114840f4c40ce3abf6cbfe893130c5902aa40eeb6dbf0a65aa46e3a400c62a087772cd6e10d9bc268485c870f8f02d81f63711410", 0x3a)
r11 = syz_clone(0x100000, &(0x7f0000000b40)="a9f7a3d55552f9eb0148a2fea05350e9c2970e55d22e6dc7514ca37e0f0189340b88ef424a22f4b709c103aac1454ded97f96eb614bf043994aee452d192b47fde4a75acc7", 0x45, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="47170e5969279390c0cbb3ce4890788a5d37cc837c79f8ac91ff172865d474b30975fe29aa1980ffa48e3de031d36f7cd4441dbd41f9b9131ecf3941a8b6f904afa3a2ef66e5d71b415dac54a69ada4a05e5fbe6159225d2a807f7ead1793556202c958190b95e3b63ed69db16ca362dec024f7f3ee3f59325f1f58fdeddc7ae678ea5dda0f12df160b5f0b8031137cd1bf4cc4dc4c990fbfa84930eeb37cdf0d794680db6bdec927d43839c514d350a9716ab1cf50b")
ioctl$auto_XFS_IOC_FREESP(r9, 0x4030580b, &(0x7f0000000d00)={0x3, 0x6, 0x4, 0x9, 0x8, <r12=>0xffffffffffffffff})
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000001140)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000d40)={0x3a0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x15c, 0x19, 0x0, 0x1, [@typed={0x14, 0xca, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x46}]}, @generic="fa99f261e957c8560d21ee86fe5b6892a99d0ea2bfafb5a3ce6d50173522240623c3d61ea1973f29de62c0d7068b3bb0917761d43cfbc08aed26eeea04c490eddcb46af54215b5b55a8426c6", @generic="5d3d7b7c313cc75266af19266e80089ac1a8b9d6067f1ea2cb68db29678cbaf97ddae641e3603e0c61e9b053558d64bfa581c013735bdab60a5053107ea82f73f4bcba53b77a309f07cb261bd31ca8c48c9d72db447e83b38d55fbba4b8dfae9a4a0c04704d173f101d6e75f735550814880fa1685340c075a5573aff5ba038ded4abce5f9e20738a824f6b2241d10c2ec8e189a66520d8f70c8e201ec2e8d0d576af328ff10b11f8874c11a866c070f943852724838b9998349dfa2c56c445d159a06658aedb591a58921f65cd6fd516347a568ee17d8ce802562616c5eb0a7", @typed={0x8, 0x41, 0x0, 0x0, @u32}, @typed={0x8, 0x3e, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1ec, 0x19, 0x0, 0x1, [@nested={0x1c, 0x14d, 0x0, 0x1, [@nested={0x4, 0x137}, @nested={0x4, 0xd0}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x121}]}, @typed={0x14, 0x144, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0xcc, 0x52, 0x0, 0x1, [@typed={0x4, 0x15}, @generic="ac39dd3b620e725e035f14fcd9", @generic="46794cb9e3abfff7170d9797fee8211b982c62b57eedff4e", @generic="c30e31d6d3d6b520ca91206d97730e657266d7cd393881bf86623ba10db97f73c2d3ae9abcfba5b1f47ea52bac616de55a103b99b6e1b01ad13e6d1d78111d5b90e677d4239a63f98eac561778fbb054ff618358cce748759a0aa2ea96b53728a0ab44961c1be8f1e008ff61e336756dc125987211322f3e6c535d22d418591318b5dfebad263140bd6def57cb887bd629f301872eeba25c02a845", @nested={0x4, 0x11}]}, @generic="c8eb52f09c24c7e0eabf5121a3dddb7c72728b596828f928d85e709e03fd57af057694b878962dde12de9e900b06656b8d9f407c", @generic="92c4b789304ce0b6a1d2f81bce50903aeeb74e4573d4b7c7a7bca4ab09724366a4cf25815e70c97af9383d4b5b0a12034ac4d78b082a0576bd18bb8f6089eb0cd94193d6323658f6a49aa6c930a8cc91a2f4a4c9a8a6a3c23c6e4dfcfef4768da6455179fdd22a9cab8568874fb9e687854222d8baa833c31e878fe9a771a9bc11666a92543ccf0e2ff3cbd12f0535314caec17112d765d55f359abc122a13af4be0b255a1cebfbcd27b038196e29a512e83b5d6453ad53a"]}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x3a0}}, 0x20000080)
fcntl$auto_F_SET_RW_HINT(r10, 0x40c, 0x9)
mmap$auto(0x6, 0x6, 0xdf7, 0x111, r0, 0x1)
setns(r8, 0x4000000)

1m49.175122243s ago: executing program 4 (id=4765):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x5, 0x8)
mbind$auto(0x9, 0x2091d2, 0x0, 0x0, 0xe, 0x2)
socket(0xa, 0x3, 0x3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x105)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(r2, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]})
mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x50, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)

1m47.977251927s ago: executing program 4 (id=4766):
r0 = socket(0x8, 0x6, 0x84)
mmap$auto(0x0, 0x400008, 0xe6, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd)
unshare$auto(0x40000080)
r1 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0xe, 0x3e6a, 0x10001, 0x9, 0xa3bf, 0x6, 0x6, 0x7, 0xc8b, 0x81, 0x14, 0x5, 0x1, 0x0, 0x8, 0x9, 0x9c6, 0x513e, "6376055beb66c5c00f8dd2a9037383b576a3a4155295434f95b3c11d4cab177819ea235c"})
r2 = socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
open(0x0, 0x0, 0x40)
mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353)
unlink$auto(&(0x7f00000000c0)='#(//\x00')
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000003c0)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x1904, 0x2, 0x3}, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x28, 0xc, 0x454a, 0x81, 0x7, 0x1, 0x7, 0x3, 0xb5, @inferred, @raw=0x10000})
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0)
sendfile$auto(r4, r5, 0x0, 0x1)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8c1}, 0x880)
ioctl$auto(r2, 0x8914, 0x24)
ioctl$auto_media_devnode_fops_mc_devnode(r1, 0xfff, 0x0)
setsockopt$auto_SO_ATTACH_BPF(r0, 0x4, 0x32, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)

1m44.379904042s ago: executing program 4 (id=4771):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/ep_81/interval\x00', 0x300, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = open(0x0, 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=r0, 0x400, @old_map_fd=r2}, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0)
sendfile$auto(r4, r3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$auto(r4, &(0x7f0000000080)=@can, 0x2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x1d, 0x2, 0x6)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x10000, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='.\x00', 0x100, 0x161)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0xdf, 0xffff, 0x401, 0x8000)
shmctl$auto(0x691, 0x3, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)

1m44.014847708s ago: executing program 4 (id=4772):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
r1 = socket(0x1, 0x3, 0x208f)
bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "ffffff0b000000000000000700"}, 0x13)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10001, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0x31d6, &(0x7f00000002c0)={{0x6, 0xf}, {0x1000000000000f4d, 0x9}, 0x7f, 0x9, 0xa14, 0x0, 0x2, 0x10000, 0x6d7b, 0x0, 0x0, 0x5, 0x0, 0x670f, 0x0, 0x6f})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x4, 0xffffffffffffffff, 0x48, 0xd)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x6, 0x0})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
ioctl$auto(r4, 0x4004af07, r4)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x8009, &(0x7f0000000040)={0x12, 0x3, 0x1}})

1m28.826645628s ago: executing program 34 (id=4772):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
r1 = socket(0x1, 0x3, 0x208f)
bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, "ffffff0b000000000000000700"}, 0x13)
socket(0x1e, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10001, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0x31d6, &(0x7f00000002c0)={{0x6, 0xf}, {0x1000000000000f4d, 0x9}, 0x7f, 0x9, 0xa14, 0x0, 0x2, 0x10000, 0x6d7b, 0x0, 0x0, 0x5, 0x0, 0x670f, 0x0, 0x6f})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x4, 0xffffffffffffffff, 0x48, 0xd)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x6, 0x0})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5)
ioctl$auto(r4, 0x4004af07, r4)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x8009, &(0x7f0000000040)={0x12, 0x3, 0x1}})

11.428942064s ago: executing program 3 (id=4963):
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
madvise$auto(0x0, 0x5, 0x15)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/scsi/drivers/st/fixed_buffer_size\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x3)
read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x100000001, 0xfffffff9, <r3=>0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x7, 0x4, 0x5, 0x61, 0x103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, 0x0)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r5, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810)
execve$auto(0x0, 0x0, 0x0)
r6 = setfsuid$auto(0xee00)
r7 = setfsuid$auto(0xee01)
setresuid$auto(r3, r7, r6)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000)

10.922110345s ago: executing program 6 (id=4965):
mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000)
keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6)
keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x999, 0x0)
ustat$auto(0x801, 0x0)
mmap$auto(0x0, 0x6, 0xe0, 0x9b72, 0x2, 0x8002)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, &(0x7f0000000080)={{0x20000009, 0x4}, {0x4, 0xfffffffffffffff9}, 0x3ff, 0x281, 0x8000000000000000, 0xffffffffffffffff, 0x7f, 0x9, 0x1, 0x0, 0x4, 0x8000, 0x2, 0x6, 0x8, 0x12})
mmap$auto(0x0, 0x400005, 0x40000000000df, 0x9b72, 0x2, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip6_tables_matches\x00', 0x20000, 0x0)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
rename$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x20, &(0x7f0000000080)={0x0, 0xfffc}, 0x4, 0x0, 0x5, 0x20b}, 0xfff}, 0x8, 0x311)
ioctl$auto(r0, 0x541b, r0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYRES32=r2], 0x2a8}}, 0x40000)
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MESH_ID={0xb, 0x18, "f5d341ab3f91fc"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
sendfile$auto(r2, r2, 0x0, 0x9)
fanotify_mark$auto(0xffffffffffffffff, 0x72d, 0x800, 0xffffffffffffffff, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0)

9.46097487s ago: executing program 3 (id=4969):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r2 = socket(0x18, 0x3, 0x2)
accept$auto(r2, 0x0, 0x0)
write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f59333128", 0x13)
sched_get_priority_min$auto(0x40)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0)
socket(0x6, 0x2, 0x80000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc)
setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16)

9.227661501s ago: executing program 6 (id=4970):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
move_pages$auto(0xffffffffffffffff, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000080)="738a311de8c0ccee95bfb406c51d8b545f30546247dcad05c3fecaf03e037a09a3ebfcc6893d59a2e1ae96463bfc6e8a2398ecb8fb35bd157c93e65134", 0x12, 0x0, 0x9, 0x0, 0xd42, 0xb}, 0x800009}, 0x80000001, 0x20000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x22, 0x800, 0x4)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
sendfile$auto(0x6, 0x3, 0x0, 0x20000fffffdef)
syncfs$auto(0xffffffffffffffff)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0)
setgroups$auto(0xe32, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xd7}, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0xb, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"})
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)

8.050895264s ago: executing program 3 (id=4972):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0)
mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd06, &(0x7f00000001c0))
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0)
mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7ffd)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7f)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd11/queue/stable_writes\x00', 0x1a1842, 0x0)
write$auto(r2, &(0x7f0000000000)='9\x00d11V\xbe\x91!\x9ab2\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8)
read$auto(r2, 0x0, 0x80000000)
unshare$auto(0x40000080)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001)
ioctl$auto(r1, 0x9000643a, 0xc35)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x41)
fremovexattr$auto(r3, &(0x7f0000000000)='system.posix_acl_access\x00')
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
getsockopt$auto(0xffffffffffffffff, 0x9, 0x1, &(0x7f0000000080)=']@/^h\\*^\x00', &(0x7f00000000c0)=0x4)
unshare$auto(0x40000080)
write$auto(0xffffffffffffffff, 0x0, 0x7)
shmget$auto(0x5, 0x5, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(0xffffffffffffffff, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x7ad82, 0x0)

7.832583344s ago: executing program 5 (id=4973):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = gettid()
rt_sigsuspend$auto(&(0x7f0000000040)={0x8}, 0x8)
tkill$auto(r0, 0x7)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, r1, 0x0)
socketpair$auto(0x2, 0x4, 0x3, 0x0)
r2 = socket(0x11, 0x3, 0x2)
socket(0x15, 0x5, 0x0)
connect$auto(r2, &(0x7f00000018c0)=@llc={0x1a, 0x335, 0xe0, 0x7, 0xcd, 0xdb, @link_local}, 0x53)
r3 = socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty12\x00', 0x101440, 0x0)
eventfd2$auto(0x401, 0x9)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r4, 0xc008aec1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x48880)
r5 = clone$auto(0x6db, 0x10, 0x0, 0x0, 0x40000006)
migrate_pages$auto(r5, 0x4, 0x0, &(0x7f0000000180)=0x2)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8)
r6 = socket(0x10, 0x2, 0x14)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index2/shared_cpu_list\x00', 0x0, 0x0)
lseek$auto(0x3, 0x8, 0x3)
io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)="881384f569d314b19a182b964e7174861b8c2a50", 0x8001)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000051431"], 0x14}, 0x1, 0x0, 0x0, 0x60000044}, 0x24000044)

7.688435871s ago: executing program 2 (id=4974):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
writev$auto(0x0, 0x0, 0xb)
quotactl$auto(0x0, 0xfffffffffffffffc, 0x7, 0x0)
socket(0x1, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/snd_usb_variax/unbind\x00', 0x654b82, 0x0)
r2 = socket(0x18, 0x80000, 0x0)
connect$auto(r2, 0x0, 0x1e)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d})
socket(0x10, 0x2, 0x4)
mmap$auto(0x89, 0x2020005, 0x2, 0x12, r1, 0x8000)

7.227785494s ago: executing program 5 (id=4975):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_setup$auto(0x2, 0x0)
mlockall$auto(0x7)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value_ptr=&(0x7f0000000600)=0xdc53, "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"})
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x4c4ac3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0)
write$auto(0x3, 0x0, 0x100082)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xa8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0)
read$auto(0x3, 0x0, 0x80)
r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0)
write$auto(r2, 0x0, 0xc70)
pread64$auto(r1, 0x0, 0x9, 0x10000003fe)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x41)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, 0x0, 0x0)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)

6.334105071s ago: executing program 2 (id=4976):
mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5)
r0 = socket(0x11, 0x5, 0x1)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
mbind$auto(0x0, 0xfa9c, 0x8001, &(0x7f0000000100)=0x80000000, 0x400, 0x1)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c5adb000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf251300000028000e005256441b633b87bba3bd6e38e194879ade12e8512ef3ab6a65fae7f2ee80ef36de7ef6f3"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
connect$auto(r0, &(0x7f00000000c0)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x2e)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffbfc, 0x7f, 0x1, 0xeb1, 0x401, 0xaa86)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/hid/drivers/saitek/bind\x00', 0xa081, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)

6.089307375s ago: executing program 6 (id=4977):
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
mmap$auto(0x9, 0x20009, 0xe2, 0xeb1, 0xf6f6, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x80)
socket(0x23, 0x1, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0xa)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

5.469213618s ago: executing program 3 (id=4978):
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x20009, 0x20df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
request_key$auto_KEY_SPEC_PROCESS_KEYRING(&(0x7f00000006c0)='[{%\xbc::(\x00', 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe)
madvise$auto(0x0, 0x200, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3)
madvise$auto(0x0, 0x20000a, 0x4)
unshare$auto(0x40000080)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0)
read$auto(r4, 0x0, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6)
socket(0xa, 0x2, 0x10)
socket(0xa, 0x2, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000200)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x8}, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)

5.147535495s ago: executing program 5 (id=4979):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
geteuid()
r0 = socket(0x10, 0x2, 0x4)
socket(0x25, 0x1, 0x3)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e", @ANYRES32=r0, @ANYBLOB='\b'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x3, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(r2, 0x0, 0x400fffd, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f00000004c0)="ebe0d540ef48", 0x6)
semctl$auto(0x0, 0xe3, 0x0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x16b8c0, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x8)
mprotect$auto(0x200000000000, 0x806121, 0x4)

4.95764892s ago: executing program 6 (id=4980):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x6, 0x0, 0x100000001)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
sendfile$auto(r1, r2, 0x0, 0x800048)
read$auto_clear_warn_once_fops_(r0, &(0x7f0000000300)=""/169, 0xa9)
r3 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/uprobe_profile\x00', 0x2000, 0x0)
mmap$auto(0x100000001, 0x100, 0x7fffffffffffffff, 0x7fff, r3, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r4 = socket(0x29, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r4, 0x8b0f, 0x24)
recvfrom$auto(0x3, 0x0, 0x100, 0x13e, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x2006, 0xf, 0x2a1, 0x2, 0x83, 0x101, 0x17f, 0x100000000002}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x7fffffff, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0x3, 0x8000)

4.502643246s ago: executing program 2 (id=4981):
mmap$auto(0x0, 0x4, 0x40, 0xeb1, 0xffffffffffffffff, 0x7ffc)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
io_setup$auto(0x7ffe, &(0x7f0000000000))
close_range$auto(0x2, 0x8, 0x2)
mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
socket(0x2c, 0x3, 0x0)
r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/available_events\x00', 0x200000, 0x0)
getsockopt$auto_SO_DEBUG(r2, 0x1, 0x1, 0x0, 0x0)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mlockall$auto(0x7)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
r3 = socket(0xa, 0x6, 0x0)
ioctl$auto_I2C_SMBUS(r3, 0x720, &(0x7f0000000240)="e07da8d517ff1fe05f53e37c467be0d6d3d6aaf6216bed4c723f505297cfbf79a670bb7e0abaef354b11f8b8411282da5eead06bd9b51ea7861e9e997b425734759d7dbf2138563e7bc5fb755b777a0b882bba4eb18b570df6")
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socket(0x2, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

4.08452083s ago: executing program 3 (id=4982):
timer_settime$auto(0xffffffff, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10008}, {0x9, 0x2}}, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto_SO_MEMINFO(r1, 0xb, 0x37, 0x0, &(0x7f00000000c0)=0x6)
getsockopt$auto_SO_ACCEPTCONN(r0, 0x800, 0x1e, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
mmap$auto(0x81, 0x9, 0x2000000000000dd, 0x19, r1, 0x7ffd)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r4 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r4, 0x29, 0x38, 0x0, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)
geteuid()
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0)

4.049337424s ago: executing program 5 (id=4983):
unshare$auto(0x40000084)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5)
fcntl$auto(0x3, 0x4, 0xa553)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053", @inferred=<r2=>0x0}, 0x4, 0xfffffff9, 0x1, @inferred, @integer64={0x1, 0x65, 0x8}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"})
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msync$auto(0x23, 0x3, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r4, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf25110000000c00098008000100", @ANYRES32=0x0, @ANYBLOB="fd2df94f80916045a5f07e980000a48e33a6b9431be4b6c6ab643fef1cd10e9bde7fcde60c6eef074a3cf863d0fe4b3b01c4b4f0036cc029ea60ffac12a70000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050)
sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fedbdf25190000005e000780a8e3d8bc76efdaca9cb1602c2a2290da8ea3c7643e2b0b60f64cbaf50d48fe8260820e73da3f974ad18f03e387da910300aa4a80816320df05268479d8a6fdfffb39407c36f7ff7f000000000000fde60800c80040f292fafd34224768f13aa39032c7cdf67de9209685b272af17202cbc85f9bea41b079a3c6aef2655d80d439fa441f6eed5732dde55cfc9580ea968cbf8259627460f93bb6109c901c701b9aaf5f666fc160adcef574bebf21b13c759615eb24c02e36fc8a7fcaa8d07000000e948", @ANYRES32=r2, @ANYBLOB="0c00d6800800d200260800000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x7})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
r7 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x8000, 0x0)
pread64$auto(r7, 0x0, 0x73, 0x408)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r8, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r8, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r8, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
close_range$auto(r0, r6, 0x8200)

3.77985338s ago: executing program 6 (id=4984):
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x7b, 0xffffffffffffff80, 0x0, 0x5, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x6000, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0)
write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)
pidfd_open$auto(0x1, 0x99)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000)
unshare$auto(0x20000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)

2.206257038s ago: executing program 2 (id=4985):
r0 = socket(0x8, 0x6, 0x84)
mmap$auto(0x0, 0x400008, 0xe6, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd)
unshare$auto(0x40000080)
r1 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0xe, 0x3e6a, 0x10001, 0x9, 0xa3bf, 0x6, 0x6, 0x7, 0xc8b, 0x81, 0x14, 0x5, 0x1, 0x0, 0x8, 0x9, 0x9c6, 0x513e, "6376055beb66c5c00f8dd2a9037383b576a3a4155295434f95b3c11d4cab177819ea235c"})
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
open(0x0, 0x0, 0x40)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353)
unlink$auto(&(0x7f00000000c0)='#(//\x00')
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000003c0)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fff, 0x1904, 0x2, 0x3}, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x28, 0xc, 0x454a, 0x81, 0x7, 0x1, 0x7, 0x3, 0xb5, @inferred, @raw=0x10000})
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0)
sendfile$auto(r3, r4, 0x0, 0x1)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8c1}, 0x880)
ioctl$auto(0xffffffffffffffff, 0x8914, 0x24)
ioctl$auto_media_devnode_fops_mc_devnode(r1, 0xfff, 0x0)
setsockopt$auto_SO_ATTACH_BPF(r0, 0x4, 0x32, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)

1.888923145s ago: executing program 5 (id=4986):
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x1, 0x84)
futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$auto(r2, &(0x7f0000000080)=@in={0x28}, 0x68)
getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
ioctl$auto(0x3, 0x541b, 0x38)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x2, 0x3, 0xa)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x3754, r5)

1.197217167s ago: executing program 3 (id=4987):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)="8ce968f6d33e1d1a4f6a2f12f470f8cdb7dfeaf02768589362668247de44a359e8d9c13d4e52cc42ef43f1d4c965d3d505ad05f2c97a5541863adc5154e4028bdf351c0900000421cd3d73083f859a25a8b713916bb90e14883914f1b33ebd88ce433cff55ac")
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0)
ioctl$auto(r1, 0xc08c5102, 0xffffffffffffffff)
socket(0x26, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0xfffffffffffff001, 0x4000000000df, 0xeb1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0)
ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1})
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"})
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"})
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x8)
io_uring_setup$auto(0x6, 0x0)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1.143341513s ago: executing program 2 (id=4988):
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
mmap$auto(0x9, 0x20009, 0xe2, 0xeb1, 0xf6f6, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(0x3, 0x0, 0x80)
socket(0x23, 0x1, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0xa)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

877.631967ms ago: executing program 6 (id=4989):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/yev/$RN\xa1xu\x8c\xffj\xa9\x00\x00\x04\x00\x00', 0x1100000a3d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x0)
ioctl$auto(r1, 0x6, r0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2c, 0x3, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/queues/tx-2/xps_cpus\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/17, 0x11)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/pages_shared\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4106, 0x100a)

609.295685ms ago: executing program 5 (id=4990):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mq_open$auto(0x0, 0x7ffc, 0x402b, 0x0)
mq_unlink$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x20a003, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
getpid()
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/003/001\x00', 0x20d80, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x10, 0x92f1, 0x4}, 0x2)

0s ago: executing program 2 (id=4991):
r0 = prctl$auto(0xfffffff9, 0x0, 0x7fffffffefff, 0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd$auto(0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x8208ae63, 0x38)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050324bd700008007b000800000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x0)
socket(0x22, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r7 = fanotify_init$auto(0x8, 0x2000000000002)
r8 = creat$auto(&(0x7f0000000140)='./file0\x00', 0xb8f)
r9 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r3)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000200)={"f0676685ba2da9e254a3eb9db9e6f1151825eb994ce8e40aeb91514f92a61a5c", 0xf, 0x4, 0xa, 0x7, 0x7fffffff, 0xffffffffffffffff})
sendmsg$auto_OVS_DP_CMD_NEW(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008004)
fanotify_mark$auto(0x0, 0x451, 0x1, r7, 0x0)
settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0)
r10 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
writev$auto(r10, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c010}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

kernel console output (not intermixed with test programs):

failed: -4
[ 1228.100260][T20243] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1228.126477][T20243] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1229.339224][T20262] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1229.345397][T20262] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1229.446795][T20271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'.
[ 1229.468517][T20262] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1229.542720][T20257] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1229.894376][T20282] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1229.913277][T20282] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1229.920351][T20282] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1231.964306][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1231.970412][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1231.976609][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1232.364999][T20315] FAULT_INJECTION: forcing a failure.
[ 1232.364999][T20315] name failslab, interval 1, probability 0, space 0, times 0
[ 1232.378661][T20315] CPU: 1 UID: 0 PID: 20315 Comm: syz.0.3165 Not tainted syzkaller #0 PREEMPT(full) 
[ 1232.378692][T20315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1232.378706][T20315] Call Trace:
[ 1232.378714][T20315]  <TASK>
[ 1232.378722][T20315]  dump_stack_lvl+0x16c/0x1f0
[ 1232.378757][T20315]  should_fail_ex+0x512/0x640
[ 1232.378793][T20315]  ? fs_reclaim_acquire+0xae/0x150
[ 1232.378828][T20315]  should_failslab+0xc2/0x120
[ 1232.378860][T20315]  __kmalloc_noprof+0xdd/0x880
[ 1232.378897][T20315]  ? kfree+0x252/0x6d0
[ 1232.378916][T20315]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1232.378951][T20315]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1232.378978][T20315]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1232.379015][T20315]  tomoyo_check_open_permission+0x2ab/0x3c0
[ 1232.379039][T20315]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1232.379092][T20315]  ? lock_acquire+0x179/0x350
[ 1232.379125][T20315]  ? find_held_lock+0x2b/0x80
[ 1232.379149][T20315]  ? mnt_get_write_access+0x52/0x2f0
[ 1232.379185][T20315]  tomoyo_file_open+0x6b/0x90
[ 1232.379218][T20315]  security_file_open+0x84/0x1e0
[ 1232.379245][T20315]  do_dentry_open+0x596/0x1530
[ 1232.379282][T20315]  vfs_open+0x82/0x3f0
[ 1232.379319][T20315]  path_openat+0x1de4/0x2cb0
[ 1232.379356][T20315]  ? __pfx_path_openat+0x10/0x10
[ 1232.379392][T20315]  ? __lock_acquire+0xb8a/0x1c90
[ 1232.379428][T20315]  do_filp_open+0x20b/0x470
[ 1232.379455][T20315]  ? __pfx_do_filp_open+0x10/0x10
[ 1232.379505][T20315]  ? alloc_fd+0x471/0x7d0
[ 1232.379538][T20315]  do_sys_openat2+0x11b/0x1d0
[ 1232.379574][T20315]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1232.379622][T20315]  __x64_sys_openat+0x174/0x210
[ 1232.379659][T20315]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1232.379708][T20315]  do_syscall_64+0xcd/0xfa0
[ 1232.379741][T20315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.379765][T20315] RIP: 0033:0x7f9c24f8f749
[ 1232.379784][T20315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1232.379808][T20315] RSP: 002b:00007f9c25ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1232.379831][T20315] RAX: ffffffffffffffda RBX: 00007f9c251e5fa0 RCX: 00007f9c24f8f749
[ 1232.379847][T20315] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 1232.379862][T20315] RBP: 00007f9c25013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1232.379876][T20315] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000
[ 1232.379889][T20315] R13: 00007f9c251e6038 R14: 00007f9c251e5fa0 R15: 00007ffc76b75c08
[ 1232.379921][T20315]  </TASK>
[ 1232.379931][T20315] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1234.004620][T20321] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1234.136660][T20321] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1234.169958][T20321] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1234.938220][T20349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3173'.
[ 1234.969342][T20349] ipvlan0: entered promiscuous mode
[ 1234.979340][T20349] ipvlan0: entered allmulticast mode
[ 1235.295582][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1236.179851][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1236.179864][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1236.961845][T20355] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1236.968741][T20355] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1236.974969][T20355] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1238.478924][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1238.721058][T20389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1238.734395][T20389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1238.741231][T20389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1239.526793][T20399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'.
[ 1239.594354][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'.
[ 1240.787427][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1240.793650][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1241.263005][T20420] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1241.270905][T20420] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1241.277255][T20420] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1241.918672][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'.
[ 1242.366448][T20444] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1242.373465][T20444] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1242.388863][T20444] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1242.809219][T20470] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1242.824488][T20470] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1242.842436][T20470] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1243.817429][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.837001][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.730001][T20485] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1244.808193][T20485] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1244.814323][T20485] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1244.901979][T20502] random: crng reseeded on system resumption
[ 1244.948413][T20502] vhci_hcd: invalid port number 23
[ 1244.953613][T20502] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[ 1246.664173][T20526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3208'.
[ 1246.787841][T20518] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1246.810284][T20518] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1246.835545][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1246.908484][T20518] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1247.056789][T20510] Process accounting paused
[ 1248.044560][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1248.099803][T20549] nbd: must specify an index to disconnect
[ 1248.825491][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1248.906883][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1249.531683][T20569] vhci_hcd: invalid port number 16
[ 1250.432044][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3226'.
[ 1250.447141][T20578] ipvlan0: entered promiscuous mode
[ 1250.464685][T20576] random: crng reseeded on system resumption
[ 1250.492341][T20578] ipvlan0: entered allmulticast mode
[ 1250.516339][T20578] veth0_vlan: entered allmulticast mode
[ 1250.560228][T20576] vhci_hcd: invalid port number 23
[ 1250.565384][T20576] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[ 1251.637697][T20595] Unable to find swap-space signature
[ 1253.660135][T20608] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1253.692752][T20608] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1253.700291][T20608] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1254.269770][T20635] vhci_hcd: invalid port number 16
[ 1254.323790][T20637] vhci_hcd: invalid port number 16
[ 1254.963443][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1255.355480][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3232'.
[ 1255.576445][T20645] bond0: (slave bond_slave_0): Releasing backup interface
[ 1255.754581][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1255.760784][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1255.954208][T20660] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1255.999350][T20660] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1256.036545][T20660] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1258.027635][   T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 1 with error 117
[ 1258.027768][   T12] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1258.027768][   T12] 
[ 1258.059736][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1258.066265][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1258.699958][T20696] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1258.794146][T20696] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1258.835208][T20696] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1259.530704][T20721] nbd: must specify an index to disconnect
[ 1259.962653][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1260.846352][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1260.853025][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1262.000736][T20752] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1262.007330][T20752] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1262.026642][T20752] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1263.230273][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1264.030181][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1264.106223][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1266.942262][T20835] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1266.948403][T20835] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1267.051635][T20835] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1268.249666][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1268.960461][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1269.135638][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1269.715563][T20898] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1269.715938][T20898] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1269.758943][T20898] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1270.950132][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1271.756023][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1271.835833][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1272.011507][T20961] vhci_hcd: invalid port number 23
[ 1272.021507][T20961] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[ 1272.047770][T20962] vhci_hcd: invalid port number 16
[ 1272.349666][T20950] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1272.357772][T20950] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1272.367327][T20950] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1273.576623][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1274.372432][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1274.373295][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1275.876711][T21007] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1275.895001][T21007] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1275.901226][T21007] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1276.534507][T21028] vhci_hcd: invalid port number 16
[ 1277.396810][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1277.953865][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1277.960167][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1278.178417][T21049] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1278.185408][T21049] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1278.223370][T21049] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1278.335393][T21037] Process accounting resumed
[ 1279.794100][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1280.182111][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1280.262422][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1284.241456][T21140] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1284.269529][T21140] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1284.286105][T21140] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1285.593909][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1286.330504][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1286.336625][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1287.198431][T21207] vhci_hcd: invalid port number 16
[ 1288.887724][T21212] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1288.894189][T21212] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1288.900982][T21212] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1289.164536][T21221] Unable to find swap-space signature
[ 1289.639108][T21223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3366'.
[ 1289.748903][T21223] bond0: (slave bond_slave_0): Releasing backup interface
[ 1290.448811][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1290.942611][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1290.949025][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1292.557493][T21268] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1292.577724][T21268] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1292.583803][T21268] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1293.870835][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1294.587530][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1294.587541][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1296.602395][T21337] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1296.677233][T21337] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1296.753384][T21337] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1297.443984][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'.
[ 1297.860276][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1298.725653][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1298.805386][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1300.557797][T21390] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1300.608596][T21390] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1300.618426][T21390] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1301.829950][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1302.625582][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1302.631728][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1303.499320][T21428] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1303.519615][T21428] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1303.625819][T21428] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1304.774224][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1304.973742][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1304.980297][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.365887][T21459] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1305.372946][T21459] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1305.379047][T21459] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1306.843622][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1307.368094][   T30] audit: type=1804 audit(4294978341.163:28): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3425" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=16 res=1 errno=0
[ 1307.401189][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1307.410594][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1309.045531][T21503] Process accounting paused
[ 1309.714065][T21513] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1309.729325][T21513] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1309.766391][T21513] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1311.004152][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1311.778072][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1311.784209][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1312.245485][T21549] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1312.262834][T21549] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1312.275359][T21549] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1313.669567][T21572] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1313.715702][T21572] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1313.734879][T21572] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1314.882266][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1315.757257][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1315.757289][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1319.450011][T21661] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1319.458095][T21661] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1319.464328][T21661] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1320.614109][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1321.493527][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1321.493542][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1324.882477][T21739] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1324.899179][T21739] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1324.905909][T21739] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1326.103549][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1326.779137][T21770] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1326.792177][T21770] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1326.865664][T21770] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1327.994812][T21795] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1328.003994][T21795] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1328.016740][T21795] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1329.346528][T21818] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1329.375758][T21818] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1329.387788][T21818] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1330.883554][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1331.356013][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1331.436109][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1333.841631][T21884] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1333.847960][T21884] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1333.854877][T21884] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1335.100235][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1335.892589][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1335.893541][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1337.827526][T21937] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1337.834225][T21937] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1337.840368][T21937] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1339.076539][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1339.871945][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1339.871953][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1340.723839][T21972] Process accounting resumed
[ 1343.016614][T22020] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1343.029575][T22020] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1343.067914][T22020] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1344.487789][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1345.044781][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1345.124415][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1347.752531][T22080] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1347.771037][T22080] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1347.779383][T22080] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1349.561546][T22103] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1349.658682][T22103] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1349.710731][T22103] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1350.934236][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1351.650765][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1351.731608][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1352.293520][T22144] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1352.317487][T22144] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1352.333086][T22144] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1353.561201][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1354.368062][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1354.374166][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1356.545236][T22210] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1356.576857][T22210] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1356.597317][T22210] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1357.868984][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1358.578056][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1358.584149][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1360.844640][T22283] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3583'.
[ 1360.943604][T22283] netlink: zone id is out of range
[ 1361.031646][T22283] netlink: zone id is out of range
[ 1361.047087][T22283] netlink: zone id is out of range
[ 1361.071369][T22283] netlink: zone id is out of range
[ 1361.111030][T22283] netlink: zone id is out of range
[ 1361.116394][T22283] netlink: zone id is out of range
[ 1361.149005][T22283] netlink: zone id is out of range
[ 1361.240552][T22283] netlink: zone id is out of range
[ 1361.273955][T22283] netlink: zone id is out of range
[ 1361.299412][T22283] netlink: zone id is out of range
[ 1363.637002][T22273] kexec: Could not allocate control_code_buffer
[ 1365.946372][T21466] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 950 with max blocks 1 with error 117
[ 1365.990500][T21466] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1365.990500][T21466] 
[ 1366.068732][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.075112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.417721][T22371] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1367.466817][T22371] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1367.556960][T22371] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1368.766572][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1369.478031][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1369.559549][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1371.045124][T22424] Process accounting paused
[ 1371.942931][T22443] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1371.955685][T22443] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1371.964558][T22443] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1373.310002][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1374.014315][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1374.020567][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1375.775796][T22508] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1375.810845][T22508] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1375.835001][T22508] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1377.039216][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1377.844124][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1377.850190][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1384.200934][T22626] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 950 with max blocks 1 with error 117
[ 1384.222795][T22626] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1384.222795][T22626] 
[ 1385.064849][T22630] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1385.078601][T22630] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1385.106758][T22630] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1386.350093][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1387.148097][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1387.148123][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1387.750624][T22672] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1387.784858][T22672] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1387.812684][T22672] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1388.896755][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1389.851771][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1389.857921][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1391.633134][T22740] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1391.683216][T22740] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1391.784100][T22740] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1392.798325][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1393.752739][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1393.832900][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1394.601318][T22795] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1394.608006][T22795] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1394.614512][T22795] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1395.981333][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1396.616681][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1396.616672][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1397.891208][T22844] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1397.925526][T22844] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1397.969877][T22844] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1399.163392][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1399.959230][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1400.038827][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1400.543706][T22883] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1400.624333][T22883] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1400.702591][T22883] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1400.985177][T22881] Process accounting resumed
[ 1401.950307][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1402.665955][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1402.745358][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1406.538220][T22981] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1406.601098][T22981] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1406.628586][T22981] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1408.002225][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1408.636525][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1408.636542][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1410.135288][T23043] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1410.142506][T23043] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1410.160215][T23043] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1411.584430][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1412.275170][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1412.281254][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1417.910971][T23176] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 949 with max blocks 2 with error 117
[ 1417.948700][T23176] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1417.948700][T23176] 
[ 1419.249120][T23190] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1419.288959][T23190] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1419.295258][T23190] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1420.413735][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1421.289871][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1421.295981][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1422.521867][T23240] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1422.568232][T23240] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1422.590259][T23240] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1423.914985][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1424.641851][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1424.648058][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1427.028798][T23318] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1427.059301][T23318] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1427.065411][T23318] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1427.180681][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1427.187148][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.291779][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1429.089924][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1429.096042][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1429.946558][T23363] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1430.024619][T23363] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1430.046904][T23363] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1430.700035][T23382] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 950 with max blocks 1 with error 117
[ 1430.712786][T23382] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1430.712786][T23382] 
[ 1431.487357][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1431.707331][T23384] Process accounting paused
[ 1432.032549][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1432.038596][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1447.627605][T23656] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 949 with max blocks 2 with error 117
[ 1447.644395][T23656] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1447.644395][T23656] 
[ 1451.444455][T23712] 0x000200000001-0xa29656a63616329 : ""
[ 1451.470248][T23712] mtd: partition "" is out of reach -- disabled
[ 1451.497446][T23712] ftl_cs: FTL header not found.
[ 1451.577390][T23721] FAULT_INJECTION: forcing a failure.
[ 1451.577390][T23721] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1451.693673][T23721] CPU: 1 UID: 0 PID: 23721 Comm: syz.0.3853 Not tainted syzkaller #0 PREEMPT(full) 
[ 1451.693714][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1451.693730][T23721] Call Trace:
[ 1451.693740][T23721]  <TASK>
[ 1451.693750][T23721]  dump_stack_lvl+0x16c/0x1f0
[ 1451.693800][T23721]  should_fail_ex+0x512/0x640
[ 1451.693863][T23721]  get_futex_key+0x1d0/0x1560
[ 1451.693906][T23721]  ? __pfx_get_futex_key+0x10/0x10
[ 1451.693948][T23721]  ? __lock_acquire+0x622/0x1c90
[ 1451.693993][T23721]  futex_wake+0xea/0x530
[ 1451.694032][T23721]  ? futex_wait+0x120/0x380
[ 1451.694058][T23721]  ? __pfx_futex_wake+0x10/0x10
[ 1451.694106][T23721]  ? __fget_files+0x204/0x3c0
[ 1451.694146][T23721]  do_futex+0x1e3/0x350
[ 1451.694186][T23721]  ? __pfx_do_futex+0x10/0x10
[ 1451.694227][T23721]  ? fdget+0x187/0x210
[ 1451.694257][T23721]  ? __sys_sendmsg+0x18c/0x220
[ 1451.694292][T23721]  __x64_sys_futex+0x1e0/0x4c0
[ 1451.694341][T23721]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1451.694401][T23721]  do_syscall_64+0xcd/0xfa0
[ 1451.694443][T23721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1451.694476][T23721] RIP: 0033:0x7f9c24f8f749
[ 1451.694514][T23721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1451.694547][T23721] RSP: 002b:00007f9c25e850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1451.694581][T23721] RAX: ffffffffffffffda RBX: 00007f9c251e6188 RCX: 00007f9c24f8f749
[ 1451.694602][T23721] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c251e618c
[ 1451.694622][T23721] RBP: 00007f9c251e6180 R08: 00007f9c25ec8000 R09: 0000000000000000
[ 1451.694643][T23721] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1451.694663][T23721] R13: 00007f9c251e6218 R14: 00007ffc76b75b20 R15: 00007ffc76b75c08
[ 1451.694708][T23721]  </TASK>
[ 1453.812071][T23749] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1453.890827][T23749] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1453.906153][T23749] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1455.033128][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1455.918619][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1455.924832][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1462.266679][T23863] Process accounting resumed
[ 1463.144025][T23892] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3885'.
[ 1463.493810][T23861] kexec: Could not allocate control_code_buffer
[ 1471.028657][T24005] random: crng reseeded on system resumption
[ 1475.260117][T24077] hub 1-0:1.0: USB hub found
[ 1475.266137][T24077] hub 1-0:1.0: 1 port detected

syzkaller
syzkaller login: [ 1487.155750][T19724] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[ 1487.258660][T24267] net_ratelimit: 974 callbacks suppressed
[ 1487.258681][T24267] netlink: zone id is out of range
[ 1487.484599][T24267] netlink: del zone limit has 4 unknown bytes
[ 1487.604777][T24266] netlink: set zone limit has 8 unknown bytes
[ 1487.820869][T24265] openvswitch: HfR: Dropping previously announced user features
[ 1487.962158][T24265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3957'.
[ 1488.303101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1488.309517][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.175374][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1491.389046][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3969'.
[ 1492.640568][T24354] random: crng reseeded on system resumption
[ 1493.546687][T24335] Process accounting paused
[ 1524.967847][T24858] Process accounting resumed
[ 1532.536621][T24986] random: crng reseeded on system resumption
[ 1545.400862][T25215] random: crng reseeded on system resumption
[ 1548.060649][T25251] ima: policy update failed
[ 1548.065660][   T30] audit: type=1802 audit(4294967377.390:29): pid=25251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4137" res=0 errno=0
[ 1548.086270][T25251] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4137'.
[ 1549.462387][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1549.468923][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1553.730735][T25341] FAULT_INJECTION: forcing a failure.
[ 1553.730735][T25341] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1553.756974][T25341] CPU: 1 UID: 0 PID: 25341 Comm: syz.0.4155 Not tainted syzkaller #0 PREEMPT(full) 
[ 1553.757021][T25341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1553.757040][T25341] Call Trace:
[ 1553.757051][T25341]  <TASK>
[ 1553.757063][T25341]  dump_stack_lvl+0x16c/0x1f0
[ 1553.757111][T25341]  should_fail_ex+0x512/0x640
[ 1553.757166][T25341]  get_futex_key+0x1d0/0x1560
[ 1553.757214][T25341]  ? __pfx_get_futex_key+0x10/0x10
[ 1553.757257][T25341]  ? stack_trace_save+0x8e/0xc0
[ 1553.757297][T25341]  ? __pfx_stack_trace_save+0x10/0x10
[ 1553.757338][T25341]  ? stack_depot_save_flags+0x29/0x9c0
[ 1553.757394][T25341]  futex_wait_setup+0x9d/0x550
[ 1553.757438][T25341]  __futex_wait+0x193/0x2f0
[ 1553.757466][T25341]  ? __pfx___futex_wait+0x10/0x10
[ 1553.757501][T25341]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1553.757556][T25341]  ? futex_hash+0x2c5/0x380
[ 1553.757599][T25341]  ? futex_private_hash_put+0xd5/0x190
[ 1553.757642][T25341]  futex_wait+0xe8/0x380
[ 1553.757669][T25341]  ? __pfx_futex_wait+0x10/0x10
[ 1553.757705][T25341]  ? kmem_cache_free+0x2d4/0x6c0
[ 1553.757736][T25341]  ? putname+0x154/0x1a0
[ 1553.757791][T25341]  do_futex+0x229/0x350
[ 1553.757834][T25341]  ? __pfx_do_futex+0x10/0x10
[ 1553.757882][T25341]  ? find_held_lock+0x2b/0x80
[ 1553.757917][T25341]  __x64_sys_futex+0x1e0/0x4c0
[ 1553.757968][T25341]  ? __x64_sys_openat+0x174/0x210
[ 1553.758020][T25341]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1553.758082][T25341]  do_syscall_64+0xcd/0xfa0
[ 1553.758127][T25341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1553.758160][T25341] RIP: 0033:0x7f9c24f8f749
[ 1553.758184][T25341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1553.758215][T25341] RSP: 002b:00007f9c25ec70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1553.758245][T25341] RAX: ffffffffffffffda RBX: 00007f9c251e5fa8 RCX: 00007f9c24f8f749
[ 1553.758266][T25341] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c251e5fa8
[ 1553.758285][T25341] RBP: 00007f9c251e5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1553.758304][T25341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1553.758324][T25341] R13: 00007f9c251e6038 R14: 00007ffc76b75b20 R15: 00007ffc76b75c08
[ 1553.758356][T25341]  </TASK>
[ 1555.582058][T25361] Process accounting paused
[ 1557.738869][T25407] random: crng reseeded on system resumption
[ 1576.876448][T25696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4225'.
[ 1576.917785][T25696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1576.928772][T25696] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1576.960004][T25696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1576.969144][T25696] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1585.614666][T25810] mkiss: ax0: crc mode is auto.
[ 1586.140149][T25810] ptp ptp0: new virtual clock ptp1
[ 1586.148272][T25810] ptp ptp0: new virtual clock ptp2
[ 1586.156195][T25810] ptp ptp0: new virtual clock ptp3
[ 1586.161729][T25810] ptp ptp0: guarantee physical clock free running
[ 1586.400459][T25779] Process accounting resumed
[ 1588.748867][T25847] ima: policy update failed
[ 1588.777259][   T30] audit: type=1802 audit(4294967418.291:30): pid=25847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4255" res=0 errno=0
[ 1591.320153][T25881] mkiss: ax0: crc mode is auto.
[ 1591.510512][T25883] ptp ptp0: guarantee physical clock free running
[ 1596.786917][T14106] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[ 1596.794935][T14106] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1596.805750][T14106] CPU: 0 UID: 0 PID: 14106 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1596.805796][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1596.805820][T14106] Workqueue: hci3 hci_rx_work
[ 1596.805864][T14106] Call Trace:
[ 1596.805875][T14106]  <TASK>
[ 1596.805917][T14106]  dump_stack_lvl+0x16c/0x1f0
[ 1596.805962][T14106]  sysfs_warn_dup+0x7f/0xa0
[ 1596.806005][T14106]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1596.806049][T14106]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1596.806090][T14106]  ? find_held_lock+0x2b/0x80
[ 1596.806133][T14106]  ? do_raw_spin_unlock+0x172/0x230
[ 1596.806169][T14106]  kobject_add_internal+0x2c4/0x9b0
[ 1596.806225][T14106]  kobject_add+0x16e/0x240
[ 1596.806270][T14106]  ? __pfx_kobject_add+0x10/0x10
[ 1596.806318][T14106]  ? do_raw_spin_unlock+0x172/0x230
[ 1596.806349][T14106]  ? kobject_put+0xab/0x5a0
[ 1596.806407][T14106]  device_add+0x288/0x1aa0
[ 1596.806439][T14106]  ? __pfx_dev_set_name+0x10/0x10
[ 1596.806474][T14106]  ? __pfx_device_add+0x10/0x10
[ 1596.806506][T14106]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1596.806556][T14106]  hci_conn_add_sysfs+0x17e/0x230
[ 1596.806600][T14106]  le_conn_complete_evt+0x1260/0x2150
[ 1596.806649][T14106]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1596.806687][T14106]  ? bt_warn+0xe4/0x120
[ 1596.806717][T14106]  ? __pfx_bt_warn+0x10/0x10
[ 1596.806761][T14106]  hci_le_conn_complete_evt+0x23c/0x370
[ 1596.806808][T14106]  hci_le_meta_evt+0x357/0x5e0
[ 1596.806849][T14106]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1596.806900][T14106]  hci_event_packet+0x685/0x11c0
[ 1596.806937][T14106]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1596.806982][T14106]  ? __pfx_hci_event_packet+0x10/0x10
[ 1596.807024][T14106]  ? kcov_remote_start+0x3c9/0x6d0
[ 1596.807056][T14106]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1596.807108][T14106]  hci_rx_work+0x2c5/0x16b0
[ 1596.807150][T14106]  ? rcu_is_watching+0x12/0xc0
[ 1596.807193][T14106]  process_one_work+0x9cf/0x1b70
[ 1596.807263][T14106]  ? __pfx_process_one_work+0x10/0x10
[ 1596.807340][T14106]  ? assign_work+0x1a0/0x250
[ 1596.807392][T14106]  worker_thread+0x6c8/0xf10
[ 1596.807435][T14106]  ? __kthread_parkme+0x19e/0x250
[ 1596.807477][T14106]  ? __pfx_worker_thread+0x10/0x10
[ 1596.807507][T14106]  kthread+0x3c5/0x780
[ 1596.807555][T14106]  ? __pfx_kthread+0x10/0x10
[ 1596.807606][T14106]  ? rcu_is_watching+0x12/0xc0
[ 1596.807641][T14106]  ? __pfx_kthread+0x10/0x10
[ 1596.807691][T14106]  ret_from_fork+0x675/0x7d0
[ 1596.807739][T14106]  ? __pfx_kthread+0x10/0x10
[ 1596.807805][T14106]  ret_from_fork_asm+0x1a/0x30
[ 1596.807874][T14106]  </TASK>
[ 1596.807927][T14106] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1597.070476][T14106] Bluetooth: hci3: failed to register connection device
[ 1603.388494][T26071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4295'.
[ 1603.681235][T26071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1603.693589][T26071] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1603.728162][T26071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1603.760365][T26071] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1605.023727][T26088] bridge0: port 3(team0) entered blocking state
[ 1605.053748][T26088] bridge0: port 3(team0) entered disabled state
[ 1605.062906][T26088] team0: entered allmulticast mode
[ 1605.076774][T26088] team_slave_0: entered allmulticast mode
[ 1605.082859][T26088] team_slave_1: entered allmulticast mode
[ 1605.096994][T26088] team0: entered promiscuous mode
[ 1605.102445][T26088] team_slave_0: entered promiscuous mode
[ 1605.108513][T26088] team_slave_1: entered promiscuous mode
[ 1607.801912][T26132] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1607.823602][T26132] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1608.534019][T26148] ima: Unable to open file: /surit��R�y/integrity?iqa/policy (-2)
[ 1609.078834][T26148] ima: policy update failed
[ 1609.161319][   T30] audit: type=1802 audit(4294967438.777:31): pid=26148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4311" res=0 errno=0
[ 1610.548160][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1610.554687][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1610.858333][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'.
[ 1611.513509][T26203] ubi: mtd0 is already attached to ubi1
[ 1611.863983][T26199] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1611.871616][T26199] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1612.234019][T26186] netlink: 226 bytes leftover after parsing attributes in process `syz.2.4318'.
[ 1612.997635][T26229] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 950 with max blocks 1 with error 117
[ 1613.061468][T26229] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1613.061468][T26229] 
[ 1613.400227][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4327'.
[ 1613.561493][T26238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1613.569044][T26238] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1613.599515][T26238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1613.608137][T26238] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1616.062946][T26291] FAULT_INJECTION: forcing a failure.
[ 1616.062946][T26291] name failslab, interval 1, probability 0, space 0, times 0
[ 1616.086672][T26291] CPU: 1 UID: 0 PID: 26291 Comm: syz.3.4338 Not tainted syzkaller #0 PREEMPT(full) 
[ 1616.086717][T26291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1616.086737][T26291] Call Trace:
[ 1616.086749][T26291]  <TASK>
[ 1616.086763][T26291]  dump_stack_lvl+0x16c/0x1f0
[ 1616.086813][T26291]  should_fail_ex+0x512/0x640
[ 1616.086866][T26291]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1616.086913][T26291]  should_failslab+0xc2/0x120
[ 1616.086961][T26291]  __kmalloc_cache_noprof+0x72/0x780
[ 1616.086996][T26291]  ? vb2_vmalloc_alloc+0xf9/0x3f0
[ 1616.087037][T26291]  ? vb2_vmalloc_alloc+0xf9/0x3f0
[ 1616.087067][T26291]  vb2_vmalloc_alloc+0xf9/0x3f0
[ 1616.087101][T26291]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 1616.087134][T26291]  __vb2_queue_alloc+0x8c9/0x1280
[ 1616.087208][T26291]  vb2_core_reqbufs+0xa90/0xfe0
[ 1616.087272][T26291]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 1616.087363][T26291]  __vb2_init_fileio+0x3f1/0x1100
[ 1616.087392][T26291]  ? __mutex_lock+0x1c5/0x1060
[ 1616.087439][T26291]  ? __pfx___futex_wait+0x10/0x10
[ 1616.087468][T26291]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1616.087511][T26291]  __vb2_perform_fileio+0x9c2/0x1660
[ 1616.087552][T26291]  ? __pfx___vb2_perform_fileio+0x10/0x10
[ 1616.087616][T26291]  vb2_fop_read+0x215/0x3e0
[ 1616.087669][T26291]  ? common_file_perm+0x1a9/0x340
[ 1616.087711][T26291]  v4l2_read+0x229/0x360
[ 1616.087751][T26291]  ? __pfx_v4l2_read+0x10/0x10
[ 1616.087791][T26291]  vfs_read+0x1e4/0xcf0
[ 1616.087837][T26291]  ? __pfx_vfs_read+0x10/0x10
[ 1616.087872][T26291]  ? find_held_lock+0x2b/0x80
[ 1616.087918][T26291]  ? __fget_files+0x204/0x3c0
[ 1616.087960][T26291]  ? __fget_files+0x20e/0x3c0
[ 1616.088009][T26291]  ksys_read+0x12a/0x250
[ 1616.088046][T26291]  ? __pfx_ksys_read+0x10/0x10
[ 1616.088098][T26291]  do_syscall_64+0xcd/0xfa0
[ 1616.088144][T26291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1616.088178][T26291] RIP: 0033:0x7fb7ab58f749
[ 1616.088207][T26291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1616.088240][T26291] RSP: 002b:00007fb7ac375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1616.088273][T26291] RAX: ffffffffffffffda RBX: 00007fb7ab7e5fa0 RCX: 00007fb7ab58f749
[ 1616.088296][T26291] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004
[ 1616.088318][T26291] RBP: 00007fb7ab613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1616.088340][T26291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1616.088361][T26291] R13: 00007fb7ab7e6038 R14: 00007fb7ab7e5fa0 R15: 00007ffcf7bff3f8
[ 1616.088407][T26291]  </TASK>
[ 1617.439718][T26294] Process accounting paused
[ 1619.998700][T26370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4350'.
[ 1620.074791][T26370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1620.115702][T26370] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1620.194597][T26370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1620.213177][T26370] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1625.550210][T26462] random: crng reseeded on system resumption
[ 1625.577397][T26462] Restarting kernel threads ...
[ 1625.582875][T26462] Done restarting kernel threads.
[ 1628.092385][T26484] ptrace attach of ""[26498] was attempted by "./syz-executor exec"[26484]
[ 1631.849703][T26561] ubi: mtd0 is already attached to ubi1
[ 1636.095955][T26615] Process accounting resumed
[ 1642.836376][T26760] bridge0: port 3(team0) entered blocking state
[ 1642.854834][T26760] bridge0: port 3(team0) entered disabled state
[ 1642.955966][T26760] team0: entered allmulticast mode
[ 1642.961553][T26760] team_slave_0: entered allmulticast mode
[ 1643.025333][T26760] team_slave_1: entered allmulticast mode
[ 1643.038833][T26760] team0: entered promiscuous mode
[ 1643.065156][T26760] team_slave_0: entered promiscuous mode
[ 1643.125933][T26760] team_slave_1: entered promiscuous mode
[ 1643.132716][T26760] bridge0: port 3(team0) entered blocking state
[ 1643.139240][T26760] bridge0: port 3(team0) entered forwarding state
[ 1644.558724][T26789] ubi: mtd0 is already attached to ubi1
[ 1646.416708][T26820] random: crng reseeded on system resumption
[ 1649.230871][T26858] bridge0: port 3(team0) entered blocking state
[ 1649.243164][T26858] bridge0: port 3(team0) entered disabled state
[ 1649.250276][T26858] team0: entered allmulticast mode
[ 1649.255831][T26858] team_slave_0: entered allmulticast mode
[ 1649.261900][T26858] team_slave_1: entered allmulticast mode
[ 1649.273147][T26858] team0: entered promiscuous mode
[ 1649.278349][T26858] team_slave_0: entered promiscuous mode
[ 1649.284615][T26858] team_slave_1: entered promiscuous mode
[ 1649.292050][T26858] bridge0: port 3(team0) entered blocking state
[ 1649.298582][T26858] bridge0: port 3(team0) entered forwarding state
[ 1651.585304][T26903] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4441'.
[ 1651.670817][T26903] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4441'.
[ 1654.213187][T26944] Console: switching to colour VGA+ 80x25
[ 1654.408772][T26944] Console: switching to colour frame buffer device 128x48
[ 1654.474152][T26950] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4448'.
[ 1654.862520][T26940] bridge0: port 3(team0) entered blocking state
[ 1654.878270][T26940] bridge0: port 3(team0) entered disabled state
[ 1654.893567][T26940] team0: entered allmulticast mode
[ 1654.919734][T26940] team_slave_0: entered allmulticast mode
[ 1654.936291][T26940] team_slave_1: entered allmulticast mode
[ 1654.952162][T26940] team0: entered promiscuous mode
[ 1654.957608][T26940] team_slave_0: entered promiscuous mode
[ 1654.965067][T26940] team_slave_1: entered promiscuous mode
[ 1655.037534][T26940] bridge0: port 3(team0) entered blocking state
[ 1655.044075][T26940] bridge0: port 3(team0) entered forwarding state
[ 1658.923170][T27016] random: crng reseeded on system resumption
[ 1666.188874][T27125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4476'.
[ 1667.376289][T27128] Process accounting paused
[ 1670.424500][T27188] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1670.467491][T27188] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1671.671192][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1671.680083][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1672.043360][T27225] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 950 with max blocks 1 with error 117
[ 1672.123870][T27225] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1672.123870][T27225] 
[ 1672.715608][T27232] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4495: iget: checksum invalid
[ 1672.737088][T27232] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1672.826115][T27232] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4495: iget: checksum invalid
[ 1672.964189][T27232] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1673.041762][T27232] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4495: iget: checksum invalid
[ 1673.057875][T27232] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1673.074493][T27232] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4495: iget: checksum invalid
[ 1673.088568][T27232] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1673.098451][T27232] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1673.110357][T27232] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1673.992800][T27260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4500'.
[ 1675.563349][T27256] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1679.425881][T27328] FAULT_INJECTION: forcing a failure.
[ 1679.425881][T27328] name failslab, interval 1, probability 0, space 0, times 0
[ 1679.438813][T27328] CPU: 1 UID: 0 PID: 27328 Comm: syz.1.4513 Not tainted syzkaller #0 PREEMPT(full) 
[ 1679.438846][T27328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1679.438861][T27328] Call Trace:
[ 1679.438870][T27328]  <TASK>
[ 1679.438879][T27328]  dump_stack_lvl+0x16c/0x1f0
[ 1679.438914][T27328]  should_fail_ex+0x512/0x640
[ 1679.438951][T27328]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1679.438978][T27328]  should_failslab+0xc2/0x120
[ 1679.439056][T27328]  __kmalloc_cache_noprof+0x72/0x780
[ 1679.439081][T27328]  ? fscontext_alloc_log+0x4a/0x1b0
[ 1679.439120][T27328]  ? fscontext_alloc_log+0x4a/0x1b0
[ 1679.439152][T27328]  fscontext_alloc_log+0x4a/0x1b0
[ 1679.439187][T27328]  __x64_sys_fsopen+0x157/0x240
[ 1679.439222][T27328]  do_syscall_64+0xcd/0xfa0
[ 1679.439254][T27328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1679.439279][T27328] RIP: 0033:0x7fd68c98f749
[ 1679.439298][T27328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1679.439322][T27328] RSP: 002b:00007fd68d857038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[ 1679.439345][T27328] RAX: ffffffffffffffda RBX: 00007fd68cbe5fa0 RCX: 00007fd68c98f749
[ 1679.439362][T27328] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1679.439376][T27328] RBP: 00007fd68ca13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1679.439390][T27328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1679.439405][T27328] R13: 00007fd68cbe6038 R14: 00007fd68cbe5fa0 R15: 00007ffe4b9987d8
[ 1679.439436][T27328]  </TASK>
[ 1682.122725][T27369] random: crng reseeded on system resumption
[ 1682.549242][T27377] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4519: iget: checksum invalid
[ 1682.569841][T27377] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1682.582387][T27377] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4519: iget: checksum invalid
[ 1682.609597][T27377] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1682.762105][T27377] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4519: iget: checksum invalid
[ 1682.779759][T27377] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1682.800015][T27377] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4519: iget: checksum invalid
[ 1682.812336][T27377] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1682.822607][T27377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1682.832440][T27377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1684.118533][T27403] tipc: Started in network mode
[ 1684.124379][T27403] tipc: Node identity ee00, cluster identity 4711
[ 1684.130889][T27403] tipc: Node number set to 60928
[ 1684.158899][T27395] Process accounting resumed
[ 1686.243004][T27434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4528'.
[ 1688.178669][T22340] smpboot: CPU 0 is now offline
[ 1688.739590][T27457] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4533: iget: checksum invalid
[ 1688.838211][T27457] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1688.906842][T27457] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4533: iget: checksum invalid
[ 1688.984749][T27457] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1689.112235][T27457] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4533: iget: checksum invalid
[ 1689.266892][T27457] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1689.382201][T27457] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4533: iget: checksum invalid
[ 1689.488626][T27457] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1689.522182][T27457] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1689.558949][T27457] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1690.758162][T27490] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1690.857966][T27490] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1690.980331][T27490] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1691.174909][T27490] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1691.514415][T27490] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1691.923560][T27490] CPU0 is offline.
[ 1692.760294][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1692.915736][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1692.995251][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1695.065333][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1695.939347][T27547] program syz.0.4549 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1696.029047][   T30] audit: type=1800 audit(4294967313.751:32): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4551" name="dbroot" dev="configfs" ino=100924 res=0 errno=0
[ 1697.133829][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1698.047844][T27558] Process accounting resumed
[ 1699.344978][T27583] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4554'.
[ 1699.868334][   T30] audit: type=1326 audit(4294967317.611:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27589 comm="syz.0.4555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c24f8f749 code=0x0
[ 1703.371257][T27627] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1703.378979][T27645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4565'.
[ 1703.409011][T27627] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1703.425792][T27627] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1703.455947][T27627] CPU0 is offline.
[ 1704.255629][T27659] __vm_enough_memory: pid: 27659, comm: syz.3.4568, bytes: 8589938688 not enough memory for the allocation
[ 1704.535224][T19724] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1705.411565][T19724] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1705.491461][T19724] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1709.075835][T27715] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 941 with max blocks 10 with error 117
[ 1709.251281][T27715] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1709.251281][T27715] 
[ 1711.403651][T27741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4582'.
[ 1712.065069][T27741] bridge_slave_1 (unregistering): left allmulticast mode
[ 1712.065098][T27741] bridge_slave_1 (unregistering): left promiscuous mode
[ 1712.065171][T27741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1714.422673][T27765] Process accounting paused
[ 1718.097966][T27823] __vm_enough_memory: pid: 27823, comm: syz.3.4597, bytes: 4398046511104 not enough memory for the allocation
[ 1720.365366][T27837] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1720.403616][T27837] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1720.409761][T27837] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1720.439258][T27837] CPU0 is offline.
[ 1722.045494][T14106] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1722.442351][T14106] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1722.448947][T14106] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1726.218059][T27929] bcache: register_bcache() error : failed to open device
[ 1727.666997][T27953] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1727.851427][T27953] CIFS mount error: No usable UNC path provided in device string!
[ 1727.851427][T27953] 
[ 1727.946634][T27953] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1728.236988][T27949] Process accounting paused
[ 1728.692013][T27971] debugfs: '!PjE�r��҄y�*�"�l-���y–��L̓���]' already exists in 'ieee80211'
[ 1729.782988][T27995] FAULT_INJECTION: forcing a failure.
[ 1729.782988][T27995] name failslab, interval 1, probability 0, space 0, times 0
[ 1729.813856][T27995] CPU: 1 UID: 0 PID: 27995 Comm: syz.1.4623 Not tainted syzkaller #0 PREEMPT(full) 
[ 1729.813889][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1729.813905][T27995] Call Trace:
[ 1729.813913][T27995]  <TASK>
[ 1729.813922][T27995]  dump_stack_lvl+0x16c/0x1f0
[ 1729.813959][T27995]  should_fail_ex+0x512/0x640
[ 1729.813997][T27995]  ? __kmalloc_noprof+0xca/0x880
[ 1729.814039][T27995]  should_failslab+0xc2/0x120
[ 1729.814073][T27995]  __kmalloc_noprof+0xdd/0x880
[ 1729.814112][T27995]  ? slhc_init+0x1ad/0x570
[ 1729.814155][T27995]  ? slhc_init+0x1ad/0x570
[ 1729.814189][T27995]  slhc_init+0x1ad/0x570
[ 1729.814225][T27995]  ? kasan_save_track+0x14/0x30
[ 1729.814258][T27995]  slip_open+0x8ee/0x1150
[ 1729.814306][T27995]  ? __pfx_n_tty_close+0x10/0x10
[ 1729.814340][T27995]  ? __pfx_slip_open+0x10/0x10
[ 1729.814374][T27995]  ? down_write+0x14d/0x200
[ 1729.814408][T27995]  ? __pfx_slip_open+0x10/0x10
[ 1729.814442][T27995]  tty_ldisc_open+0x9f/0x120
[ 1729.814464][T27995]  tty_set_ldisc+0x32b/0x780
[ 1729.814491][T27995]  tty_ioctl+0xc2d/0x1680
[ 1729.814518][T27995]  ? __pfx_tty_ioctl+0x10/0x10
[ 1729.814552][T27995]  ? find_held_lock+0x2b/0x80
[ 1729.814576][T27995]  ? hook_file_ioctl_common+0x145/0x410
[ 1729.814614][T27995]  ? __fget_files+0x20e/0x3c0
[ 1729.814644][T27995]  ? __pfx_tty_ioctl+0x10/0x10
[ 1729.814672][T27995]  __x64_sys_ioctl+0x18e/0x210
[ 1729.814710][T27995]  do_syscall_64+0xcd/0xfa0
[ 1729.814742][T27995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1729.814766][T27995] RIP: 0033:0x7fd68c98f749
[ 1729.814784][T27995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1729.814806][T27995] RSP: 002b:00007fd68d836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1729.814829][T27995] RAX: ffffffffffffffda RBX: 00007fd68cbe6090 RCX: 00007fd68c98f749
[ 1729.814845][T27995] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008
[ 1729.814862][T27995] RBP: 00007fd68ca13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1729.814876][T27995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1729.814890][T27995] R13: 00007fd68cbe6128 R14: 00007fd68cbe6090 R15: 00007ffe4b9987d8
[ 1729.814922][T27995]  </TASK>
[ 1730.994436][T28011] random: crng reseeded on system resumption
[ 1732.793490][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1732.801585][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1734.061714][T27879] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1734.194733][T28037] kexec: Could not allocate control_code_buffer
[ 1741.326129][T28140] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1741.748748][T28152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4646'.
[ 1741.911999][T28154] netlink: 93 bytes leftover after parsing attributes in process `syz.0.4646'.
[ 1742.694324][T28164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4649'.
[ 1743.618164][T27879] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1744.921170][   T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 948 with max blocks 3 with error 117
[ 1744.977255][   T12] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1744.977255][   T12] 
[ 1745.026791][   T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 1 with error 117
[ 1745.114788][   T12] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1745.114788][   T12] 
[ 1745.165756][   T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1351 with max blocks 7 with error 117
[ 1745.236414][   T12] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1745.236414][   T12] 
[ 1745.292248][T28176] delete_channel: no stack
[ 1745.427601][T28176] Process accounting resumed
[ 1746.741912][T28216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4658'.
[ 1746.924172][T28216] netlink: 93 bytes leftover after parsing attributes in process `syz.1.4658'.
[ 1748.326884][T28234] netlink: 354 bytes leftover after parsing attributes in process `syz.0.4662'.
[ 1752.048470][T27879] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1754.943067][T28306] random: crng reseeded on system resumption
[ 1759.814169][T28268] Process accounting resumed
[ 1761.694080][T28351] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[ 1761.798982][T28351] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[ 1761.848939][T28351] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[ 1762.916038][T19724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1762.927129][T19724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1762.936425][T19724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1762.945855][T19724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1762.968688][T19724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1763.919102][T28363] chnl_net:caif_netlink_parms(): no params data found
[ 1764.325323][T28363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1764.360375][T28363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1764.393525][T28363] bridge_slave_0: entered allmulticast mode
[ 1764.422999][T28363] bridge_slave_0: entered promiscuous mode
[ 1764.466781][T28363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1764.483615][T28363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1764.509915][T28363] bridge_slave_1: entered allmulticast mode
[ 1764.533335][T28363] bridge_slave_1: entered promiscuous mode
[ 1764.632269][T28363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1764.679560][T28363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1764.820927][T28363] team0: Port device team_slave_0 added
[ 1764.937013][T28363] team0: Port device team_slave_1 added
[ 1765.020809][T19724] Bluetooth: hci5: command tx timeout
[ 1765.098520][T28363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1765.114612][T28363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1765.140537][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1765.169919][T28363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1765.238517][T28363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1765.254279][T28363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1765.312706][T28363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1765.532801][T28363] hsr_slave_0: entered promiscuous mode
[ 1765.568399][T28363] hsr_slave_1: entered promiscuous mode
[ 1765.588481][T28363] debugfs: 'hsr0' already exists in 'hsr'
[ 1765.607578][T28363] Cannot create hsr debugfs directory
[ 1765.924566][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'.
[ 1766.706460][T28363] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1766.740458][T28363] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1766.795282][T28363] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1766.818568][T28363] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1767.090337][T19724] Bluetooth: hci5: command tx timeout
[ 1767.117241][T28363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1767.182553][T28363] 8021q: adding VLAN 0 to HW filter on device team0
[ 1767.228575][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1767.235787][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1767.279941][T20838] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1767.287129][T20838] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1767.860878][T28363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1768.610319][T28363] veth0_vlan: entered promiscuous mode
[ 1768.663833][T28363] veth1_vlan: entered promiscuous mode
[ 1768.746734][T28363] veth0_macvtap: entered promiscuous mode
[ 1768.781271][T28363] veth1_macvtap: entered promiscuous mode
[ 1768.837998][T28363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1768.902784][T28363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1768.944987][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1768.960044][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1768.995067][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.030283][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.160285][T19724] Bluetooth: hci5: command tx timeout
[ 1769.242678][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.279795][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.364996][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.389477][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.991389][T28435] delete_channel: no stack
[ 1770.249890][T19724] Bluetooth: hci3: unexpected event 0x32 length: 727 > 9
[ 1770.328623][T28455] ptp ptp0: delete virtual clock ptp3
[ 1770.392390][T28455] ptp ptp0: delete virtual clock ptp2
[ 1770.493708][T28455] ptp ptp0: delete virtual clock ptp1
[ 1770.655152][T28455] ptp ptp0: only physical clock in use now
[ 1771.228414][T19724] Bluetooth: hci5: command tx timeout
[ 1771.640637][T28469] Invalid ELF header magic: != ELF
[ 1772.484613][T28468] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1772.644392][ T5899] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1772.662721][ T5899] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1772.701085][ T5899] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1772.708688][ T5899] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1772.769419][ T5899] rtc rtc0: __rtc_set_alarm: err=-22
[ 1773.569332][T28489] FAULT_INJECTION: forcing a failure.
[ 1773.569332][T28489] name failslab, interval 1, probability 0, space 0, times 0
[ 1773.602920][T28489] CPU: 1 UID: 0 PID: 28489 Comm: syz.3.4707 Not tainted syzkaller #0 PREEMPT(full) 
[ 1773.602959][T28489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1773.602975][T28489] Call Trace:
[ 1773.602983][T28489]  <TASK>
[ 1773.602992][T28489]  dump_stack_lvl+0x16c/0x1f0
[ 1773.603027][T28489]  should_fail_ex+0x512/0x640
[ 1773.603065][T28489]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1773.603093][T28489]  should_failslab+0xc2/0x120
[ 1773.603126][T28489]  __kmalloc_cache_noprof+0x72/0x780
[ 1773.603149][T28489]  ? vhost_net_open+0x2d/0x8a0
[ 1773.603187][T28489]  ? vhost_net_open+0x73/0x8a0
[ 1773.603228][T28489]  ? __pfx_vhost_net_open+0x10/0x10
[ 1773.603265][T28489]  ? vhost_net_open+0x73/0x8a0
[ 1773.603301][T28489]  vhost_net_open+0x73/0x8a0
[ 1773.603338][T28489]  ? __pfx_vhost_net_open+0x10/0x10
[ 1773.603377][T28489]  misc_open+0x26d/0x450
[ 1773.603414][T28489]  ? __pfx_misc_open+0x10/0x10
[ 1773.603453][T28489]  chrdev_open+0x234/0x6a0
[ 1773.603482][T28489]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1773.603518][T28489]  ? __pfx_chrdev_open+0x10/0x10
[ 1773.603549][T28489]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 1773.603583][T28489]  do_dentry_open+0x982/0x1530
[ 1773.603611][T28489]  ? __pfx_chrdev_open+0x10/0x10
[ 1773.603647][T28489]  vfs_open+0x82/0x3f0
[ 1773.603684][T28489]  path_openat+0x1de4/0x2cb0
[ 1773.603721][T28489]  ? __pfx_path_openat+0x10/0x10
[ 1773.603750][T28489]  ? __lock_acquire+0xb8a/0x1c90
[ 1773.603787][T28489]  do_filp_open+0x20b/0x470
[ 1773.603814][T28489]  ? __pfx_do_filp_open+0x10/0x10
[ 1773.603863][T28489]  ? alloc_fd+0x471/0x7d0
[ 1773.603895][T28489]  do_sys_openat2+0x11b/0x1d0
[ 1773.603935][T28489]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1773.603984][T28489]  __x64_sys_openat+0x174/0x210
[ 1773.604021][T28489]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1773.604071][T28489]  do_syscall_64+0xcd/0xfa0
[ 1773.604103][T28489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1773.604128][T28489] RIP: 0033:0x7fb7ab58f749
[ 1773.604149][T28489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1773.604172][T28489] RSP: 002b:00007fb7ac375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1773.604196][T28489] RAX: ffffffffffffffda RBX: 00007fb7ab7e5fa0 RCX: 00007fb7ab58f749
[ 1773.604212][T28489] RDX: 000000000000a000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1773.604227][T28489] RBP: 00007fb7ab613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1773.604255][T28489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1773.604269][T28489] R13: 00007fb7ab7e6038 R14: 00007fb7ab7e5fa0 R15: 00007ffcf7bff3f8
[ 1773.604301][T28489]  </TASK>
[ 1773.863259][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1774.432265][T28484] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1774.442490][T28484] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1774.462067][T28484] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1774.489757][T28484] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1774.511652][T28484] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1774.537167][T28484] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1774.606571][T28484] CPU0 is offline.
[ 1775.407566][T28498] Process accounting paused
[ 1776.481309][T19724] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1776.487730][T27879] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1776.494207][T27879] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1776.500224][T27879] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1778.550337][T28531] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1779.645035][T14106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1779.654399][T14106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1779.663105][T14106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1779.673840][T14106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1779.681676][T14106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1780.620017][T28531] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1780.691218][T28575] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1781.442055][T28571] chnl_net:caif_netlink_parms(): no params data found
[ 1781.667405][T28591] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input49
[ 1781.735486][T28531] Bluetooth: hci4: command tx timeout
[ 1781.903592][T28531] Bluetooth: hci5: unexpected subevent 0x05 length: 123 > 12
[ 1782.043023][   T43] Process accounting resumed
[ 1782.218592][T28571] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1782.250310][T28571] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1782.286375][T28571] bridge_slave_0: entered allmulticast mode
[ 1782.326610][T28571] bridge_slave_0: entered promiscuous mode
[ 1782.409638][T28571] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1782.449085][T28571] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1782.469832][T28571] bridge_slave_1: entered allmulticast mode
[ 1782.503964][T28571] bridge_slave_1: entered promiscuous mode
[ 1782.634011][T28571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1782.667002][T28602] erspan0: entered allmulticast mode
[ 1782.676357][T28571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1782.783547][T28571] team0: Port device team_slave_0 added
[ 1782.900837][T28571] team0: Port device team_slave_1 added
[ 1783.057776][T28571] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1783.081561][T28571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1783.178069][T28571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1783.219900][T28571] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1783.236111][T28571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1783.307019][T28571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1783.426737][T28571] hsr_slave_0: entered promiscuous mode
[ 1783.441307][T28571] hsr_slave_1: entered promiscuous mode
[ 1783.465575][T28571] debugfs: 'hsr0' already exists in 'hsr'
[ 1783.494631][T28571] Cannot create hsr debugfs directory
[ 1783.773820][T28614] random: crng reseeded on system resumption
[ 1783.804023][T28531] Bluetooth: hci4: command tx timeout
[ 1783.962201][T28531] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1784.421953][T28571] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1784.536649][T28571] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1784.598658][T28571] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1784.641143][T28571] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1785.275693][T28571] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1785.372296][T28571] 8021q: adding VLAN 0 to HW filter on device team0
[ 1785.452255][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1785.459463][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1785.518781][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1785.526054][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1785.874173][T28531] Bluetooth: hci4: command tx timeout
[ 1786.753846][T28571] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1787.009958][T28657] FAULT_INJECTION: forcing a failure.
[ 1787.009958][T28657] name failslab, interval 1, probability 0, space 0, times 0
[ 1787.137442][T28657] CPU: 1 UID: 0 PID: 28657 Comm: syz.3.4731 Not tainted syzkaller #0 PREEMPT(full) 
[ 1787.137486][T28657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1787.137506][T28657] Call Trace:
[ 1787.137517][T28657]  <TASK>
[ 1787.137530][T28657]  dump_stack_lvl+0x16c/0x1f0
[ 1787.137574][T28657]  should_fail_ex+0x512/0x640
[ 1787.137623][T28657]  ? __kmalloc_noprof+0xca/0x880
[ 1787.137693][T28657]  should_failslab+0xc2/0x120
[ 1787.137727][T28657]  __kmalloc_noprof+0xdd/0x880
[ 1787.137766][T28657]  ? ops_init+0x77/0x5f0
[ 1787.137796][T28657]  ? ops_init+0x77/0x5f0
[ 1787.137818][T28657]  ops_init+0x77/0x5f0
[ 1787.137846][T28657]  setup_net+0x100/0x390
[ 1787.137872][T28657]  ? __pfx_setup_net+0x10/0x10
[ 1787.137899][T28657]  ? debug_mutex_init+0x37/0x70
[ 1787.137928][T28657]  copy_net_ns+0x2f8/0x690
[ 1787.137960][T28657]  create_new_namespaces+0x3ea/0xa90
[ 1787.137995][T28657]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1787.138026][T28657]  ksys_unshare+0x45b/0xa40
[ 1787.138058][T28657]  ? __pfx_ksys_unshare+0x10/0x10
[ 1787.138092][T28657]  ? xfd_validate_state+0x61/0x180
[ 1787.138135][T28657]  __x64_sys_unshare+0x31/0x40
[ 1787.138167][T28657]  do_syscall_64+0xcd/0xfa0
[ 1787.138199][T28657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1787.138223][T28657] RIP: 0033:0x7fb7ab58f749
[ 1787.138242][T28657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1787.138265][T28657] RSP: 002b:00007fb7ac375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1787.138288][T28657] RAX: ffffffffffffffda RBX: 00007fb7ab7e5fa0 RCX: 00007fb7ab58f749
[ 1787.138304][T28657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1787.138319][T28657] RBP: 00007fb7ab613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1787.138333][T28657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1787.138348][T28657] R13: 00007fb7ab7e6038 R14: 00007fb7ab7e5fa0 R15: 00007ffcf7bff3f8
[ 1787.138380][T28657]  </TASK>
[ 1787.918791][T28654] Process accounting resumed
[ 1787.961748][T28531] Bluetooth: hci4: command tx timeout
[ 1788.497018][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4735'.
[ 1788.573907][T28571] veth0_vlan: entered promiscuous mode
[ 1788.633794][T28571] veth1_vlan: entered promiscuous mode
[ 1788.866933][T28571] veth0_macvtap: entered promiscuous mode
[ 1788.909585][T28571] veth1_macvtap: entered promiscuous mode
[ 1789.077371][T28571] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1789.120426][T28571] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1789.283101][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.313524][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.370046][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.400765][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1789.990283][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1790.044350][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1790.132435][T20838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1790.205487][T20838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1793.918855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1793.931254][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1796.031533][T28783] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1798.538181][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.035332][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.137611][T28531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1799.150581][T28531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1799.159450][T28531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1799.168180][T28531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1799.176059][T28531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1799.321170][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1800.578782][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1801.232621][T28531] Bluetooth: hci4: command tx timeout
[ 1801.628980][T28823] chnl_net:caif_netlink_parms(): no params data found
[ 1801.778183][   T36] bridge_slave_1: left allmulticast mode
[ 1801.806537][   T36] bridge_slave_1: left promiscuous mode
[ 1801.832980][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1802.015812][   T36] bridge_slave_0: left allmulticast mode
[ 1802.039901][   T36] bridge_slave_0: left promiscuous mode
[ 1802.059923][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1802.248220][T28867] serio: Serial port ttyS2
[ 1803.301997][T28531] Bluetooth: hci4: command tx timeout
[ 1803.656263][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1803.685476][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1803.710931][   T36] bond0 (unregistering): Released all slaves
[ 1804.628156][T28823] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1804.664152][T28823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1804.712312][T28823] bridge_slave_0: entered allmulticast mode
[ 1804.750626][T28823] bridge_slave_0: entered promiscuous mode
[ 1805.015820][T28823] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1805.047833][T28823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1805.094459][T28823] bridge_slave_1: entered allmulticast mode
[ 1805.136206][T28823] bridge_slave_1: entered promiscuous mode
[ 1805.233797][T20838] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1359 with max blocks 3 with error 117
[ 1805.313002][   T36] hsr_slave_0: left promiscuous mode
[ 1805.319128][T20838] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1805.319128][T20838] 
[ 1805.351298][   T36] hsr_slave_1: left promiscuous mode
[ 1805.372713][T28531] Bluetooth: hci4: command tx timeout
[ 1805.400092][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1805.435540][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1805.477873][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1805.511130][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1805.671851][   T36] veth1_macvtap: left promiscuous mode
[ 1805.678298][   T36] veth0_macvtap: left promiscuous mode
[ 1805.725634][   T36] veth1_vlan: left promiscuous mode
[ 1805.755911][   T36] veth0_vlan: left promiscuous mode
[ 1806.739339][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1806.799970][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1807.369165][T28823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1807.440694][T28531] Bluetooth: hci4: command tx timeout
[ 1807.453794][T28823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1807.703369][T28823] team0: Port device team_slave_0 added
[ 1807.769807][T28823] team0: Port device team_slave_1 added
[ 1808.213638][T28823] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1808.248567][T28823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1808.378221][T28823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1808.440050][T28823] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1808.472879][T28823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1808.578798][T28823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1808.999067][T28823] hsr_slave_0: entered promiscuous mode
[ 1809.052622][T28823] hsr_slave_1: entered promiscuous mode
[ 1809.059436][T28823] debugfs: 'hsr0' already exists in 'hsr'
[ 1809.105692][T28823] Cannot create hsr debugfs directory
[ 1810.306733][T28960] ovs_��: entered promiscuous mode
[ 1811.486618][T28823] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1811.544534][T28823] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1811.580605][T28823] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1811.619854][T28823] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1812.181712][T28823] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1812.339692][T28823] 8021q: adding VLAN 0 to HW filter on device team0
[ 1812.489734][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1812.497010][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1812.545207][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1812.552377][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1812.931134][T28823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1813.630344][T28531] Bluetooth: hci3: unexpected subevent 0x05 length: 123 > 12
[ 1814.153090][T28823] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1814.828782][T29060] vhci_hcd: invalid port number 21
[ 1814.865636][T29060] vhci_hcd: invalid port number 21
[ 1815.342401][T28823] veth0_vlan: entered promiscuous mode
[ 1815.407594][T28823] veth1_vlan: entered promiscuous mode
[ 1815.515571][T28823] veth0_macvtap: entered promiscuous mode
[ 1815.582125][T28823] veth1_macvtap: entered promiscuous mode
[ 1815.641730][T28531] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1815.657074][T28823] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1815.722138][T28823] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1815.766112][T29045] FAULT_INJECTION: forcing a failure.
[ 1815.766112][T29045] name failslab, interval 1, probability 0, space 0, times 0
[ 1815.766150][T29045] CPU: 1 UID: 0 PID: 29045 Comm: syz.3.4778 Not tainted syzkaller #0 PREEMPT(full) 
[ 1815.766177][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1815.766191][T29045] Call Trace:
[ 1815.766199][T29045]  <TASK>
[ 1815.766208][T29045]  dump_stack_lvl+0x16c/0x1f0
[ 1815.766242][T29045]  should_fail_ex+0x512/0x640
[ 1815.766278][T29045]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1815.766304][T29045]  should_failslab+0xc2/0x120
[ 1815.766367][T29045]  __kmalloc_cache_noprof+0x72/0x780
[ 1815.766391][T29045]  ? vc_allocate+0x16c/0x880
[ 1815.766422][T29045]  ? vc_allocate+0x16c/0x880
[ 1815.766447][T29045]  vc_allocate+0x16c/0x880
[ 1815.766472][T29045]  ? __pfx_vc_allocate+0x10/0x10
[ 1815.766509][T29045]  con_install+0xa1/0x600
[ 1815.766536][T29045]  ? __pfx_con_install+0x10/0x10
[ 1815.766568][T29045]  ? __pfx_con_install+0x10/0x10
[ 1815.766595][T29045]  tty_init_dev.part.0+0x9c/0x500
[ 1815.766631][T29045]  tty_open+0xa4f/0xf90
[ 1815.766666][T29045]  ? __pfx_tty_open+0x10/0x10
[ 1815.766696][T29045]  ? chrdev_open+0x10b/0x6a0
[ 1815.766729][T29045]  ? __pfx_tty_open+0x10/0x10
[ 1815.766758][T29045]  chrdev_open+0x234/0x6a0
[ 1815.766786][T29045]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1815.766824][T29045]  ? __pfx_chrdev_open+0x10/0x10
[ 1815.766856][T29045]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 1815.766889][T29045]  do_dentry_open+0x982/0x1530
[ 1815.766918][T29045]  ? __pfx_chrdev_open+0x10/0x10
[ 1815.766955][T29045]  vfs_open+0x82/0x3f0
[ 1815.766993][T29045]  path_openat+0x1de4/0x2cb0
[ 1815.767031][T29045]  ? __pfx_path_openat+0x10/0x10
[ 1815.767060][T29045]  ? __lock_acquire+0xb8a/0x1c90
[ 1815.767097][T29045]  do_filp_open+0x20b/0x470
[ 1815.767125][T29045]  ? __pfx_do_filp_open+0x10/0x10
[ 1815.767175][T29045]  ? alloc_fd+0x471/0x7d0
[ 1815.767208][T29045]  do_sys_openat2+0x11b/0x1d0
[ 1815.767244][T29045]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1815.767293][T29045]  __x64_sys_openat+0x174/0x210
[ 1815.767334][T29045]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1815.767385][T29045]  do_syscall_64+0xcd/0xfa0
[ 1815.767418][T29045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1815.767455][T29045] RIP: 0033:0x7fb7ab58f749
[ 1815.767473][T29045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1815.767496][T29045] RSP: 002b:00007fb7a97f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1815.767517][T29045] RAX: ffffffffffffffda RBX: 00007fb7ab7e6180 RCX: 00007fb7ab58f749
[ 1815.767533][T29045] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1815.767547][T29045] RBP: 00007fb7ab613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1815.767561][T29045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1815.767575][T29045] R13: 00007fb7ab7e6218 R14: 00007fb7ab7e6180 R15: 00007ffcf7bff3f8
[ 1815.767606][T29045]  </TASK>
[ 1815.799970][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1815.800052][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1815.800090][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1815.800127][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1816.221286][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1816.221341][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1816.355510][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1816.355535][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1817.801868][T29092] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000
[ 1817.802228][T29092] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 1817.802531][T29092] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[ 1817.802557][T29092] raw: ffff888078000f00 0000000000000000 0000000300000001 0000000000000000
[ 1817.802834][T29092] page dumped because: unmovable page
[ 1817.802848][T29092] page_owner tracks the page as allocated
[ 1817.803183][T29092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 28356, tgid 28356 (syz-executor), ts 1762089352348, free_ts 1759888029727
[ 1817.803492][T29092]  post_alloc_hook+0x1af/0x220
[ 1817.803536][T29092]  get_page_from_freelist+0x10a3/0x3a30
[ 1817.803825][T29092]  __alloc_frozen_pages_noprof+0x25f/0x2470
[ 1817.803853][T29092]  alloc_pages_mpol+0x1fb/0x550
[ 1817.804150][T29092]  alloc_pages_noprof+0x131/0x390
[ 1817.804190][T29092]  __vmalloc_node_range_noprof+0x6f8/0x1480
[ 1817.804314][T29092]  vmalloc_user_noprof+0x9e/0xe0
[ 1817.804349][T29092]  kcov_ioctl+0x4c/0x730
[ 1817.804372][T29092]  __x64_sys_ioctl+0x18e/0x210
[ 1817.804407][T29092]  do_syscall_64+0xcd/0xfa0
[ 1817.804437][T29092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.804461][T29092] page last free pid 28316 tgid 28310 stack trace:
[ 1817.804477][T29092]  __free_frozen_pages+0x7df/0x1160
[ 1817.804513][T29092]  tlb_remove_table_rcu+0x121/0x320
[ 1817.804548][T29092]  rcu_core+0x79c/0x1530
[ 1817.804569][T29092]  handle_softirqs+0x219/0x8e0
[ 1817.804596][T29092]  __irq_exit_rcu+0x109/0x170
[ 1817.804622][T29092]  irq_exit_rcu+0x9/0x30
[ 1817.804649][T29092]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1817.804677][T29092]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1818.112877][T29098] Process accounting paused
[ 1818.683125][T29093] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1822.590517][T29166] Console: switching to colour VGA+ 80x25
[ 1822.599240][T20838] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 1 with error 117
[ 1822.599281][T20838] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1822.599281][T20838] 
[ 1824.281805][T28531] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1825.655578][T29201] hub 8-0:1.0: USB hub found
[ 1825.682118][T29203] random: crng reseeded on system resumption
[ 1825.736073][T29201] hub 8-0:1.0: 1 port detected
[ 1826.047685][T28531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1826.059379][T28531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1826.069184][T28531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1826.079862][T28531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1826.088795][T28531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1826.302032][T28531] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1826.956369][T29204] chnl_net:caif_netlink_parms(): no params data found
[ 1827.274163][T29204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1827.308319][T29204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1827.330914][T29204] bridge_slave_0: entered allmulticast mode
[ 1827.359454][T29204] bridge_slave_0: entered promiscuous mode
[ 1827.392946][T29204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1827.436293][T29204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1827.443564][T29204] bridge_slave_1: entered allmulticast mode
[ 1827.498258][T29204] bridge_slave_1: entered promiscuous mode
[ 1827.689020][T29204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1827.743227][T29204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1827.916653][T29204] team0: Port device team_slave_0 added
[ 1827.969411][T29204] team0: Port device team_slave_1 added
[ 1828.134695][T28531] Bluetooth: hci6: command tx timeout
[ 1828.159637][T29204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1828.181634][T29204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1828.301685][T29204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1828.354979][T29204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1828.391321][T29204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1828.516323][T29204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1828.738503][T29204] hsr_slave_0: entered promiscuous mode
[ 1828.760192][T29204] hsr_slave_1: entered promiscuous mode
[ 1828.792320][T29204] debugfs: 'hsr0' already exists in 'hsr'
[ 1828.821915][T29204] Cannot create hsr debugfs directory
[ 1829.876490][T29204] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1829.959151][T29204] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1830.002271][T29204] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1830.040567][T29204] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1830.205628][T28531] Bluetooth: hci6: command tx timeout
[ 1830.684657][T29204] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1830.894096][T29204] 8021q: adding VLAN 0 to HW filter on device team0
[ 1830.975216][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1830.982480][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1831.064021][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1831.071219][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1831.907073][T29204] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1832.271394][T28531] Bluetooth: hci6: command tx timeout
[ 1832.308956][T28531] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12
[ 1833.162254][T29204] veth0_vlan: entered promiscuous mode
[ 1833.231543][T29204] veth1_vlan: entered promiscuous mode
[ 1833.496542][T29300] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[ 1833.578581][T29204] veth0_macvtap: entered promiscuous mode
[ 1833.630115][T29204] veth1_macvtap: entered promiscuous mode
[ 1833.735184][T29204] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1833.784865][T29204] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1833.885296][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.923785][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1833.988907][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1834.041765][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1834.340899][T28531] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1834.347872][T14106] Bluetooth: hci6: command tx timeout
[ 1834.430974][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.479421][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1834.592107][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.639164][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1836.129569][T29339] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1837.752170][T29363] FAULT_INJECTION: forcing a failure.
[ 1837.752170][T29363] name failslab, interval 1, probability 0, space 0, times 0
[ 1837.813481][T29363] CPU: 1 UID: 0 PID: 29363 Comm: syz.6.4823 Not tainted syzkaller #0 PREEMPT(full) 
[ 1837.813515][T29363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1837.813530][T29363] Call Trace:
[ 1837.813539][T29363]  <TASK>
[ 1837.813549][T29363]  dump_stack_lvl+0x16c/0x1f0
[ 1837.813583][T29363]  should_fail_ex+0x512/0x640
[ 1837.813621][T29363]  ? __kmalloc_noprof+0xca/0x880
[ 1837.813664][T29363]  should_failslab+0xc2/0x120
[ 1837.813697][T29363]  __kmalloc_noprof+0xdd/0x880
[ 1837.813737][T29363]  ? process_preds+0x46c/0x1c50
[ 1837.813775][T29363]  ? process_preds+0x46c/0x1c50
[ 1837.813807][T29363]  process_preds+0x46c/0x1c50
[ 1837.813847][T29363]  ? create_filter_start.constprop.0+0x56/0x300
[ 1837.813886][T29363]  create_filter+0x140/0x210
[ 1837.813922][T29363]  ? __pfx_create_filter+0x10/0x10
[ 1837.813958][T29363]  ? __pfx___mutex_lock+0x10/0x10
[ 1837.813998][T29363]  ? find_held_lock+0x2b/0x80
[ 1837.814027][T29363]  apply_event_filter+0x220/0x500
[ 1837.814067][T29363]  ? __pfx_apply_event_filter+0x10/0x10
[ 1837.814119][T29363]  event_filter_write+0x16d/0x290
[ 1837.814146][T29363]  ? __pfx_event_filter_write+0x10/0x10
[ 1837.814170][T29363]  vfs_write+0x2a0/0x11d0
[ 1837.814201][T29363]  ? __pfx___mutex_lock+0x10/0x10
[ 1837.814233][T29363]  ? __pfx_vfs_write+0x10/0x10
[ 1837.814268][T29363]  ? __fget_files+0x20e/0x3c0
[ 1837.814302][T29363]  ksys_write+0x12a/0x250
[ 1837.814329][T29363]  ? __pfx_ksys_write+0x10/0x10
[ 1837.814365][T29363]  do_syscall_64+0xcd/0xfa0
[ 1837.814397][T29363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1837.814421][T29363] RIP: 0033:0x7fa0ec18f749
[ 1837.814440][T29363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1837.814464][T29363] RSP: 002b:00007fa0ed066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1837.814487][T29363] RAX: ffffffffffffffda RBX: 00007fa0ec3e5fa0 RCX: 00007fa0ec18f749
[ 1837.814502][T29363] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1837.814516][T29363] RBP: 00007fa0ec213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1837.814530][T29363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1837.814544][T29363] R13: 00007fa0ec3e6038 R14: 00007fa0ec3e5fa0 R15: 00007fffde293bb8
[ 1837.814576][T29363]  </TASK>
[ 1842.422168][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4830'.
[ 1847.689649][   T49] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 944 with max blocks 7 with error 117
[ 1847.802421][   T49] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1847.802421][   T49] 
[ 1848.617953][T29486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4842'.
[ 1849.039315][T29456] Process accounting resumed
[ 1849.275637][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'.
[ 1849.335272][T28531] Bluetooth: hci0: hcon ffff888050bb4000 sent 0 < count 256
[ 1853.866057][T29550] Console: switching to colour frame buffer device 128x48
[ 1854.189714][T29554] ACPI: Can not change Invalid GPE/Fixed Event status
[ 1854.317129][T28531] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1854.445453][T29554] ptrace attach of "./syz-executor exec"[28823] was attempted by ""[29554]
[ 1854.883995][T29562] mkiss: ax0: crc mode is auto.
[ 1855.036225][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1855.045608][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1855.936483][T29581] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4860'.
[ 1856.136853][T29581] mac80211_hwsim hwsim47 �: renamed from wlan0 (while UP)
[ 1857.031547][T29597] FAULT_INJECTION: forcing a failure.
[ 1857.031547][T29597] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1857.135242][T29597] CPU: 1 UID: 0 PID: 29597 Comm: syz.3.4863 Not tainted syzkaller #0 PREEMPT(full) 
[ 1857.135276][T29597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1857.135291][T29597] Call Trace:
[ 1857.135299][T29597]  <TASK>
[ 1857.135309][T29597]  dump_stack_lvl+0x16c/0x1f0
[ 1857.135343][T29597]  should_fail_ex+0x512/0x640
[ 1857.135386][T29597]  get_futex_key+0x1d0/0x1560
[ 1857.135422][T29597]  ? __pfx_get_futex_key+0x10/0x10
[ 1857.135464][T29597]  futex_wake+0xea/0x530
[ 1857.135499][T29597]  ? futex_wait+0x120/0x380
[ 1857.135524][T29597]  ? __pfx_futex_wake+0x10/0x10
[ 1857.135559][T29597]  ? __lock_acquire+0x622/0x1c90
[ 1857.135607][T29597]  ? fput+0x9b/0xd0
[ 1857.135647][T29597]  do_futex+0x1e3/0x350
[ 1857.135681][T29597]  ? __pfx_do_futex+0x10/0x10
[ 1857.135722][T29597]  __x64_sys_futex+0x1e0/0x4c0
[ 1857.135760][T29597]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1857.135794][T29597]  ? __sys_getsockopt+0x144/0x1b0
[ 1857.135827][T29597]  do_syscall_64+0xcd/0xfa0
[ 1857.135859][T29597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.135884][T29597] RIP: 0033:0x7fb7ab58f749
[ 1857.135910][T29597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1857.135935][T29597] RSP: 002b:00007fb7ac3750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1857.135957][T29597] RAX: ffffffffffffffda RBX: 00007fb7ab7e5fa8 RCX: 00007fb7ab58f749
[ 1857.135974][T29597] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb7ab7e5fac
[ 1857.135988][T29597] RBP: 00007fb7ab7e5fa0 R08: 00007fb7ac376000 R09: 0000000000000000
[ 1857.136004][T29597] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1857.136019][T29597] R13: 00007fb7ab7e6038 R14: 00007ffcf7bff310 R15: 00007ffcf7bff3f8
[ 1857.136054][T29597]  </TASK>
[ 1857.317986][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1857.373399][T29606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4864'.
[ 1862.078953][T29671] FAULT_INJECTION: forcing a failure.
[ 1862.078953][T29671] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1862.138179][T29671] CPU: 1 UID: 0 PID: 29671 Comm: syz.6.4875 Not tainted syzkaller #0 PREEMPT(full) 
[ 1862.138212][T29671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1862.138227][T29671] Call Trace:
[ 1862.138235][T29671]  <TASK>
[ 1862.138244][T29671]  dump_stack_lvl+0x16c/0x1f0
[ 1862.138278][T29671]  should_fail_ex+0x512/0x640
[ 1862.138319][T29671]  get_futex_key+0x1d0/0x1560
[ 1862.138361][T29671]  ? __pfx_get_futex_key+0x10/0x10
[ 1862.138422][T29671]  futex_wake+0xea/0x530
[ 1862.138458][T29671]  ? kasan_quarantine_put+0x10a/0x240
[ 1862.138490][T29671]  ? __pfx_futex_wake+0x10/0x10
[ 1862.138528][T29671]  ? getname_flags.part.0+0x24c/0x550
[ 1862.138570][T29671]  ? getname_flags.part.0+0x24c/0x550
[ 1862.138604][T29671]  ? getname_flags.part.0+0x1c5/0x550
[ 1862.138643][T29671]  do_futex+0x1e3/0x350
[ 1862.138676][T29671]  ? __pfx_do_futex+0x10/0x10
[ 1862.138711][T29671]  ? find_held_lock+0x2b/0x80
[ 1862.138741][T29671]  __x64_sys_futex+0x1e0/0x4c0
[ 1862.138776][T29671]  ? __x64_sys_openat+0x174/0x210
[ 1862.138813][T29671]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1862.138859][T29671]  do_syscall_64+0xcd/0xfa0
[ 1862.138892][T29671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1862.138916][T29671] RIP: 0033:0x7fa0ec18f749
[ 1862.138936][T29671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1862.138960][T29671] RSP: 002b:00007fa0ed0450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1862.138981][T29671] RAX: ffffffffffffffda RBX: 00007fa0ec3e6098 RCX: 00007fa0ec18f749
[ 1862.138997][T29671] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0ec3e609c
[ 1862.139012][T29671] RBP: 00007fa0ec3e6090 R08: 00007fa0ed067000 R09: 0000000000000000
[ 1862.139026][T29671] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1862.139040][T29671] R13: 00007fa0ec3e6128 R14: 00007fffde293ad0 R15: 00007fffde293bb8
[ 1862.139072][T29671]  </TASK>
[ 1863.723591][T29693] netlink: 'syz.5.4879': attribute type 1 has an invalid length.
[ 1863.737939][T29690] Unable to find swap-space signature
[ 1864.462395][T29700] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4880'.
[ 1865.255732][T29707] FAULT_INJECTION: forcing a failure.
[ 1865.255732][T29707] name failslab, interval 1, probability 0, space 0, times 0
[ 1865.347857][T29707] CPU: 1 UID: 0 PID: 29707 Comm: syz.6.4882 Not tainted syzkaller #0 PREEMPT(full) 
[ 1865.347890][T29707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1865.347904][T29707] Call Trace:
[ 1865.347911][T29707]  <TASK>
[ 1865.347920][T29707]  dump_stack_lvl+0x16c/0x1f0
[ 1865.347953][T29707]  should_fail_ex+0x512/0x640
[ 1865.347990][T29707]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1865.348016][T29707]  should_failslab+0xc2/0x120
[ 1865.348048][T29707]  __kmalloc_cache_noprof+0x72/0x780
[ 1865.348071][T29707]  ? __debugfs_file_get+0x2ad/0x840
[ 1865.348107][T29707]  ? __debugfs_file_get+0x2ad/0x840
[ 1865.348137][T29707]  __debugfs_file_get+0x2ad/0x840
[ 1865.348168][T29707]  ? __pfx___debugfs_file_get+0x10/0x10
[ 1865.348201][T29707]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1865.348243][T29707]  full_proxy_open_regular+0x4f/0x360
[ 1865.348280][T29707]  do_dentry_open+0x982/0x1530
[ 1865.348315][T29707]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1865.348357][T29707]  vfs_open+0x82/0x3f0
[ 1865.348395][T29707]  path_openat+0x1de4/0x2cb0
[ 1865.348431][T29707]  ? __pfx_path_openat+0x10/0x10
[ 1865.348459][T29707]  ? __lock_acquire+0xb8a/0x1c90
[ 1865.348495][T29707]  do_filp_open+0x20b/0x470
[ 1865.348522][T29707]  ? __pfx_do_filp_open+0x10/0x10
[ 1865.348569][T29707]  ? alloc_fd+0x471/0x7d0
[ 1865.348600][T29707]  do_sys_openat2+0x11b/0x1d0
[ 1865.348634][T29707]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1865.348670][T29707]  ? find_held_lock+0x2b/0x80
[ 1865.348701][T29707]  __x64_sys_openat+0x174/0x210
[ 1865.348737][T29707]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1865.348790][T29707]  do_syscall_64+0xcd/0xfa0
[ 1865.348821][T29707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1865.348845][T29707] RIP: 0033:0x7fa0ec18f749
[ 1865.348864][T29707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1865.348887][T29707] RSP: 002b:00007fa0ed045038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1865.348909][T29707] RAX: ffffffffffffffda RBX: 00007fa0ec3e6090 RCX: 00007fa0ec18f749
[ 1865.348925][T29707] RDX: 0000000000109000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[ 1865.348939][T29707] RBP: 00007fa0ec213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1865.348954][T29707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1865.348968][T29707] R13: 00007fa0ec3e6128 R14: 00007fa0ec3e6090 R15: 00007fffde293bb8
[ 1865.348998][T29707]  </TASK>
[ 1865.889174][T29709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1866.556237][T29734] binder: 29733:29734 ioctl c018620c 0 returned -1
[ 1866.622753][T29734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4887'.
[ 1868.238587][T29753] blktrace: Concurrent blktraces are not allowed on loop2
[ 1874.074042][T29803] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input52
[ 1874.336718][T29808] random: crng reseeded on system resumption
[ 1874.404604][T28531] Bluetooth: hci4: ACL packet for unknown connection handle 0
[ 1875.598169][T29819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4904'.
[ 1876.422562][T29821] hub 8-0:1.0: USB hub found
[ 1877.118270][T29821] hub 8-0:1.0: 1 port detected
[ 1877.310254][T29828] netlink: zone id is out of range
[ 1877.341935][T29828] netlink: zone id is out of range
[ 1877.382228][T29828] netlink: zone id is out of range
[ 1877.422329][T29828] netlink: zone id is out of range
[ 1879.974302][T29855] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1880.258204][T29846] Process accounting paused
[ 1881.050027][T29865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4916'.
[ 1881.243957][T29868] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[ 1881.724326][T29865] bond0: (slave bond_slave_0): Releasing backup interface
[ 1882.331201][T28531] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1885.167286][T29912] IPVS: length: 131 != 8
[ 1885.230577][T29912] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53
[ 1885.366077][T29905] zswap: compressor 000 not available
[ 1885.632748][T29918] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54
[ 1890.846284][T28531] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1891.315805][T29985] hub 8-0:1.0: USB hub found
[ 1891.363403][T29986] random: crng reseeded on system resumption
[ 1891.405746][T29985] hub 8-0:1.0: 1 port detected
[ 1891.743849][T29995] netlink: 'syz.2.4939': attribute type 17 has an invalid length.
[ 1891.800057][T29995] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4939'.
[ 1892.900812][T30011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4941'.
[ 1892.933128][T30010] FAULT_INJECTION: forcing a failure.
[ 1892.933128][T30010] name failslab, interval 1, probability 0, space 0, times 0
[ 1893.028367][T30010] CPU: 1 UID: 0 PID: 30010 Comm: syz.5.4940 Not tainted syzkaller #0 PREEMPT(full) 
[ 1893.028397][T30010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1893.028411][T30010] Call Trace:
[ 1893.028418][T30010]  <TASK>
[ 1893.028426][T30010]  dump_stack_lvl+0x16c/0x1f0
[ 1893.028458][T30010]  should_fail_ex+0x512/0x640
[ 1893.028492][T30010]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1893.028516][T30010]  should_failslab+0xc2/0x120
[ 1893.028546][T30010]  __kmalloc_cache_noprof+0x72/0x780
[ 1893.028568][T30010]  ? allocate_file_region_entries+0x1a0/0x620
[ 1893.028600][T30010]  ? allocate_file_region_entries+0x1a0/0x620
[ 1893.028627][T30010]  allocate_file_region_entries+0x1a0/0x620
[ 1893.028660][T30010]  ? __pfx_allocate_file_region_entries+0x10/0x10
[ 1893.028697][T30010]  region_chg+0x85/0x140
[ 1893.028747][T30010]  __vma_reservation_common+0x43b/0x740
[ 1893.028782][T30010]  ? __pfx___vma_reservation_common+0x10/0x10
[ 1893.028824][T30010]  alloc_hugetlb_folio+0x946/0x1560
[ 1893.028866][T30010]  ? __pfx_alloc_hugetlb_folio+0x10/0x10
[ 1893.028902][T30010]  ? _raw_spin_unlock+0x28/0x50
[ 1893.028931][T30010]  ? __filemap_get_folio+0x32b/0xc30
[ 1893.028964][T30010]  hugetlb_fault+0x1bce/0x2f40
[ 1893.028993][T30010]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1893.029029][T30010]  ? find_vma+0xbf/0x140
[ 1893.029057][T30010]  ? __pfx_find_vma+0x10/0x10
[ 1893.029095][T30010]  handle_mm_fault+0xbfa/0xd10
[ 1893.029134][T30010]  ? __pkru_allows_pkey+0x21/0xb0
[ 1893.029174][T30010]  do_user_addr_fault+0x7a6/0x1370
[ 1893.029199][T30010]  ? rcu_is_watching+0x12/0xc0
[ 1893.029227][T30010]  exc_page_fault+0x64/0xc0
[ 1893.029256][T30010]  asm_exc_page_fault+0x26/0x30
[ 1893.029279][T30010] RIP: 0010:__put_user_4+0xd/0x20
[ 1893.029307][T30010] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90
[ 1893.029329][T30010] RSP: 0018:ffffc900044dfdf8 EFLAGS: 00050246
[ 1893.029348][T30010] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1893.029362][T30010] RDX: 0000000000080000 RSI: ffffffff88ed9e34 RDI: ffffffff8bf078c0
[ 1893.029378][T30010] RBP: 1ffff9200089bfc1 R08: 007da75da6d4f6ed R09: 0000000000000000
[ 1893.029393][T30010] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 1893.029407][T30010] R13: 00000000800455d1 R14: ffff888035fff210 R15: ffff888035fff200
[ 1893.029432][T30010]  ? snd_ctl_ioctl+0x304/0xf80
[ 1893.029464][T30010]  snd_ctl_ioctl+0x30e/0xf80
[ 1893.029491][T30010]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[ 1893.029522][T30010]  ? __fget_files+0x20e/0x3c0
[ 1893.029550][T30010]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[ 1893.029579][T30010]  __x64_sys_ioctl+0x18e/0x210
[ 1893.029617][T30010]  do_syscall_64+0xcd/0xfa0
[ 1893.029648][T30010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1893.029671][T30010] RIP: 0033:0x7f089e78f749
[ 1893.029689][T30010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1893.029711][T30010] RSP: 002b:00007f089f5e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1893.029732][T30010] RAX: ffffffffffffffda RBX: 00007f089e9e6180 RCX: 00007f089e78f749
[ 1893.029747][T30010] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006
[ 1893.029761][T30010] RBP: 00007f089e813f91 R08: 0000000000000000 R09: 0000000000000000
[ 1893.029775][T30010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1893.029789][T30010] R13: 00007f089e9e6218 R14: 00007f089e9e6180 R15: 00007fffece54598
[ 1893.029821][T30010]  </TASK>
[ 1894.629915][T30019] netlink: zone id is out of range
[ 1894.645575][T30019] netlink: zone id is out of range
[ 1894.664787][T30019] netlink: zone id is out of range
[ 1894.680556][T30019] netlink: zone id is out of range
[ 1895.249670][T30027] FAULT_INJECTION: forcing a failure.
[ 1895.249670][T30027] name failslab, interval 1, probability 0, space 0, times 0
[ 1895.361859][T30027] CPU: 1 UID: 0 PID: 30027 Comm: syz.5.4944 Not tainted syzkaller #0 PREEMPT(full) 
[ 1895.361892][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1895.361907][T30027] Call Trace:
[ 1895.361915][T30027]  <TASK>
[ 1895.361924][T30027]  dump_stack_lvl+0x16c/0x1f0
[ 1895.361957][T30027]  should_fail_ex+0x512/0x640
[ 1895.361993][T30027]  ? __kmalloc_cache_noprof+0x5f/0x780
[ 1895.362019][T30027]  should_failslab+0xc2/0x120
[ 1895.362062][T30027]  __kmalloc_cache_noprof+0x72/0x780
[ 1895.362085][T30027]  ? ima_add_digest_entry+0x52/0x540
[ 1895.362123][T30027]  ? ima_add_digest_entry+0x52/0x540
[ 1895.362154][T30027]  ima_add_digest_entry+0x52/0x540
[ 1895.362191][T30027]  ima_add_template_entry+0x452/0x870
[ 1895.362233][T30027]  ? __pfx_ima_add_template_entry+0x10/0x10
[ 1895.362270][T30027]  ? ima_calc_field_array_hash+0x371/0x440
[ 1895.362318][T30027]  ima_store_template+0xda/0x150
[ 1895.362343][T30027]  ima_store_measurement+0x224/0x5c0
[ 1895.362368][T30027]  ? __pfx_ima_store_measurement+0x10/0x10
[ 1895.362392][T30027]  ? vfs_getxattr_alloc+0xec/0x350
[ 1895.362424][T30027]  ? __pfx_ima_get_hash_algo+0x10/0x10
[ 1895.362462][T30027]  process_measurement+0x1ddb/0x23e0
[ 1895.362504][T30027]  ? __lock_acquire+0x622/0x1c90
[ 1895.362536][T30027]  ? __pfx_process_measurement+0x10/0x10
[ 1895.362569][T30027]  ? __kasan_slab_alloc+0x89/0x90
[ 1895.362598][T30027]  ? security_file_alloc+0x34/0x2b0
[ 1895.362626][T30027]  ? alloc_empty_file+0x73/0x1e0
[ 1895.362657][T30027]  ? alloc_file_pseudo+0x13a/0x230
[ 1895.362701][T30027]  ? find_held_lock+0x2b/0x80
[ 1895.362771][T30027]  ima_file_mmap+0x1b1/0x1d0
[ 1895.362806][T30027]  ? __pfx_ima_file_mmap+0x10/0x10
[ 1895.362848][T30027]  security_mmap_file+0x88c/0x990
[ 1895.362875][T30027]  vm_mmap_pgoff+0xec/0x470
[ 1895.362910][T30027]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1895.362938][T30027]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1895.362975][T30027]  ? hugetlbfs_get_inode+0x31f/0x730
[ 1895.363012][T30027]  ksys_mmap_pgoff+0x1c8/0x5c0
[ 1895.363054][T30027]  __x64_sys_mmap+0x125/0x190
[ 1895.363094][T30027]  do_syscall_64+0xcd/0xfa0
[ 1895.363126][T30027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1895.363149][T30027] RIP: 0033:0x7f089e78f749
[ 1895.363168][T30027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1895.363191][T30027] RSP: 002b:00007f089f62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1895.363213][T30027] RAX: ffffffffffffffda RBX: 00007f089e9e5fa0 RCX: 00007f089e78f749
[ 1895.363229][T30027] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000003
[ 1895.363243][T30027] RBP: 00007f089e813f91 R08: ffffffffffffffff R09: 0000000000008000
[ 1895.363258][T30027] R10: 0000000000049b72 R11: 0000000000000246 R12: 0000000000000000
[ 1895.363272][T30027] R13: 00007f089e9e6038 R14: 00007f089e9e5fa0 R15: 00007fffece54598
[ 1895.363303][T30027]  </TASK>
[ 1895.668727][T30035] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4946'.
[ 1895.678597][T30035] ipvlan1: entered allmulticast mode
[ 1895.684057][T30035] veth0_vlan: entered allmulticast mode
[ 1896.453870][T30027] ima: OUT OF MEMORY ERROR creating queue entry
[ 1896.495766][   T30] audit: type=1804 audit(4294969563.253:34): pid=30027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.4944" name="anon_hugepage" dev="hugetlbfs" ino=116712 res=0 errno=0
[ 1897.081388][T21466] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 2 with max blocks 3 with error 117
[ 1897.149865][T21466] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1897.149865][T21466] 
[ 1897.336633][T30071] FAULT_INJECTION: forcing a failure.
[ 1897.336633][T30071] name failslab, interval 1, probability 0, space 0, times 0
[ 1897.505145][T30071] CPU: 1 UID: 0 PID: 30071 Comm: syz.6.4953 Not tainted syzkaller #0 PREEMPT(full) 
[ 1897.505178][T30071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1897.505193][T30071] Call Trace:
[ 1897.505202][T30071]  <TASK>
[ 1897.505212][T30071]  dump_stack_lvl+0x16c/0x1f0
[ 1897.505245][T30071]  should_fail_ex+0x512/0x640
[ 1897.505283][T30071]  ? fs_reclaim_acquire+0xae/0x150
[ 1897.505319][T30071]  should_failslab+0xc2/0x120
[ 1897.505353][T30071]  __kmalloc_noprof+0xdd/0x880
[ 1897.505391][T30071]  ? kfree+0x252/0x6d0
[ 1897.505410][T30071]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1897.505445][T30071]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1897.505473][T30071]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1897.505511][T30071]  tomoyo_check_open_permission+0x2ab/0x3c0
[ 1897.505536][T30071]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1897.505598][T30071]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1897.505645][T30071]  tomoyo_file_open+0x6b/0x90
[ 1897.505680][T30071]  security_file_open+0x84/0x1e0
[ 1897.505708][T30071]  do_dentry_open+0x596/0x1530
[ 1897.505746][T30071]  vfs_open+0x82/0x3f0
[ 1897.505785][T30071]  path_openat+0x1de4/0x2cb0
[ 1897.505823][T30071]  ? __pfx_path_openat+0x10/0x10
[ 1897.505851][T30071]  ? __lock_acquire+0xb8a/0x1c90
[ 1897.505888][T30071]  do_filp_open+0x20b/0x470
[ 1897.505916][T30071]  ? __pfx_do_filp_open+0x10/0x10
[ 1897.505965][T30071]  ? alloc_fd+0x471/0x7d0
[ 1897.505998][T30071]  do_sys_openat2+0x11b/0x1d0
[ 1897.506033][T30071]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1897.506081][T30071]  __x64_sys_openat+0x174/0x210
[ 1897.506118][T30071]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1897.506167][T30071]  do_syscall_64+0xcd/0xfa0
[ 1897.506199][T30071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1897.506224][T30071] RIP: 0033:0x7fa0ec18f749
[ 1897.506243][T30071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1897.506266][T30071] RSP: 002b:00007fa0ed024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1897.506289][T30071] RAX: ffffffffffffffda RBX: 00007fa0ec3e6180 RCX: 00007fa0ec18f749
[ 1897.506306][T30071] RDX: 0000000000109401 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1897.506322][T30071] RBP: 00007fa0ec213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1897.506337][T30071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1897.506351][T30071] R13: 00007fa0ec3e6218 R14: 00007fa0ec3e6180 R15: 00007fffde293bb8
[ 1897.506384][T30071]  </TASK>
[ 1897.506394][T30071] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1898.786845][T30077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4954'.
[ 1899.027225][T30077] team_slave_0 (unregistering): left promiscuous mode
[ 1899.066628][T30077] team_slave_0 (unregistering): left allmulticast mode
[ 1899.083986][T30085] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[ 1899.102833][T30077] team0: Port device team_slave_0 removed
[ 1903.299661][T30134] Invalid ELF header magic: != ELF
[ 1908.813069][T30206] netlink: 504 bytes leftover after parsing attributes in process `syz.5.4979'.
[ 1908.895499][T30206] netlink: 350 bytes leftover after parsing attributes in process `syz.5.4979'.
[ 1909.066766][T30211] [U] 	
[ 1909.069626][T30211] [U] 
[ 1909.072341][T30211] [U] 
[ 1909.075048][T30211] [U] 
[ 1909.077785][T30211] [U] 
[ 1909.160803][T30211] [U] 
[ 1909.163568][T30211] [U] 
[ 1909.166372][T30211] [U] 
[ 1909.169081][T30211] [U] 
[ 1909.200191][T30206] bond0: invalid ARP target specified
[ 1909.292820][T30211] [U] 
[ 1909.295594][T30211] [U] 
[ 1909.298311][T30211] [U] 
[ 1909.301021][T30211] [U] 
[ 1909.328877][T30211] [U] 
[ 1909.331661][T30211] [U] 
[ 1909.334374][T30211] [U] 
[ 1909.337083][T30211] [U] 
[ 1909.414695][T30211] [U] 
[ 1909.417454][T30211] [U] 
[ 1909.420172][T30211] [U] 
[ 1909.422887][T30211] [U] 
[ 1909.633813][T30211] [U] 
[ 1909.886201][T30232] snd_virmidi snd_virmidi.0: control 5:9:1:IA��>/�[k<���mgx���<�5��+-C��Y��5:0 is already present
[ 1910.074997][T30232] IPVS: length: 131 != 8
[ 1910.193521][T30232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56
[ 1910.477260][T30238] FAULT_INJECTION: forcing a failure.
[ 1910.477260][T30238] name failslab, interval 1, probability 0, space 0, times 0
[ 1910.636515][T30238] CPU: 1 UID: 0 PID: 30238 Comm: syz.3.4982 Not tainted syzkaller #0 PREEMPT(full) 
[ 1910.636550][T30238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1910.636565][T30238] Call Trace:
[ 1910.636574][T30238]  <TASK>
[ 1910.636583][T30238]  dump_stack_lvl+0x16c/0x1f0
[ 1910.636617][T30238]  should_fail_ex+0x512/0x640
[ 1910.636654][T30238]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 1910.636683][T30238]  should_failslab+0xc2/0x120
[ 1910.636716][T30238]  kmem_cache_alloc_noprof+0x75/0x6e0
[ 1910.636739][T30238]  ? anon_vma_clone+0x405/0x5c0
[ 1910.636776][T30238]  ? anon_vma_fork+0xe6/0x620
[ 1910.636819][T30238]  ? anon_vma_fork+0xe6/0x620
[ 1910.636856][T30238]  anon_vma_fork+0xe6/0x620
[ 1910.636893][T30238]  ? vm_area_dup+0x5a1/0x8d0
[ 1910.636916][T30238]  dup_mmap+0x151f/0x2280
[ 1910.636961][T30238]  ? __pfx_dup_mmap+0x10/0x10
[ 1910.637016][T30238]  copy_process+0x3f0c/0x76a0
[ 1910.637046][T30238]  ? __pfx___futex_wait+0x10/0x10
[ 1910.637067][T30238]  ? do_raw_spin_unlock+0x172/0x230
[ 1910.637101][T30238]  ? __pfx_copy_process+0x10/0x10
[ 1910.637137][T30238]  ? futex_private_hash_put+0xd5/0x190
[ 1910.637175][T30238]  kernel_clone+0xfc/0x930
[ 1910.637207][T30238]  ? __pfx_kernel_clone+0x10/0x10
[ 1910.637245][T30238]  ? find_held_lock+0x2b/0x80
[ 1910.637278][T30238]  __do_sys_clone+0xce/0x120
[ 1910.637312][T30238]  ? __pfx___do_sys_clone+0x10/0x10
[ 1910.637358][T30238]  ? xfd_validate_state+0x61/0x180
[ 1910.637391][T30238]  ? __pfx_from_kuid_munged+0x10/0x10
[ 1910.637425][T30238]  do_syscall_64+0xcd/0xfa0
[ 1910.637464][T30238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.637489][T30238] RIP: 0033:0x7fb7ab58f749
[ 1910.637508][T30238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1910.637531][T30238] RSP: 002b:00007fb7a8faffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1910.637554][T30238] RAX: ffffffffffffffda RBX: 00007fb7ab7e6360 RCX: 00007fb7ab58f749
[ 1910.637570][T30238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411
[ 1910.637585][T30238] RBP: 00007fb7ab613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1910.637600][T30238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1910.637614][T30238] R13: 00007fb7ab7e63f8 R14: 00007fb7ab7e6360 R15: 00007ffcf7bff3f8
[ 1910.637646][T30238]  </TASK>
[ 1910.871385][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1911.308811][T30240] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57
[ 1911.473476][T30220] Process accounting resumed
[ 1912.152345][T30257] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[ 1914.245009][   T31] INFO: task syz.0.4686:28367 blocked for more than 144 seconds.
[ 1914.252948][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1914.286967][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1914.337872][   T31] task:syz.0.4686      state:D stack:27672 pid:28367 tgid:28365 ppid:5834   task_flags:0x400140 flags:0x00080002
[ 1914.395886][   T31] Call Trace:
[ 1914.399221][   T31]  <TASK>
[ 1914.425998][   T31]  __schedule+0x1190/0x5de0
[ 1914.442411][   T31]  ? check_path.constprop.0+0x24/0x50
[ 1914.463449][   T31]  ? __lock_acquire+0x622/0x1c90
[ 1914.487024][   T31]  ? __pfx___schedule+0x10/0x10
[ 1914.503199][   T31]  ? find_held_lock+0x2b/0x80
[ 1914.507933][   T31]  ? schedule+0x2d7/0x3a0
[ 1914.532909][   T31]  ? nfsd_nl_version_set_doit+0xc4/0x7a0
[ 1914.562523][   T31]  schedule+0xe7/0x3a0
[ 1914.575104][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1914.597844][   T31]  __mutex_lock+0x818/0x1060
[ 1914.623077][   T31]  ? nfsd_nl_version_set_doit+0xc4/0x7a0
[ 1914.628781][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1914.652722][   T31]  ? __nla_validate_parse+0x600/0x2880
[ 1914.668612][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1914.688886][   T31]  ? nfsd_nl_version_set_doit+0xc4/0x7a0
[ 1914.705663][   T31]  nfsd_nl_version_set_doit+0xc4/0x7a0
[ 1914.733752][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[ 1914.739891][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1914.771875][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1914.800809][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[ 1914.823128][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1914.829290][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1914.854596][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1914.859344][   T31]  ? security_capable+0x7e/0x260
[ 1914.897199][   T31]  genl_rcv_msg+0x55c/0x800
[ 1914.913152][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1914.932237][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[ 1914.958969][   T31]  netlink_rcv_skb+0x158/0x420
[ 1914.969329][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1914.989504][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1915.004323][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1915.033964][   T31]  genl_rcv+0x28/0x40
[ 1915.038091][   T31]  netlink_unicast+0x5aa/0x870
[ 1915.063885][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1915.079611][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1915.099743][   T31]  netlink_sendmsg+0x8c8/0xdd0
[ 1915.115849][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1915.131584][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[ 1915.153254][   T31]  ____sys_sendmsg+0xa98/0xc70
[ 1915.172108][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[ 1915.189743][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1915.208143][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1915.228272][   T31]  ___sys_sendmsg+0x134/0x1d0
[ 1915.238424][   T31]  ? find_held_lock+0x2b/0x80
[ 1915.258472][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1915.278606][   T31]  ? __lock_acquire+0x622/0x1c90
[ 1915.295234][   T31]  __sys_sendmsg+0x16d/0x220
[ 1915.349298][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1915.385087][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1915.440543][   T31]  do_syscall_64+0xcd/0xfa0
[ 1915.445148][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1915.525195][   T31] RIP: 0033:0x7f9c24f8f749
[ 1915.557777][   T31] RSP: 002b:00007f9c25ea6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1915.566364][   T31] RAX: ffffffffffffffda RBX: 00007f9c251e6090 RCX: 00007f9c24f8f749
[ 1915.615627][   T31] RDX: 0000000000000844 RSI: 00002000000004c0 RDI: 0000000000000005
[ 1915.650017][   T31] RBP: 00007f9c25013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1915.678551][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1915.686637][   T31] R13: 00007f9c251e6128 R14: 00007f9c251e6090 R15: 00007ffc76b75c08
[ 1915.737034][   T31]  </TASK>
[ 1915.740509][   T31] 
[ 1915.740509][   T31] Showing all locks held in the system:
[ 1915.773842][   T31] 1 lock held by khungtaskd/31:
[ 1915.806962][   T31]  #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1915.909193][   T31] 2 locks held by getty/24156:
[ 1915.914009][   T31]  #0: ffff8880348a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1915.945833][   T31]  #1: ffffc90018ff52f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1915.965762][   T31] 2 locks held by syz.1.4658/28219:
[ 1915.971000][   T31]  #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1915.999728][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[ 1916.020895][   T31] 2 locks held by syz-executor/28363:
[ 1916.033665][   T31]  #0: ffff8880275140e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1916.069105][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1916.079187][   T31] 2 locks held by syz.0.4686/28367:
[ 1916.084397][   T31]  #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1916.093744][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0
[ 1916.104052][   T31] 3 locks held by kworker/1:4/29310:
[ 1916.113702][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1916.126807][   T31]  #1: ffffc9000aea7d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1916.137585][   T31]  #2: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 1916.148153][   T31] 2 locks held by syz.3.4987/30263:
[ 1916.153368][   T31]  #0: ffffffff900d4e90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[ 1916.167791][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1916.174100][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1916.191345][   T31]  #1: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 1916.202358][   T31] 3 locks held by syz.6.4989/30272:
[ 1916.207910][   T31]  #0: ffffffff900d4e90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[ 1916.222306][   T31]  #1: ffffffff900eb2c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0
[ 1916.234651][   T31]  #2: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[ 1916.244988][   T31] 2 locks held by syz.5.4990/30279:
[ 1916.250525][   T31]  #0: ffffffff900d4e90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[ 1916.260367][   T31]  #1: ffffffff900eb2c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[ 1916.269764][   T31] 1 lock held by syz.2.4991/30288:
[ 1916.275574][   T31]  #0: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 1916.285800][   T31] 2 locks held by dhcpcd/30315:
[ 1916.290657][   T31]  #0: ffff88802a3d6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60
[ 1916.300870][   T31]  #1: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[ 1916.383690][   T31] 
[ 1916.386078][   T31] =============================================
[ 1916.386078][   T31] 
[ 1916.452281][   T31] NMI backtrace for cpu 1
[ 1916.452301][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1916.452328][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1916.452343][   T31] Call Trace:
[ 1916.452351][   T31]  <TASK>
[ 1916.452360][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1916.452393][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1916.452429][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 1916.452457][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1916.452492][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1916.452539][   T31]  watchdog+0xf3f/0x1170
[ 1916.452566][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1916.452592][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1916.452612][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1916.452643][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1916.452675][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1916.452697][   T31]  kthread+0x3c5/0x780
[ 1916.452731][   T31]  ? __pfx_kthread+0x10/0x10
[ 1916.452768][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1916.452792][   T31]  ? __pfx_kthread+0x10/0x10
[ 1916.452828][   T31]  ret_from_fork+0x675/0x7d0
[ 1916.452862][   T31]  ? __pfx_kthread+0x10/0x10
[ 1916.452897][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1916.452945][   T31]  </TASK>
[ 1917.267852][   T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1917.332931][   T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1917.387277][   T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1917.450610][   T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1917.629764][   T36] bridge_slave_1: left allmulticast mode
[ 1917.635452][   T36] bridge_slave_1: left promiscuous mode
[ 1917.654557][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1917.678807][   T36] bridge_slave_0: left allmulticast mode
[ 1917.684510][   T36] bridge_slave_0: left promiscuous mode
[ 1917.708221][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1918.546515][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1918.558088][   T36] bond0 (unregistering): Released all slaves
[ 1918.923801][   T36] hsr_slave_0: left promiscuous mode
[ 1918.945344][   T36] hsr_slave_1: left promiscuous mode
[ 1918.964832][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1918.990064][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1918.998032][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1919.019930][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1919.075298][   T36] veth1_macvtap: left promiscuous mode
[ 1919.102319][   T36] veth0_macvtap: left promiscuous mode
[ 1919.108151][   T36] veth1_vlan: left promiscuous mode
[ 1919.131359][   T36] veth0_vlan: left promiscuous mode
[ 1919.882927][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1919.939463][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1923.317635][T14106] Bluetooth: hci4: command 0x0406 tx timeout