last executing test programs:

5.815984328s ago: executing program 2 (id=572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x9b13)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0xffffffffffffffff, 0x40009, 0x400000000000048, 0x14, r0, 0x1)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x122, 0x400, 0x9}]})

5.341230191s ago: executing program 2 (id=578):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto(0x9, 0x3, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffa9b, 0x2, 0x4, 0x4}, 0x0, 0x0, 0x8000, 0x4, 0x5, 0x0, 0xa, 0x4, 0xd, 0x5})
shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xec)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

4.783967476s ago: executing program 3 (id=580):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9)
select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
personality$auto(0xfffffffc)

4.779362427s ago: executing program 2 (id=588):
rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x5}, 0x8)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x402081, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d359b4a52eacd472207240d818819f1e39969", 0x14)

4.62215365s ago: executing program 2 (id=581):
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket(0x1d, 0x2, 0x7)
socket(0xa, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/drm/version\x00', 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000880)=0x5)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0)
preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)

4.253086758s ago: executing program 0 (id=582):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a)
write$auto(0x3, 0x0, 0x5c8)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0)
getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

3.873461102s ago: executing program 0 (id=584):
mmap$auto(0x1, 0x20009, 0x5, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\r\x82\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x85\x1a\xba|\xd3\xadj\xd4\x1e\xf9\xa4\xf8\x15\x02l@\xbe\x18\xc0\x9e\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1br\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e', 0x48, 0x8001)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000001c0)="2c380a70ac791ee7af33b5df209b8e5935732802de7ee57fbba413c1e505ea8e23cb370d02e2e811537be5676cd1f432551b18fb6da6e0db758c86e652812057f45fda5d18de0e356ecff0fa2f7bedcaefaecef248daf8029e89a5aa09ca906251bd36163a3bfedb5e17c698fdb7")
landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x7}, 0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00')
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000))
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$auto(0x3, 0x0, 0x3f01)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="15")
getpid()
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r0, &(0x7f0000000680)={0x0, 0x5}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x2, 0x0, 0x0, 0x8)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
select$auto(0x85, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x6})
inotify_rm_watch$auto(r3, 0x8001)
read$auto_hwflags_ops_debugfs(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
write$auto(0x3, 0x0, 0xffd8)

3.79582959s ago: executing program 3 (id=585):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a)
write$auto(0x3, 0x0, 0x5c8)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0)
getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

3.313263425s ago: executing program 3 (id=586):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9)
select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
personality$auto(0xfffffffc)
uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"})

2.805548592s ago: executing program 1 (id=589):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto(0x9, 0x3, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffa9b, 0x2, 0x4, 0x4}, 0x0, 0x0, 0x8000, 0x4, 0x5, 0x0, 0xa, 0x4, 0xd, 0x5})
shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xec)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

2.622971514s ago: executing program 1 (id=590):
r0 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0182, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="df8a8422b5d14544000000", @ANYBLOB="01002b3d7000fcdbdf2504000000120018008ad7d37754998b128fb9afe8a9c6000004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r4, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
msync$auto(0x1ffff000, 0x180000008000000, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)

2.507984474s ago: executing program 0 (id=591):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9)
select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
personality$auto(0xfffffffc)
uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"})

2.180568987s ago: executing program 3 (id=592):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x9b13)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x122, 0x400, 0x9}]})

1.872297567s ago: executing program 2 (id=593):
r0 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0182, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0x2a, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r1, 0x5, &(0x7f00000004c0)="9c8cd2ae44e1d0645da0d90d8703afb1e0aa96d3eff7998514939ee0860935c67177fdf92110081b31f696d603aac9e3f9cf7ceca79cd56825e731001b9bea85e2346cab6ca76a1de9347f9ee7487269829c770f22e7e489e9776261cef71763311a5d7fcfb7be211f06f144d77db71619ebba20fe4ebcfb91df466b25256f6d6fc2ae0d0d285fa60cd7db4cecdcc4e0383a4d4cdbdb062da5e90c41a94231f24c1583dce51b7cb6b7fa17b3185a42fc3ce40e128d9df278819f5e7981eb5d2377a534ed87b176e0ff5a9210e557257d32ff6c9c6eeabca1ea3cc25a411421cdc920727f7d5f50d75d", 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="df8a8422b5d14544000000", @ANYBLOB="01002b3d7000fcdbdf2504000000120018008ad7d37754998b128fb9afe8a9c6000004000f"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r4, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.349979864s ago: executing program 0 (id=594):
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000089640046c21f1bec2918da64db11342247cac9ef3e2efcfbe40d534a75c7ca7f248ff36705721c2e5b63ff4befa3983185aa4c5af0932764c0a7c2f7d744cfd90bcc2ca43fd18905b975822a0e39c5c95df2c9563a7e21598993b199836ee248f74d36d0e9d4fbbaca31627d07494a3b0430ba3bb657a64c2f54", @ANYRES16=0x0, @ANYBLOB="080037bd7000ffdbdf251000000005000b000800000014000180080001", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x80000)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x11, 0x3, 0x9)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33a218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)

1.304644374s ago: executing program 1 (id=595):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x401, 0x0)
r1 = syz_clone(0x84003e91, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x72, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
ptrace$auto_PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a)
write$auto(0x3, 0x0, 0x5c8)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0)
getsockopt$auto_SO_PRIORITY(r3, 0xffffffff, 0xc, 0x0, &(0x7f0000000240)=0x1df4)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

1.154989835s ago: executing program 0 (id=596):
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf251000000008000700070000000c00018008080000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20088000)
r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYBLOB, @ANYRES32, @ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x20044044}, 0x8081)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
r2 = io_uring_setup$auto(0xc, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x20000000000, 0x4, 0x4000000000df, 0x10, r2, 0x7d2a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, 0x0, 0x0)
prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
select$auto(0x9, &(0x7f00000002c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x7f, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x5, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x101, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x5, 0x100000010001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8})
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)

1.009238551s ago: executing program 1 (id=597):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
mmap$auto(0x20000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x7fffffff)

795.395396ms ago: executing program 3 (id=598):
rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x5}, 0x8)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya8\x00', 0x402081, 0x0)
write$auto_console_fops_tty_io(r0, 0x0, 0x0)

679.891489ms ago: executing program 2 (id=599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x13, 0x202000a, 0x8000000000000003, 0x4000000019, r0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
close_range$auto(r1, 0x8, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x9b13)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x122, 0x400, 0x9}]})

645.888377ms ago: executing program 3 (id=600):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9)
select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x5, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
personality$auto(0xfffffffc)
uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"})

624.733639ms ago: executing program 1 (id=601):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) (fail_nth: 2)

63.868679ms ago: executing program 0 (id=602):
ioperm$auto(0x7, 0x5ad2, 0x8)
ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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")
mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001)
process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040)
sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0xfdef)
modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0)
ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0)

0s ago: executing program 1 (id=603):
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0xc0b00, 0x0)
pread64$auto(r0, 0x0, 0xc404, 0x1000) (fail_nth: 2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts.
[  100.687917][ T5854] cgroup: Unknown subsys name 'net'
[  100.867540][ T5854] cgroup: Unknown subsys name 'cpuset'
[  100.877992][ T5854] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  102.584831][  T120] cfg80211: failed to load regulatory.db
[  102.793826][ T5854] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  105.012955][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.032794][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.040675][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.049171][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.058570][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.067503][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.074960][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.083511][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.091154][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.117060][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.126091][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.142203][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.153279][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.154391][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.164229][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.176559][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.184609][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.200539][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.208920][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.227883][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.767726][ T5871] chnl_net:caif_netlink_parms(): no params data found
[  105.921459][ T5867] chnl_net:caif_netlink_parms(): no params data found
[  105.995395][ T5864] chnl_net:caif_netlink_parms(): no params data found
[  106.115791][ T5874] chnl_net:caif_netlink_parms(): no params data found
[  106.229009][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.236339][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.245048][ T5871] bridge_slave_0: entered allmulticast mode
[  106.252682][ T5871] bridge_slave_0: entered promiscuous mode
[  106.290246][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.297538][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.304956][ T5867] bridge_slave_0: entered allmulticast mode
[  106.312452][ T5867] bridge_slave_0: entered promiscuous mode
[  106.320811][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.328077][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.335608][ T5867] bridge_slave_1: entered allmulticast mode
[  106.343333][ T5867] bridge_slave_1: entered promiscuous mode
[  106.351178][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.358882][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.366317][ T5871] bridge_slave_1: entered allmulticast mode
[  106.374256][ T5871] bridge_slave_1: entered promiscuous mode
[  106.472436][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.498422][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.506383][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.514184][ T5864] bridge_slave_0: entered allmulticast mode
[  106.521993][ T5864] bridge_slave_0: entered promiscuous mode
[  106.547400][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.574484][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.584066][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.591291][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.599840][ T5864] bridge_slave_1: entered allmulticast mode
[  106.607692][ T5864] bridge_slave_1: entered promiscuous mode
[  106.656945][ T5867] team0: Port device team_slave_0 added
[  106.665972][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.691002][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.698384][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.705982][ T5874] bridge_slave_0: entered allmulticast mode
[  106.713461][ T5874] bridge_slave_0: entered promiscuous mode
[  106.727627][ T5867] team0: Port device team_slave_1 added
[  106.783488][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.790977][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.798542][ T5874] bridge_slave_1: entered allmulticast mode
[  106.806432][ T5874] bridge_slave_1: entered promiscuous mode
[  106.847401][ T5871] team0: Port device team_slave_0 added
[  106.856542][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.882399][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.889513][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.916404][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.930663][ T5871] team0: Port device team_slave_1 added
[  106.939807][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.978111][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.985345][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.011960][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.056309][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.071649][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.107193][ T5864] team0: Port device team_slave_0 added
[  107.130723][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.137889][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.164002][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.177521][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.184610][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.210865][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.223485][ T5186] Bluetooth: hci0: command tx timeout
[  107.228784][ T5864] team0: Port device team_slave_1 added
[  107.229233][ T5186] Bluetooth: hci2: command tx timeout
[  107.301644][ T5874] team0: Port device team_slave_0 added
[  107.302802][ T5186] Bluetooth: hci1: command tx timeout
[  107.312295][ T5874] team0: Port device team_slave_1 added
[  107.313270][ T5872] Bluetooth: hci3: command tx timeout
[  107.345305][ T5867] hsr_slave_0: entered promiscuous mode
[  107.351943][ T5867] hsr_slave_1: entered promiscuous mode
[  107.373791][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.380787][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.407253][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.421042][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.428386][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.454541][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.552081][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.560118][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.587312][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.600496][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.607644][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.634461][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.674028][ T5864] hsr_slave_0: entered promiscuous mode
[  107.680597][ T5864] hsr_slave_1: entered promiscuous mode
[  107.687147][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[  107.693251][ T5864] Cannot create hsr debugfs directory
[  107.726318][ T5871] hsr_slave_0: entered promiscuous mode
[  107.733586][ T5871] hsr_slave_1: entered promiscuous mode
[  107.739904][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[  107.745791][ T5871] Cannot create hsr debugfs directory
[  107.915853][ T5874] hsr_slave_0: entered promiscuous mode
[  107.922865][ T5874] hsr_slave_1: entered promiscuous mode
[  107.929312][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[  107.935385][ T5874] Cannot create hsr debugfs directory
[  108.325600][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  108.342435][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  108.357293][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  108.381165][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  108.454937][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  108.467784][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  108.487803][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  108.514120][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  108.596701][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.620134][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.636287][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.663251][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.769506][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.791545][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.804482][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.835395][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.886335][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.934758][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.945585][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[  108.969858][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.977260][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.021929][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.029104][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.056291][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[  109.105325][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.112500][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.140725][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.148118][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.303721][ T5186] Bluetooth: hci0: command tx timeout
[  109.309382][ T5872] Bluetooth: hci2: command tx timeout
[  109.320506][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.349889][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.384817][ T5872] Bluetooth: hci3: command tx timeout
[  109.390339][ T5872] Bluetooth: hci1: command tx timeout
[  109.409834][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[  109.468772][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.476211][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.492178][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[  109.511223][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.518748][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.569706][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.576935][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.621043][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.628316][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.908439][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.937326][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.141717][ T5864] veth0_vlan: entered promiscuous mode
[  110.207233][ T5867] veth0_vlan: entered promiscuous mode
[  110.224668][ T5864] veth1_vlan: entered promiscuous mode
[  110.247398][ T5867] veth1_vlan: entered promiscuous mode
[  110.321599][ T5864] veth0_macvtap: entered promiscuous mode
[  110.348776][ T5864] veth1_macvtap: entered promiscuous mode
[  110.381394][ T5867] veth0_macvtap: entered promiscuous mode
[  110.399800][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.410764][ T5867] veth1_macvtap: entered promiscuous mode
[  110.440439][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.475155][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.486238][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.496029][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.534826][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.547293][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.559063][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.578346][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.588356][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.611887][   T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.623522][   T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.652239][   T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.661529][   T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.702180][ T5874] veth0_vlan: entered promiscuous mode
[  110.765388][ T5874] veth1_vlan: entered promiscuous mode
[  110.797240][ T5871] veth0_vlan: entered promiscuous mode
[  110.851305][ T5871] veth1_vlan: entered promiscuous mode
[  110.865578][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.882440][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.953698][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.961654][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.971780][ T5874] veth0_macvtap: entered promiscuous mode
[  110.998889][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.007928][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.054930][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.075913][ T5874] veth1_macvtap: entered promiscuous mode
[  111.084610][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.137844][ T5871] veth0_macvtap: entered promiscuous mode
[  111.158441][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  111.169524][ T5871] veth1_macvtap: entered promiscuous mode
[  111.209418][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.241366][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.301033][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.357794][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.386021][ T2962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.396617][ T5872] Bluetooth: hci2: command tx timeout
[  111.402080][ T5872] Bluetooth: hci0: command tx timeout
[  111.409620][ T2962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.430764][ T2962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.454239][ T2962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.464034][ T5186] Bluetooth: hci3: command tx timeout
[  111.469566][ T5872] Bluetooth: hci1: command tx timeout
[  111.497410][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.508465][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.528433][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.559639][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.631113][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.667913][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.818499][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.841967][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.908125][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.000339][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.288828][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.322742][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.103143][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.277798][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[  113.475820][ T5872] Bluetooth: hci0: command tx timeout
[  113.481295][ T5186] Bluetooth: hci2: command tx timeout
[  113.545371][ T5872] Bluetooth: hci1: command tx timeout
[  113.550894][ T5186] Bluetooth: hci3: command tx timeout
[  113.703460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.711818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.722051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.731103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.913587][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.973048][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.046237][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[  114.253914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.263418][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  114.503100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  114.630539][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[  116.066814][ T6005] syz.0.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  119.060823][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'.
[  119.112922][ T6041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  119.983813][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[  121.232815][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  121.527794][ T6054] netlink: 334 bytes leftover after parsing attributes in process `syz.2.23'.
[  122.139863][ T6058] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  122.359242][ T6064] Zero length message leads to an empty skb
[  122.981324][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[  123.426417][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[  127.127020][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[  127.208896][ T6112] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  127.527360][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'.
[  128.550374][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'.
[  129.654838][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'.
[  130.385140][ T6164] netlink: 334 bytes leftover after parsing attributes in process `syz.1.51'.
[  131.217266][ T6177] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  131.273542][ T6177] kvm: kvm [6171]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004)
[  131.546843][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[  135.709771][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'.
[  135.808780][ T6246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  139.365667][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[  140.410476][ T6294] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  143.558826][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  143.565856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  143.769571][ T6344] FAULT_INJECTION: forcing a failure.
[  143.769571][ T6344] name failslab, interval 1, probability 0, space 0, times 1
[  143.783828][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.2.96 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  143.783876][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  143.783900][ T6344] Call Trace:
[  143.783915][ T6344]  <TASK>
[  143.783927][ T6344]  dump_stack_lvl+0x16c/0x1f0
[  143.783978][ T6344]  should_fail_ex+0x512/0x640
[  143.784021][ T6344]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  143.784063][ T6344]  should_failslab+0xc2/0x120
[  143.784106][ T6344]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  143.784146][ T6344]  ? alloc_empty_file+0x55/0x1e0
[  143.784198][ T6344]  alloc_empty_file+0x55/0x1e0
[  143.784249][ T6344]  path_openat+0xda/0x2cb0
[  143.784296][ T6344]  ? __pfx___schedule+0x10/0x10
[  143.784334][ T6344]  ? __pfx_path_openat+0x10/0x10
[  143.784384][ T6344]  do_filp_open+0x20b/0x470
[  143.784434][ T6344]  ? __pfx_do_filp_open+0x10/0x10
[  143.784504][ T6344]  ? alloc_fd+0x471/0x7d0
[  143.784551][ T6344]  do_sys_openat2+0x11b/0x1d0
[  143.784604][ T6344]  ? __pfx_do_sys_openat2+0x10/0x10
[  143.784662][ T6344]  ? __pfx___schedule+0x10/0x10
[  143.784697][ T6344]  ? rcu_is_watching+0x12/0xc0
[  143.784738][ T6344]  __x64_sys_openat+0x174/0x210
[  143.784788][ T6344]  ? __pfx___x64_sys_openat+0x10/0x10
[  143.784857][ T6344]  do_syscall_64+0xcd/0x490
[  143.784902][ T6344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.784936][ T6344] RIP: 0033:0x7fe4fe78ebe9
[  143.784968][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.785000][ T6344] RSP: 002b:00007fe4ff606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  143.785037][ T6344] RAX: ffffffffffffffda RBX: 00007fe4fe9b5fa0 RCX: 00007fe4fe78ebe9
[  143.785058][ T6344] RDX: 000000000014fa02 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  143.785080][ T6344] RBP: 00007fe4fe811e19 R08: 0000000000000000 R09: 0000000000000000
[  143.785100][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.785119][ T6344] R13: 00007fe4fe9b6038 R14: 00007fe4fe9b5fa0 R15: 00007ffe8a0b0028
[  143.785161][ T6344]  </TASK>
[  144.154572][ T6347] mmap: syz.2.96 (6347) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.086075][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'.
[  147.623556][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  147.738438][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'.
[  148.626617][ T6403] ubi0: attaching mtd0
[  148.635611][ T6403] ubi0: scanning is finished
[  148.640374][ T6403] ubi0: empty MTD device detected
[  149.257394][ T6403] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  149.322799][ T6403] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes
[  149.330620][ T6403] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  149.331171][ T6403] ubi0: VID header offset: 514 (aligned 514), data offset: 578
[  149.331198][ T6403] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  149.331222][ T6403] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 20
[  149.331245][ T6403] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 376133060
[  149.331275][ T6403] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  149.336392][ T6416] ubi0: background thread "ubi_bgt0d" started, PID 6416
[  150.030681][ T6419] FAULT_INJECTION: forcing a failure.
[  150.030681][ T6419] name failslab, interval 1, probability 0, space 0, times 0
[  150.077985][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.0.113 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  150.078032][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.078052][ T6419] Call Trace:
[  150.078063][ T6419]  <TASK>
[  150.078075][ T6419]  dump_stack_lvl+0x16c/0x1f0
[  150.078122][ T6419]  should_fail_ex+0x512/0x640
[  150.078168][ T6419]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  150.078208][ T6419]  should_failslab+0xc2/0x120
[  150.078253][ T6419]  __kmalloc_cache_noprof+0x6a/0x3e0
[  150.078288][ T6419]  ? snd_seq_port_connect+0x61/0x580
[  150.078343][ T6419]  snd_seq_port_connect+0x61/0x580
[  150.078388][ T6419]  ? _raw_read_unlock+0x28/0x50
[  150.078423][ T6419]  ? check_subscription_permission.isra.0+0xf5/0x240
[  150.078479][ T6419]  snd_seq_ioctl_subscribe_port+0x211/0x450
[  150.078536][ T6419]  ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10
[  150.078607][ T6419]  snd_seq_kernel_client_ctl+0x107/0x1c0
[  150.078667][ T6419]  snd_seq_oss_midi_open+0x442/0x660
[  150.078706][ T6419]  ? __pfx_snd_seq_oss_midi_open+0x10/0x10
[  150.078754][ T6419]  ? rcu_is_watching+0x12/0xc0
[  150.078787][ T6419]  ? trace_contention_end+0xdd/0x130
[  150.078842][ T6419]  snd_seq_oss_synth_reset+0x437/0x880
[  150.078881][ T6419]  ? __pfx_snd_seq_oss_synth_reset+0x10/0x10
[  150.078931][ T6419]  ? __pfx___fsnotify_parent+0x10/0x10
[  150.078976][ T6419]  snd_seq_oss_reset+0x73/0x290
[  150.079028][ T6419]  ? __pfx_odev_release+0x10/0x10
[  150.079071][ T6419]  snd_seq_oss_release+0x7c/0x180
[  150.079123][ T6419]  odev_release+0x4c/0x70
[  150.079167][ T6419]  __fput+0x3ff/0xb70
[  150.079225][ T6419]  task_work_run+0x150/0x240
[  150.079278][ T6419]  ? __pfx_task_work_run+0x10/0x10
[  150.079330][ T6419]  ? __pfx___do_sys_close_range+0x10/0x10
[  150.079379][ T6419]  exit_to_user_mode_loop+0xeb/0x110
[  150.079428][ T6419]  do_syscall_64+0x3f6/0x490
[  150.079474][ T6419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.079507][ T6419] RIP: 0033:0x7fb3d258ebe9
[  150.079533][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.079565][ T6419] RSP: 002b:00007fb3d3319038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  150.079597][ T6419] RAX: 0000000000000000 RBX: 00007fb3d27b6180 RCX: 00007fb3d258ebe9
[  150.079616][ T6419] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002
[  150.079636][ T6419] RBP: 00007fb3d2611e19 R08: 0000000000000000 R09: 0000000000000000
[  150.079656][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.079676][ T6419] R13: 00007fb3d27b6218 R14: 00007fb3d27b6180 R15: 00007fff471a0c08
[  150.079720][ T6419]  </TASK>
[  150.516039][ T6423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.316212][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'.
[  154.520439][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[  155.167148][ T6474] hub 8-0:1.0: USB hub found
[  155.186479][ T6474] hub 8-0:1.0: 1 port detected
[  157.354167][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[  158.122220][ T6520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  158.715119][ T6522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  160.832828][ T6546] ubi: mtd0 is already attached to ubi0
[  162.673285][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  167.529502][ T6641] FAULT_INJECTION: forcing a failure.
[  167.529502][ T6641] name fail_futex, interval 1, probability 0, space 0, times 1
[  167.563867][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.3.165 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  167.563910][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.563929][ T6641] Call Trace:
[  167.563939][ T6641]  <TASK>
[  167.563951][ T6641]  dump_stack_lvl+0x16c/0x1f0
[  167.563997][ T6641]  should_fail_ex+0x512/0x640
[  167.564046][ T6641]  get_futex_key+0x293/0x1560
[  167.564091][ T6641]  ? __pfx_get_futex_key+0x10/0x10
[  167.564129][ T6641]  ? __mutex_trylock_common+0xe9/0x250
[  167.564184][ T6641]  futex_wake+0xea/0x530
[  167.564235][ T6641]  ? __pfx_futex_wake+0x10/0x10
[  167.564300][ T6641]  do_futex+0x1e3/0x350
[  167.564341][ T6641]  ? __pfx_do_futex+0x10/0x10
[  167.564379][ T6641]  ? __might_fault+0xe3/0x190
[  167.564428][ T6641]  mm_release+0x24e/0x300
[  167.564465][ T6641]  do_exit+0x68e/0x2bf0
[  167.564517][ T6641]  ? __pfx_do_exit+0x10/0x10
[  167.564571][ T6641]  ? do_raw_spin_lock+0x12c/0x2b0
[  167.564636][ T6641]  ? find_held_lock+0x2b/0x80
[  167.564674][ T6641]  do_group_exit+0xd3/0x2a0
[  167.564721][ T6641]  get_signal+0x2673/0x26d0
[  167.564760][ T6641]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  167.564809][ T6641]  ? is_valid_madvise+0x34/0xd0
[  167.564851][ T6641]  ? __pfx_get_signal+0x10/0x10
[  167.564886][ T6641]  ? do_futex+0x122/0x350
[  167.564926][ T6641]  ? __pfx_do_futex+0x10/0x10
[  167.564969][ T6641]  arch_do_signal_or_restart+0x8f/0x790
[  167.565013][ T6641]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  167.565063][ T6641]  ? xfd_validate_state+0x61/0x180
[  167.565109][ T6641]  ? __pfx_ksys_write+0x10/0x10
[  167.565156][ T6641]  exit_to_user_mode_loop+0x84/0x110
[  167.565206][ T6641]  do_syscall_64+0x3f6/0x490
[  167.565252][ T6641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.565284][ T6641] RIP: 0033:0x7fceed58ebe9
[  167.565309][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.565338][ T6641] RSP: 002b:00007fceee3380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  167.565368][ T6641] RAX: fffffffffffffe00 RBX: 00007fceed7b5fa8 RCX: 00007fceed58ebe9
[  167.565389][ T6641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fceed7b5fa8
[  167.565409][ T6641] RBP: 00007fceed7b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  167.565428][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.565447][ T6641] R13: 00007fceed7b6038 R14: 00007ffc15e0d100 R15: 00007ffc15e0d1e8
[  167.565489][ T6641]  </TASK>
[  168.102313][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  190.039739][ T6951] FAULT_INJECTION: forcing a failure.
[  190.039739][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  190.066591][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.0.243 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  190.066624][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  190.066637][ T6951] Call Trace:
[  190.066645][ T6951]  <TASK>
[  190.066654][ T6951]  dump_stack_lvl+0x16c/0x1f0
[  190.066688][ T6951]  should_fail_ex+0x512/0x640
[  190.066724][ T6951]  _copy_from_user+0x2e/0xd0
[  190.066761][ T6951]  copy_msghdr_from_user+0x98/0x160
[  190.066792][ T6951]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  190.066834][ T6951]  ___sys_sendmsg+0xfe/0x1d0
[  190.066864][ T6951]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.066917][ T6951]  ? __mutex_unlock_slowpath+0x140/0x800
[  190.066955][ T6951]  __sys_sendmsg+0x16d/0x220
[  190.066984][ T6951]  ? __pfx___sys_sendmsg+0x10/0x10
[  190.067031][ T6951]  do_syscall_64+0xcd/0x490
[  190.067062][ T6951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.067086][ T6951] RIP: 0033:0x7fb3d258ebe9
[  190.067103][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.067125][ T6951] RSP: 002b:00007fb3d335b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.067147][ T6951] RAX: ffffffffffffffda RBX: 00007fb3d27b5fa0 RCX: 00007fb3d258ebe9
[  190.067162][ T6951] RDX: 0000000020000080 RSI: 0000200000002540 RDI: 0000000000000003
[  190.067175][ T6951] RBP: 00007fb3d335b090 R08: 0000000000000000 R09: 0000000000000000
[  190.067189][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.067201][ T6951] R13: 00007fb3d27b6038 R14: 00007fb3d27b5fa0 R15: 00007fff471a0c08
[  190.067229][ T6951]  </TASK>
[  191.302852][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  194.062746][ T7010] FAULT_INJECTION: forcing a failure.
[  194.062746][ T7010] name failslab, interval 1, probability 0, space 0, times 0
[  194.091287][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.3.260 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  194.091330][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  194.091347][ T7010] Call Trace:
[  194.091357][ T7010]  <TASK>
[  194.091369][ T7010]  dump_stack_lvl+0x16c/0x1f0
[  194.091414][ T7010]  should_fail_ex+0x512/0x640
[  194.091455][ T7010]  ? fs_reclaim_acquire+0xae/0x150
[  194.091507][ T7010]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  194.091552][ T7010]  should_failslab+0xc2/0x120
[  194.091594][ T7010]  __kmalloc_noprof+0xd2/0x510
[  194.091641][ T7010]  tomoyo_realpath_from_path+0xc2/0x6e0
[  194.091692][ T7010]  ? tomoyo_profile+0x47/0x60
[  194.091746][ T7010]  tomoyo_path_number_perm+0x245/0x580
[  194.091783][ T7010]  ? tomoyo_path_number_perm+0x237/0x580
[  194.091826][ T7010]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  194.091866][ T7010]  ? find_held_lock+0x2b/0x80
[  194.091934][ T7010]  ? find_held_lock+0x2b/0x80
[  194.091963][ T7010]  ? hook_file_ioctl_common+0x145/0x410
[  194.092015][ T7010]  ? __fget_files+0x20e/0x3c0
[  194.092057][ T7010]  security_file_ioctl+0x9b/0x240
[  194.092099][ T7010]  __x64_sys_ioctl+0xb7/0x210
[  194.092162][ T7010]  do_syscall_64+0xcd/0x490
[  194.092206][ T7010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.092239][ T7010] RIP: 0033:0x7fceed58ebe9
[  194.092263][ T7010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.092293][ T7010] RSP: 002b:00007fceee338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  194.092324][ T7010] RAX: ffffffffffffffda RBX: 00007fceed7b5fa0 RCX: 00007fceed58ebe9
[  194.092344][ T7010] RDX: 0000200000000140 RSI: 0000000000004601 RDI: 0000000000000003
[  194.092361][ T7010] RBP: 00007fceee338090 R08: 0000000000000000 R09: 0000000000000000
[  194.092379][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.092398][ T7010] R13: 00007fceed7b6038 R14: 00007fceed7b5fa0 R15: 00007ffc15e0d1e8
[  194.092439][ T7010]  </TASK>
[  194.092451][ T7010] ERROR: Out of memory at tomoyo_realpath_from_path.
[  196.224240][ T7051] FAULT_INJECTION: forcing a failure.
[  196.224240][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.224276][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.2.271 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  196.224303][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  196.224317][ T7051] Call Trace:
[  196.224324][ T7051]  <TASK>
[  196.224332][ T7051]  dump_stack_lvl+0x16c/0x1f0
[  196.224366][ T7051]  should_fail_ex+0x512/0x640
[  196.224402][ T7051]  _copy_from_user+0x2e/0xd0
[  196.224439][ T7051]  copy_msghdr_from_user+0x98/0x160
[  196.224470][ T7051]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  196.224504][ T7051]  ? __pfx__kstrtoull+0x10/0x10
[  196.224536][ T7051]  ___sys_sendmsg+0xfe/0x1d0
[  196.224566][ T7051]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.224609][ T7051]  ? find_held_lock+0x2b/0x80
[  196.224649][ T7051]  __sys_sendmmsg+0x200/0x420
[  196.224681][ T7051]  ? __pfx___sys_sendmmsg+0x10/0x10
[  196.224720][ T7051]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  196.224761][ T7051]  ? fput+0x9b/0xd0
[  196.224794][ T7051]  ? ksys_write+0x1ac/0x250
[  196.224819][ T7051]  ? __pfx_ksys_write+0x10/0x10
[  196.224850][ T7051]  __x64_sys_sendmmsg+0x9c/0x100
[  196.224879][ T7051]  ? lockdep_hardirqs_on+0x7c/0x110
[  196.224906][ T7051]  do_syscall_64+0xcd/0x490
[  196.224937][ T7051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.224960][ T7051] RIP: 0033:0x7fe4fe78ebe9
[  196.224978][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.224999][ T7051] RSP: 002b:00007fe4ff5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  196.225020][ T7051] RAX: ffffffffffffffda RBX: 00007fe4fe9b6090 RCX: 00007fe4fe78ebe9
[  196.225035][ T7051] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  196.225049][ T7051] RBP: 00007fe4ff5e5090 R08: 0000000000000000 R09: 0000000000000000
[  196.225062][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.225075][ T7051] R13: 00007fe4fe9b6128 R14: 00007fe4fe9b6090 R15: 00007ffe8a0b0028
[  196.225104][ T7051]  </TASK>
[  199.260617][ T7093] FAULT_INJECTION: forcing a failure.
[  199.260617][ T7093] name failslab, interval 1, probability 0, space 0, times 0
[  199.282760][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.2.281 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  199.282804][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  199.282823][ T7093] Call Trace:
[  199.282833][ T7093]  <TASK>
[  199.282844][ T7093]  dump_stack_lvl+0x16c/0x1f0
[  199.282889][ T7093]  should_fail_ex+0x512/0x640
[  199.282932][ T7093]  ? fs_reclaim_acquire+0xae/0x150
[  199.282983][ T7093]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  199.283028][ T7093]  should_failslab+0xc2/0x120
[  199.283071][ T7093]  __kmalloc_noprof+0xd2/0x510
[  199.283119][ T7093]  tomoyo_realpath_from_path+0xc2/0x6e0
[  199.283169][ T7093]  ? tomoyo_profile+0x47/0x60
[  199.283223][ T7093]  tomoyo_path_number_perm+0x245/0x580
[  199.283260][ T7093]  ? tomoyo_path_number_perm+0x237/0x580
[  199.283302][ T7093]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  199.283342][ T7093]  ? find_held_lock+0x2b/0x80
[  199.283410][ T7093]  ? find_held_lock+0x2b/0x80
[  199.283440][ T7093]  ? hook_file_ioctl_common+0x145/0x410
[  199.283492][ T7093]  ? __fget_files+0x20e/0x3c0
[  199.283535][ T7093]  security_file_ioctl+0x9b/0x240
[  199.283577][ T7093]  __x64_sys_ioctl+0xb7/0x210
[  199.283637][ T7093]  do_syscall_64+0xcd/0x490
[  199.283681][ T7093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.283720][ T7093] RIP: 0033:0x7fe4fe78ebe9
[  199.283745][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.283775][ T7093] RSP: 002b:00007fe4ff5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.283806][ T7093] RAX: ffffffffffffffda RBX: 00007fe4fe9b6090 RCX: 00007fe4fe78ebe9
[  199.283827][ T7093] RDX: 0000200000002600 RSI: 000000004008af21 RDI: 0000000000000006
[  199.283847][ T7093] RBP: 00007fe4ff5e5090 R08: 0000000000000000 R09: 0000000000000000
[  199.283866][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.283885][ T7093] R13: 00007fe4fe9b6128 R14: 00007fe4fe9b6090 R15: 00007ffe8a0b0028
[  199.283927][ T7093]  </TASK>
[  199.283970][ T7093] ERROR: Out of memory at tomoyo_realpath_from_path.
[  199.435724][    C0] vkms_vblank_simulate: vblank timer overrun
[  202.349469][ T7142] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  205.013023][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  205.022689][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  206.570634][ T7197] netlink: 'syz.2.303': attribute type 7 has an invalid length.
[  206.579017][ T7197] netlink: 5 bytes leftover after parsing attributes in process `syz.2.303'.
[  206.614234][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'.
[  210.895219][   T30] audit: type=1800 audit(1754911193.865:2): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.315" name="discovery_nqn" dev="configfs" ino=13886 res=0 errno=0
[  212.779410][ T7264] netlink: 334 bytes leftover after parsing attributes in process `syz.1.318'.
[  216.897234][ T7318] syz.1.331 (7318) used greatest stack depth: 19752 bytes left
[  218.663686][   T30] audit: type=1800 audit(1754911201.635:3): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.339" name="discovery_nqn" dev="configfs" ino=14209 res=0 errno=0
[  220.677480][ T7360] netlink: 334 bytes leftover after parsing attributes in process `syz.0.341'.
[  223.092245][ T7400] vivid-007: =================  START STATUS  =================
[  223.100675][ T7400] vivid-007: Enable Output Cropping: true
[  223.106812][ T7400] vivid-007: Enable Output Composing: true
[  223.116554][ T7400] vivid-007: Enable Output Scaler: true
[  223.122241][ T7400] vivid-007: Tx RGB Quantization Range: Automatic
[  223.166398][ T7400] vivid-007: Transmit Mode: HDMI
[  223.203769][ T7400] vivid-007: Hotplug Present: 0x00000000
[  223.223858][ T7400] vivid-007: RxSense Present: 0x00000000
[  223.229909][ T7400] vivid-007: EDID Present: 0x00000000
[  223.263808][ T7400] vivid-007: ==================  END STATUS  ==================
[  223.636774][ T7407] can: request_module (can-proto-3) failed.
[  225.923887][ T7407] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  225.931679][ T7407] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  225.972059][ T7407] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  226.015946][ T7407] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  226.023208][ T7407] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  226.046266][ T7407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  226.055422][ T7407] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  226.075002][ T7407] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  226.083731][ T7407] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  226.093274][ T7425] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  226.183843][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout
[  228.102701][ T5872] Bluetooth: hci3: command 0x0406 tx timeout
[  228.102756][ T5876] Bluetooth: hci1: command 0x0406 tx timeout
[  228.116458][ T5186] Bluetooth: hci2: command 0x0406 tx timeout
[  228.262668][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout
[  229.828469][ T7497] vivid-007: =================  START STATUS  =================
[  229.828511][ T7497] vivid-007: Enable Output Cropping: true
[  229.828556][ T7497] vivid-007: Enable Output Composing: true
[  229.828591][ T7497] vivid-007: Enable Output Scaler: true
[  229.828625][ T7497] vivid-007: Tx RGB Quantization Range: Automatic
[  229.828660][ T7497] vivid-007: Transmit Mode: HDMI
[  229.828693][ T7497] vivid-007: Hotplug Present: 0x00000000
[  229.828729][ T7497] vivid-007: RxSense Present: 0x00000000
[  229.828763][ T7497] vivid-007: EDID Present: 0x00000000
[  229.828797][ T7497] vivid-007: ==================  END STATUS  ==================
[  230.182843][ T5186] Bluetooth: hci3: command 0x0406 tx timeout
[  230.182902][ T5186] Bluetooth: hci2: command 0x0406 tx timeout
[  230.182946][ T5186] Bluetooth: hci1: command 0x0406 tx timeout
[  230.342728][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout
[  238.736598][ T7629] netlink: 342 bytes leftover after parsing attributes in process `syz.3.403'.
[  239.801180][ T7647] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[  239.836905][ T7647] netlink: 318 bytes leftover after parsing attributes in process `syz.2.406'.
[  244.503041][ T5876] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  248.503668][ T5876] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  252.111518][   T30] audit: type=1800 audit(1754911235.085:4): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.447" name="discovery_nqn" dev="configfs" ino=17352 res=0 errno=0
[  263.236859][   T30] audit: type=1800 audit(1754911246.215:5): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="discovery_nqn" dev="configfs" ino=18375 res=0 errno=0
[  266.427885][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  266.427950][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  270.510757][ T5876] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  274.730500][ T5876] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  277.338797][ T8130] FAULT_INJECTION: forcing a failure.
[  277.338797][ T8130] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  277.338940][ T8130] CPU: 1 UID: 0 PID: 8130 Comm: syz.1.527 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  277.338982][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  277.339002][ T8130] Call Trace:
[  277.339013][ T8130]  <TASK>
[  277.339025][ T8130]  dump_stack_lvl+0x16c/0x1f0
[  277.339071][ T8130]  should_fail_ex+0x512/0x640
[  277.339136][ T8130]  should_fail_alloc_page+0xe7/0x130
[  277.339183][ T8130]  prepare_alloc_pages+0x3c2/0x610
[  277.339240][ T8130]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  277.339285][ T8130]  ? arch_stack_walk+0xa6/0x100
[  277.339337][ T8130]  ? stack_trace_save+0x8e/0xc0
[  277.339373][ T8130]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  277.339410][ T8130]  ? rcu_is_watching+0x12/0xc0
[  277.339455][ T8130]  ? kasan_save_track+0x14/0x30
[  277.339491][ T8130]  ? __kasan_slab_alloc+0x89/0x90
[  277.339529][ T8130]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  277.339566][ T8130]  ? __pmd_alloc+0xbf/0x930
[  277.339611][ T8130]  ? __handle_mm_fault+0xa06/0x2a50
[  277.339641][ T8130]  ? handle_mm_fault+0x589/0xd10
[  277.339671][ T8130]  ? __get_user_pages+0x551/0x34a0
[  277.339716][ T8130]  ? populate_vma_page_range+0x267/0x3f0
[  277.339765][ T8130]  ? __mm_populate+0x1d8/0x380
[  277.339811][ T8130]  ? vm_mmap_pgoff+0x37f/0x470
[  277.339853][ T8130]  ? ksys_mmap_pgoff+0x7d/0x5c0
[  277.339895][ T8130]  ? __x64_sys_mmap+0x125/0x190
[  277.339943][ T8130]  ? do_syscall_64+0xcd/0x490
[  277.339981][ T8130]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  277.340033][ T8130]  ? policy_nodemask+0xea/0x4e0
[  277.340080][ T8130]  alloc_pages_mpol+0x1fb/0x550
[  277.340131][ T8130]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  277.340188][ T8130]  alloc_pages_noprof+0x131/0x390
[  277.340232][ T8130]  pte_alloc_one+0x1c/0x3a0
[  277.340267][ T8130]  __pte_alloc+0x6d/0x3c0
[  277.340310][ T8130]  ? __pfx___pte_alloc+0x10/0x10
[  277.340357][ T8130]  ? do_raw_spin_lock+0x12c/0x2b0
[  277.340413][ T8130]  do_pte_missing+0x285a/0x3ba0
[  277.340447][ T8130]  ? do_raw_spin_unlock+0x172/0x230
[  277.340500][ T8130]  ? _raw_spin_unlock+0x28/0x50
[  277.340533][ T8130]  ? __pmd_alloc+0x3fb/0x930
[  277.340584][ T8130]  __handle_mm_fault+0x152a/0x2a50
[  277.340631][ T8130]  ? __pfx___handle_mm_fault+0x10/0x10
[  277.340700][ T8130]  handle_mm_fault+0x589/0xd10
[  277.340742][ T8130]  __get_user_pages+0x551/0x34a0
[  277.340810][ T8130]  ? __pfx___get_user_pages+0x10/0x10
[  277.340872][ T8130]  populate_vma_page_range+0x267/0x3f0
[  277.340926][ T8130]  ? __pfx_populate_vma_page_range+0x10/0x10
[  277.340976][ T8130]  ? __pfx_find_vma_intersection+0x10/0x10
[  277.341026][ T8130]  ? do_mmap+0x69c/0x1210
[  277.341077][ T8130]  __mm_populate+0x1d8/0x380
[  277.341138][ T8130]  ? __pfx___mm_populate+0x10/0x10
[  277.341192][ T8130]  ? up_write+0x1b2/0x520
[  277.341244][ T8130]  vm_mmap_pgoff+0x37f/0x470
[  277.341295][ T8130]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  277.341353][ T8130]  ? __x64_sys_futex+0x1e0/0x4c0
[  277.341393][ T8130]  ? __x64_sys_futex+0x1e9/0x4c0
[  277.341440][ T8130]  ksys_mmap_pgoff+0x7d/0x5c0
[  277.341484][ T8130]  ? xfd_validate_state+0x61/0x180
[  277.341530][ T8130]  ? __pfx_ksys_write+0x10/0x10
[  277.341572][ T8130]  __x64_sys_mmap+0x125/0x190
[  277.341628][ T8130]  do_syscall_64+0xcd/0x490
[  277.341674][ T8130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.341708][ T8130] RIP: 0033:0x7f749a38ebe9
[  277.341735][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.341768][ T8130] RSP: 002b:00007f749b136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  277.341799][ T8130] RAX: ffffffffffffffda RBX: 00007f749a5b5fa0 RCX: 00007f749a38ebe9
[  277.341820][ T8130] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  277.341840][ T8130] RBP: 00007f749a411e19 R08: 0000000000000002 R09: 0000000000008000
[  277.341860][ T8130] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  277.341880][ T8130] R13: 00007f749a5b6038 R14: 00007f749a5b5fa0 R15: 00007ffe4ef59788
[  277.341922][ T8130]  </TASK>
[  278.882409][ T8132] tty tty1: ldisc open failed (-12), clearing slot 0
[  286.022837][ T5186] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  293.599172][ T8374] FAULT_INJECTION: forcing a failure.
[  293.599172][ T8374] name failslab, interval 1, probability 0, space 0, times 0
[  293.617365][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.1.601 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  293.617409][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.617426][ T8374] Call Trace:
[  293.617439][ T8374]  <TASK>
[  293.617451][ T8374]  dump_stack_lvl+0x16c/0x1f0
[  293.617493][ T8374]  should_fail_ex+0x512/0x640
[  293.617534][ T8374]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  293.617575][ T8374]  should_failslab+0xc2/0x120
[  293.617614][ T8374]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  293.617649][ T8374]  ? __alloc_skb+0x2b2/0x380
[  293.617689][ T8374]  __alloc_skb+0x2b2/0x380
[  293.617723][ T8374]  ? __pfx___alloc_skb+0x10/0x10
[  293.617764][ T8374]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  293.617800][ T8374]  ? __lock_acquire+0xb97/0x1ce0
[  293.617845][ T8374]  netlink_alloc_large_skb+0x69/0x130
[  293.617887][ T8374]  netlink_sendmsg+0x6a1/0xdd0
[  293.617933][ T8374]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.617984][ T8374]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  293.618019][ T8374]  ____sys_sendmsg+0xa95/0xc70
[  293.618064][ T8374]  ? copy_msghdr_from_user+0x10a/0x160
[  293.618099][ T8374]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.618158][ T8374]  ___sys_sendmsg+0x134/0x1d0
[  293.618196][ T8374]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.618261][ T8374]  ? __mutex_unlock_slowpath+0x140/0x800
[  293.618308][ T8374]  __sys_sendmsg+0x16d/0x220
[  293.618344][ T8374]  ? __pfx___sys_sendmsg+0x10/0x10
[  293.618403][ T8374]  do_syscall_64+0xcd/0x490
[  293.618446][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.618480][ T8374] RIP: 0033:0x7f749a38ebe9
[  293.618504][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.618533][ T8374] RSP: 002b:00007f749b136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.618561][ T8374] RAX: ffffffffffffffda RBX: 00007f749a5b5fa0 RCX: 00007f749a38ebe9
[  293.618581][ T8374] RDX: 0000000020000080 RSI: 0000200000002540 RDI: 0000000000000003
[  293.618599][ T8374] RBP: 00007f749b136090 R08: 0000000000000000 R09: 0000000000000000
[  293.618617][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.618634][ T8374] R13: 00007f749a5b6038 R14: 00007f749a5b5fa0 R15: 00007ffe4ef59788
[  293.618671][ T8374]  </TASK>
[  294.266289][ T8379] FAULT_INJECTION: forcing a failure.
[  294.266289][ T8379] name failslab, interval 1, probability 0, space 0, times 0
[  294.334591][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.603 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  294.334634][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.334652][ T8379] Call Trace:
[  294.334662][ T8379]  <TASK>
[  294.334780][ T8379]  dump_stack_lvl+0x16c/0x1f0
[  294.334833][ T8379]  should_fail_ex+0x512/0x640
[  294.334882][ T8379]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  294.334924][ T8379]  should_failslab+0xc2/0x120
[  294.334969][ T8379]  __kmalloc_cache_noprof+0x6a/0x3e0
[  294.335004][ T8379]  ? rcu_is_watching+0x12/0xc0
[  294.335038][ T8379]  ? s_start+0x7b/0x320
[  294.335092][ T8379]  s_start+0x7b/0x320
[  294.335150][ T8379]  traverse.part.0.constprop.0+0xac/0x640
[  294.335193][ T8379]  ? aa_file_perm+0x28f/0x12e0
[  294.335258][ T8379]  seq_read_iter+0x932/0x12c0
[  294.335302][ T8379]  ? __pfx_aa_file_perm+0x10/0x10
[  294.335365][ T8379]  seq_read+0x3a3/0x570
[  294.335407][ T8379]  ? __pfx_seq_read+0x10/0x10
[  294.335438][ T8379]  ? get_pid_task+0xfc/0x250
[  294.335505][ T8379]  ? rw_verify_area+0xcf/0x6c0
[  294.335538][ T8379]  ? __pfx_seq_read+0x10/0x10
[  294.335575][ T8379]  vfs_read+0x1e4/0xcf0
[  294.335621][ T8379]  ? __pfx_vfs_read+0x10/0x10
[  294.335655][ T8379]  ? find_held_lock+0x2b/0x80
[  294.335697][ T8379]  ? __fget_files+0x204/0x3c0
[  294.335739][ T8379]  ? __fget_files+0x20e/0x3c0
[  294.335770][ T8379]  ? __fget_files+0x200/0x3c0
[  294.335817][ T8379]  __x64_sys_pread64+0x1eb/0x250
[  294.335858][ T8379]  ? __pfx___x64_sys_pread64+0x10/0x10
[  294.335911][ T8379]  do_syscall_64+0xcd/0x490
[  294.335956][ T8379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.335990][ T8379] RIP: 0033:0x7f749a38ebe9
[  294.336015][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.336045][ T8379] RSP: 002b:00007f749b136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  294.336074][ T8379] RAX: ffffffffffffffda RBX: 00007f749a5b5fa0 RCX: 00007f749a38ebe9
[  294.336095][ T8379] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000003
[  294.336113][ T8379] RBP: 00007f749b136090 R08: 0000000000000000 R09: 0000000000000000
[  294.336132][ T8379] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  294.336150][ T8379] R13: 00007f749a5b6038 R14: 00007f749a5b5fa0 R15: 00007ffe4ef59788
[  294.336193][ T8379]  </TASK>
[  294.336257][ T8379] 
[  294.572324][ T8379] =====================================
[  294.577910][ T8379] WARNING: bad unlock balance detected!
[  294.583476][ T8379] 6.17.0-rc1-syzkaller #0 Not tainted
[  294.588869][ T8379] -------------------------------------
[  294.594514][ T8379] syz.1.603/8379 is trying to release lock (event_mutex) at:
[  294.601921][ T8379] [<ffffffff823eadd0>] traverse.part.0.constprop.0+0x2c0/0x640
[  294.609514][ T8379] but there are no more locks to release!
[  294.615347][ T8379] 
[  294.615347][ T8379] other info that might help us debug this:
[  294.623549][ T8379] 1 lock held by syz.1.603/8379:
[  294.628494][ T8379]  #0: ffff88807e0bd9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0
[  294.637715][ T8379] 
[  294.637715][ T8379] stack backtrace:
[  294.643989][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.1.603 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  294.644025][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.644041][ T8379] Call Trace:
[  294.644052][ T8379]  <TASK>
[  294.644062][ T8379]  dump_stack_lvl+0x116/0x1f0
[  294.644098][ T8379]  ? traverse.part.0.constprop.0+0x2c0/0x640
[  294.644127][ T8379]  print_unlock_imbalance_bug+0x11b/0x130
[  294.644160][ T8379]  ? traverse.part.0.constprop.0+0x2c0/0x640
[  294.644186][ T8379]  lock_release+0x242/0x2f0
[  294.644219][ T8379]  ? dump_stack_lvl+0x1a3/0x1f0
[  294.644251][ T8379]  __mutex_unlock_slowpath+0xa7/0x800
[  294.644287][ T8379]  ? rcu_is_watching+0x12/0xc0
[  294.644314][ T8379]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  294.644347][ T8379]  ? __kmalloc_cache_noprof+0x249/0x3e0
[  294.644375][ T8379]  ? rcu_is_watching+0x12/0xc0
[  294.644400][ T8379]  ? kfree+0x24f/0x4d0
[  294.644423][ T8379]  ? s_start+0x28c/0x320
[  294.644461][ T8379]  traverse.part.0.constprop.0+0x2c0/0x640
[  294.644488][ T8379]  ? aa_file_perm+0x28f/0x12e0
[  294.644530][ T8379]  seq_read_iter+0x932/0x12c0
[  294.644558][ T8379]  ? __pfx_aa_file_perm+0x10/0x10
[  294.644599][ T8379]  seq_read+0x3a3/0x570
[  294.644622][ T8379]  ? __pfx_seq_read+0x10/0x10
[  294.644651][ T8379]  ? get_pid_task+0xfc/0x250
[  294.644695][ T8379]  ? rw_verify_area+0xcf/0x6c0
[  294.644720][ T8379]  ? __pfx_seq_read+0x10/0x10
[  294.644743][ T8379]  vfs_read+0x1e4/0xcf0
[  294.644775][ T8379]  ? __pfx_vfs_read+0x10/0x10
[  294.644802][ T8379]  ? find_held_lock+0x2b/0x80
[  294.644826][ T8379]  ? __fget_files+0x204/0x3c0
[  294.644857][ T8379]  ? __fget_files+0x20e/0x3c0
[  294.644883][ T8379]  ? __fget_files+0x200/0x3c0
[  294.644915][ T8379]  __x64_sys_pread64+0x1eb/0x250
[  294.644947][ T8379]  ? __pfx___x64_sys_pread64+0x10/0x10
[  294.644984][ T8379]  do_syscall_64+0xcd/0x490
[  294.645019][ T8379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.645046][ T8379] RIP: 0033:0x7f749a38ebe9
[  294.645066][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.645092][ T8379] RSP: 002b:00007f749b136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  294.645116][ T8379] RAX: ffffffffffffffda RBX: 00007f749a5b5fa0 RCX: 00007f749a38ebe9
[  294.645134][ T8379] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000003
[  294.645149][ T8379] RBP: 00007f749b136090 R08: 0000000000000000 R09: 0000000000000000
[  294.645165][ T8379] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  294.645181][ T8379] R13: 00007f749a5b6038 R14: 00007f749a5b5fa0 R15: 00007ffe4ef59788
[  294.645206][ T8379]  </TASK>