last executing test programs:

9m26.993358136s ago: executing program 2 (id=364):
r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$auto(r0, 0x0, 0x5) (async)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) (async)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
write$auto_kmsg_fops_printk(r2, 0x0, 0x0)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async, rerun: 64)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000240), 0x44000, 0x0) (rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r6 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x82400, 0x0) (async)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x9}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "78b5"}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x58804) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(r3, 0x8, 0x0) (async)
sysfs$auto(0xc, 0x1, 0x81) (async)
io_submit$auto(0x194, 0x4, &(0x7f0000000480)=&(0x7f0000000440)={0x8, 0x7, 0x5, 0xffff, 0xfffa, r5, 0x9, 0x8, 0x4, 0x0, 0x2, <r8=>r6})
read$auto_tracing_err_log_fops_trace(r8, &(0x7f00000004c0)=""/141, 0x8d)
r9 = openat2$auto(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x6, 0x3, 0x40}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', <r10=>0x0})
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x400c000)

9m26.293761072s ago: executing program 2 (id=368):
mmap$auto(0x0, 0x4020009, 0xdf, 0x18, 0x401, 0x8000)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r0, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6})
mmap$auto(0x0, 0x2020009, 0x5aab8d51, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_open_procfs$namespace(0x0, 0x0)
socket(0x2, 0x801, 0x100)
setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1)

9m25.63231461s ago: executing program 2 (id=369):
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
pread64$auto(r0, 0x0, 0x8, 0x8000)
remap_file_pages$auto(0xfffffffffffffff6, 0x1, 0x1, 0xce8, 0x40)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(0x3, 0x0, 0x80)
write$auto(0x4, 0x0, 0x100082)
socket(0x2, 0x80802, 0x0)
clock_settime$auto(0xa, 0x0)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
io_uring_setup$auto(0x2, 0x0)
setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x888)
unshare$auto(0x40000080)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

9m23.580005891s ago: executing program 2 (id=376):
mmap$auto(0x0, 0x6, 0x6, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) (async)
adjtimex$auto(0x0) (async)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0xa3db) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0xff00, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) (async)
r2 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x400, &(0x7f0000000100)="020f59558ad5d2b0ab3fb8a28b6fcf5a105d162aca94c94b78d070a5adb205408fc20bb749fd9e09d436a34b97ec5c519a1836bfb78e9d6418aae62505248be3021be906ed3211e9e98752a58eecb1dd7568ff9eb647d2433cc6c648db646d418d635110c7") (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nbd(0x0, r2) (async)
sendmsg$auto_NBD_CMD_CONNECT(r1, 0x0, 0x8880) (async)
write$auto(0xffffffffffffffff, 0x0, 0x7ff) (async)
mmap$auto(0x4, 0x40009, 0x803, 0x9b73, r3, 0x9) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async)
setsockopt$auto(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0xc)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async)
sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x80) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, r0, [0x0, 0x2], {0x7826, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x200004, 0x40, 0x76c3, 0x8, 0x52d0}}) (async)
io_uring_setup$auto(0x7, 0x0) (async)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) (async)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) (async)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)

9m21.192388126s ago: executing program 2 (id=383):
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/97, 0x61)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000200000000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
ppoll$auto(&(0x7f0000000000)={<r2=>r0, 0x40}, 0x2, 0x0, 0x0, 0x8)
fsopen$auto(0x0, 0x1)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x5, 0x0)
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffbfb, @_sigpoll={0x52, 0x7}}})
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto_mISDN_fops_timerdev(r3, &(0x7f0000001a00)=""/4097, 0x1001)
ioctl$auto_IMADDTIMER(r3, 0x80044940, 0x0)
landlock_add_rule$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)="c604ebf2c9bc", 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0)
ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0)
ioctl$auto_FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)="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")
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)

9m18.297993955s ago: executing program 2 (id=392):
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0)
write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='D\x00]\x81\x00|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0)
read$auto(r2, &(0x7f0000000040)='\x00', 0x3)
mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0)
pread64$auto(r3, 0x0, 0x8, 0xffff)
madvise$auto(0x0, 0x200007, 0x8)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x80e80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4b, 0x0)
fsopen$auto(0x0, 0x1)

9m17.605209388s ago: executing program 32 (id=392):
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0)
write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='D\x00]\x81\x00|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0)
read$auto(r2, &(0x7f0000000040)='\x00', 0x3)
mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0)
pread64$auto(r3, 0x0, 0x8, 0xffff)
madvise$auto(0x0, 0x200007, 0x8)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x80e80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4b, 0x0)
fsopen$auto(0x0, 0x1)

2m45.484516809s ago: executing program 1 (id=1802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2eb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000)
openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x18, 0x3, 0x40006)
migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x8000000000000001, 0x4, 0x1d)
setgroups$auto(0xe32, 0x0)
open(0x0, 0x22240, 0x154)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r1, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
writev$auto(0xffffffffffffffff, 0x0, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

2m43.691829694s ago: executing program 1 (id=1809):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x800, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

2m42.485833799s ago: executing program 1 (id=1813):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000400)={{<r1=>r0, &(0x7f0000000040)="0cb10a01f16f6dbca4", 0x4, &(0x7f00000001c0)="a2c8a6755710ed48db54837fbcf3ca30c757038fc7093e6274b808bb638f91a8d155f0a67495974539f5f46be01bae8f79fd77b6762af5636ec94fd15d4009b00ebaabecf1474e8fae74035c249756615cb6ff64a0c0cc08f59ca5c36981ee89c67afc5ab2bdbd3f2abbd0952133d5c030762445db07eef44b806591f22bb6cbd45d7a6abf614413ef7296f0248da446653a9ca37ae67e788d3021b0d32a5fec51a9ecdce7100e97cbbc4b56a01ed579e8a24af4fc8c1091b852db1423a8af41c43df9b3adc0725a33e26114", 0x5, &(0x7f0000000480)="73ec254c65b023ed14da62844a238a1cb9d7d9b442127ffe1160e8f2703624fb37e5a081d6331dfb0e3256b777b1405d588c257e7c71519872996faa3bee427f4a2b1c17c794a75e2741295e73a9c66cf2", &(0x7f0000000300)=0x4}, {[0x52f, 0x89b, 0x9, 0x505]}, 0x5, 0x4, &(0x7f0000000340)="cd3771bf5e1390a8001952b3ac35bf6ba0f1794a24471663e5422fc206d785637e3f8692f08e59a07ca701dab3cc7c00174cfd196655b01aef6505bc35233a500c2978aad4dd572ad7e08996e71a811b618b1b4076abdbb79aa5bdb04af53ff8efc18d26a3b22d666f9025352a172c2e541dbabfde4287dee570cfbfeb3c439f7167494bf05194ad2abfa2c5dcfe31010eda0cb08e97b5073bcbf7d7d4e5b5fd690b501e71dbd8f348e8d7f1c70da58f60450053efeba43219323dbe8818"})
read$auto_regulator_summary_fops_(r1, &(0x7f0000001080)=""/4096, 0x1000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x216000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty35\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x400000f1, 0x400, 0x9}]})
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40040)
write$auto(0x4, 0x0, 0x100082)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x40000400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r4 = socket(0xa, 0x3, 0x3b)
ustat$auto(0x801, 0x0)
getsockopt$auto(r4, 0x29, 0x20, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0)

2m41.235565935s ago: executing program 1 (id=1816):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000)
getpgrp(0xffffffffffffffff)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop14\x00', 0x28000, 0x0)
ioctl$auto_BLKPG(r0, 0x1269, 0x300000000000000)
socket(0x1d, 0x1, 0xd)
socket(0x2, 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x3f)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/156, 0x9c)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/248, 0xf8)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0)
read$auto(r4, 0x0, 0x1f40)
r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x3)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x6, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
mmap$auto(0x180000, 0x0, 0xff, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)

2m39.911802282s ago: executing program 1 (id=1824):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
clock_gettime$auto(0xa, 0x0)
prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x3, 0xff)
connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f00000001c0)='./file0\x00', 0x121142, 0x13d)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x8, 0x8, 0x0)
setfsuid$auto(0x0)
keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x20000000000006)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000001340)='7\x04\x00\x00@\xff\x90D\xe8=;d\xd7;\xfb\x7f\xcb\xab\xa7f\xf9D\xb5\x1a[\xad', 0xffbffdef)

2m38.129418334s ago: executing program 1 (id=1834):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x9)
r0 = socket(0x29, 0x5, 0x0)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x1, 0x2020009, 0x2, 0xeb2, r0, 0x10000000200004)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xfffffffffffffffc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x40000008000)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0)
brk$auto(0x8)
mmap$auto(0x6, 0x400, 0x4, 0x1f, 0xffffffffffffffff, 0x5)
fstat$auto(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x80000000ffff, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1, 0x3, 0x0, 0x0, 0x3)
write$auto(0x3, 0x0, 0x8)
setsockopt$auto(0x3, 0xb689, 0x20, 0x0, 0x6)
mmap$auto(0x7fffffffffffffff, 0xfff, 0xdf, 0x19, 0x400, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
bpf$auto(0xfffff001, &(0x7f0000000000)=@enable_stats={0x200}, 0xa3)
r3 = socket(0xa, 0x3, 0x5)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa)
futex_wait$auto(0x0, 0x200000000, 0x100000007f, 0x80000001, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x8000000)
mmap$auto(0xfffffffffffffffc, 0x808, 0x3, 0x11, r2, 0x1)

2m23.020318557s ago: executing program 33 (id=1834):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x9)
r0 = socket(0x29, 0x5, 0x0)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x1, 0x2020009, 0x2, 0xeb2, r0, 0x10000000200004)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0xfffffffffffffffc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x40000008000)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0)
brk$auto(0x8)
mmap$auto(0x6, 0x400, 0x4, 0x1f, 0xffffffffffffffff, 0x5)
fstat$auto(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x80000000ffff, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1, 0x3, 0x0, 0x0, 0x3)
write$auto(0x3, 0x0, 0x8)
setsockopt$auto(0x3, 0xb689, 0x20, 0x0, 0x6)
mmap$auto(0x7fffffffffffffff, 0xfff, 0xdf, 0x19, 0x400, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
bpf$auto(0xfffff001, &(0x7f0000000000)=@enable_stats={0x200}, 0xa3)
r3 = socket(0xa, 0x3, 0x5)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa)
futex_wait$auto(0x0, 0x200000000, 0x100000007f, 0x80000001, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x8000000)
mmap$auto(0xfffffffffffffffc, 0x808, 0x3, 0x11, r2, 0x1)

9.019740919s ago: executing program 5 (id=2260):
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x48041, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0x550c, 0x0)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
sendmmsg$auto(r1, 0x0, 0x7, 0x4008)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)

7.848618348s ago: executing program 4 (id=2262):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000fffbe5c4c3ab29d7b855848bf194a14ae61f95b52658d72efe7402e5f9cf33299f917c8420629ea8665bc69529dd8eb90470e463c81e5e4ac97234e4430b9b882f51b12900cd952b07ec9535168fcdaabef2fbf8c23113", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x80040, 0x0)
mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x110000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000fffbe5c4c3ab29d7b855848bf194a14ae61f95b52658d72efe7402e5f9cf33299f917c8420629ea8665bc69529dd8eb90470e463c81e5e4ac97234e4430b9b882f51b12900cd952b07ec9535168fcdaabef2fbf8c23113", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x80040, 0x0) (async)
mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x110000000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)

7.379253688s ago: executing program 4 (id=2263):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044095)
r0 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0x6, 0x10, r0, 0x130000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0)
write$auto_nvmf_dev_fops_fabrics(r1, 0x0, 0x0)
read$auto(r1, 0x0, 0x1f43)
close_range$auto(r0, 0xffffffffffffffff, 0x2)
unshare$auto(0x40000080)
prctl$auto(0x23, 0xc, 0x2008, 0x9, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x1, 0x100)
unshare$auto(0x7ffe)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/aqm\x00', 0x80, 0x0)
pread64$auto(r3, 0x0, 0xe5, 0x40)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q', @ANYRES16, @ANYBLOB], 0xf8}}, 0x10004010)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129e01, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b52, 0x1)
socket(0xa, 0x2, 0x0)
shmctl$auto_SHM_UNLOCK(0x7, 0xc, &(0x7f0000000180)={{0x7, <r6=>0xee00, 0x0, 0x0, 0x7, 0x2, 0x8}, 0x9, 0x5, 0x401, 0x2, @inferred=0xffffffffffffffff, @raw=0x9, 0x80, 0x0, &(0x7f0000000000)="f844adbaebf2bd3f841b340c9006c3211f5c8f2e6b6993d2c0df0e3cf4fd6198375d3a82d31a80a5c4b1c3c4800d6bdb0d0330441419110e76c0d6fc6bd5970bacd581a0e2605025ffa9ba893a466347e60663d2446422029b7964ebbd51c0676319e9ec7cca80d4ed731854719ebbb46fae37c8f20785fd131039922767bd340b903cd142c5ec67494ae5f4b3d12f38", &(0x7f00000000c0)="6d5893ee21e8eec61e9514a7e1ffc5162f5e5c9981b3b962796417e764309b92ee0db6af44356c6f0857364dde7c73d6dc9cca3e88b4773345897eec574184068734b929fb61bcb6d78fb9e0527daebccf6d8af82ebeadf9c301a56eac64b0a5c4db3bdca87b4639537b12158079f7b401f40def6d2c5bfbbc980ab35d3a3479679f08a8717e2674fc3a2a3cb404ddfe292244c5db72a4393a00a0ea3b75871d42b6186af5353268fb2b31d1d860d4d8"})
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x5, &(0x7f0000000380)={@siginfo_0_0={0x9, 0x72e5bb9b, 0x5, @_rt={0xffffffffffffffff, r6, @sival_ptr=&(0x7f0000000200)="929ca27627c8e4fb2997255542d09c2116f83a8b44893142e153ef1ff74ae945c8edf841e719b4132a77e9e1fc30cfa4f7eb53cf70d8a1ab6d5256ff6b4fb605fc8f55ae337635f5e8cd37c6aaaf27ac79d8010d1f83da69eecd022a94ad8749130371e427551b3b8c06a6c43d783fa88d29f3c9c42109fd2e3cbcb3847b00468b47319f60f5ef3d52188eca57953142e05fc991da2654dc4680f964e259661529c2904286b0454aff0858bd9b676e1c8b7199ca6077e6ef17e006e62c9b25449a6c62d107f88fca5ff05e696184246618b080802c74fdd36f9f18f453ba81805d6baf2b30a30cecc7574947257283826850af74"}}}, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', 0x129102, 0x0)

7.088640726s ago: executing program 3 (id=2264):
r0 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4}, 0xa3)
r1 = prctl$auto_SIGCONT(0x0, 0x12, 0x0, 0x5, 0x0)
mmap$auto(0x0, 0x94f1, 0x3, 0x510, r1, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x4, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000000}, 0x8044)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
socket(0x2c, 0x3, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x48501, 0x0)
futex$auto(0x0, 0x9, 0x2948, 0x0, 0x0, 0x5)
io_uring_setup$auto(0x1, 0x0)
pipe$auto(0x0)
r5 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r5, 0x6a, 0x1, 0x0, 0x0)

6.901158866s ago: executing program 3 (id=2266):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64)
ioctl$auto(0x3, 0x1, 0x90000800000402) (rerun: 64)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
socket(0x2, 0x80002, 0x73) (async, rerun: 32)
socket(0xa, 0x1, 0x84)
futex_wake$auto(0x0, 0x0, 0x3, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 64)
write$auto(0x3, 0x0, 0xffd8) (async)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffe, 0x40000000000006, 0x9, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0xdeaa, 0x804}) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
inotify_init1$auto(0x5) (async)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
epoll_create$auto(0x4) (async)
r3 = socket(0x28, 0x1, 0x1) (async)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) (rerun: 64)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xac, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x8f, 0x18, "48de3b72bc4f5b080b0b7e812975fe9d72a948ab549af4fe9106388f677f8153713c99915caa4d3cc32855c700a83e6b75f716fac4597cf70c95cbec80239eaeee7a349592c47c8955a07ff5ee08cebfa7f739b27892073a423456b008835f85839e5f78062f20bb9f858e8425271ae90c7e279c57863ab4c1a436749d81379d3f44e8cd800203ef2a7cc3"}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xfffffff7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004053}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x948b, 0x3, 0x15f4da07, 0xfffffffffffffffe, 0x3, 0x62, 0x8000001f, 0x7, 0x8, 0x9, 0x2, 0x8]}, 0x0)

5.616449963s ago: executing program 3 (id=2267):
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r0 = io_uring_setup$auto(0x6, 0x0)
fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x8, 0x800, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x4)
pwrite64$auto(0xc8, &(0x7f00000004c0)='\vX\xb5n\x91p\xe4\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x8c\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xb5\xd3\x01\x81l\xf3m\xe2\xb7\xccH.0\x8f\xb9\xb9,l\v\x8f\xc7w^_\xbd\xf51\xc6\x87\xba\xa3\xed\xe6\xf0\xe9\xfc\xe0\xe0\xe5OW\a\x1bh\x11Q_\x17\xce\xb4\xa2\x17*\xc2\xdc7\x17G\xa85\\\xe8\xefj\xcfh\x88\xda(\xc0\xdc\xaf\x19\x1c\x1d\x7f\x92\x93\xc9g{\x9d\x96&\x04\xe4+B\xdf\xa8\xcc\xfa\xca&\f\x9fI\x0f\x98\x7f\xa8\xf5\xd9\xac\'\x8cN\xd0n\xa7$\xac\x83X\x8e\xcf\x8c\xf7_G\xdf\f\x15\xad\xf6p#\x12\x8e#\x9b\x1f\xd8\xbaGy\x1e;\xe8\xbb\xf3\x92\xca\xa7\xdd\x9a\xbd\xd0\xc1\xbe\x91\x98LFK\x8f_R\x18\xcc\xc6\xcf%\xb3Q\\Q\x1ccS\x80v\xca\xecT\xac\"6\xee\xab\xf7K#14\x90\xc0u\xe0tOF\xf3\x1c\xda\xae\x9a\x86x\x82\xa3V2..\xeb\'&y\x8e\xa6\xee\xfdTxF\x1cB\x1eM\xda\x18\xacu\xf6C\xd2\"\xb3l\xfb\xb2\x1fK\x14\xda\xab2:\xb4\xb0-\xa8\xf7P\x920\x9e\xc8\x11\xd3t\xd7\xe2t\xc2\xe2\xeeH{\x8b\xe5\x8d1\x13#\xc08*[\xc6\xa1}\xf8*\xbe\xb2e5\x82\xf8\xfd\xea\x15bl\x96\xd7\xfcI\xbbtQ\x03+\xcb6\x9e\xfc\xd4\xbew\x87\xc7\x9ci5\xfc\xdepu\xe6\xf1\xf4bs\xbb\xd2\x81\x94f\x90\x80\b\xf24d\xc7\x96\xf6\x8d\xb5;\xdb\x8b\x1bt\xec\xe1\xc9F8\xbca\x10s\xb0\xf6t\xec\x83\xccpu8\x1f>`', 0x5e, 0x39)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10017, 0x407, 0x0, 0x5f, 0x20000000000802, 0x3}, 0x6f0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0)
ioctl$auto_SG_SCSI_RESET(r2, 0x2284, 0x0)
epoll_create$auto(0x4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(r3, 0x6, 0xffffffffffffffff)
ioctl$auto(0x20000000000003, 0x8946, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r4 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0)

5.542317791s ago: executing program 5 (id=2268):
mmap$auto(0x800, 0x20009, 0x9, 0xeb1, 0x401, 0x4) (async)
mmap$auto(0x800, 0x20009, 0x9, 0xeb1, 0x401, 0x4)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
io_uring_setup$auto(0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc)

5.373746191s ago: executing program 5 (id=2270):
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = memfd_create$auto(0x0, 0x9)
r1 = socket(0x10, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x80080, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$3\t\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251100000010001e800c002280080046800400f780"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0x0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$auto(0x3, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a)
mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(0x3, 0x0, 0x18)
write$auto(0x3, 0x0, 0xfdef)
io_uring_setup$auto(0x6, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/trace_options\x00', 0xc200, 0x0)
write$auto_def_blk_fops_fs(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r4, 0x114, 0x2718, 0xfffffffffffffffc, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x3, 0x8, 0x1000e2, 0x1000eb1, 0x405, 0x172)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r5, 0x8000)

4.973049178s ago: executing program 4 (id=2271):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = gettid()
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0)
write$auto_tomoyo_self_operations_securityfs_if(r1, &(0x7f0000000080)="60da23", 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
tkill$auto(r0, 0x7)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14)

4.669329532s ago: executing program 0 (id=2273):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x80000, 0xfffffe8d) (async)
socket(0xa, 0x80000, 0xfffffe8d)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote_size\x00', 0x142, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/156, 0x9c)
mmap$auto(0x0, 0xc, 0x4, 0xd037, 0x10007, 0x2ffffffffffd)
setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14)

4.50082676s ago: executing program 0 (id=2274):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/mcfilter\x00', 0x101000, 0x0)
pread64$auto(r1, 0x0, 0x8, 0xffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioperm$auto(0x400, 0x7f, 0xd)
semctl$auto(0x0, 0xe3, 0x0, 0x5)
lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a)

4.248892886s ago: executing program 4 (id=2275):
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x0)
unshare$auto(0x40000080)
connect$auto(0x3, 0x0, 0x54)
socket(0x2d, 0x2, 0x0)
r0 = pidfd_open$auto(0x1, 0x0)
ioctl$auto_FS_IOC_SETFSLABEL3(r0, 0x41009432, &(0x7f0000000040)="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")
setns(r0, 0x4000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x89e2, 0x91)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
io_uring_setup$auto(0x6, 0x0)
sysfs$auto(0x2, 0x10000000000048, 0x0)
r1 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x4188aec6, r1)
close_range$auto(0x2, 0x8000, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0)
write$auto(r3, 0x0, 0x0)
syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x80800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)

3.499924377s ago: executing program 3 (id=2276):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2)
sendmsg$auto_NFC_CMD_GET_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="100000010000000080d3000000000000000000000000ac17442ddbc3b1df36a0ed9d5a592b42e76d4f27f79b46763c9450618a63a053657ebbea653800ec60261a8f0e522dae397c8dac81104892875894abb3536d117c502b7a2c7ece38c37b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r4 = socket(0x28, 0x1, 0x10000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13)
bind$auto(0x3, 0x0, 0x6a)
madvise$auto(0x0, 0x200007, 0x19)
ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000140)={0x2, @inferred=r4, @raw, 0x81, 0x100000000, '\x00', {0x4, 0xf03, 0x8a7, <r5=>0xffffffffffffffff, 0xee01, 0x6, 0x681, 0x2, {0x0, 0x3}, {0x401, 0x8}, {0x7, 0x7}, 0x3, 0x1e7, 0x800000e, 0x2000f, 0x2, 0xf133, 0x0, 0xd52, 0x3, 0x0, '\x00', 0x8000004, 0x8, 0xe82d}})
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x74e, &(0x7f0000000200)={@siginfo_0_0={0x80000000, 0xd, 0x7d67, @_rt={0x0, r5, @sival_int=0x3}}}, 0x401)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000001c00)="fe6e7669e5")
pidfd_open$auto(0x1, 0x0)
socket(0x18, 0x2, 0xfffffff8)
umount2$auto(&(0x7f0000000000)='.\x00', 0x20010)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x6, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff)

3.314123391s ago: executing program 0 (id=2277):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
capget$auto(&(0x7f0000000040)={0x5, <r0=>0x0}, &(0x7f0000000080)={0x2, 0x5, 0xb6})
prctl$auto(0xd5, 0x8, r0, 0xa5d, 0x0) (async)
prctl$auto(0xd5, 0x8, r0, 0xa5d, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x408c1)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r2 = socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x2000d, 0x7fffffffffffffff, 0x57, r2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800)
r3 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x488742, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, r3, 0x801, 0x10008, 0x4f0d, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x7}, 0x6f3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2000d, 0xfffffffffffffff8, 0xeb1, 0x404, 0x10008000)
timerfd_create$auto(0x6, 0x81)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0) (async)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
open(0x0, 0x121342, 0x8) (async)
open(0x0, 0x121342, 0x8)
mprotect$auto(0x0, 0x8000000000000001, 0x1) (async)
mprotect$auto(0x0, 0x8000000000000001, 0x1)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) (async)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
socket$nl_generic(0x10, 0x3, 0x10)

3.309075928s ago: executing program 5 (id=2278):
open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20)
fcntl$auto(0x0, 0x407, 0x1)
chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x28800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statx$auto(0xffffffffffffff9c, 0x0, 0x2, 0x4, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x401, 0x1, 0x5, 0x200, {0x80000001, 0x8}, {0x5, 0x8}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x938, 0x8, 0x5, 0xb6a, 0xde57, [0x6, 0x6, 0x80000001, 0x5, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffc, 0x800, 0x3]})
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f00000005c0)="671f264add69b6440843b66668ef000000df2669e6f9cd237232b20ed763ac8caf4b9b4cd10196bc7b4c3cf9ee0cb9f61968f4782754e1706b1bb14a4ace080c4c96c604a2812c41ceb0540ad94892a9e1fc919c762d1b29000c4b", 0x5b)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(0x3, 0xc1007c01, 0x38)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFSD_A_POOL_MODE_MODE={0x6, 0x1, ']\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)
fanotify_init$auto(0x8, 0x2000000000002)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
r3 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
getsockopt$auto(r3, 0x84, 0x16, 0x0, 0x0)
fanotify_mark$auto(0x0, 0x451, 0xa, r2, 0x0)
execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

2.967540901s ago: executing program 5 (id=2279):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x2)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2})
sysfs$auto(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a", 0x392)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000840)="1291")
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0)
socket(0x2, 0x1, 0x106)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0)

2.668517119s ago: executing program 0 (id=2280):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x800, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x20081, 0x0)

2.055989285s ago: executing program 3 (id=2281):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x65, 0x2)
io_uring_setup$auto(0x48, 0x0)
io_uring_register$auto(0x100000001, 0x4, 0xffffffffffffffff, 0x1)
write$auto(0x3, 0x0, 0x7fffffff)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0xa9, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8)
socket(0x3, 0x80000, 0x6)
prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$auto_OSS_GETVERSION2(r2, 0x80044d76, &(0x7f0000000080))
lseek$auto(0x3, 0x0, 0x1)
pread64$auto(r0, 0x0, 0x7, 0x2000008001)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0)

2.055067265s ago: executing program 4 (id=2289):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22040, 0x75)
socket(0x840000000002, 0x3, 0xff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=<r1=>0x0)
connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, r1, 0x0, 0x7}, 0x55)
mremap$auto(0x4000, 0xfee4, 0x3fd6, 0x3, 0xfffff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket(0xa, 0x2, 0x0)
getsockopt$auto(r4, 0x1, 0x49, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mremap$auto(0x10, 0x1ed, 0xfffffffffffffffe, 0x4, 0x1000)

1.565226367s ago: executing program 4 (id=2282):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x800, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0xff)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
open(0x0, 0x261c2, 0x84)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

695.870665ms ago: executing program 0 (id=2283):
read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0)
write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
r1 = socket(0x2, 0x3, 0x6)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000000440)="671f264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c", 0x24)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
r4 = waitid$auto(0x42, 0xffffffffffffffff, 0x0, 0x2, 0x0)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000380)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r4}}}, 0x0)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000004380)=ANY=[@ANYBLOB='x2\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fedbdf250700000005000f00010050d400002e3230803010568008001e971b9a3b9367a10f38721e19423dc21d3dc221c5f03367d2b896002ef67ce50c431553dacdd770dc025c72eb63e64dafcd8ab19e604090ee331ce7fd4645734e48de7b3fef", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0f00ae00c3b4737644a99193954cd2000400040004005980040035004a85c92dd889a6e8b27201920f417bc7d4a876bc39a315afb171786c1beafbc5d4be9f418d0420999958611c6c9957e1882b2aabd022f548d46473ec3eef0b5065453431111068aab0ed2677e7537fb1ff21cc1a42aa1b6260a52f9ca9550a8cf20365bee5e228cd701d04c7a0c5180bd3f07c07aafef8335607566e8cfe00d621b145e839e12b691998e169c5eb48436803d86f7dcbc1ce81dd6b592b020626acf8fa8073f3bbf47ea4d9729734de217d9bd67c9aee5a1704afecaf470e6a5f33169c7690bc6538d4245cf6da78ceeb30ae98ca0be0dc0e368a12ce82455310338080c989c3e1dd45da1ed3a3579ac664fb07641cb96338a25018fbf06f8069d1e993232ca1235140e5ae49dcbbc4e25f6b504cfdce2707327186168b973656a3889b4048f9ffad3bedff6c1049bc3c3fb3597450dcf8d718d4a1f48184e360bef2a565c7e9f75dec95d39f61cf39c0caffef1415cf118328f71f1335ccc11e32278ebcf1a60eb184bb06954244009b19da558643a50e66ba7b42f2cca23f5e66ff8559abc840c51c3a0af13a320be158c680a47411a1fd81592efbfb9ddeaf531f0e36d413f1774a3b039afc6cb30b2951ce471d0b284752ff944a7fbff1b78db1d8ee91e2c6a13e42976144e6cecbe33a455d444ed3d682ac2fb6e9eca2fd237cf8b535bc615a68fb31fd93d25fc2218ae2e3a15ffb150fa083d4c37b2863eb44f4cf2ce3730d7e61e845e70dd585d54aaa5726378c87a14ba963bd52ff6d74f3009d1e491b415e73dc1867b1bd54771baca35f9fe2383e18de963c8ff1f67d1088975f8dd5c07225de241fc44e256c79ba9abaa5347d27196d5d454982acc15d0e3090dca4b9fae431c329e57d33969f4278b8b67acd51c6490ab6dbde59fd3547efde252e3a91654c65e71577a3d2523e7564fc2e85fa4e4b1a59e5e2f808d0aed3242610c2c99c9bd8165efd84dfefc863406105f4dd0821e5c3cadcd00ff1f1935f29de18c459aa9343b216f90dfb3ed7ee680477e6267b798daeff66ac4cff31a588b7d6aff12afa77b76e80687da7fabc5c685a54e96f25b98851049b942117c2c3dd97ec8b3b722edb7fd84f9b8c023a8c178aa9f5f2a5aa20e2f9e2cb25232612683b206b568940cb898a80427646910f8ef15ee830b9f435b099b0f8e53567407c27125deb82edd75656f28475a451c3c577118b21ce949f2d1f0f009de63bdef67462d6634a190a2be11812a90bfeb8e4d62a81fabc5b5f3b21bb32df8b71b864b6ba50325a5472181d0d56a997ccd6fd470f325acde9ca75359678b7055f5b591a1bcdedacea93a6adf7f7e5c3a335aa38bae8afd1a5d87c30ab6dacba0a4e1289b0e49e632ac365f5ab657835386e8f9894064c773682117cf99354eaa02f2e21b1f117b6ab9890582d2cf174434685382fdeec26985667c19f77b37c0eadd4b29557836b916d937a556adb3f22ea0a2f9780d6ba3220920c8a28891ee5002d55cd4157368b79ebc53328286971fae8ebe84f223f76e3c9ac0679f8ab02f369f7ec90e6c38b54f7d12493db879563568cc89631affd163b429be654a288c4d044d9fad009dc6925036ab958c31ec86597bf0c39209d1878a0d418afc8551afa42490799626d18b4b33d68d53f2b54f0a2ce99e66fe94569952d95ee0924a197706ced567a9137f0e2af501272aa93d88034892b33f66c40670a062775a047efa41decacd8b6220c12cfeee56470841b6450f9ee543e081d622bf255565b66a920fee06c338cad26e3cf3708b9e6ceb5286ffd0c719b8e919829dc00159a53094ed4cbb6038496db46b068daf4de13a2b1bbb73d47366e3ea26b47fd3b680103ce8941141a6d4819a008c8ff7786ea78147b48bae4e58be098113359cef128d098dd124a9af7e463322aae74b4086a4dbee15bb59f4bdd58936646aa9e4a72fa42180308608b7dee8add27e98e2e9f4f7a39cc9f7b29be6307ce8fdc7fd68703850316967aec26a3f8e24a5e41d7e40b582a7ac08e971eb264ab239e3d80a87b02ffb91bd346409c5b19a33a3fcce919a9fb8dbceb1abf57ffe24c364e50a1073b5698d4443d224e5879b312262e841e192517a90737f244c845af7a571cd53ad6b4825343c757262bb9d489212c58adb95259ad55fe01e3bc5b863c671540e9d1f55daaf705413b88900e9fa44b448cc437839d5bdc00c686b45c22e543f19d5295591a680b9b63e908e37c36a9f89997d5d5b94a9c7ec513335db39fa7b40b290593fe667d75e30ec403a79c147661ff76ca39e3f15fa503a9dd2b8261dc1ce21665c7460dde57adfd4185cd8855a292c3eebe3a801d8a78b36645ce8f5bf41cbc90022bf41484962ff7f84e79bf72ecd526550c5eb5d3aa72daf6603441dcf8e8103d4ce28ef0d7f786aa33a0d6344399316919ea818237426e45c2039c2df3a3cc9798553fc2c1b93b105416b639c64890b8715db5c22270287c684028c76821bf7a171feba582301beea5ab0c77096f9bf23d8930ec54c1a7ddaec3c3c91aa6a9d33e8defe4920d6ef9e7faedc01d5a2190a06345a9468fb88440eb3ae9a9b0e35b537ee91395759ac193695f55ed4c84ae597028fe8edc5e3ad89c53189877410945f8c362944a3b16996e5cdd7b2712049af40f0e0deac51842f01ec535cb2dcdbd79cca6566b84d20995038ed89954acfdb44b81c3f5fa7ceece8b242bd4d8082c839abe9341b2deccb9077070647675e7b6d5ac96c989c6ea7749574fff1fc04df1c1e8fe59e68fffca8100bd549db089293b21561da125f4a69b194c47a291f496d80c605e2bfc7362531767bf4348c057b847915096bae6dc1a3b3ddcde0ba59801aea56dcf6a534c4c80f1e2e24d1135d24f51a5ce586e4e270f77c28a6f387e258c06f7fbe6a997dc6dc5a86394edfde5eec6df43bc4989012917b52f65cec2b19e23faa1deb2c40a540fc159eb9346c3b25844eff1dd68a4350a709fc775b09654b863667f66314a0c6bf125970747db80be1b87a32bda572ed2d8d10909dc30989e1b8a6a64877de2fcb96889aabe3f535ab28d6915fa32562331b4bcb79918358aa7713026e66823fa018d22a5aa49adf1f0f4528681c430760463ddf35d9ae371997126db60d949ce193802b1ac96c591db8468f0dce76416231be4bd6881e81f97a36fad4a482ddd3b06dd12122051bfc7a4fa8bcf5770d3f8c16e3cd5db4e778948e533a64e06106332ea695b6cab2080642f9e9529446902202e30a025a946d84f02f845826aa8a92ca459ba015cce743cbeea46c5cf10913ffbea2dc0a6a801ef98d3ffc2c871a86ea1c38485d40f4c76091fda8b7276ce3b700a7eeb46e37333959deae0ada4a562dd50a59cea155f4014422afa65b315c56425f72c6e8d2c146f9d199b7589f468726d4f85762756a0ca559f702693e014bc0894d1d5c8f47421d3745020a2a8df0d2ce098a711e8e14acd7aff009b3c0ad31b690ddef82d078ec1e35e3f588808fdd1026ba7ce37b2b317f9260e14fbe7f57c7e52ec3015ae8efef46abffd6acf199809ea44dd1914913d396e7401b5443261acd0b49372a571b3933fc7d54a6da92512827218014f335d7dfd9e05302380db2b436a04070f63fa1f96e69806b3a9586bc27bc6e8fd44a8945ecfb24b3a203a32c661bbfa71b0203e5e2d8e54d90053a27451f63fbcd674ee3bffa550b31439c4322a42deb6ca566b5b7d54581c4da5ddce3cebb2cba1e3c4f957702f159a5b7631a2e11146eaac1f97bf0d16aab2610ae5f34dd1e95ef89f43b32bb85937351feea971c835528e60f480e8eccba702cc462a19b8e6518978a95a90426f55bec334500a7768487b18866af2c0d4121af6e9cbf97fd03369181131172a9212da029a09c358a1163b94dc22c77c8592b4bbd1ad9fbe7fc389314b8ef1b22687b2b13e75ec4f4a3b78a55c68758fd8e9ddaa5ac1a488c42bf278c4b6cb38276107bff6f40b89272a9436c6ccb73e33d52d72f0d546896f0040e183ac09b4eb7112d954e1136a57aa8ef1c13b0ab9284d325b8486285ff5fd7f77ae312550c316d52ff0ebda3f24ef7dc3f44c63d83a1d6fa67053aaa60e545f7fb0c47f74874ceecb8615143bb4c4e7652fa2019cd36f555cd200171ed0303172eea8514c1294df22b18ef53d69bd5eba68b55b9a591dbbbaf3fef5e7d2542d1ad26a4f245dd626ee12299d4d4d843b69264e00f220c0fa5aad4ab04b8cab72757d3980b724f909466576f80eee6e4d048e9a25809cff625f79c15f6323f7b5abbb6f02dc398d2685919aa214df5237d951ee36d0bf53674a584f5dcd9918b577a5f7a58062f352eb8852efac17850e50b81c3ed436f9637267c42cbd3d3f23ba44dbc89f34af53805f21ebf4186ef5aaa08117d9cd847afc1e32fb28fb95e3fd65c3f04eec89fa020f18f8ced1a990bf3f837c93fae82958a109ec2972816c7a61fa7c87591648b311755aba0a0873f66649cb331edfb7b0464dfe127f5d584534e2ed3cbd0ea21bbe8dfb88cef06f8f9f7dfc2b4c65365473a7cdb114deab9aba0e050faf93e1ede536dcacb129c0889726c36b7203b3f52bfedb69ee304835c1967d158d7c362cfd8f5cf63638ca0a358a502a6a8604ef39b247e26de60e91b7ba527fb7d11e5009ea8a95b5b257aa2ca35cce843b596dafaa53886568cbe133e131a6267e169c9b63c7c51515303ce297b779937dea3cb682d2c0e0809e2082cf46d1e710fbfe7b2a1dced478d400dd0c574d32e86b252dffdf6ab8a19f403891333e608035b8710a824663733a4066db52c938ca3354c4b4a0bdfac32154760bbba3f401a81f4dac92145306b833471939b05c8689398957fecaba4ae9f7a270fdb6a430b80c915ab755bc0e4e19813f9b1589ef6a27a2e6edf0854e681dc1c5cebf422294273f4de7f2a091a2a0e61de6402c1f39514190ddeb0011a8714c179b4ab760ce390a4039902dd59677d7c2335085e2d8092d14ad2c2767abb9b286d762be49a8b67e2ef0b19fcca177461255ac9c728c124efed25de9e3cc29147bc8b9a4aa296c964df7a00ca1d2f12f33d4516720d9c4e64bae5370888aae76624fdc729cc44fb2af91c12f2d842dbaa750e3d0497074bfdb8d40c58a248f6fe0e991da586efcc0cf13bfbdef7af02e6f62f391c8ca8e07cfd71c5e19ebe0370b5bb4bc8bb5bca7b461b7430914d970b4dff29c58730fe37969d05477c1fd0e0fb96d5fb007e85a744c1638aff58a78ba49cb3a1e2cd63e8d82b3eba00cb4dd728e879f83f1793f9ab5be99150ea8a03d58c8a76b7b35302c775a740d0c039b63a4405675d24ac69b4ae8f374070fba184ab92a6f1015870852b9ed851bcb5ac4fef05f27fd9797289c7c1d96f74b36aeb224c8f59e1b5d4ce004904a665c854c22043f7e6071492bab8386aa6b6350d8e63abc579f556a72b6e6d155d69387ac4961cd9e4dd6534341e58c3b92bf38c68cb962778cfd02fa91ffa83dbf3ce80d2608b4ef9a795f4a7043f21d345033cbae6dcc34c61ea71358792788d0aed25f168871a76465f1ce95ed318f56cd78ef84ef31a6c76c3f79744138e22996a9b685c7029856ef3a00473e4828789e0a665ceb56cad634e83adf04b7d7f02e1cabf8aa4b6fd69ee1c0d3e52726e1728f303bc651d3d7b62edf58af82bb6984b35ce14dca508ac8e2c341cb612c40531dd41301c6e0ae5ca2c5650532dd6caa7fb8ceeee9e27ba26f3e5e0fc83c9f9d0af5da87e0c94e9f7e851822ca86b3b910046ef4475d1dde69453e819532ea4d7a6c8c4e2479cfa1022616ab952f1bb87bec229e9b8b91aa95a403e4bc68cdad56bbfdcf43a6a77aeb016f694d37f4444610294b030a2d0a2cf2ab30cb4ab5064f3eb9c37b4102e97831a85a26be4749ccfb855218f6a15d6b9fb4651afa79ffe1a6b17da94a6c4ab1a0220675bb3dcc2fc7cbf78bf5f67a1bd03ba36fbc10e43efa9a5610730d16cbc8400dc86db7e77ef3f73744c4c79604fcf99df432c81e9e7f9f897216fede6db8dc32ff1206187debe4f852078f7f6a8f979bb89695da39934e7ea53e606e414c94954362d64173b2cec808d0efdc9db42867e464c983080d16b9ba2ff1f249afd4f07d10997d790bd2438e3a3344b237d82e54f669cd1660c2924d0ae1a0b38ea23685b01face3c3f6c3963d4c0e0a209d3e00aba018b2e75ef06ad833277254ac5cf6413d3fa2877d8dff44822bf3f834f240a1268b560df63c7b32a63a527143f941dcb34b1423b52e0592229821b23642aab84b0bcf228586baf18d01ac2b077e1cf721c08ef285ae41077b7693bc802e6f18f3f875adcfe3e12ef9f8f164034f46abec6c603c0c332afcbeeab32c60c36c0ae26ea95d752125c4e09b7eb4081031d67cefad02a60dc156e07f0802da169e1a73cef9ded1cf7ee12d3e91be5a5116fb2d9a6e898addbdbbc034b5bec2983e8802b142aff39475a45684905d73cf78e3b49a7a02d7196f90467fad4b5fcf4ce388716d93e2c66da15ce1b0d8b69766eb8a75114bac01e0cff5535ac42073c47252665ca25141e78c48be8e9eb4902f894d105711f6262c09753e1c4cdc8c2645e1bbc4bbaa4813b3fe933061ed7b4f5d7f90d1958e8c6e667f20a6dfc06772117eb5712bcf4a5e214a9d844451d1ce3b62e1b0d20642ee879ee4bda9fa4b25c4710cc1fd5bd2e6364cc187bd0783399d2320ea21dd9b2d96344837ab287e904894649e089733f271458ae6397f79ba0d674e0d5ec2901b9fc4c2412f32b15b9d212d8fcf081bc9ff230f46d4f9660c95948e9f3482418c8ec56b392b156bc42412f962af96524a75a33f27acf6065c051e07ad3c4de7c63ec3f5032fe6e6e576c122535734d72c76a9c46b9243b2d6dc62f201052f9b5d027b9574ff565cd5c659ccc1a6e1ef230a1e582a9c37d3418c7a2355384006694f71ac8712a7c1a6e9447d01495aa6fa1d8786d79ac6e75e69d31bef086de1214107f4fdfd774e3ee2ab8a7171481c2ea4eb303f53c3845e36a8bb027f36f0e89df71a632a915f7d6e5415c90ec3701b21ae11386906f18c620314943f8b5b1769613fbabbaf482560287a2de15d59cdd4d187b97aa4695a4493a98853379cc51409673d1d7b29310619377193e47d81a9a170ed49ae4ea97c5daf1f147e49224476b7cbc702697e008d0a3b6f18646f8587b7d03c7a5b16b09173366fe2c04f0960576b887062103f73c864225d72aca7d942a90b4018bd61666f24f965f62d0cf5b2c645a8e2cc49ab5bd1d3d4ad7c8a410c54cf506d580361c8554b839eabe43ed317ec34755b443ebdd349ccb6abc0d4010afbe120a55b84bf7fd963ca37419d34d1376913cae7db41afd1cfda827d23b8ccb494de3ac857bdd51d7228ec23f846f460c687f6b19c045d53c11d7c305b86b918bbc1e9cb7eab26c034f07a9060cb5e15f62c376d1ec7cf3e889e0e15fd91a1a837fea6a4f0fa0fbc6dcbbf4df477677ae1167bd8f904d5579e95bd0fb28eab8eef496494e7c90a78d5d204208d5e1ae895d4121a881fad7be7647f6f06fd74d34b3c06a221782b190a45faa4cdbe62f8bb0aa4ab152f7bcda2d53294934690eb012a6f788e812627b2791271691b72dbbd9bb6de8ef53e2c152ef5501b3c86c0acb57861d84a905414613c42f57b376a3a14916afdc478eb9ece134e2365800df3907b7a4bebf9203193f46eb5d730f1e2c697677dd816b3b08f41e00608c615e93ff02dd9dc46de6d2cddfd1398b723106aa493951863b70d96330a7b22e22c34071470d4f23d9e5a2a6deedde39861d961aa2d4880f581662f0d0116376624fc55950a890dd03c20a9e0160afa8e19f775e0522e616b58d89b6fab7d34cb2afe404c2394fb840b478632b52a16b93ded6cb8b9a9b0d8cde9f0f4b331c6c820d92137152f1d5f38d6fecde1aec1b8241b709c2e1c4f598873d819cb2c87390661154e37559d82b36a67ea3cfcd0640c14333189afff140ba43422b3e2566521296717148eae0abc7638736b07e70489292ab5056b14baa8b884e6c3f9c5b7b1c651c522dd33335bacedd773a58fedf06f03d0ee43b00e5793de3acdb05ee370099f28fdd6a2d27caadd9b3792cd4e6ff8b5899b89abb01b8be9b61f0a68670890696d065cea64e755b87a71de920f16a28f4c522ea83b0a5405eb41efe7df79817ebd2fecc759584c9d71aa35e86fcf38c73c704c39df9f17a22704ced7ae23f7313e380f047fde81c5bf68f1729591b2f4f1e927f24f4529c4b68e3be42e74fed6383764d0700dbe6381547f8fdbbe4c108f55ddfe5be7d7e514cb724f69f023c2148c292c0bc75432250e4393011b1ddcee483c2af5204928779ccaa85f535579c71852b977eadda954b012fc3efaf53b81a0333b29f121f6a779697bbb4fc52fccd77e962ec4eeb228b3825cbd72bb6afcdb515900d530de826aba367aef1bdf7b5e6f6ad7c1d0a54fa3e9233aa10cbf7db6f314cfe7aa9f2db773198dfa24701762e619ffc47cc72cab9a41d3a11d21d36acad5d602b569079ed65ea003a71d0a983e28c86c9d4974a11920d8c14018e53a08037b09e78d7e77b3fcfe580f28f4164d93174ccbf4a03b9c86fabe8d9cc5d35173bb8d75b4cf3b8bd49ec999c665c6db6590a97096b29371d44507d6a90380b75951d73dcc65988ce5b4d713e11b1963ad3a7b90b8fb1ec501686066041443ee9485e463c4dea2420ebeff5b6a008243c1363ca67bdda1b384e54cc00e3271c92b8760dbd25d8576da1c181c2c51b0bd937400f0efd8553b21a0d7c0615ee926d71fa19d087e543bbb621f880aa15178d40d6b3c1a1a7e3b1f428f224c682b5d84757bf5f35931fa4e44630824d40c64fdd1451f1e0b359e78a2b725da768276a0c2b748628b267051f299f3e343b19efd3082ef8dddad2ec44e0f06770c4e484c7f5b4ad81724fffd91e2606815bbdcda7f25e782c41044016bf70e99c37dc1fdaea2368113aaa3038e8a28fba221beb55b1146f026aece9bea4159e519936e176fe5ae5bd7a27b504dc68693d9f04811b19e74ae769b81fbb5ec9f4f526752434d511eb8bccaf573256092a53c24476e7307a9222cd015d8a070f44c53287492065f015d0a1986e2f8e423f8469741393845c45c26dc1551996928ab822eaf197b4ce504ba4ba5a412c399d4ee8815319e73d4c217c2e83dd780fc7752de7c6ef45693b3b7e5269a739808ea64bbe4d56e532549a36c2d3948399f8ac407488eeff23cc69874b15ac767e7f2b1f519a565b16a71160d822ec4ae04efbe950b9fd2616171f798e3a8b46aef82d57cb9200d50019a7c00473a9f9da2de1e08d0abc129c5153a382ad2fb8f6825fbaa97c1c22b6a632dadec77a5acacfb666cf794b8107b4d8efd0c6e9e915f637d58bb36840c2e22fcf1c253128edf6ccde1f3c31b992bf3252a978053c41493659ffa69901946bef35851f032b2fc57788d9803fbe8bc795eb7a4b4a1393759122f8d053c77f5b3f17bedcbe9ce8d2779fdf0931175112af5b3c2c929ad4b43c5e5dcea940c04e1237f4c0e0579c7ad18dc1d9b150137b3655ad0a63c32eafcf9969fb2aa9bd271556b690ce734a63b5b2ee66b36492582cf19474a526565f03b829bbc8ee0e1141cd396513187c946dbd7cc394602bae9c652c9e54e4db8a6413769180a0e7c7cf033b82637d6b657ad33002e9c02435bcb764f8c9ea7c176ea8306a1f1e148d14ad9b0cc8a2169dea8724b59790a8ef5899effde10988ff0ad04692716a89d59fbbcc15b7ea4086bb2c6a43b92cfe44647fcee533672f6f427aabb72e9021cf0036a2c0277625dd810279da90cc69a5a69965ce07b5aae9e793743f31541d9e2272c528ef5fa1f51ec8046fceaebd3cd556ccc3b9270616617c10fa231852388c577ae77b5c8fd9dab1829293bb3c4c1ab19f2716e981e03d2604b90a2be2463837a327017317f3d246e29a611acf8dc8adb4d62f00a2decd29d681eb1fba64c5ee46be0b37a11e81eeb9b160873e59b5fc178a914ca5cb7cef1086bac1bc5d1abae8fa0654ac40b84bea55e6e9dc2336116ce2bbe40c01b1392096e82c14ce6c7f9b097c53d32867e3311f6942ea8e046fb33783472131bd4c217b00be47ca5030bccc48d14884d86b8a33c88771995f1df6575c56e27dee76be6b28b946960468f378df1d85115fdf8567d9caf1756292e3c2892df885982a8e95fd4772ac808550d018c2756140b70cbfb04908f67df339bf020545d9da9a8b7ca09190ecfbe18c0dec971dc2f470a852a3c5d7849b25cf7023cc95b633da582b9428272b71afc0925246aef97916a6446795e37831b272fd3aa4f8a926db173651d075fea5878a737307e32a6eac3307994c3259cff21ae948efebed6cefad530220d54081bacd07e22db787594eb8c1e6de4ce2a2c7c55ccd34f47bda1237050fa410f189ecb23b65f657b1c49f9fe40b7a8431b000f4302fc2b2d6e0819ef9fd67543c4b3dc4d6400fdb8eef2a0fc5eb3c5cd42f7ccf11b1146baca84efd0ad4a05f30ac9a9059d4c7cc5d512e79a82b4cef035d7951bd535b34e3c990499485ee480612fdafac649fcbe30cbcd01626a626cb36608341e9a1b1803197597e1a3a1e98b24a18f1a9529bf10634ee44a9aee5f55ccac6cf651c06604da037d6e2c584e7cb3de5f6f649aa26c8ada4e8f80dddcdb4e76dc857fd20968ced45d798852415eb06eb624cdc9a07713b3ae5e50f0d4b55625b339a792e54967fa6662ffb84bea13ae98635c8b9b69eef72410e3e6ce00210e1e3e1640df4ad5e07c2edc914852a55eec6dfd528d6b2bcbc982fcf31d99f4eb2d13c18c524eb9b118af3b5ef4a2006beff67d0d134c59a32ff812bb11a2862b86612f5db587e0fb0ca979789679f1876d5665d5513f882a4e3f4b0d38552198d5c3dd0d97d9671b561c4300b5b82e882de1126839cc6faafa2e7607c4c65d62532e385c1792f3e27e0c46e6086fbf33ccc13322699ebcbcb12059bd37db6a89175588bd07a77b49006fdf034ea6e5033a5dcea2d663fc3080191e43ae78abef06f24eedf32414733a2306aaa6e4315c7869add5e714d899cf610917ba20924b5ed6792b664a20ca7eb7775fc093ce16047dab84c22d54ed24a2c07801fe470bb0d52db8efd90f71b06793559de9fc2b3342a805d870b43926f68d14156379d43297bc87e4fa1d9f31e7895cdd76129b235e91f3333c12ea2aad7261faf3c3aeff7ef53ce4e1472ed4520667c42d4f56aaa83da7d34a736c19798d48a2c3f5475340a6ac93f363f97a48805a25d721444e3529592ae1d2655c0dc4861cb5c7728b2a0c40d642e55f4ad0a3b9cb78a3aac7542cf14b0a33ef4031d21429ff3cb04ede07eeecee8e8d6afc254dc70185702763d14e921a8f16ccb43ecf38263c01d96f111ddf6f689679dffd9ea5de53a5b650ef0d1ebef216d6a486725d0cec657a1284c5d9008a6f7b7303f3a3dfc12266f4ff393cca98041518a5d7b48c403a0d553e11889c30d15b50fa0ff5b4dda77a156fcf2479b45e0030456f31eb5fd9b1b215b26da64411b3ae48ce72c5d12ff8ff605cfff7aeccfd82d75e12339bc6d5caf1763d9b36784d2a65be4c0da15c125b0991a5d3d86c3fb738d567e53b6d95c0e91df1a82aef9bf50bd69a4821e2b451933318bfbe2d7b773b9ef419c34f570fc27ba8e392eb15976bb9281d20b6690938208c30e515575d8cb55c52a4290cf6b1e2782b053f98baa9698d1b87a907b4b4592d7518dcccb60a5ea2e8995a3405706927fa35e5330fb5f38767af69e2ebd74ae94e1a62c4efe6c2650240a6d4efac069f11a170231d8b8ee21d40b927ae35ed6495bd3b90d4303bce0d68d977eeb107e0b7139874f41cf47d9a907a98dbf8157584cdb1ea7a94a988a0a4e49ac80263f439edee8106dbeb546248d8425e88fcc7453fc603ef05103005722bc7a61fc22c8475e197f1e04a9f44804eb3a391885b1b0ea266bc931952314013f86ab44489d3d20cd6be64116eaf3dc5c18ea6e251e5280a203a141c537970d8782e365ef01405d3191406b5e6ade903f5b7bacebd9888f965aceccb1f355e451d01d45eba675ec450e3aca94ed24a9e842deb971eb926034b2c8362daeaad60474c916e93254d102f35c42de8905d5e9a4af96092f2f896d2a84eda3a94ef2cae8ccfad64"], 0x3278}, 0x1, 0x0, 0x0, 0x50}, 0x4008090)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x2a0040, 0x0)
socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
socket(0xa, 0x5, 0x0)

685.871424ms ago: executing program 3 (id=2284):
mmap$auto(0x0, 0x8, 0xdd, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000)
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_FS_IOC_FIEMAP(r2, 0xc020660b, 0x9)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = socket(0x10, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)={0x14, r4, 0xf1b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x8040)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
dup2$auto(0x5, 0x4)

26.058506ms ago: executing program 0 (id=2285):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) (async)
ioctl$auto(r0, 0x400454ca, 0x38)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) (async)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) (async)
io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, <r4=>0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) (async)
ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async)
shmctl$auto(0x6, 0x3, &(0x7f0000000280)={{0x1, <r5=>0x0, 0xee00, 0xb6, 0x0, 0x6, 0x10}, 0x0, 0x3, 0x1ff, 0x0, @raw=0x50000000, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)="2f9359eec73cf2f025a4543a8573", &(0x7f0000000240)="0ac0b8021d2842"})
sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000001200)={0x1390, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_OPTIONS={0x132d, 0x4, 0x0, 0x1, [@generic="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", @generic="d5267e68fe00284a22d10531d4166dc02d4db5f442e0b4c868d76fb8cdfb202ae057bcfddd53852b713a48717b51698eb0c7a30c64ab042f094c7c3315d011d82edd7ea2d66679f8a0ae9a24daff988f7f43197f29e97eb0459531dbc85ff38902653fd5def9b2cc1b", @nested={0xf6, 0xd, 0x0, 0x1, [@generic="d3bf23ebda383b12a195e5181a0d90952e435e81486ed2627457f0577ab671a1eadd07b145b454a5c84b9600de2ed703acf89ac76cac4f1b4b5349e2fc54295c75e6f6459342a71178edc702fc7de43fbf5a33649842e4366e44164cc945347789a91647c071bd96e51fda95c281a80a744c5de9d6340fe6bc0ed5f127c92f95c5fb10806a96155eccf1ea41c35b8a098a0a7554b131e9e7", @typed={0x8, 0x146, 0x0, 0x0, @uid}, @generic="747f5a6c2e999b6f90b9d3cd9194a6032c207b4f718de596927c19eebef317e8ea9e954feca9b696f32caba4eeeb6ce4cb69c27adf72f5ffd4", @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xc0, 0x0, 0x0, @uid=r5}, @generic="87", @nested={0x4, 0xe1}, @nested={0x4, 0x146}]}, @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}}, @typed={0x4, 0x13a}, @generic="2f85d7a3ad03ab8833280ec436657ca25c4d5a0f2980dad7047896cc2ac937650f182af7b57ec5596beb4e0cc34ddd3d1e6fe28db47d708fa2b22a435f7f5ab5b53e53ea903e7973a86836679ce12563cd829bcde3c3c4d6aae50940ed02be547385a6049299b5ae818b9af634170ca9e06d7f408be63cc53a3fc01914236a26353c116dd1a528946bab8500e3f97d325bf78b47ac0317a52dd29c664b145a11", @typed={0x7, 0xa, 0x0, 0x0, @str='&*\x00'}, @nested={0x108, 0xf1, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0xc3}, @typed={0x8, 0xa3, 0x0, 0x0, @fd=r0}, @generic="4021e9227187b5726bfc3be6538eb89a56ca0ad3e22bf534a22938bdee1006a4d1fdf5632c0ac44d0508b9343d7d186ee091d4b25d33aa0901ed162a82a978d51dcac7fbe67f7ac8531195cdac41175c76b273914032d69cb5ee5817b29ec94ebc4e19df205c86f7d4f3255ee2d6b9a25b1e231005248124268ff90d4d6b18eab98d7a5bc9d791ad2fd96fa320dd4821e4058eb582e34333c556ca930d46c511d921dfea0cdf07829c1045ea745c1ca61802e922fe69a8ad56dee794f2dccd8aa76c97e902a46dc4f16fe2813d942443be1f4cbd452dbaf6754a21a6e214c19f4dd9e5c4", @typed={0xe, 0x120, 0x0, 0x0, @str='/dev/sda1\x00'}]}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x1}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x576}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x1, 0x6, 0x73, 0x2, 0xfffffffffffffffc, 0x9, 0x5, 0xebf}}]}, 0x1390}, 0x1, 0x0, 0x0, 0x804}, 0x8005) (async)
mmap$auto(0x8000000000002001, 0x20009, 0x1, 0x15, r4, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r6, 0x5609, 0xffffffffffffffff) (async)
madvise$auto(0x0, 0x20499d, 0x9) (async)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) (async)
ioctl$auto_NS_GET_PID_FROM_PIDNS(r4, 0x8004b706, &(0x7f0000000180)=0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)

0s ago: executing program 5 (id=2286):
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = memfd_create$auto(0x0, 0x9)
r1 = socket(0x10, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x80080, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$3\t\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251100000010001e800c002280080046800400f780"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0x0, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$auto(0x3, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a)
mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
connect$auto(0x3, 0x0, 0x18)
write$auto(0x3, 0x0, 0xfdef)
io_uring_setup$auto(0x6, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/trace_options\x00', 0xc200, 0x0)
write$auto_def_blk_fops_fs(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r4, 0x114, 0x2718, 0xfffffffffffffffc, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x3, 0x8, 0x1000e2, 0x1000eb1, 0x405, 0x172)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r5, 0x8000)

kernel console output (not intermixed with test programs):

rding state
[  102.499145][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.506516][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.688689][ T5840] Bluetooth: hci0: command tx timeout
[  102.705016][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.745676][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.769496][ T5840] Bluetooth: hci3: command tx timeout
[  102.774938][ T5840] Bluetooth: hci1: command tx timeout
[  102.784382][ T5841] Bluetooth: hci2: command tx timeout
[  102.888032][ T5835] veth0_vlan: entered promiscuous mode
[  102.930326][ T5835] veth1_vlan: entered promiscuous mode
[  102.951758][ T5842] veth0_vlan: entered promiscuous mode
[  103.007362][ T5842] veth1_vlan: entered promiscuous mode
[  103.082520][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.098277][ T5835] veth0_macvtap: entered promiscuous mode
[  103.112554][ T5835] veth1_macvtap: entered promiscuous mode
[  103.166141][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.176785][ T5842] veth0_macvtap: entered promiscuous mode
[  103.207443][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.216075][ T5842] veth1_macvtap: entered promiscuous mode
[  103.242050][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.251273][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.260942][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.269814][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.283485][ T5838] veth0_vlan: entered promiscuous mode
[  103.310172][ T5838] veth1_vlan: entered promiscuous mode
[  103.321019][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.350962][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.365147][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.399463][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.413931][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.424200][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.433386][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.482341][ T5838] veth0_macvtap: entered promiscuous mode
[  103.493318][ T5838] veth1_macvtap: entered promiscuous mode
[  103.582454][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.594197][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.596021][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.663257][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.673290][ T5845] veth0_vlan: entered promiscuous mode
[  103.673764][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.688599][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.729777][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.732841][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.747390][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.747830][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.765428][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.774602][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.819761][ T5845] veth1_vlan: entered promiscuous mode
[  103.830224][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.841750][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.926669][ T5845] veth0_macvtap: entered promiscuous mode
[  103.936078][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  103.973190][ T5845] veth1_macvtap: entered promiscuous mode
[  104.050095][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.083973][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.121754][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.143646][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.201985][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.216778][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.253379][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.264180][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.323904][ T5087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.438417][ T5087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.778185][ T5840] Bluetooth: hci0: command tx timeout
[  104.848198][ T5840] Bluetooth: hci1: command tx timeout
[  104.853680][ T5840] Bluetooth: hci2: command tx timeout
[  104.859665][ T5841] Bluetooth: hci3: command tx timeout
[  105.069596][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.402956][ T5935] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[  105.434582][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.501703][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.774194][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.800577][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.257248][ T5951] netlink: 'syz.0.6': attribute type 4 has an invalid length.
[  106.270876][ T5951] netlink: 314 bytes leftover after parsing attributes in process `syz.0.6'.
[  106.846107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  106.856331][ T5837] Bluetooth: hci0: command tx timeout
[  106.928056][ T5837] Bluetooth: hci2: command tx timeout
[  106.928083][ T5840] Bluetooth: hci3: command tx timeout
[  106.933524][ T5837] Bluetooth: hci1: command tx timeout
[  107.019999][ T5960] process 'syz.1.7' launched './file0' with NULL argv: empty string added
[  107.118026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.126784][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.308475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.357879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  107.488112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  107.628123][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.636564][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.645257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.714802][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'.
[  108.081260][ T5979] bond0: (slave bond_slave_1): Releasing backup interface
[  108.211392][ T5979] Zero length message leads to an empty skb
[  108.320146][ T5985] HSR: entered promiscuous mode
[  108.937559][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  109.956489][ T6018] program syz.2.17 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.008394][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'.
[  110.022542][ T6018] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  112.468091][ T6048] capability: warning: `syz.2.23' uses 32-bit capabilities (legacy support in use)
[  112.504819][ T6048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'.
[  112.757235][ T6051] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  113.436349][ T6066] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  115.305102][ T6083] syz.0.30(6083): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  115.400775][ T6087] netlink: 25 bytes leftover after parsing attributes in process `syz.3.32'.
[  116.347128][ T6102] FAULT_INJECTION: forcing a failure.
[  116.347128][ T6102] name fail_futex, interval 1, probability 0, space 0, times 1
[  116.436919][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.1.35 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  116.436958][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.436977][ T6102] Call Trace:
[  116.436990][ T6102]  <TASK>
[  116.437003][ T6102]  dump_stack_lvl+0x16c/0x1f0
[  116.437056][ T6102]  should_fail_ex+0x512/0x640
[  116.437101][ T6102]  get_futex_key+0x293/0x1540
[  116.437137][ T6102]  ? __pfx_get_futex_key+0x10/0x10
[  116.437171][ T6102]  ? preempt_schedule_thunk+0x16/0x30
[  116.437212][ T6102]  futex_wake+0xea/0x530
[  116.437253][ T6102]  ? __pfx_futex_wake+0x10/0x10
[  116.437287][ T6102]  ? __lock_acquire+0xb8a/0x1c90
[  116.437339][ T6102]  do_futex+0x1e3/0x350
[  116.437373][ T6102]  ? __pfx_do_futex+0x10/0x10
[  116.437402][ T6102]  ? __might_fault+0xe3/0x190
[  116.437438][ T6102]  mm_release+0x24e/0x300
[  116.437461][ T6102]  do_exit+0x683/0x2bd0
[  116.437492][ T6102]  ? __pfx_do_exit+0x10/0x10
[  116.437518][ T6102]  ? do_raw_spin_lock+0x12c/0x2b0
[  116.437548][ T6102]  ? find_held_lock+0x2b/0x80
[  116.437581][ T6102]  do_group_exit+0xd3/0x2a0
[  116.437618][ T6102]  get_signal+0x2673/0x26d0
[  116.437666][ T6102]  ? __pfx_get_signal+0x10/0x10
[  116.437694][ T6102]  ? do_futex+0x122/0x350
[  116.437727][ T6102]  ? __pfx_do_futex+0x10/0x10
[  116.437761][ T6102]  arch_do_signal_or_restart+0x8f/0x790
[  116.437793][ T6102]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  116.437833][ T6102]  ? xfd_validate_state+0x61/0x180
[  116.437865][ T6102]  ? __pfx_ksys_write+0x10/0x10
[  116.437904][ T6102]  exit_to_user_mode_loop+0x84/0x110
[  116.437936][ T6102]  do_syscall_64+0x3f6/0x490
[  116.437956][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.437977][ T6102] RIP: 0033:0x7f793c18e929
[  116.437998][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.438017][ T6102] RSP: 002b:00007f793d0240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.438036][ T6102] RAX: fffffffffffffe00 RBX: 00007f793c3b5fa8 RCX: 00007f793c18e929
[  116.438049][ T6102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f793c3b5fa8
[  116.438061][ T6102] RBP: 00007f793c3b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  116.438074][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f793c3b5fac
[  116.438086][ T6102] R13: 0000000000000000 R14: 00007ffc14270610 R15: 00007ffc142706f8
[  116.438110][ T6102]  </TASK>
[  117.338975][ T6116] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET)
[  117.912726][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'.
[  117.980476][ T6125] HfR: entered promiscuous mode
[  118.083582][ T6135] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  118.122649][ T6128] openvswitch: HfR: Dropping previously announced user features
[  118.238172][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'.
[  118.271167][ T6125] device-mapper: ioctl: Unable to rename non-existent device,  to „
[  119.891425][ T6155] ubi0: attaching mtd0
[  119.929418][ T6155] ubi0: scanning is finished
[  119.969397][ T6161] IPVS: length: 131 != 8
[  119.974041][ T6155] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  120.374968][ T6155] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  122.100082][ T6194] ACPI: Can not change Invalid GPE/Fixed Event status
[  123.988555][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'.
[  124.208135][ T6234] kAFS: unparsable volume name
[  124.346166][ T6225] FAULT_INJECTION: forcing a failure.
[  124.346166][ T6225] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  124.387988][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.2.55 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  124.388030][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.388047][ T6225] Call Trace:
[  124.388056][ T6225]  <TASK>
[  124.388067][ T6225]  dump_stack_lvl+0x16c/0x1f0
[  124.388137][ T6225]  should_fail_ex+0x512/0x640
[  124.388187][ T6225]  should_fail_alloc_page+0xe7/0x130
[  124.388224][ T6225]  prepare_alloc_pages+0x3c2/0x610
[  124.388258][ T6225]  ? rcu_is_watching+0x12/0xc0
[  124.388292][ T6225]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  124.388338][ T6225]  ? lockdep_hardirqs_on+0x7c/0x110
[  124.388383][ T6225]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  124.388437][ T6225]  ? __lock_acquire+0x622/0x1c90
[  124.388483][ T6225]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  124.388526][ T6225]  ? relay_open+0x653/0xad0
[  124.388576][ T6225]  ? rcu_read_unlock+0x17/0x60
[  124.388612][ T6225]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  124.388659][ T6225]  ? policy_nodemask+0xea/0x4e0
[  124.388710][ T6225]  alloc_pages_mpol+0x1fb/0x550
[  124.388760][ T6225]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  124.388807][ T6225]  ? __kvmalloc_node_noprof.cold+0x60/0x65
[  124.388852][ T6225]  ? trace_kmalloc+0x2b/0xd0
[  124.388879][ T6225]  ? __kmalloc_noprof.cold+0x5c/0x61
[  124.388919][ T6225]  ? relay_open_buf.part.0+0x194/0xc80
[  124.388961][ T6225]  alloc_pages_noprof+0x131/0x390
[  124.389011][ T6225]  relay_open_buf.part.0+0x262/0xc80
[  124.389064][ T6225]  relay_open+0x653/0xad0
[  124.389101][ T6225]  ? debugfs_create_file_full+0x41/0x60
[  124.389144][ T6225]  do_blk_trace_setup+0x503/0xb50
[  124.389182][ T6225]  blk_trace_setup+0xed/0x1b0
[  124.389213][ T6225]  ? __pfx_blk_trace_setup+0x10/0x10
[  124.389251][ T6225]  ? __pfx_snprintf+0x10/0x10
[  124.389316][ T6225]  blk_trace_ioctl+0x146/0x280
[  124.389361][ T6225]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  124.389400][ T6225]  ? find_held_lock+0x2b/0x80
[  124.389425][ T6225]  ? hook_file_ioctl_common+0x145/0x410
[  124.389460][ T6225]  blkdev_ioctl+0x108/0x6d0
[  124.389494][ T6225]  ? __pfx_blkdev_ioctl+0x10/0x10
[  124.389532][ T6225]  ? __pfx_blkdev_ioctl+0x10/0x10
[  124.389567][ T6225]  __x64_sys_ioctl+0x18e/0x210
[  124.389602][ T6225]  do_syscall_64+0xcd/0x490
[  124.389632][ T6225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.389659][ T6225] RIP: 0033:0x7f8929b8e929
[  124.389689][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.389714][ T6225] RSP: 002b:00007f892aa21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.389743][ T6225] RAX: ffffffffffffffda RBX: 00007f8929db6080 RCX: 00007f8929b8e929
[  124.389761][ T6225] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 000000000000000a
[  124.389777][ T6225] RBP: 00007f8929c10b39 R08: 0000000000000000 R09: 0000000000000000
[  124.389793][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.389808][ T6225] R13: 0000000000000000 R14: 00007f8929db6080 R15: 00007ffd50ab0f08
[  124.389843][ T6225]  </TASK>
[  125.791400][   T30] audit: type=1800 audit(1749816901.421:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.58" name="dbroot" dev="configfs" ino=10630 res=0 errno=0
[  130.859065][ T6294] FAULT_INJECTION: forcing a failure.
[  130.859065][ T6294] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  130.918533][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.2.66 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  130.918576][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  130.918594][ T6294] Call Trace:
[  130.918610][ T6294]  <TASK>
[  130.918622][ T6294]  dump_stack_lvl+0x16c/0x1f0
[  130.918677][ T6294]  should_fail_ex+0x512/0x640
[  130.918726][ T6294]  should_fail_alloc_page+0xe7/0x130
[  130.918757][ T6294]  prepare_alloc_pages+0x3c2/0x610
[  130.918791][ T6294]  ? rcu_is_watching+0x12/0xc0
[  130.918823][ T6294]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  130.918877][ T6294]  ? __lock_acquire+0x622/0x1c90
[  130.918923][ T6294]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  130.918966][ T6294]  ? relay_open+0x653/0xad0
[  130.919015][ T6294]  ? rcu_read_unlock+0x17/0x60
[  130.919051][ T6294]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  130.919099][ T6294]  ? policy_nodemask+0xea/0x4e0
[  130.919150][ T6294]  alloc_pages_mpol+0x1fb/0x550
[  130.919200][ T6294]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  130.919248][ T6294]  ? __kvmalloc_node_noprof.cold+0x60/0x65
[  130.919293][ T6294]  ? trace_kmalloc+0x2b/0xd0
[  130.919330][ T6294]  ? __kmalloc_noprof.cold+0x5c/0x61
[  130.919367][ T6294]  ? relay_open_buf.part.0+0x194/0xc80
[  130.919406][ T6294]  alloc_pages_noprof+0x131/0x390
[  130.919453][ T6294]  relay_open_buf.part.0+0x262/0xc80
[  130.919501][ T6294]  relay_open+0x653/0xad0
[  130.919537][ T6294]  ? debugfs_create_file_full+0x41/0x60
[  130.919596][ T6294]  do_blk_trace_setup+0x503/0xb50
[  130.919640][ T6294]  blk_trace_setup+0xed/0x1b0
[  130.919674][ T6294]  ? __pfx_blk_trace_setup+0x10/0x10
[  130.919705][ T6294]  ? __pfx_snprintf+0x10/0x10
[  130.919769][ T6294]  blk_trace_ioctl+0x146/0x280
[  130.919799][ T6294]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  130.919833][ T6294]  ? find_held_lock+0x2b/0x80
[  130.919855][ T6294]  ? hook_file_ioctl_common+0x145/0x410
[  130.919887][ T6294]  blkdev_ioctl+0x108/0x6d0
[  130.919917][ T6294]  ? __pfx_blkdev_ioctl+0x10/0x10
[  130.919952][ T6294]  ? __pfx_blkdev_ioctl+0x10/0x10
[  130.919983][ T6294]  __x64_sys_ioctl+0x18e/0x210
[  130.920014][ T6294]  do_syscall_64+0xcd/0x490
[  130.920039][ T6294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.920064][ T6294] RIP: 0033:0x7f8929b8e929
[  130.920084][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.920108][ T6294] RSP: 002b:00007f892aa42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.920131][ T6294] RAX: ffffffffffffffda RBX: 00007f8929db5fa0 RCX: 00007f8929b8e929
[  130.920147][ T6294] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 000000000000000a
[  130.920163][ T6294] RBP: 00007f8929c10b39 R08: 0000000000000000 R09: 0000000000000000
[  130.920178][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.920193][ T6294] R13: 0000000000000000 R14: 00007f8929db5fa0 R15: 00007ffd50ab0f08
[  130.920224][ T6294]  </TASK>
[  131.352756][ T6304] mmap: syz.0.68 (6304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  132.389026][ T6322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'.
[  134.382034][ T6336] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  134.389691][ T6336] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  134.528774][ T6336] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  134.611167][ T6336] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  134.617743][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  134.627465][ T6336] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  134.641349][ T6336] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  134.652666][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  134.665994][ T6336] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  134.681774][ T6336] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  134.700110][ T6336] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  134.868689][ T6345] FAULT_INJECTION: forcing a failure.
[  134.868689][ T6345] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  134.882342][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.1.77 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  134.882382][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.882400][ T6345] Call Trace:
[  134.882409][ T6345]  <TASK>
[  134.882420][ T6345]  dump_stack_lvl+0x16c/0x1f0
[  134.882472][ T6345]  should_fail_ex+0x512/0x640
[  134.882522][ T6345]  should_fail_alloc_page+0xe7/0x130
[  134.882565][ T6345]  prepare_alloc_pages+0x3c2/0x610
[  134.882597][ T6345]  ? rcu_is_watching+0x12/0xc0
[  134.882629][ T6345]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  134.882683][ T6345]  ? __lock_acquire+0x622/0x1c90
[  134.882726][ T6345]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  134.882766][ T6345]  ? relay_open+0x653/0xad0
[  134.882812][ T6345]  ? rcu_read_unlock+0x17/0x60
[  134.882846][ T6345]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  134.882889][ T6345]  ? policy_nodemask+0xea/0x4e0
[  134.882937][ T6345]  alloc_pages_mpol+0x1fb/0x550
[  134.882983][ T6345]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  134.883102][ T6345]  ? __kvmalloc_node_noprof.cold+0x60/0x65
[  134.883147][ T6345]  ? trace_kmalloc+0x2b/0xd0
[  134.883193][ T6345]  ? __kmalloc_noprof.cold+0x5c/0x61
[  134.883237][ T6345]  ? relay_open_buf.part.0+0x194/0xc80
[  134.883282][ T6345]  alloc_pages_noprof+0x131/0x390
[  134.883335][ T6345]  relay_open_buf.part.0+0x262/0xc80
[  134.883389][ T6345]  relay_open+0x653/0xad0
[  134.883429][ T6345]  ? debugfs_create_file_full+0x41/0x60
[  134.883474][ T6345]  do_blk_trace_setup+0x503/0xb50
[  134.883515][ T6345]  blk_trace_setup+0xed/0x1b0
[  134.883549][ T6345]  ? __pfx_blk_trace_setup+0x10/0x10
[  134.883582][ T6345]  ? __pfx_snprintf+0x10/0x10
[  134.883650][ T6345]  blk_trace_ioctl+0x146/0x280
[  134.883687][ T6345]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  134.883729][ T6345]  ? find_held_lock+0x2b/0x80
[  134.883757][ T6345]  ? hook_file_ioctl_common+0x145/0x410
[  134.883797][ T6345]  blkdev_ioctl+0x108/0x6d0
[  134.883835][ T6345]  ? __pfx_blkdev_ioctl+0x10/0x10
[  134.883879][ T6345]  ? __pfx_blkdev_ioctl+0x10/0x10
[  134.883919][ T6345]  __x64_sys_ioctl+0x18e/0x210
[  134.883959][ T6345]  do_syscall_64+0xcd/0x490
[  134.883992][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.884031][ T6345] RIP: 0033:0x7f793c18e929
[  134.884056][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.884088][ T6345] RSP: 002b:00007f793d024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.884116][ T6345] RAX: ffffffffffffffda RBX: 00007f793c3b5fa0 RCX: 00007f793c18e929
[  134.884136][ T6345] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 000000000000000a
[  134.884155][ T6345] RBP: 00007f793c210b39 R08: 0000000000000000 R09: 0000000000000000
[  134.884173][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.884191][ T6345] R13: 0000000000000000 R14: 00007f793c3b5fa0 R15: 00007ffc142706f8
[  134.884231][ T6345]  </TASK>
[  134.886449][ T6336] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  135.617219][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  135.719864][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  136.672033][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  136.672093][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout
[  136.678148][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  137.789198][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.795928][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  137.804005][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  138.760442][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.760487][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout
[  138.766560][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  139.934981][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.288946][ T6391] FAULT_INJECTION: forcing a failure.
[  140.288946][ T6391] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  140.367090][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.1.87 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  140.367132][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.367150][ T6391] Call Trace:
[  140.367159][ T6391]  <TASK>
[  140.367170][ T6391]  dump_stack_lvl+0x16c/0x1f0
[  140.367225][ T6391]  should_fail_ex+0x512/0x640
[  140.367276][ T6391]  should_fail_alloc_page+0xe7/0x130
[  140.367308][ T6391]  prepare_alloc_pages+0x3c2/0x610
[  140.367343][ T6391]  ? rcu_is_watching+0x12/0xc0
[  140.367375][ T6391]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  140.367448][ T6391]  ? __lock_acquire+0x622/0x1c90
[  140.367495][ T6391]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  140.367541][ T6391]  ? relay_open+0x653/0xad0
[  140.367605][ T6391]  ? rcu_read_unlock+0x17/0x60
[  140.367642][ T6391]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  140.367689][ T6391]  ? policy_nodemask+0xea/0x4e0
[  140.367759][ T6391]  alloc_pages_mpol+0x1fb/0x550
[  140.367812][ T6391]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  140.367884][ T6391]  ? __kvmalloc_node_noprof.cold+0x60/0x65
[  140.367930][ T6391]  ? trace_kmalloc+0x2b/0xd0
[  140.367957][ T6391]  ? __kmalloc_noprof.cold+0x5c/0x61
[  140.367998][ T6391]  ? relay_open_buf.part.0+0x194/0xc80
[  140.368042][ T6391]  alloc_pages_noprof+0x131/0x390
[  140.368092][ T6391]  relay_open_buf.part.0+0x262/0xc80
[  140.368146][ T6391]  relay_open+0x653/0xad0
[  140.368184][ T6391]  ? debugfs_create_file_full+0x41/0x60
[  140.368228][ T6391]  do_blk_trace_setup+0x503/0xb50
[  140.368266][ T6391]  blk_trace_setup+0xed/0x1b0
[  140.368301][ T6391]  ? __pfx_blk_trace_setup+0x10/0x10
[  140.368331][ T6391]  ? __pfx_snprintf+0x10/0x10
[  140.368396][ T6391]  blk_trace_ioctl+0x146/0x280
[  140.368430][ T6391]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  140.368477][ T6391]  ? find_held_lock+0x2b/0x80
[  140.368504][ T6391]  ? hook_file_ioctl_common+0x145/0x410
[  140.368542][ T6391]  blkdev_ioctl+0x108/0x6d0
[  140.368581][ T6391]  ? __pfx_blkdev_ioctl+0x10/0x10
[  140.368623][ T6391]  ? __pfx_blkdev_ioctl+0x10/0x10
[  140.368661][ T6391]  __x64_sys_ioctl+0x18e/0x210
[  140.368700][ T6391]  do_syscall_64+0xcd/0x490
[  140.368730][ T6391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.368760][ T6391] RIP: 0033:0x7f793c18e929
[  140.368784][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.368811][ T6391] RSP: 002b:00007f793d024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  140.368844][ T6391] RAX: ffffffffffffffda RBX: 00007f793c3b5fa0 RCX: 00007f793c18e929
[  140.368863][ T6391] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 000000000000000a
[  140.368880][ T6391] RBP: 00007f793c210b39 R08: 0000000000000000 R09: 0000000000000000
[  140.368898][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.368914][ T6391] R13: 0000000000000000 R14: 00007f793c3b5fa0 R15: 00007ffc142706f8
[  140.368954][ T6391]  </TASK>
[  140.810398][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.820686][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.826811][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  141.599656][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'.
[  143.525901][ T6464] can: request_module (can-proto-0) failed.
[  143.663589][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.672377][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.680532][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.688149][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.695791][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.703162][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.710850][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.718387][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.785605][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.793120][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.801543][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.809521][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.818309][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.826132][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.833416][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.841589][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.849482][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.857355][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.872273][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.879890][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.887473][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.895011][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.902292][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.909868][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.921532][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.929031][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.936643][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.943912][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.951531][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.959049][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.967539][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.975144][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.982445][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.990021][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  143.997670][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.005210][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.012502][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.020119][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.027548][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.035145][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.042429][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.049801][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.057163][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.064476][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.072857][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.080364][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.087805][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.095183][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.102508][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.109894][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.117282][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.124622][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.131898][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.139373][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.146723][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.154268][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.161555][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.170069][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.177435][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.184752][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.192056][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.199521][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.206889][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.214284][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.221551][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  144.239081][   T30] audit: type=1804 audit(6999275902.806:3): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.103" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=15204 res=1 errno=0
[  144.262525][    C1] vkms_vblank_simulate: vblank timer overrun
[  144.600819][   T30] audit: type=1800 audit(6999275902.806:4): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.103" name="dbroot" dev="configfs" ino=15204 res=0 errno=0
[  144.962056][ T6495] netlink: 334 bytes leftover after parsing attributes in process `syz.3.107'.
[  146.068331][ T6516] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  148.571367][ T6551] netlink: 334 bytes leftover after parsing attributes in process `syz.1.119'.
[  149.037782][ T6554] FAULT_INJECTION: forcing a failure.
[  149.037782][ T6554] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  149.093531][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.1.120 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  149.093572][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.093589][ T6554] Call Trace:
[  149.093598][ T6554]  <TASK>
[  149.093610][ T6554]  dump_stack_lvl+0x16c/0x1f0
[  149.093663][ T6554]  should_fail_ex+0x512/0x640
[  149.093713][ T6554]  _copy_from_user+0x2e/0xd0
[  149.093763][ T6554]  get_timespec64+0x8b/0x1b0
[  149.093798][ T6554]  ? __pfx_get_timespec64+0x10/0x10
[  149.093851][ T6554]  ? find_held_lock+0x2b/0x80
[  149.093891][ T6554]  __x64_sys_futex+0x288/0x4c0
[  149.093934][ T6554]  ? __pfx___x64_sys_futex+0x10/0x10
[  149.093972][ T6554]  ? xfd_validate_state+0x61/0x180
[  149.094024][ T6554]  do_syscall_64+0xcd/0x490
[  149.094055][ T6554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.094086][ T6554] RIP: 0033:0x7f793c18e929
[  149.094109][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.094136][ T6554] RSP: 002b:00007ffc14270858 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  149.094164][ T6554] RAX: ffffffffffffffda RBX: 0000000000024658 RCX: 00007f793c18e929
[  149.094183][ T6554] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f793c3b5fac
[  149.094201][ T6554] RBP: 0000000000000032 R08: 00007f793d025000 R09: 0000000714270b4f
[  149.094218][ T6554] R10: 00007ffc14270950 R11: 0000000000000246 R12: 00007f793c3b5fac
[  149.094236][ T6554] R13: 00007ffc14270950 R14: 000000000002468a R15: 00007ffc14270970
[  149.094274][ T6554]  </TASK>
[  152.370152][ T6596] FAULT_INJECTION: forcing a failure.
[  152.370152][ T6596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.383658][ T6596] CPU: 1 UID: 0 PID: 6596 Comm: syz.0.130 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  152.383699][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  152.383716][ T6596] Call Trace:
[  152.383725][ T6596]  <TASK>
[  152.383737][ T6596]  dump_stack_lvl+0x16c/0x1f0
[  152.383796][ T6596]  should_fail_ex+0x512/0x640
[  152.383846][ T6596]  copy_fpstate_to_sigframe+0x854/0xaf0
[  152.383889][ T6596]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  152.383934][ T6596]  ? collect_signal+0x263/0x540
[  152.383974][ T6596]  ? x86_task_fpu+0x5f/0x90
[  152.384006][ T6596]  get_sigframe+0x4a8/0x9c0
[  152.384042][ T6596]  ? __pfx_get_sigframe+0x10/0x10
[  152.384077][ T6596]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.384120][ T6596]  ? siginfo_layout+0x177/0x290
[  152.384154][ T6596]  x64_setup_rt_frame+0x12e/0xcf0
[  152.384190][ T6596]  ? __might_fault+0xe3/0x190
[  152.384232][ T6596]  ? __might_fault+0xe3/0x190
[  152.384274][ T6596]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  152.384306][ T6596]  ? do_futex+0x122/0x350
[  152.384342][ T6596]  ? __pfx_do_futex+0x10/0x10
[  152.384381][ T6596]  arch_do_signal_or_restart+0x5b4/0x790
[  152.384417][ T6596]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  152.384462][ T6596]  ? xfd_validate_state+0x61/0x180
[  152.384508][ T6596]  exit_to_user_mode_loop+0x84/0x110
[  152.384553][ T6596]  do_syscall_64+0x3f6/0x490
[  152.384580][ T6596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.384608][ T6596] RIP: 0033:0x7fe3cf38e929
[  152.384632][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.384660][ T6596] RSP: 002b:00007fe3d026a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  152.384688][ T6596] RAX: fffffffffffffffc RBX: 00007fe3cf5b5fa8 RCX: 00007fe3cf38e929
[  152.384706][ T6596] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3cf5b5fa8
[  152.384723][ T6596] RBP: 00007fe3cf5b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  152.384739][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3cf5b5fac
[  152.384755][ T6596] R13: 0000000000000000 R14: 00007ffc89dc79a0 R15: 00007ffc89dc7a88
[  152.384798][ T6596]  </TASK>
[  154.314301][ T6630] blktrace: Concurrent blktraces are not allowed on ram7
[  155.416123][ T6647] openvswitch: HfR: Dropping previously announced user features
[  155.546099][ T6644] bridge0: port 3(vlan1) entered blocking state
[  155.552577][ T6644] bridge0: port 3(vlan1) entered disabled state
[  155.561534][ T6644] vlan1: entered allmulticast mode
[  155.567084][ T6644] veth0_vlan: entered allmulticast mode
[  155.598999][ T6644] vlan1: entered promiscuous mode
[  155.608919][ T6644] bridge0: port 3(vlan1) entered blocking state
[  155.615580][ T6644] bridge0: port 3(vlan1) entered forwarding state
[  156.092738][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'.
[  157.728801][ T6679] FAULT_INJECTION: forcing a failure.
[  157.728801][ T6679] name failslab, interval 1, probability 0, space 0, times 0
[  157.762672][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.2.148 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  157.762717][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  157.762734][ T6679] Call Trace:
[  157.762744][ T6679]  <TASK>
[  157.762756][ T6679]  dump_stack_lvl+0x16c/0x1f0
[  157.762811][ T6679]  should_fail_ex+0x512/0x640
[  157.762857][ T6679]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  157.762910][ T6679]  should_failslab+0xc2/0x120
[  157.762937][ T6679]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  157.762989][ T6679]  ? cache_create_net+0x2b/0x220
[  157.763024][ T6679]  kmemdup_noprof+0x29/0x60
[  157.763086][ T6679]  cache_create_net+0x2b/0x220
[  157.763119][ T6679]  gss_svc_init_net+0x122/0x660
[  157.763147][ T6679]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  157.763187][ T6679]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  157.763217][ T6679]  ops_init+0x1e2/0x5f0
[  157.763254][ T6679]  setup_net+0x1ff/0x510
[  157.763284][ T6679]  ? lockdep_init_map_type+0x5c/0x280
[  157.763327][ T6679]  ? __pfx_setup_net+0x10/0x10
[  157.763364][ T6679]  ? debug_mutex_init+0x37/0x70
[  157.763401][ T6679]  copy_net_ns+0x2a6/0x5f0
[  157.763441][ T6679]  create_new_namespaces+0x3ea/0xa90
[  157.763483][ T6679]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  157.763518][ T6679]  ksys_unshare+0x45b/0xa40
[  157.763559][ T6679]  ? __pfx_ksys_unshare+0x10/0x10
[  157.763602][ T6679]  ? xfd_validate_state+0x61/0x180
[  157.763656][ T6679]  __x64_sys_unshare+0x31/0x40
[  157.763697][ T6679]  do_syscall_64+0xcd/0x490
[  157.763730][ T6679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.763772][ T6679] RIP: 0033:0x7f8929b8e929
[  157.763796][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.763825][ T6679] RSP: 002b:00007f892aa00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  157.763854][ T6679] RAX: ffffffffffffffda RBX: 00007f8929db6160 RCX: 00007f8929b8e929
[  157.763873][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  157.763890][ T6679] RBP: 00007f8929c10b39 R08: 0000000000000000 R09: 0000000000000000
[  157.763907][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.763924][ T6679] R13: 0000000000000000 R14: 00007f8929db6160 R15: 00007ffd50ab0f08
[  157.763962][ T6679]  </TASK>
[  158.610176][ T6686] random: crng reseeded on system resumption
[  160.130763][ T6698] netlink: 186 bytes leftover after parsing attributes in process `syz.1.153'.
[  161.239620][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'.
[  162.222142][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.160'.
[  164.593199][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'.
[  165.136250][ T6783] FAULT_INJECTION: forcing a failure.
[  165.136250][ T6783] name fail_futex, interval 1, probability 0, space 0, times 0
[  165.213619][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.1.168 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  165.213659][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.213676][ T6783] Call Trace:
[  165.213685][ T6783]  <TASK>
[  165.213695][ T6783]  dump_stack_lvl+0x16c/0x1f0
[  165.213747][ T6783]  should_fail_ex+0x512/0x640
[  165.213795][ T6783]  get_futex_key+0x1d0/0x1540
[  165.213831][ T6783]  ? __pfx_get_futex_key+0x10/0x10
[  165.213877][ T6783]  futex_wake+0xea/0x530
[  165.213909][ T6783]  ? rcu_is_watching+0x12/0xc0
[  165.213932][ T6783]  ? __pfx_futex_wake+0x10/0x10
[  165.213977][ T6783]  ? kmem_cache_free+0x2d1/0x4d0
[  165.214006][ T6783]  ? fd_install+0x225/0x750
[  165.214032][ T6783]  ? putname+0x154/0x1a0
[  165.214055][ T6783]  do_futex+0x1e3/0x350
[  165.214080][ T6783]  ? __pfx_do_futex+0x10/0x10
[  165.214112][ T6783]  __x64_sys_futex+0x1e0/0x4c0
[  165.214139][ T6783]  ? __x64_sys_openat+0x174/0x210
[  165.214162][ T6783]  ? __pfx___x64_sys_futex+0x10/0x10
[  165.214197][ T6783]  do_syscall_64+0xcd/0x490
[  165.214218][ T6783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.214239][ T6783] RIP: 0033:0x7f793c18e929
[  165.214254][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.214274][ T6783] RSP: 002b:00007f793d0240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  165.214293][ T6783] RAX: ffffffffffffffda RBX: 00007f793c3b5fa8 RCX: 00007f793c18e929
[  165.214306][ T6783] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f793c3b5fac
[  165.214319][ T6783] RBP: 00007f793c3b5fa0 R08: 00007f793d025000 R09: 0000000000000000
[  165.214332][ T6783] R10: 000000000000000a R11: 0000000000000246 R12: 00007f793c3b5fac
[  165.214344][ T6783] R13: 0000000000000000 R14: 00007ffc14270610 R15: 00007ffc142706f8
[  165.214369][ T6783]  </TASK>
[  167.543050][ T6797] blktrace: Concurrent blktraces are not allowed on ram7
[  168.271285][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'.
[  168.568923][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'.
[  169.460706][ T6832] FAULT_INJECTION: forcing a failure.
[  169.460706][ T6832] name failslab, interval 1, probability 0, space 0, times 0
[  169.527594][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.0.179 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  169.527642][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  169.527662][ T6832] Call Trace:
[  169.527673][ T6832]  <TASK>
[  169.527685][ T6832]  dump_stack_lvl+0x16c/0x1f0
[  169.527745][ T6832]  should_fail_ex+0x512/0x640
[  169.527792][ T6832]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  169.527844][ T6832]  should_failslab+0xc2/0x120
[  169.527874][ T6832]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  169.527923][ T6832]  ? security_file_alloc+0x34/0x2b0
[  169.527970][ T6832]  security_file_alloc+0x34/0x2b0
[  169.528013][ T6832]  init_file+0x93/0x4c0
[  169.528045][ T6832]  alloc_empty_file+0x73/0x1e0
[  169.528088][ T6832]  alloc_file_pseudo+0x13a/0x230
[  169.528126][ T6832]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  169.528173][ T6832]  __shmem_file_setup+0x1a3/0x330
[  169.528220][ T6832]  shmem_zero_setup+0x93/0x1a0
[  169.528269][ T6832]  __mmap_region+0x1ed0/0x25e0
[  169.528325][ T6832]  ? __pfx___mmap_region+0x10/0x10
[  169.528372][ T6832]  ? rcu_is_watching+0x12/0xc0
[  169.528413][ T6832]  ? rcu_is_watching+0x12/0xc0
[  169.528445][ T6832]  ? trace_sched_exit_tp+0xde/0x130
[  169.528482][ T6832]  ? __schedule+0x1181/0x5de0
[  169.528553][ T6832]  ? __pfx___schedule+0x10/0x10
[  169.528649][ T6832]  ? trace_cap_capable+0x18d/0x200
[  169.528693][ T6832]  mmap_region+0x1ab/0x3f0
[  169.528742][ T6832]  ? __get_unmapped_area+0x267/0x440
[  169.528783][ T6832]  do_mmap+0xa3e/0x1210
[  169.528825][ T6832]  ? __pfx_do_mmap+0x10/0x10
[  169.528860][ T6832]  ? __pfx_down_write_killable+0x10/0x10
[  169.528904][ T6832]  vm_mmap_pgoff+0x281/0x450
[  169.528944][ T6832]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  169.528986][ T6832]  ? __x64_sys_futex+0x1e0/0x4c0
[  169.529024][ T6832]  ? __x64_sys_futex+0x1e9/0x4c0
[  169.529076][ T6832]  ksys_mmap_pgoff+0x7d/0x5c0
[  169.529110][ T6832]  ? xfd_validate_state+0x61/0x180
[  169.529150][ T6832]  ? __pfx_do_writev+0x10/0x10
[  169.529197][ T6832]  __x64_sys_mmap+0x125/0x190
[  169.529245][ T6832]  do_syscall_64+0xcd/0x490
[  169.529279][ T6832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.529311][ T6832] RIP: 0033:0x7fe3cf38e929
[  169.529337][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.529366][ T6832] RSP: 002b:00007fe3d026a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  169.529395][ T6832] RAX: ffffffffffffffda RBX: 00007fe3cf5b5fa0 RCX: 00007fe3cf38e929
[  169.529416][ T6832] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  169.529435][ T6832] RBP: 00007fe3cf410b39 R08: 0000000000000401 R09: 0000000000008000
[  169.529454][ T6832] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  169.529472][ T6832] R13: 0000000000000000 R14: 00007fe3cf5b5fa0 R15: 00007ffc89dc7a88
[  169.529512][ T6832]  </TASK>
[  170.206812][ T6833] Invalid ELF header magic: != ELF
[  171.471893][ T6849] FAULT_INJECTION: forcing a failure.
[  171.471893][ T6849] name failslab, interval 1, probability 0, space 0, times 0
[  171.540713][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.3.182 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  171.540755][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  171.540772][ T6849] Call Trace:
[  171.540782][ T6849]  <TASK>
[  171.540792][ T6849]  dump_stack_lvl+0x16c/0x1f0
[  171.540854][ T6849]  should_fail_ex+0x512/0x640
[  171.540897][ T6849]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  171.540944][ T6849]  should_failslab+0xc2/0x120
[  171.540972][ T6849]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  171.541015][ T6849]  ? vma_merge_new_range+0x37f/0xa00
[  171.541054][ T6849]  ? vm_area_alloc+0x1f/0x160
[  171.541097][ T6849]  vm_area_alloc+0x1f/0x160
[  171.541135][ T6849]  __mmap_region+0xf0e/0x25e0
[  171.541182][ T6849]  ? __pfx___mmap_region+0x10/0x10
[  171.541224][ T6849]  ? rcu_is_watching+0x12/0xc0
[  171.541261][ T6849]  ? rcu_is_watching+0x12/0xc0
[  171.541288][ T6849]  ? trace_sched_exit_tp+0xde/0x130
[  171.541320][ T6849]  ? __schedule+0x1181/0x5de0
[  171.541383][ T6849]  ? __pfx___schedule+0x10/0x10
[  171.541471][ T6849]  ? trace_cap_capable+0x18d/0x200
[  171.541513][ T6849]  mmap_region+0x1ab/0x3f0
[  171.541556][ T6849]  ? __get_unmapped_area+0x267/0x440
[  171.541603][ T6849]  do_mmap+0xa3e/0x1210
[  171.541639][ T6849]  ? __pfx_do_mmap+0x10/0x10
[  171.541669][ T6849]  ? __pfx_down_write_killable+0x10/0x10
[  171.541705][ T6849]  vm_mmap_pgoff+0x281/0x450
[  171.541738][ T6849]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  171.541770][ T6849]  ? __x64_sys_futex+0x1e0/0x4c0
[  171.541799][ T6849]  ? __x64_sys_futex+0x1e9/0x4c0
[  171.541836][ T6849]  ksys_mmap_pgoff+0x7d/0x5c0
[  171.541874][ T6849]  ? xfd_validate_state+0x61/0x180
[  171.541914][ T6849]  __x64_sys_mmap+0x125/0x190
[  171.541958][ T6849]  do_syscall_64+0xcd/0x490
[  171.541986][ T6849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.542015][ T6849] RIP: 0033:0x7f5a27f8e929
[  171.542037][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.542065][ T6849] RSP: 002b:00007f5a28db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  171.542110][ T6849] RAX: ffffffffffffffda RBX: 00007f5a281b5fa0 RCX: 00007f5a27f8e929
[  171.542129][ T6849] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  171.542146][ T6849] RBP: 00007f5a28010b39 R08: 0000000000000401 R09: 0000040000008000
[  171.542163][ T6849] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  171.542180][ T6849] R13: 0000000000000000 R14: 00007f5a281b5fa0 R15: 00007ffd4aaab1e8
[  171.542217][ T6849]  </TASK>
[  172.041929][   T30] audit: type=1800 audit(6999275930.760:5): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="members" dev="configfs" ino=22905 res=0 errno=0
[  172.543813][ T6857] blktrace: Concurrent blktraces are not allowed on ram7
[  177.834488][ T6915] blktrace: Concurrent blktraces are not allowed on ram7
[  177.933939][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.200'.
[  178.748892][ T6949] FAULT_INJECTION: forcing a failure.
[  178.748892][ T6949] name failslab, interval 1, probability 0, space 0, times 0
[  178.761765][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.3.203 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  178.761806][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.761825][ T6949] Call Trace:
[  178.761835][ T6949]  <TASK>
[  178.761847][ T6949]  dump_stack_lvl+0x16c/0x1f0
[  178.761903][ T6949]  should_fail_ex+0x512/0x640
[  178.761950][ T6949]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  178.762003][ T6949]  should_failslab+0xc2/0x120
[  178.762032][ T6949]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  178.762081][ T6949]  ? sk_prot_alloc+0x60/0x2a0
[  178.762124][ T6949]  sk_prot_alloc+0x60/0x2a0
[  178.762165][ T6949]  sk_alloc+0x36/0xc20
[  178.762215][ T6949]  inet6_create+0x381/0x1300
[  178.762252][ T6949]  ? inet6_create+0x7f/0x1300
[  178.762309][ T6949]  __sock_create+0x338/0x8d0
[  178.762361][ T6949]  inet_ctl_sock_create+0x94/0x230
[  178.762422][ T6949]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  178.762466][ T6949]  ? lockdep_init_map_type+0x5c/0x280
[  178.762521][ T6949]  ? do_init_timer+0xc9/0x110
[  178.762561][ T6949]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[  178.762593][ T6949]  sctp_ctrlsock_init+0x40/0xf0
[  178.762624][ T6949]  ops_init+0x1e2/0x5f0
[  178.762661][ T6949]  setup_net+0x1ff/0x510
[  178.762692][ T6949]  ? lockdep_init_map_type+0x5c/0x280
[  178.762736][ T6949]  ? __pfx_setup_net+0x10/0x10
[  178.762772][ T6949]  ? debug_mutex_init+0x37/0x70
[  178.762807][ T6949]  copy_net_ns+0x2a6/0x5f0
[  178.762847][ T6949]  create_new_namespaces+0x3ea/0xa90
[  178.762895][ T6949]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  178.762935][ T6949]  ksys_unshare+0x45b/0xa40
[  178.762978][ T6949]  ? __pfx_ksys_unshare+0x10/0x10
[  178.763020][ T6949]  ? xfd_validate_state+0x61/0x180
[  178.763072][ T6949]  __x64_sys_unshare+0x31/0x40
[  178.763111][ T6949]  do_syscall_64+0xcd/0x490
[  178.763145][ T6949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.763178][ T6949] RIP: 0033:0x7f5a27f8e929
[  178.763203][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.763233][ T6949] RSP: 002b:00007f5a28d73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  178.763262][ T6949] RAX: ffffffffffffffda RBX: 00007f5a281b6160 RCX: 00007f5a27f8e929
[  178.763282][ T6949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  178.763301][ T6949] RBP: 00007f5a28010b39 R08: 0000000000000000 R09: 0000000000000000
[  178.763319][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.763336][ T6949] R13: 0000000000000000 R14: 00007f5a281b6160 R15: 00007ffd4aaab1e8
[  178.763377][ T6949]  </TASK>
[  180.190489][ T6964] netlink: 342 bytes leftover after parsing attributes in process `syz.3.206'.
[  180.641238][ T6973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  181.543593][ T6977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  184.829350][ T7022] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  184.849628][ T7025] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  185.818365][ T5840] Bluetooth: hci1: unexpected event 0x09 length: 440 > 3
[  186.111292][ T7039] FAULT_INJECTION: forcing a failure.
[  186.111292][ T7039] name failslab, interval 1, probability 0, space 0, times 0
[  186.335186][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.2.220 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  186.335230][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.335248][ T7039] Call Trace:
[  186.335259][ T7039]  <TASK>
[  186.335275][ T7039]  dump_stack_lvl+0x16c/0x1f0
[  186.335331][ T7039]  should_fail_ex+0x512/0x640
[  186.335377][ T7039]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  186.335428][ T7039]  should_failslab+0xc2/0x120
[  186.335456][ T7039]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  186.335503][ T7039]  ? mas_alloc_nodes+0x18b/0x8b0
[  186.335554][ T7039]  mas_alloc_nodes+0x18b/0x8b0
[  186.335614][ T7039]  mas_node_count_gfp+0x105/0x130
[  186.335662][ T7039]  mas_preallocate+0x77b/0xda0
[  186.335704][ T7039]  ? __pfx_mas_preallocate+0x10/0x10
[  186.335749][ T7039]  ? vma_merge_new_range+0x37f/0xa00
[  186.335808][ T7039]  ? vm_area_alloc+0x1f/0x160
[  186.335854][ T7039]  ? lockdep_init_map_type+0x5c/0x280
[  186.335903][ T7039]  __mmap_region+0x1108/0x25e0
[  186.335955][ T7039]  ? __pfx___mmap_region+0x10/0x10
[  186.336016][ T7039]  ? mas_prev+0x9b/0xf0
[  186.336042][ T7039]  ? __pfx_mas_prev+0x10/0x10
[  186.336092][ T7039]  ? __pfx_unmapped_area_topdown+0x10/0x10
[  186.336208][ T7039]  mmap_region+0x1ab/0x3f0
[  186.336258][ T7039]  ? __get_unmapped_area+0x267/0x440
[  186.336297][ T7039]  do_mmap+0xa3e/0x1210
[  186.336337][ T7039]  ? __pfx_do_mmap+0x10/0x10
[  186.336384][ T7039]  ? __pfx_down_write_killable+0x10/0x10
[  186.336425][ T7039]  vm_mmap_pgoff+0x281/0x450
[  186.336462][ T7039]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  186.336489][ T7039]  ? ktime_get+0x200/0x310
[  186.336522][ T7039]  ? lockdep_hardirqs_on+0x7c/0x110
[  186.336584][ T7039]  ? __x64_sys_futex+0x1e0/0x4c0
[  186.336638][ T7039]  ? __x64_sys_futex+0x1e9/0x4c0
[  186.336681][ T7039]  ksys_mmap_pgoff+0x7d/0x5c0
[  186.336712][ T7039]  ? xfd_validate_state+0x61/0x180
[  186.336757][ T7039]  __x64_sys_mmap+0x125/0x190
[  186.336805][ T7039]  do_syscall_64+0xcd/0x490
[  186.336837][ T7039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.336874][ T7039] RIP: 0033:0x7f8929b8e963
[  186.336898][ T7039] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  186.336927][ T7039] RSP: 002b:00007ffd50ab0fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  186.336956][ T7039] RAX: ffffffffffffffda RBX: 00007f8929db62d8 RCX: 00007f8929b8e963
[  186.336975][ T7039] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000
[  186.336992][ T7039] RBP: 00007f8929db6240 R08: 00000000ffffffff R09: 0000000000000000
[  186.337010][ T7039] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f8929db5fa0
[  186.337027][ T7039] R13: 00007f8929db6240 R14: 0000000000001016 R15: 0000000000000001
[  186.337066][ T7039]  </TASK>
[  187.045713][ T7051] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  187.382355][ T7067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  187.800774][ T7068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  189.767886][ T7087] FAULT_INJECTION: forcing a failure.
[  189.767886][ T7087] name failslab, interval 1, probability 0, space 0, times 0
[  189.834591][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.3.231 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  189.834640][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  189.834660][ T7087] Call Trace:
[  189.834671][ T7087]  <TASK>
[  189.834683][ T7087]  dump_stack_lvl+0x16c/0x1f0
[  189.834742][ T7087]  should_fail_ex+0x512/0x640
[  189.834790][ T7087]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  189.834843][ T7087]  should_failslab+0xc2/0x120
[  189.834873][ T7087]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  189.834922][ T7087]  ? security_file_alloc+0x34/0x2b0
[  189.834972][ T7087]  security_file_alloc+0x34/0x2b0
[  189.835016][ T7087]  init_file+0x93/0x4c0
[  189.835053][ T7087]  alloc_empty_file+0x73/0x1e0
[  189.835090][ T7087]  alloc_file_pseudo+0x13a/0x230
[  189.835126][ T7087]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  189.835173][ T7087]  __shmem_file_setup+0x1a3/0x330
[  189.835221][ T7087]  shmem_zero_setup+0x93/0x1a0
[  189.835272][ T7087]  __mmap_region+0x1ed0/0x25e0
[  189.835334][ T7087]  ? __pfx___mmap_region+0x10/0x10
[  189.835387][ T7087]  ? rcu_is_watching+0x12/0xc0
[  189.835428][ T7087]  ? rcu_is_watching+0x12/0xc0
[  189.835461][ T7087]  ? trace_sched_exit_tp+0xde/0x130
[  189.835500][ T7087]  ? __schedule+0x1181/0x5de0
[  189.835573][ T7087]  ? __pfx___schedule+0x10/0x10
[  189.835670][ T7087]  ? trace_cap_capable+0x18d/0x200
[  189.835718][ T7087]  mmap_region+0x1ab/0x3f0
[  189.835768][ T7087]  ? __get_unmapped_area+0x267/0x440
[  189.835809][ T7087]  do_mmap+0xa3e/0x1210
[  189.835852][ T7087]  ? __pfx_do_mmap+0x10/0x10
[  189.835889][ T7087]  ? __pfx_down_write_killable+0x10/0x10
[  189.835934][ T7087]  vm_mmap_pgoff+0x281/0x450
[  189.835975][ T7087]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  189.836017][ T7087]  ? __x64_sys_futex+0x1e0/0x4c0
[  189.836055][ T7087]  ? __x64_sys_futex+0x1e9/0x4c0
[  189.836146][ T7087]  ksys_mmap_pgoff+0x7d/0x5c0
[  189.836180][ T7087]  ? xfd_validate_state+0x61/0x180
[  189.836222][ T7087]  ? __pfx_do_writev+0x10/0x10
[  189.836296][ T7087]  __x64_sys_mmap+0x125/0x190
[  189.836349][ T7087]  do_syscall_64+0xcd/0x490
[  189.836384][ T7087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.836417][ T7087] RIP: 0033:0x7f5a27f8e929
[  189.836443][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.836474][ T7087] RSP: 002b:00007f5a28db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  189.836505][ T7087] RAX: ffffffffffffffda RBX: 00007f5a281b5fa0 RCX: 00007f5a27f8e929
[  189.836526][ T7087] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  189.836545][ T7087] RBP: 00007f5a28010b39 R08: 0000000000000401 R09: 0000000000008000
[  189.836564][ T7087] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  189.836582][ T7087] R13: 0000000000000000 R14: 00007f5a281b5fa0 R15: 00007ffd4aaab1e8
[  189.836624][ T7087]  </TASK>
[  190.239632][ T7089] netlink: 186 bytes leftover after parsing attributes in process `syz.2.230'.
[  190.546621][ T7095] Invalid ELF header magic: != ELF
[  191.236164][ T7096] ubi0: attaching mtd0
[  191.264843][ T7096] ubi0: scanning is finished
[  191.323426][ T7096] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  192.050389][ T7096] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  192.180110][ T7098] ubi0: attaching mtd0
[  192.245419][ T7098] ubi0: scanning is finished
[  192.288819][ T7098] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  192.392799][ T7098] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  193.135856][ T7136] netlink: 334 bytes leftover after parsing attributes in process `syz.2.239'.
[  194.227377][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'.
[  195.378555][ T7176] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  196.780719][ T7204] FAULT_INJECTION: forcing a failure.
[  196.780719][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.821213][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.1.250 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  196.821253][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  196.821269][ T7204] Call Trace:
[  196.821278][ T7204]  <TASK>
[  196.821289][ T7204]  dump_stack_lvl+0x16c/0x1f0
[  196.821339][ T7204]  should_fail_ex+0x512/0x640
[  196.821387][ T7204]  _copy_from_user+0x2e/0xd0
[  196.821435][ T7204]  generic_map_update_batch+0x380/0x610
[  196.821491][ T7204]  ? __pfx_generic_map_update_batch+0x10/0x10
[  196.821544][ T7204]  ? __pfx_generic_map_update_batch+0x10/0x10
[  196.821589][ T7204]  bpf_map_do_batch+0x5b1/0x680
[  196.821629][ T7204]  __sys_bpf+0x15f3/0x4d80
[  196.821678][ T7204]  ? __pfx___sys_bpf+0x10/0x10
[  196.821725][ T7204]  ? ksys_write+0x190/0x250
[  196.821772][ T7204]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  196.821822][ T7204]  ? fput+0x70/0xf0
[  196.821849][ T7204]  ? ksys_write+0x1ac/0x250
[  196.821888][ T7204]  ? __pfx_ksys_write+0x10/0x10
[  196.821941][ T7204]  __x64_sys_bpf+0x78/0xc0
[  196.821967][ T7204]  ? lockdep_hardirqs_on+0x7c/0x110
[  196.822010][ T7204]  do_syscall_64+0xcd/0x490
[  196.822040][ T7204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.822068][ T7204] RIP: 0033:0x7f793c18e929
[  196.822091][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.822117][ T7204] RSP: 002b:00007f793d024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  196.822143][ T7204] RAX: ffffffffffffffda RBX: 00007f793c3b5fa0 RCX: 00007f793c18e929
[  196.822161][ T7204] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a
[  196.822178][ T7204] RBP: 00007f793d024090 R08: 0000000000000000 R09: 0000000000000000
[  196.822193][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.822209][ T7204] R13: 0000000000000000 R14: 00007f793c3b5fa0 R15: 00007ffc142706f8
[  196.822244][ T7204]  </TASK>
[  198.927097][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  198.934691][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  199.579596][ T7223] blktrace: Concurrent blktraces are not allowed on ram7
[  203.702509][ T7266] Line length is too long: Should be less than 4094
[  204.029473][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.269'.
[  204.313287][ T7292] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.373124][ T7292] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  204.801821][ T7302] netlink: 338 bytes leftover after parsing attributes in process `syz.1.270'.
[  212.665454][ T7370] syz.1.287 (7370) used greatest stack depth: 19800 bytes left

syzkaller
syzkaller login: [  218.946627][ T7440] blktrace: Concurrent blktraces are not allowed on ram7
[  219.066831][ T7440] FAULT_INJECTION: forcing a failure.
[  219.066831][ T7440] name fail_futex, interval 1, probability 0, space 0, times 0
[  219.083471][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.2.304 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  219.083509][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.083524][ T7440] Call Trace:
[  219.083533][ T7440]  <TASK>
[  219.083544][ T7440]  dump_stack_lvl+0x16c/0x1f0
[  219.083595][ T7440]  should_fail_ex+0x512/0x640
[  219.083645][ T7440]  get_futex_key+0x293/0x1540
[  219.083685][ T7440]  ? __pfx_get_futex_key+0x10/0x10
[  219.083721][ T7440]  ? __mutex_trylock_common+0xe9/0x250
[  219.083770][ T7440]  futex_wake+0xea/0x530
[  219.083817][ T7440]  ? __pfx_futex_wake+0x10/0x10
[  219.083858][ T7440]  ? __lock_acquire+0xb8a/0x1c90
[  219.083916][ T7440]  do_futex+0x1e3/0x350
[  219.083952][ T7440]  ? __pfx_do_futex+0x10/0x10
[  219.083986][ T7440]  ? __might_fault+0xe3/0x190
[  219.084047][ T7440]  mm_release+0x24e/0x300
[  219.084072][ T7440]  do_exit+0x683/0x2bd0
[  219.084108][ T7440]  ? __pfx_do_exit+0x10/0x10
[  219.084138][ T7440]  ? do_raw_spin_lock+0x12c/0x2b0
[  219.084172][ T7440]  ? find_held_lock+0x2b/0x80
[  219.084198][ T7440]  do_group_exit+0xd3/0x2a0
[  219.084231][ T7440]  get_signal+0x2673/0x26d0
[  219.084266][ T7440]  ? __pfx_get_signal+0x10/0x10
[  219.084291][ T7440]  ? do_futex+0x122/0x350
[  219.084318][ T7440]  ? __pfx_do_futex+0x10/0x10
[  219.084348][ T7440]  arch_do_signal_or_restart+0x8f/0x790
[  219.084374][ T7440]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  219.084406][ T7440]  ? xfd_validate_state+0x61/0x180
[  219.084433][ T7440]  ? __pfx___do_sys_prctl+0x10/0x10
[  219.084472][ T7440]  exit_to_user_mode_loop+0x84/0x110
[  219.084506][ T7440]  do_syscall_64+0x3f6/0x490
[  219.084528][ T7440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.084551][ T7440] RIP: 0033:0x7f8929b8e929
[  219.084567][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.084588][ T7440] RSP: 002b:00007f892aa420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  219.084608][ T7440] RAX: fffffffffffffe00 RBX: 00007f8929db5fa8 RCX: 00007f8929b8e929
[  219.084622][ T7440] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8929db5fa8
[  219.084635][ T7440] RBP: 00007f8929db5fa0 R08: 0000000000000000 R09: 0000000000000000
[  219.084648][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8929db5fac
[  219.084661][ T7440] R13: 0000000000000000 R14: 00007ffd50ab0e20 R15: 00007ffd50ab0f08
[  219.084688][ T7440]  </TASK>
[  225.073183][ T7514] netlink: 342 bytes leftover after parsing attributes in process `syz.2.321'.
[  225.113730][ T7514] netlink: 342 bytes leftover after parsing attributes in process `syz.2.321'.
[  225.212849][ T7517] netlink: 214 bytes leftover after parsing attributes in process `syz.2.321'.
[  225.261428][ T7517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  225.268907][ T7517] IPv6: NLM_F_CREATE should be set when creating new route
[  225.276230][ T7517] IPv6: NLM_F_CREATE should be set when creating new route
[  225.283473][ T7517] IPv6: NLM_F_CREATE should be set when creating new route
[  226.479358][ T7522] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  227.773682][ T7549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  231.122087][ T7572] blktrace: Concurrent blktraces are not allowed on ram7
[  231.142311][ T7572] FAULT_INJECTION: forcing a failure.
[  231.142311][ T7572] name failslab, interval 1, probability 0, space 0, times 0
[  231.220780][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.2.333 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  231.220821][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  231.220856][ T7572] Call Trace:
[  231.220871][ T7572]  <TASK>
[  231.220883][ T7572]  dump_stack_lvl+0x16c/0x1f0
[  231.220941][ T7572]  should_fail_ex+0x512/0x640
[  231.220996][ T7572]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  231.221043][ T7572]  should_failslab+0xc2/0x120
[  231.221073][ T7572]  __kmalloc_cache_noprof+0x6a/0x3e0
[  231.221117][ T7572]  ? snd_midi_event_new+0x6f/0x210
[  231.221155][ T7572]  snd_midi_event_new+0x6f/0x210
[  231.221198][ T7572]  snd_virmidi_output_open+0x106/0x670
[  231.221235][ T7572]  open_substream+0x47b/0x9b0
[  231.221277][ T7572]  rawmidi_open_priv+0x543/0x6e0
[  231.221325][ T7572]  snd_rawmidi_open+0x4cc/0xbf0
[  231.221374][ T7572]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  231.221418][ T7572]  ? __pfx_default_wake_function+0x10/0x10
[  231.221452][ T7572]  ? kobject_get_unless_zero+0x156/0x1e0
[  231.221488][ T7572]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  231.221528][ T7572]  snd_open+0x1fe/0x450
[  231.221559][ T7572]  ? __pfx_snd_open+0x10/0x10
[  231.221586][ T7572]  chrdev_open+0x234/0x6a0
[  231.221630][ T7572]  ? __pfx_apparmor_file_open+0x10/0x10
[  231.221668][ T7572]  ? __pfx_chrdev_open+0x10/0x10
[  231.221719][ T7572]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  231.221765][ T7572]  do_dentry_open+0x741/0x1c10
[  231.221809][ T7572]  ? __pfx_chrdev_open+0x10/0x10
[  231.221864][ T7572]  vfs_open+0x82/0x3f0
[  231.221901][ T7572]  path_openat+0x1de4/0x2cb0
[  231.221962][ T7572]  ? __pfx_path_openat+0x10/0x10
[  231.222008][ T7572]  ? __lock_acquire+0xb8a/0x1c90
[  231.222052][ T7572]  do_filp_open+0x20b/0x470
[  231.222094][ T7572]  ? __pfx_do_filp_open+0x10/0x10
[  231.222165][ T7572]  ? alloc_fd+0x471/0x7d0
[  231.222216][ T7572]  do_sys_openat2+0x11b/0x1d0
[  231.222248][ T7572]  ? __pfx_do_sys_openat2+0x10/0x10
[  231.222297][ T7572]  __x64_sys_openat+0x174/0x210
[  231.222330][ T7572]  ? __pfx___x64_sys_openat+0x10/0x10
[  231.222381][ T7572]  do_syscall_64+0xcd/0x490
[  231.222412][ T7572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.222441][ T7572] RIP: 0033:0x7f8929b8e929
[  231.222464][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.222493][ T7572] RSP: 002b:00007f892aa42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  231.222520][ T7572] RAX: ffffffffffffffda RBX: 00007f8929db5fa0 RCX: 00007f8929b8e929
[  231.222538][ T7572] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  231.222556][ T7572] RBP: 00007f8929c10b39 R08: 0000000000000000 R09: 0000000000000000
[  231.222573][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.222589][ T7572] R13: 0000000000000000 R14: 00007f8929db5fa0 R15: 00007ffd50ab0f08
[  231.222627][ T7572]  </TASK>
[  233.039249][ T7589] ubi0: attaching mtd0
[  233.078347][ T7589] ubi0: scanning is finished
[  233.121006][ T7589] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  233.408900][ T7592] IPVS: length: 131 != 8
[  233.420324][ T7589] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  234.045806][ T7618] IPVS: length: 131 != 8
[  235.636409][ T5840] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  235.662923][ T7642] zswap: compressor 000 not available
[  235.849024][ T7665] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input12
[  236.142299][ T7675] netlink: 'syz.1.353': attribute type 4 has an invalid length.
[  236.200653][ T7675] netlink: 314 bytes leftover after parsing attributes in process `syz.1.353'.
[  238.856552][ T7701] netlink: zone id is out of range
[  238.889932][ T7698] netlink: zone id is out of range
[  238.972703][ T7701] netlink: zone id is out of range
[  238.986580][ T7698] netlink: zone id is out of range
[  239.165974][ T7698] netlink: set zone limit has 8 unknown bytes
[  239.291069][ T7701] netlink: set zone limit has 8 unknown bytes
[  240.091524][ T7728] syz.2.360 (7728): attempted to duplicate a private mapping with mremap.  This is not supported.
[  240.725047][ T7744] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  240.790600][ T7744] 
[  241.172709][ T7755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.367'.
[  242.725743][ T5840] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  244.140995][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[  245.371140][ T7816] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.65535), cmd(3)
[  245.428125][ T7822] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.65535), cmd(3)
[  246.556487][   T30] audit: type=1800 audit(4294967366.755:6): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.384" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  249.631400][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.890893][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.183685][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.385996][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.571673][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.581606][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.600113][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.612714][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.634199][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.832978][   T13] bridge_slave_1: left allmulticast mode
[  250.843549][   T13] bridge_slave_1: left promiscuous mode
[  250.852883][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.887279][   T13] bridge_slave_0: left allmulticast mode
[  250.893152][   T13] bridge_slave_0: left promiscuous mode
[  250.908022][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.708547][ T5837] Bluetooth: hci3: command tx timeout
[  252.963583][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.015792][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.050154][   T13] bond0 (unregistering): Released all slaves
[  253.180198][   T13] HSR: left promiscuous mode
[  253.784002][   T30] audit: type=1800 audit(4294967374.002:7): pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  254.254321][   T13] hsr_slave_0: left promiscuous mode
[  254.261200][   T13] hsr_slave_1: left promiscuous mode
[  254.269986][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.283872][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.311726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.319360][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.405451][   T13] veth1_macvtap: left promiscuous mode
[  254.421243][   T13] veth0_macvtap: left promiscuous mode
[  254.434664][   T13] veth1_vlan: left promiscuous mode
[  254.451655][   T13] veth0_vlan: left promiscuous mode
[  254.777792][ T5837] Bluetooth: hci3: command tx timeout
[  256.847199][ T5837] Bluetooth: hci3: command tx timeout
[  256.920873][ T7974] ubi0: attaching mtd0
[  256.928103][ T7974] ubi0: scanning is finished
[  256.932797][ T7974] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  256.973969][ T7976] IPVS: length: 131 != 8
[  257.065986][ T7974] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  257.126290][   T13] team0 (unregistering): Port device team_slave_1 removed
[  257.301515][   T13] team0 (unregistering): Port device team_slave_0 removed
[  258.916681][ T5837] Bluetooth: hci3: command tx timeout
[  259.003837][ T7888] chnl_net:caif_netlink_parms(): no params data found
[  259.202193][ T8006] FAULT_INJECTION: forcing a failure.
[  259.202193][ T8006] name fail_futex, interval 1, probability 0, space 0, times 0
[  259.223592][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.0.414 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  259.223633][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  259.223661][ T8006] Call Trace:
[  259.223675][ T8006]  <TASK>
[  259.223686][ T8006]  dump_stack_lvl+0x16c/0x1f0
[  259.223739][ T8006]  should_fail_ex+0x512/0x640
[  259.223791][ T8006]  should_fail_futex+0x4c/0x60
[  259.223825][ T8006]  __x64_sys_futex+0x25e/0x4c0
[  259.223868][ T8006]  ? __pfx___x64_sys_futex+0x10/0x10
[  259.223907][ T8006]  ? xfd_validate_state+0x61/0x180
[  259.223961][ T8006]  do_syscall_64+0xcd/0x490
[  259.223993][ T8006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.224024][ T8006] RIP: 0033:0x7fe3cf38e929
[  259.224048][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.224077][ T8006] RSP: 002b:00007ffc89dc7be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  259.224105][ T8006] RAX: ffffffffffffffda RBX: 000000000003f6e9 RCX: 00007fe3cf38e929
[  259.224124][ T8006] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3cf5b5fac
[  259.224159][ T8006] RBP: 0000000000000032 R08: 00007fe3d026b000 R09: 0000000789dc7edf
[  259.224178][ T8006] R10: 00007ffc89dc7ce0 R11: 0000000000000246 R12: 00007fe3cf5b5fac
[  259.224211][ T8006] R13: 00007ffc89dc7ce0 R14: 000000000003f71b R15: 00007ffc89dc7d00
[  259.224269][ T8006]  </TASK>
[  259.649210][ T8014] ubi0: attaching mtd0
[  259.658171][ T8014] ubi0: scanning is finished
[  259.695755][ T8014] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  259.898922][ T8014] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  260.035928][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  260.042435][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  260.542843][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.558452][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.565809][ T7888] bridge_slave_0: entered allmulticast mode
[  260.576878][ T7888] bridge_slave_0: entered promiscuous mode
[  260.630177][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.646134][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.656765][ T7888] bridge_slave_1: entered allmulticast mode
[  260.664946][ T7888] bridge_slave_1: entered promiscuous mode
[  260.790589][ T7888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.845238][ T7888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.989785][ T7888] team0: Port device team_slave_0 added
[  261.026985][ T7888] team0: Port device team_slave_1 added
[  261.058708][ T8026] blktrace: Concurrent blktraces are not allowed on ram7
[  261.124384][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.135706][ T8026] FAULT_INJECTION: forcing a failure.
[  261.135706][ T8026] name failslab, interval 1, probability 0, space 0, times 0
[  261.140001][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.175083][ T7888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.180513][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.1.415 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  261.180564][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  261.180584][ T8026] Call Trace:
[  261.180595][ T8026]  <TASK>
[  261.180610][ T8026]  dump_stack_lvl+0x16c/0x1f0
[  261.180675][ T8026]  should_fail_ex+0x512/0x640
[  261.180729][ T8026]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  261.180783][ T8026]  should_failslab+0xc2/0x120
[  261.180817][ T8026]  __kmalloc_cache_noprof+0x6a/0x3e0
[  261.180868][ T8026]  ? do_raw_spin_unlock+0x172/0x230
[  261.180923][ T8026]  ? sched_core_share_pid+0x3ec/0x9f0
[  261.180968][ T8026]  sched_core_share_pid+0x3ec/0x9f0
[  261.181007][ T8026]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  261.181067][ T8026]  ? __pfx_sched_core_share_pid+0x10/0x10
[  261.181114][ T8026]  ? static_key_count+0x5a/0x70
[  261.181157][ T8026]  ? security_task_prctl+0x11c/0x160
[  261.181219][ T8026]  __do_sys_prctl+0x31a/0x24c0
[  261.181279][ T8026]  ? __pfx___do_sys_prctl+0x10/0x10
[  261.181347][ T8026]  do_syscall_64+0xcd/0x490
[  261.181382][ T8026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.181419][ T8026] RIP: 0033:0x7f793c18e929
[  261.181448][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.181481][ T8026] RSP: 002b:00007f793d024038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  261.181515][ T8026] RAX: ffffffffffffffda RBX: 00007f793c3b5fa0 RCX: 00007f793c18e929
[  261.181540][ T8026] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e
[  261.181560][ T8026] RBP: 00007f793c210b39 R08: 0000000000000000 R09: 0000000000000000
[  261.181582][ T8026] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  261.181604][ T8026] R13: 0000000000000000 R14: 00007f793c3b5fa0 R15: 00007ffc142706f8
[  261.181649][ T8026]  </TASK>
[  261.386253][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.393470][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.420892][ T7888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.629875][ T7888] hsr_slave_0: entered promiscuous mode
[  261.662678][ T7888] hsr_slave_1: entered promiscuous mode
[  261.688102][ T7888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.726249][ T7888] Cannot create hsr debugfs directory
[  262.624578][ T8067] netlink: 504 bytes leftover after parsing attributes in process `syz.0.421'.
[  262.736216][ T8070] netlink: 342 bytes leftover after parsing attributes in process `syz.0.422'.
[  263.080090][ T7888] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  263.107926][ T8065] blktrace: Concurrent blktraces are not allowed on ram7
[  263.139845][ T7888] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  263.161289][ T7888] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  263.264139][ T7888] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  264.364261][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.683099][ T7888] 8021q: adding VLAN 0 to HW filter on device team0
[  264.744421][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.751679][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.791157][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.798427][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.717248][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.135210][ T8154] IPVS: length: 131 != 8
[  267.761059][ T7888] veth0_vlan: entered promiscuous mode
[  268.115892][ T7888] veth1_vlan: entered promiscuous mode
[  268.350661][ T7888] veth0_macvtap: entered promiscuous mode
[  268.381318][ T7888] veth1_macvtap: entered promiscuous mode
[  268.519847][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.575691][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.679868][ T7888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.834656][ T7888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.854741][ T7888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.884342][ T7888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.181496][ T8195] netlink: 'syz.3.438': attribute type 10 has an invalid length.
[  269.250308][ T8195] netlink: 230 bytes leftover after parsing attributes in process `syz.3.438'.
[  269.510244][   T30] audit: type=1804 audit(4294967389.824:8): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.440" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1102 res=1 errno=0
[  269.610901][   T30] audit: type=1804 audit(4294967389.854:9): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.440" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1102 res=1 errno=0
[  269.755090][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.787251][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.952219][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.995214][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.839456][ T8229] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  271.356136][ T8242] blktrace: Concurrent blktraces are not allowed on ram7
[  275.247659][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'.
[  276.427920][ T8371] can: request_module (can-proto-0) failed.
[  277.352634][ T5837] Bluetooth: hci0: unexpected event 0x08 length: 440 > 4
[  279.875343][ T8444] zram: Removed device: zram0
[  281.039304][ T5837] Bluetooth: hci0: unexpected event 0x08 length: 440 > 4
[  284.665932][ T5837] Bluetooth: hci3: unexpected event 0x07 length: 440 > 255
[  284.898920][ T8538] random: crng reseeded on system resumption
		
	
	
	

	
	
	
	

	
	
	

	
		
		
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	

	






	
	

	

	
	


	








	






	





	





		







	
	

	
		
	


	
		

	


	
	

		
	
		
	
	



			








	





	




	
	


	

	

	


	
	




	

	
	
		
		


	
		
		

	
	

	









	










		










	


	








	





	






		








	

	
	
				
		




	

	

		
		
		


	


	
		

	

	
	
				
		




	

		


	


	
	

	
	
	

	

	
		

	
		

	


	
	

		
	
		
	
	



			








	





	













	
	
	
	



			
			
		
		

		


		


















	










	





	




		







	
	

	
		
	
	

	

	

	
	


		

	

	
	

	

	


	
		

	


	
	

		
	
		
	
	



			








	





	













	
	



	

	

	

		

		

		
		

		


		


















	










	





	





		







	

	
	
	
	
	

	


	


	
		
	
	
	

		




	

	
	
	
	
	
	
	

	
		
	

	
		

	


	
		
	
	
	

		




	

	

	
		

	


	
		
	
	
	

		




	

	
	

	

	
	
	
		


	
		



	
	
	




	
				
	




	
				
	

	




	
				
	




	
				

	
		

	


	
	

		
	
		
	
	



			








	




	




















	
	







	




















	






	





	




		








	
		

	


	
	

		
	
		
	
	



			








	


		

	



		

		


		


















	










	





	





		






	

	
		






		
		



	

				

			
	

				


		

				


	







	
		

	


	
	

		
	
		
	
	



			








	




	





		
		
			



			

		

		


	



		






	

		











	

	
	
















	





	





		






	

	
		
	
	

	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	








	
	




	

		











	

	
	
















	




	





		






	

	
		
	
	
	

	


	
		

	


	
	

		
	
		
	
	



			








	





	













	
	










		

		

		


		
		

		


		


















	










	




	




		






	

	
	
				
		




	

		


	




	




	




	
				
	

	
		
	




	
				
						
	

	
			
	

	
		
	


								


	

	
	

	

	

[  754.600486][T16911] ubi0: attaching mtd0
[  754.650785][T16911] ubi0: scanning is finished
[  754.798052][T16911] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  754.925168][T16912] IPVS: length: 131 != 8
[  755.346057][T16911] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  755.943872][ T5837] Bluetooth: hci5: unexpected subevent 0x01 length: 4 < 18
[  756.075632][   T30] audit: type=1800 audit(4294967659.656:24): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2132" name="dbroot" dev="configfs" ino=84848 res=0 errno=0
[  757.382892][   T30] audit: type=1800 audit(4294967660.983:25): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2133" name="discovery_nqn" dev="configfs" ino=83808 res=0 errno=0
[  762.389731][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2147'.
[  763.671409][T17038] ubi0: attaching mtd0
[  763.678247][T17038] ubi0: scanning is finished
[  763.683385][T17038] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  764.059994][T17038] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  764.224391][T17026] IPVS: length: 131 != 8
[  764.381416][T17039] ubi0: attaching mtd0
[  764.414972][T17039] ubi0: scanning is finished
[  764.452098][T17039] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  764.833031][T17033] IPVS: length: 131 != 8
[  764.844129][T17039] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  768.033064][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2158'.
[  771.178392][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2169'.
[  771.198358][T17135] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  774.530652][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2178'.
[  778.933078][T17242] ubi0: attaching mtd0
[  778.951573][T17242] ubi0: scanning is finished
[  778.990693][T17242] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  779.328558][T17250] usbip-vudc usbip-vudc.0: gadget not bound
[  779.354141][T17242] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  779.400386][T17238] IPVS: length: 131 != 8
[  779.751843][T17260] kAFS: No cell specified
[  779.968418][T17262] netlink: 'syz.4.2198': attribute type 1 has an invalid length.
[  782.306703][T17307] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  782.322679][T17307] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  782.332779][T17307] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  782.365753][T17307] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  782.492859][T17307] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  782.498983][T17307] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  782.576633][T17307] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  784.259334][T17341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'.
[  784.311918][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  784.394126][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  784.400257][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  784.406812][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout
[  784.551213][T17342] Bluetooth: hci5: command 0x0c1a tx timeout
[  786.619935][T17342] Bluetooth: hci5: command 0x0c1a tx timeout
[  786.624329][T17360] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  786.642323][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2224'.
[  786.685358][T17360] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  786.734162][T17360] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  786.754670][T17360] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  786.789201][T17360] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  787.578490][T17383] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2223'.
[  788.054769][T17342] Bluetooth: hci0: command 0x0c1a tx timeout
[  788.692594][T17342] Bluetooth: hci2: command 0x0c1a tx timeout
[  788.770042][T17342] Bluetooth: hci4: command 0x0c1a tx timeout
[  788.776122][T17342] Bluetooth: hci3: command 0x0406 tx timeout
[  788.848282][T15534] Bluetooth: hci5: command 0x0c1a tx timeout
[  791.274775][T17426] ubi0: attaching mtd0
[  791.280996][T17426] ubi0: scanning is finished
[  791.286807][T17426] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  791.417375][T17427] IPVS: length: 131 != 8
[  791.602966][T17439] netlink: 'syz.3.2237': attribute type 11 has an invalid length.
[  791.734585][T17426] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  791.837290][T17447] program syz.5.2236 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  791.850708][T17447] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  793.496948][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2241'.
[  793.662970][T17467] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  793.671219][T17467] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  793.796245][T17473] ubi0: attaching mtd0
[  793.805452][T17473] ubi0: scanning is finished
[  793.810219][T17473] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  793.857696][T17476] IPVS: length: 131 != 8
[  794.082403][T17473] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  794.860329][T17479] ubi0: attaching mtd0
[  794.878513][T17479] ubi0: scanning is finished
[  794.894453][T17479] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  794.936331][T17481] IPVS: length: 131 != 8
[  795.158404][T17479] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  795.675254][T17497] GUP no longer grows the stack in syz.5.2247 (17497): 14000-401000 (4000)
[  795.721162][T17497] CPU: 0 UID: 0 PID: 17497 Comm: syz.5.2247 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  795.721215][T17497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  795.721231][T17497] Call Trace:
[  795.721240][T17497]  <TASK>
[  795.721250][T17497]  dump_stack_lvl+0x16c/0x1f0
[  795.721300][T17497]  gup_vma_lookup+0x1d2/0x220
[  795.721331][T17497]  __get_user_pages+0x271/0x3b80
[  795.721375][T17497]  ? process_vm_rw_core.constprop.0+0x1d8/0x9a0
[  795.721423][T17497]  ? kasan_save_stack+0x42/0x60
[  795.721466][T17497]  ? __pfx___get_user_pages+0x10/0x10
[  795.721497][T17497]  ? register_lock_class+0x41/0x4c0
[  795.721533][T17497]  ? __x64_sys_process_vm_readv+0xe2/0x1c0
[  795.721576][T17497]  ? do_syscall_64+0xcd/0x490
[  795.721614][T17497]  __gup_longterm_locked+0x20d/0x1850
[  795.721650][T17497]  ? __lock_acquire+0xb8a/0x1c90
[  795.721693][T17497]  ? __pfx___gup_longterm_locked+0x10/0x10
[  795.721744][T17497]  pin_user_pages_remote+0xed/0x140
[  795.721778][T17497]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  795.721811][T17497]  ? mm_access+0x22d/0x2e0
[  795.721856][T17497]  process_vm_rw_core.constprop.0+0x41b/0x9a0
[  795.721917][T17497]  ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[  795.721966][T17497]  ? iovec_from_user+0xbb/0x140
[  795.722012][T17497]  ? iovec_from_user+0xbb/0x140
[  795.722042][T17497]  process_vm_rw+0x216/0x2c0
[  795.722089][T17497]  ? __pfx_process_vm_rw+0x10/0x10
[  795.722143][T17497]  ? __pfx___sys_sendmmsg+0x10/0x10
[  795.722212][T17497]  ? xfd_validate_state+0x61/0x180
[  795.722248][T17497]  ? __task_pid_nr_ns+0x17c/0x500
[  795.722289][T17497]  __x64_sys_process_vm_readv+0xe2/0x1c0
[  795.722336][T17497]  ? do_syscall_64+0x91/0x490
[  795.722363][T17497]  ? lockdep_hardirqs_on+0x7c/0x110
[  795.722406][T17497]  do_syscall_64+0xcd/0x490
[  795.722434][T17497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.722461][T17497] RIP: 0033:0x7fd6c258e929
[  795.722483][T17497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  795.722510][T17497] RSP: 002b:00007fd6c3346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  795.722537][T17497] RAX: ffffffffffffffda RBX: 00007fd6c27b6080 RCX: 00007fd6c258e929
[  795.722555][T17497] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000171
[  795.722572][T17497] RBP: 00007fd6c2610b39 R08: 0000000000000003 R09: 0000000000000000
[  795.722587][T17497] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  795.722603][T17497] R13: 0000000000000000 R14: 00007fd6c27b6080 R15: 00007ffe2f382a78
[  795.722638][T17497]  </TASK>
[  797.254023][T17526] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  798.953211][T17550] Invalid ELF header magic: != ELF
[  800.370477][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2264'.
[  800.633217][T17567] nvme_fabrics: missing parameter 'transport=%s'
[  800.745335][T17567] nvme_fabrics: missing parameter 'nqn=%s'
[  802.643000][T17607] program syz.3.2267 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  802.652996][T17607] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  806.880061][T17669] netlink: 'syz.3.2284': attribute type 1 has an invalid length.
[  807.527431][T17674] tc_dump_action: action bad kind
[  807.604886][T17679] 
[  807.607403][T17679] ======================================================
[  807.614466][T17679] WARNING: possible circular locking dependency detected
[  807.621511][T17679] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted
[  807.628646][T17679] ------------------------------------------------------
[  807.635693][T17679] syz.0.2285/17679 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  807.641803][T17679] ffffffff8e52ea68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470
[  807.641878][T17679] 
[  807.641878][T17679] but task is already holding lock:
[  807.641892][T17679] ffff888025c6f608 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  807.641967][T17679] 
[  807.641967][T17679] which lock already depends on the new lock.
[  807.641967][T17679] 
[  807.641977][T17679] 
[  807.641977][T17679] the existing dependency chain (in reverse order) is:
[  807.641987][T17679] 
[  807.641987][T17679] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}:
[  807.642032][T17679]        blk_alloc_queue+0x619/0x760
[  807.642062][T17679]        blk_mq_alloc_queue+0x175/0x290
[  807.642096][T17679]        __blk_mq_alloc_disk+0x29/0x120
[  807.642133][T17679]        loop_add+0x49e/0xb70
[  807.642161][T17679]        loop_init+0x164/0x270
[  807.642194][T17679]        do_one_initcall+0x120/0x6e0
[  807.642219][T17679]        kernel_init_freeable+0x5c2/0x900
[  807.642247][T17679]        kernel_init+0x1c/0x2b0
[  807.642271][T17679]        ret_from_fork+0x5d4/0x6f0
[  807.642300][T17679]        ret_from_fork_asm+0x1a/0x30
[  807.642321][T17679] 
[  807.642321][T17679] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  807.642351][T17679]        fs_reclaim_acquire+0x102/0x150
[  807.642375][T17679]        prepare_alloc_pages+0x162/0x610
[  807.642399][T17679]        __alloc_frozen_pages_noprof+0x18b/0x23f0
[  807.642431][T17679]        __alloc_pages_noprof+0xb/0x1b0
[  807.642461][T17679]        pcpu_populate_chunk+0x110/0xb00
[  807.642488][T17679]        pcpu_alloc_noprof+0x86a/0x1470
[  807.642517][T17679]        xt_percpu_counter_alloc+0x13e/0x1b0
[  807.642547][T17679]        find_check_entry.constprop.0+0xbc/0x9b0
[  807.642579][T17679]        translate_table+0xc98/0x1720
[  807.642609][T17679]        ipt_register_table+0x102/0x430
[  807.642640][T17679]        iptable_mangle_table_init+0x40/0x60
[  807.642673][T17679]        xt_find_table_lock+0x2e1/0x520
[  807.642702][T17679]        xt_request_find_table_lock+0x28/0xf0
[  807.642733][T17679]        get_info+0x190/0x610
[  807.642759][T17679]        do_ipt_get_ctl+0x169/0xa10
[  807.642788][T17679]        nf_getsockopt+0x7c/0xe0
[  807.642812][T17679]        ip_getsockopt+0x18c/0x1e0
[  807.642843][T17679]        tcp_getsockopt+0x9e/0x100
[  807.642862][T17679]        do_sock_getsockopt+0x3ff/0x800
[  807.642910][T17679]        __sys_getsockopt+0x123/0x1b0
[  807.642965][T17679]        __x64_sys_getsockopt+0xbd/0x160
[  807.643009][T17679]        do_syscall_64+0xcd/0x490
[  807.643035][T17679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.643066][T17679] 
[  807.643066][T17679] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  807.643103][T17679]        __lock_acquire+0x126f/0x1c90
[  807.643136][T17679]        lock_acquire+0x179/0x350
[  807.643169][T17679]        __mutex_lock+0x199/0xb90
[  807.643191][T17679]        pcpu_alloc_noprof+0xb4c/0x1470
[  807.643225][T17679]        blk_stat_alloc_callback+0xc8/0x280
[  807.643249][T17679]        wbt_init+0xac/0x540
[  807.643273][T17679]        queue_wb_lat_store+0x354/0x3d0
[  807.643312][T17679]        queue_attr_store+0x276/0x320
[  807.643351][T17679]        sysfs_kf_write+0xf2/0x150
[  807.643378][T17679]        kernfs_fop_write_iter+0x351/0x510
[  807.643404][T17679]        vfs_write+0x6c4/0x1150
[  807.643438][T17679]        ksys_write+0x12a/0x250
[  807.643472][T17679]        do_syscall_64+0xcd/0x490
[  807.643494][T17679]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.643523][T17679] 
[  807.643523][T17679] other info that might help us debug this:
[  807.643523][T17679] 
[  807.643532][T17679] Chain exists of:
[  807.643532][T17679]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18
[  807.643532][T17679] 
[  807.643581][T17679]  Possible unsafe locking scenario:
[  807.643581][T17679] 
[  807.643589][T17679]        CPU0                    CPU1
[  807.643597][T17679]        ----                    ----
[  807.643604][T17679]   lock(&q->q_usage_counter(io)#18);
[  807.643629][T17679]                                lock(fs_reclaim);
[  807.643647][T17679]                                lock(&q->q_usage_counter(io)#18);
[  807.643674][T17679]   lock(pcpu_alloc_mutex);
[  807.643691][T17679] 
[  807.643691][T17679]  *** DEADLOCK ***
[  807.643691][T17679] 
[  807.643698][T17679] 6 locks held by syz.0.2285/17679:
[  807.643713][T17679]  #0: ffff88805ea2d278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  807.643787][T17679]  #1: ffff8880310fc428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  807.643865][T17679]  #2: ffff888034f5cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  807.643933][T17679]  #3: ffff888141ffbb48 (kn->active#262){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  807.644002][T17679]  #4: ffff888025c6f608 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  807.644081][T17679]  #5: ffff888025c6f640 (&q->q_usage_counter(queue)#25){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  807.644182][T17679] 
[  807.644182][T17679] stack backtrace:
[  807.644194][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.0.2285 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) 
[  807.644222][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  807.644235][T17679] Call Trace:
[  807.644242][T17679]  <TASK>
[  807.644250][T17679]  dump_stack_lvl+0x116/0x1f0
[  807.644285][T17679]  print_circular_bug+0x275/0x350
[  807.644313][T17679]  check_noncircular+0x14c/0x170
[  807.644344][T17679]  __lock_acquire+0x126f/0x1c90
[  807.644377][T17679]  lock_acquire+0x179/0x350
[  807.644404][T17679]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  807.644434][T17679]  ? __pfx___might_resched+0x10/0x10
[  807.644455][T17679]  ? ksys_write+0x12a/0x250
[  807.644483][T17679]  ? do_syscall_64+0xcd/0x490
[  807.644501][T17679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.644524][T17679]  __mutex_lock+0x199/0xb90
[  807.644543][T17679]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  807.644573][T17679]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  807.644604][T17679]  ? __pfx___mutex_lock+0x10/0x10
[  807.644632][T17679]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  807.644660][T17679]  pcpu_alloc_noprof+0xb4c/0x1470
[  807.644695][T17679]  ? __pfx_wbt_data_dir+0x10/0x10
[  807.644726][T17679]  ? __pfx_wb_timer_fn+0x10/0x10
[  807.644747][T17679]  blk_stat_alloc_callback+0xc8/0x280
[  807.644768][T17679]  ? kasan_save_track+0x14/0x30
[  807.644801][T17679]  wbt_init+0xac/0x540
[  807.644823][T17679]  queue_wb_lat_store+0x354/0x3d0
[  807.644858][T17679]  ? __pfx_queue_wb_lat_store+0x10/0x10
[  807.644898][T17679]  ? __mutex_trylock_common+0xe9/0x250
[  807.644928][T17679]  ? __pfx_queue_wb_lat_store+0x10/0x10
[  807.644963][T17679]  queue_attr_store+0x276/0x320
[  807.644998][T17679]  ? __pfx_queue_attr_store+0x10/0x10
[  807.645031][T17679]  ? __lock_acquire+0x622/0x1c90
[  807.645065][T17679]  ? find_held_lock+0x2b/0x80
[  807.645085][T17679]  ? sysfs_file_kobj+0xe4/0x290
[  807.645112][T17679]  ? __pfx_queue_attr_store+0x10/0x10
[  807.645152][T17679]  sysfs_kf_write+0xf2/0x150
[  807.645178][T17679]  kernfs_fop_write_iter+0x351/0x510
[  807.645199][T17679]  ? __pfx_sysfs_kf_write+0x10/0x10
[  807.645226][T17679]  vfs_write+0x6c4/0x1150
[  807.645256][T17679]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  807.645280][T17679]  ? __pfx___mutex_lock+0x10/0x10
[  807.645300][T17679]  ? __pfx_vfs_write+0x10/0x10
[  807.645340][T17679]  ksys_write+0x12a/0x250
[  807.645386][T17679]  ? __pfx_ksys_write+0x10/0x10
[  807.645428][T17679]  do_syscall_64+0xcd/0x490
[  807.645452][T17679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.645478][T17679] RIP: 0033:0x7fe3cf38e929
[  807.645498][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  807.645523][T17679] RSP: 002b:00007fe3d0228038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  807.645546][T17679] RAX: ffffffffffffffda RBX: 00007fe3cf5b6160 RCX: 00007fe3cf38e929
[  807.645564][T17679] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000004
[  807.645580][T17679] RBP: 00007fe3cf410b39 R08: 0000000000000000 R09: 0000000000000000
[  807.645596][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.645612][T17679] R13: 0000000000000000 R14: 00007fe3cf5b6160 R15: 00007ffc89dc7a88
[  807.645636][T17679]  </TASK>
[  809.029472][T16531] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  809.153445][T16531] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  809.560207][T17057] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  809.588673][T17057] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.4.2154: Error -117 reading block bitmap for 2
[  809.706453][T17057] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  809.932800][T10064] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.006292][T10064] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.019747][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  810.019796][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  810.114461][T10064] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.192733][T10064] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.279902][T17684] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.0.2285: Error -117 reading block bitmap for 2
[  810.349503][T17684] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  810.362674][T10064] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.374334][T17684] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.0.2285: Error -117 reading block bitmap for 5
[  810.441571][T10064] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.457195][T17684] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  810.513737][T10064] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.587178][T10064] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.690425][T10064] bridge_slave_1: left allmulticast mode
[  810.705592][T10064] bridge_slave_1: left promiscuous mode
[  810.711370][T10064] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.733843][T10064] bridge_slave_0: left allmulticast mode
[  810.744592][T10064] bridge_slave_0: left promiscuous mode
[  810.751567][T10064] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.948141][T10064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.968388][T10064] bond0 (unregistering): Released all slaves
[  811.108530][T10064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  811.118542][T10064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  811.128487][T10064] bond0 (unregistering): Released all slaves
[  811.218844][T10064] tipc: Left network mode
[  811.590270][T10064] hsr_slave_1: left promiscuous mode
[  811.602362][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.609812][T10064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.625091][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.634610][T10064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.643397][T10064] hsr_slave_0: left promiscuous mode
[  811.649120][T10064] hsr_slave_1: left promiscuous mode
[  811.657233][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.664816][T10064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.673769][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.681347][T10064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.694366][T10064] veth1_macvtap: left promiscuous mode
[  811.699943][T10064] veth0_macvtap: left promiscuous mode
[  811.706270][T10064] veth1_macvtap: left promiscuous mode
[  811.712217][T10064] veth0_macvtap: left promiscuous mode
[  811.878115][T10064] team0 (unregistering): Port device team_slave_1 removed
[  811.902449][T10064] team0 (unregistering): Port device team_slave_0 removed
[  812.073964][T10064] team0 (unregistering): Port device team_slave_1 removed
[  812.098939][T10064] team0 (unregistering): Port device team_slave_0 removed
[  812.729006][T10064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.778439][T10064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.838212][T10064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.996259][T10064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.089143][T10064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.168681][T10064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.197903][T10064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.318590][T10064] bridge_slave_1: left allmulticast mode
[  813.332125][T10064] bridge_slave_1: left promiscuous mode
[  813.338022][T10064] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.362878][T10064] bridge_slave_0: left allmulticast mode
[  813.368558][T10064] bridge_slave_0: left promiscuous mode
[  813.390760][T10064] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.402882][T10064] bridge_slave_1: left allmulticast mode
[  813.408556][T10064] bridge_slave_1: left promiscuous mode
[  813.430818][T10064] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.451085][T10064] bridge_slave_0: left allmulticast mode
[  813.456760][T10064] bridge_slave_0: left promiscuous mode
[  813.470230][T10064] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.652903][T10064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.664738][T10064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  813.674967][T10064] bond0 (unregistering): Released all slaves
[  813.764743][T10064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.775770][T10064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  813.786285][T10064] bond0 (unregistering): Released all slaves
[  813.873843][T10064] ovs_: left promiscuous mode
[  813.910930][T10064] HfR: left promiscuous mode
[  814.464228][T10064] hsr_slave_0: left promiscuous mode
[  814.474314][T10064] hsr_slave_1: left promiscuous mode
[  814.480148][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.514348][T10064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.522235][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.533699][T10064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.556656][T10064] hsr_slave_0: left promiscuous mode
[  814.562516][T10064] hsr_slave_1: left promiscuous mode
[  814.574174][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.581594][T10064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.604728][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.612181][T10064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  814.653295][T10064] veth1_macvtap: left promiscuous mode
[  814.658830][T10064] veth0_macvtap: left promiscuous mode
[  814.672995][T10064] veth1_vlan: left promiscuous mode
[  814.678316][T10064] veth0_vlan: left promiscuous mode
[  814.697381][T10064] veth1_macvtap: left promiscuous mode
[  814.712705][T10064] veth0_macvtap: left promiscuous mode
[  814.718302][T10064] veth1_vlan: left promiscuous mode
[  814.732691][T10064] veth0_vlan: left promiscuous mode
[  814.962672][T10064] team0 (unregistering): Port device team_slave_1 removed
[  814.989399][T10064] team0 (unregistering): Port device team_slave_0 removed
[  815.179128][T10064] team0 (unregistering): Port device team_slave_1 removed
[  815.202521][T10064] team0 (unregistering): Port device team_slave_0 removed