last executing test programs:

4m36.789466732s ago: executing program 1 (id=1168):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket(0x2, 0x1, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async)
io_uring_setup$auto(0x1, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080) (async)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
lseek$auto(r2, 0xfffffffffffffffb, 0x3)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0)
ioctl$auto(r3, 0xc0285629, r3) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x6041, 0x0) (async)
socket(0x6, 0x2, 0x6) (async)
semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) (async)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)

4m35.813388694s ago: executing program 1 (id=1170):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000240)="848700128a1139f7fb3139bf0c6d767cef17eb566d4987ae1d21dd9aa4f7c2ffcb6996d22d4927d17ee8e327233b22d0e2b270ac4d4847fb89e55f7ee38c3ed16ecb464620257161", 0xfdb1}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x3b9fc3, 0x0)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x169040, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000080)=""/130, 0x82)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r2 = socket(0x1e, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x7fffffffffffffff, &(0x7f00000007c0)=0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000464f317c9feae6d3dd19f4e0009dd72bb4ec6c5da5bac42f5918a2ce4a62e57bb283b5", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25020000000c000500010000000000000005000a00ef000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc800)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001180)=""/187, 0xbb)
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0xffffffffffffffff, 0x8, 0x9, 0x80001)
linkat$auto(0xffffffffffffff9c, 0x0, r6, &(0x7f0000000200)='&&\x00', 0x2)
r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000180)=""/68, 0x44)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r7)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r7, 0x0, 0x20000000)

4m34.817825475s ago: executing program 1 (id=1174):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004)
unshare$auto(0x40000080)
socket(0x11, 0x3, 0x8)
socket(0x2, 0xa, 0xa)
writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9)
close_range$auto(0x2, 0x8, 0x3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(&(0x7f0000000380)='_k\x8ba59Be\x92\xdf\xd8Y&\x1bM\xb5\xaaH9\xd9\x84\x184P\xdb\xbaaDq% \x81\xa4\xa89\xf9\xd7\xef\xd2\x03\xdb!!\x99QBX@\xea\\z\xec\xb1\xcc,g\xb1L\x90/\xa80\x16\xc3\x97\x9e\x88G;\xe2Cpw$>\xb4\f^\x9a\x9c\n\x9e\xba9\xb4\xb9\x88\xbf\xd4\xach\x16x\xf0\xea\xcd\xbbnS\x88\xc3\xa3\x15]\xa1\x14\x93\xd31\x82kR\x87\xbc\xf2@\xbe\"\x98@\x80\x98\xd2\x8cz\xe7\xcdFHX\xf5ff\xef\xb2\xff\xcf\xd4\"\xef\x12\x88\bU4!\xee\x9d\n\xc7', 0x3)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_cpus\x00', 0x2, 0x0)
write$auto(r1, &(0x7f0000000040)='\x00', 0x7)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a)
mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000)
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x101002, 0x0)
read$auto(r3, 0x0, 0x39b8)

4m33.615748499s ago: executing program 1 (id=1176):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x6, 0x2e) (async)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x6, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) (async)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) (async)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq$auto(0x0, 0x6, 0x3, 0xff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/midiC2D2\x00', 0x101103, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x400040000000001, 0x6, 0xe2, 0x13, 0xffffffffffffffff, 0x7ff)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
socket(0xf, 0xa, 0x5) (async)
socket(0xf, 0xa, 0x5)
r3 = socket(0xa, 0x3, 0x5)
setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) (async)
setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) (async)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa)
shmctl$auto_SHM_LOCK(0xf, 0xb, &(0x7f0000000440)={{0x7fff, <r4=>0xee01, 0x0, 0x8, 0x80000001, 0x3, 0x5}, 0x6, 0x200, 0x0, 0x8, @raw=0x6, @raw=0x1, 0x7, 0x0, &(0x7f0000000340)="ca83e49b44131aadd9e6c683a220b4a427c12ccceac16571a7a5fcf2154407cb3448e8cd54d42317a624070e3581fbbc624037760b4238b12d9c483956084f43effacbd8a498902bb2", 0x0})
ioprio_get$auto(0x8, r4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffe56, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r1, @ANYBLOB="130026bd7000dddbdf250200000069777d91", @ANYRES32=r6, @ANYBLOB="e5ff61001b40105135ffe00010"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20049880)
connect$auto(0x3, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

4m32.003843822s ago: executing program 1 (id=1181):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000240)="848700128a1139f7fb3139bf0c6d767cef17eb566d4987ae1d21dd9aa4f7c2ffcb6996d22d4927d17ee8e327233b22d0e2b270ac4d4847fb89e55f7ee38c3ed16ecb464620257161", 0xfdb1}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x3b9fc3, 0x0)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x169040, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000080)=""/130, 0x82)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r2 = socket(0x1e, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x7fffffffffffffff, &(0x7f00000007c0)=0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000464f317c9feae6d3dd19f4e0009dd72bb4ec6c5da5bac42f5918a2ce4a62e57bb283b5", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25020000000c000500010000000000000005000a00ef000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc800)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001180)=""/187, 0xbb)
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0xffffffffffffffff, 0x8, 0x9, 0x80001)
linkat$auto(0xffffffffffffff9c, 0x0, r6, &(0x7f0000000200)='&&\x00', 0x2)
r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000180)=""/68, 0x44)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r7)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r7, 0x0, 0x20000000)

4m30.985311983s ago: executing program 1 (id=1182):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0d17d9c903ab09bcd65803000429bd700002dcdd250300000004000800044e6c00"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x9, 0x9) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000002c0), r0) (async)
lstat$auto(0x0, &(0x7f0000000640)={0x4, 0x1c, 0x8, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0xa0000000000000a, 0x40000404, 0xd, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (rerun: 64)
write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) (async)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket(0x2b, 0x5, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
io_uring_setup$auto(0x6, 0x0)
r5 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async, rerun: 64)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) (rerun: 64)
move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000)
r6 = getpgid(0x0)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r6, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xc64, 0x5, @_sigchld={r6, 0x0, 0x401, 0x5, 0x3}}})

4m15.91506363s ago: executing program 32 (id=1182):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0d17d9c903ab09bcd65803000429bd700002dcdd250300000004000800044e6c00"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x9, 0x9) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000002c0), r0) (async)
lstat$auto(0x0, &(0x7f0000000640)={0x4, 0x1c, 0x8, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0xa0000000000000a, 0x40000404, 0xd, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (rerun: 64)
write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) (async)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket(0x2b, 0x5, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000)
io_uring_setup$auto(0x6, 0x0)
r5 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async, rerun: 64)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) (rerun: 64)
move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000)
r6 = getpgid(0x0)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, r6, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xc64, 0x5, @_sigchld={r6, 0x0, 0x401, 0x5, 0x3}}})

14.828413052s ago: executing program 3 (id=2029):
r0 = fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyvf\x00', 0x200, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20a42, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0)
splice$auto(r0, &(0x7f0000000040)=0xd16b, r2, &(0x7f0000000080)=0x2, 0x2, 0xc)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$auto(r3, 0x6a, 0x4, 0x0, 0x4)
ioctl$auto_FS_IOC_MEASURE_VERITY2(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0xa, 0x0, "5ae3a8d7"})

12.829034192s ago: executing program 3 (id=2034):
mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xffffffffffffffff, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0))
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
read$auto(r0, 0x0, 0x1000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x100082)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
setsockopt$auto(r1, 0xc, 0xd, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567)
socket(0x29, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e80)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080)
r4 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(r4, 0x6, 0x12, 0x0, 0x40)
open(0x0, 0x80842, 0x91)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

8.805369358s ago: executing program 3 (id=2047):
open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x400d, 0x0)
r0 = socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fb\x00', 0x10b402, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x270)
setsockopt$auto(r0, 0x0, 0x13, 0x0, 0x8009)
r2 = socket(0x2, 0x3, 0x6)
socket(0x10, 0x2, 0x400)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0)
newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5e9c, 0x400000000000, 0x7, 0x8000, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x40000000002, 0xfffffffffffffff3, 0x1, 0x1, 0x7e, 0x800, 0x5, 0x101, 0xb288}, 0x0)

6.196147846s ago: executing program 3 (id=2057):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x18, &(0x7f0000000040)=@token_create={0x3}, 0x92)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x1ec, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ebf22f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5c78e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d6"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc8, 0x6e, 0x0, 0x1, [@nested={0x4f, 0x13, 0x0, 0x1, [@typed={0x4, 0x6a}, @nested={0x4, 0x6b}, @typed={0x4, 0x144}, @generic="c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a8", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0xb7, 0x0, 0x0, @str='nbw\x00'}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @str='nbd\x00'}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x7}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r1)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r5 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000000)=0xa)
r6 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media18\x00', 0x8000, 0x0)
sendfile$auto(r5, r6, &(0x7f0000000080)=0x100000001, 0x7fffffff)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r5)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PEER={0xa9, 0x28, 0x0, 0x1, [@generic="057db4403c2890d4b135313e092a8dbf473da044db328ea7a94a7a45b2ef926d93dec6e462cbe851aecd05e1d948e484adbcc7933e83593290d462e9b399dffbb7b399c42a1822673a8bc777836e7b60bc380fa58d2e942939c4f7e736abcde5a6f68d2019bc1461b52c712c594b12a4acff9f6fa77a5cc3025a24fbb5f51a643f69610e996c5a40091d447d6e650a85bc464ab5ae4e1f1a64fe7dec364ddb601dcf7e3635"]}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1ff}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x21f}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3d5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x820}, 0x20000000)
fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r0, 0xffffffe6, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="1b05db7b2bd9d26c4ffb2fed1c8fd4e4b1f82eaed029734df9848638835351b6d3e18979329c1eb5fb344023611160c90b1c1ae1adb46d9c3066f98ef1e3359489ecb03e04e5ff0b26f1d9c3a38b96ee2c2950245ec0924daf719a899440e9b02f748072696bd5aa09c0ed5d1561acf465c96d9d1848ca043fdbf015fdbca03979a74da508a14b805ab04c65021208fbf923d4a5d2d64637245e9414fbbabaa8d8ff07747dc64c0e19eba5cdc75eb01a004a3032d96394a28c573d42cbb6d54818", 0x40)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0)

5.497112582s ago: executing program 2 (id=2061):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000100)=@batch={0x0, 0x8, 0x7, 0x8, 0x9, r0, 0xffffffff00000001, 0xd8b}, 0x6f4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20005, 0xdf, 0x12, r1, 0x4)
r4 = open_by_handle_at$auto(r2, 0x0, 0x7d)
setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd)
mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040)
r5 = geteuid()
keyctl$auto(0x1e, r5, r5, 0x5, 0x8)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0xac, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1000}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e2136266093f2100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0xac}, 0x1, 0x68, 0x0, 0x24040084}, 0xd0)
sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYBLOB="25090000000400670014004a01000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51)
unshare$auto(0x20000)

4.273915749s ago: executing program 2 (id=2065):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.14/usb38/ep_00/type\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
unshare$auto(0x20000080)
r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r4=>r3, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0)
clock_adjtime$auto(0x10, &(0x7f0000000040)={0x3, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x7, 0x0, 0x5, 0x200, 0x80000000, {0x5, 0x2}, 0x80000000, 0x4, 0xff, 0x1, 0x0, 0x5, 0x6, 0x7, 0x81, 0x6e, 0x2})
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid/drivers/appleir/unbind\x00', 0x149100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000b40)=""/4096, 0x1000)
r6 = ioctl$auto_NS_GET_PID_IN_PIDNS(r4, 0x8004b708, &(0x7f0000000240)=0x77f8)
close_range$auto(r6, r3, 0xc)
adjtimex$auto(&(0x7f0000000140)={0x7, 0x0, 0xfff, 0x8000, 0x6, 0xa1b, 0x4, 0x0, 0x8, 0x9, 0x4000000000000, {0x6}, 0x66e6, 0xc3b, 0x81, 0x4, 0x0, 0x16, 0xb, 0x4, 0x7fffffffffffffff, 0x3, 0x10001})
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/asound/card1/pcm0p/sub7/status\x00', 0x140, 0x0)
read$auto_tomoyo_self_operations_securityfs_if(r4, &(0x7f0000000380)=""/218, 0xda)
read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000001f40)=""/28, 0x1c)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003040)=""/4088, 0xff8)

4.224624196s ago: executing program 3 (id=2066):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000240)="848700128a1139f7fb3139bf0c6d767cef17eb566d4987ae1d21dd9aa4f7c2ffcb6996d22d4927d17ee8e327233b22d0e2b270ac4d4847fb89e55f7ee38c3ed16ecb464620257161", 0xfdb1}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x3b9fc3, 0x0)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x169040, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000080)=""/130, 0x82)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r2 = socket(0x1e, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x7fffffffffffffff, &(0x7f00000007c0)=0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc800)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001180)=""/187, 0xbb)
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0xffffffffffffffff, 0x8, 0x9, 0x80001)
linkat$auto(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000200)='&&\x00', 0x2)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/68, 0x44)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r6)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r6, 0x0, 0x20000000)

4.116490116s ago: executing program 2 (id=2067):
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
socket(0xa, 0x1, 0x84) (async)
socket(0xa, 0x1, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x6, 0x11, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x2, 0x0, 0x7fffffff, 0x1ffffe, 0xfffffffffffffffc, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x100000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81)
rseq$auto(0x0, 0x8001, 0x40000202, 0x9) (async)
rseq$auto(0x0, 0x8001, 0x40000202, 0x9)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/dummy_pcm\x00', 0x400, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283)
pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) (async)
pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7)
mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) (async)
mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) (async)
mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003) (async)
bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0))
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2b, 0x1, 0x1)
ioctl$auto_dma_heap_fops_dma_heap(r2, 0x7, &(0x7f0000000380)="af02979f731441219e434c08cbd86d78dc3b79005c3338256a419475638500cb29898318583e333ff17ce64795a5c2a3f7ebd7ff1afeb5bfcdd4fbcf")
setsockopt$auto(r4, 0x0, 0x1, 0x0, 0x1e) (async)
setsockopt$auto(r4, 0x0, 0x1, 0x0, 0x1e)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0xfffffffffffffff8, 0x400028, 0xdf, 0x9b72, 0xffffffffffffffff, 0x3)
membarrier$auto(0x2, 0x0, 0x1) (async)
membarrier$auto(0x2, 0x0, 0x1)

3.317054364s ago: executing program 4 (id=2069):
mmap$auto(0x0, 0x2020089, 0x7, 0x13, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20007, 0x4004000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0)
mmap$auto(0x1b3, 0x8, 0x8, 0xeb1, r0, 0x400008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/macvlan0/force_igmp_version\x00', 0x4c2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0xa, 0x1, 0x84)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x39, 0xcad7)

3.201771075s ago: executing program 2 (id=2070):
mmap$auto(0x6, 0x9, 0x6, 0x32d0, 0x10000, 0x1000)
open(0x0, 0x64842, 0x0) (async)
epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) (async)
ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
mremap$auto(0x4000, 0xfee0, 0x7, 0x1c87, 0xfffff000)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)

3.032432153s ago: executing program 4 (id=2071):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0)
read$auto(r2, 0x0, 0x20) (async)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x680200, 0x0)
read$auto(r4, 0x0, 0x20)
mq_open$auto(0x0, 0x83, 0x9, 0x0) (async)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) (async)
getcwd$auto(0x0, 0xffffffffffffffff)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x3ff, 0x6) (async)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x6)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, 0x0)
ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) (async)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200, 0x0)
ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) (async)
fcntl$getown(r0, 0x9) (async)
sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x1cc}, 0x1, 0x0, 0x0, 0x40000000}, 0x8040)

2.975713623s ago: executing program 2 (id=2072):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/neigh/ip6_vti0/proxy_qlen\x00', 0x40100, 0x0)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(r0, 0x104000000000010e, 0xa, 0x0, 0x400)
r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x107, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7, 0x6d3c, 0x5, 0x80]}, 0x0)
write$auto(0x1, 0x0, 0x100)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/nbd0\x00', 0x2003, 0x0)
ioctl$auto_BLKREPORTZONE(r3, 0xc0101282, 0x0)

2.805796083s ago: executing program 4 (id=2073):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14bf02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1d, 0x2, 0x7)
preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq$auto(0x0, 0x6, 0x3, 0xff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x7, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev\x04|\x16\x00\x00\x00\x00\x00', 0x100000a3d9)
mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
socket(0x15, 0xa, 0x5)
ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149)
fcntl$auto_F_UNLCK(r2, 0x8, 0x2)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
io_uring_setup$auto(0x6, 0x0)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x8, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100)

2.378314197s ago: executing program 0 (id=2075):
r0 = socket(0x1d, 0x3, 0x1)
r1 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x4)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r2, r2, 0x0) (async)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x0, 0x0) (async)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0xc0585611, r3) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0}) (rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a)
setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)

2.158781478s ago: executing program 0 (id=2076):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000240)="848700128a1139f7fb3139bf0c6d767cef17eb566d4987ae1d21dd9aa4f7c2ffcb6996d22d4927d17ee8e327233b22d0e2b270ac4d4847fb89e55f7ee38c3ed16ecb464620257161", 0xfdb1}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x3b9fc3, 0x0)
r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x169040, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000080)=""/130, 0x82)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r2 = socket(0x1e, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x7fffffffffffffff, &(0x7f00000007c0)=0x1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc800)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001180)=""/187, 0xbb)
read$auto(0x3, 0x0, 0x7ffffffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000001c, 0xffffffffffffffff, 0x8, 0x9, 0x80001)
linkat$auto(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000200)='&&\x00', 0x2)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/68, 0x44)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r6)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r6, 0x0, 0x20000000)

2.023034819s ago: executing program 2 (id=2077):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r1 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x10010, r0, 0x300000000000)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/011/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x6, 0x10, 0x5, 0x7fb, 0x0})
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, 0x0, 0x8009)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800)
mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000006, 0x100000000, 0x0, 0x6, 0x2)
r3 = open$auto(&(0x7f0000000040)='./file0\x00', 0x20000ce9, 0x7)
ioctl$auto_MON_IOCH_MFLUSH(r3, 0x9208, 0x0)
io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, 0x0, 0x400)

1.758957952s ago: executing program 4 (id=2078):
r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range$auto(r0, r0, 0x5) (async)
socket(0x5, 0x800, 0x8001) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async)
clone3$auto(0x0, 0x1ffffffffff) (async)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x155) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x153101, 0x0)
close_range$auto(r0, 0x8, 0xffffff81) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(r0, 0x1, r3) (async)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x6) (async)
close_range$auto(0x2, 0x8, 0x0)
personality$auto(0x40004010410ffc) (async)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)

669.64593ms ago: executing program 0 (id=2079):
mmap$auto(0x0, 0x2020089, 0x7, 0x13, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20007, 0x4004000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0)
mmap$auto(0x1b3, 0x8, 0x8, 0xeb1, r0, 0x400008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/macvlan0/force_igmp_version\x00', 0x4c2, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0xa, 0x1, 0x84)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x39, 0xcad7)

609.137685ms ago: executing program 0 (id=2080):
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r1 = socketpair$auto(0x3ff, 0x1, 0xffffffff, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/fail-nth\x00', 0x402100, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
setsockopt$auto(r2, 0x6a, 0x5, 0x0, 0x3)
mmap$auto(0xe5fb, 0x2020009, 0x0, 0x10, r2, 0x400)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex, r2, 0x9c, 0x7b2, 0x1, @relative_id=0x81, 0x80}, 0x96)
bpf$auto(0x19, &(0x7f0000000040)=@bpf_attr_4={0xffffffffffff0001, r3, 0x5, r2}, 0x80092)
write$auto(0x3, 0x0, 0xfffffdef)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55)
write$auto(r4, 0x0, 0x100000a3d9)
r5 = waitid$auto_P_ALL(0x0, 0x400, &(0x7f00000001c0)={@_si_pad}, 0x7, &(0x7f0000000240)={{0xfffffffffffffffd, 0x2}, {0x3}, 0xfffffffffffffffc, 0x6, 0x5, 0x7, 0x7fff, 0x9, 0x2545, 0x6779, 0x3ff, 0x1, 0x3, 0x0, 0x2})
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a05095bfb8f95da422000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf25030000008100038008002d00", @ANYRES32=r5, @ANYBLOB="5db056f367de4fbd83f0933efb6c95ee7e3459e3ce32b57248bba61caec07c5262c2c773432e3e3bceebedd764f4d870a3b9b4717b79783bd08e945366ea258b21c9bca325d661f1cf1140630d65f080ca18c04a4c36d1387c39415fdb527f39db14004200fe8000000000000000000000000000370000000400080004000800"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004804)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)

481.483779ms ago: executing program 3 (id=2081):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
rename$auto(&(0x7f00000000c0)=':,\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
rename$auto(&(0x7f00000001c0)=':,/file0\x00', 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bdi/1:0/strict_limit\x00', 0x62e01, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)="bdcd", 0x2)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bond\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x25, 0x805, 0x3)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000003b80)='/proc/cmdline\x00', 0x400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

456.373621ms ago: executing program 4 (id=2082):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x11)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
getsockopt$auto(r0, 0x80083, 0x76, 0x0, 0x0)

454.193802ms ago: executing program 0 (id=2083):
r0 = socket(0x18, 0x2, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r1, 0x5522, 0xf15)
ioctl$auto(r1, 0x5523, r1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0)
sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fddbdf250800"/22], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0xc080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0)
utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000)
r4 = socket(0x18, 0x5, 0x1)
connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
mincore$auto(0x4, 0x498d, &(0x7f0000000300)='IPVS\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/162, 0xa2)
sysfs$auto(0xcf1, 0x5f, 0x9)
io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}})

144.877259ms ago: executing program 4 (id=2084):
ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0)
futex$auto(0x0, 0xd, 0x4, &(0x7f0000000000)={0x200000000000a, 0x6}, 0x0, 0x8)
open(0x0, 0x183242, 0x154)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop3\x00', 0x14f602, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setregid$auto(0xee00, 0x0)
ioctl$auto(0xffffffffffffffff, 0x89a0, 0x4)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(r2, 0x0, 0xfffbfd72)
utime$auto(&(0x7f0000000000)='./file0\x00', 0x0)
openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0)
madvise$auto(0x0, 0xfffffffffffeffff, 0x15)
mlockall$auto(0x8000000000000001)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x42040, 0x0)

0s ago: executing program 0 (id=2085):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b4d", 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
io_uring_setup$auto(0x6, 0x0)
socket(0x23, 0x5, 0x0)
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0)
madvise$auto(0x4, 0x3, 0x9d0)
read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/228, 0xe4)
listen$auto(0x3, 0x81)
socket(0x1d, 0x3, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/amidi2\x00', 0x4000, 0x0)
landlock_create_ruleset$auto(&(0x7f00000001c0)={0x52f6a786, 0x6, 0x1}, 0x2, 0xc465)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r4=>0x0, 0xfd}, 0x6a)
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
r5 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
close_range$auto(r5, r5, 0x7)
setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5)
syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000006d092de3b5ecafd239543d9f98236886f8e5319ed22968e62b550860cebb790faf5ff661bee2aa01aa2147969c7800cb41815c99ddc4328eeaa7700aa4e1325952e8335b2f000a65f861f93b4ac7589c8abbb065119f27f5450fdad480265585f437248cb501d7081f025275bf06007cec17097199b5e3f044aa0433748f09e13b7721c3352f3845939a5709d4358b12c62848d4323aaf0984", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf259900000008000c0100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24040044)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)

kernel console output (not intermixed with test programs):




	




	



	
	







	










		









		
	


		
	

		
	








	
	
	

	


	
	





	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	



	
	
	
	
	


		
		

		






	

	
	

	

		
		

	
		

	


	

	

		
	
		
	
	



			








	

	






	
	





































	
	
	










		
	
	




























	






	
	

	

	
	
		
	
	
	
	






	




	





		






		
	
		
		
	


		
	
	



			









	






	




	











	



	



	
	
		
		
	




	

		

		
		
	
	

			
			
		

		




		





	
	

























	


	







	

	

	
	



	


	




















	


	
	
	


		
	


	



	



	

		



	
	







		







		
	


		
	

		
	








	
	
	

	


	
	





	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	



	
	
	
	
	


		
		

		



		

	
	


		
	
	



			









	






	




	








	

	
	

	
	
	
	


	


	





	



		

	

















	




	



	
	







	











		









		
	


		
	

		
	








	
	
	

	


	
	





	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	



	
	
	
	
	


		
		

		




	
		

	


	
	

		
	
		
	
	



			








	





	





		





	
	


	
	














	
	
















	




	




		





	
	

	
	

	
	

	
	

	

		

		
		



	

	
	

	
	

	
	

	
	

	
		
	

	
		
	

	
		
	

	
		
		

	

	
		
		


		

		

	
	
	
	



	
	

	
	


		

	

	
		


		
	

	
		
	

	


	


	
	
	




	
				

	

	
				
	
	



	
		

	


	

	




	
				
	
	
	

	
		
		
	

				
	
	

		
		
		
	
	
	

				

		
		
	

	
		
	

	
		
	

	
		
	

	
	

	
	

	
	

	
	

	

	
		

	


	
	

		
	
		
	
	



			








	

	
	



	



















	
		
	
			
	






	





	




		











	

	
	

	
	

	

	
		

	


	

	

		
	
		
	
	



			








	

	















	

	


		
	
	





















	



	

	
	
		
		


	












	






















	















	











	





	





		







	
		
	



	
		
	




	
	
				
	
		

			
	
	
		
		
	
	
	
	
	
	
	




		
	




	
	
		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	
	
	
	

	

	


		


	
			

			

			

			

	

	
		

	
		

		
		

		
	
	

		
		

		
	
	


	
		


	
	

	

	


	


	





	

	









	

	




			
	
			
	
			
	
			
	


				


			


				


			
	
	
	
	
		

		
	

	
		
			
		

	
	

	

	
		

	
		

	


	
	

		
	
		
	
	

	



			








	

	
	


	




		

		

			



	







	




	






	







	






		









	

	
		

	
	
	
	
	
	
	

	
		
		
	

	
		

	
		

	


	
	

		
	
		
	
	

	



			








	





	















	










	






	
	






	


	







	



	


	






	






	







		













	
	
	
	
		
		




	

	

	


	

	

	
		



	

			
	
	

	
	
	
	

	
	
	
	

	
	

		
			
	
	
	

	
	
	

	
		

	
		
			
			


	
			

				

				

		

		
	

		

	
	


		
	
	

	



			









	






	




	




	
	












	

	
	














	

	





	



	
	


	


	

	







	





	

	
	
	








		

	



	


	




	



	
	







	







		






		
	


		
	

		
	








	
	
	

	


	
	





	

	
		
	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	



	
	
	
	
	


		
		

		








	
	
		

	
	


		
	
	

	



			









	






	




	




	
	












	

	
	














	

	





	



	
	


	


	

	







	





	

	
	
	








		

	



	


	




	



	
	







	







		






		
	


		
	

		
	








	
	
	

	


	
	





	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	









	
	
	
	
	


		
		

		




	
		
			
			


	







				
	
	
			






	
		

	


	
	

		
	
		
	
	

	



			








	






	






	
		
		
		
		
		

		


		


















	










	





	





		








		

		
		
	

	
		
	

	
				
	

		

		
		
	

	
		
	







				
		
	
	

	
		

	
				
	
	



	

		
			
	

			
	

			

			

			

			

			

			

			

			

	
				
	
		

			
	
	

	
	
	
	
	
	
	


	

	

	

		


			
	

		
	
	
	
		

	
	


		
	
	

	



			









	






	




	




	
	












	

	














	

	





	



	
	


	


	

	







	





	

	
	
	














	




	



	
	







	







		






		
	


		
	

		
	








	
	
	

	


	
	





	







	
	


	

	
		

		
	

	
	
		
	
	
		











	

	

	


	



	
	








	











	
	



	


	
		


		

	



	
	
	
	
	


		

		
		

		



			
	


	
		

	


	

	

		
	
		
	
	

	



			








	

	












	
	





	


	

		
	
	



















	

	






	




	
	







	

	






		






	












	






	




	




		






	
		
			
			


	

	
		

	


	
	

		
	
		
	
	

	



			








	




	




		










	

	



	



	


	


	






	




	





		






	

	
		
	

		
		
	

	
		

			
	



		


	
		

						
	
						
	

	
				
	
		
	


	
	
	
						
	

	
		

	


		

		
	
		
	
	

	



			








	










	



	
	

	
	
	

	



	

	




	



	



	


	






	






	




		






						
	
	

	

	
	
		
		


	

	

	
	
		
		


					
	

	

	
			

	
	
	

			

	
	
	

			



	
	

	

	

	





	

	









		









	

	









		






	


	

	

	


				


			
	


				




				


			
	


				



syzkaller
syzkaller login: [  535.587159][T13980] program syz.0.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  535.636283][T13980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  536.267371][T13992] netlink: zone id is out of range
[  536.272663][T13992] netlink: zone id is out of range
[  536.284519][T13992] netlink: zone id is out of range
[  536.308112][T13992] netlink: zone id is out of range
[  536.372263][T13992] netlink: zone id is out of range
[  536.408705][T13992] netlink: zone id is out of range
[  536.425280][T13992] netlink: zone id is out of range
[  536.481883][T13992] netlink: zone id is out of range
[  536.507077][T13992] netlink: zone id is out of range
[  536.513916][T13992] netlink: zone id is out of range
[  536.922191][T14012] FAULT_INJECTION: forcing a failure.
[  536.922191][T14012] name failslab, interval 1, probability 0, space 0, times 0
[  536.936580][T14012] CPU: 1 UID: 0 PID: 14012 Comm: syz.0.1606 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  536.936604][T14012] Tainted: [U]=USER
[  536.936609][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  536.936617][T14012] Call Trace:
[  536.936623][T14012]  <TASK>
[  536.936629][T14012]  dump_stack_lvl+0x16c/0x1f0
[  536.936653][T14012]  should_fail_ex+0x512/0x640
[  536.936672][T14012]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  536.936702][T14012]  should_failslab+0xc2/0x120
[  536.936720][T14012]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  536.936737][T14012]  ? security_file_alloc+0x34/0x2b0
[  536.936759][T14012]  security_file_alloc+0x34/0x2b0
[  536.936777][T14012]  init_file+0x93/0x4c0
[  536.936798][T14012]  alloc_empty_file+0x73/0x1e0
[  536.936818][T14012]  path_openat+0xda/0x2cb0
[  536.936834][T14012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.936854][T14012]  ? __pfx_path_openat+0x10/0x10
[  536.936875][T14012]  do_filp_open+0x20b/0x470
[  536.936891][T14012]  ? __pfx_do_filp_open+0x10/0x10
[  536.936920][T14012]  ? alloc_fd+0x471/0x7d0
[  536.936942][T14012]  do_sys_openat2+0x11b/0x1d0
[  536.936963][T14012]  ? __pfx_do_sys_openat2+0x10/0x10
[  536.936991][T14012]  __x64_sys_openat+0x174/0x210
[  536.937011][T14012]  ? __pfx___x64_sys_openat+0x10/0x10
[  536.937039][T14012]  do_syscall_64+0xcd/0x490
[  536.937059][T14012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.937073][T14012] RIP: 0033:0x7fdb7338ebe9
[  536.937084][T14012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  536.937098][T14012] RSP: 002b:00007fdb741d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  536.937111][T14012] RAX: ffffffffffffffda RBX: 00007fdb735b6090 RCX: 00007fdb7338ebe9
[  536.937121][T14012] RDX: 0000000000604400 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  536.937129][T14012] RBP: 00007fdb73411e19 R08: 0000000000000000 R09: 0000000000000000
[  536.937137][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  536.937145][T14012] R13: 00007fdb735b6128 R14: 00007fdb735b6090 R15: 00007ffc6f41ee98
[  536.937163][T14012]  </TASK>
[  544.586622][   T30] audit: type=1326 audit(4294967392.705:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14122 comm="syz.2.1629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e3998ebe9 code=0x0
[  545.408169][T14140] FAULT_INJECTION: forcing a failure.
[  545.408169][T14140] name fail_futex, interval 1, probability 0, space 0, times 0
[  545.524600][T14140] CPU: 1 UID: 0 PID: 14140 Comm: syz.0.1633 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  545.524646][T14140] Tainted: [U]=USER
[  545.524656][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  545.524672][T14140] Call Trace:
[  545.524682][T14140]  <TASK>
[  545.524693][T14140]  dump_stack_lvl+0x16c/0x1f0
[  545.524734][T14140]  should_fail_ex+0x512/0x640
[  545.524776][T14140]  get_futex_key+0x1d0/0x1560
[  545.524811][T14140]  ? __pfx_get_futex_key+0x10/0x10
[  545.524847][T14140]  ? kasan_save_stack+0x42/0x60
[  545.524874][T14140]  ? kasan_save_stack+0x33/0x60
[  545.524901][T14140]  ? kasan_save_track+0x14/0x30
[  545.524929][T14140]  ? kasan_save_free_info+0x3b/0x60
[  545.524973][T14140]  futex_wake+0xea/0x530
[  545.525014][T14140]  ? __pfx_futex_wake+0x10/0x10
[  545.525075][T14140]  do_futex+0x1e3/0x350
[  545.525109][T14140]  ? __pfx_do_futex+0x10/0x10
[  545.525150][T14140]  __x64_sys_futex+0x1e0/0x4c0
[  545.525188][T14140]  ? __pfx___x64_sys_futex+0x10/0x10
[  545.525219][T14140]  ? xfd_validate_state+0x61/0x180
[  545.525254][T14140]  ? __x64_sys_fsopen+0xd3/0x240
[  545.525296][T14140]  do_syscall_64+0xcd/0x490
[  545.525332][T14140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.525359][T14140] RIP: 0033:0x7fdb7338ebe9
[  545.525380][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.525406][T14140] RSP: 002b:00007fdb741f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  545.525432][T14140] RAX: ffffffffffffffda RBX: 00007fdb735b5fa8 RCX: 00007fdb7338ebe9
[  545.525450][T14140] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdb735b5fac
[  545.525468][T14140] RBP: 00007fdb735b5fa0 R08: 00007fdb741f4000 R09: 0000000000000000
[  545.525485][T14140] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  545.525501][T14140] R13: 00007fdb735b6038 R14: 00007ffc6f41edb0 R15: 00007ffc6f41ee98
[  545.525536][T14140]  </TASK>
[  546.351199][T14156] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1635'.
[  547.198813][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'.
[  547.627181][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'.
[  547.977388][T14192] random: crng reseeded on system resumption
[  548.334010][T14189] net_ratelimit: 162 callbacks suppressed
[  548.334033][T14189] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  552.161069][T14251] ima: policy update failed
[  552.175547][   T30] audit: type=1802 audit(4294967400.324:20): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1646" res=0 errno=0
[  553.553073][ T5878] Bluetooth: hci4: command 0x0406 tx timeout
[  554.370018][T14269] mkiss: ax0: crc mode is auto.
[  555.642186][T14308] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  558.729135][   T30] audit: type=1800 audit(4294967406.898:21): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1666" name="lu_gp_id" dev="configfs" ino=52853 res=0 errno=0
[  559.278372][T14357] FAULT_INJECTION: forcing a failure.
[  559.278372][T14357] name failslab, interval 1, probability 0, space 0, times 0
[  559.291622][T14357] CPU: 0 UID: 0 PID: 14357 Comm: syz.2.1667 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  559.291645][T14357] Tainted: [U]=USER
[  559.291650][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  559.291659][T14357] Call Trace:
[  559.291666][T14357]  <TASK>
[  559.291672][T14357]  dump_stack_lvl+0x16c/0x1f0
[  559.291695][T14357]  should_fail_ex+0x512/0x640
[  559.291715][T14357]  ? fs_reclaim_acquire+0xae/0x150
[  559.291736][T14357]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  559.291756][T14357]  should_failslab+0xc2/0x120
[  559.291775][T14357]  __kmalloc_noprof+0xd2/0x510
[  559.291800][T14357]  tomoyo_realpath_from_path+0xc2/0x6e0
[  559.291828][T14357]  ? tomoyo_profile+0x47/0x60
[  559.291842][T14357]  tomoyo_path_number_perm+0x245/0x580
[  559.291858][T14357]  ? tomoyo_path_number_perm+0x237/0x580
[  559.291876][T14357]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  559.291894][T14357]  ? find_held_lock+0x2b/0x80
[  559.291924][T14357]  ? find_held_lock+0x2b/0x80
[  559.291937][T14357]  ? hook_file_ioctl_common+0x145/0x410
[  559.291959][T14357]  ? __fget_files+0x20e/0x3c0
[  559.291978][T14357]  security_file_ioctl+0x9b/0x240
[  559.291996][T14357]  __x64_sys_ioctl+0xb7/0x210
[  559.292019][T14357]  do_syscall_64+0xcd/0x490
[  559.292039][T14357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.292054][T14357] RIP: 0033:0x7f4e3998ebe9
[  559.292066][T14357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.292080][T14357] RSP: 002b:00007f4e3a7db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  559.292093][T14357] RAX: ffffffffffffffda RBX: 00007f4e39bb5fa0 RCX: 00007f4e3998ebe9
[  559.292102][T14357] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000003
[  559.292110][T14357] RBP: 00007f4e3a7db090 R08: 0000000000000000 R09: 0000000000000000
[  559.292119][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.292127][T14357] R13: 00007f4e39bb6038 R14: 00007f4e39bb5fa0 R15: 00007fff57e5bd88
[  559.292145][T14357]  </TASK>
[  559.292152][T14357] ERROR: Out of memory at tomoyo_realpath_from_path.
[  561.550131][T14378] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  561.676880][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  561.684161][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  562.451068][T14390] ptrace attach of "./syz-executor exec"[14402] was attempted by "./syz-executor exec"[14390]
[  562.494660][T14400] FAULT_INJECTION: forcing a failure.
[  562.494660][T14400] name failslab, interval 1, probability 0, space 0, times 0
[  562.577832][T14400] CPU: 1 UID: 0 PID: 14400 Comm: syz.0.1678 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  562.577872][T14400] Tainted: [U]=USER
[  562.577880][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  562.577894][T14400] Call Trace:
[  562.577901][T14400]  <TASK>
[  562.577910][T14400]  dump_stack_lvl+0x16c/0x1f0
[  562.577944][T14400]  should_fail_ex+0x512/0x640
[  562.577976][T14400]  ? fs_reclaim_acquire+0xae/0x150
[  562.578019][T14400]  ? tomoyo_encode2+0x100/0x3e0
[  562.578049][T14400]  should_failslab+0xc2/0x120
[  562.578081][T14400]  __kmalloc_noprof+0xd2/0x510
[  562.578108][T14400]  ? d_absolute_path+0x136/0x1a0
[  562.578147][T14400]  tomoyo_encode2+0x100/0x3e0
[  562.578184][T14400]  tomoyo_encode+0x29/0x50
[  562.578213][T14400]  tomoyo_realpath_from_path+0x18f/0x6e0
[  562.578256][T14400]  tomoyo_path_number_perm+0x245/0x580
[  562.578283][T14400]  ? tomoyo_path_number_perm+0x237/0x580
[  562.578313][T14400]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  562.578342][T14400]  ? find_held_lock+0x2b/0x80
[  562.578396][T14400]  ? find_held_lock+0x2b/0x80
[  562.578419][T14400]  ? hook_file_ioctl_common+0x145/0x410
[  562.578458][T14400]  ? __fget_files+0x20e/0x3c0
[  562.578491][T14400]  security_file_ioctl+0x9b/0x240
[  562.578523][T14400]  __x64_sys_ioctl+0xb7/0x210
[  562.578563][T14400]  do_syscall_64+0xcd/0x490
[  562.578598][T14400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.578628][T14400] RIP: 0033:0x7fdb7338ebe9
[  562.578648][T14400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  562.578672][T14400] RSP: 002b:00007fdb741f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  562.578695][T14400] RAX: ffffffffffffffda RBX: 00007fdb735b5fa0 RCX: 00007fdb7338ebe9
[  562.578712][T14400] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000003
[  562.578727][T14400] RBP: 00007fdb741f3090 R08: 0000000000000000 R09: 0000000000000000
[  562.578741][T14400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.578752][T14400] R13: 00007fdb735b6038 R14: 00007fdb735b5fa0 R15: 00007ffc6f41ee98
[  562.578778][T14400]  </TASK>
[  562.581915][T14400] ERROR: Out of memory at tomoyo_realpath_from_path.
[  562.744781][    C1] vkms_vblank_simulate: vblank timer overrun
[  564.717368][T14417] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  564.723739][T14417] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  564.741673][T14417] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  564.777571][T14423] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  564.826179][T14441] FAULT_INJECTION: forcing a failure.
[  564.826179][T14441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  564.928269][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.4.1687 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  564.928309][T14441] Tainted: [U]=USER
[  564.928318][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  564.928332][T14441] Call Trace:
[  564.928341][T14441]  <TASK>
[  564.928350][T14441]  dump_stack_lvl+0x16c/0x1f0
[  564.928388][T14441]  should_fail_ex+0x512/0x640
[  564.928426][T14441]  _copy_from_user+0x2e/0xd0
[  564.928464][T14441]  do_fb_ioctl+0x19f/0x7e0
[  564.928501][T14441]  ? __pfx_do_fb_ioctl+0x10/0x10
[  564.928561][T14441]  ? find_held_lock+0x2b/0x80
[  564.928593][T14441]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  564.928660][T14441]  ? __fget_files+0x20e/0x3c0
[  564.928694][T14441]  fb_ioctl+0xe5/0x150
[  564.928727][T14441]  ? __pfx_fb_ioctl+0x10/0x10
[  564.928762][T14441]  __x64_sys_ioctl+0x18e/0x210
[  564.928802][T14441]  do_syscall_64+0xcd/0x490
[  564.928836][T14441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.928860][T14441] RIP: 0033:0x7fb6ac58ebe9
[  564.928880][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.928903][T14441] RSP: 002b:00007fb6ad345038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  564.928927][T14441] RAX: ffffffffffffffda RBX: 00007fb6ac7b6090 RCX: 00007fb6ac58ebe9
[  564.928944][T14441] RDX: 0000000000000000 RSI: 0000000000004605 RDI: 0000000000000003
[  564.928958][T14441] RBP: 00007fb6ad345090 R08: 0000000000000000 R09: 0000000000000000
[  564.928973][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.928987][T14441] R13: 00007fb6ac7b6128 R14: 00007fb6ac7b6090 R15: 00007ffc66a74ac8
[  564.929020][T14441]  </TASK>
[  565.102741][    C1] vkms_vblank_simulate: vblank timer overrun
[  565.156723][T14417] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  565.495236][T14417] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  565.553265][T14417] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  565.796456][T14408] kexec: Could not allocate control_code_buffer
[  566.048165][T11416] Bluetooth: hci2: command 0x0c1a tx timeout
[  566.117955][T14460] svc: failed to register nfsdv3 RPC service (errno 111).
[  566.164075][T14460] svc: failed to register nfsaclv3 RPC service (errno 111).
[  566.768596][T11416] Bluetooth: hci1: command 0x0c1a tx timeout
[  566.768618][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout
[  567.559967][ T5878] Bluetooth: hci4: command 0x0406 tx timeout
[  567.655660][T14504] program syz.3.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  568.839770][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout
[  569.629332][T11416] Bluetooth: hci4: command 0x0406 tx timeout
[  573.202227][T14593] __vm_enough_memory: pid: 14593, comm: syz.0.1713, bytes: 4398046511104 not enough memory for the allocation
[  573.507272][T11416] Bluetooth: hci3: unexpected subevent 0x05 length: 123 > 12
[  573.739658][T14598] could not allocate digest TFM handle 
[  575.518803][T11416] Bluetooth: hci3: command 0x0c1a tx timeout
[  580.592787][T11416] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9
[  581.314913][T14718] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd
[  581.380229][T14723] random: crng reseeded on system resumption
[  585.292105][T14781] random: crng reseeded on system resumption
[  587.314585][T14809] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  588.025806][   T30] audit: type=1400 audit(4294967436.330:22): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=14818 comm="syz.2.1765"
[  588.057653][T14824] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26
[  588.470481][T14826] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[  589.696087][T14854] FAULT_INJECTION: forcing a failure.
[  589.696087][T14854] name failslab, interval 1, probability 0, space 0, times 0
[  589.738065][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.4.1771 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  589.738106][T14854] Tainted: [U]=USER
[  589.738115][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  589.738130][T14854] Call Trace:
[  589.738139][T14854]  <TASK>
[  589.738149][T14854]  dump_stack_lvl+0x16c/0x1f0
[  589.738188][T14854]  should_fail_ex+0x512/0x640
[  589.738223][T14854]  ? fs_reclaim_acquire+0xae/0x150
[  589.738263][T14854]  ? tomoyo_encode2+0x100/0x3e0
[  589.738297][T14854]  should_failslab+0xc2/0x120
[  589.738330][T14854]  __kmalloc_noprof+0xd2/0x510
[  589.738360][T14854]  ? d_absolute_path+0x136/0x1a0
[  589.738403][T14854]  tomoyo_encode2+0x100/0x3e0
[  589.738443][T14854]  tomoyo_encode+0x29/0x50
[  589.738477][T14854]  tomoyo_realpath_from_path+0x18f/0x6e0
[  589.738524][T14854]  tomoyo_path_number_perm+0x245/0x580
[  589.738554][T14854]  ? tomoyo_path_number_perm+0x237/0x580
[  589.738588][T14854]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  589.738662][T14854]  ? find_held_lock+0x2b/0x80
[  589.738689][T14854]  ? hook_file_ioctl_common+0x145/0x410
[  589.738733][T14854]  ? __fget_files+0x20e/0x3c0
[  589.738769][T14854]  security_file_ioctl+0x9b/0x240
[  589.738806][T14854]  __x64_sys_ioctl+0xb7/0x210
[  589.738843][T14854]  do_syscall_64+0xcd/0x490
[  589.738887][T14854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.738913][T14854] RIP: 0033:0x7fb6ac58ebe9
[  589.738934][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.738960][T14854] RSP: 002b:00007fb6ad324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  589.738985][T14854] RAX: ffffffffffffffda RBX: 00007fb6ac7b6180 RCX: 00007fb6ac58ebe9
[  589.739003][T14854] RDX: 00002000000012c0 RSI: 0000000080044dff RDI: 0000000000000007
[  589.739020][T14854] RBP: 00007fb6ac611e19 R08: 0000000000000000 R09: 0000000000000000
[  589.739036][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.739052][T14854] R13: 00007fb6ac7b6218 R14: 00007fb6ac7b6180 R15: 00007ffc66a74ac8
[  589.739085][T14854]  </TASK>
[  589.739108][T14854] ERROR: Out of memory at tomoyo_realpath_from_path.
[  590.258859][T14851] FAULT_INJECTION: forcing a failure.
[  590.258859][T14851] name failslab, interval 1, probability 0, space 0, times 0
[  590.346640][T14851] CPU: 1 UID: 0 PID: 14851 Comm: syz.4.1771 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  590.346685][T14851] Tainted: [U]=USER
[  590.346694][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  590.346709][T14851] Call Trace:
[  590.346719][T14851]  <TASK>
[  590.346729][T14851]  dump_stack_lvl+0x16c/0x1f0
[  590.346770][T14851]  should_fail_ex+0x512/0x640
[  590.346807][T14851]  ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0
[  590.346843][T14851]  should_failslab+0xc2/0x120
[  590.346877][T14851]  kmem_cache_alloc_bulk_noprof+0x85/0xbc0
[  590.346912][T14851]  ? trace_kmem_cache_alloc+0x28/0xc0
[  590.346948][T14851]  ? kmem_cache_alloc_noprof+0x21e/0x3b0
[  590.346979][T14851]  ? mas_alloc_nodes+0x18b/0x8b0
[  590.347012][T14851]  ? mas_alloc_nodes+0x2f1/0x8b0
[  590.347038][T14851]  mas_alloc_nodes+0x2f1/0x8b0
[  590.347074][T14851]  mas_node_count_gfp+0x105/0x130
[  590.347106][T14851]  mas_preallocate+0x7e0/0xde0
[  590.347150][T14851]  ? __pfx_mas_preallocate+0x10/0x10
[  590.347194][T14851]  ? rcu_read_unlock+0x17/0x60
[  590.347228][T14851]  vma_link+0x135/0x6a0
[  590.347257][T14851]  ? __pfx_vma_link+0x10/0x10
[  590.347288][T14851]  ? anon_vma_clone+0x405/0x5c0
[  590.347311][T14851]  ? anon_vma_name+0x81/0x2f0
[  590.347346][T14851]  copy_vma+0x6c2/0xaa0
[  590.347377][T14851]  ? __pfx_copy_vma+0x10/0x10
[  590.347400][T14851]  ? __lock_acquire+0xb97/0x1ce0
[  590.347435][T14851]  ? register_lock_class+0x41/0x4c0
[  590.347477][T14851]  ? rcu_is_watching+0x12/0xc0
[  590.347506][T14851]  ? finish_task_switch.isra.0+0x221/0xc10
[  590.347531][T14851]  ? lockdep_hardirqs_on+0x7c/0x110
[  590.347564][T14851]  copy_vma_and_data+0x1cf/0x790
[  590.347594][T14851]  ? __pfx_copy_vma_and_data+0x10/0x10
[  590.347628][T14851]  ? __vma_enter_locked+0x163/0x3f0
[  590.347653][T14851]  ? find_held_lock+0x2b/0x80
[  590.347675][T14851]  ? move_vma+0x536/0x1780
[  590.347706][T14851]  move_vma+0x548/0x1780
[  590.347735][T14851]  ? __pfx_move_vma+0x10/0x10
[  590.347758][T14851]  ? mm_get_unmapped_area+0x95/0xe0
[  590.347793][T14851]  ? shmem_get_unmapped_area+0x170/0xa00
[  590.347815][T14851]  ? cap_mmap_addr+0x4b/0x120
[  590.347837][T14851]  ? bpf_lsm_mmap_addr+0x9/0x10
[  590.347867][T14851]  ? security_mmap_addr+0x6c/0x1e0
[  590.347896][T14851]  ? __get_unmapped_area+0x267/0x440
[  590.347930][T14851]  ? vrm_set_new_addr+0x208/0x290
[  590.347958][T14851]  mremap_to+0x1b7/0x450
[  590.347985][T14851]  do_mremap+0x13a3/0x2010
[  590.348025][T14851]  ? __pfx_do_mremap+0x10/0x10
[  590.348057][T14851]  ? up_write+0x1b2/0x520
[  590.348095][T14851]  __do_sys_mremap+0x119/0x170
[  590.348120][T14851]  ? __pfx___do_sys_mremap+0x10/0x10
[  590.348153][T14851]  ? __x64_sys_futex+0x1e0/0x4c0
[  590.348200][T14851]  do_syscall_64+0xcd/0x490
[  590.348231][T14851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.348254][T14851] RIP: 0033:0x7fb6ac58ebe9
[  590.348272][T14851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  590.348294][T14851] RSP: 002b:00007fb6ad366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  590.348317][T14851] RAX: ffffffffffffffda RBX: 00007fb6ac7b5fa0 RCX: 00007fb6ac58ebe9
[  590.348333][T14851] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000
[  590.348346][T14851] RBP: 00007fb6ac611e19 R08: 00007effffffb000 R09: 0000000000000000
[  590.348361][T14851] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  590.348374][T14851] R13: 00007fb6ac7b6038 R14: 00007fb6ac7b5fa0 R15: 00007ffc66a74ac8
[  590.348406][T14851]  </TASK>
[  591.006722][T14865] ptrace attach of "./syz-executor exec"[14866] was attempted by "./syz-executor exec"[14865]
[  591.921266][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'.
[  592.054147][T14894] ubi0: attaching mtd0
[  592.060356][T14894] ubi0: scanning is finished
[  592.065363][T14894] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  592.152979][T14895] Invalid ELF header magic: != ELF
[  592.377881][T14894] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  595.355986][T14925] kexec: Could not allocate control_code_buffer
[  596.116518][T14983] ubi0: attaching mtd0
[  596.123477][T14983] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039)
[  597.965591][T15008] nbd: couldn't find device at index 137
[  599.074783][T15034] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1804'.
[  599.147922][T15036] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  599.981927][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1806'.
[  602.445386][T15077] kexec: Could not allocate control_code_buffer
[  603.859961][T15090] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  603.871477][T15090] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  603.911159][T15090] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  603.935973][T15090] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  605.365934][T11416] Bluetooth: hci2: command 0x0c1a tx timeout
[  605.930732][T11416] Bluetooth: hci1: command 0x0c1a tx timeout
[  605.930765][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout
[  606.000658][ T5878] Bluetooth: hci4: command 0x0406 tx timeout
[  606.619656][T15142] sysfs_service_op_store: Client not running :-5:
[  606.644263][T15144] sysfs_service_op_store: Client not running :-5:
[  611.212255][T15129] kexec: Could not allocate control_code_buffer
[  619.713539][T15308] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1861'.
[  620.736481][T15318] mkiss: ax0: crc mode is auto.
[  621.811961][T15333] FAULT_INJECTION: forcing a failure.
[  621.811961][T15333] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  621.883304][T15333] CPU: 1 UID: 0 PID: 15333 Comm: syz.0.1868 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  621.883338][T15333] Tainted: [U]=USER
[  621.883343][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  621.883351][T15333] Call Trace:
[  621.883357][T15333]  <TASK>
[  621.883363][T15333]  dump_stack_lvl+0x16c/0x1f0
[  621.883386][T15333]  should_fail_ex+0x512/0x640
[  621.883409][T15333]  should_fail_alloc_page+0xe7/0x130
[  621.883430][T15333]  prepare_alloc_pages+0x3c2/0x610
[  621.883452][T15333]  ? rcu_is_watching+0x12/0xc0
[  621.883469][T15333]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  621.883489][T15333]  ? lock_acquire+0x179/0x350
[  621.883506][T15333]  ? find_held_lock+0x2b/0x80
[  621.883523][T15333]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  621.883546][T15333]  ? __lock_acquire+0x62e/0x1ce0
[  621.883566][T15333]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  621.883590][T15333]  ? policy_nodemask+0xea/0x4e0
[  621.883609][T15333]  alloc_pages_mpol+0x1fb/0x550
[  621.883628][T15333]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  621.883647][T15333]  ? __lock_acquire+0x62e/0x1ce0
[  621.883666][T15333]  folio_alloc_mpol_noprof+0x36/0x2f0
[  621.883687][T15333]  vma_alloc_folio_noprof+0xed/0x1e0
[  621.883707][T15333]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  621.883733][T15333]  do_pte_missing+0x2230/0x3ba0
[  621.883749][T15333]  ? find_held_lock+0x2b/0x80
[  621.883766][T15333]  __handle_mm_fault+0x152a/0x2a50
[  621.883786][T15333]  ? __pfx___handle_mm_fault+0x10/0x10
[  621.883801][T15333]  ? __pte_offset_map_lock+0x174/0x310
[  621.883820][T15333]  ? find_held_lock+0x2b/0x80
[  621.883839][T15333]  ? follow_page_pte.constprop.0+0x5cf/0x1390
[  621.883864][T15333]  handle_mm_fault+0x589/0xd10
[  621.883882][T15333]  __get_user_pages+0x551/0x34a0
[  621.883910][T15333]  ? __pfx___get_user_pages+0x10/0x10
[  621.883935][T15333]  populate_vma_page_range+0x267/0x3f0
[  621.883957][T15333]  ? __pfx_populate_vma_page_range+0x10/0x10
[  621.883978][T15333]  ? __pfx_find_vma_intersection+0x10/0x10
[  621.883998][T15333]  ? do_mmap+0x69c/0x1210
[  621.884018][T15333]  __mm_populate+0x1d8/0x380
[  621.884040][T15333]  ? __pfx___mm_populate+0x10/0x10
[  621.884062][T15333]  ? up_write+0x1b2/0x520
[  621.884082][T15333]  vm_mmap_pgoff+0x37f/0x470
[  621.884111][T15333]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  621.884134][T15333]  ? __x64_sys_futex+0x1e0/0x4c0
[  621.884150][T15333]  ? __x64_sys_futex+0x1e9/0x4c0
[  621.884169][T15333]  ksys_mmap_pgoff+0x7d/0x5c0
[  621.884187][T15333]  ? xfd_validate_state+0x61/0x180
[  621.884210][T15333]  __x64_sys_mmap+0x125/0x190
[  621.884233][T15333]  do_syscall_64+0xcd/0x490
[  621.884253][T15333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.884268][T15333] RIP: 0033:0x7fdb7338ebe9
[  621.884280][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.884293][T15333] RSP: 002b:00007fdb741f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  621.884306][T15333] RAX: ffffffffffffffda RBX: 00007fdb735b5fa0 RCX: 00007fdb7338ebe9
[  621.884315][T15333] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  621.884323][T15333] RBP: 00007fdb73411e19 R08: 0000000000000002 R09: 0000000800008000
[  621.884331][T15333] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  621.884339][T15333] R13: 00007fdb735b6038 R14: 00007fdb735b5fa0 R15: 00007ffc6f41ee98
[  621.884357][T15333]  </TASK>
[  622.819064][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  622.825594][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  623.441279][T15354] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1871'.
[  623.565636][T15355] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1871'.
[  627.692653][   T30] audit: type=1800 audit(4294967476.237:23): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1879" name="lu_gp_id" dev="configfs" ino=57619 res=0 errno=0
[  627.917014][T15387] kstrtoul() returned -22 for lu_gp_id
[  628.836739][T15393] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1878'.
[  629.775908][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'.
[  630.408118][T15400] syz.3.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  630.466868][T15400] CPU: 0 UID: 0 PID: 15400 Comm: syz.3.1881 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  630.466908][T15400] Tainted: [U]=USER
[  630.466916][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  630.466930][T15400] Call Trace:
[  630.466939][T15400]  <TASK>
[  630.466949][T15400]  dump_stack_lvl+0x16c/0x1f0
[  630.466987][T15400]  dump_header+0x101/0x930
[  630.467023][T15400]  oom_kill_process+0x272/0xa40
[  630.467059][T15400]  out_of_memory+0x350/0x1700
[  630.467097][T15400]  ? __pfx_out_of_memory+0x10/0x10
[  630.467137][T15400]  mem_cgroup_out_of_memory+0x118/0x130
[  630.467175][T15400]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  630.467220][T15400]  ? do_raw_spin_unlock+0x172/0x230
[  630.467263][T15400]  try_charge_memcg+0x72b/0xd50
[  630.467300][T15400]  ? __pfx_try_charge_memcg+0x10/0x10
[  630.467330][T15400]  ? __print_lock_name+0x71/0xe0
[  630.467356][T15400]  ? rcu_read_unlock+0x17/0x60
[  630.467398][T15400]  charge_memcg+0x8a/0x230
[  630.467429][T15400]  __mem_cgroup_charge+0x2b/0x1e0
[  630.467464][T15400]  do_pte_missing+0x2258/0x3ba0
[  630.467491][T15400]  ? find_held_lock+0x2b/0x80
[  630.467525][T15400]  __handle_mm_fault+0x152a/0x2a50
[  630.467563][T15400]  ? __pfx___handle_mm_fault+0x10/0x10
[  630.467592][T15400]  ? __pte_offset_map_lock+0x174/0x310
[  630.467627][T15400]  ? find_held_lock+0x2b/0x80
[  630.467662][T15400]  ? follow_page_pte.constprop.0+0x5cf/0x1390
[  630.467708][T15400]  handle_mm_fault+0x589/0xd10
[  630.467743][T15400]  __get_user_pages+0x551/0x34a0
[  630.467793][T15400]  ? __pfx___get_user_pages+0x10/0x10
[  630.467846][T15400]  populate_vma_page_range+0x267/0x3f0
[  630.467887][T15400]  ? __pfx_populate_vma_page_range+0x10/0x10
[  630.467923][T15400]  ? __pfx_find_vma_intersection+0x10/0x10
[  630.467959][T15400]  ? do_mmap+0x69c/0x1210
[  630.467998][T15400]  __mm_populate+0x1d8/0x380
[  630.468036][T15400]  ? __pfx___mm_populate+0x10/0x10
[  630.468076][T15400]  ? up_write+0x1b2/0x520
[  630.468114][T15400]  vm_mmap_pgoff+0x37f/0x470
[  630.468152][T15400]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  630.468184][T15400]  ? find_held_lock+0x2b/0x80
[  630.468216][T15400]  ? find_held_lock+0x2b/0x80
[  630.468245][T15400]  ksys_mmap_pgoff+0x7d/0x5c0
[  630.468286][T15400]  __x64_sys_mmap+0x125/0x190
[  630.468329][T15400]  do_syscall_64+0xcd/0x490
[  630.468364][T15400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.468388][T15400] RIP: 0033:0x7fcb57b8ebe9
[  630.468409][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  630.468432][T15400] RSP: 002b:00007fcb58a46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  630.468456][T15400] RAX: ffffffffffffffda RBX: 00007fcb57db5fa0 RCX: 00007fcb57b8ebe9
[  630.468472][T15400] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  630.468487][T15400] RBP: 00007fcb57c11e19 R08: 0000000000000002 R09: 0000000800008000
[  630.468502][T15400] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  630.468517][T15400] R13: 00007fcb57db6038 R14: 00007fcb57db5fa0 R15: 00007fff25f74418
[  630.468552][T15400]  </TASK>
[  630.468731][T15400] memory: usage 3072kB, limit 3072kB, failcnt 248429
[  630.819330][T15400] memory+swap: usage 123308kB, limit 9007199254740988kB, failcnt 0
[  630.861190][T15400] kmem: usage 1856kB, limit 9007199254740988kB, failcnt 0
[  630.868341][T15400] Memory cgroup stats for /syz3:
[  630.868633][T15400] cache 598016
[  630.877382][T15400] rss 557056
[  630.882213][T15400] rss_huge 0
[  630.885428][T15400] shmem 598016
[  630.888941][T15400] mapped_file 118784
[  630.892937][T15400] dirty 0
[  630.895880][T15400] writeback 0
[  630.899283][T15400] workingset_refault_anon 21635
[  630.904172][T15400] workingset_refault_file 48595
[  630.909356][T15400] swap 123121664
[  630.917640][T15400] swapcached 81920
[  630.923424][T15400] pgpgin 471924
[  630.930491][T15400] pgpgout 474674
[  630.934493][T15400] pgfault 478866
[  630.938032][T15400] pgmajfault 9197
[  630.941829][T15400] inactive_anon 794624
[  630.949755][T15400] active_anon 438272
[  630.953720][T15400] inactive_file 0
[  630.957349][T15400] active_file 0
[  630.963950][T15400] unevictable 0
[  630.969356][T15400] hierarchical_memory_limit 3145728
[  630.980308][T15400] hierarchical_memsw_limit 9223372036854771712
[  630.987733][T15400] total_cache 598016
[  631.014883][T15400] total_rss 557056
[  631.018638][T15400] total_rss_huge 0
[  631.060357][T15400] total_shmem 598016
[  631.081520][T15400] total_mapped_file 118784
[  631.099774][T15400] total_dirty 0
[  631.110000][T15400] total_writeback 0
[  631.139481][T15400] total_workingset_refault_anon 21635
[  631.166470][T15400] total_workingset_refault_file 48595
[  631.199544][T15400] total_swap 123121664
[  631.209241][T15400] total_swapcached 81920
[  631.213590][T15400] total_pgpgin 471924
[  631.243940][T15400] total_pgpgout 474674
[  631.332131][T15400] total_pgfault 478866
[  631.336413][T15400] total_pgmajfault 9197
[  631.354972][T15400] total_inactive_anon 794624
[  631.367453][T15400] total_active_anon 438272
[  631.395911][T15400] total_inactive_file 0
[  631.458923][T15400] total_active_file 0
[  631.477828][T15400] total_unevictable 0
[  631.496419][T15400] anon_cost 498
[  631.510389][T15400] file_cost 0
[  631.657130][T15400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1788,pid=14959,uid=0
[  631.699412][T15400] Memory cgroup out of memory: Killed process 14959 (syz.3.1788) total-vm:102092kB, anon-rss:980kB, file-rss:49772kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0
[  632.503562][T15429] snd_aloop snd_aloop.0: control 16781581:65539:5:�'x?F���/��zF˷fC���:7 is already present
[  633.236825][T15447] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1890'.
[  633.242447][T15448] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1890'.
[  634.035419][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'.
[  634.375990][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'.
[  634.410523][T15465] veth0_macvtap: left promiscuous mode
[  634.418240][T15465] macvtap0: entered promiscuous mode
[  634.443179][T15465] macvtap0: entered allmulticast mode
[  636.497072][T15486] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1901'.
[  636.643965][T15486] netlink: 'syz.2.1901': attribute type 1 has an invalid length.
[  636.692362][T15486] netlink: 'syz.2.1901': attribute type 2 has an invalid length.
[  636.723847][T15486] netlink: 'syz.2.1901': attribute type 7 has an invalid length.
[  636.921230][T15486] netlink: 214 bytes leftover after parsing attributes in process `syz.2.1901'.
[  639.189731][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'.
[  640.876800][T15340] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  640.884533][T15340] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  641.272630][T15562] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1913'.
[  643.107710][T15599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'.
[  643.248774][T15599] veth0_macvtap: left promiscuous mode
[  643.258819][T15599] macvtap0: entered promiscuous mode
[  643.285038][T15599] macvtap0: entered allmulticast mode
[  645.577607][T15634] FAULT_INJECTION: forcing a failure.
[  645.577607][T15634] name failslab, interval 1, probability 0, space 0, times 0
[  645.670299][T15634] CPU: 0 UID: 0 PID: 15634 Comm: syz.0.1932 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  645.670341][T15634] Tainted: [U]=USER
[  645.670348][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  645.670361][T15634] Call Trace:
[  645.670369][T15634]  <TASK>
[  645.670377][T15634]  dump_stack_lvl+0x16c/0x1f0
[  645.670431][T15634]  should_fail_ex+0x512/0x640
[  645.670466][T15634]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  645.670497][T15634]  should_failslab+0xc2/0x120
[  645.670529][T15634]  __kmalloc_cache_noprof+0x6a/0x3e0
[  645.670555][T15634]  ? __pfx_nfs_init_fs_context+0x10/0x10
[  645.670588][T15634]  ? fscontext_alloc_log+0x4a/0x1b0
[  645.670642][T15634]  fscontext_alloc_log+0x4a/0x1b0
[  645.670679][T15634]  __x64_sys_fsopen+0x157/0x240
[  645.670713][T15634]  do_syscall_64+0xcd/0x490
[  645.670747][T15634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.670769][T15634] RIP: 0033:0x7fdb7338ebe9
[  645.670791][T15634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  645.670816][T15634] RSP: 002b:00007fdb741d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  645.670841][T15634] RAX: ffffffffffffffda RBX: 00007fdb735b6090 RCX: 00007fdb7338ebe9
[  645.670858][T15634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  645.670874][T15634] RBP: 00007fdb73411e19 R08: 0000000000000000 R09: 0000000000000000
[  645.670889][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  645.670905][T15634] R13: 00007fdb735b6128 R14: 00007fdb735b6090 R15: 00007ffc6f41ee98
[  645.670938][T15634]  </TASK>
[  650.226281][T15340] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260
[  650.226315][T15340] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9
[  651.602488][T15740] vhci_hcd: invalid port number 23
[  651.744412][T15740] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub.
[  652.393074][T15758] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[  652.844665][T15759] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  654.188459][T15802] ACPI: Can not change Invalid GPE/Fixed Event status
[  655.326126][T15829] netlink: zone id is out of range
[  655.331813][T15829] netlink: zone id is out of range
[  655.337283][T15829] netlink: zone id is out of range
[  655.343820][T15829] netlink: zone id is out of range
[  655.349000][T15829] netlink: zone id is out of range
[  655.354549][T15829] netlink: zone id is out of range
[  655.359723][T15829] netlink: zone id is out of range
[  655.367114][T15829] netlink: zone id is out of range
[  655.372534][T15829] netlink: zone id is out of range
[  655.378765][T15829] netlink: zone id is out of range
[  656.378461][T15853] netlink: 'syz.4.1980': attribute type 16 has an invalid length.
[  656.386470][T15853] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1980'.
[  665.796327][T16044] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  665.886034][T16046] net_ratelimit: 1212 callbacks suppressed
[  665.886049][T16046] netlink: zone id is out of range
[  665.939475][T16046] netlink: zone id is out of range
[  665.951471][T16046] netlink: zone id is out of range
[  665.960512][T16046] netlink: zone id is out of range
[  666.005706][T16046] netlink: zone id is out of range
[  666.031655][   T30] audit: type=1800 audit(4294967514.752:24): pid=16049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2030" name="members" dev="configfs" ino=61171 res=0 errno=0
[  666.058455][T16046] netlink: zone id is out of range
[  666.144236][T16046] netlink: zone id is out of range
[  666.208703][T16046] netlink: zone id is out of range
[  666.249983][T16046] netlink: zone id is out of range
[  666.267516][T16046] netlink: zone id is out of range
[  670.191529][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2036'.
[  674.071334][   T30] audit: type=1800 audit(4294967522.869:25): pid=16162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2048" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  675.003736][   T30] audit: type=1800 audit(4294967523.673:26): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2050" name="dbroot" dev="configfs" ino=62593 res=0 errno=0
[  675.722671][T16194] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2055'.
[  675.992148][T16194] sd 0:0:1:0: PR command failed: 1026
[  676.011548][T16194] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  676.177087][T16194] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  676.817812][   T30] audit: type=1800 audit(4294967525.635:27): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2058" name="dbroot" dev="configfs" ino=62643 res=0 errno=0
[  679.691504][T16286] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input32
[  682.385838][   T30] audit: type=1800 audit(4294967531.235:28): pid=16334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2083" name="lu_gp_id" dev="configfs" ino=62929 res=0 errno=0
[  682.808253][T16345] ==================================================================
[  682.808272][T16345] BUG: KASAN: slab-out-of-bounds in do_con_write+0x3839/0x8280
[  682.808315][T16345] Write of size 2 at addr ffff88807d33efe2 by task syz.0.2085/16345
[  682.808338][T16345] 
[  682.808352][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.0.2085 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  682.808389][T16345] Tainted: [U]=USER
[  682.808397][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  682.808413][T16345] Call Trace:
[  682.808422][T16345]  <TASK>
[  682.808432][T16345]  dump_stack_lvl+0x116/0x1f0
[  682.808466][T16345]  print_report+0xcd/0x630
[  682.808498][T16345]  ? __virt_addr_valid+0x81/0x610
[  682.808529][T16345]  ? __phys_addr+0xe8/0x180
[  682.808560][T16345]  ? do_con_write+0x3839/0x8280
[  682.808592][T16345]  kasan_report+0xe0/0x110
[  682.808630][T16345]  ? do_con_write+0x3839/0x8280
[  682.808668][T16345]  do_con_write+0x3839/0x8280
[  682.808703][T16345]  ? srcu_gp_start_if_needed+0xda0/0xe70
[  682.808751][T16345]  ? __pfx___mutex_lock+0x10/0x10
[  682.808784][T16345]  ? __pfx_do_con_write+0x10/0x10
[  682.808834][T16345]  con_write+0x23/0xb0
[  682.808868][T16345]  n_tty_write+0x41f/0x11e0
[  682.808901][T16345]  ? __pfx_n_tty_write+0x10/0x10
[  682.808924][T16345]  ? rcu_is_watching+0x12/0xc0
[  682.808950][T16345]  ? __pfx_woken_wake_function+0x10/0x10
[  682.808989][T16345]  ? kfree+0x24f/0x4d0
[  682.809011][T16345]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  682.809047][T16345]  ? __pfx_n_tty_write+0x10/0x10
[  682.809067][T16345]  file_tty_write.constprop.0+0x504/0x9b0
[  682.809102][T16345]  redirected_tty_write+0xd4/0x150
[  682.809135][T16345]  vfs_write+0x7d0/0x11d0
[  682.809164][T16345]  ? __pfx_redirected_tty_write+0x10/0x10
[  682.809200][T16345]  ? __pfx_vfs_write+0x10/0x10
[  682.809226][T16345]  ? find_held_lock+0x2b/0x80
[  682.809261][T16345]  ksys_write+0x12a/0x250
[  682.809289][T16345]  ? __pfx_ksys_write+0x10/0x10
[  682.809323][T16345]  do_syscall_64+0xcd/0x490
[  682.809357][T16345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.809383][T16345] RIP: 0033:0x7fdb7338ebe9
[  682.809402][T16345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.809428][T16345] RSP: 002b:00007fdb741f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  682.809453][T16345] RAX: ffffffffffffffda RBX: 00007fdb735b5fa0 RCX: 00007fdb7338ebe9
[  682.809471][T16345] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004
[  682.809487][T16345] RBP: 00007fdb73411e19 R08: 0000000000000000 R09: 0000000000000000
[  682.809503][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.809519][T16345] R13: 00007fdb735b6038 R14: 00007fdb735b5fa0 R15: 00007ffc6f41ee98
[  682.809546][T16345]  </TASK>
[  682.809555][T16345] 
[  682.809561][T16345] Allocated by task 15875:
[  682.809574][T16345]  kasan_save_stack+0x33/0x60
[  682.809601][T16345]  kasan_save_track+0x14/0x30
[  682.809627][T16345]  __kasan_kmalloc+0xaa/0xb0
[  682.809651][T16345]  __kmalloc_noprof+0x223/0x510
[  682.809677][T16345]  vc_do_resize+0x1de/0x10e0
[  682.809704][T16345]  vt_ioctl+0x2ca4/0x30a0
[  682.809726][T16345]  tty_ioctl+0x65e/0x1680
[  682.809755][T16345]  __x64_sys_ioctl+0x18e/0x210
[  682.809790][T16345]  do_syscall_64+0xcd/0x490
[  682.809828][T16345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.809860][T16345] 
[  682.809866][T16345] The buggy address belongs to the object at ffff88807d33e800
[  682.809866][T16345]  which belongs to the cache kmalloc-1k of size 1024
[  682.809891][T16345] The buggy address is located 1268 bytes to the right of
[  682.809891][T16345]  allocated 750-byte region [ffff88807d33e800, ffff88807d33eaee)
[  682.809917][T16345] 
[  682.809924][T16345] The buggy address belongs to the physical page:
[  682.809951][T16345] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d338
[  682.809973][T16345] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  682.809993][T16345] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  682.810017][T16345] page_type: f5(slab)
[  682.810047][T16345] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[  682.810071][T16345] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  682.810097][T16345] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[  682.810121][T16345] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  682.810146][T16345] head: 00fff00000000003 ffffea0001f4ce01 00000000ffffffff 00000000ffffffff
[  682.810169][T16345] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  682.810184][T16345] page dumped because: kasan: bad access detected
[  682.810196][T16345] page_owner tracks the page as allocated
[  682.810205][T16345] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6138, tgid 6134 (syz.0.38), ts 94393029807, free_ts 94245834667
[  682.810246][T16345]  post_alloc_hook+0x1c0/0x230
[  682.810272][T16345]  get_page_from_freelist+0x132b/0x38e0
[  682.810299][T16345]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  682.810328][T16345]  alloc_pages_mpol+0x1fb/0x550
[  682.810356][T16345]  new_slab+0x247/0x330
[  682.810377][T16345]  ___slab_alloc+0xcf2/0x1740
[  682.810398][T16345]  __slab_alloc.constprop.0+0x56/0xb0
[  682.810422][T16345]  __kmalloc_noprof+0x2f2/0x510
[  682.810448][T16345]  ieee802_11_parse_elems_full+0x1db/0x3780
[  682.810473][T16345]  ieee80211_inform_bss+0x10b/0x1140
[  682.810509][T16345]  cfg80211_inform_single_bss_data+0x8ea/0x1df0
[  682.810539][T16345]  cfg80211_inform_bss_data+0x224/0x3bd0
[  682.810565][T16345]  cfg80211_inform_bss_frame_data+0x26f/0x750
[  682.810594][T16345]  ieee80211_bss_info_update+0x310/0xab0
[  682.810631][T16345]  ieee80211_scan_rx+0x4cf/0xb30
[  682.810666][T16345]  ieee80211_rx_list+0x1bdb/0x2980
[  682.810691][T16345] page last free pid 6134 tgid 6134 stack trace:
[  682.810704][T16345]  __free_frozen_pages+0x7d5/0x10f0
[  682.810726][T16345]  __put_partials+0x165/0x1c0
[  682.810749][T16345]  qlist_free_all+0x4d/0x120
[  682.810773][T16345]  kasan_quarantine_reduce+0x195/0x1e0
[  682.810806][T16345]  __kasan_slab_alloc+0x69/0x90
[  682.810835][T16345]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  682.810864][T16345]  mas_alloc_nodes+0x18b/0x8b0
[  682.810891][T16345]  mas_node_count_gfp+0x105/0x130
[  682.810919][T16345]  mas_preallocate+0x7e0/0xde0
[  682.810953][T16345]  __split_vma+0x34a/0x1070
[  682.810977][T16345]  vma_modify+0x16dc/0x2030
[  682.811000][T16345]  vma_modify_flags+0x212/0x2d0
[  682.811026][T16345]  mprotect_fixup+0x1df/0xb40
[  682.811049][T16345]  do_mprotect_pkey+0x9ca/0xd50
[  682.811072][T16345]  __x64_sys_mprotect+0x78/0xc0
[  682.811096][T16345]  do_syscall_64+0xcd/0x490
[  682.811126][T16345] 
[  682.811133][T16345] Memory state around the buggy address:
[  682.811145][T16345]  ffff88807d33ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  682.811163][T16345]  ffff88807d33ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  682.811181][T16345] >ffff88807d33ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  682.811194][T16345]                                                        ^
[  682.811210][T16345]  ffff88807d33f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  682.811228][T16345]  ffff88807d33f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  682.811242][T16345] ==================================================================
[  682.830264][T16345] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  682.830290][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.0.2085 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  682.830329][T16345] Tainted: [U]=USER
[  682.830338][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  682.830355][T16345] Call Trace:
[  682.830364][T16345]  <TASK>
[  682.830374][T16345]  dump_stack_lvl+0x3d/0x1f0
[  682.830413][T16345]  vpanic+0x6e8/0x7a0
[  682.830451][T16345]  ? __pfx_vpanic+0x10/0x10
[  682.830492][T16345]  ? do_con_write+0x3839/0x8280
[  682.830525][T16345]  panic+0xca/0xd0
[  682.830594][T16345]  ? __pfx_panic+0x10/0x10
[  682.830631][T16345]  ? do_con_write+0x3839/0x8280
[  682.830666][T16345]  ? preempt_schedule_common+0x44/0xc0
[  682.830698][T16345]  ? preempt_schedule_thunk+0x16/0x30
[  682.830731][T16345]  check_panic_on_warn+0xab/0xb0
[  682.830764][T16345]  end_report+0x107/0x170
[  682.830794][T16345]  kasan_report+0xee/0x110
[  682.830836][T16345]  ? do_con_write+0x3839/0x8280
[  682.830876][T16345]  do_con_write+0x3839/0x8280
[  682.830913][T16345]  ? srcu_gp_start_if_needed+0xda0/0xe70
[  682.830959][T16345]  ? __pfx___mutex_lock+0x10/0x10
[  682.830993][T16345]  ? __pfx_do_con_write+0x10/0x10
[  682.831035][T16345]  con_write+0x23/0xb0
[  682.831066][T16345]  n_tty_write+0x41f/0x11e0
[  682.831098][T16345]  ? __pfx_n_tty_write+0x10/0x10
[  682.831121][T16345]  ? rcu_is_watching+0x12/0xc0
[  682.831147][T16345]  ? __pfx_woken_wake_function+0x10/0x10
[  682.831186][T16345]  ? kfree+0x24f/0x4d0
[  682.831208][T16345]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  682.831244][T16345]  ? __pfx_n_tty_write+0x10/0x10
[  682.831269][T16345]  file_tty_write.constprop.0+0x504/0x9b0
[  682.831308][T16345]  redirected_tty_write+0xd4/0x150
[  682.831342][T16345]  vfs_write+0x7d0/0x11d0
[  682.831372][T16345]  ? __pfx_redirected_tty_write+0x10/0x10
[  682.831408][T16345]  ? __pfx_vfs_write+0x10/0x10
[  682.831435][T16345]  ? find_held_lock+0x2b/0x80
[  682.831471][T16345]  ksys_write+0x12a/0x250
[  682.831500][T16345]  ? __pfx_ksys_write+0x10/0x10
[  682.831533][T16345]  do_syscall_64+0xcd/0x490
[  682.831568][T16345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.831595][T16345] RIP: 0033:0x7fdb7338ebe9
[  682.831615][T16345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.831641][T16345] RSP: 002b:00007fdb741f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  682.831665][T16345] RAX: ffffffffffffffda RBX: 00007fdb735b5fa0 RCX: 00007fdb7338ebe9
[  682.831683][T16345] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004
[  682.831699][T16345] RBP: 00007fdb73411e19 R08: 0000000000000000 R09: 0000000000000000
[  682.831715][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.831732][T16345] R13: 00007fdb735b6038 R14: 00007fdb735b5fa0 R15: 00007ffc6f41ee98
[  682.831758][T16345]  </TASK>
[  682.832042][T16345] Kernel Offset: disabled