last executing test programs:

5.88131471s ago: executing program 0 (id=267):
keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
r0 = inotify_init1$auto(0x3000000000000)
read$auto_component_list_fops_(r0, &(0x7f0000000300)=""/187, 0xbb)
socket(0x2c, 0x4, 0x0)
getsockopt$auto(0x2, 0x114, 0x2711, 0xfffffffffffffffc, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0)
fanotify_init$auto(0x800, 0x100000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x42a3, 0x0)
socket(0x11, 0x2, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x100101, 0x7, 0x2}, {0xff, 0x5, 0x52, 0x5, 0x1, 0x40, 0x6, 0x8, 0x100000004}})
r3 = io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}})
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8)
r4 = fanotify_init$auto(0xba, 0x0)
fanotify_mark$auto(r4, 0x205, 0x9, r3, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
getpid()

5.497618358s ago: executing program 3 (id=270):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x560a, 0x7)

5.317478328s ago: executing program 3 (id=272):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0)
mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x0)
r0 = socket(0x22, 0x2, 0x4000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40040)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0)
mmap$auto(0x33d, 0x402000d, 0xfffffffffffffffd, 0xeb1, 0x401, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
get_mempolicy$auto(0x0, 0x0, 0xc, 0x1fd, 0x4000569)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000000100)="4ceac02070916ed1dc1f91", 0xb)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x8800)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r4 = socket(0x2, 0xa, 0x1)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000}, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0)

4.625930716s ago: executing program 1 (id=273):
r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000180), r0)
sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1)
socket(0xf, 0x3, 0x2)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
socket(0x2, 0x1, 0x0)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r6, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0)
socket(0x1d, 0x2, 0x3)
ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7})
madvise$auto(0x110c230000, 0x8031ca, 0x9)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r7, &(0x7f000000be80)='batadv0\x00', 0xf)
futimesat$auto(r5, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x8c, 0x301})
r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r7, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="e3db28bd7000fcdbdf2510000001"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
socket(0x2, 0x801, 0x100)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0)

4.593578238s ago: executing program 3 (id=274):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
mprotect$auto(0x8000, 0x8, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x5, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0)
syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf)
close_range$auto(0x2, 0x8, 0x0)
clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x3, 0x66)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x4, 0xdf, 0x15, 0x401, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x8040, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)

3.508983679s ago: executing program 0 (id=276):
open(0x0, 0x90400, 0x92)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x31000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
io_uring_setup$auto(0xf, 0x0)
r0 = socket(0x18, 0xa, 0x1)
openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0)
r1 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
pread64$auto(r1, 0x0, 0x200000000c, 0x3)
ioctl$auto(0x3, 0x80045500, 0x38)
r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0)
ioctl$auto(r2, 0x3b8a, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xfffffdef)
timer_create$auto(0x3, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500014cc1e1aa191f19fafe0d769a2954c6faa9bba3935c373400bc5dcf7be9273911e2cb400d183d49627ad6bfb927558af5e62972b16380b761b83c79a250210ccb7bbc7d4c00"/83, @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40)
mmap$auto(0x8, 0xc, 0x8009, 0xcb1, r0, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x200)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r3)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1fc, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x1e5, 0x3, 0x0, 0x1, [@generic="68d468aed23591b857d5e822112ef2f17d3ddfb9b1c9530eee3bee38d443db4ab80288f0c39462de7a11e137e09e2c26a0c81d28509f11f4bc147865be452d796f4cc6ac747ff7934cdad246f3da304974852108dbb91179f3f39cadb004c60310ac1e2d4af0bb060f9d5a26d78594d6e88141609ca81f7e883e7305ad3236e689ebf0857c9b1bcc49927d80af6bb6a268d3844c61b9473965ec22571797bdd0235f7e4d445ea649cd9fb2b96ea157d93b8755913c66f89109da55c92e557b9774b17a6500cd0cfc3852639d2a70cf107a2dea4886b424f876028163454bafd266199ba03122136b31fda3414874d52fdf0bc827f7bd7487da", @typed={0xdd, 0x49, 0x0, 0x0, @binary="750e9e20390cc642db5e460744ebd504930ca6fad06a26d84d3bd3615aa9c2c53619ed65882922b72f70305235eccb53c3f3b28f73007a00967b45956fbadfd89eb9c3bc2a79647e45419000a93e32dbdfcc8feafb91411f260453e720c67a242715f9a1edac574e1b07042dd7860afd60b4b52c8432e3f466c378f926ee90d02391e6b696b84fc9530a637e6805cee7658394321396a5c524d7104574bcab444c8e033e6f80e01640ecbb1162f3bc577e15b1fb048ec46e99fe2cc1aee23e2814971315ccf4d3f8b40e4f9a7dec2b181c9ddcf06ef8ec54c1"}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@empty}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

3.202886797s ago: executing program 2 (id=277):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptya7\x00', 0x60440, 0x0)
r0 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_usercopy/space\x00', 0x0, 0x0)
ioctl$auto(r0, 0x80, r0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
write$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000080)="d83740606ed836b969c981b23b52cf57f2d31c6667a9b973ebe72950b7784e6b57fdf0a100a2c7e4c97fdac1b5c6d7daa18ed5", 0x33) (async)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
write$auto(0x3, 0x0, 0x7fffffff)
r2 = epoll_create$auto(0x1)
fremovexattr$auto(r2, &(0x7f0000000000)='&\x00')
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/54, 0x36) (async)
write$auto(0x1, 0x0, 0x10080000000) (async)
mmap$auto(0x6dea, 0x5, 0x9, 0x17, r1, 0x10001)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec18\x00', 0x1c0, 0x0) (async)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x121000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) (async)
write$auto(r3, &(0x7f0000000400)='\x05deo1\x00', 0x100000a3d9) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10)

2.895533437s ago: executing program 0 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r0)
sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x14, r1, 0x901, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)

2.82603111s ago: executing program 2 (id=279):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
r1 = getsockopt$auto(r0, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x20009, 0xff, 0xeb1, 0xffffffffffffffff, 0x8003)
r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0)
write$auto_ftrace_event_filter_fops_trace_events(r2, 0x0, 0x0)
write$auto(r1, 0x0, 0xfdef)
memfd_secret$auto(0x0)
lseek$auto(0xffffffffffffffff, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4000044)
mmap$auto(0x2, 0x202000b, 0x3, 0xeb3, 0xfffffffffffffffa, 0x7ffd)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x105)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
clock_getres$auto(0x10, &(0x7f0000000080)={0x5, 0x200})
socket(0x21, 0x1, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x15, 0x5, 0x0)
r4 = pipe$auto(0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000001c0), r3)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc880}, 0x4c090)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9)
write$auto(0x6, 0x0, 0x100000001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)

2.766713809s ago: executing program 1 (id=280):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x560a, 0x7)

2.647954908s ago: executing program 0 (id=281):
mincore$auto(0x4, 0x9, &(0x7f0000000040)='/dev/radio6\x00')
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi17\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto(0x3, 0x8901, 0x38)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
r0 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
setsockopt$auto(0x3, 0x114, 0x1, 0xffffffffffffffff, 0x3)
sendmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0xc3b3, 0x5}, 0x8}, 0x1, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x7, 0x5, 0x948b, 0x1000, 0x6, 0xffffffffffffffff, 0x5, 0x62, 0x5, 0x20000005, 0x5, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x2000000007, 0x6, 0xc, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, r3, 0xfffffffffffffffb)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
mmap$auto(0x0, 0x7, 0x4000000000df, 0x78, 0x4, 0x300000000000)

2.542035921s ago: executing program 1 (id=282):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff)
mmap$auto(0x7fffffffffffffff, 0x20009, 0xdf, 0xffffffffffffffff, r0, 0x8000)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x7cf702, 0x0)
mmap$auto(0x0, 0x810004, 0x2, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0)
mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2)
clock_adjtime$auto(0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2, 0x20003, 0xdf, 0xeb1, 0xffffffffffffffff, 0x3)
socket(0xa, 0x3, 0x87)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2)

2.109532131s ago: executing program 2 (id=283):
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
getpid()
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xbd087c0d81108f0d}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x881)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r6 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000140), 0x204100, 0x0)
sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x23c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x228, 0x2, 0x0, 0x1, [@generic="76fd5b7bad738f8fd79dc4af173ae6df164c515a9aba0d50d072409ba50a488fa877ea51f692ed27a863c946182027f639d307785905212719934945e38d8bc017f5b3e7b5f1dac6d18c2ab6c04701d4db4e3a3ff528102ed2f3edbe571a9557fe14150fb57c789896627fc134b5f70b23fd3aad288080e32313590393fbba60f1a0db063be84bc42764a03875a14e2afb974141840fac2baee5168670d6f1bd63b4676d95cf73fb17bcfc2113ee5bb9efcc82b3ec522f83f84b0bb8f21c4d218f0513c6a4f2", @typed={0xaf, 0x14d, 0x0, 0x0, @binary="24f5292dc5a8d6a63460ec447d87aa4277edf972b0ec5ab2cac21ad827eaee481356fb6aab6c8a4bcfe6b03f24891783e332dcbca9593be31e5f0abf9757c9cb4e8d44bf7a603905dab96f5e27ae6f0a8b18543ac2e0dfae08fb5584b56c27c0377d4f16bda59dafcf2c7ae094fd40dbbaf39cbaddebc19ddcd8f38a952e03062038f6bc48aaf9c69c6700ca76b26386eac90887aa131f3b3b9d019c8c6d350f77268b23ab7833a6b9c8e7"}, @generic="c3d90bbb8ac36b5b2ca35f14e72225c94d6b670c6ce2c2930dd5034b0953bdacc8e066ce5be4acf6992abd13b91da6b4789d5a5112e06ecbc6b55d36f573a6e3766ba25b0363c1b6eae6eda67d3db94186c1ff8da8b300260b04f0c81b83e678aea2ab6845af83deb21533da0b9147a21d55e433e03f4547805ff5ad11e1fb8a35dda01d7022c4c69dae4a636a8fac0144e6403eb9a9a65e7e336117bf8e7a831d768eaf350a", @typed={0x8, 0x91, 0x0, 0x0, @fd=r6}]}]}, 0x23c}}, 0x4000000)
socket(0x10, 0x2, 0x6)
epoll_create$auto(0x4)
socket(0x2b, 0x1, 0x1)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ttyS3\x00', 0xa080, 0x0)
ioctl$auto(r7, 0x5402, 0xffffffffffffffff)
socket(0x2, 0x801, 0x100)
socket(0x28, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000640), r4)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x4, 0xd, 0x1, 0x948b, 0x8, 0x15f4da08, 0x1, 0x3, 0x7f, 0x80000001, 0xffffffff, 0x6, 0x3, 0x5, 0xfffffffffffffffd]}, 0x0)
epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0)

1.301962671s ago: executing program 3 (id=284):
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
mmap$auto(0x0, 0x1c000000000, 0x7fffffff, 0xeb1, 0x401, 0x8000)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffe, 0x10400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000)
ioperm$auto(0x90f6, 0x2, 0x5)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbdf700fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044)

1.155855934s ago: executing program 0 (id=285):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0)
read$auto(r0, &(0x7f0000000780)='/sys/kernel/debug/lru_gen\x00', 0xd)
recvmmsg$auto(r0, &(0x7f0000000340)={{0x0, 0xe2d, &(0x7f00000002c0)={&(0x7f0000000280)="418a308f2818218d9ae6b9066543ec8ff8f41ac6db", 0x2}, 0x7, &(0x7f0000000300)="39f33644eb", 0x80, 0xfffffff7}, 0x1000}, 0x10000, 0x9, &(0x7f0000000380)={0x7fff, 0x200})
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181000, 0x0)
close_range$auto(0x0, r1, 0x2)
r2 = socket(0x1e, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
getsockopt$auto_SO_DOMAIN(r1, 0xa0e8, 0x27, &(0x7f0000000100)='-7(-\x00', &(0x7f0000000180)=0x10000)
r3 = fanotify_init$auto(0x200, 0x1)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_flowlabel\x00', 0x2000, 0x0)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
fspick$auto(r3, &(0x7f0000000080)='./file0\x00', 0x7550)
fanotify_mark$auto(0x0, 0x1, 0x9, r4, 0x0)
fanotify_mark$auto(r2, 0x90, 0x3, 0xffffffffffffffff, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/45, 0x2d)

1.134026589s ago: executing program 1 (id=286):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x1c3481, 0x0)
write$auto(r0, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacn\x05\xbd\xdd\x89\x93\xb8\'\xc2f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x2)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/duplex\x00', 0x109202, 0x0)
r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a)
r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0xdb33, 0xdf, 0x18, r1, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r4, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
write$auto(r5, 0x0, 0x100082)
ioctl$auto_SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000001c0)="1350")
socket(0xa, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_STOP_AP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1ccf0700", @ANYRES16=0x0, @ANYBLOB="020728bd7000fedbdf251000000006001a0104000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)=""/44, 0x2c)
r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0)
read$auto(r8, 0x0, 0x1ff)

857.432477ms ago: executing program 2 (id=287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0xfffffffffffffe47, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c000380050001800300000004000280080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044)

856.532816ms ago: executing program 3 (id=288):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
memfd_secret$auto(0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
clock_getres$auto(0x10, &(0x7f0000000080)={0x5, 0x200})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x30000, 0x4000000}, 0x0)

750.842405ms ago: executing program 1 (id=289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r0)
sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x14, r1, 0x901, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)

527.675379ms ago: executing program 2 (id=290):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x560a, 0x7)

494.648541ms ago: executing program 1 (id=291):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xf813, 0x4, 0xe2, 0xffffffffffffffff, 0xffffffffffffffff, 0xec)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/block/nbd13/queue/add_random\x00', 0x8200, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0)
ioctl$auto(0xffffffffffffffff, 0x80004d00, r2)
read$auto(r1, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x8)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4008ae89, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000140)={{0x67, <r5=>0xffffffffffffffff, <r6=>0x0, 0x5, 0x5, 0xccd, 0xfffb}, 0xe, 0xfffffffffffffff9, 0xd9, 0x9, @raw=0x1, @inferred=<r7=>0x0, 0x4, 0x0, &(0x7f00000000c0)="88915931af2376e5a31021a61cfb9a52a8234052f1d1d4eb96e795de03796b5f66a6026793c7e26bd18e59fd281cb2f0c3955d18da71705eaed9c98b8dd7e6aeb15cbdb776be964bc9fdb4de44a05e4a", &(0x7f0000000400)="3aed7b0cac16d27f41b0187813a0e48d49f345746184ea320575abe35da7edb4c54a14b5382669b54b3dcb6911ae15b3947a24e9a9cfd69da18f58e904dd7cdad780629ef3b050de64a60fd8e084fbd04f9dd5b12547f4a86377308fc87618e143cbf1aa0c3859ea3409f79f93c9f5ea2de88c969d3cfb2f2ee68e4fe4c4a117f44c77d48e2abe02917f18b05542f36166693e2883dc039cb7897f62a959965b477f8e07aad8f03475a67ef7b7de2f284d4933b779578dae628a91fbc62d933e9247208c407700"})
setregid$auto(0xee00, r6)
shmctl$auto_SHM_LOCK(0x6, 0xb, &(0x7f0000000300)={{0x9, r5, 0xffffffffffffffff, 0xffffffbf, 0xfffffc01, 0x2, 0x7f}, 0x4, 0x5, 0x8000, 0x5, @inferred=r7, @inferred=0xffffffffffffffff, 0x200, 0x0, &(0x7f00000001c0), &(0x7f0000000240)="33dd20c44dfd0534435ebeaa343f2e479d893b7c4adc1a2577c17ddb10a931616fb75cc0461bfd8c"})
r8 = socket(0x2b, 0x1, 0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioctl$auto(r8, 0x89a0, 0x4)
r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="013280bd7000fddbdf251600000018000180140002006e657464657673696d3000000000000005000200090000000500040008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)

323.502551ms ago: executing program 2 (id=292):
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54", 0xcb6)
socket(0x5, 0x3, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
mmap$auto(0xfefffffefffffffe, 0x40009, 0xe3, 0x9b7e, 0xffffffffffffffff, 0x28003)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r1, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan1/user_power_level\x00', 0x111700, 0x0)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0xa)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0xa}, 0x1)
mmap$auto(0x1, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x73)

241.042882ms ago: executing program 3 (id=293):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9)
ioctl$auto(r0, 0x400454ca, 0x38)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
mmap$auto(0xb6, 0x14, 0xe4, 0x8000000008015, r3, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/gretap0/carrier\x00', 0xa140, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0x3, 0x0, 0xfffffdef)
io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, <r5=>0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}})
ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x11, 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0xe0180, 0x0)
r6 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r6, 0x29, 0x38, 0x0, 0x113)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
ioctl$auto(r7, 0x5609, 0xffffffffffffffff)
madvise$auto(0x0, 0x20499d, 0x9)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
ioctl$auto_NS_GET_PID_FROM_PIDNS(r5, 0x8004b706, &(0x7f0000000180)=0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)

0s ago: executing program 0 (id=294):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0)
pread64$auto(r1, 0x0, 0xb69a, 0x5)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000280)=""/65, 0x41)
r4 = ioctl$auto_TUNGETFILTER(r1, 0x801054db, &(0x7f0000000180)={0x5, &(0x7f0000000040)={0x8121, 0xf, 0x9, @inferred=r3}})
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80044943, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r6, 0x80045438, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wg0\x00'})
r7 = bpf$auto(0x3, &(0x7f00000000c0)=@batch={0x80000000, 0x44, 0xe0c, 0x1000d, 0x3, r5, 0xe, 0x4}, 0xf)
sysfs$auto(0x2, 0x10000000000048, 0x0)
bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x5, 0xf870e9f, 0xa4ea, 0x8}, 0x2)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r7)
sendmsg$auto_NL80211_CMD_SET_BEACON(r4, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000000380)={0x10d8, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000000}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x10}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x800}, @NL80211_ATTR_BSSID={0x1004, 0xf5, "870d82da0dea122472e1f63f6f0834d112749fe5d6a556ca90415b51aceda679efde35adb1132898f46e5f72ab90fb8d7482c3ed2d0a706cbcc2f7aaff92e6cb2a783b6f66703f762f95e1086b801926cf8c38c5d456e6255768b481e9d22b3c6c9ce485aac611eaf7ea044354d896b266fd374ff37af67f0885a245b001d4b18fa8cce493d27359fd0c758cbb53c14d9ce6033f1067c8e9db4c90ce7ea78f463e5ce631588ece058dfd6f70c3a56f834e107dc0c4dccb525d1d28e8d139ecd0425699a01f9051da21fcc2d0f3ae8c86c2371dcd60014349d7fd188dec27614e4f728e4db33ab714fb9dec274467622d14eefe63e4d4ded0a11ddc32362740fb0726be8006e0a60c3eb59262a40b08f5051d72fc226c672401fca78e46e01ee4bdc61d2d292fb9c159875b7a30039c8b1845c665108d7021c4c35bc4acab52aa3304e81b5492faf9215235b83e53f1d1e5043974da377b8fd66e15d68eae31a2337a1aed7477e0c3ae0215e6fc4a338535923f8fe220db92af80f2fca7212e65a3902047ea868ffa3ceb816a79302abea14b2cc97cea010d200b33469cd2d704e05152f6c010b610a5beba910be2c94d707cbcc43a29ddc9f68440bd99d73b607b0efed02450b8596b7a78ef34473a37d0369bb06a6f08e5b48452a13f96269b0635c503e6bb881f8bb39fee689a3e7d5161f126b0abfe35e5907734850a540809f07886c2c5ee01cd23170938582e4c5d01ec50c9c42d6b45954febd6ac4e5d7e94ac161c7e995f8c4e27c8b3683c932ecabde292059bf74cddd2887aa47f84c784984dcb59597fdba6c66e11bee41b24b673e3dfee2ff1c2079309dd2da778df67de475eed5ced71cdae85dec2804316d260f093ca4170050a53c2d4a2c323646a40f0a20ab8d0000ef29d8ca3afa2e7667d4e525af24cbc339581fc5ffb5537dcbb9239bb6030a202139fc7b5f8a6901816264ca7360d795a3fa463371e35ea5501678a4c14d4b4fbc895963089a25eb25df24a1ad0c1de0dbf28f108f8c9e09c1b2e83dec905f22a110ef501e4c3820a75d66aaea5636b1c811d95f8e07dd937924ab57fb18b3254003bd9f48da21986b13d638e174c1ef60be943252871a2f7a20be11b9f4f6707664399633311959b620d185fc7715da4dc14ef15b68b06bc18711d491a9795390517f0ddd29373c6e87c22a929fa9cb8d8fc9551baec42e33779c385fb6ea7556a3815e623ac96516401b4c6115dea195bf465fda73d0a33ff8a204d8b9af7618484c5702edb692ad0517d132c7d935cd39e49df4de2a7cf82d1e04c54149ef1ebd4d4ee31e05a715095cab44a379fb7d8a24df8582b21ab068b9e2c6be5108e403bee97bc53c829e4e38766dec355a6f76fb7c5952d327efa4778da150cac607838591bc79a150c66971884ebea112571ade0cc05c514d40036e620bf4a2126ad8c005e4651f996fbcd739248a70f73129a13155508b01756d68d1be782c697e540317e5df8a73da80d7be90053d4b9a9a5d9c0ff39465b9e48c9a07f5324fd9245ae2e9207edf7e3c91d1b7f00270d6d8a2144e5db84ec4dab4110aaf71eb4c11154c39e18ee2e34003ef1f04003f74141e56344a1414368807f4e269dac11e20f5ca291d508c816918fbb45d778caeaff2844f5f56001789baad792072359cae45d2dfb72981ab361c0103e171c32fbc9027c67104839b9af8226a2bc044d3db665ce3c6ffd829c9a55df9d71ef645014deb2bb21be091987ee4036dfd24744841366687c93b0cc4da26b26d13f41e175985471ff77d09e9f5279b48dec25c53863d97396de2bfb4ddd1d2e38a461cb11c41e9431a7fbfd86198867fca3d809a9ca9cb8b3bb0e09a1f15edcc59085c0d6492a473d95c26c2beb44eff27de5c89ea7be838143bc3109f76e03eb70a51a283e8fab6c3f7f419848cea6b2552849477faee7ff613529b039595dc9ed2a9e05367c34400f9039151bdd415848693adba41874d93da35180e047bf83428925d224132e9792203933dbaa52da107de1dadcfbd869bc487e9a45d4d12fbffb555f36181a3d56cf9477e6bb7ee56c866a10af2529fe62ad3a6d7694838cd66042a2b40c0b46a3fd0cbde8e07a94d274e815850d8e254b8e5a979b1abdc93ba6e68d636148104c1682ad99f680c5c32b15b663ca35cc70c86668549cb15445c4c71330bc049542e5b6997a49023ec6e59dbaa881725c5a8cde85ecf74cbca39a48c16e5fc9ea32b556827b066a892508be19f211c45c4afb5985afd72f0118ee93a86bad84975644f21829b6b925121d321a8685e1a5033b4cb52b9176b62668c25c5dd5b79816b80cb7cc20db2361d36acf839475dc7eb89db5ff1c301511f10f149ba352bb34dcec1a205f9be480d5cfd401b71b1b8e75ea564e5baa7ae87e08021fc2d65c5509f3bfabefccf0e4810caa22d430096c8ad0d268d7fc81dcadc74f74f3c76a41ca2dbabb9c32309db86f9e4445e1140eb98f9c782db8f35ebc73115a7a03ee26c42a056e2d22e022058a43bb5ed3e12aff7742bed80d9cf7bef41732cadb7d052977e98ff759b6a1827b2ce16c2b0217df7f0b7917baf1a317fa7c6c64a230657413cdc622d61e04e71f5b27d7dc5d9bff02f8eea2d8aaca077d566e64103b2de89babff64651c26dd27f681df4462c25192d03558ef5e87dd2ff6391ab688a001c1663d938e198e30118df9158972a72059fd15a9e66ca921a9b4f9cbd20a9febe389f9ee0faefad990b6d21e25967865e5e389244b0b899bfd0d63ad235a9ad00d3325f50d00a232c588b107c138927fba2d1808b9ba1a8287432657154099a59febafaa2f44eb16886c67e9cd040e924a0e027b1f75b9c38b93b172dc733448ec6a46cb08c87040964f0c32e4bf37a55e6fda405de2dc7865c15bd69c29b1bf765efe3cbd7a2361cfa33d5cc83d2b3f97ee7d13843016e3253039edb3ceff239c68ebf4ac8c658b2c7f89fa89edbfc00caee883ec12c4ea7583bc70e729731dad9cee6e679bd5e0bde121a33081039351f048b0b8aae0edf057b38674874779eb0c193797b6432497d777ab7710147f86ae5d894f32b4d6f180edc200bb28fda2d50380320c75673b9cc5bd281c06f971936029ef289d8d82fc6456b67bda6a7d0e9a42495d29bcb6849244522796e78638c49cab3368648e225d69a0d7f19e36864ef42c1a8d84510ad89c3394f8375b9e08e0c04135fa2a240fb9a402e0fbac6b6d9d5fa04a88978c4acc8e6be91f9e3ac6f145f0477943b512e38f39c82b64095fa6304164e92288968bdf08b48192df35fbbe9a27ebb0449704c70a0758fa538ab04322e986826a751a01c1878ebf1595a4e70b48d99c86fa8ce9b0b1eac67adc0b640f184f2e30e290521228ea606b75fc0b5e5acaf8f0abfc2135aa7b7de1e7a2675a2d5c1ad2c4de898c66c7846423d4293acd3da0043c1adcdd85284c4cd134a85419d4321957c9209bbb2bf69077db2bfc13f3bea900d5f95505a1a570f7c6451605c48404dba8b979cc6c3ab3668aa0d13b58b3ef9f49cdf228584dc4cb53b53a6379f28737e6db47f74a9c4c303460d53b37384ad6aaa7d280dbc1548d178fba1bc6b1fd42354f1c67c5de358fb9a9e93b4896fb396e27293bf652c42fd3f1e8220c02f4bdd31b21b882587d1218614ac3eb2c49dfabcc78ae536d428a653fa9b1b057182d6509d59c5166fdceaa25fce5741934dd528e360974f906e19d6c584bdf29a8b9de4b21551059a1bb3aed41887d1089077fba03d19f495fa832762fbf2a6e354c74394c754269fbf46cd37d3d528c53bf77ac89af032f7059d0608ec6f9bc29ffc5089c9e91d735d0bd476d3e8f58ee8a3ff394b868c8e5ffde7701ddd1d4df4c3056fde95792ee21b0702604f61c378b502f01f2b77954eafe40e3f5d3302b9b1659e172af06ab4d1b856a1154fadf4a37a204459a20a0cc6241d63d77d3fe08fec7adcbf16f227e7d3f2c489ec21554f8b02a87e5d47978d916d2a6f2cc29408c96bd10c22f1760db075a4cb12e5f5d5daa0cc0ef09a6713e33eecf15f604e61240c4b009f275224aa775a4dcd467d1d167e9d149bcd49a2e4a70857d0164016bbd7755a8aebff7278eb4d28e953b8b4818144cba19b947ec7c512aaa05a615e6876e85637f7e5a67cd9e1a706e053a147e40a56f95f4ab378ebc03c0bd026ec03934186f18c51440dba9686280b7b6e976b986640cb44035cd5fbd6cc03a7edc511b7f18d43de10a3dd2cbd5c17fdc6e66017866387a90880a9e831ec9e11614dc96c9771c9d2813380d2195d76c4577f3df09bffcd7e0f6709f3f436e51a96bd25e303b2b977cf85f55c9fc20d4d30154cc4f706266e8c39345f1cda29dbd0e717c97c2993b0318aa512a59e26c720d7fbe155e86fb6a16166ad43e39664639a4a2575c3c39dad2146f26085fccaf8de5c1a0715e808db205c23b55d9179c21eecfafb07e4c8e431886b81c793ad32894f96ea86cde93e90fb1c0d483520ea76ad197a4372cd1a9363f3d56f4e452e15f36c2f2a60ae49a107e4f72889b6b43ea1b920c6c649ed13473301df49a54fdf743a81276fa6281992689920b3a95010acbcadf05c7ee2e7655ddcdf6c7b938e023bbc8777c705839fdfc390a0ef415badb44e2612ce6630648f10f728859c29e8c99f8e7756d89a2fe07ddbfd7314d149271e1f4cc952764ae2e9732f8919cff8bc6f8202a76f3f93c269ddc6d052afe3e24e15e831659ea983c0e042deeed0f64341017833944fc9f255a857d82cceff16d1c0ad317ef8028bfce1e849ee93ee93d77fc089c1ba852e6fa0667cb773ab0b20f93dcfecddf4d60fd6a2e104c4b76b58429f726a416be788545b9c669e6a5bb9dbfccb99a445c63ef34e1afb9b42ac0a04aa96a05970654335bdaf793a60f3fb468c8548b0fb45a24d95a6dd22dbb644fe10793e941baf13182f50612754cec57d26e21f1356bb41ecd9782ad165685e4984db36a7fa0ffe2740cad41a665873b47d2e33df7546d6b3f44227355604bd9d60d6474200a08ae12e14992f7b6fcb2bdfcb648330b61889575c0a8079af67d9535026287211befd1b1d4e2b87ea49a360235b3c6c411e81db8db6b2c77a45c5bef0c21f76db705ef1a42ca83d8db51ad409772511d35fcc7cbf576abf9b069f4eaca878fbf6c2d20c7ef71476e25680f7901fb70724e06ceda681f43892115767ba09213d01a039b273c82c9e3384ec02d0fd0f641185bf1b7c74527fc04419929e2d005199b9c557a1a545c0c87fcda257b7f74bd0eb4000b67dc5446819e35f67b5a4e4b09343b767b5ca1dc6be39b6f4bab6ff9d66a6c551e9a0ce4f45935655830a2f6403770dc3fec7fadfabd106af6eaaabdf7f4c7c7ed0d7769582d462b6cf4bc46c6f606aa880c8ee86cb83e74de98e85128fc4867df40d69fc872ac207d506ebc9d6cc22a77cb73d17afc45846378b764ef12b68be9b50674461c17a65a6fb1c3fe1cf711cd96477059068842531269e87d298e48dde0571cd1c3c71bc9397058fbf5d4f81909081cdaa5368a122e35be569e26b163eefc0d674592856dfa38970f2a73d404675d676b7f998dd48a2a4fdf1f318a144ce6fef34fd1f9710c701b9b9ed87483b63795180e15b01963f8c4e7b920f464593e99838405764124d15ab8151bcc82a28c0756157b33c35aa7af4974634cc3c7d2566194dac114626ae87e1b2433bf0440c781b325ef009c8d05e574182095f3173f"}, @NL80211_ATTR_VHT_CAPABILITY={0x92, 0x9d, "f1fff153cfbe5b931cb71ec0f69bb77ca9166ba050747cb5c8f2374dc0d15e1f52da82aaf24f7a548dc2f79ae0ce11b3bc23db6a0445d88d21f9b6134af9eee218b747641e64cc901a8daf8eeefbe451c31e2e3e61198523f693493014ecb7731d71968f0bd7dbd49653ce8fbf7d63fd44d1e0906b94a120a3ff9a6fda38ec995051ad284ffb941b6da0a89d47c8"}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x48004}, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts.
[   96.910301][ T1212] cfg80211: failed to load regulatory.db
[   97.685590][ T5825] cgroup: Unknown subsys name 'net'
[   97.822996][ T5825] cgroup: Unknown subsys name 'cpuset'
[   97.832863][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   99.640483][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  102.060457][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.068913][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  102.076524][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.084695][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  102.092914][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  102.118622][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  102.125837][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  102.151275][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.151712][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.160595][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.169586][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.174499][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.180308][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  102.189204][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.196005][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.209073][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.210358][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.227837][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.235059][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.246927][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.802868][ T5841] chnl_net:caif_netlink_parms(): no params data found
[  102.931021][ T5840] chnl_net:caif_netlink_parms(): no params data found
[  102.981137][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  103.074825][ T5850] chnl_net:caif_netlink_parms(): no params data found
[  103.106763][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.114964][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.122363][ T5841] bridge_slave_0: entered allmulticast mode
[  103.131014][ T5841] bridge_slave_0: entered promiscuous mode
[  103.146547][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.155686][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.162993][ T5841] bridge_slave_1: entered allmulticast mode
[  103.171452][ T5841] bridge_slave_1: entered promiscuous mode
[  103.296315][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.303590][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.312407][ T5840] bridge_slave_0: entered allmulticast mode
[  103.320383][ T5840] bridge_slave_0: entered promiscuous mode
[  103.332725][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.368336][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.376108][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.383722][ T5840] bridge_slave_1: entered allmulticast mode
[  103.391229][ T5840] bridge_slave_1: entered promiscuous mode
[  103.401083][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.504067][ T5841] team0: Port device team_slave_0 added
[  103.511774][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.519474][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.526698][ T5844] bridge_slave_0: entered allmulticast mode
[  103.534323][ T5844] bridge_slave_0: entered promiscuous mode
[  103.542357][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.550247][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.557421][ T5850] bridge_slave_0: entered allmulticast mode
[  103.565144][ T5850] bridge_slave_0: entered promiscuous mode
[  103.590596][ T5841] team0: Port device team_slave_1 added
[  103.599973][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.609364][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.616676][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.624175][ T5844] bridge_slave_1: entered allmulticast mode
[  103.631798][ T5844] bridge_slave_1: entered promiscuous mode
[  103.654997][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.662246][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.669682][ T5850] bridge_slave_1: entered allmulticast mode
[  103.677122][ T5850] bridge_slave_1: entered promiscuous mode
[  103.700223][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.729657][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.743332][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.833592][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.843550][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.870787][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.886020][ T5840] team0: Port device team_slave_0 added
[  103.895446][ T5840] team0: Port device team_slave_1 added
[  103.917487][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.927479][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.934889][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.961219][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.989298][ T5844] team0: Port device team_slave_0 added
[  103.999583][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.036016][ T5844] team0: Port device team_slave_1 added
[  104.074524][ T5850] team0: Port device team_slave_0 added
[  104.082451][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.090057][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.116130][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.144076][ T5850] team0: Port device team_slave_1 added
[  104.166256][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.173522][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.200095][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.259444][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.266439][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.293102][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.293217][ T5852] Bluetooth: hci2: command tx timeout
[  104.304157][ T5847] Bluetooth: hci0: command tx timeout
[  104.304398][ T5842] Bluetooth: hci1: command tx timeout
[  104.317160][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.320776][ T5849] Bluetooth: hci3: command tx timeout
[  104.327751][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.360605][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.386673][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.393850][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.419922][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.434283][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.441344][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.467313][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.491290][ T5841] hsr_slave_0: entered promiscuous mode
[  104.497941][ T5841] hsr_slave_1: entered promiscuous mode
[  104.590740][ T5840] hsr_slave_0: entered promiscuous mode
[  104.597046][ T5840] hsr_slave_1: entered promiscuous mode
[  104.603843][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.611694][ T5840] Cannot create hsr debugfs directory
[  104.691925][ T5844] hsr_slave_0: entered promiscuous mode
[  104.699672][ T5844] hsr_slave_1: entered promiscuous mode
[  104.705840][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.713623][ T5844] Cannot create hsr debugfs directory
[  104.740239][ T5850] hsr_slave_0: entered promiscuous mode
[  104.746880][ T5850] hsr_slave_1: entered promiscuous mode
[  104.754489][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.762298][ T5850] Cannot create hsr debugfs directory
[  105.247247][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.275109][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.296466][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.307951][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.365160][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.386114][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.408011][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.438335][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.502234][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.526611][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.538749][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.555039][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.680379][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.694385][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.706084][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.726397][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.797786][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.837092][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[  105.881151][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.888614][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.919533][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.926840][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.946290][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.013762][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  106.052257][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.067642][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.074821][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.122096][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.129354][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.182331][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[  106.224442][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.248221][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.255427][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.283409][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.290644][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.346430][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  106.354078][ T5849] Bluetooth: hci3: command tx timeout
[  106.358905][ T5842] Bluetooth: hci1: command tx timeout
[  106.359750][ T5849] Bluetooth: hci0: command tx timeout
[  106.364903][ T5842] Bluetooth: hci2: command tx timeout
[  106.423203][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.430496][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.500886][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.508463][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.786066][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.925140][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.004468][ T5841] veth0_vlan: entered promiscuous mode
[  107.046952][ T5841] veth1_vlan: entered promiscuous mode
[  107.117672][ T5840] veth0_vlan: entered promiscuous mode
[  107.136519][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.170615][ T5840] veth1_vlan: entered promiscuous mode
[  107.203934][ T5841] veth0_macvtap: entered promiscuous mode
[  107.224751][ T5841] veth1_macvtap: entered promiscuous mode
[  107.292698][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.312307][ T5840] veth0_macvtap: entered promiscuous mode
[  107.323372][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.336945][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.360691][ T5850] veth0_vlan: entered promiscuous mode
[  107.367705][ T5840] veth1_macvtap: entered promiscuous mode
[  107.377146][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.390135][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.401865][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.410956][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.445135][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.465940][ T5850] veth1_vlan: entered promiscuous mode
[  107.475791][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.504256][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.513242][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.524384][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.533397][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.626391][ T5844] veth0_vlan: entered promiscuous mode
[  107.706745][ T5844] veth1_vlan: entered promiscuous mode
[  107.721275][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.721856][ T5850] veth0_macvtap: entered promiscuous mode
[  107.741648][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.764247][ T5850] veth1_macvtap: entered promiscuous mode
[  107.824440][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.835035][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.847101][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.854929][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.889816][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.932082][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.956930][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  107.957982][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.986906][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.996675][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.005610][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.017711][ T5844] veth0_macvtap: entered promiscuous mode
[  108.034527][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.043128][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.045953][ T5844] veth1_macvtap: entered promiscuous mode
[  108.127500][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.216221][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.297284][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.317076][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.328012][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.343487][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.429764][ T5842] Bluetooth: hci0: command tx timeout
[  108.429783][ T5852] Bluetooth: hci1: command tx timeout
[  108.429825][ T5852] Bluetooth: hci3: command tx timeout
[  108.435237][ T5842] Bluetooth: hci2: command tx timeout
[  108.488477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.558416][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.589458][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.775488][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.803576][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.184712][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.211515][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.460667][ T5944] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[  109.550173][ T5947] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  109.653488][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.673021][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.125310][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  110.185638][ T5960] Zero length message leads to an empty skb
[  110.508626][ T5842] Bluetooth: hci2: command tx timeout
[  110.508858][ T5852] Bluetooth: hci3: command tx timeout
[  110.514073][ T5842] Bluetooth: hci0: command tx timeout
[  110.519615][ T5847] Bluetooth: hci1: command tx timeout
[  110.582969][   T30] audit: type=1800 audit(1749186853.016:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8" name="dbroot" dev="configfs" ino=6053 res=0 errno=0
[  111.878745][ T5978] netlink: 342 bytes leftover after parsing attributes in process `syz.2.12'.
[  112.005853][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.349171][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'.
[  113.879229][ T6018] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  114.171215][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.180257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.198611][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  114.299304][ T6027] FAULT_INJECTION: forcing a failure.
[  114.299304][ T6027] name failslab, interval 1, probability 0, space 0, times 1
[  114.332246][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.30 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  114.332288][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  114.332311][ T6027] Call Trace:
[  114.332325][ T6027]  <TASK>
[  114.332340][ T6027]  dump_stack_lvl+0x16c/0x1f0
[  114.332395][ T6027]  should_fail_ex+0x512/0x640
[  114.332457][ T6027]  ? fs_reclaim_acquire+0xae/0x150
[  114.332498][ T6027]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  114.332543][ T6027]  should_failslab+0xc2/0x120
[  114.332574][ T6027]  __kmalloc_noprof+0xd2/0x510
[  114.332631][ T6027]  tomoyo_realpath_from_path+0xc2/0x6e0
[  114.332681][ T6027]  ? tomoyo_profile+0x47/0x60
[  114.332712][ T6027]  tomoyo_path_number_perm+0x245/0x580
[  114.332749][ T6027]  ? tomoyo_path_number_perm+0x237/0x580
[  114.332792][ T6027]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  114.332832][ T6027]  ? find_held_lock+0x2b/0x80
[  114.332910][ T6027]  ? find_held_lock+0x2b/0x80
[  114.332945][ T6027]  ? hook_file_ioctl_common+0x145/0x410
[  114.332986][ T6027]  ? __fget_files+0x20e/0x3c0
[  114.333034][ T6027]  security_file_ioctl+0x9b/0x240
[  114.333072][ T6027]  __x64_sys_ioctl+0xb7/0x210
[  114.333112][ T6027]  do_syscall_64+0xcd/0x490
[  114.333156][ T6027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.333185][ T6027] RIP: 0033:0x7fbcb1f8e929
[  114.333211][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.333238][ T6027] RSP: 002b:00007fbcb2d1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.333265][ T6027] RAX: ffffffffffffffda RBX: 00007fbcb21b5fa0 RCX: 00007fbcb1f8e929
[  114.333283][ T6027] RDX: 0000200000000000 RSI: 00000000400445a0 RDI: 0000000000000003
[  114.333301][ T6027] RBP: 00007fbcb2d1a090 R08: 0000000000000000 R09: 0000000000000000
[  114.333318][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.333334][ T6027] R13: 0000000000000000 R14: 00007fbcb21b5fa0 R15: 00007ffe7f633098
[  114.333371][ T6027]  </TASK>
[  114.333381][ T6027] ERROR: Out of memory at tomoyo_realpath_from_path.
[  114.610101][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[  115.974159][ T6067] FAULT_INJECTION: forcing a failure.
[  115.974159][ T6067] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  116.015436][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'.
[  116.028375][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.3.43 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  116.028417][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.028434][ T6067] Call Trace:
[  116.028444][ T6067]  <TASK>
[  116.028456][ T6067]  dump_stack_lvl+0x16c/0x1f0
[  116.028503][ T6067]  should_fail_ex+0x512/0x640
[  116.028555][ T6067]  _copy_from_iter+0x29f/0x16f0
[  116.028589][ T6067]  ? __alloc_skb+0x200/0x380
[  116.028650][ T6067]  ? __pfx__copy_from_iter+0x10/0x10
[  116.028689][ T6067]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  116.028754][ T6067]  netlink_sendmsg+0x829/0xdd0
[  116.028793][ T6067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.028835][ T6067]  ____sys_sendmsg+0xa98/0xc70
[  116.028866][ T6067]  ? copy_msghdr_from_user+0x10a/0x160
[  116.028912][ T6067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.028964][ T6067]  ___sys_sendmsg+0x134/0x1d0
[  116.029029][ T6067]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.029072][ T6067]  ? __lock_acquire+0x622/0x1c90
[  116.029165][ T6067]  __sys_sendmsg+0x16d/0x220
[  116.029215][ T6067]  ? __pfx___sys_sendmsg+0x10/0x10
[  116.029288][ T6067]  do_syscall_64+0xcd/0x490
[  116.029337][ T6067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.029369][ T6067] RIP: 0033:0x7fc33ed8e929
[  116.029392][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.029421][ T6067] RSP: 002b:00007fc33fca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.029449][ T6067] RAX: ffffffffffffffda RBX: 00007fc33efb5fa0 RCX: 00007fc33ed8e929
[  116.029469][ T6067] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003
[  116.029486][ T6067] RBP: 00007fc33fca7090 R08: 0000000000000000 R09: 0000000000000000
[  116.029503][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.029520][ T6067] R13: 0000000000000000 R14: 00007fc33efb5fa0 R15: 00007ffcbe378538
[  116.029556][ T6067]  </TASK>
[  117.476969][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'.
[  117.757040][ T6102] FAULT_INJECTION: forcing a failure.
[  117.757040][ T6102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.772411][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.0.56 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  117.772466][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.772484][ T6102] Call Trace:
[  117.772494][ T6102]  <TASK>
[  117.772505][ T6102]  dump_stack_lvl+0x16c/0x1f0
[  117.772555][ T6102]  should_fail_ex+0x512/0x640
[  117.772610][ T6102]  _copy_from_user+0x2e/0xd0
[  117.772648][ T6102]  copy_msghdr_from_user+0x98/0x160
[  117.772695][ T6102]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  117.772762][ T6102]  ___sys_sendmsg+0xfe/0x1d0
[  117.772810][ T6102]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.772853][ T6102]  ? __lock_acquire+0x622/0x1c90
[  117.772944][ T6102]  __sys_sendmsg+0x16d/0x220
[  117.772993][ T6102]  ? __pfx___sys_sendmsg+0x10/0x10
[  117.773066][ T6102]  do_syscall_64+0xcd/0x490
[  117.773116][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.773148][ T6102] RIP: 0033:0x7f1f2638e929
[  117.773172][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.773212][ T6102] RSP: 002b:00007f1f271e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.773238][ T6102] RAX: ffffffffffffffda RBX: 00007f1f265b5fa0 RCX: 00007f1f2638e929
[  117.773257][ T6102] RDX: 0000000020000084 RSI: 0000200000000080 RDI: 0000000000000003
[  117.773274][ T6102] RBP: 00007f1f271e2090 R08: 0000000000000000 R09: 0000000000000000
[  117.773309][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.773327][ T6102] R13: 0000000000000000 R14: 00007f1f265b5fa0 R15: 00007ffd48e1ed68
[  117.773367][ T6102]  </TASK>
[  118.903908][ T6110] FAULT_INJECTION: forcing a failure.
[  118.903908][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.127803][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.0.58 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  119.127856][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.127878][ T6110] Call Trace:
[  119.127888][ T6110]  <TASK>
[  119.127900][ T6110]  dump_stack_lvl+0x16c/0x1f0
[  119.127961][ T6110]  should_fail_ex+0x512/0x640
[  119.128020][ T6110]  _copy_from_user+0x2e/0xd0
[  119.128053][ T6110]  copy_msghdr_from_user+0x98/0x160
[  119.128102][ T6110]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  119.128159][ T6110]  ? __pfx__kstrtoull+0x10/0x10
[  119.128208][ T6110]  ___sys_sendmsg+0xfe/0x1d0
[  119.128258][ T6110]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.128326][ T6110]  ? find_held_lock+0x2b/0x80
[  119.128385][ T6110]  __sys_sendmmsg+0x200/0x420
[  119.128457][ T6110]  ? __pfx___sys_sendmmsg+0x10/0x10
[  119.128519][ T6110]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  119.128585][ T6110]  ? fput+0x70/0xf0
[  119.128618][ T6110]  ? ksys_write+0x1ac/0x250
[  119.128665][ T6110]  ? __pfx_ksys_write+0x10/0x10
[  119.128722][ T6110]  __x64_sys_sendmmsg+0x9c/0x100
[  119.128777][ T6110]  ? lockdep_hardirqs_on+0x7c/0x110
[  119.128822][ T6110]  do_syscall_64+0xcd/0x490
[  119.128872][ T6110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.128905][ T6110] RIP: 0033:0x7f1f2638e929
[  119.128936][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.128967][ T6110] RSP: 002b:00007f1f271e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  119.129000][ T6110] RAX: ffffffffffffffda RBX: 00007f1f265b5fa0 RCX: 00007f1f2638e929
[  119.129021][ T6110] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003
[  119.129040][ T6110] RBP: 00007f1f271e2090 R08: 0000000000000000 R09: 0000000000000000
[  119.129059][ T6110] R10: 0000000000000afa R11: 0000000000000246 R12: 0000000000000001
[  119.129077][ T6110] R13: 0000000000000000 R14: 00007f1f265b5fa0 R15: 00007ffd48e1ed68
[  119.129118][ T6110]  </TASK>
[  119.956029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  120.463111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.473772][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  121.137291][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[  121.308456][ T6139] netlink: 5584 bytes leftover after parsing attributes in process `syz.1.66'.
[  121.318261][ T6139] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  121.602385][ T6139] zswap: compressor  not available
[  122.286417][ T6154] FAULT_INJECTION: forcing a failure.
[  122.286417][ T6154] name failslab, interval 1, probability 0, space 0, times 0
[  122.351453][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.1.69 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  122.351498][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  122.351517][ T6154] Call Trace:
[  122.351527][ T6154]  <TASK>
[  122.351539][ T6154]  dump_stack_lvl+0x16c/0x1f0
[  122.351590][ T6154]  should_fail_ex+0x512/0x640
[  122.351640][ T6154]  ? __kvmalloc_node_noprof+0x124/0x620
[  122.351694][ T6154]  should_failslab+0xc2/0x120
[  122.351727][ T6154]  __kvmalloc_node_noprof+0x137/0x620
[  122.351778][ T6154]  ? seq_read_iter+0x826/0x12c0
[  122.351817][ T6154]  ? __lock_acquire+0xb8a/0x1c90
[  122.351868][ T6154]  ? seq_read_iter+0x826/0x12c0
[  122.351907][ T6154]  seq_read_iter+0x826/0x12c0
[  122.351953][ T6154]  ? __mutex_trylock_common+0xe9/0x250
[  122.352011][ T6154]  kernfs_fop_read_iter+0x40f/0x5a0
[  122.352047][ T6154]  ? rw_verify_area+0xcf/0x680
[  122.352095][ T6154]  vfs_read+0x8bc/0xc60
[  122.352148][ T6154]  ? __pfx___mutex_lock+0x10/0x10
[  122.352196][ T6154]  ? __pfx_vfs_read+0x10/0x10
[  122.352273][ T6154]  ksys_read+0x12a/0x250
[  122.352321][ T6154]  ? __pfx_ksys_read+0x10/0x10
[  122.352388][ T6154]  do_syscall_64+0xcd/0x490
[  122.352439][ T6154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.352476][ T6154] RIP: 0033:0x7fbcb1f8e929
[  122.352501][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.352532][ T6154] RSP: 002b:00007fbcb2d1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  122.352561][ T6154] RAX: ffffffffffffffda RBX: 00007fbcb21b5fa0 RCX: 00007fbcb1f8e929
[  122.352582][ T6154] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003
[  122.352600][ T6154] RBP: 00007fbcb2d1a090 R08: 0000000000000000 R09: 0000000000000000
[  122.352619][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.352638][ T6154] R13: 0000000000000000 R14: 00007fbcb21b5fa0 R15: 00007ffe7f633098
[  122.352679][ T6154]  </TASK>
[  123.018005][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  124.185826][ T6160] loop6: detected capacity change from 0 to 8192
[  124.348689][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  124.357885][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  124.983474][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[  127.589618][ T6206] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  127.595951][ T6206] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  127.856177][ T6206] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  128.112412][ T6206] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  128.144507][ T6206] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  128.337041][ T6206] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  128.352451][ T6217] process 'syz.2.83' launched '/dev/fd/5' with NULL argv: empty string added
[  128.554516][ T6206] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  128.580660][ T6206] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  128.634988][ T6206] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  129.307951][ T6206] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  129.361066][ T6206] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  129.437066][ T6206] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  129.629088][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.108407][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  130.418658][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[  130.588332][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.388324][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout
[  131.711015][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  132.188474][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  132.668858][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  133.428362][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'.
[  133.478267][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout
[  133.789059][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  134.272149][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  134.761664][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  135.463867][ T6319] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  135.548458][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout
[  136.166861][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'.
[  137.638551][ T6348] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input6
[  138.322608][ T6319] ovs_��: entered promiscuous mode
[  138.679193][ T6355] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  138.724492][ T6355] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  138.796225][ T6355] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  138.885282][ T6355] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  140.448425][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.748564][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.785639][ T6386] FAULT_INJECTION: forcing a failure.
[  140.785639][ T6386] name failslab, interval 1, probability 0, space 0, times 0
[  140.828673][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  140.833721][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.1.125 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  140.833769][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.833789][ T6386] Call Trace:
[  140.833800][ T6386]  <TASK>
[  140.833813][ T6386]  dump_stack_lvl+0x16c/0x1f0
[  140.833869][ T6386]  should_fail_ex+0x512/0x640
[  140.833922][ T6386]  ? __kmalloc_noprof+0xbf/0x510
[  140.833981][ T6386]  ? kernfs_fop_write_iter+0x237/0x510
[  140.834019][ T6386]  should_failslab+0xc2/0x120
[  140.834053][ T6386]  __kmalloc_noprof+0xd2/0x510
[  140.834117][ T6386]  kernfs_fop_write_iter+0x237/0x510
[  140.834165][ T6386]  vfs_write+0x6c4/0x1150
[  140.834219][ T6386]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  140.834261][ T6386]  ? __pfx___mutex_lock+0x10/0x10
[  140.834319][ T6386]  ? __pfx_vfs_write+0x10/0x10
[  140.834408][ T6386]  ksys_write+0x12a/0x250
[  140.834460][ T6386]  ? __pfx_ksys_write+0x10/0x10
[  140.834526][ T6386]  do_syscall_64+0xcd/0x490
[  140.834580][ T6386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.834616][ T6386] RIP: 0033:0x7fbcb1f8e929
[  140.834643][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.834676][ T6386] RSP: 002b:00007fbcb2d1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.834705][ T6386] RAX: ffffffffffffffda RBX: 00007fbcb21b5fa0 RCX: 00007fbcb1f8e929
[  140.834725][ T6386] RDX: 0000000000000081 RSI: 00002000000007c0 RDI: 0000000000000003
[  140.834744][ T6386] RBP: 00007fbcb2d1a090 R08: 0000000000000000 R09: 0000000000000000
[  140.834761][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.834778][ T6386] R13: 0000000000000000 R14: 00007fbcb21b5fa0 R15: 00007ffe7f633098
[  140.834817][ T6386]  </TASK>
[  140.925297][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout
[  142.286019][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[  142.998341][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  143.004852][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  143.591680][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'.
[  144.459929][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[  144.607905][ T6434] mmap: syz.1.138 (6434) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.343606][ T6468] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input7
[  149.390340][ T6497] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  150.152219][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[  151.802700][ T5847] Bluetooth: hci0: Malformed LE Event: 0x1d
[  152.232260][ T6549] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input8
[  153.863515][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[  154.835084][ T6567] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  156.199106][ T6590] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.206240][ T6590] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.244012][ T6590] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.259356][ T6590] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.065403][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[  157.868603][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.268381][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout
[  158.274478][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.280683][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.685866][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[  161.729319][ T6672] FAULT_INJECTION: forcing a failure.
[  161.729319][ T6672] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  161.784161][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.1.198 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  161.784202][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.784219][ T6672] Call Trace:
[  161.784229][ T6672]  <TASK>
[  161.784241][ T6672]  dump_stack_lvl+0x16c/0x1f0
[  161.784288][ T6672]  should_fail_ex+0x512/0x640
[  161.784341][ T6672]  should_fail_alloc_page+0xe7/0x130
[  161.784375][ T6672]  prepare_alloc_pages+0x3c2/0x610
[  161.784418][ T6672]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  161.784477][ T6672]  ? __lock_acquire+0x622/0x1c90
[  161.784523][ T6672]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  161.784576][ T6672]  ? lock_acquire+0x179/0x350
[  161.784617][ T6672]  ? __free_frozen_pages+0x918/0x1180
[  161.784665][ T6672]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  161.784714][ T6672]  ? policy_nodemask+0xea/0x4e0
[  161.784758][ T6672]  alloc_pages_mpol+0x1fb/0x550
[  161.784790][ T6672]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  161.784821][ T6672]  ? __page_table_check_ptes_set+0x1ae/0x420
[  161.784857][ T6672]  ? find_held_lock+0x2b/0x80
[  161.784890][ T6672]  alloc_pages_noprof+0x131/0x390
[  161.784920][ T6672]  __pte_alloc_kernel+0x22/0x6a0
[  161.784955][ T6672]  vmap_small_pages_range_noflush+0x992/0xca0
[  161.785006][ T6672]  ? __pfx_vmap_small_pages_range_noflush+0x10/0x10
[  161.785041][ T6672]  ? ringbuf_map_alloc+0x3da/0x7f0
[  161.785080][ T6672]  ? get_vm_area_caller+0x71/0xa0
[  161.785138][ T6672]  vmap+0x1aa/0x320
[  161.785175][ T6672]  ? __pfx_vmap+0x10/0x10
[  161.785222][ T6672]  ringbuf_map_alloc+0x3da/0x7f0
[  161.785272][ T6672]  map_create+0x592/0x1db0
[  161.785332][ T6672]  ? __pfx_map_create+0x10/0x10
[  161.785377][ T6672]  ? __might_fault+0xe3/0x190
[  161.785422][ T6672]  ? __might_fault+0xe3/0x190
[  161.785479][ T6672]  ? __might_fault+0x13b/0x190
[  161.785541][ T6672]  __sys_bpf+0x47cc/0x4d80
[  161.785574][ T6672]  ? __pfx___sys_bpf+0x10/0x10
[  161.785601][ T6672]  ? errseq_sample+0x53/0x70
[  161.785629][ T6672]  ? file_init_path+0x4fe/0x760
[  161.785669][ T6672]  ? do_futex+0x122/0x350
[  161.785707][ T6672]  ? __pfx_do_futex+0x10/0x10
[  161.785760][ T6672]  ? __sys_socket+0xac/0x260
[  161.785797][ T6672]  ? xfd_validate_state+0x61/0x180
[  161.785843][ T6672]  ? __pfx___do_sys_close_range+0x10/0x10
[  161.785899][ T6672]  __x64_sys_bpf+0x78/0xc0
[  161.785928][ T6672]  ? lockdep_hardirqs_on+0x7c/0x110
[  161.785971][ T6672]  do_syscall_64+0xcd/0x490
[  161.786018][ T6672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.786048][ T6672] RIP: 0033:0x7fbcb1f8e929
[  161.786072][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.786102][ T6672] RSP: 002b:00007fbcb2d1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.786130][ T6672] RAX: ffffffffffffffda RBX: 00007fbcb21b5fa0 RCX: 00007fbcb1f8e929
[  161.786150][ T6672] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000
[  161.786168][ T6672] RBP: 00007fbcb2010b39 R08: 0000000000000000 R09: 0000000000000000
[  161.786186][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.786203][ T6672] R13: 0000000000000000 R14: 00007fbcb21b5fa0 R15: 00007ffe7f633098
[  161.786239][ T6672]  </TASK>
[  163.962028][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[  165.025445][ T6715] FAULT_INJECTION: forcing a failure.
[  165.025445][ T6715] name failslab, interval 1, probability 0, space 0, times 0
[  165.038457][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.2.208 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  165.038494][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.038511][ T6715] Call Trace:
[  165.038520][ T6715]  <TASK>
[  165.038530][ T6715]  dump_stack_lvl+0x16c/0x1f0
[  165.038576][ T6715]  should_fail_ex+0x512/0x640
[  165.038634][ T6715]  should_failslab+0xc2/0x120
[  165.038664][ T6715]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  165.038709][ T6715]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  165.038735][ T6715]  ? pfn_valid+0x26a/0x4d0
[  165.038762][ T6715]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  165.038819][ T6715]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[  165.038864][ T6715]  idr_get_free+0x528/0xa30
[  165.038916][ T6715]  idr_alloc_u32+0x190/0x2f0
[  165.038951][ T6715]  ? __pfx_idr_alloc_u32+0x10/0x10
[  165.038988][ T6715]  ? lock_acquire+0x179/0x350
[  165.039030][ T6715]  idr_alloc_cyclic+0x10b/0x230
[  165.039085][ T6715]  ? __pfx_idr_alloc_cyclic+0x10/0x10
[  165.039120][ T6715]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  165.039182][ T6715]  map_create+0x9aa/0x1db0
[  165.039250][ T6715]  ? __pfx_map_create+0x10/0x10
[  165.039297][ T6715]  ? __might_fault+0xe3/0x190
[  165.039344][ T6715]  ? __might_fault+0xe3/0x190
[  165.039390][ T6715]  ? __might_fault+0x13b/0x190
[  165.039455][ T6715]  __sys_bpf+0x47cc/0x4d80
[  165.039483][ T6715]  ? __pfx_futex_wake+0x10/0x10
[  165.039535][ T6715]  ? __pfx___sys_bpf+0x10/0x10
[  165.039562][ T6715]  ? errseq_sample+0x53/0x70
[  165.039591][ T6715]  ? file_init_path+0x4fe/0x760
[  165.039644][ T6715]  ? do_futex+0x122/0x350
[  165.039679][ T6715]  ? __pfx_do_futex+0x10/0x10
[  165.039728][ T6715]  ? __sys_socket+0xac/0x260
[  165.039767][ T6715]  ? xfd_validate_state+0x61/0x180
[  165.039809][ T6715]  ? __pfx___do_sys_close_range+0x10/0x10
[  165.039867][ T6715]  __x64_sys_bpf+0x78/0xc0
[  165.039914][ T6715]  ? lockdep_hardirqs_on+0x7c/0x110
[  165.039961][ T6715]  do_syscall_64+0xcd/0x490
[  165.040014][ T6715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.040049][ T6715] RIP: 0033:0x7f8d89f8e929
[  165.040075][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.040103][ T6715] RSP: 002b:00007f8d8ad5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  165.040136][ T6715] RAX: ffffffffffffffda RBX: 00007f8d8a1b5fa0 RCX: 00007f8d89f8e929
[  165.040158][ T6715] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000
[  165.040178][ T6715] RBP: 00007f8d8a010b39 R08: 0000000000000000 R09: 0000000000000000
[  165.040198][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.040214][ T6715] R13: 0000000000000000 R14: 00007f8d8a1b5fa0 R15: 00007fff15490a88
[  165.040253][ T6715]  </TASK>
[  167.199224][ T6740] writes to the poll attribute are ignored.
[  167.238425][ T6740] please use driver specific parameters instead.
[  167.927350][ T6748] FAULT_INJECTION: forcing a failure.
[  167.927350][ T6748] name failslab, interval 1, probability 0, space 0, times 0
[  167.999108][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.0.218 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  167.999154][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  167.999172][ T6748] Call Trace:
[  167.999192][ T6748]  <TASK>
[  167.999204][ T6748]  dump_stack_lvl+0x16c/0x1f0
[  167.999256][ T6748]  should_fail_ex+0x512/0x640
[  167.999305][ T6748]  ? fs_reclaim_acquire+0xae/0x150
[  167.999348][ T6748]  ? security_inode_init_security+0x13f/0x390
[  167.999410][ T6748]  should_failslab+0xc2/0x120
[  167.999441][ T6748]  __kmalloc_noprof+0xd2/0x510
[  167.999499][ T6748]  security_inode_init_security+0x13f/0x390
[  167.999551][ T6748]  ? __pfx_shmem_initxattrs+0x10/0x10
[  167.999585][ T6748]  ? __pfx_security_inode_init_security+0x10/0x10
[  167.999650][ T6748]  shmem_mknod+0x22e/0x450
[  167.999692][ T6748]  ? __pfx_shmem_create+0x10/0x10
[  167.999725][ T6748]  lookup_open.isra.0+0x11d3/0x1580
[  167.999776][ T6748]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  167.999838][ T6748]  ? __pfx_down_write+0x10/0x10
[  167.999884][ T6748]  ? mnt_get_write_access+0x20c/0x300
[  167.999925][ T6748]  path_openat+0x893/0x2cb0
[  168.000004][ T6748]  ? __pfx_path_openat+0x10/0x10
[  168.000056][ T6748]  ? __lock_acquire+0xb8a/0x1c90
[  168.000104][ T6748]  do_filp_open+0x20b/0x470
[  168.000154][ T6748]  ? __pfx_do_filp_open+0x10/0x10
[  168.000242][ T6748]  ? alloc_fd+0x471/0x7d0
[  168.000301][ T6748]  do_sys_openat2+0x11b/0x1d0
[  168.000340][ T6748]  ? __pfx_do_sys_openat2+0x10/0x10
[  168.000395][ T6748]  __x64_sys_openat+0x174/0x210
[  168.000436][ T6748]  ? __pfx___x64_sys_openat+0x10/0x10
[  168.000493][ T6748]  do_syscall_64+0xcd/0x490
[  168.000547][ T6748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.000579][ T6748] RIP: 0033:0x7f1f2638e929
[  168.000604][ T6748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.000635][ T6748] RSP: 002b:00007f1f271e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  168.000665][ T6748] RAX: ffffffffffffffda RBX: 00007f1f265b5fa0 RCX: 00007f1f2638e929
[  168.000686][ T6748] RDX: 00000000001c8340 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  168.000706][ T6748] RBP: 00007f1f26410b39 R08: 0000000000000000 R09: 0000000000000000
[  168.000725][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.000744][ T6748] R13: 0000000000000000 R14: 00007f1f265b5fa0 R15: 00007ffd48e1ed68
[  168.000786][ T6748]  </TASK>
[  168.303688][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[  174.885374][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[  175.814002][ T6819] netlink: 338 bytes leftover after parsing attributes in process `syz.0.235'.
[  176.385450][ T6830] netlink: 338 bytes leftover after parsing attributes in process `syz.0.235'.
[  176.446597][ T6819] netlink: 210 bytes leftover after parsing attributes in process `syz.0.235'.
[  176.926114][ T6836] FAULT_INJECTION: forcing a failure.
[  176.926114][ T6836] name failslab, interval 1, probability 0, space 0, times 0
[  177.039401][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.3.238 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  177.039449][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.039469][ T6836] Call Trace:
[  177.039480][ T6836]  <TASK>
[  177.039493][ T6836]  dump_stack_lvl+0x16c/0x1f0
[  177.039556][ T6836]  should_fail_ex+0x512/0x640
[  177.039606][ T6836]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  177.039663][ T6836]  should_failslab+0xc2/0x120
[  177.039697][ T6836]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  177.039749][ T6836]  ? __kernfs_new_node+0xd2/0x8e0
[  177.039804][ T6836]  __kernfs_new_node+0xd2/0x8e0
[  177.039857][ T6836]  ? __pfx___kernfs_new_node+0x10/0x10
[  177.039915][ T6836]  ? find_held_lock+0x2b/0x80
[  177.039949][ T6836]  ? kernfs_root+0xee/0x2a0
[  177.040005][ T6836]  kernfs_new_node+0x13c/0x1e0
[  177.040065][ T6836]  __kernfs_create_file+0x53/0x350
[  177.040108][ T6836]  sysfs_add_file_mode_ns+0x207/0x3c0
[  177.040161][ T6836]  sysfs_merge_group+0x1aa/0x340
[  177.040212][ T6836]  ? __pfx_sysfs_merge_group+0x10/0x10
[  177.040268][ T6836]  ? __pfx_dev_add_physical_location+0x10/0x10
[  177.040304][ T6836]  ? bus_to_subsys+0x131/0x160
[  177.040352][ T6836]  dpm_sysfs_add+0x237/0x280
[  177.040389][ T6836]  device_add+0x9a6/0x1a70
[  177.040430][ T6836]  ? __pfx_device_add+0x10/0x10
[  177.040466][ T6836]  ? lockdep_init_map_type+0x5c/0x280
[  177.040512][ T6836]  ? __init_waitqueue_head+0xca/0x150
[  177.040581][ T6836]  rfkill_register+0x1ad/0xb40
[  177.040623][ T6836]  nfc_register_device+0x11f/0x3c0
[  177.040678][ T6836]  nci_register_device+0x7f1/0xb80
[  177.040722][ T6836]  ? __pfx_nci_register_device+0x10/0x10
[  177.040769][ T6836]  ? lockdep_init_map_type+0x5c/0x280
[  177.040823][ T6836]  virtual_ncidev_open+0x141/0x220
[  177.040868][ T6836]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  177.040910][ T6836]  misc_open+0x35a/0x420
[  177.041005][ T6836]  ? __pfx_misc_open+0x10/0x10
[  177.041047][ T6836]  chrdev_open+0x234/0x6a0
[  177.041076][ T6836]  ? __pfx_apparmor_file_open+0x10/0x10
[  177.041125][ T6836]  ? __pfx_chrdev_open+0x10/0x10
[  177.041158][ T6836]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  177.041212][ T6836]  do_dentry_open+0x741/0x1c10
[  177.041265][ T6836]  ? __pfx_chrdev_open+0x10/0x10
[  177.041306][ T6836]  vfs_open+0x82/0x3f0
[  177.041350][ T6836]  path_openat+0x1de4/0x2cb0
[  177.041416][ T6836]  ? __pfx_path_openat+0x10/0x10
[  177.041471][ T6836]  ? __lock_acquire+0xb8a/0x1c90
[  177.041522][ T6836]  do_filp_open+0x20b/0x470
[  177.041582][ T6836]  ? __pfx_do_filp_open+0x10/0x10
[  177.041668][ T6836]  ? alloc_fd+0x471/0x7d0
[  177.041730][ T6836]  do_sys_openat2+0x11b/0x1d0
[  177.041769][ T6836]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.041866][ T6836]  __x64_sys_openat+0x174/0x210
[  177.041909][ T6836]  ? __pfx___x64_sys_openat+0x10/0x10
[  177.041969][ T6836]  do_syscall_64+0xcd/0x490
[  177.042022][ T6836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.042056][ T6836] RIP: 0033:0x7fc33ed8e929
[  177.042083][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.042115][ T6836] RSP: 002b:00007fc33fca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.042147][ T6836] RAX: ffffffffffffffda RBX: 00007fc33efb5fa0 RCX: 00007fc33ed8e929
[  177.042168][ T6836] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  177.042189][ T6836] RBP: 00007fc33ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  177.042209][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.042228][ T6836] R13: 0000000000000000 R14: 00007fc33efb5fa0 R15: 00007ffcbe378538
[  177.042272][ T6836]  </TASK>
[  177.881455][ T6852] FAULT_INJECTION: forcing a failure.
[  177.881455][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.946466][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.0.241 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  177.946508][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.946536][ T6852] Call Trace:
[  177.946546][ T6852]  <TASK>
[  177.946558][ T6852]  dump_stack_lvl+0x16c/0x1f0
[  177.946607][ T6852]  should_fail_ex+0x512/0x640
[  177.946662][ T6852]  _copy_from_iter+0x29f/0x16f0
[  177.946703][ T6852]  ? __pfx__copy_from_iter+0x10/0x10
[  177.946734][ T6852]  ? rcu_is_watching+0x12/0xc0
[  177.946767][ T6852]  ? trace_kmalloc+0x2b/0xd0
[  177.946799][ T6852]  ? __kmalloc_noprof+0x242/0x510
[  177.946857][ T6852]  kernfs_fop_write_iter+0x19a/0x510
[  177.946899][ T6852]  vfs_write+0x6c4/0x1150
[  177.946947][ T6852]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  177.946985][ T6852]  ? __pfx___mutex_lock+0x10/0x10
[  177.947031][ T6852]  ? __pfx_vfs_write+0x10/0x10
[  177.947105][ T6852]  ksys_write+0x12a/0x250
[  177.947151][ T6852]  ? __pfx_ksys_write+0x10/0x10
[  177.947210][ T6852]  do_syscall_64+0xcd/0x490
[  177.947258][ T6852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.947289][ T6852] RIP: 0033:0x7f1f2638e929
[  177.947313][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.947343][ T6852] RSP: 002b:00007f1f271e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  177.947372][ T6852] RAX: ffffffffffffffda RBX: 00007f1f265b5fa0 RCX: 00007f1f2638e929
[  177.947392][ T6852] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000003
[  177.947410][ T6852] RBP: 00007f1f271e2090 R08: 0000000000000000 R09: 0000000000000000
[  177.947428][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.947446][ T6852] R13: 0000000000000000 R14: 00007f1f265b5fa0 R15: 00007ffd48e1ed68
[  177.947486][ T6852]  </TASK>
[  178.729922][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[  179.544148][ T6885] input: jJǸ-���9�J86�� as /devices/virtual/input/input9
[  179.764481][ T6875] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  182.489908][ T6917] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  183.225836][ T6955] FAULT_INJECTION: forcing a failure.
[  183.225836][ T6955] name failslab, interval 1, probability 0, space 0, times 0
[  183.318067][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.3.272 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  183.318105][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  183.318127][ T6955] Call Trace:
[  183.318141][ T6955]  <TASK>
[  183.318155][ T6955]  dump_stack_lvl+0x16c/0x1f0
[  183.318203][ T6955]  should_fail_ex+0x512/0x640
[  183.318249][ T6955]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  183.318301][ T6955]  should_failslab+0xc2/0x120
[  183.318332][ T6955]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  183.318388][ T6955]  ? security_file_alloc+0x34/0x2b0
[  183.318435][ T6955]  security_file_alloc+0x34/0x2b0
[  183.318478][ T6955]  init_file+0x93/0x4c0
[  183.318510][ T6955]  alloc_empty_file+0x73/0x1e0
[  183.318544][ T6955]  alloc_file_pseudo+0x13a/0x230
[  183.318576][ T6955]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  183.318602][ T6955]  ? do_raw_spin_unlock+0x172/0x230
[  183.318640][ T6955]  __anon_inode_getfile+0xf7/0x3a0
[  183.318672][ T6955]  ? find_held_lock+0x2b/0x80
[  183.318695][ T6955]  anon_inode_getfd+0x52/0xb0
[  183.318727][ T6955]  map_create+0xb68/0x1db0
[  183.318768][ T6955]  ? __pfx_map_create+0x10/0x10
[  183.318799][ T6955]  ? __might_fault+0xe3/0x190
[  183.318830][ T6955]  ? __might_fault+0xe3/0x190
[  183.318860][ T6955]  ? __might_fault+0x13b/0x190
[  183.318902][ T6955]  __sys_bpf+0x47cc/0x4d80
[  183.318925][ T6955]  ? __pfx___sys_bpf+0x10/0x10
[  183.318943][ T6955]  ? errseq_sample+0x53/0x70
[  183.318963][ T6955]  ? file_init_path+0x4fe/0x760
[  183.318989][ T6955]  ? do_futex+0x122/0x350
[  183.319015][ T6955]  ? __pfx_do_futex+0x10/0x10
[  183.319062][ T6955]  ? __sys_socket+0xac/0x260
[  183.319100][ T6955]  ? xfd_validate_state+0x61/0x180
[  183.319141][ T6955]  ? __pfx___do_sys_close_range+0x10/0x10
[  183.319189][ T6955]  __x64_sys_bpf+0x78/0xc0
[  183.319209][ T6955]  ? lockdep_hardirqs_on+0x7c/0x110
[  183.319239][ T6955]  do_syscall_64+0xcd/0x490
[  183.319271][ T6955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.319292][ T6955] RIP: 0033:0x7fc33ed8e929
[  183.319309][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.319329][ T6955] RSP: 002b:00007fc33fca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  183.319349][ T6955] RAX: ffffffffffffffda RBX: 00007fc33efb5fa0 RCX: 00007fc33ed8e929
[  183.319362][ T6955] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000
[  183.319384][ T6955] RBP: 00007fc33ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  183.319397][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.319409][ T6955] R13: 0000000000000000 R14: 00007fc33efb5fa0 R15: 00007ffcbe378538
[  183.319435][ T6955]  </TASK>
[  183.583614][    C1] vkms_vblank_simulate: vblank timer overrun
[  184.446102][ T6966] can: request_module (can-proto-3) failed.
[  185.098080][ T6971] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  185.361917][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'.
[  188.388722][ T7014] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  188.608950][ T7036] 
[  188.611352][ T7036] ======================================================
[  188.618424][ T7036] WARNING: possible circular locking dependency detected
[  188.625476][ T7036] 6.15.0-syzkaller-12426-ge271ed52b344 #0 Not tainted
[  188.632274][ T7036] ------------------------------------------------------
[  188.639322][ T7036] syz.3.293/7036 is trying to acquire lock:
[  188.645326][ T7036] ffffffff8e52f4c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470
[  188.654988][ T7036] 
[  188.654988][ T7036] but task is already holding lock:
[  188.662384][ T7036] ffff888025d127c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  188.673731][ T7036] 
[  188.673731][ T7036] which lock already depends on the new lock.
[  188.673731][ T7036] 
[  188.684178][ T7036] 
[  188.684178][ T7036] the existing dependency chain (in reverse order) is:
[  188.693404][ T7036] 
[  188.693404][ T7036] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}:
[  188.702097][ T7036]        blk_alloc_queue+0x619/0x760
[  188.707450][ T7036]        blk_mq_alloc_queue+0x175/0x290
[  188.713059][ T7036]        __blk_mq_alloc_disk+0x29/0x120
[  188.718664][ T7036]        loop_add+0x49e/0xb70
[  188.723407][ T7036]        loop_init+0x164/0x270
[  188.728204][ T7036]        do_one_initcall+0x120/0x6e0
[  188.733531][ T7036]        kernel_init_freeable+0x5c2/0x900
[  188.739296][ T7036]        kernel_init+0x1c/0x2b0
[  188.744172][ T7036]        ret_from_fork+0x5d7/0x6f0
[  188.749321][ T7036]        ret_from_fork_asm+0x1a/0x30
[  188.754629][ T7036] 
[  188.754629][ T7036] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  188.761882][ T7036]        fs_reclaim_acquire+0x102/0x150
[  188.767471][ T7036]        prepare_alloc_pages+0x162/0x610
[  188.773130][ T7036]        __alloc_frozen_pages_noprof+0x18b/0x23f0
[  188.779587][ T7036]        __alloc_pages_noprof+0xb/0x1b0
[  188.785186][ T7036]        pcpu_populate_chunk+0x110/0xb00
[  188.790857][ T7036]        pcpu_alloc_noprof+0x86a/0x1470
[  188.796435][ T7036]        xt_percpu_counter_alloc+0x13e/0x1b0
[  188.802458][ T7036]        find_check_entry.constprop.0+0xbc/0x9b0
[  188.808824][ T7036]        translate_table+0xc98/0x1720
[  188.814227][ T7036]        ipt_register_table+0x102/0x430
[  188.819805][ T7036]        iptable_mangle_table_init+0x40/0x60
[  188.825819][ T7036]        xt_find_table_lock+0x2e4/0x520
[  188.831396][ T7036]        xt_request_find_table_lock+0x28/0xf0
[  188.837509][ T7036]        get_info+0x190/0x610
[  188.842213][ T7036]        do_ipt_get_ctl+0x169/0xa10
[  188.847445][ T7036]        nf_getsockopt+0x79/0xe0
[  188.852409][ T7036]        ip_getsockopt+0x18c/0x1e0
[  188.857561][ T7036]        tcp_getsockopt+0x9e/0x100
[  188.862708][ T7036]        do_sock_getsockopt+0x3ff/0x800
[  188.868365][ T7036]        __sys_getsockopt+0x123/0x1b0
[  188.873786][ T7036]        __x64_sys_getsockopt+0xbd/0x160
[  188.879645][ T7036]        do_syscall_64+0xcd/0x490
[  188.884710][ T7036]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.891233][ T7036] 
[  188.891233][ T7036] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  188.899032][ T7036]        __lock_acquire+0x126f/0x1c90
[  188.904434][ T7036]        lock_acquire+0x179/0x350
[  188.909489][ T7036]        __mutex_lock+0x199/0xb90
[  188.914546][ T7036]        pcpu_alloc_noprof+0xb4c/0x1470
[  188.920124][ T7036]        blk_stat_alloc_callback+0xc8/0x280
[  188.926038][ T7036]        wbt_init+0xac/0x540
[  188.930650][ T7036]        queue_wb_lat_store+0x354/0x3d0
[  188.936213][ T7036]        queue_attr_store+0x279/0x320
[  188.941605][ T7036]        sysfs_kf_write+0xef/0x150
[  188.946745][ T7036]        kernfs_fop_write_iter+0x354/0x510
[  188.952571][ T7036]        vfs_write+0x6c4/0x1150
[  188.957539][ T7036]        ksys_write+0x12a/0x250
[  188.962429][ T7036]        do_syscall_64+0xcd/0x490
[  188.967524][ T7036]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.974057][ T7036] 
[  188.974057][ T7036] other info that might help us debug this:
[  188.974057][ T7036] 
[  188.984297][ T7036] Chain exists of:
[  188.984297][ T7036]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18
[  188.984297][ T7036] 
[  188.998066][ T7036]  Possible unsafe locking scenario:
[  188.998066][ T7036] 
[  189.005542][ T7036]        CPU0                    CPU1
[  189.010915][ T7036]        ----                    ----
[  189.016287][ T7036]   lock(&q->q_usage_counter(io)#18);
[  189.021690][ T7036]                                lock(fs_reclaim);
[  189.028220][ T7036]                                lock(&q->q_usage_counter(io)#18);
[  189.036137][ T7036]   lock(pcpu_alloc_mutex);
[  189.040668][ T7036] 
[  189.040668][ T7036]  *** DEADLOCK ***
[  189.040668][ T7036] 
[  189.048822][ T7036] 6 locks held by syz.3.293/7036:
[  189.053856][ T7036]  #0: ffff88803579c478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  189.062984][ T7036]  #1: ffff88803625c428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  189.072028][ T7036]  #2: ffff88807b9b3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  189.081834][ T7036]  #3: ffff888142b564b8 (kn->active#91){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  189.091912][ T7036]  #4: ffff888025d127c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  189.103658][ T7036]  #5: ffff888025d12800 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  189.115675][ T7036] 
[  189.115675][ T7036] stack backtrace:
[  189.121579][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.3.293 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  189.121614][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  189.121631][ T7036] Call Trace:
[  189.121640][ T7036]  <TASK>
[  189.121650][ T7036]  dump_stack_lvl+0x116/0x1f0
[  189.121690][ T7036]  print_circular_bug+0x275/0x350
[  189.121728][ T7036]  check_noncircular+0x14c/0x170
[  189.121768][ T7036]  __lock_acquire+0x126f/0x1c90
[  189.121810][ T7036]  lock_acquire+0x179/0x350
[  189.121846][ T7036]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  189.121887][ T7036]  ? __pfx___might_resched+0x10/0x10
[  189.121915][ T7036]  ? ksys_write+0x12a/0x250
[  189.121955][ T7036]  ? do_syscall_64+0xcd/0x490
[  189.122001][ T7036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.122031][ T7036]  __mutex_lock+0x199/0xb90
[  189.122069][ T7036]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  189.122110][ T7036]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  189.122151][ T7036]  ? __pfx___mutex_lock+0x10/0x10
[  189.122200][ T7036]  ? pcpu_alloc_noprof+0xb4c/0x1470
[  189.122239][ T7036]  pcpu_alloc_noprof+0xb4c/0x1470
[  189.122285][ T7036]  ? __pfx_wbt_data_dir+0x10/0x10
[  189.122327][ T7036]  ? __pfx_wb_timer_fn+0x10/0x10
[  189.122355][ T7036]  blk_stat_alloc_callback+0xc8/0x280
[  189.122384][ T7036]  ? kasan_save_track+0x14/0x30
[  189.122428][ T7036]  wbt_init+0xac/0x540
[  189.122459][ T7036]  queue_wb_lat_store+0x354/0x3d0
[  189.122497][ T7036]  ? __pfx_queue_wb_lat_store+0x10/0x10
[  189.122543][ T7036]  ? __mutex_trylock_common+0xe9/0x250
[  189.122581][ T7036]  ? __pfx_queue_wb_lat_store+0x10/0x10
[  189.122625][ T7036]  queue_attr_store+0x279/0x320
[  189.122649][ T7036]  ? __pfx_queue_attr_store+0x10/0x10
[  189.122672][ T7036]  ? __lock_acquire+0x622/0x1c90
[  189.122716][ T7036]  ? find_held_lock+0x2b/0x80
[  189.122741][ T7036]  ? sysfs_file_kobj+0xe4/0x290
[  189.122776][ T7036]  ? __pfx_queue_attr_store+0x10/0x10
[  189.122800][ T7036]  sysfs_kf_write+0xef/0x150
[  189.122833][ T7036]  kernfs_fop_write_iter+0x354/0x510
[  189.122861][ T7036]  ? __pfx_sysfs_kf_write+0x10/0x10
[  189.122895][ T7036]  vfs_write+0x6c4/0x1150
[  189.122934][ T7036]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  189.122969][ T7036]  ? __pfx___mutex_lock+0x10/0x10
[  189.123007][ T7036]  ? __pfx_vfs_write+0x10/0x10
[  189.123056][ T7036]  ksys_write+0x12a/0x250
[  189.123095][ T7036]  ? __pfx_ksys_write+0x10/0x10
[  189.123139][ T7036]  do_syscall_64+0xcd/0x490
[  189.123178][ T7036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.123204][ T7036] RIP: 0033:0x7fc33ed8e929
[  189.123224][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.123250][ T7036] RSP: 002b:00007fc33fc65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  189.123274][ T7036] RAX: ffffffffffffffda RBX: 00007fc33efb6160 RCX: 00007fc33ed8e929
[  189.123291][ T7036] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000004
[  189.123307][ T7036] RBP: 00007fc33ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  189.123324][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.123339][ T7036] R13: 0000000000000000 R14: 00007fc33efb6160 R15: 00007ffcbe378538
[  189.123364][ T7036]  </TASK>