last executing test programs:

32.309636256s ago: executing program 3 (id=2388):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8)
pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0)
r2 = epoll_create$auto(0x3a)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00')
rename$auto(&(0x7f0000000680)=':,\x00', 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

17.294978017s ago: executing program 1 (id=2414):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0)
socket(0x18, 0xa, 0x1)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r4, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1)
socket(0xa, 0x2, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r5, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r6, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

16.243846192s ago: executing program 1 (id=2415):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0xa, 0x2, 0x0)
connect$auto(r1, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r5, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1)
socket(0xa, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r6, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

15.212058949s ago: executing program 1 (id=2417):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8)
pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0)
r2 = epoll_create$auto(0x3a)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00')
rename$auto(&(0x7f0000000680)=':,\x00', 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

13.599568511s ago: executing program 1 (id=2419):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16=r5, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da05, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

13.277651224s ago: executing program 0 (id=2421):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0xa, 0x2, 0x0)
connect$auto(r1, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
socket(0xa, 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r3, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r4, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

11.11869255s ago: executing program 2 (id=2422):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16=r5, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

11.117784361s ago: executing program 1 (id=2429):
socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
io_uring_setup$auto(0x85, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
sysfs$auto(0x2, 0xe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)

9.830932411s ago: executing program 2 (id=2423):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8)
pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
r2 = epoll_create$auto(0x3a)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00')
rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00')
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

7.814343301s ago: executing program 1 (id=2424):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = memfd_create$auto(0x0, 0x9)
socket(0x1a, 0x6, 0x968c)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0)
sendfile$auto(r2, r2, 0x0, 0x2)
socket(0x1d, 0x2, 0x6)
mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000)
capset$auto(0x0, 0x0)
socket(0x6, 0x5, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
bpf$auto(0x0, 0x0, 0xf)
r3 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x240}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)

7.813182641s ago: executing program 2 (id=2432):
socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
io_uring_setup$auto(0x85, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
sysfs$auto(0x2, 0xe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)

7.800156647s ago: executing program 0 (id=2425):
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
socket(0x15, 0x5, 0x0)
mmap$auto(0xfffffffffffffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0xa, 0x4, 0xb3, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x1a4, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2]}, 0x1fe, 0xd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r2=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, [0x0, 0x0, 0x0, 0x100000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fc, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r5, 0x8901, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
write$auto(0x3, 0x0, 0x100082)

7.137813173s ago: executing program 0 (id=2426):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16=r5, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da05, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

6.758239255s ago: executing program 3 (id=2393):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003740)='/dev/sequencer2\x00', 0x88241, 0x0)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x105d00, 0x0)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0x100082)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5408, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0)
mmap$auto(0x0, 0x20009, 0x80000003, 0xebe, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty11\x00', 0x4000, 0x0)
ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000080)="b3e4882f932111515dcb2a5cb21bd9e383c3e4bb698cdd616afe736d868699739ed226b9991f5ce84de1e6271017a5ecf8d5c2d5c45d1b1f6acedd5ded0a4a4346926925b8ab77f0d49ed41b76fd83bc32d66eb69f1f7c2c40e8ceb6b2e41bef29ca9bb66e7369da705088729e065ebfab84d2b3dfc20a010390ef9f6f164a92")
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy17/hwsim/dfs_simulate_radar\x00', 0x0, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)

4.598191381s ago: executing program 3 (id=2428):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0xa, 0x2, 0x0)
connect$auto(r1, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r4, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1)
socket(0xa, 0x2, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r5, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r6, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

4.59289808s ago: executing program 0 (id=2437):
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
membarrier$auto(0x2, 0x0, 0x9)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
socket(0x22, 0x3, 0x1)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ustat$auto(0x801, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_register$auto(0x2, 0xd, 0x0, 0x20)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6)
r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001)

3.110912247s ago: executing program 3 (id=2430):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0)
r1 = socket(0xa, 0x2, 0x0)
connect$auto(r1, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r5, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1)
socket(0xa, 0x2, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r6, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r7, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

3.109889073s ago: executing program 2 (id=2439):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff"})
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x3, r1)
setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, 0x0, 0x100000a3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x60)
io_uring_setup$auto(0x25a8c, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pipe2$auto(0x0, 0x80)

1.829231387s ago: executing program 3 (id=2431):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16=r5, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da05, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

1.821116518s ago: executing program 2 (id=2441):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0)
sendfile$auto(0x2, 0x3, 0x0, 0xc3e0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
socket(0x18, 0xa, 0x1)
r1 = socket(0xa, 0x2, 0x0)
connect$auto(r1, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r5, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1)
socket(0xa, 0x2, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r6, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80)
io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r7, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x88)

1.408908087s ago: executing program 0 (id=2433):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8)
pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f)
mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0)
epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0)
link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00')
rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00')
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

262.235378ms ago: executing program 3 (id=2434):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da05, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

212.706153ms ago: executing program 0 (id=2435):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003740)='/dev/sequencer2\x00', 0x88241, 0x0)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x105d00, 0x0)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0x100082)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r2, 0x5408, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0)
mmap$auto(0x0, 0x20009, 0x80000003, 0xebe, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty11\x00', 0x4000, 0x0)
ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy17/hwsim/dfs_simulate_radar\x00', 0x0, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)

0s ago: executing program 2 (id=2436):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
read$auto_urandom_fops_random(r0, &(0x7f0000000540)=""/4096, 0x1000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0xd13d)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyud/power/runtime_active_time\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0)
ppoll$auto(&(0x7f0000000040)={r3, 0x2}, 0x10, 0x0, &(0x7f0000000100)={0x4}, 0x8)
openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf25030000002c00038028000180240006801d0074804cfe4d"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/veth0_to_bridge/interval_probe_time_ms\x00', 0x202, 0x0)
sendfile$auto(r6, r5, 0x0, 0x48)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
sysfs$auto(0x2, 0x11, 0x0)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4, 0x0)
r7 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r7, 0x0, 0xe)

kernel console output (not intermixed with test programs):

4]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.469250][T14464] RIP: 0033:0x7f2b8b78eb69
[  767.469275][T14464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  767.469314][T14464] RSP: 002b:00007f2b8c595038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  767.469343][T14464] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa0 RCX: 00007f2b8b78eb69
[  767.469365][T14464] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  767.469384][T14464] RBP: 00007f2b8b811df1 R08: 0000000000000000 R09: 0000000000000000
[  767.469404][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.469423][T14464] R13: 0000000000000000 R14: 00007f2b8b9b5fa0 R15: 00007ffc28aa8798
[  767.469466][T14464]  </TASK>
[  768.218026][T14466] FAULT_INJECTION: forcing a failure.
[  768.218026][T14466] name failslab, interval 1, probability 0, space 0, times 0
[  768.336724][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.1.1662 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  768.336773][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  768.336793][T14466] Call Trace:
[  768.336804][T14466]  <TASK>
[  768.336817][T14466]  dump_stack_lvl+0x16c/0x1f0
[  768.336858][T14466]  should_fail_ex+0x512/0x640
[  768.336898][T14466]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  768.336944][T14466]  should_failslab+0xc2/0x120
[  768.336989][T14466]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  768.337037][T14466]  ? getname_flags.part.0+0x4c/0x550
[  768.337108][T14466]  getname_flags.part.0+0x4c/0x550
[  768.337165][T14466]  getname_flags+0x93/0xf0
[  768.337203][T14466]  do_sys_openat2+0xb8/0x1d0
[  768.337256][T14466]  ? __pfx_do_sys_openat2+0x10/0x10
[  768.337310][T14466]  ? __sys_sendmsg+0x18c/0x220
[  768.337355][T14466]  __x64_sys_openat+0x174/0x210
[  768.337408][T14466]  ? __pfx___x64_sys_openat+0x10/0x10
[  768.337475][T14466]  do_syscall_64+0xcd/0x490
[  768.337513][T14466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.337547][T14466] RIP: 0033:0x7f40ee38eb69
[  768.337570][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  768.337602][T14466] RSP: 002b:00007f40ef20e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  768.337632][T14466] RAX: ffffffffffffffda RBX: 00007f40ee5b5fa0 RCX: 00007f40ee38eb69
[  768.337653][T14466] RDX: 0000000000002000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  768.337673][T14466] RBP: 00007f40ee411df1 R08: 0000000000000000 R09: 0000000000000000
[  768.337693][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  768.337712][T14466] R13: 0000000000000000 R14: 00007f40ee5b5fa0 R15: 00007ffeec94d328
[  768.337752][T14466]  </TASK>
[  768.548023][T14470] vhci_hcd: invalid port number 16
[  768.553189][T14470] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  769.784405][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1666'.
[  769.820056][T14486] FAULT_INJECTION: forcing a failure.
[  769.820056][T14486] name fail_futex, interval 1, probability 0, space 0, times 0
[  769.820099][T14482] hub 8-0:1.0: USB hub found
[  769.832539][T14482] hub 8-0:1.0: 1 port detected
[  769.890169][T14486] CPU: 1 UID: 0 PID: 14486 Comm: syz.0.1667 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  769.890228][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  769.890249][T14486] Call Trace:
[  769.890260][T14486]  <TASK>
[  769.890273][T14486]  dump_stack_lvl+0x16c/0x1f0
[  769.890315][T14486]  should_fail_ex+0x512/0x640
[  769.890356][T14486]  ? unwind_get_return_address+0x59/0xa0
[  769.890398][T14486]  get_futex_key+0x1d0/0x1560
[  769.890444][T14486]  ? __pfx_get_futex_key+0x10/0x10
[  769.890485][T14486]  ? stack_trace_save+0x8e/0xc0
[  769.890523][T14486]  ? __pfx_stack_trace_save+0x10/0x10
[  769.890569][T14486]  futex_wait_setup+0x9d/0x550
[  769.890634][T14486]  __futex_wait+0x194/0x2f0
[  769.890687][T14486]  ? __pfx___futex_wait+0x10/0x10
[  769.890747][T14486]  ? __pfx_futex_wake_mark+0x10/0x10
[  769.890805][T14486]  ? futex_private_hash_put+0x176/0x300
[  769.890852][T14486]  ? futex_private_hash_put+0x18a/0x300
[  769.890897][T14486]  futex_wait+0xe8/0x380
[  769.890948][T14486]  ? __pfx_futex_wait+0x10/0x10
[  769.891008][T14486]  ? kmem_cache_free+0x2d1/0x4d0
[  769.891045][T14486]  ? fd_install+0x225/0x750
[  769.891077][T14486]  ? putname+0x154/0x1a0
[  769.891127][T14486]  do_futex+0x229/0x350
[  769.891171][T14486]  ? __pfx_do_futex+0x10/0x10
[  769.891218][T14486]  ? fput+0x9b/0xd0
[  769.891265][T14486]  ? __sys_sendmsg+0x18c/0x220
[  769.891304][T14486]  __x64_sys_futex+0x1e0/0x4c0
[  769.891350][T14486]  ? __x64_sys_openat+0x174/0x210
[  769.891402][T14486]  ? __pfx___x64_sys_futex+0x10/0x10
[  769.891461][T14486]  do_syscall_64+0xcd/0x490
[  769.891499][T14486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.891532][T14486] RIP: 0033:0x7f53d158eb69
[  769.891556][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  769.891587][T14486] RSP: 002b:00007f53d23dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  769.891619][T14486] RAX: ffffffffffffffda RBX: 00007f53d17b5fa8 RCX: 00007f53d158eb69
[  769.891641][T14486] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f53d17b5fa8
[  769.891661][T14486] RBP: 00007f53d17b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  769.891681][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f53d17b5fac
[  769.891700][T14486] R13: 0000000000000000 R14: 00007ffe358d9550 R15: 00007ffe358d9638
[  769.891742][T14486]  </TASK>
[  770.047922][T14459] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  770.411852][T14494] vhci_hcd: invalid port number 16
[  770.437273][T14494] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  770.492596][T14492] hub 8-0:1.0: USB hub found
[  770.514150][T14492] hub 8-0:1.0: 1 port detected
[  770.925799][T14505] vhci_hcd: invalid port number 16
[  770.951777][T14505] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  771.781278][T14514] hub 8-0:1.0: USB hub found
[  771.816843][T14514] hub 8-0:1.0: 1 port detected
[  772.872784][T14528] hub 8-0:1.0: USB hub found
[  772.879532][T14528] hub 8-0:1.0: 1 port detected
[  775.621990][T14543] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  776.710293][T14571] vhci_hcd: invalid port number 16
[  776.784894][T14557] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  776.878723][T14571] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  777.577053][T14581] vhci_hcd: invalid port number 16
[  777.582322][T14581] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  778.379672][T14561] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  778.474176][T14591] mkiss: ax0: crc mode is auto.
[  779.956182][T14614] hub 8-0:1.0: USB hub found
[  779.979623][T14614] hub 8-0:1.0: 1 port detected
[  780.190520][T14621] FAULT_INJECTION: forcing a failure.
[  780.190520][T14621] name failslab, interval 1, probability 0, space 0, times 0
[  780.203708][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.0.1695 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  780.203768][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  780.203787][T14621] Call Trace:
[  780.203798][T14621]  <TASK>
[  780.203810][T14621]  dump_stack_lvl+0x16c/0x1f0
[  780.203849][T14621]  should_fail_ex+0x512/0x640
[  780.203886][T14621]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  780.203927][T14621]  should_failslab+0xc2/0x120
[  780.203966][T14621]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  780.204014][T14621]  ? __pmd_alloc+0xbf/0x930
[  780.204065][T14621]  __pmd_alloc+0xbf/0x930
[  780.204113][T14621]  __handle_mm_fault+0xa06/0x2a50
[  780.204149][T14621]  ? mt_find+0x3ef/0xa30
[  780.204183][T14621]  ? __pfx___handle_mm_fault+0x10/0x10
[  780.204211][T14621]  ? __pfx_mt_find+0x10/0x10
[  780.204263][T14621]  ? find_vma+0xbf/0x140
[  780.204310][T14621]  ? __pfx_find_vma+0x10/0x10
[  780.204354][T14621]  handle_mm_fault+0x589/0xd10
[  780.204386][T14621]  ? trace_raw_output_exceptions+0x121/0x150
[  780.204435][T14621]  do_user_addr_fault+0x7a6/0x1370
[  780.204485][T14621]  ? rcu_is_watching+0x12/0xc0
[  780.204519][T14621]  exc_page_fault+0x5c/0xb0
[  780.204548][T14621]  asm_exc_page_fault+0x26/0x30
[  780.204576][T14621] RIP: 0010:rep_movs_alternative+0x33/0x90
[  780.204619][T14621] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  780.204648][T14621] RSP: 0018:ffffc90004547e98 EFLAGS: 00050206
[  780.204672][T14621] RAX: 657069705f637072 RBX: 000000000000000b RCX: 000000000000000b
[  780.204690][T14621] RDX: fffffbfff1a01f95 RSI: ffffffff8d00fca0 RDI: 0000000000000000
[  780.204708][T14621] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1a01f95
[  780.204726][T14621] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff8d00fca0
[  780.204743][T14621] R13: 000000000000000b R14: 00007ffffffff000 R15: 0000000000000000
[  780.204780][T14621]  _copy_to_user+0xbb/0xd0
[  780.204823][T14621]  fs_name+0x172/0x220
[  780.204861][T14621]  __x64_sys_sysfs+0xbf/0x1a0
[  780.204899][T14621]  do_syscall_64+0xcd/0x490
[  780.204933][T14621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.204961][T14621] RIP: 0033:0x7f53d158eb69
[  780.204984][T14621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  780.205011][T14621] RSP: 002b:00007f53d23dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  780.205037][T14621] RAX: ffffffffffffffda RBX: 00007f53d17b5fa0 RCX: 00007f53d158eb69
[  780.205057][T14621] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  780.205074][T14621] RBP: 00007f53d1611df1 R08: 0000000000000000 R09: 0000000000000000
[  780.205091][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  780.205107][T14621] R13: 0000000000000000 R14: 00007f53d17b5fa0 R15: 00007ffe358d9638
[  780.205143][T14621]  </TASK>
[  781.352984][T14627] vhci_hcd: invalid port number 16
[  781.381876][T14627] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  781.393149][T14629] vhci_hcd: invalid port number 16
[  781.401529][T14629] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  781.462876][T14601] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  782.724525][T14648] FAULT_INJECTION: forcing a failure.
[  782.724525][T14648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  782.831388][T14648] CPU: 1 UID: 0 PID: 14648 Comm: syz.1.1700 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  782.831437][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  782.831458][T14648] Call Trace:
[  782.831472][T14648]  <TASK>
[  782.831484][T14648]  dump_stack_lvl+0x16c/0x1f0
[  782.831514][T14648]  should_fail_ex+0x512/0x640
[  782.831547][T14648]  _copy_to_user+0x32/0xd0
[  782.831583][T14648]  fs_name+0x172/0x220
[  782.831615][T14648]  __x64_sys_sysfs+0xbf/0x1a0
[  782.831647][T14648]  do_syscall_64+0xcd/0x490
[  782.831675][T14648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.831699][T14648] RIP: 0033:0x7f40ee38eb69
[  782.831718][T14648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  782.831740][T14648] RSP: 002b:00007f40ef20e038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  782.831762][T14648] RAX: ffffffffffffffda RBX: 00007f40ee5b5fa0 RCX: 00007f40ee38eb69
[  782.831777][T14648] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  782.831791][T14648] RBP: 00007f40ee411df1 R08: 0000000000000000 R09: 0000000000000000
[  782.831804][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  782.831818][T14648] R13: 0000000000000000 R14: 00007f40ee5b5fa0 R15: 00007ffeec94d328
[  782.831847][T14648]  </TASK>
[  783.267469][T14636] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  783.664728][T14655] hub 8-0:1.0: USB hub found
[  783.691909][T14655] hub 8-0:1.0: 1 port detected
[  784.435896][T14668] hub 8-0:1.0: USB hub found
[  784.441071][T14668] hub 8-0:1.0: 1 port detected
[  784.680838][T14674] vhci_hcd: invalid port number 16
[  784.696428][T14674] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  784.795253][T14673] hub 8-0:1.0: USB hub found
[  784.806785][T14673] hub 8-0:1.0: 1 port detected
[  786.092014][T14696] vhci_hcd: invalid port number 16
[  786.103123][T14696] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  787.479417][T14711] hub 8-0:1.0: USB hub found
[  787.504924][T14711] hub 8-0:1.0: 1 port detected
[  787.642898][T14715] vhci_hcd: invalid port number 16
[  787.664316][T14715] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  788.239163][T14724] hub 8-0:1.0: USB hub found
[  788.246470][T14724] hub 8-0:1.0: 1 port detected
[  788.995523][T14744] vhci_hcd: invalid port number 16
[  789.014242][T14744] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  790.680463][T14764] hub 8-0:1.0: USB hub found
[  790.685744][T14764] hub 8-0:1.0: 1 port detected
[  790.755185][T14767] hub 8-0:1.0: USB hub found
[  790.770767][T14767] hub 8-0:1.0: 1 port detected
[  791.513621][T14775] hub 8-0:1.0: USB hub found
[  791.520327][T14775] hub 8-0:1.0: 1 port detected
[  791.856041][T14780] hub 8-0:1.0: USB hub found
[  791.864181][T14780] hub 8-0:1.0: 1 port detected
[  792.379337][T14792] vhci_hcd: invalid port number 16
[  792.404689][T14792] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  793.053705][T14805] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  793.376736][T14807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  793.541234][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'.
[  793.997212][T14818] hub 8-0:1.0: USB hub found
[  794.009215][T14818] hub 8-0:1.0: 1 port detected
[  794.595642][T14826] hub 8-0:1.0: USB hub found
[  794.607250][T14826] hub 8-0:1.0: 1 port detected
[  796.135994][T14831] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  796.328500][T14851] FAULT_INJECTION: forcing a failure.
[  796.328500][T14851] name failslab, interval 1, probability 0, space 0, times 0
[  796.361947][T14851] CPU: 1 UID: 0 PID: 14851 Comm: syz.3.1743 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  796.361996][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  796.362016][T14851] Call Trace:
[  796.362027][T14851]  <TASK>
[  796.362040][T14851]  dump_stack_lvl+0x16c/0x1f0
[  796.362081][T14851]  should_fail_ex+0x512/0x640
[  796.362123][T14851]  ? __kvmalloc_node_noprof+0x124/0x620
[  796.362167][T14851]  should_failslab+0xc2/0x120
[  796.362213][T14851]  __kvmalloc_node_noprof+0x137/0x620
[  796.362252][T14851]  ? __pfx_net_ctl_permissions+0x10/0x10
[  796.362305][T14851]  ? proc_sys_call_handler+0x281/0x570
[  796.362364][T14851]  ? proc_sys_call_handler+0x281/0x570
[  796.362411][T14851]  proc_sys_call_handler+0x281/0x570
[  796.362464][T14851]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  796.362516][T14851]  ? splice_from_pipe_next+0x1f8/0x5d0
[  796.362561][T14851]  iter_file_splice_write+0x91c/0x1150
[  796.362626][T14851]  ? __pfx_iter_file_splice_write+0x10/0x10
[  796.362671][T14851]  ? __pfx_copy_splice_read+0x10/0x10
[  796.362724][T14851]  ? __pfx_iter_file_splice_write+0x10/0x10
[  796.362760][T14851]  direct_splice_actor+0x192/0x6c0
[  796.362798][T14851]  splice_direct_to_actor+0x345/0xa30
[  796.362834][T14851]  ? __pfx_direct_splice_actor+0x10/0x10
[  796.362877][T14851]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  796.362921][T14851]  do_splice_direct+0x174/0x240
[  796.362954][T14851]  ? __pfx_do_splice_direct+0x10/0x10
[  796.362991][T14851]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  796.363031][T14851]  ? rw_verify_area+0xcf/0x6c0
[  796.363070][T14851]  do_sendfile+0xb06/0xe50
[  796.363115][T14851]  ? __pfx_do_sendfile+0x10/0x10
[  796.363151][T14851]  ? __sys_sendmsg+0x18c/0x220
[  796.363185][T14851]  ? __x64_sys_futex+0x1e0/0x4c0
[  796.363222][T14851]  ? __x64_sys_futex+0x1e9/0x4c0
[  796.363263][T14851]  __x64_sys_sendfile64+0x1d8/0x220
[  796.363315][T14851]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  796.363377][T14851]  do_syscall_64+0xcd/0x490
[  796.363415][T14851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.363448][T14851] RIP: 0033:0x7f2a0c78eb69
[  796.363473][T14851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  796.363504][T14851] RSP: 002b:00007f2a0d6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  796.363534][T14851] RAX: ffffffffffffffda RBX: 00007f2a0c9b5fa0 RCX: 00007f2a0c78eb69
[  796.363553][T14851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a
[  796.363570][T14851] RBP: 00007f2a0c811df1 R08: 0000000000000000 R09: 0000000000000000
[  796.363589][T14851] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000
[  796.363609][T14851] R13: 0000000000000000 R14: 00007f2a0c9b5fa0 R15: 00007ffca4a90228
[  796.363651][T14851]  </TASK>
[  797.149533][T14857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  797.352321][T14859] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  798.266856][T14845] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  799.521443][T14866] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  800.357380][T14871] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  800.495047][T14885] FAULT_INJECTION: forcing a failure.
[  800.495047][T14885] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  800.521923][T14885] CPU: 1 UID: 0 PID: 14885 Comm: syz.2.1751 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  800.521970][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  800.521998][T14885] Call Trace:
[  800.522009][T14885]  <TASK>
[  800.522022][T14885]  dump_stack_lvl+0x16c/0x1f0
[  800.522066][T14885]  should_fail_ex+0x512/0x640
[  800.522115][T14885]  should_fail_alloc_page+0xe7/0x130
[  800.522166][T14885]  prepare_alloc_pages+0x3c2/0x610
[  800.522217][T14885]  ? arch_stack_walk+0xa6/0x100
[  800.522259][T14885]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  800.522312][T14885]  ? stack_trace_save+0x8e/0xc0
[  800.522350][T14885]  ? __pfx_stack_trace_save+0x10/0x10
[  800.522386][T14885]  ? rcu_is_watching+0x12/0xc0
[  800.522422][T14885]  ? stack_depot_save_flags+0x29/0x9c0
[  800.522465][T14885]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  800.522511][T14885]  ? kasan_save_stack+0x42/0x60
[  800.522548][T14885]  ? kasan_save_stack+0x33/0x60
[  800.522585][T14885]  ? kasan_save_track+0x14/0x30
[  800.522618][T14885]  ? __kasan_slab_alloc+0x89/0x90
[  800.522656][T14885]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  800.522694][T14885]  ? __pmd_alloc+0xbf/0x930
[  800.522748][T14885]  ? rep_movs_alternative+0x33/0x90
[  800.522793][T14885]  ? _copy_to_user+0xbb/0xd0
[  800.522835][T14885]  ? fs_name+0x172/0x220
[  800.522874][T14885]  ? __x64_sys_sysfs+0xbf/0x1a0
[  800.522915][T14885]  ? do_syscall_64+0xcd/0x490
[  800.522953][T14885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.523003][T14885]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  800.523058][T14885]  ? policy_nodemask+0xea/0x4e0
[  800.523107][T14885]  alloc_pages_mpol+0x1fb/0x550
[  800.523154][T14885]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  800.523211][T14885]  ? __pfx_filemap_map_pages+0x10/0x10
[  800.523251][T14885]  alloc_pages_noprof+0x131/0x390
[  800.523299][T14885]  pte_alloc_one+0x1c/0x3a0
[  800.523335][T14885]  __do_fault+0x320/0x490
[  800.523370][T14885]  ? do_raw_spin_lock+0x12c/0x2b0
[  800.523423][T14885]  ? __pfx_filemap_map_pages+0x10/0x10
[  800.523461][T14885]  do_pte_missing+0x1a6/0x3ba0
[  800.523496][T14885]  ? do_raw_spin_unlock+0x172/0x230
[  800.523551][T14885]  ? __pmd_alloc+0x3fb/0x930
[  800.523607][T14885]  __handle_mm_fault+0x152a/0x2a50
[  800.523648][T14885]  ? mt_find+0x3ef/0xa30
[  800.523688][T14885]  ? __pfx___handle_mm_fault+0x10/0x10
[  800.523720][T14885]  ? __pfx_mt_find+0x10/0x10
[  800.523780][T14885]  ? find_vma+0xbf/0x140
[  800.523822][T14885]  ? __pfx_find_vma+0x10/0x10
[  800.523871][T14885]  handle_mm_fault+0x589/0xd10
[  800.523905][T14885]  ? trace_raw_output_exceptions+0x121/0x150
[  800.523959][T14885]  do_user_addr_fault+0x7a6/0x1370
[  800.524025][T14885]  ? rcu_is_watching+0x12/0xc0
[  800.524063][T14885]  exc_page_fault+0x5c/0xb0
[  800.524096][T14885]  asm_exc_page_fault+0x26/0x30
[  800.524127][T14885] RIP: 0010:rep_movs_alternative+0x33/0x90
[  800.524176][T14885] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  800.524208][T14885] RSP: 0018:ffffc90003e6fe98 EFLAGS: 00050206
[  800.524234][T14885] RAX: 657069705f637072 RBX: 000000000000000b RCX: 000000000000000b
[  800.524254][T14885] RDX: fffffbfff1a01f95 RSI: ffffffff8d00fca0 RDI: 0000000000000000
[  800.524275][T14885] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1a01f95
[  800.524294][T14885] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff8d00fca0
[  800.524314][T14885] R13: 000000000000000b R14: 00007ffffffff000 R15: 0000000000000000
[  800.524355][T14885]  _copy_to_user+0xbb/0xd0
[  800.524404][T14885]  fs_name+0x172/0x220
[  800.524447][T14885]  __x64_sys_sysfs+0xbf/0x1a0
[  800.524490][T14885]  do_syscall_64+0xcd/0x490
[  800.524528][T14885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.524559][T14885] RIP: 0033:0x7f2b8b78eb69
[  800.524584][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  800.524615][T14885] RSP: 002b:00007f2b8c595038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  800.524643][T14885] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa0 RCX: 00007f2b8b78eb69
[  800.524664][T14885] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  800.524682][T14885] RBP: 00007f2b8b811df1 R08: 0000000000000000 R09: 0000000000000000
[  800.524701][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  800.524720][T14885] R13: 0000000000000000 R14: 00007f2b8b9b5fa0 R15: 00007ffc28aa8798
[  800.524762][T14885]  </TASK>
[  801.384280][T14877] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  801.459382][T14891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  801.476051][T14888] vhci_hcd: invalid port number 16
[  801.542617][T14888] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  801.775066][T14893] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  801.864974][T14904] vhci_hcd: invalid port number 16
[  801.871159][T14904] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  801.957054][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'.
[  802.648503][T14919] vhci_hcd: invalid port number 16
[  802.659544][T14919] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  802.911151][T14928] vhci_hcd: invalid port number 16
[  802.925464][T14928] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  804.713149][T14953] vhci_hcd: invalid port number 16
[  804.731146][T14953] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  805.932925][T14963] hub 8-0:1.0: USB hub found
[  805.942052][T14963] hub 8-0:1.0: 1 port detected
[  806.152578][T14948] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  806.334760][T14967] hub 8-0:1.0: USB hub found
[  806.341181][T14967] hub 8-0:1.0: 1 port detected
[  806.650227][T14973] hub 8-0:1.0: USB hub found
[  806.655896][T14973] hub 8-0:1.0: 1 port detected
[  807.667429][T14993] FAULT_INJECTION: forcing a failure.
[  807.667429][T14993] name fail_futex, interval 1, probability 0, space 0, times 0
[  807.727299][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.3.1771 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  807.727347][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  807.727366][T14993] Call Trace:
[  807.727377][T14993]  <TASK>
[  807.727389][T14993]  dump_stack_lvl+0x16c/0x1f0
[  807.727430][T14993]  should_fail_ex+0x512/0x640
[  807.727477][T14993]  get_futex_key+0x1d0/0x1560
[  807.727523][T14993]  ? __pfx_get_futex_key+0x10/0x10
[  807.727630][T14993]  ? futex_private_hash_put+0x176/0x300
[  807.727684][T14993]  futex_wake+0xea/0x530
[  807.727731][T14993]  ? futex_wait+0x120/0x380
[  807.727782][T14993]  ? __pfx_futex_wait+0x10/0x10
[  807.727830][T14993]  ? __pfx_futex_wake+0x10/0x10
[  807.727887][T14993]  ? __lock_acquire+0xb97/0x1ce0
[  807.727942][T14993]  do_futex+0x1e3/0x350
[  807.727987][T14993]  ? __pfx_do_futex+0x10/0x10
[  807.728035][T14993]  ? find_held_lock+0x2b/0x80
[  807.728074][T14993]  __x64_sys_futex+0x1e0/0x4c0
[  807.728123][T14993]  ? __pfx___x64_sys_futex+0x10/0x10
[  807.728168][T14993]  ? _copy_to_user+0x48/0xd0
[  807.728234][T14993]  do_syscall_64+0xcd/0x490
[  807.728274][T14993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.728308][T14993] RIP: 0033:0x7f2a0c78eb69
[  807.728334][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  807.728369][T14993] RSP: 002b:00007f2a0d6d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  807.728401][T14993] RAX: ffffffffffffffda RBX: 00007f2a0c9b5fa8 RCX: 00007f2a0c78eb69
[  807.728423][T14993] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2a0c9b5fac
[  807.728444][T14993] RBP: 00007f2a0c9b5fa0 R08: 00007f2a0d6d2000 R09: 0000000000000000
[  807.728465][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a0c9b5fac
[  807.728485][T14993] R13: 0000000000000000 R14: 00007ffca4a90140 R15: 00007ffca4a90228
[  807.728533][T14993]  </TASK>
[  810.804200][T15040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  811.040614][T15043] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  811.518364][T15057] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  811.769757][T15059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  811.951862][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'.
[  812.230358][T15068] FAULT_INJECTION: forcing a failure.
[  812.230358][T15068] name fail_futex, interval 1, probability 0, space 0, times 0
[  812.270466][T15068] CPU: 0 UID: 0 PID: 15068 Comm: syz.2.1787 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  812.270514][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  812.270541][T15068] Call Trace:
[  812.270553][T15068]  <TASK>
[  812.270564][T15068]  dump_stack_lvl+0x16c/0x1f0
[  812.270606][T15068]  should_fail_ex+0x512/0x640
[  812.270645][T15068]  ? unwind_get_return_address+0x59/0xa0
[  812.270686][T15068]  get_futex_key+0x1d0/0x1560
[  812.270732][T15068]  ? __pfx_get_futex_key+0x10/0x10
[  812.270775][T15068]  ? stack_trace_save+0x8e/0xc0
[  812.270812][T15068]  ? __pfx_stack_trace_save+0x10/0x10
[  812.270858][T15068]  futex_wait_setup+0x9d/0x550
[  812.270922][T15068]  __futex_wait+0x194/0x2f0
[  812.270975][T15068]  ? __pfx___futex_wait+0x10/0x10
[  812.271035][T15068]  ? __pfx_futex_wake_mark+0x10/0x10
[  812.271093][T15068]  ? futex_private_hash_put+0x176/0x300
[  812.271138][T15068]  ? futex_private_hash_put+0x18a/0x300
[  812.271182][T15068]  futex_wait+0xe8/0x380
[  812.271233][T15068]  ? __pfx_futex_wait+0x10/0x10
[  812.271294][T15068]  ? kmem_cache_free+0x2d1/0x4d0
[  812.271330][T15068]  ? fd_install+0x225/0x750
[  812.271363][T15068]  ? putname+0x154/0x1a0
[  812.271416][T15068]  do_futex+0x229/0x350
[  812.271460][T15068]  ? __pfx_do_futex+0x10/0x10
[  812.271502][T15068]  ? fput+0x9b/0xd0
[  812.271556][T15068]  ? __sys_sendmsg+0x18c/0x220
[  812.271595][T15068]  __x64_sys_futex+0x1e0/0x4c0
[  812.271641][T15068]  ? __x64_sys_openat+0x174/0x210
[  812.271693][T15068]  ? __pfx___x64_sys_futex+0x10/0x10
[  812.271754][T15068]  do_syscall_64+0xcd/0x490
[  812.271795][T15068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.271829][T15068] RIP: 0033:0x7f2b8b78eb69
[  812.271856][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  812.271889][T15068] RSP: 002b:00007f2b8c5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  812.271921][T15068] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa8 RCX: 00007f2b8b78eb69
[  812.271944][T15068] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b8b9b5fa8
[  812.271965][T15068] RBP: 00007f2b8b9b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  812.271985][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b8b9b5fac
[  812.272007][T15068] R13: 0000000000000000 R14: 00007ffc28aa86b0 R15: 00007ffc28aa8798
[  812.272049][T15068]  </TASK>
[  812.820497][T15075] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[  812.901978][T15070] hub 8-0:1.0: USB hub found
[  812.920969][T15070] hub 8-0:1.0: 1 port detected
[  813.302813][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'.
[  813.766975][T15092] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  814.066565][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  815.147771][T15113] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  815.600148][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'.
[  815.904768][T15123] FAULT_INJECTION: forcing a failure.
[  815.904768][T15123] name fail_futex, interval 1, probability 0, space 0, times 0
[  815.947801][T15123] CPU: 0 UID: 0 PID: 15123 Comm: syz.3.1798 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  815.947847][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  815.947868][T15123] Call Trace:
[  815.947879][T15123]  <TASK>
[  815.947892][T15123]  dump_stack_lvl+0x16c/0x1f0
[  815.947938][T15123]  should_fail_ex+0x512/0x640
[  815.947981][T15123]  ? unwind_get_return_address+0x59/0xa0
[  815.948012][T15123]  get_futex_key+0x1d0/0x1560
[  815.948045][T15123]  ? __pfx_get_futex_key+0x10/0x10
[  815.948083][T15123]  ? stack_trace_save+0x8e/0xc0
[  815.948111][T15123]  ? __pfx_stack_trace_save+0x10/0x10
[  815.948143][T15123]  futex_wait_setup+0x9d/0x550
[  815.948197][T15123]  __futex_wait+0x194/0x2f0
[  815.948235][T15123]  ? __pfx___futex_wait+0x10/0x10
[  815.948277][T15123]  ? __pfx_futex_wake_mark+0x10/0x10
[  815.948318][T15123]  ? futex_private_hash_put+0x176/0x300
[  815.948353][T15123]  ? futex_private_hash_put+0x18a/0x300
[  815.948384][T15123]  futex_wait+0xe8/0x380
[  815.948430][T15123]  ? __pfx_futex_wait+0x10/0x10
[  815.948473][T15123]  ? kmem_cache_free+0x2d1/0x4d0
[  815.948499][T15123]  ? fd_install+0x225/0x750
[  815.948523][T15123]  ? putname+0x154/0x1a0
[  815.948560][T15123]  do_futex+0x229/0x350
[  815.948591][T15123]  ? __pfx_do_futex+0x10/0x10
[  815.948621][T15123]  ? fput+0x9b/0xd0
[  815.948654][T15123]  ? __sys_sendmsg+0x18c/0x220
[  815.948681][T15123]  __x64_sys_futex+0x1e0/0x4c0
[  815.948719][T15123]  ? __x64_sys_openat+0x174/0x210
[  815.948757][T15123]  ? __pfx___x64_sys_futex+0x10/0x10
[  815.948801][T15123]  do_syscall_64+0xcd/0x490
[  815.948830][T15123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.948854][T15123] RIP: 0033:0x7f2a0c78eb69
[  815.948873][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  815.948896][T15123] RSP: 002b:00007f2a0d6d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  815.948919][T15123] RAX: ffffffffffffffda RBX: 00007f2a0c9b5fa8 RCX: 00007f2a0c78eb69
[  815.948935][T15123] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a0c9b5fa8
[  815.948950][T15123] RBP: 00007f2a0c9b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  815.948965][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a0c9b5fac
[  815.948980][T15123] R13: 0000000000000000 R14: 00007ffca4a90140 R15: 00007ffca4a90228
[  815.949009][T15123]  </TASK>
[  816.631604][T15127] FAULT_INJECTION: forcing a failure.
[  816.631604][T15127] name fail_futex, interval 1, probability 0, space 0, times 0
[  816.659775][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.3.1800 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  816.659810][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  816.659825][T15127] Call Trace:
[  816.659832][T15127]  <TASK>
[  816.659841][T15127]  dump_stack_lvl+0x16c/0x1f0
[  816.659870][T15127]  should_fail_ex+0x512/0x640
[  816.659905][T15127]  get_futex_key+0x1d0/0x1560
[  816.659936][T15127]  ? ktime_get_coarse_real_ts64_mg+0x240/0x300
[  816.659972][T15127]  ? __pfx_get_futex_key+0x10/0x10
[  816.660024][T15127]  ? current_time+0x11d/0x1a0
[  816.660053][T15127]  ? __pfx_current_time+0x10/0x10
[  816.660086][T15127]  futex_wait_setup+0x9d/0x550
[  816.660135][T15127]  __futex_wait+0x194/0x2f0
[  816.660174][T15127]  ? __pfx___futex_wait+0x10/0x10
[  816.660215][T15127]  ? __pfx_futex_wake_mark+0x10/0x10
[  816.660255][T15127]  ? futex_private_hash_put+0x176/0x300
[  816.660287][T15127]  ? futex_private_hash_put+0x18a/0x300
[  816.660317][T15127]  futex_wait+0xe8/0x380
[  816.660376][T15127]  ? __pfx_futex_wait+0x10/0x10
[  816.660429][T15127]  do_futex+0x229/0x350
[  816.660460][T15127]  ? __pfx_do_futex+0x10/0x10
[  816.660491][T15127]  ? __pfx_do_sendfile+0x10/0x10
[  816.660517][T15127]  ? __sys_sendmsg+0x18c/0x220
[  816.660544][T15127]  __x64_sys_futex+0x1e0/0x4c0
[  816.660579][T15127]  ? __pfx___x64_sys_futex+0x10/0x10
[  816.660611][T15127]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  816.660653][T15127]  do_syscall_64+0xcd/0x490
[  816.660681][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.660705][T15127] RIP: 0033:0x7f2a0c78eb69
[  816.660723][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  816.660745][T15127] RSP: 002b:00007f2a0d6d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  816.660767][T15127] RAX: ffffffffffffffda RBX: 00007f2a0c9b5fa8 RCX: 00007f2a0c78eb69
[  816.660783][T15127] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a0c9b5fa8
[  816.660797][T15127] RBP: 00007f2a0c9b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  816.660812][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a0c9b5fac
[  816.660827][T15127] R13: 0000000000000000 R14: 00007ffca4a90140 R15: 00007ffca4a90228
[  816.660856][T15127]  </TASK>
[  817.073083][T15101] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  819.195343][T15130] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  819.387747][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  819.394516][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  819.428326][T15156] FAULT_INJECTION: forcing a failure.
[  819.428326][T15156] name failslab, interval 1, probability 0, space 0, times 0
[  819.473517][T15156] CPU: 1 UID: 0 PID: 15156 Comm: syz.0.1807 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  819.473565][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  819.473587][T15156] Call Trace:
[  819.473598][T15156]  <TASK>
[  819.473610][T15156]  dump_stack_lvl+0x16c/0x1f0
[  819.473654][T15156]  should_fail_ex+0x512/0x640
[  819.473694][T15156]  ? fs_reclaim_acquire+0xae/0x150
[  819.473748][T15156]  ? tomoyo_encode2+0x100/0x3e0
[  819.473792][T15156]  should_failslab+0xc2/0x120
[  819.473839][T15156]  __kmalloc_noprof+0xd2/0x510
[  819.473889][T15156]  tomoyo_encode2+0x100/0x3e0
[  819.473936][T15156]  tomoyo_encode+0x29/0x50
[  819.473977][T15156]  tomoyo_realpath_from_path+0x18f/0x6e0
[  819.474032][T15156]  tomoyo_check_open_permission+0x2ab/0x3c0
[  819.474071][T15156]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  819.474162][T15156]  ? do_raw_spin_lock+0x12c/0x2b0
[  819.474228][T15156]  tomoyo_file_open+0x6b/0x90
[  819.474279][T15156]  security_file_open+0x84/0x1e0
[  819.474322][T15156]  do_dentry_open+0x596/0x1530
[  819.474376][T15156]  vfs_open+0x82/0x3f0
[  819.474431][T15156]  path_openat+0x1de4/0x2cb0
[  819.474485][T15156]  ? __pfx_path_openat+0x10/0x10
[  819.474537][T15156]  do_filp_open+0x20b/0x470
[  819.474578][T15156]  ? __pfx_do_filp_open+0x10/0x10
[  819.474649][T15156]  ? alloc_fd+0x471/0x7d0
[  819.474697][T15156]  do_sys_openat2+0x11b/0x1d0
[  819.474748][T15156]  ? __pfx_do_sys_openat2+0x10/0x10
[  819.474799][T15156]  ? fput+0x9b/0xd0
[  819.474845][T15156]  ? __sys_sendmsg+0x18c/0x220
[  819.474891][T15156]  __x64_sys_openat+0x174/0x210
[  819.474945][T15156]  ? __pfx___x64_sys_openat+0x10/0x10
[  819.475017][T15156]  do_syscall_64+0xcd/0x490
[  819.475058][T15156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.475092][T15156] RIP: 0033:0x7f53d158eb69
[  819.475125][T15156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  819.475160][T15156] RSP: 002b:00007f53d23dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  819.475194][T15156] RAX: ffffffffffffffda RBX: 00007f53d17b5fa0 RCX: 00007f53d158eb69
[  819.475217][T15156] RDX: 0000000000002000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  819.475238][T15156] RBP: 00007f53d1611df1 R08: 0000000000000000 R09: 0000000000000000
[  819.475259][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  819.475310][T15156] R13: 0000000000000000 R14: 00007f53d17b5fa0 R15: 00007ffe358d9638
[  819.475357][T15156]  </TASK>
[  819.475391][T15156] ERROR: Out of memory at tomoyo_realpath_from_path.
[  819.823577][T15164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  819.916430][T15158] hub 8-0:1.0: USB hub found
[  819.935257][T15158] hub 8-0:1.0: 1 port detected
[  820.039235][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'.
[  822.312582][T15205] hub 8-0:1.0: USB hub found
[  822.322762][T15205] hub 8-0:1.0: 1 port detected
[  822.618005][T15208] hub 8-0:1.0: USB hub found
[  822.628478][T15208] hub 8-0:1.0: 1 port detected
[  822.660301][T15211] hub 8-0:1.0: USB hub found
[  822.694059][T15211] hub 8-0:1.0: 1 port detected
[  823.155277][T15220] vhci_hcd: invalid port number 16
[  823.160711][T15220] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  823.461430][T15224] FAULT_INJECTION: forcing a failure.
[  823.461430][T15224] name fail_futex, interval 1, probability 0, space 0, times 0
[  823.541600][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.2.1821 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  823.541652][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  823.541674][T15224] Call Trace:
[  823.541685][T15224]  <TASK>
[  823.541698][T15224]  dump_stack_lvl+0x16c/0x1f0
[  823.541741][T15224]  should_fail_ex+0x512/0x640
[  823.541780][T15224]  ? unwind_get_return_address+0x59/0xa0
[  823.541820][T15224]  get_futex_key+0x1d0/0x1560
[  823.541867][T15224]  ? __pfx_get_futex_key+0x10/0x10
[  823.541919][T15224]  ? stack_trace_save+0x8e/0xc0
[  823.541957][T15224]  ? __pfx_stack_trace_save+0x10/0x10
[  823.542003][T15224]  futex_wait_setup+0x9d/0x550
[  823.542067][T15224]  __futex_wait+0x194/0x2f0
[  823.542119][T15224]  ? __pfx___futex_wait+0x10/0x10
[  823.542177][T15224]  ? __pfx_futex_wake_mark+0x10/0x10
[  823.542234][T15224]  ? futex_private_hash_put+0x176/0x300
[  823.542280][T15224]  ? futex_private_hash_put+0x18a/0x300
[  823.542322][T15224]  futex_wait+0xe8/0x380
[  823.542372][T15224]  ? __pfx_futex_wait+0x10/0x10
[  823.542431][T15224]  ? kmem_cache_free+0x2d1/0x4d0
[  823.542467][T15224]  ? fd_install+0x225/0x750
[  823.542498][T15224]  ? putname+0x154/0x1a0
[  823.542551][T15224]  do_futex+0x229/0x350
[  823.542594][T15224]  ? __pfx_do_futex+0x10/0x10
[  823.542640][T15224]  ? __sys_sendmsg+0x18c/0x220
[  823.542679][T15224]  __x64_sys_futex+0x1e0/0x4c0
[  823.542725][T15224]  ? __x64_sys_openat+0x174/0x210
[  823.542778][T15224]  ? __pfx___x64_sys_futex+0x10/0x10
[  823.542838][T15224]  do_syscall_64+0xcd/0x490
[  823.542877][T15224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.542917][T15224] RIP: 0033:0x7f2b8b78eb69
[  823.542943][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  823.542976][T15224] RSP: 002b:00007f2b8c5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  823.543009][T15224] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa8 RCX: 00007f2b8b78eb69
[  823.543032][T15224] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b8b9b5fa8
[  823.543053][T15224] RBP: 00007f2b8b9b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  823.543073][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b8b9b5fac
[  823.543094][T15224] R13: 0000000000000000 R14: 00007ffc28aa86b0 R15: 00007ffc28aa8798
[  823.543135][T15224]  </TASK>
[  824.136814][T15237] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  824.320060][T15238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[  824.649748][T15228] hub 8-0:1.0: USB hub found
[  824.683774][T15228] hub 8-0:1.0: 1 port detected
[  825.304846][T15252] FAULT_INJECTION: forcing a failure.
[  825.304846][T15252] name failslab, interval 1, probability 0, space 0, times 0
[  825.338878][T15252] CPU: 0 UID: 0 PID: 15252 Comm: syz.0.1827 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  825.338914][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  825.338929][T15252] Call Trace:
[  825.338936][T15252]  <TASK>
[  825.338945][T15252]  dump_stack_lvl+0x16c/0x1f0
[  825.338975][T15252]  should_fail_ex+0x512/0x640
[  825.339005][T15252]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  825.339038][T15252]  should_failslab+0xc2/0x120
[  825.339071][T15252]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  825.339101][T15252]  ? getname_flags.part.0+0x4c/0x550
[  825.339145][T15252]  getname_flags.part.0+0x4c/0x550
[  825.339195][T15252]  getname_flags+0x93/0xf0
[  825.339234][T15252]  do_sys_openat2+0xb8/0x1d0
[  825.339290][T15252]  ? __pfx_do_sys_openat2+0x10/0x10
[  825.339329][T15252]  ? __sys_sendmsg+0x18c/0x220
[  825.339361][T15252]  __x64_sys_openat+0x174/0x210
[  825.339399][T15252]  ? __pfx___x64_sys_openat+0x10/0x10
[  825.339459][T15252]  do_syscall_64+0xcd/0x490
[  825.339488][T15252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.339512][T15252] RIP: 0033:0x7f53d158eb69
[  825.339531][T15252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  825.339562][T15252] RSP: 002b:00007f53d23dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  825.339585][T15252] RAX: ffffffffffffffda RBX: 00007f53d17b5fa0 RCX: 00007f53d158eb69
[  825.339601][T15252] RDX: 0000000000002000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  825.339616][T15252] RBP: 00007f53d1611df1 R08: 0000000000000000 R09: 0000000000000000
[  825.339631][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  825.339645][T15252] R13: 0000000000000000 R14: 00007f53d17b5fa0 R15: 00007ffe358d9638
[  825.339674][T15252]  </TASK>
[  826.002958][T15258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  826.300996][T15261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  826.332301][T15239] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  826.450689][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'.
[  826.470481][T15260] hub 8-0:1.0: USB hub found
[  826.495632][T15260] hub 8-0:1.0: 1 port detected
[  827.696351][T15282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23
[  828.013709][T15283] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24
[  828.177037][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  828.429502][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'.
[  828.448650][T15298] hub 8-0:1.0: USB hub found
[  828.454246][T15298] hub 8-0:1.0: 1 port detected
[  828.934071][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'.
[  830.053623][T15316] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  830.335142][T15317] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26
[  830.460426][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'.
[  830.721445][T15296] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  831.437957][T15328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'.
[  831.494790][T15330] hub 8-0:1.0: USB hub found
[  831.506146][T15330] hub 8-0:1.0: 1 port detected
[  831.908904][T15313] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  833.572626][T15334] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  835.097867][T15341] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  836.286832][T15374] hub 8-0:1.0: USB hub found
[  836.291917][T15374] hub 8-0:1.0: 1 port detected
[  836.767172][T15385] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[  836.906438][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1853'.
[  836.959721][T15360] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  837.013291][T15387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28
[  837.100697][T15381] hub 8-0:1.0: USB hub found
[  837.123713][T15381] hub 8-0:1.0: 1 port detected
[  837.197586][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'.
[  839.240549][T15397] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  841.188466][T15414] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  841.341375][T15442] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[  841.430062][T15442] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[  842.053611][T15459] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  842.243170][T15428] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  842.324384][T15461] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32
[  843.892866][T15420] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  844.473638][T15496] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33
[  844.701038][T15497] hub 8-0:1.0: USB hub found
[  844.785756][T15497] hub 8-0:1.0: 1 port detected
[  846.387492][T15523] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34
[  846.875467][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'.
[  849.282618][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1882'.
[  849.329232][T15556] hub 8-0:1.0: USB hub found
[  849.393982][T15556] hub 8-0:1.0: 1 port detected
[  849.556183][T15560] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35
[  849.760246][T15536] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  849.879372][T15561] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36
[  850.012650][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  850.137005][T15572] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37
[  852.025182][T15596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1889'.
[  852.073838][T15600] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38
[  852.094928][T15596] hub 8-0:1.0: USB hub found
[  852.103012][T15596] hub 8-0:1.0: 1 port detected
[  852.690511][T15570] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  852.698600][T15608] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39
[  852.908001][T15610] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40
[  853.071780][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  853.657994][T15627] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41
[  854.124819][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'.
[  854.282279][T15639] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42
[  854.544759][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'.
[  857.046556][T15678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[  857.145470][T15679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  857.483661][T15641] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  857.529608][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'.
[  857.915337][T15689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45
[  858.145688][T15691] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46
[  858.156754][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'.
[  858.352582][T15687] hub 8-0:1.0: USB hub found
[  858.391248][T15687] hub 8-0:1.0: 1 port detected
[  858.582208][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  858.884643][T15668] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  859.174962][T15704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47
[  859.445749][T15705] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48
[  860.972268][T15693] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  861.209229][T15723] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49
[  861.514129][T15724] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50
[  861.739096][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'.
[  862.001835][T15702] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  862.331073][T15737] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51
[  862.620015][T15740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52
[  863.167783][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'.
[  863.590364][T15718] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  863.698424][T15756] =======================================================
[  863.698424][T15756] WARNING: The mand mount option has been deprecated and
[  863.698424][T15756]          and is ignored by this kernel. Remove the mand
[  863.698424][T15756]          option from the mount to silence this warning.
[  863.698424][T15756] =======================================================
[  863.933107][T15761] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53
[  864.394213][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'.
[  865.250043][T15777] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54
[  865.511842][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'.
[  865.597035][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[  865.814674][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1923'.
[  865.859243][T15776] hub 8-0:1.0: USB hub found
[  865.864625][T15776] hub 8-0:1.0: 1 port detected
[  866.771541][T15758] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  867.239156][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'.
[  867.664437][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'.
[  869.894966][T15798] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  870.160612][T15834] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55
[  870.317276][T15837] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56
[  870.764332][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  871.479762][T15857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57
[  871.702015][T15863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58
[  871.907429][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  872.050450][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1939'.
[  872.136255][T15868] hub 8-0:1.0: USB hub found
[  872.145059][T15868] hub 8-0:1.0: 1 port detected
[  872.542638][T15878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'.
[  872.552190][T15878] geneve1: entered promiscuous mode
[  872.558244][T15878] geneve1: entered allmulticast mode
[  874.625857][T15902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59
[  874.747394][T15899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1946'.
[  874.817281][T15905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60
[  874.843445][T15899] hub 8-0:1.0: USB hub found
[  874.853735][T15899] hub 8-0:1.0: 1 port detected
[  875.050184][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'.
[  875.271013][T15906] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61
[  875.758000][T15924] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62
[  875.953280][T15930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63
[  876.034542][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'.
[  876.321262][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  877.625165][T15960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64
[  877.934899][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'.
[  878.146742][T15970] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65
[  878.403873][T15975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66
[  878.518073][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  878.662502][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'.
[  879.059530][T15984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1959'.
[  879.089502][T15984] hub 8-0:1.0: USB hub found
[  879.096252][T15984] hub 8-0:1.0: 1 port detected
[  880.163576][T16004] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67
[  880.485779][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'.
[  880.827912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  880.834704][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  881.361138][T16023] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68
[  881.475290][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'.
[  881.498693][T16019] hub 8-0:1.0: USB hub found
[  881.504449][T16019] hub 8-0:1.0: 1 port detected
[  881.755041][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  887.976309][T16081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1981'.
[  888.254867][T16081] hub 8-0:1.0: USB hub found
[  888.278503][T16081] hub 8-0:1.0: 1 port detected
[  888.784482][T16093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69
[  889.074774][T16096] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70
[  889.156770][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'.
[  889.191127][T16095] hub 8-0:1.0: USB hub found
[  889.220818][T16095] hub 8-0:1.0: 1 port detected
[  889.230299][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'.
[  889.330671][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'.
[  889.353456][T16113] geneve1: entered promiscuous mode
[  889.358949][T16113] geneve1: entered allmulticast mode
[  889.371322][T16099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71
[  889.392878][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'.
[  889.891683][T16121] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72
[  890.213695][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  891.397647][T16140] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73
[  891.865474][T16152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74
[  892.174347][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'.
[  894.490320][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'.
[  894.490354][T16186] geneve1: entered promiscuous mode
[  894.490400][T16186] geneve1: entered allmulticast mode
[  894.709119][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'.
[  895.475790][T16194] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75
[  895.871377][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'.
[  897.475193][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'.
[  897.527426][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'.
[  902.016358][T16261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76
[  902.114615][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2020'.
[  902.161637][T16264] geneve1: entered promiscuous mode
[  902.178263][T16264] geneve1: entered allmulticast mode
[  902.289906][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'.
[  902.383200][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2020'.
[  904.415417][T16292] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77
[  904.800478][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'.
[  911.436631][T16367] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78
[  911.877606][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'.
[  912.587878][T16381] vhci_hcd: invalid port number 16
[  912.593034][T16381] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  912.608181][T16385] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79
[  912.915639][T16390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80
[  913.144147][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  913.204658][T16387] hub 8-0:1.0: USB hub found
[  913.205147][T16387] hub 8-0:1.0: 1 port detected
[  913.688078][T16404] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81
[  913.947902][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  914.363920][T16410] hub 8-0:1.0: USB hub found
[  914.392906][T16410] hub 8-0:1.0: 1 port detected
[  917.133830][T16442] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82
[  917.467725][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  917.678848][T16449] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83
[  917.743887][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'.
[  917.796559][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'.
[  917.865382][T16452] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84
[  918.097375][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'.
[  918.232480][T16440] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  918.567134][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2060'.
[  918.599952][T16468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85
[  918.917106][T16469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86
[  919.199704][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  921.570117][T16498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87
[  922.033490][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'.
[  922.646852][T16506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88
[  922.912167][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'.
[  923.930441][T16522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89
[  924.257155][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'.
[  925.770887][T16545] vhci_hcd: invalid port number 16
[  925.777016][T16545] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  927.874603][T16567] hub 8-0:1.0: USB hub found
[  927.948705][T16567] hub 8-0:1.0: 1 port detected
[  930.213603][T16602] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90
[  930.403562][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  930.495096][T16611] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91
[  930.726762][T16612] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92
[  930.857364][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  932.354611][T16628] vhci_hcd: invalid port number 16
[  932.359797][T16628] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  932.637387][T16632] hub 8-0:1.0: USB hub found
[  932.719710][T16632] hub 8-0:1.0: 1 port detected
[  939.190033][T16698] hub 8-0:1.0: USB hub found
[  939.195062][T16698] hub 8-0:1.0: 1 port detected
[  939.780337][T16689] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  939.911583][T16707] vhci_hcd: invalid port number 16
[  939.925900][T16707] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  942.301008][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  942.309900][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  942.902322][T16740] hub 8-0:1.0: USB hub found
[  942.902746][T16740] hub 8-0:1.0: 1 port detected
[  942.977386][T16747] FAULT_INJECTION: forcing a failure.
[  942.977386][T16747] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  942.977494][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.1.2131 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  942.977538][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  942.977560][T16747] Call Trace:
[  942.977572][T16747]  <TASK>
[  942.977584][T16747]  dump_stack_lvl+0x16c/0x1f0
[  942.977626][T16747]  should_fail_ex+0x512/0x640
[  942.977671][T16747]  should_fail_alloc_page+0xe7/0x130
[  942.977721][T16747]  prepare_alloc_pages+0x3c2/0x610
[  942.977773][T16747]  ? arch_stack_walk+0xa6/0x100
[  942.977813][T16747]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  942.977865][T16747]  ? stack_trace_save+0x8e/0xc0
[  942.977904][T16747]  ? __pfx_stack_trace_save+0x10/0x10
[  942.977940][T16747]  ? rcu_is_watching+0x12/0xc0
[  942.977974][T16747]  ? stack_depot_save_flags+0x29/0x9c0
[  942.978019][T16747]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  942.978064][T16747]  ? kasan_save_stack+0x42/0x60
[  942.978101][T16747]  ? kasan_save_stack+0x33/0x60
[  942.978137][T16747]  ? kasan_save_track+0x14/0x30
[  942.978173][T16747]  ? __kasan_slab_alloc+0x89/0x90
[  942.978212][T16747]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  942.978250][T16747]  ? __pmd_alloc+0xbf/0x930
[  942.978303][T16747]  ? rep_movs_alternative+0x33/0x90
[  942.978350][T16747]  ? _copy_to_user+0xbb/0xd0
[  942.978392][T16747]  ? fs_name+0x172/0x220
[  942.978431][T16747]  ? __x64_sys_sysfs+0xbf/0x1a0
[  942.978472][T16747]  ? do_syscall_64+0xcd/0x490
[  942.978514][T16747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.978554][T16747]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  942.978610][T16747]  ? policy_nodemask+0xea/0x4e0
[  942.978658][T16747]  alloc_pages_mpol+0x1fb/0x550
[  942.978714][T16747]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  942.978770][T16747]  ? __pfx_filemap_map_pages+0x10/0x10
[  942.978811][T16747]  alloc_pages_noprof+0x131/0x390
[  942.978857][T16747]  pte_alloc_one+0x1c/0x3a0
[  942.978894][T16747]  __do_fault+0x320/0x490
[  942.978929][T16747]  ? do_raw_spin_lock+0x12c/0x2b0
[  942.978983][T16747]  ? __pfx_filemap_map_pages+0x10/0x10
[  942.979024][T16747]  do_pte_missing+0x1a6/0x3ba0
[  942.979060][T16747]  ? do_raw_spin_unlock+0x172/0x230
[  942.979115][T16747]  ? __pmd_alloc+0x3fb/0x930
[  942.979167][T16747]  __handle_mm_fault+0x152a/0x2a50
[  942.979207][T16747]  ? mt_find+0x3ef/0xa30
[  942.979248][T16747]  ? __pfx___handle_mm_fault+0x10/0x10
[  942.979281][T16747]  ? __pfx_mt_find+0x10/0x10
[  942.979342][T16747]  ? find_vma+0xbf/0x140
[  942.979387][T16747]  ? __pfx_find_vma+0x10/0x10
[  942.979437][T16747]  handle_mm_fault+0x589/0xd10
[  942.979473][T16747]  ? trace_raw_output_exceptions+0x121/0x150
[  942.979541][T16747]  do_user_addr_fault+0x7a6/0x1370
[  942.979600][T16747]  ? rcu_is_watching+0x12/0xc0
[  942.979640][T16747]  exc_page_fault+0x5c/0xb0
[  942.979674][T16747]  asm_exc_page_fault+0x26/0x30
[  942.979705][T16747] RIP: 0010:rep_movs_alternative+0x33/0x90
[  942.979749][T16747] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  942.979780][T16747] RSP: 0018:ffffc900196b7e98 EFLAGS: 00050206
[  942.979806][T16747] RAX: 657069705f637072 RBX: 000000000000000b RCX: 000000000000000b
[  942.979827][T16747] RDX: fffffbfff1a01f95 RSI: ffffffff8d00fca0 RDI: 0000000000000000
[  942.979849][T16747] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1a01f95
[  942.979869][T16747] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff8d00fca0
[  942.979890][T16747] R13: 000000000000000b R14: 00007ffffffff000 R15: 0000000000000000
[  942.979935][T16747]  _copy_to_user+0xbb/0xd0
[  942.979984][T16747]  fs_name+0x172/0x220
[  942.980030][T16747]  __x64_sys_sysfs+0xbf/0x1a0
[  942.980076][T16747]  do_syscall_64+0xcd/0x490
[  942.980116][T16747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.980146][T16747] RIP: 0033:0x7f40ee38eb69
[  942.980173][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  942.980205][T16747] RSP: 002b:00007f40ef20e038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  942.980236][T16747] RAX: ffffffffffffffda RBX: 00007f40ee5b5fa0 RCX: 00007f40ee38eb69
[  942.980258][T16747] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  942.980277][T16747] RBP: 00007f40ee411df1 R08: 0000000000000000 R09: 0000000000000000
[  942.980298][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  942.980317][T16747] R13: 0000000000000000 R14: 00007f40ee5b5fa0 R15: 00007ffeec94d328
[  942.980360][T16747]  </TASK>
[  944.239899][T16760] FAULT_INJECTION: forcing a failure.
[  944.239899][T16760] name fail_futex, interval 1, probability 0, space 0, times 0
[  944.239936][T16760] CPU: 1 UID: 0 PID: 16760 Comm: syz.0.2124 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  944.239966][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  944.239980][T16760] Call Trace:
[  944.239987][T16760]  <TASK>
[  944.239996][T16760]  dump_stack_lvl+0x16c/0x1f0
[  944.240023][T16760]  should_fail_ex+0x512/0x640
[  944.240057][T16760]  get_futex_key+0x1d0/0x1560
[  944.240091][T16760]  ? __pfx_get_futex_key+0x10/0x10
[  944.240121][T16760]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  944.240155][T16760]  futex_wake+0xea/0x530
[  944.240191][T16760]  ? do_splice_direct+0x1b4/0x240
[  944.240227][T16760]  ? __pfx_futex_wake+0x10/0x10
[  944.240277][T16760]  do_futex+0x1e3/0x350
[  944.240308][T16760]  ? __pfx_do_futex+0x10/0x10
[  944.240339][T16760]  ? __pfx_do_sendfile+0x10/0x10
[  944.240366][T16760]  ? __sys_sendmsg+0x18c/0x220
[  944.240393][T16760]  __x64_sys_futex+0x1e0/0x4c0
[  944.240428][T16760]  ? __pfx___x64_sys_futex+0x10/0x10
[  944.240460][T16760]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  944.240503][T16760]  do_syscall_64+0xcd/0x490
[  944.240530][T16760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  944.240555][T16760] RIP: 0033:0x7f53d158eb69
[  944.240573][T16760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  944.240596][T16760] RSP: 002b:00007f53d23dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  944.240618][T16760] RAX: ffffffffffffffda RBX: 00007f53d17b5fa8 RCX: 00007f53d158eb69
[  944.240634][T16760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53d17b5fac
[  944.240648][T16760] RBP: 00007f53d17b5fa0 R08: 00007f53d23de000 R09: 0000000000000000
[  944.240663][T16760] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f53d17b5fac
[  944.240678][T16760] R13: 0000000000000000 R14: 00007ffe358d9550 R15: 00007ffe358d9638
[  944.240707][T16760]  </TASK>
[  945.766712][T16777] vhci_hcd: invalid port number 16
[  945.784062][T16777] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  946.523503][T16758] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  947.179827][T16786] hub 8-0:1.0: USB hub found
[  947.180236][T16786] hub 8-0:1.0: 1 port detected
[  947.370428][T16773] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  948.309219][T16770] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  948.503735][T16804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93
[  948.799580][T16806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94
[  948.812312][T16812] vhci_hcd: invalid port number 16
[  948.865215][T16813] vhci_hcd: invalid port number 16
[  948.877492][T16812] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  948.886539][T16813] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  949.302374][T16824] vhci_hcd: invalid port number 16
[  949.317293][T16824] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  950.458472][T16832] hub 8-0:1.0: USB hub found
[  950.483942][T16832] hub 8-0:1.0: 1 port detected
[  950.967893][T16845] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95
[  951.117836][T16846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96
[  951.280237][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'.
[  951.817264][T16853] hub 8-0:1.0: USB hub found
[  951.874031][T16853] hub 8-0:1.0: 1 port detected
[  953.037685][T16872] FAULT_INJECTION: forcing a failure.
[  953.037685][T16872] name failslab, interval 1, probability 0, space 0, times 0
[  953.057075][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.1.2148 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  953.057120][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  953.057139][T16872] Call Trace:
[  953.057151][T16872]  <TASK>
[  953.057164][T16872]  dump_stack_lvl+0x16c/0x1f0
[  953.057202][T16872]  should_fail_ex+0x512/0x640
[  953.057239][T16872]  ? fs_reclaim_acquire+0xae/0x150
[  953.057287][T16872]  ? tomoyo_encode2+0x100/0x3e0
[  953.057323][T16872]  should_failslab+0xc2/0x120
[  953.057362][T16872]  __kmalloc_noprof+0xd2/0x510
[  953.057404][T16872]  tomoyo_encode2+0x100/0x3e0
[  953.057446][T16872]  tomoyo_encode+0x29/0x50
[  953.057480][T16872]  tomoyo_realpath_from_path+0x18f/0x6e0
[  953.057528][T16872]  tomoyo_check_open_permission+0x2ab/0x3c0
[  953.057562][T16872]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  953.057631][T16872]  ? do_raw_spin_lock+0x12c/0x2b0
[  953.057687][T16872]  tomoyo_file_open+0x6b/0x90
[  953.057734][T16872]  security_file_open+0x84/0x1e0
[  953.057769][T16872]  do_dentry_open+0x596/0x1530
[  953.057817][T16872]  vfs_open+0x82/0x3f0
[  953.057864][T16872]  path_openat+0x1de4/0x2cb0
[  953.057910][T16872]  ? __pfx_path_openat+0x10/0x10
[  953.057955][T16872]  do_filp_open+0x20b/0x470
[  953.058000][T16872]  ? __pfx_do_filp_open+0x10/0x10
[  953.058063][T16872]  ? alloc_fd+0x471/0x7d0
[  953.058106][T16872]  do_sys_openat2+0x11b/0x1d0
[  953.058152][T16872]  ? __pfx_do_sys_openat2+0x10/0x10
[  953.058200][T16872]  ? __sys_sendmsg+0x18c/0x220
[  953.058255][T16872]  __x64_sys_openat+0x174/0x210
[  953.058303][T16872]  ? __pfx___x64_sys_openat+0x10/0x10
[  953.058366][T16872]  do_syscall_64+0xcd/0x490
[  953.058409][T16872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.058440][T16872] RIP: 0033:0x7f40ee38eb69
[  953.058464][T16872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  953.058505][T16872] RSP: 002b:00007f40ef20e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  953.058535][T16872] RAX: ffffffffffffffda RBX: 00007f40ee5b5fa0 RCX: 00007f40ee38eb69
[  953.058555][T16872] RDX: 0000000000002000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  953.058574][T16872] RBP: 00007f40ee411df1 R08: 0000000000000000 R09: 0000000000000000
[  953.058592][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  953.058610][T16872] R13: 0000000000000000 R14: 00007f40ee5b5fa0 R15: 00007ffeec94d328
[  953.058647][T16872]  </TASK>
[  953.058683][T16872] ERROR: Out of memory at tomoyo_realpath_from_path.
[  954.365744][T16888] vhci_hcd: invalid port number 16
[  954.382064][T16888] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  954.929243][T16902] hub 8-0:1.0: USB hub found
[  954.936242][T16902] hub 8-0:1.0: 1 port detected
[  955.915172][T16912] hub 8-0:1.0: USB hub found
[  955.920881][T16912] hub 8-0:1.0: 1 port detected
[  956.286277][T16922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97
[  956.437307][T16923] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98
[  956.862511][T16929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99
[  957.097093][T16938] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100
[  957.321753][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'.
[  957.450801][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'.
[  960.180437][T16960] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  961.148182][T16985] FAULT_INJECTION: forcing a failure.
[  961.148182][T16985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  961.174020][T16985] CPU: 1 UID: 0 PID: 16985 Comm: syz.2.2172 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  961.174064][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  961.174083][T16985] Call Trace:
[  961.174092][T16985]  <TASK>
[  961.174103][T16985]  dump_stack_lvl+0x16c/0x1f0
[  961.174138][T16985]  should_fail_ex+0x512/0x640
[  961.174180][T16985]  _copy_to_user+0x32/0xd0
[  961.174226][T16985]  fs_name+0x172/0x220
[  961.174265][T16985]  __x64_sys_sysfs+0xbf/0x1a0
[  961.174305][T16985]  do_syscall_64+0xcd/0x490
[  961.174338][T16985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.174367][T16985] RIP: 0033:0x7f2b8b78eb69
[  961.174390][T16985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  961.174419][T16985] RSP: 002b:00007f2b8c595038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  961.174447][T16985] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa0 RCX: 00007f2b8b78eb69
[  961.174476][T16985] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[  961.174493][T16985] RBP: 00007f2b8b811df1 R08: 0000000000000000 R09: 0000000000000000
[  961.174511][T16985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  961.174529][T16985] R13: 0000000000000000 R14: 00007f2b8b9b5fa0 R15: 00007ffc28aa8798
[  961.174566][T16985]  </TASK>
[  961.550672][T16969] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  961.628413][T16993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101
[  961.710144][T16995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102
[  962.073508][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'.
[  962.460789][T17008] hub 8-0:1.0: USB hub found
[  962.471933][T17008] hub 8-0:1.0: 1 port detected
[  962.625228][T17014] FAULT_INJECTION: forcing a failure.
[  962.625228][T17014] name fail_futex, interval 1, probability 0, space 0, times 0
[  962.640745][T17014] CPU: 1 UID: 0 PID: 17014 Comm: syz.2.2177 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[  962.640793][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  962.640813][T17014] Call Trace:
[  962.640823][T17014]  <TASK>
[  962.640836][T17014]  dump_stack_lvl+0x16c/0x1f0
[  962.640876][T17014]  should_fail_ex+0x512/0x640
[  962.640924][T17014]  get_futex_key+0x1d0/0x1560
[  962.640971][T17014]  ? __pfx_get_futex_key+0x10/0x10
[  962.641027][T17014]  futex_wake+0xea/0x530
[  962.641088][T17014]  ? rcu_is_watching+0x12/0xc0
[  962.641125][T17014]  ? __pfx_futex_wake+0x10/0x10
[  962.641180][T17014]  ? kmem_cache_free+0x2d1/0x4d0
[  962.641217][T17014]  ? fd_install+0x225/0x750
[  962.641251][T17014]  ? putname+0x154/0x1a0
[  962.641306][T17014]  do_futex+0x1e3/0x350
[  962.641351][T17014]  ? __pfx_do_futex+0x10/0x10
[  962.641394][T17014]  ? fput+0x9b/0xd0
[  962.641441][T17014]  ? __sys_sendmsg+0x18c/0x220
[  962.641479][T17014]  __x64_sys_futex+0x1e0/0x4c0
[  962.641527][T17014]  ? __x64_sys_openat+0x174/0x210
[  962.641581][T17014]  ? __pfx___x64_sys_futex+0x10/0x10
[  962.641643][T17014]  do_syscall_64+0xcd/0x490
[  962.641682][T17014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.641716][T17014] RIP: 0033:0x7f2b8b78eb69
[  962.641740][T17014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  962.641773][T17014] RSP: 002b:00007f2b8c5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  962.641804][T17014] RAX: ffffffffffffffda RBX: 00007f2b8b9b5fa8 RCX: 00007f2b8b78eb69
[  962.641827][T17014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b8b9b5fac
[  962.641848][T17014] RBP: 00007f2b8b9b5fa0 R08: 00007f2b8c596000 R09: 0000000000000000
[  962.641869][T17014] R10: 000000000000000a R11: 0000000000000246 R12: 00007f2b8b9b5fac
[  962.641891][T17014] R13: 0000000000000000 R14: 00007ffc28aa86b0 R15: 00007ffc28aa8798
[  962.641933][T17014]  </TASK>
[  964.302236][T17039] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103
[  964.602863][T17042] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104
[  964.802730][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  965.853517][T17049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2183'.
[  965.911253][T17049] hub 8-0:1.0: USB hub found
[  965.922822][T17049] hub 8-0:1.0: 1 port detected
[  966.217369][T17032] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  966.924069][T17057] hub 8-0:1.0: USB hub found
[  966.933994][T17057] hub 8-0:1.0: 1 port detected
[  967.346599][T17041] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  967.462102][T17066] hub 8-0:1.0: USB hub found
[  967.468524][T17066] hub 8-0:1.0: 1 port detected
[  967.547055][T17073] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105
[  967.858311][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'.
[  968.715606][T17088] hub 8-0:1.0: USB hub found
[  968.755092][T17088] hub 8-0:1.0: 1 port detected
[  969.013632][T17099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106
[  969.576059][T17107] vhci_hcd: invalid port number 16
[  969.588109][T17107] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  969.695069][T17105] hub 8-0:1.0: USB hub found
[  969.712714][T17105] hub 8-0:1.0: 1 port detected
[  969.755304][T17110] hub 8-0:1.0: USB hub found
[  969.766848][T17110] hub 8-0:1.0: 1 port detected
[  970.839619][T17129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107
[  971.427576][T17140] hub 8-0:1.0: USB hub found
[  971.447124][T17140] hub 8-0:1.0: 1 port detected
[  972.311423][T17153] hub 8-0:1.0: USB hub found
[  972.323720][T17153] hub 8-0:1.0: 1 port detected
[  973.968097][T17175] vhci_hcd: invalid port number 16
[  973.977321][T17175] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  974.352226][T17165] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  974.694876][T17187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108
[  974.987163][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'.
[  976.943370][T17202] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  977.357143][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2216'.
[  977.407862][T17211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2215'.
[  977.423441][T17210] hub 8-0:1.0: USB hub found
[  977.428657][T17210] hub 8-0:1.0: 1 port detected
[  977.468983][T17211] hub 8-0:1.0: USB hub found
[  977.534202][T17211] hub 8-0:1.0: 1 port detected
[  978.092911][T17203] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  978.335653][T17228] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109
[  978.621609][T17230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110
[  978.779747][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'.
[  978.835855][T17240] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111
[  979.027124][T17243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112
[  979.173959][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'.
[  979.716832][T17255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2223'.
[  980.646654][T17264] hub 8-0:1.0: USB hub found
[  980.677995][T17264] hub 8-0:1.0: 1 port detected
[  980.765799][T17270] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113
[  980.953972][T17272] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114
[  980.996748][T17271] hub 8-0:1.0: USB hub found
[  981.019878][T17271] hub 8-0:1.0: 1 port detected
[  981.202107][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  982.040441][T17286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'.
[  982.295326][T17261] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  984.150729][T17292] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  984.713197][T17318] hub 8-0:1.0: USB hub found
[  984.718467][T17318] hub 8-0:1.0: 1 port detected
[  987.279075][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'.
[  988.047177][T17368] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115
[  988.181174][T17373] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116
[  988.262830][T17349] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  988.709744][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'.
[  988.905622][T17383] hub 8-0:1.0: USB hub found
[  988.917304][T17383] hub 8-0:1.0: 1 port detected
[  989.231475][T17345] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  989.705527][T17395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117
[  990.111658][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'.
[  990.721004][T17411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118
[  990.965135][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  992.466976][T17432] hub 8-0:1.0: USB hub found
[  992.486618][T17432] hub 8-0:1.0: 1 port detected
[  993.295793][T17443] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119
[  993.452885][T17447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120
[  993.699425][T17423] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  993.869025][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'.
[  994.308400][T17457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121
[  994.566263][T17456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2260'.
[  994.603124][T17456] hub 8-0:1.0: USB hub found
[  994.624947][T17456] hub 8-0:1.0: 1 port detected
[  994.656179][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  995.502633][T17451] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  997.186032][T17473] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  997.348614][T17491] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122
[  997.390496][T17489] hub 8-0:1.0: USB hub found
[  997.408060][T17489] hub 8-0:1.0: 1 port detected
[  997.563221][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'.
[  997.668661][T17503] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123
[  998.008546][T17505] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124
[  998.343584][T17509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125
[  998.525530][T17519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126
[  998.701733][T17512] hub 8-0:1.0: USB hub found
[  998.723385][T17512] hub 8-0:1.0: 1 port detected
[  998.757022][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'.
[  999.484385][T17535] hub 8-0:1.0: USB hub found
[  999.489393][T17535] hub 8-0:1.0: 1 port detected
[ 1000.890500][T17525] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1002.827031][T17548] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1003.137407][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'.
[ 1003.258152][T17566] hub 8-0:1.0: USB hub found
[ 1003.275891][T17566] hub 8-0:1.0: 1 port detected
[ 1003.721613][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.728437][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1004.342276][T17552] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1004.489355][T17584] hub 8-0:1.0: USB hub found
[ 1004.496457][T17584] hub 8-0:1.0: 1 port detected
[ 1005.172824][T17602] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127
[ 1005.936604][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'.
[ 1007.536977][T17601] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1008.938406][T17615] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1009.140463][T17648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128
[ 1009.406436][T17647] hub 8-0:1.0: USB hub found
[ 1009.431040][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'.
[ 1009.445625][T17647] hub 8-0:1.0: 1 port detected
[ 1010.254270][T17633] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1012.094761][T17656] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1012.953724][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2304'.
[ 1013.094482][T17691] hub 8-0:1.0: USB hub found
[ 1013.128059][T17691] hub 8-0:1.0: 1 port detected
[ 1014.308632][T17706] hub 8-0:1.0: USB hub found
[ 1014.344278][T17706] hub 8-0:1.0: 1 port detected
[ 1015.182912][T17686] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1015.386265][T17725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129
[ 1015.448424][T17722] hub 8-0:1.0: USB hub found
[ 1015.459319][T17729] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130
[ 1015.470124][T17722] hub 8-0:1.0: 1 port detected
[ 1015.610641][T17726] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131
[ 1015.794379][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'.
[ 1016.192855][T17751] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132
[ 1016.560113][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'.
[ 1016.898701][T17762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133
[ 1017.360622][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[ 1018.243605][T17784] hub 8-0:1.0: USB hub found
[ 1018.267914][T17784] hub 8-0:1.0: 1 port detected
[ 1018.386866][T17787] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134
[ 1018.627739][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'.
[ 1018.750471][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2323'.
[ 1018.781517][T17791] hub 8-0:1.0: USB hub found
[ 1018.787019][T17791] hub 8-0:1.0: 1 port detected
[ 1019.404603][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2325'.
[ 1019.458203][T17804] hub 8-0:1.0: USB hub found
[ 1019.484258][T17804] hub 8-0:1.0: 1 port detected
[ 1020.092356][T17815] hub 8-0:1.0: USB hub found
[ 1020.099012][T17815] hub 8-0:1.0: 1 port detected
[ 1020.668767][T17828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135
[ 1020.962722][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'.
[ 1020.992849][T17830] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136
[ 1021.408930][T17840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2330'.
[ 1021.441234][T17840] hub 8-0:1.0: USB hub found
[ 1021.447024][T17840] hub 8-0:1.0: 1 port detected
[ 1021.449054][T17843] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137
[ 1021.814156][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'.
[ 1022.928985][T17871] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138
[ 1023.012849][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'.
[ 1023.122911][T17863] hub 8-0:1.0: USB hub found
[ 1023.129472][T17863] hub 8-0:1.0: 1 port detected
[ 1023.199810][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'.
[ 1023.832144][T17884] hub 8-0:1.0: USB hub found
[ 1023.849372][T17884] hub 8-0:1.0: 1 port detected
[ 1024.296190][T17901] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139
[ 1024.798958][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'.
[ 1025.709530][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2345'.
[ 1025.725377][T17915] hub 8-0:1.0: USB hub found
[ 1025.738623][T17915] hub 8-0:1.0: 1 port detected
[ 1026.220826][T17903] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1026.431098][T17926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140
[ 1026.695122][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[ 1027.850857][T17918] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1028.109333][T17947] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141
[ 1028.448520][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'.
[ 1029.874249][T17970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1029.916910][T17970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1029.981195][T17970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1029.994448][T17970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1030.002747][T17970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1030.436817][T10327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.912217][T10327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.166830][T10327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.422301][T10327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.921827][T17968] chnl_net:caif_netlink_parms(): no params data found
[ 1031.960072][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2359'.
[ 1032.021604][T17991] hub 8-0:1.0: USB hub found
[ 1032.026991][ T5867] Bluetooth: hci4: command tx timeout
[ 1032.230027][T17991] hub 8-0:1.0: 1 port detected
[ 1032.789264][T10327] bridge_slave_1: left allmulticast mode
[ 1032.810511][T10327] bridge_slave_1: left promiscuous mode
[ 1032.845474][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.886413][T10327] bridge_slave_0: left allmulticast mode
[ 1032.892397][T10327] bridge_slave_0: left promiscuous mode
[ 1032.925871][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.029255][T17979] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1034.103411][ T5867] Bluetooth: hci4: command tx timeout
[ 1034.387466][T10327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1034.434069][T10327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1034.455783][T10327] bond0 (unregistering): Released all slaves
[ 1034.807482][T17968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.930287][T17968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.966794][T17968] bridge_slave_0: entered allmulticast mode
[ 1034.997685][T17968] bridge_slave_0: entered promiscuous mode
[ 1035.010512][T17999] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1035.123834][T17968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1035.189710][T17968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.209767][T17968] bridge_slave_1: entered allmulticast mode
[ 1035.237314][T17968] bridge_slave_1: entered promiscuous mode
[ 1035.774400][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1035.906680][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1036.185746][ T5867] Bluetooth: hci4: command tx timeout
[ 1036.355671][T17968] team0: Port device team_slave_0 added
[ 1036.474243][T17968] team0: Port device team_slave_1 added
[ 1036.735504][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1036.752255][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1036.815195][T18010] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1036.865215][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1036.964738][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.971851][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.001910][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1037.809542][T17968] hsr_slave_0: entered promiscuous mode
[ 1037.846428][T17968] hsr_slave_1: entered promiscuous mode
[ 1037.896020][T17968] debugfs: 'hsr0' already exists in 'hsr'
[ 1037.903383][T17968] Cannot create hsr debugfs directory
[ 1038.277479][ T5867] Bluetooth: hci4: command tx timeout
[ 1038.589549][T18060] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142
[ 1038.803019][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'.
[ 1039.649880][T18077] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143
[ 1039.788897][T18079] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144
[ 1039.932183][T18073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2378'.
[ 1040.083254][T18078] hub 8-0:1.0: USB hub found
[ 1040.125824][T18078] hub 8-0:1.0: 1 port detected
[ 1040.291798][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'.
[ 1040.339081][T18065] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1041.092148][T17968] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1041.261583][T17968] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1041.479215][T17968] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1041.493856][T18101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145
[ 1041.532908][T17968] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1041.989490][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'.
[ 1042.599979][T17968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1043.121187][T17968] 8021q: adding VLAN 0 to HW filter on device team0
[ 1043.195375][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.202674][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1043.272442][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.279831][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1043.950768][T17968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1044.641810][T10327] hsr_slave_0: left promiscuous mode
[ 1044.726313][T10327] hsr_slave_1: left promiscuous mode
[ 1044.776982][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.810903][T10327] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.939906][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1045.004218][T10327] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1045.137456][T10327] veth1_macvtap: left promiscuous mode
[ 1045.146416][T10327] veth0_macvtap: left promiscuous mode
[ 1045.153704][T10327] veth1_vlan: left promiscuous mode
[ 1045.159328][T10327] veth0_vlan: left promiscuous mode
[ 1045.769235][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'.
[ 1045.831862][T18171] hub 8-0:1.0: USB hub found
[ 1045.837096][T18171] hub 8-0:1.0: 1 port detected
[ 1047.169104][T18190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146
[ 1047.380726][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'.
[ 1047.562860][T10327] team0 (unregistering): Port device team_slave_1 removed
[ 1047.725012][T10327] team0 (unregistering): Port device team_slave_0 removed
[ 1048.803874][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1048.969436][T18224] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147
[ 1048.986735][T17968] veth0_vlan: entered promiscuous mode
[ 1049.032403][T17968] veth1_vlan: entered promiscuous mode
[ 1049.180563][T17968] veth0_macvtap: entered promiscuous mode
[ 1049.221657][T17968] veth1_macvtap: entered promiscuous mode
[ 1049.352019][T18225] hub 8-0:1.0: USB hub found
[ 1049.383580][T18225] hub 8-0:1.0: 1 port detected
[ 1049.384517][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'.
[ 1049.470358][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1049.545079][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1049.753145][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1049.776986][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1049.892556][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1049.905602][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.206043][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.228496][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.255450][T18248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148
[ 1050.332318][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1050.428857][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.635616][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[ 1051.761450][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2349'.
[ 1051.873580][T18263] hub 8-0:1.0: USB hub found
[ 1051.904974][T18263] hub 8-0:1.0: 1 port detected
[ 1051.970532][T18264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2392'.
[ 1052.037043][T18266] hub 8-0:1.0: USB hub found
[ 1052.042340][T18266] hub 8-0:1.0: 1 port detected
[ 1052.102679][T17970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1052.121075][T17970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1052.130482][T17970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1052.138802][T17970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1052.146581][T17970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1053.545956][T18271] chnl_net:caif_netlink_parms(): no params data found
[ 1053.582958][T18287] FAULT_INJECTION: forcing a failure.
[ 1053.582958][T18287] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1053.654019][T18287] CPU: 1 UID: 0 PID: 18287 Comm: syz.0.2396 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1053.654069][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1053.654090][T18287] Call Trace:
[ 1053.654101][T18287]  <TASK>
[ 1053.654114][T18287]  dump_stack_lvl+0x16c/0x1f0
[ 1053.654155][T18287]  should_fail_ex+0x512/0x640
[ 1053.654203][T18287]  get_futex_key+0x1d0/0x1560
[ 1053.654251][T18287]  ? __pfx_get_futex_key+0x10/0x10
[ 1053.654294][T18287]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1053.654342][T18287]  futex_wake+0xea/0x530
[ 1053.654389][T18287]  ? do_splice_direct+0x1b4/0x240
[ 1053.654433][T18287]  ? __pfx_futex_wake+0x10/0x10
[ 1053.654503][T18287]  do_futex+0x1e3/0x350
[ 1053.654558][T18287]  ? __pfx_do_futex+0x10/0x10
[ 1053.654604][T18287]  ? __pfx_do_sendfile+0x10/0x10
[ 1053.654642][T18287]  ? __sys_sendmsg+0x18c/0x220
[ 1053.654682][T18287]  __x64_sys_futex+0x1e0/0x4c0
[ 1053.654741][T18287]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1053.654788][T18287]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1053.654850][T18287]  do_syscall_64+0xcd/0x490
[ 1053.654889][T18287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1053.654924][T18287] RIP: 0033:0x7f53d158eb69
[ 1053.654950][T18287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1053.654984][T18287] RSP: 002b:00007f53d23dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1053.655016][T18287] RAX: ffffffffffffffda RBX: 00007f53d17b5fa8 RCX: 00007f53d158eb69
[ 1053.655039][T18287] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53d17b5fac
[ 1053.655060][T18287] RBP: 00007f53d17b5fa0 R08: 00007f53d23de000 R09: 0000000000000000
[ 1053.655082][T18287] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f53d17b5fac
[ 1053.655103][T18287] R13: 0000000000000000 R14: 00007ffe358d9550 R15: 00007ffe358d9638
[ 1053.655145][T18287]  </TASK>
[ 1054.343685][T17970] Bluetooth: hci3: command tx timeout
[ 1054.403751][ T8915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.467152][T18271] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.476777][T18271] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.484760][T18271] bridge_slave_0: entered allmulticast mode
[ 1054.493674][T18271] bridge_slave_0: entered promiscuous mode
[ 1054.518940][T18271] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.536418][T18271] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.544272][T18271] bridge_slave_1: entered allmulticast mode
[ 1054.552759][T18271] bridge_slave_1: entered promiscuous mode
[ 1054.592405][ T8915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.645325][T18296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1055.094571][ T8915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.119769][T18271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1055.210172][T18271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1055.519489][T18271] team0: Port device team_slave_0 added
[ 1055.764324][ T8915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.861147][T18271] team0: Port device team_slave_1 added
[ 1056.062020][T18278] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1056.099808][T18304] FAULT_INJECTION: forcing a failure.
[ 1056.099808][T18304] name failslab, interval 1, probability 0, space 0, times 0
[ 1056.130213][T18304] CPU: 0 UID: 0 PID: 18304 Comm: syz.2.2398 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1056.130262][T18304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1056.130284][T18304] Call Trace:
[ 1056.130295][T18304]  <TASK>
[ 1056.130308][T18304]  dump_stack_lvl+0x16c/0x1f0
[ 1056.130348][T18304]  should_fail_ex+0x512/0x640
[ 1056.130389][T18304]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1056.130436][T18304]  should_failslab+0xc2/0x120
[ 1056.130482][T18304]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1056.130523][T18304]  ? security_file_alloc+0x34/0x2b0
[ 1056.130569][T18304]  security_file_alloc+0x34/0x2b0
[ 1056.130618][T18304]  init_file+0x93/0x4c0
[ 1056.130668][T18304]  alloc_empty_file+0x73/0x1e0
[ 1056.130721][T18304]  path_openat+0xda/0x2cb0
[ 1056.130758][T18304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.130806][T18304]  ? __pfx_path_openat+0x10/0x10
[ 1056.130856][T18304]  do_filp_open+0x20b/0x470
[ 1056.130897][T18304]  ? __pfx_do_filp_open+0x10/0x10
[ 1056.130966][T18304]  ? alloc_fd+0x471/0x7d0
[ 1056.131013][T18304]  do_sys_openat2+0x11b/0x1d0
[ 1056.131064][T18304]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1056.131114][T18304]  ? fput+0x9b/0xd0
[ 1056.131159][T18304]  ? __sys_sendmsg+0x18c/0x220
[ 1056.131204][T18304]  __x64_sys_openat+0x174/0x210
[ 1056.131256][T18304]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1056.131326][T18304]  do_syscall_64+0xcd/0x490
[ 1056.131366][T18304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.131399][T18304] RIP: 0033:0x7f283758eb69
[ 1056.131426][T18304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.131475][T18304] RSP: 002b:00007f283832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1056.131505][T18304] RAX: ffffffffffffffda RBX: 00007f28377b5fa0 RCX: 00007f283758eb69
[ 1056.131528][T18304] RDX: 0000000000000202 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1056.131550][T18304] RBP: 00007f2837611df1 R08: 0000000000000000 R09: 0000000000000000
[ 1056.131570][T18304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1056.131590][T18304] R13: 0000000000000000 R14: 00007f28377b5fa0 R15: 00007ffca73991d8
[ 1056.131645][T18304]  </TASK>
[ 1056.366971][T18271] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1056.374078][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1056.400802][T18271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1056.409847][T18306] FAULT_INJECTION: forcing a failure.
[ 1056.409847][T18306] name failslab, interval 1, probability 0, space 0, times 0
[ 1056.414634][T18271] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1056.431706][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1056.433311][T17970] Bluetooth: hci3: command tx timeout
[ 1056.457672][T18271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.483518][T18306] CPU: 1 UID: 0 PID: 18306 Comm: syz.0.2399 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1056.483571][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1056.483607][T18306] Call Trace:
[ 1056.483618][T18306]  <TASK>
[ 1056.483632][T18306]  dump_stack_lvl+0x16c/0x1f0
[ 1056.483675][T18306]  should_fail_ex+0x512/0x640
[ 1056.483715][T18306]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1056.483762][T18306]  should_failslab+0xc2/0x120
[ 1056.483807][T18306]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1056.483849][T18306]  ? __pmd_alloc+0xbf/0x930
[ 1056.483907][T18306]  __pmd_alloc+0xbf/0x930
[ 1056.483962][T18306]  __handle_mm_fault+0xa06/0x2a50
[ 1056.484004][T18306]  ? mt_find+0x3ef/0xa30
[ 1056.484049][T18306]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1056.484082][T18306]  ? __pfx_mt_find+0x10/0x10
[ 1056.484146][T18306]  ? find_vma+0xbf/0x140
[ 1056.484190][T18306]  ? __pfx_find_vma+0x10/0x10
[ 1056.484240][T18306]  handle_mm_fault+0x589/0xd10
[ 1056.484277][T18306]  ? trace_raw_output_exceptions+0x121/0x150
[ 1056.484334][T18306]  do_user_addr_fault+0x7a6/0x1370
[ 1056.484393][T18306]  ? rcu_is_watching+0x12/0xc0
[ 1056.484433][T18306]  exc_page_fault+0x5c/0xb0
[ 1056.484467][T18306]  asm_exc_page_fault+0x26/0x30
[ 1056.484500][T18306] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 1056.484549][T18306] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[ 1056.484589][T18306] RSP: 0018:ffffc90003f4fe98 EFLAGS: 00050206
[ 1056.484616][T18306] RAX: 657069705f637072 RBX: 000000000000000b RCX: 000000000000000b
[ 1056.484637][T18306] RDX: fffffbfff1a01f95 RSI: ffffffff8d00fca0 RDI: 0000000000000000
[ 1056.484659][T18306] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1a01f95
[ 1056.484679][T18306] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff8d00fca0
[ 1056.484700][T18306] R13: 000000000000000b R14: 00007ffffffff000 R15: 0000000000000000
[ 1056.484743][T18306]  _copy_to_user+0xbb/0xd0
[ 1056.484793][T18306]  fs_name+0x172/0x220
[ 1056.484837][T18306]  __x64_sys_sysfs+0xbf/0x1a0
[ 1056.484883][T18306]  do_syscall_64+0xcd/0x490
[ 1056.484923][T18306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.484957][T18306] RIP: 0033:0x7f53d158eb69
[ 1056.484984][T18306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1056.485017][T18306] RSP: 002b:00007f53d23dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[ 1056.485047][T18306] RAX: ffffffffffffffda RBX: 00007f53d17b5fa0 RCX: 00007f53d158eb69
[ 1056.485069][T18306] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000002
[ 1056.485089][T18306] RBP: 00007f53d1611df1 R08: 0000000000000000 R09: 0000000000000000
[ 1056.485109][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1056.485128][T18306] R13: 0000000000000000 R14: 00007f53d17b5fa0 R15: 00007ffe358d9638
[ 1056.485170][T18306]  </TASK>
[ 1056.927203][T18311] vhci_hcd: invalid port number 16
[ 1056.932536][T18311] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[ 1057.520672][T18271] hsr_slave_0: entered promiscuous mode
[ 1057.563863][T18271] hsr_slave_1: entered promiscuous mode
[ 1057.737737][T18271] debugfs: 'hsr0' already exists in 'hsr'
[ 1057.752736][T18271] Cannot create hsr debugfs directory
[ 1057.938974][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2402'.
[ 1058.043024][T18320] hub 8-0:1.0: USB hub found
[ 1058.086931][T18320] hub 8-0:1.0: 1 port detected
[ 1058.188816][ T8915] bridge_slave_1: left allmulticast mode
[ 1058.205292][T18326] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149
[ 1058.213700][ T8915] bridge_slave_1: left promiscuous mode
[ 1058.235776][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.264834][ T8915] bridge_slave_0: left allmulticast mode
[ 1058.278567][ T8915] bridge_slave_0: left promiscuous mode
[ 1058.285132][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.503725][T17970] Bluetooth: hci3: command tx timeout
[ 1058.588490][T18329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150
[ 1058.765482][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2403'.
[ 1058.886348][T18336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151
[ 1059.821103][T18313] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1059.926794][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1059.941166][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1059.952361][ T8915] bond0 (unregistering): Released all slaves
[ 1060.585217][T17970] Bluetooth: hci3: command tx timeout
[ 1062.420618][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2410'.
[ 1062.673845][T18380] hub 8-0:1.0: USB hub found
[ 1062.716877][T18380] hub 8-0:1.0: 1 port detected
[ 1063.656885][T18271] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1063.721018][T18271] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1063.899939][T18271] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1064.036740][T18271] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1065.149282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1065.155941][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1065.260247][T18415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152
[ 1065.263673][T18408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2413'.
[ 1065.436753][T18410] hub 8-0:1.0: USB hub found
[ 1065.446670][T18410] hub 8-0:1.0: 1 port detected
[ 1065.490523][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'.
[ 1065.550323][T18271] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1065.982836][T18271] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.054570][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.061837][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.158581][T18428] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153
[ 1066.188458][T10327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.195675][T10327] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1066.451652][T18429] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154
[ 1066.637069][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'.
[ 1068.012218][T18271] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.912004][ T8915] hsr_slave_0: left promiscuous mode
[ 1069.000609][ T8915] hsr_slave_1: left promiscuous mode
[ 1069.034372][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1069.041912][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1069.339739][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1069.435911][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1069.519694][T18478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155
[ 1069.907599][ T8915] veth1_macvtap: left promiscuous mode
[ 1069.947531][ T8915] veth0_macvtap: left promiscuous mode
[ 1070.064043][ T8915] veth1_vlan: left promiscuous mode
[ 1070.093635][ T8915] veth0_vlan: left promiscuous mode
[ 1070.235685][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'.
[ 1073.187781][ T8915] team0 (unregistering): Port device team_slave_1 removed
[ 1073.542510][ T8915] team0 (unregistering): Port device team_slave_0 removed
[ 1074.348031][T18271] veth0_vlan: entered promiscuous mode
[ 1074.385869][T18271] veth1_vlan: entered promiscuous mode
[ 1074.544653][T18271] veth0_macvtap: entered promiscuous mode
[ 1074.580915][T18271] veth1_macvtap: entered promiscuous mode
[ 1074.665949][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2425'.
[ 1074.679434][T18271] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1074.728588][T18271] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1074.731670][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2425'.
[ 1074.862558][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.917767][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.947101][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.971278][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1075.112843][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'.
[ 1075.131955][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1075.165075][T18539] hub 8-0:1.0: USB hub found
[ 1075.173407][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1075.186202][T18539] hub 8-0:1.0: 1 port detected
[ 1075.297327][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1075.326781][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.791537][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1077.805602][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1077.823658][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1077.833020][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1077.840984][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1077.873468][T18566] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156
[ 1078.193799][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'.
[ 1079.135603][T10327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.301816][T18582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157
[ 1079.347380][T10327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.414358][T18585] vhci_hcd: invalid port number 16
[ 1079.439588][T18561] chnl_net:caif_netlink_parms(): no params data found
[ 1079.457297][T18585] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[ 1079.599116][T18584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158
[ 1079.757602][T10327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.921724][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'.
[ 1080.028307][T17970] Bluetooth: hci2: command tx timeout
[ 1080.205245][T10327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.643671][T18597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159
[ 1080.710533][T18599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1080.730090][T18575] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1080.759196][T18561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.791130][T18561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.813785][T18561] bridge_slave_0: entered allmulticast mode
[ 1080.845341][T18561] bridge_slave_0: entered promiscuous mode
[ 1080.943496][T18600] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160
[ 1081.025596][T18561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.032896][T18561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.193525][T18561] bridge_slave_1: entered allmulticast mode
[ 1081.201823][T18561] bridge_slave_1: entered promiscuous mode
[ 1081.315172][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'.
[ 1082.002757][T18561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1082.105501][T17970] Bluetooth: hci2: command tx timeout
[ 1082.150649][T18561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1082.287967][T18561] team0: Port device team_slave_0 added
[ 1082.296816][T10327] bridge_slave_1: left allmulticast mode
[ 1082.302581][T10327] bridge_slave_1: left promiscuous mode
[ 1082.312884][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.375068][T10327] bridge_slave_0: left allmulticast mode
[ 1082.402618][T10327] bridge_slave_0: left promiscuous mode
[ 1082.508322][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.078763][T18621] FAULT_INJECTION: forcing a failure.
[ 1083.078763][T18621] name failslab, interval 1, probability 0, space 0, times 0
[ 1083.150203][T18621] CPU: 1 UID: 0 PID: 18621 Comm: syz.2.2436 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1083.150255][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1083.150277][T18621] Call Trace:
[ 1083.150289][T18621]  <TASK>
[ 1083.150302][T18621]  dump_stack_lvl+0x16c/0x1f0
[ 1083.150346][T18621]  should_fail_ex+0x512/0x640
[ 1083.150388][T18621]  ? __kmalloc_noprof+0xbf/0x510
[ 1083.150432][T18621]  ? copy_splice_read+0x1a8/0xba0
[ 1083.150463][T18621]  should_failslab+0xc2/0x120
[ 1083.150508][T18621]  __kmalloc_noprof+0xd2/0x510
[ 1083.150558][T18621]  copy_splice_read+0x1a8/0xba0
[ 1083.150603][T18621]  ? __pfx_copy_splice_read+0x10/0x10
[ 1083.150642][T18621]  ? look_up_lock_class+0x6b/0x150
[ 1083.150683][T18621]  ? lockdep_init_map_type+0x5c/0x280
[ 1083.150733][T18621]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1083.150776][T18621]  ? __pfx_copy_splice_read+0x10/0x10
[ 1083.150809][T18621]  do_splice_read+0x282/0x370
[ 1083.150847][T18621]  splice_direct_to_actor+0x2a1/0xa30
[ 1083.150886][T18621]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1083.150939][T18621]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1083.150988][T18621]  do_splice_direct+0x174/0x240
[ 1083.151024][T18621]  ? __pfx_do_splice_direct+0x10/0x10
[ 1083.151062][T18621]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1083.151103][T18621]  ? rw_verify_area+0xcf/0x6c0
[ 1083.151141][T18621]  do_sendfile+0xb06/0xe50
[ 1083.151185][T18621]  ? __pfx_do_sendfile+0x10/0x10
[ 1083.151222][T18621]  ? __sys_sendmsg+0x18c/0x220
[ 1083.151260][T18621]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1083.151303][T18621]  ? __x64_sys_futex+0x1e9/0x4c0
[ 1083.151351][T18621]  __x64_sys_sendfile64+0x1d8/0x220
[ 1083.151399][T18621]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1083.151460][T18621]  do_syscall_64+0xcd/0x490
[ 1083.151499][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.151533][T18621] RIP: 0033:0x7f283758eb69
[ 1083.151559][T18621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1083.151593][T18621] RSP: 002b:00007f283832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1083.151625][T18621] RAX: ffffffffffffffda RBX: 00007f28377b5fa0 RCX: 00007f283758eb69
[ 1083.151648][T18621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a
[ 1083.151668][T18621] RBP: 00007f2837611df1 R08: 0000000000000000 R09: 0000000000000000
[ 1083.151689][T18621] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000
[ 1083.151708][T18621] R13: 0000000000000000 R14: 00007f28377b5fa0 R15: 00007ffca73991d8
[ 1083.151752][T18621]  </TASK>
[ 1083.467912][T18621] ==================================================================
[ 1083.476203][T18621] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340
[ 1083.484167][T18621] Read of size 8 at addr ffff888027fd2000 by task syz.2.2436/18621
[ 1083.492192][T18621] 
[ 1083.494694][T18621] CPU: 0 UID: 0 PID: 18621 Comm: syz.2.2436 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1083.494748][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1083.494770][T18621] Call Trace:
[ 1083.494784][T18621]  <TASK>
[ 1083.494797][T18621]  dump_stack_lvl+0x116/0x1f0
[ 1083.494841][T18621]  print_report+0xcd/0x630
[ 1083.494884][T18621]  ? __virt_addr_valid+0x81/0x610
[ 1083.494936][T18621]  ? __phys_addr+0xe8/0x180
[ 1083.494979][T18621]  ? force_devcd_write+0x312/0x340
[ 1083.495016][T18621]  kasan_report+0xe0/0x110
[ 1083.495061][T18621]  ? force_devcd_write+0x312/0x340
[ 1083.495100][T18621]  force_devcd_write+0x312/0x340
[ 1083.495137][T18621]  ? __pfx_force_devcd_write+0x10/0x10
[ 1083.495176][T18621]  ? __debugfs_file_get+0x1fe/0x840
[ 1083.495222][T18621]  ? __pfx___debugfs_file_get+0x10/0x10
[ 1083.495275][T18621]  full_proxy_write+0x131/0x1a0
[ 1083.495323][T18621]  ? __pfx_full_proxy_write+0x10/0x10
[ 1083.495375][T18621]  vfs_write+0x2a0/0x1150
[ 1083.495418][T18621]  ? __pfx___mutex_lock+0x10/0x10
[ 1083.495457][T18621]  ? __pfx_vfs_write+0x10/0x10
[ 1083.495561][T18621]  ? __fget_files+0x20e/0x3c0
[ 1083.495605][T18621]  ksys_write+0x12a/0x250
[ 1083.495644][T18621]  ? __pfx_ksys_write+0x10/0x10
[ 1083.495691][T18621]  do_syscall_64+0xcd/0x490
[ 1083.495729][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.495764][T18621] RIP: 0033:0x7f283758eb69
[ 1083.495791][T18621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1083.495824][T18621] RSP: 002b:00007f283832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1083.495857][T18621] RAX: ffffffffffffffda RBX: 00007f28377b5fa0 RCX: 00007f283758eb69
[ 1083.495880][T18621] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000d
[ 1083.495909][T18621] RBP: 00007f2837611df1 R08: 0000000000000000 R09: 0000000000000000
[ 1083.495931][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1083.495952][T18621] R13: 0000000000000000 R14: 00007f28377b5fa0 R15: 00007ffca73991d8
[ 1083.495985][T18621]  </TASK>
[ 1083.495997][T18621] 
[ 1083.706292][T18621] Allocated by task 5858:
[ 1083.710738][T18621]  kasan_save_stack+0x33/0x60
[ 1083.715454][T18621]  kasan_save_track+0x14/0x30
[ 1083.720160][T18621]  __kasan_kmalloc+0xaa/0xb0
[ 1083.724785][T18621]  vhci_open+0x4c/0x430
[ 1083.728985][T18621]  misc_open+0x35a/0x420
[ 1083.733279][T18621]  chrdev_open+0x234/0x6a0
[ 1083.737741][T18621]  do_dentry_open+0x982/0x1530
[ 1083.742561][T18621]  vfs_open+0x82/0x3f0
[ 1083.746707][T18621]  path_openat+0x1de4/0x2cb0
[ 1083.751335][T18621]  do_filp_open+0x20b/0x470
[ 1083.755875][T18621]  do_sys_openat2+0x11b/0x1d0
[ 1083.760593][T18621]  __x64_sys_openat+0x174/0x210
[ 1083.765482][T18621]  do_syscall_64+0xcd/0x490
[ 1083.770027][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.776038][T18621] 
[ 1083.778387][T18621] Freed by task 11244:
[ 1083.782548][T18621]  kasan_save_stack+0x33/0x60
[ 1083.787251][T18621]  kasan_save_track+0x14/0x30
[ 1083.791952][T18621]  kasan_save_free_info+0x3b/0x60
[ 1083.797101][T18621]  __kasan_slab_free+0x51/0x70
[ 1083.801898][T18621]  kfree+0x2b4/0x4d0
[ 1083.805832][T18621]  vhci_release+0xbb/0xf0
[ 1083.810232][T18621]  __fput+0x402/0xb70
[ 1083.814354][T18621]  task_work_run+0x150/0x240
[ 1083.818993][T18621]  do_exit+0x86f/0x2bf0
[ 1083.823195][T18621]  do_group_exit+0xd3/0x2a0
[ 1083.827747][T18621]  get_signal+0x2673/0x26d0
[ 1083.832366][T18621]  arch_do_signal_or_restart+0x8f/0x790
[ 1083.837948][T18621]  exit_to_user_mode_loop+0x84/0x110
[ 1083.843283][T18621]  do_syscall_64+0x3f6/0x490
[ 1083.847927][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.853885][T18621] 
[ 1083.856326][T18621] The buggy address belongs to the object at ffff888027fd2000
[ 1083.856326][T18621]  which belongs to the cache kmalloc-1k of size 1024
[ 1083.870398][T18621] The buggy address is located 0 bytes inside of
[ 1083.870398][T18621]  freed 1024-byte region [ffff888027fd2000, ffff888027fd2400)
[ 1083.884309][T18621] 
[ 1083.886770][T18621] The buggy address belongs to the physical page:
[ 1083.893219][T18621] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27fd0
[ 1083.902194][T18621] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1083.910720][T18621] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1083.918387][T18621] page_type: f5(slab)
[ 1083.922496][T18621] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[ 1083.931129][T18621] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1083.939741][T18621] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[ 1083.948537][T18621] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 1083.957415][T18621] head: 00fff00000000003 ffffea00009ff401 00000000ffffffff 00000000ffffffff
[ 1083.966114][T18621] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1083.974809][T18621] page dumped because: kasan: bad access detected
[ 1083.981252][T18621] page_owner tracks the page as allocated
[ 1083.987000][T18621] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16632947548, free_ts 0
[ 1084.006839][T18621]  post_alloc_hook+0x1c0/0x230
[ 1084.011653][T18621]  get_page_from_freelist+0x132b/0x38e0
[ 1084.017245][T18621]  __alloc_frozen_pages_noprof+0x261/0x23f0
[ 1084.023204][T18621]  alloc_pages_mpol+0x1fb/0x550
[ 1084.028095][T18621]  new_slab+0x247/0x330
[ 1084.032280][T18621]  ___slab_alloc+0xcf2/0x1740
[ 1084.037070][T18621]  __slab_alloc.constprop.0+0x56/0xb0
[ 1084.042510][T18621]  __kmalloc_cache_node_noprof+0x100/0x420
[ 1084.048364][T18621]  alloc_desc+0x5d/0x930
[ 1084.052649][T18621]  __irq_alloc_descs+0x395/0x620
[ 1084.057672][T18621]  irq_domain_alloc_descs.part.0+0xb4/0xc0
[ 1084.063520][T18621]  irq_domain_alloc_irqs_locked+0x51f/0xa60
[ 1084.069490][T18621]  __irq_domain_alloc_irqs+0x87/0x120
[ 1084.074899][T18621]  __msi_domain_alloc_irqs+0x6c0/0x1020
[ 1084.080637][T18621]  __msi_domain_alloc_locked+0x3f5/0x540
[ 1084.086292][T18621]  msi_domain_alloc_irqs_all_locked+0xf8/0x190
[ 1084.092478][T18621] page_owner free stack trace missing
[ 1084.097871][T18621] 
[ 1084.100207][T18621] Memory state around the buggy address:
[ 1084.105881][T18621]  ffff888027fd1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1084.113960][T18621]  ffff888027fd1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1084.122124][T18621] >ffff888027fd2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1084.130215][T18621]                    ^
[ 1084.134297][T18621]  ffff888027fd2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1084.142377][T18621]  ffff888027fd2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1084.150456][T18621] ==================================================================
[ 1084.223270][T17970] Bluetooth: hci2: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1084.304571][T18621] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1084.311847][T18621] CPU: 1 UID: 0 PID: 18621 Comm: syz.2.2436 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) 
[ 1084.323715][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1084.333917][T18621] Call Trace:
[ 1084.337244][T18621]  <TASK>
[ 1084.340307][T18621]  dump_stack_lvl+0x3d/0x1f0
[ 1084.345070][T18621]  vpanic+0x6e8/0x7a0
[ 1084.349226][T18621]  ? __pfx_vpanic+0x10/0x10
[ 1084.353888][T18621]  ? __pfx_vprintk_emit+0x10/0x10
[ 1084.359088][T18621]  ? force_devcd_write+0x312/0x340
[ 1084.364707][T18621]  panic+0xca/0xd0
[ 1084.368504][T18621]  ? __pfx_panic+0x10/0x10
[ 1084.373139][T18621]  ? force_devcd_write+0x312/0x340
[ 1084.378316][T18621]  ? preempt_schedule_common+0x44/0xc0
[ 1084.383830][T18621]  ? preempt_schedule_thunk+0x16/0x30
[ 1084.389284][T18621]  check_panic_on_warn+0xab/0xb0
[ 1084.394331][T18621]  end_report+0x107/0x170
[ 1084.398779][T18621]  kasan_report+0xee/0x110
[ 1084.403277][T18621]  ? force_devcd_write+0x312/0x340
[ 1084.408448][T18621]  force_devcd_write+0x312/0x340
[ 1084.413439][T18621]  ? __pfx_force_devcd_write+0x10/0x10
[ 1084.418960][T18621]  ? __debugfs_file_get+0x1fe/0x840
[ 1084.424242][T18621]  ? __pfx___debugfs_file_get+0x10/0x10
[ 1084.429879][T18621]  full_proxy_write+0x131/0x1a0
[ 1084.434779][T18621]  ? __pfx_full_proxy_write+0x10/0x10
[ 1084.440186][T18621]  vfs_write+0x2a0/0x1150
[ 1084.444568][T18621]  ? __pfx___mutex_lock+0x10/0x10
[ 1084.449727][T18621]  ? __pfx_vfs_write+0x10/0x10
[ 1084.454631][T18621]  ? __fget_files+0x20e/0x3c0
[ 1084.459356][T18621]  ksys_write+0x12a/0x250
[ 1084.463716][T18621]  ? __pfx_ksys_write+0x10/0x10
[ 1084.468620][T18621]  do_syscall_64+0xcd/0x490
[ 1084.473168][T18621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.479102][T18621] RIP: 0033:0x7f283758eb69
[ 1084.483535][T18621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1084.503268][T18621] RSP: 002b:00007f283832f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1084.511733][T18621] RAX: ffffffffffffffda RBX: 00007f28377b5fa0 RCX: 00007f283758eb69
[ 1084.519740][T18621] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000d
[ 1084.527737][T18621] RBP: 00007f2837611df1 R08: 0000000000000000 R09: 0000000000000000
[ 1084.535729][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1084.543746][T18621] R13: 0000000000000000 R14: 00007f28377b5fa0 R15: 00007ffca73991d8
[ 1084.551750][T18621]  </TASK>
[ 1084.554944][T18621] Kernel Offset: disabled
[ 1084.559280][T18621] Rebooting in 86400 seconds..