last executing test programs:

8m6.066615907s ago: executing program 3 (id=133):
socket(0xa, 0x3, 0x3b)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100003f00"}, 0x58)

8m5.981742636s ago: executing program 3 (id=134):
r0 = prctl$auto_PR_SCHED_CORE_CREATE(0xadb, 0x1, 0xffffffffffffffff, 0x8000, 0x695)
fsconfig$auto_XFS_DAX_NEVER(r0, 0x0, &(0x7f0000000000)='}&\x00', &(0x7f0000000040)="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", 0x2)
ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001040)={@inferred=<r1=>r0, 0x0, 0x8000000000000000, @unused, @subvolid=0x2})
r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000002040), 0x10400, 0x0)
sendmsg$auto(r2, &(0x7f00000022c0)={&(0x7f0000002080)="d18f9768dc0660425c4a8f134f9863a4f30f4519f2249596b4f081af35fd217318f5e899c6a51b4dccae0e4cbdef8351bf8f1f489d789d2b320b0fb605ab7098093ea41efcdef614a4f6dacbf3cea5b0700ca54b2da8b932a473c444a56bafff14780c155ac48af9edc8011138aa658e511182f74b8d75dbc56f927bc2efafa93ea8531bb1e9fd0b0cf6be59a28de6baff3c571184e07dd7ef9a165a0b77d48497766c1fc6c266", 0x5175, &(0x7f00000021c0)={&(0x7f0000002140)="90701dc39c2f667162efe9d1cf09f7b1ea60d8f43eaf8c1e1305d506c724c1b80f4785a2855f7b2f6f52eb65b8c993081998fb356db4149dea28e15f257556980e73f2b9b011594498f5ceadbcda4a2ca82fdfe8571e240cb33a739688fbd09fe1898b2388f4b24126ea346a2b7c9c642da935f62e381a714c2154db73", 0x8}, 0x1, &(0x7f0000002200)="0225e2e3c5262795fc1a61ad840dcf220b919b57cfedfa4fd7cb942308622f9f1be98e5eecc51a9fe2be083528c586e9aa58c9121953881f5781c2c423a864d5b567c5d092bc94be2c0caf4ed38fbf0a66f989dd1ca158cb6a62ff8bde8b318d58ff647a66400c3b5de8f96dc7065a97426a4f27873e260aaa0e96f2d1f81a4f154a4ee6abadb1739616ee0f", 0x22, 0xff}, 0x7fffffff)
ioctl$auto_FS_IOC_RESVSP64(r1, 0x4030582a, 0x8)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002340), r0)
shmctl$auto_IPC_RMID(0x655, 0x0, &(0x7f00000024c0)={{0x6, <r4=>0x0, 0x0, 0x5, 0x4, 0xb76, 0xf800}, 0x6, 0x6, 0x3, 0x0, @inferred, @raw=0x4, 0x7, 0x0, &(0x7f0000002380)="bfafdc38bc2fa8be238bc9d528bd91aef779aea926c7e428028c61d9874d735dbbe3dfb90c3a3c7f88da9f62223d0ec0dc54f63e5c9b9b83977a113ebbbe085d332e2cb02f1a998fd71948f1d56792ea542f26ffa7170e3371c78ae43adfd62287ceb827f5e57a5bb759f66f7159609f561d6ff839ff61be1fca8998aaa39083736ea2ca28b4d6", &(0x7f0000002440)="9242996b892627c329a918dccc53b07453bbb401fa460b00d1ab3efafe67edb701b5ca3293182c241e78afee6039ddc7fd83d7048993567483ec5156e12e15e058d284405eb9d77588b13db7b6d8f7be512fe85001aa07ac69380fe2ab1d425b6c61765f7481e60f8591da0512c816723bca"})
shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f00000026c0)={{0x100, <r5=>0xee00, 0xee01, 0xf2, 0x5, 0x9, 0x9}, 0x5, 0x6, 0x8, 0x0, @inferred=0xffffffffffffffff, @raw=0xfff, 0x3, 0x0, &(0x7f0000002540)="14a14d6243d0783ede932cf882890f6693fce980abad64cc883ee031c4fee574ae2a48d5b619c0190821e82b369760739c9f35ff74d06c4606c541d909dee9ffc2b82eae8dd1a65a07984243a997c8e8641f193ad7995e738b1702fa6085e47d1194a981d42a298bdcfeec21bc4cdfa50a7c8c1231dca5b6073f53deedbd439336fe3e61", &(0x7f0000002600)="08b55fe611463c03ce4ee1569dea14dec6087591e17332a22ce58e13582d250bff8435d9ae7027260f5a60af51a05dce8d759234388f4e2dd070b0bee4bb0db45c9bae77f5a77811d39a7262972e72bf2890e070be86b8a8568b59506cf8d7f0d091f5adddc0b66afe04b091e88c5d3bd6be9c3c0527178d44ab1686905b9da3746c18816f1573259fd658af8b4f39e50912533c02faf0a0c5f8262c13f1b2c1"})
r6 = getpgid(0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002b80)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x81799665198035f6}, 0xc, &(0x7f0000002b40)={&(0x7f0000002740)={0x3d8, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c2, 0x2, 0x0, 0x1, [@nested={0xf0, 0x5e, 0x0, 0x1, [@typed={0x4, 0x15}, @typed={0x4, 0xb5}, @nested={0x4, 0x14d}, @nested={0x4, 0xe7}, @typed={0x7, 0x11b, 0x0, 0x0, @str='+\'\x00'}, @typed={0xc, 0x14b, 0x0, 0x0, @u64}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r4}, @generic="33a2c41fa2bd2834bc38456faf944c8f4299cc7a5bb56e725f599533248a38d5965001f13247278e6aec0a15a673c236491fc548972578f5a1a6bcba7f790f03dc35656746aa198a4c0a580ad353ab19dad961a2b1af7ee7d27307c16f5df0c0ac9ac81e319d893e581afef50ed347419e9b53f08dd7232ae11d2325bee111fd029f74f6d47580ec5c3a8780a79df3b31b3fd3466e2cf1340137c967f5847eb8d9103daf6526fca9017c781eac0efc0404d7aa0d311d5fc7f7debc7fffcfe353"]}, @generic="f8ab93887d5f1ba2d4c9540819286107a7686a1712725235c5b41b51e8384b445b542f1c7b208ee52aef92979546d7fa6f32ecb467a164353342d88ce539a4ce6a1126e239cd441d7143eb42dee5049f5939c58deff602547f631f6375a9d6ff5f49f33df80c4436f359bdf29678b97ba03bbe3f520796cd18d721bc051db19dc7a407dd725cf72d935e3fdc80a1ccb543a96ae70485929303885296090961d53b48bcfb31987067d79f69d262ac463429eb17e0687252c9b626fbabd58f6f15b2c38c045a32e69b35073c5f3a10"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x739e}, @IPVS_CMD_ATTR_DAEMON={0x1d8, 0x3, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x5}, @typed={0xed, 0xa3, 0x0, 0x0, @binary="77563669381d1f55ec534bfe7059d1a49881433e2c0de28f1177937cbdf06cd39ae901d6a1399a155e6fcdf71d3ce8c09817083116c12b8eb6d52e8c95fc338efc24fd1f487fce8953acf2c6ec1e166bcbeee82a6ccd24b8a15e9441230cfae5f72cbd05eba8ce78dd31a0d61a4ea194518e32433ea214f09f2c699f9db3bb15e802b11eb4d3eda553a9b127cfcd3424d991969f02e854fdedc70004fb235ef5e9ffe2af57b319df2345221e1165bfcf479aa1522f5523a83d6def6bc495f46dc294d822f50fe515000046c1f36db4e70b546a49bedaacf59f113ca1c681ba94f63c9c8322cce389f4"}, @nested={0xd2, 0x25, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x148}, @typed={0x8, 0x3d, 0x0, 0x0, @uid=r5}, @generic="5afb1803aa4e45f4fe988ea25ccddaf123b677df678d1e2ae09d90ffa724d51a2cebe4e5bae4ecb4797a74d2e4cae31ac3e6697db6ad4b7e153c72642a446c99fd399f93f9965b9f89fd17312fa89e498b1913c9e30d23b133c5f9b4f50754e3e9e0a18820fd20107b542195822b33654e688d1e28f13e3d4333eab1b2ffd0dff638205351a8314f1b1ae49935d9f5311a93c4426b03bcea1ba8396a3146743114af8b04a7fb803e30804024a31def6b661eeeefa07b445c0bcee2d2ead0"]}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r6}]}, @IPVS_CMD_ATTR_SERVICE={0x17, 0x1, 0x0, 0x1, [@generic="fea67b4c275b761f415baf267b3751bc34604b"]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
futex$auto(&(0x7f0000002bc0)=0x8, 0x0, 0xb, &(0x7f0000002c00)={0x1, 0x4c}, &(0x7f0000002c40)=0x7, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002cc0), r0)
sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000002f40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d00)={0x1e8, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x80000}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xf4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xfffffff8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0xe5, 0x2, "36cdac3763c8d89bb6be01b3ad5f56c47449b5fdd27c5b78a6f7e38657954110bf9e40cf7d34988fd1b079be10343274a8e58942081e2147e5df2636ea5af23ab4ff458c8b8f2223144373b45e02a1333d9054519bbb1a848d91cbc8db50554ffb14aae365472b7461c409267f7a26b87d83d2e261880083f72596370228384ed1c41fcb8fbe6b42075c37eaa92c2a5b227d784a899d98439379ed96afb02be55dd1a794e6fb8dd451e32446a68c780a78ab29175264a7f920828ff89610b0245b08af1182560ec53f0b940afacded322151a67958e91a68733d03c5531b626698"}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8}]}, @NL80211_ATTR_SAE_PASSWORD={0x68, 0x115, "4b5872055990d7278b25a0215b2489824df22f685e8985a68013f31d131630058763199976697b62526a4fa85bc8d32836cbc8d2560dc5f672853ef9d95390e1fc82ebd7346926c6a4bd0c6be8133d7fad9f4f63d4adccf64f9bb18fd544812acd63a0b9"}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x21}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x40001)
mmap$auto(0x6, 0x8, 0x1, 0x6000000000010, r1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002f80)='/proc/sys/net/ipv6/conf/veth0_vlan/use_tempaddr\x00', 0x10000, 0x0)
writev$auto(r2, &(0x7f0000003080)={&(0x7f0000002fc0)="c433a71ed22709c32cfc19bab37bc4c0d9be5f464d8bc6cf762ee31099ccd2a85fc9f1826a5b4a2011d88865cee74de229497a749046bf06b671e7d51255d06fd223522827367ddf28750a8bffa36489150e79a4d1db026d22098eb479de637d2b4cad1e3afe1d2b87530cfde238df3584268b0683ce2537bbcdc432ec85e79e61ea53b20e1aa94355834ef12a320fde7d978fa60a8ae2c0bdf16d87ca739333860174bf68193e4cf48bd2fbd91b424985b26753c9664616cdf058b3", 0x5}, 0x98)
r8 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000030c0), 0x38002, 0x0)
connect$auto(r2, &(0x7f0000003100)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x2436b2c6)
r9 = io_uring_setup$auto(0x78c, &(0x7f0000003140)={0x245f43aa, 0x3, 0x5, 0x7, 0x0, 0xeef9, <r10=>r1, [0xc, 0x2, 0x7], {0x5, 0xfffffff6, 0x9, 0x7f, 0x8, 0xb, 0x4, 0x7f, 0x200}, {0xfe0, 0x1000, 0x379, 0x800, 0x9, 0x3, 0x7fff, 0xfffffffe, 0x8000000000000001}})
ioctl$auto_CEC_DQEVENT(r9, 0xc0506107, &(0x7f00000031c0)={0xe13, 0x5cb7, 0x81, @lost_msgs={0x69672ee1}})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000003240)='/dev/tty54\x00', 0x68ad83d4581480cb, 0x0)
clone$auto(0x81, 0x6, &(0x7f0000003280)=0x1000, &(0x7f00000032c0)=0x11, 0x5)
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000003300)={0x6, 0x9, 0x1, 0x9, 0xacb, "01b15af562caa150d0b42af640973d8f6d8b632bda0aeed5336da21738b2232977ceefaf9ac1a0e905d912d4135f4633fc193457ac9d95ccbb84a8d6"})
mbind$auto(0x6, 0x5, 0xfffffffffffffffb, &(0x7f0000003380)=0x100, 0x3, 0xfffffffe)
getpid()
fcntl$auto_F_DUPFD_QUERY(r8, 0x403, r9)
r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003400), r10)
sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000035c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003580)={&(0x7f0000003440)={0x110, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x26}, @NL802154_ATTR_COORDINATOR={0xec, 0x1e, 0x0, 0x1, [@nested={0x1c, 0x10f, 0x0, 0x1, [@typed={0xc, 0xb4, 0x0, 0x0, @u64=0xd5}, @nested={0x4, 0x59}, @nested={0x4, 0x3b}, @nested={0x4, 0x97}]}, @nested={0x81, 0x73, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xd, 0xbb, 0x0, 0x0, @str=')&@--.]-\x00'}, @generic="1c3a8e3d98e8861e0a52eb699d6eb5b6a552161045eadd5d49d38cba135a8d2da4b077747b9933e1e1a06077885ce07bfd054a2a7bad5dd9ee7f3f180ce01e7af425de942849b8ad76977590299d80b7040b5b4ee7eb95c67be705cb752621db2a"]}, @generic="969e6641932c9fbe3e7b25b266f8b9ae8476313d8da00ae7e5c129506a4f82dd42d7c227110454a554bada2da0cb40d700744dbf0a4082edd289e7a25dd7f9c50531cad4b871b952"]}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0xd4}, 0x44050)
ioctl$auto_KVM_GET_MSRS(r10, 0xc008ae88, &(0x7f0000003600)={0x8, 0x0, [{0x9, 0x1, 0xa}, {0x10, 0x5, 0x7}, {0x8, 0x5, 0x7}, {0x391, 0xffff0000, 0x6}, {0x4, 0x55a2, 0x540}, {0xffff1663, 0x5, 0x4}, {0x1000, 0x0, 0x1}, {0x2, 0x800, 0x5}]})

8m5.405676437s ago: executing program 3 (id=137):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
mmap$auto(0x8, 0xfffffffffffffffd, 0x2, 0x40000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) (async)
fcntl$auto_F_SET_RW_HINT(r1, 0x40c, 0x0) (async)
ioperm$auto(0x7, 0x5ad2, 0x8) (async)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
write$auto(0x3, 0x0, 0xffd8) (async)
rseq$auto(0x0, 0x8000, 0x7, 0x6) (async)
mincore$auto(0xa8, 0x0, 0x0)
r2 = fcntl$auto(0x8000000000000001, 0x7, 0x8)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf102100000000000c00130000feffffffffffff05000700030000000500100007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x125400, 0x0) (async)
clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x48054) (async)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
semtimedop$auto(0x3, &(0x7f0000000180)={0x7f, 0x6, 0x1}, 0x8, &(0x7f0000000240)={0x100000001, 0x7}) (async)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x68800, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) (async)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) (async)
write$auto(0x3, 0x0, 0x7a) (async)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)

8m4.692250532s ago: executing program 3 (id=142):
socket(0xa, 0x3, 0x3b)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff010000f500"}, 0x58)

8m4.184540277s ago: executing program 3 (id=144):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x84, 0x13, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000002)
tkill$auto(0x1, 0x7)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x21, 0x3, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

8m2.819338243s ago: executing program 3 (id=150):
r0 = prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0x1, 0x0, 0x29dd)
mmap$auto(0xffffffffffffffff, 0x9, 0x4, 0x15, r0, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x100, 0x0)
ioctl$auto_BLKRRPART(r2, 0x125f, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
r3 = socket(0x11, 0xa, 0x587)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r3, 0x8000)
r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x4040080)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macsec0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'hsr0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002040)={'veth0\x00', <r10=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r9, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00', <r11=>0x0})
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf250b00000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0xf663, 0x15)
r12 = getsid$auto(0x0)
waitid$auto_P_PID(0x1, r12, &(0x7f0000000300)={@siginfo_0_0={0x100, 0x1, 0x6, @_rt={r12, 0xffffffffffffffff, @sival_int=0x6}}}, 0x8, &(0x7f0000000100)={{0x5a3c, 0xffbffffffffffffa}, {0x8, 0x6dbb}, 0x0, 0x76b7bc7, 0xf5, 0x8202, 0x100080000, 0x0, 0xfffffffffffff4b2, 0x10000, 0x3, 0x1, 0xd, 0xc2b4, 0x4, 0xfffffffffffffffc})
prctl$auto_SECCOMP_MODE_STRICT(0xb538, 0x1, r12, 0x4, 0x401)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

8m2.517807543s ago: executing program 32 (id=150):
r0 = prctl$auto_PR_SET_SECCOMP(0x16, 0x1, 0x1, 0x0, 0x29dd)
mmap$auto(0xffffffffffffffff, 0x9, 0x4, 0x15, r0, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x100, 0x0)
ioctl$auto_BLKRRPART(r2, 0x125f, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
r3 = socket(0x11, 0xa, 0x587)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r3, 0x8000)
r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40064}, 0x4040080)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macsec0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'hsr0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002040)={'veth0\x00', <r10=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r9, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00', <r11=>0x0})
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf250b00000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0xf663, 0x15)
r12 = getsid$auto(0x0)
waitid$auto_P_PID(0x1, r12, &(0x7f0000000300)={@siginfo_0_0={0x100, 0x1, 0x6, @_rt={r12, 0xffffffffffffffff, @sival_int=0x6}}}, 0x8, &(0x7f0000000100)={{0x5a3c, 0xffbffffffffffffa}, {0x8, 0x6dbb}, 0x0, 0x76b7bc7, 0xf5, 0x8202, 0x100080000, 0x0, 0xfffffffffffff4b2, 0x10000, 0x3, 0x1, 0xd, 0xc2b4, 0x4, 0xfffffffffffffffc})
prctl$auto_SECCOMP_MODE_STRICT(0xb538, 0x1, r12, 0x4, 0x401)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m2.028166563s ago: executing program 0 (id=1987):
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x800400b, 0x2000000329, 0x2000000010012, r1, 0x8000) (async)
fcntl$auto_F_GETOWN(r1, 0x9, 0x4)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000000c0)="086c1f43f36f3001e2f317496fcc05ccbdc33b08901e35ff7c577bcafa7d2f5548cc01fdf4993593e9b4bb0b46419777fee3533ec44deab6520c861bb1c4b497bc34db99896bfbad45a4480d7825d6605cead2eac1eec4372a2b3676a16fbfdd5f9aa3a0d0e44d0eb74d9ad1acbbab07c7e6b8fa32d130a03a7437187eb2cc3cf11086fc8c29dd30796edb49d20a4a86c821e0bfbf85543d617c5f11063ca17e831cd008371bf7f29e019d390d11d3a116b45b4d8544df5e7393d4bc308bba02a471c795e45fd6867b70ce4924432c", 0xcf) (async)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) (async)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sockstat6\x00', 0x141100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000200)=""/92, 0x5c)
ioctl$auto(r2, 0x40085618, r0)

1m1.896697493s ago: executing program 0 (id=1988):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000100)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x16fa30e6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_WOL_SOPASS={0xa, 0x3, "20053b3f55ba"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x0)

1m1.831231491s ago: executing program 0 (id=1990):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x13}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(r1, &(0x7f0000000140)='[/]&].%[[[\\&.#}}\x00', 0x9, 0x7f)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x48900, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/040/001\x00', 0x10b880, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

1m1.726089005s ago: executing program 0 (id=1992):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x3, 0x87)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @inferred=r0, 0x2, @_sigev_thread={0x0, 0x0}})

1m1.57067637s ago: executing program 0 (id=1995):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
read$auto(0x3, 0x0, 0x7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0xf}, 0x3)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/soft_watchdog\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9)
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ftruncate$auto(0x3, 0x700)
socketpair$auto(0x1e, 0x6, 0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0)
read$auto(r3, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, 0x0, 0x100000a3d9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0x17)

1m0.061788508s ago: executing program 0 (id=1997):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040811)
ioctl$auto_FITRIM3(r1, 0xc0185879, &(0x7f00000000c0)={0x100000000, 0x4, 0x3})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x8)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0)
close_range$auto(r0, r0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
pread64$auto(r2, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0xfffffffffffffff7, 0x4)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r4, 0x83, 0x38)
mmap$auto(0x0, 0x5, 0x1000000000001, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

44.557946872s ago: executing program 33 (id=1997):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040811)
ioctl$auto_FITRIM3(r1, 0xc0185879, &(0x7f00000000c0)={0x100000000, 0x4, 0x3})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x8)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0)
close_range$auto(r0, r0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
pread64$auto(r2, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0xfffffffffffffff7, 0x4)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r4, 0x83, 0x38)
mmap$auto(0x0, 0x5, 0x1000000000001, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

7.538213831s ago: executing program 4 (id=2173):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x0, 0x2000000005, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
membarrier$auto(0x2, 0x0, 0x9)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0xb, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9a3961dd034ffb5c76bc65447ea185dbfe6cabf1219a3e0c645b82cf527ce6f03ddd7800e1335cfb6415eda830a5cec06937592a311424dcee051d864191cd604e89af9c384225f0d0faf86a897"}, 0x6, 0x7) (async)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0xb, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce99928fb6f63d6a5d00427e16356cd2bb5ac7332f15102dfa643a2ac8b0a2354713be651e33e04d87dc8db31dee05bda730841ad8c01c925cfb6c19c83be19a876ab65f124cbd4bf03702b919b3334dc9a3961dd034ffb5c76bc65447ea185dbfe6cabf1219a3e0c645b82cf527ce6f03ddd7800e1335cfb6415eda830a5cec06937592a311424dcee051d864191cd604e89af9c384225f0d0faf86a897"}, 0x6, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000)
syz_clone(0x81020400, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xc2c02, 0x0) (async)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xc2c02, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0)

6.988720599s ago: executing program 1 (id=2175):
socket(0x1e, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x3, 0x1)
setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x40000)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
lseek$auto(0xffffffffffffffff, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
io_uring_enter$auto(0x3, 0xa84, 0x2000, 0xa, 0x0, 0x46)
io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0)
socket(0x2, 0x3, 0x0)

6.592111318s ago: executing program 2 (id=2176):
socket(0x11, 0xa, 0x300)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)

6.395110698s ago: executing program 2 (id=2177):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff)
readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
inotify_rm_watch$auto(r1, 0x8001)
migrate_pages$auto(0x0, 0x99, 0x0, 0x0)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0))
ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0))
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0x2062, 0x0)
open_by_handle_at$auto(r5, &(0x7f0000000340)={0xde, 0x3, "e2e04877469438f03e82a86ddbef45fb445d0c170e0a5bfe2bfe47b849064676642fa89504b4847b224d95c2e93e37b57e2b6f90265387478dd3a12bf86233d3dc111a472254524583a0a6e94a3ca002da1d197b1d5e8cbabb2efb44a4a18c5b6265a4d673e2134e03c3ac391bab049f71de1fac37bddb20acfeb36a0d3c10dde3d77f4e97a3d21e7bdbdc686c8e8083d65e7d9b07169fa57431c9eab89835e6b68b3b2112023a2da0bdce27486a642d87df76386d13fabd2dae2d1b27ebe3f759ad25ba118fe7c1daaa2d133eecdb3cf4b368ad89f21d3e1190a19f2074"}, 0x7)
write$auto(r6, &(0x7f0000000200)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0xffd8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r2)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x44)
unshare$auto(0x40000080)

5.82468837s ago: executing program 4 (id=2178):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) (async)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async)
ustat$auto(0x801, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r2)
r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000280)=0x7, 0x2, &(0x7f0000000100)={{0x3ff, 0xfffffffffffffff8}, {0x6, 0x963f}, 0x5, 0xfdba, 0xfffffffffffff934, 0x4, 0x8, 0x7, 0x3, 0x4, 0xffff, 0x7, 0x4, 0xbe1, 0x9, 0x8})
prctl$auto(0x3e, 0x0, r4, 0x1, 0x0)
r5 = getegid()
setregid$auto(r5, r5) (async)
shmctl$auto_IPC_INFO(0x400f, 0x3, &(0x7f0000000380)={{0x10000, 0xee00, r5, 0x8, 0x2, 0x10000009}, 0x9, 0xc7, 0x8, 0x9, @inferred, @inferred=r4, 0x7e, 0x0, &(0x7f0000000280), &(0x7f0000000300)="28e4e546f35a261e4bd78932a8febd24676a5ea538493ec95638da2eb6a6de8314d54db7daa4da930011a946979c337ed896ce240ae8a0d212bbb04df93e8422e05e6c3c9813a6e0"}) (async)
sendmsg$auto_TIPC_NL_KEY_SET(r2, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="e8140000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="b43aed938b9acb2cba5fc3d354f9239a84179ee828f88f31d88b357ffbe9314373f228109347c09b7e8653b3e12e8184600fd7ab0cd20673bc2e8fb7881d685501d8acee598a7936929a960b33b135a76253960fc98c04008c80783db0052c6e960847dff702f8727d13b24924edb1f557a80ab2540c28fd190af6be4220268ae9d3111e28570c0376d640c7b70337c3a9efc54f2e4881250b2431d255667b6804aa0a671fbaa223e6de8b5fd146c5722a02306ca2ed81a384e9cbb92d5552051f368f1d6655dae8a79c9cbbc5d696d2fffbfc4eb73b61b2e60df608e103e7c14300ed8739e1b0723332cffd699b9f8028af68d1f1212fc2a1345427b71b17c2a15b77486594d8b26b029d45cc54ebb1f1069fa471c8b7a80053e28496a71aa5e5445cce8874586571c49f11d7ccd3831f628a65583457721f140c5e622c9a06930b7f67e3ca9168c960406bed5dd338bcf6c66393d95ce412efd330d014142e77291e739ff22046fb30b451165091df1ff64ccab202c1d94a88cb15915778f3264dee2dae4ad3282d729ef5eac014d6f0987d1b777fbea743ccef13d332dc4bddefdf4ab7fa760e98121e5a3385989e2533849404f65e1782cbcd285b5b262ccc31245449908b0f45aa8fd11f1dfbcd86ac23adef29306bcacfce09197320298993b48eb15ee4824f150378bd2f2a6a08b28d98728979850666ddd24bc05687678a858a062029163f73678c989b8f108e9c455a6d5ac6a5fccc44a29932bd40d723663710124e9c4299370a8e11a08c9364298850c5acef3916e3edb418e3f1c94d24a9e0875ffcb593b72bda5c48466dfb6e655c9484c0033f4257f7d2410e644bbbd2eb16040091801400e600ff0100000000000000000000000000010c10d8807d556c0d6aa1aa39d1e1e38ee1593d2dae2ea24bfdc58ba8670e879e042fd9b0b8761b888bc2d4762f83f8d55a7b763c0686abfe17ec5e3659e4622c197819d59b406217798b7b8c28c460a9fc2e20d5ed7a1b79abbf97b042c4d0d56b15f2b5c2aab2ebece0a4f9c0a88f3874a109fe3d92aebdb3ce6cef34ac03b2b7856fdd4e6e8534da9a53e97fc8783f65716c9ea7ab4c97f13cab83d17cef9d2169a1640e2295a5c8b895f1e971947951b40461ce273a1a312c8549362175ea50c1a31a172470ae0b7800d85d8acbd9d0351d0662915b76277688aba6990fc46a3ca9432dc2b4f249a1fc7b4b09abc816888194fcc4d0e2e36af16ae0a7557a416cf0df02b3db1c8fe12d11505738ec6df516ce4c2ebfecf205c4de6672963ed17309b6512565142d8f8a22f094d4678446d0e11d27a2c60aca7ec8dd71f57cdb4e2fd93b0795baaedae002c0abd75e11f835560af3877310d860c9b5d34bef60a39a28987171af89eeb291221a6afa9a56d97c95ff756022bbf73f4b49cb3c3f8a9565073f0d83ae95bd4a84da8023f013e8097616319bc36d38641c17ef26c7e859cbb7c9f5ebbe64ecc5121b20daca71867e17915b1fd5c82b8029d4082e7594c6e2639fcf58dbb8ff45f53d869bfad50f5ebde4506446548c59738b50282067506656695230bbe65e7f1e173b6ed7422c8b08075dca9828fa87b509978ebddc140b1088d5c20b9d0f6fa8a3cbe5821b624aaf2fda297a4ec480cfeea81de70a62a6d1b8923a5481c5b0def71a79258a9fe06284650fe89b8a23c69500a8f8337619894684caa5f952c2c379f89cb6b46656688e0706036d4de4df3c90891e9911b2ac7701f215bb1132aa98622c489dd149563abd6e7415961aa0a9b86f29730792f3b1870022f73227c3431f25b8b5c69cecb33e25700ccb162ee607999b0ae88349d92daa263ff960297cc0eb55e8be4746d242a1ab55142f8ae2f08cf0bd274928ca7d470079c1eb29b90c7dcf7e930374125c832647a733f2f9ef3e216ab35ecd42192aff9a3e0c21ebcbb59a8c05f812a300436c666a2ffb0eb45cd779a63aad9dac26822d1ae4f94a83e942c23de2334aa206ef91e745911e8d1ba626357a6e20dde5a27a27220b9ac778520410c5382c2fbab1dd2c6b49eebb84b6cecdcda31677aeb1e416d52d715e173079c773dd592967349663336a19f43908a794680943aa96e8317f9e3c1728fd7e35675de06b64f3f8d99978a541d733a05153226fbc4febfeff3886ae74103db5fa5524b9967892caa1bf0f98b8c0fa74e78f01a4816dedff510f8bc205451891d161f376d14c3e828708af33746b218ff01056b9b882cc8f5ee63649f5dc8be2c939bc489e2aa002f8b90d35f4f64c0765e49b4382950a18e4922c0e721ce05109732a74fededc9838ff5a241112939ef458bcc2088ebea7592c7c4a1ce87fce5ef7becb08bc82eeaeae44b80278f87d09a4a18103a27ebeefd6dc8217ba88f1b685f35ebf84243a2fd49aae5bc3e7dfa36a672e8a5ceaa00f5c4b82845c93c6e25ad6d401e010d7ab6cccdfc5ff1cf34485d8fbb21c340443060cd635fe77556bf14397e36d24e4adb14e8ce5350f07e0dc391573a6b975bd8a786fbfbbfcbe3f32b6a7d4cc37868822fe1caf1d08712c13df6b3e601d8b1d648389905477aedb3df790ab88715a4c35eec7528f63b2a2830d6b77c461f994bab34896a1b4bf603a67907626f7e1257887e0026406fee95c2d6ed09e4d97341f7c51541aae02cd02d04e82a70617e3fbc113150cb8ea3a8cbd03a2a8051b929828d7e5fd687b5c3b9f8f04a93a14bc88b65f3ba8d93cf5a72088494fbcfcb09ad7fdc57f4877110c19b3de86c9c66623c8d57256dbf2a514523677ea84be783bf58679115e74e59c7d0a2fcec9510b3f585937e1340d6c1c07738127633ef18f661662ae42de3127b8229db90bc6ec88972b6451a59d8be55f6375c90f9f0bcfbde8535d871418a61465452d5796a228d4662b4371cb8c0dd5cc1f837d1c9d5d50707ac64e82399ff13894a594b4ef50ce9c7dca5d1e4243463a3a4270a2d9eb7206f0500d991a006478d06bbd3b930c5ff41fca42051382a924df6124f619ab27fbf13f1a01540e15c3e66269ee5744b734114e8f9591cfa652bb6fa757276fbdc7582e9e894c2e038f50e02b8d2341cc9d43068c598cb2f45712d03898fbf3d2ab3cc68ba276b2efbeb2e952b4b5becfccf41186ae5cac509c49e99fad5892313bf252a7e466cf8950145382bcbed36007980cb052cda25e8599ee76227d878a7442b6b093042be81030031612ec3547688f5b2c4b83d2a9bbc51c77fa9cc80bafe5ed435c227e431fe899033e73a67e19ac3b3d2b7f7fd49ec230ce67f3edab59c3be09542562e1d6ad2f5a28886a3c156f97b99307119ba454c9aad8bafc27049bf41fc81086db2aa85f261d542877573b0058ee755316d71e89e17ac50c7b1eb01c888238c92a7ef017e8ad1917c8d619fab146143479532304ed8652dacd488989fd6ad3895f51da2dcaf48d16371056bce0400d59997b54b2dac047d689623ef7c5ec93f4436a7e09b25e1182d3d40f43c574fea320c05d008087d4310f24e7a21354b02dfad243500183a81aa54647ab3de27124d32cf91a6f1455e6ab450401880c8d6d31632fd30232aa33e7c51d1bf2a53a25b33160edffc7acc4330de7d8d23d579d8687428ee2de1d659e7d05c0e0e87175b4bb096d587c79692cf72a0aaf23c7fc89046d8b81d9a64b47e23bf8cb76702dd562fe116d4cb7ee809fc4b276eababf33395d608f966151278b564192aaad70ea51f3b7ff32ed1110cbb5c314709489b95b05762083a39973a76122e7148f0d9649016e33850a6988439c677ceae6066d0ef9b8b8ddd721774b12e7a740ae19c49a934bcfa4dfff1c27606455fb4171d16ae711ed6ecca6cba92d81fcd86f3c1823cca3ffcb0a387ec51429441a8214660722c6eed8cb8b6620737638a523577fb642eba728f266e2fe75e535891075b3240d24a792552283ee4b915a14bf81c54334676cfe257cde248ba8be68572ae4661ab2a2b4857c90271e6d862feaa839d071e13c3a704fa191d0ada546b8fac6c90e8b2a1650da70c504da5c7dc5268223f2e3adfe6130c08a98eb8bd0a1583d066614235a82ff5710faf0fdf9bd647bf955d45b2c5f6c000c78999db528f18fd3eaf6f572d96b2bbd06f3ee93ef68287b8bd3dd14714ef237656b760c7670e443795c96bcef467ff7da55fa84fb82aac1d7a39073d9fe26124031afb8c789446cfaba6924cc57575827b852ca4f5749f0f3c88bb37a48c47cc5b50334a29aba093ab45019e3d20e97bfc570594efc67890b104d40b299d3efaa70e00b2e83a95ae40ddf353e297738ba562642e2aaf008d7e7e4ee69df85c2e5117ded0802ec434de6c57d81f951ee67501dbc0b77ea41669b3a76e694a177ca32c2375ce47b7d207264e5551696e93c0d8f166a8c26bfe37e9f7ffdfb1f75c68ce7e9eaf78ab1f6f516583249f6dea68b90c5f655899df365dbd01eb50c3ee9cd2e559644ecbd8837b37891feea06cd58820f2addac984043736fdc056356c7b616b68f796c95070dad8460b9302d2f31e2e7394cd2e254e7a84eab70e643aa5040b5442ebb0722663af1c5008a7c54d2dc5d28b1da3723f9ed5636dd220c1b3c29e65409b34e67144c2e4deeef269eacca924238e4bc776e3a5b826b15aaff3caf575fbb0a6042c4ee24622ae4e6d751b18f25f21d3da6b4b1bf355b51d89c105168b4b415d719c556b1943589b243e2eaed2a2125b8e74db2d0b5ffbe6518ac6ba0d1727e0d08547305024cb514ee03d7e58fdc9bbe68c89a564c37140bce7297a08b1eb133e48a11f5a280e96b0621a1a66baf3bbf1862f33cd4116d818764f3e7f0dabba450951a604cafdd2bac70fc18fdd0145d9fc47223c83390bab3739f3b09f0a6bb236b5ac3494ccb67312333dbdd119c5f79b50c0eb52043c918ba02833f775238f778412a4e0281e034a74afe19bf2811dc7d939a5ec60d0216f287054eb784c52e196cc7c2619a28ff0acf184e7c853e224428bd7d3f25559115b94103277c5e190e2a2aa20263ef00f9c0aad9097de204d237c723883d251886097819695f17f80fd87e168cb47990eedba1bffea5089fa578d1fa59b14e6747178c87e52a606d386695a2c3977e2a8905b99d38fb8a1d5695269ed63c5f85ce0f066838377fcb47fed980c370cf61f5b4794b7c27881bc9787ad52743cf7c840ea9a957f388a5dedf74352500d4d2a521ff5fda1c213f8a0b01f4ee26a85d6ea859fd784d35cf03aac7395e1ccdc742890ac830af8939c3eb57be69c291f4180d1ed267c293548f0d3e57abffe954a980f8d9c915469ed24860e05a416aad62fce142057db0488ff6249848ccdb5b9801b1e2fb4fc509a18948cc25b761df16c15f92bb128c4cd0c98877ae6d548773fcf38ed60ad045c25cd59b88460d4041af04d995119f493fc4fdc8ad0491f7f4e4312af4a18211e6660e5b3899d0b5bad52faa724c0c1debd4c5bfea7f50fb32da5ac46ca1a2cea893e901b86e97bbdae16574a7993e4f0b7af75083bc13b1365e34f88675dd337d063335d19b0ce0b35d682e6054404e717b0db05ed987b2667138cbce10dbd558ae9574f48b18803d45f271dee72476b3900e4eaa0215ab355437359836b6fe695af6ff4e6aeb3f5ee315297a6494144ab98dd8a8d4c8b395bf79cd0d26dbf648cbe250c52d864e489070d3946d66dbb933950fbd86eddbaa7bfab157621c75bbb2be5728027f4efbd40aa289b673306364d395988de88512f19f702f1b8c4158de7ea9bb77860f89f73b6ae00f014887ecaad81d687ab48a40c8c401a6ed1ddcd922c3d6b01a837ff933e9afb9cf9c7dad296ff66199da84d324ac2fb16f5145a95205e43f1165b473dd8141cabbb0f8d335eb64a86e917b84bb6ff2899e1087d39e7f8da8d49abbaf779d589e6ded0cfb1dc0e94b2cfbbb541d66d369f3e6c643756662ad41cec9f3f91ef52f7e133bee51580c73b6a286f7e32a6d69057a0cd92fe48a0988e4ba3bbd6f6d1802fefc43daba6f1dcce0f3d82e9250037f5d8cc58fb41b78504cc13f68d1c196ccbad5bd0108509aff2c6f47ef4befb6adf0e7ba28833666e35c83037872ff8c32201f82ec1d74f5cac2d8059c3b5212f0371bba233c572a82019331c40633c26f1b4e973629a8a5cb2f9082d0058027aed491e7cd05198816ddb16b83ce42b1ef7d1300726a8fb10cb38431dc2e3874c27125c67a4f265840af9ce365dfbfbbfd3f1ace20007339c78462a801b38c110f7d0cce6ebe3172e8b040805d508091d2ddd5849b4b841fa0c97fedd96b3fdaaf53541a57555ab900e6d0ebff90b3e086dfbb8c025fe6b2a873a824b865c097fd27a725ef09c6a32e9083eb6b8ac4abb810f50329b3a19ebbbe42ef3443e54a4c7f042f78ac567cfd803e5c078fe69051f1d99a76ee8ea22ab7befa0b37e19c6b25696a32f693691a3d7161b9ce32142c6081f508d2854b1118b0ba3911a9b58b9b7a16823a885f3429a5ee2e179fe6263bf0a993cc1020dd18c00cffd22d0fb8b8e731e7fc562ff313c001566573e602670726f68b8b0763c058ab1dda315e26aa30d2589a6d0f0007878fd365e5aba526d5f85b12dc0fde52a13b5495fb4bfd561e9977dc77f949517c9e12e2c38d5a966ab7a78c26ac2772f009455ff66e08005000", @ANYRES32=r1, @ANYBLOB="00000c000e0035000000000000000400ab009b4022caa081e429a31a7a370d3b7f50216af501580ac2fb201be6ac0e33c259c18a01ea07bf09f8290d506f0722aab4f005001d000000000008008400", @ANYRES32=r0, @ANYBLOB="00e80009809a22332ca0b55b4292af7823763772e192c496472cc5dfe642a0086c6e2caa813fbcf36641718405f4b362ff000e0fafc3f3a48a52f3fbe5debd3c35574710f95fd54d28ab868eb7a66c08c28477930f43f2f972d8a629c5ebc38adf3ccaae36cf179b528922ad0615f45c09027bd4f0e1efde94a6d3203e5b629a98c8c2168e939d10329726ae8783e85f19214a9e2672b01a8f49a4ea2d4f1cdcb38338892fff72eb38ea9699fc4212de01d0a81dc186d3bfab0665250f844ebba3cc2cf4984914589a2dc55d47971b494f06c0d544bfe7f67370a15f13d7efe2c4d99b16a5de588b3a"], 0x14e8}, 0x1, 0x0, 0x0, 0x4048004}, 0x1) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r6 = bpf$auto(0x5, 0x0, 0x102) (async, rerun: 32)
getpid() (rerun: 32)
r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async)
r8 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0)
fcntl$auto_F_DUPFD(r6, 0x0, r8)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r9, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) (async)
read$auto(r7, 0x0, 0xb4d3) (async)
write$auto(0x3, 0x0, 0xffd8)

5.285127417s ago: executing program 2 (id=2179):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000)
r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0)
write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r1, 0x11, 0xfffffc00, 0x0, 0x1)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1)
r3 = waitid$auto(0x9, 0xffffffffffffffff, &(0x7f0000000140)={@siginfo_0_0={0x101, 0x1, 0x200, @_sigfault={&(0x7f0000000080)="8e174e1fd32efc3ce4843b9123555003c958d3a459d2c15c493288c9a50c026237ebeee01f428b83f92c83567a311ad010f843e3d21f36a8092a132d528dd49e4f7e09aa35f4c7bd1c6f5d464201e068055e126e96ebc73229d03dbf69a4bbd7b4487dfcdcbf520fde3520b61f56e2acac1fd19c044b6ce7f5393d889a68203f0eb7c3a4a2c7dc8af44393c4ca237311782cda9cd30a5c5259316274d7adeee5c53fb20fd97f8a5f8002debc1ad6a65cb80c7600e2b3a449e895db8900e711df", @_addr_pkey={"c90a8bad9be23f55", 0x4ad}}}}, 0x3, &(0x7f00000001c0)={{0x5, 0x8}, {0x0, 0xfffffffffffffffa}, 0x7, 0x0, 0x0, 0x5, 0xcbb, 0x3, 0x8d30, 0x8, 0x40009, 0xfffffffffffffff5, 0x4, 0xa, 0xffff, 0x3})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'tunl0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_REMOVE_LINK(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3c, 0x2, "4d85647f44914a60453ec28aa7be709817f7e7e9a3f1e54f2ac7e826283276b2e9a15900664164d1e71ca5f35fdd19a6a2ef07613056ae3a"}, @NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "348f5b7bb0126d16d32a8b64274f08d4d8467e2510e96033b636bf0d09acc2d3f32518e22e5bdc462a7df279dbbf"}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xaf07}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}]}, 0xb4}, 0x1, 0x0, 0x0, 0x894}, 0x20040845)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000640)="ed56488a445a69bbb760a4eb60be707edc28", 0x12)
r7 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x7dc3, 0x3, 0x0, 0xfffffffffffffffc, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x40)
write$auto(r6, &(0x7f00000007c0)='\xd8\x00', 0x8)
timer_create$auto(0xfffffff9, &(0x7f0000000b80)={@sival_int=0x86e, @inferred=r6, 0x100}, &(0x7f0000000bc0)=0x7d9)
ioctl$auto(r5, 0xfffff800, r6)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000d80), r5)
r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000f00), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'veth0_virt_wifi\x00', <r9=>0x0})
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r7, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r8, 0x4, 0x70bd28, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x24, 0x3, 0x0, 0x1, [@nested={0x14, 0x141, 0x0, 0x1, [@typed={0xc, 0x33, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0xa0}]}, @nested={0xc, 0x59, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r5}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r10=>0x0})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x9c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x200488c0)
sendmsg$auto_NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20004000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r11 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r11, 0xd00064c0, 0xc36)
socket(0x21, 0x1, 0x0)

4.334320323s ago: executing program 2 (id=2180):
sendmsg$auto_NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
close_range$auto(0x2, 0x8000, 0x0) (async)
socket(0x1e, 0x805, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8000000eb1, 0x401, 0x8000)
socket(0xa, 0x2, 0x88) (async)
sendmmsg$auto(0x3, 0x0, 0x4, 0x9)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x81085520, 0x1) (async)
sysfs$auto(0x2, 0x5, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
fsopen$auto(0x0, 0x1) (async)
socket(0xa, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x25, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) (async)
r2 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0)

4.309962822s ago: executing program 1 (id=2181):
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x321202, 0x0)
madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000ac0)={0x0, 0x3f, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000edd1e8156a6b56ce209c7dadc8b211b4ad2506a330fe4718760965b8486ad3f104ba01429f124e15923210c215b6334d640180059cb79e301e01727c0069f89a03c417304be4c8d82286126eb4a205c04c16b514bc291921245c75cfdeaf64ba075a5c3a1a7ccf9018a28b323da538827d1323e283dc3c4e323d27499a5", @ANYRES16=r2, @ANYBLOB="1b0f2abd7000ffdbdf250100000008000200ad000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x8040)
get_robust_list$auto(0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffe01)
mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(r1, r0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x89, 0x0, 0x14)
sendmmsg$auto(0x3, 0x0, 0x2, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c07, 0x0)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r5)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)
mmap$auto(0x0, 0x8, 0xb, 0x9b72, 0x2, 0x8000000000000001)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000300)=""/236, 0xec)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)

4.056675506s ago: executing program 2 (id=2182):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
move_pages$auto(0x0, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a3", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff)
sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000400000000ab883cc6caf6b4bdf21f0ef61ca9d92d674a8a130d68fb226ffcda14252657a80b86bbacc62854bccf52f5bdb096661fdd7203240528619de7546f3360b73975996b", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x84)
sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x41001)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000001c0)=<r3=>r2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000)
r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x14, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c2"}, 0x7d)
setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000)
mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x68, 0x0, 0x24000000}, 0x140)
sendmsg$auto_NL80211_CMD_GET_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe80, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001280)=""/4124, 0x101c)
read$auto(r5, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)

3.785519351s ago: executing program 1 (id=2183):
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0)
poll$auto(&(0x7f0000000000)={r1, 0xe, 0x4}, 0x4, 0xffffff80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @binary="1d906b2807a58f65"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x40)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0)

3.413916313s ago: executing program 4 (id=2184):
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x6, 0x0)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x10000, 0x2003f0, 0x12)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x122, 0x400, 0x6}]})

3.029290935s ago: executing program 2 (id=2186):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
r0 = socket(0x15, 0x5, 0x0)
ioctl$auto(0x3, 0x80811501, 0xfffffffffffff4e0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, r0, 0x8000)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4, 0x1, 0x9, 0x8000000000000000})
socket(0x1b, 0x3, 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7004feb1df25010000000c000300060000000000000044544c277b851a207336181df9183f916cbcb6e4c5cb7c2faef597a8bdd6403ef8210a1f24a5a75ff6ffb52520c0d3f8079c9fe678120833e7bd456e397c7bd302c4da2174bd9c26050d25b5016f05e2ec1405f9ad6b69fb04792e3c924661244aab28a2866e9903152639ac2102fa46e3362d5a76d849b29ff10c76412461fd2a5ea272f4c222c5942a1bcf684829854047f7b59a9b032b7030a009e749603060b9095fdf3fcd21fed0f2e971bdcbb2faea81d7a9ead382ed1666a59bf55cbb6537c7f1abdcc9472e915686f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
socket(0x5, 0xa, 0x2000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0)
ioctl$auto(0x3, 0x5420, 0x38)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)

2.723146489s ago: executing program 1 (id=2188):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x0, 0xffffffffffffffff, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffeffe, 0x6)
io_uring_setup$auto(0x59, 0x0)
r0 = open(0x0, 0x64842, 0x0)
io_uring_setup$auto(0x6, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x3, r1)

2.35672738s ago: executing program 5 (id=2189):
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0)
r0 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/auxv\x00', 0x1c5580, 0x0)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xe4}, 0x3)
syslog$auto(0xffffffff, &(0x7f0000000180)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda)
write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100)

2.238816529s ago: executing program 4 (id=2190):
mmap$auto(0x0, 0x9, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x1fc183befaf35569}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2.183437124s ago: executing program 5 (id=2191):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) (async)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) (async)
r1 = socket(0x11, 0x1, 0x9) (async)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f00000002c0)={0x0, 0x0, r1})
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/031/001\x00', 0x7a001, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
r5 = socket(0x2, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="6d4e1120", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf", @ANYRES32=r6, @ANYBLOB="050001000000000008000200", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20040901) (async)
getsockopt$auto_SO_LOCK_FILTER(r5, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8) (async)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) (async)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
inotify_init1$auto(0x3000000000000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0) (async)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async)
openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x280, 0x0) (async)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8042, 0x0)

2.007776763s ago: executing program 4 (id=2192):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffc)
r0 = socket(0x10, 0x2, 0xc)
socket(0x2, 0x3, 0x1)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/numa_zonelist_order\x00', 0x202, 0x0)
io_uring_setup$auto(0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
open(0x0, 0x261c2, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_5={@target_fd=r1, r3, 0x4, 0x401, r2, @relative_fd=<r4=>r3, 0xe600}, 0xf)
io_uring_setup$auto(0x40000002c55, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@link_update={r4, @new_map_fd=r0, 0x0, @old_map_fd}, 0xc)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

1.920526909s ago: executing program 5 (id=2193):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0)
socket(0x1a, 0x4, 0x6)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
cachestat$auto(r1, &(0x7f0000000080)={0x35a, 0x6}, &(0x7f00000000c0)={0xa, 0x4, 0xffff, 0x4, 0xc81}, 0x7f)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xc2d)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
mmap$auto(0x0, 0x2060009, 0x3, 0x40000000000eb2, r0, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x81a, r3, 0x8000)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x40804)
pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2)
close_range$auto(0x2, 0xa, 0x0)

1.799603409s ago: executing program 1 (id=2194):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0)
preadv2$auto(r1, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
read$auto(r2, &(0x7f0000000300)='\xef\x03\xe8-U\xa3\xaa\xb6\x1d\x02\x80\x00\xf7\xff\x1f\xe8H\xdd\x0f\xbeJkw\xca`\x06\xadz\xabVr\xeb4\xed\xcb&\x04i\xeb\n', 0x3)
ioctl$auto(0xffffffffffffffff, 0x8912, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
ustat$auto(0x801, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x3, 0x2000c, 0x1df, 0x20eb1, 0xff1, 0x8000)
io_uring_setup$auto(0x9, 0x0)
bpf$auto(0x5, 0x0, 0x102)
getpid()
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x0, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r6, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff)
read$auto(r5, 0x0, 0xb4d3)
write$auto(r3, 0x0, 0x10000000004a56)
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0)
r8 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_tracers\x00', 0xa880, 0x0)
pread64$auto(r8, &(0x7f0000000280)='/dev/raw-gadget\x00', 0x6, 0x7)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r7, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRESHEX=r7, @ANYRES32=r7], 0x1318}, 0x1, 0x0, 0x0, 0x8800}, 0x20044046)

1.012684371s ago: executing program 4 (id=2195):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00042bbd7000fcdbdf0025000000050021000600000005002b000100000008002f000200000005002200010000000500190002000000050027000800000005001a0004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x41) (async, rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x600, 0x0) (async, rerun: 64)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000002100), 0x40444, 0x0)
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
socket(0xf, 0x3, 0x2)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r3, r3, 0x0) (async)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0)
ioctl$auto(r4, 0xc0585611, r4) (async)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, <r5=>r2, 0x9, "9a7b9f1808c711c1f51962a9bcc018cf"}) (async)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), 0xffffffffffffffff) (async)
r7 = socket(0x15, 0x5, 0x0)
r8 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r8, 0x0, 0x4) (async)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0)
write$auto(r9, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 32)
setsockopt$auto(r7, 0x800, 0x2, 0xffffffffffffffff, 0x20) (rerun: 32)
sendmsg$auto_BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ROUTER={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4044c10) (async)
ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/235, 0xeb) (async)
r10 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r10, 0x1000)

746.987651ms ago: executing program 5 (id=2196):
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) (async, rerun: 32)
mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async)
unshare$auto(0x40000080) (async)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64)
msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async, rerun: 64)
r1 = getegid()
msgctl$auto(0x8, 0x8, &(0x7f0000000180)={{0x8, <r2=>0xffffffffffffffff, r1, 0x7ff, 0x2, 0x4c4, 0x2}, 0x0, &(0x7f0000000140)=0x2, 0x8, 0x8000, 0x96e, 0x5, 0x8, 0x7, 0x6c, 0x3, @raw=0x9, @raw=0x7})
shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000380)={{0x0, r2, r1, 0x8, 0xc0000000, 0x81, 0xc}, 0x80000000, 0x4, 0x3, 0x7, @inferred, @raw=0x4, 0xfd8c, 0x0, &(0x7f00000002c0), 0x0}) (async)
r3 = timerfd_create$auto_CLOCK_TAI(0xb, 0x6)
ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x0, 0x33}) (async, rerun: 64)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0)
ioctl$auto(r4, 0x540a, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
madvise$auto(0x0, 0x2003f0, 0x15) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (rerun: 64)
read$auto(r5, 0x0, 0xb4d3) (async)
write$auto(0x3, 0x0, 0xffd8)

321.646707ms ago: executing program 1 (id=2197):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x9)
r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r2 = socket(0xa, 0x2, 0x3a)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="188a0031", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250300000004000600"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4024800)
read$auto(r0, 0x0, 0x2000000000007)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000200)="aee0b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f0394296878a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b8b6f471c8587d3c2288847", 0x3}, 0x7)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/65, 0x41)
mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)
mmap$auto(0x0, 0x20005, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
io_uring_setup$auto(0x52, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x100000001)

208.617458ms ago: executing program 5 (id=2198):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
r1 = socket(0x22, 0x1, 0x100)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f00000002c0)={0x0, 0x0, r1}) (async)
r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f00000002c0)={0x0, 0x0, <r4=>r1})
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0xffff, 0x3, 0x8, 0x3, 0x3, 0x62, 0x400000080000801, 0x7, 0x1, 0x9, 0x1, 0x7]}, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', <r7=>0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6d4e11201d25d3041fc12ec4a494298eaf3f005988c0a903339d849d5cf6e3a181591a04d5ebadaa883417b8a3acd5118a4dae1dfe8596576c203943b70396af77d41297bc80f495d911c383fd25b83143b157a16a58699a8ddd5b84a2ecd10e7d0df4050f2a3c2d04627faef2380faf4fdafed13d7348ec1e0f43725337d79c68cb7209b68121f246bb435d3e914d0ed18d826decf8e5fc9f39903142450e65c4f0f040f64197", @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf", @ANYRES32=r7, @ANYBLOB="050001000000000008000200", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20040901)
getsockopt$auto_SO_LOCK_FILTER(r6, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff)
mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) (async)
mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x1, 0x1000, 0x5df2, 0xfffffffffffffffa, r4, 0x6)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async)
r8 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$auto_UBI_IOCATT(r8, 0x40186f40, 0x0) (async)
ioctl$auto_UBI_IOCATT(r8, 0x40186f40, 0x0)
r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r9, 0x4b41, 0x7)

0s ago: executing program 5 (id=2199):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40040c0)
clone3$auto(&(0x7f0000000140)={0x2000000000800001, 0x4, 0x48a000000, 0x6, 0x7942, 0x6, 0x80, 0x5, 0xa, 0x7ffd, 0xc88}, 0xfffffffffffffffb)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3)
sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
read$auto(r0, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
write$auto(0x3, 0x0, 0xfffffdef)
open(0x0, 0x22240, 0x55)
socket(0x1d, 0x2, 0x7)
mmap$auto(0x0, 0x400404, 0xe3, 0x9b72, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x2, 0x5, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x2, 0x0)
pread64$auto(r2, 0x0, 0xffff, 0x400b2)
sendmmsg$auto(r1, 0x0, 0x4, 0x311)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mlock$auto(0x2a, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x8)

kernel console output (not intermixed with test programs):

xcd/0x4c0
[  306.186099][T13425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.186113][T13425] RIP: 0033:0x7f15cf18eec9
[  306.186125][T13425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.186139][T13425] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  306.186153][T13425] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  306.186163][T13425] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  306.186171][T13425] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  306.186180][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.186189][T13425] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  306.186208][T13425]  </TASK>
[  306.856614][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  307.022956][ T8143] Bluetooth: hci2: command 0x0c1a tx timeout
[  307.023045][ T8143] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1
[  307.175342][T13433] tty tty58: ldisc open failed (-12), clearing slot 57
[  307.768197][T13479] FAULT_INJECTION: forcing a failure.
[  307.768197][T13479] name failslab, interval 1, probability 0, space 0, times 0
[  307.852677][T13479] CPU: 1 UID: 0 PID: 13479 Comm: syz.0.882 Not tainted syzkaller #0 PREEMPT(full) 
[  307.852704][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  307.852714][T13479] Call Trace:
[  307.852719][T13479]  <TASK>
[  307.852726][T13479]  dump_stack_lvl+0x16c/0x1f0
[  307.852753][T13479]  should_fail_ex+0x512/0x640
[  307.852774][T13479]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  307.852794][T13479]  should_failslab+0xc2/0x120
[  307.852818][T13479]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  307.852836][T13479]  ? acpi_ut_create_thread_state+0x63/0x170
[  307.852860][T13479]  acpi_ut_create_thread_state+0x63/0x170
[  307.852878][T13479]  acpi_ps_parse_aml+0x79/0xcb0
[  307.852901][T13479]  acpi_ps_execute_method+0x55a/0xb30
[  307.852923][T13479]  ? acpi_ut_acquire_mutex+0x125/0x1d0
[  307.852939][T13479]  acpi_ns_evaluate+0x76c/0xca0
[  307.852962][T13479]  ? kasan_save_track+0x14/0x30
[  307.852980][T13479]  acpi_evaluate_object+0x1fa/0xa90
[  307.853000][T13479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.853016][T13479]  ? __pfx_acpi_evaluate_object+0x10/0x10
[  307.853034][T13479]  ? __mutex_trylock_common+0xe9/0x250
[  307.853057][T13479]  acpi_evaluate_integer+0xdd/0x200
[  307.853074][T13479]  ? __pfx_acpi_evaluate_integer+0x10/0x10
[  307.853099][T13479]  ? __pfx_status_show+0x10/0x10
[  307.853117][T13479]  status_show+0xa0/0x120
[  307.853135][T13479]  ? __pfx_status_show+0x10/0x10
[  307.853158][T13479]  dev_attr_show+0x53/0xe0
[  307.853174][T13479]  ? __pfx_dev_attr_show+0x10/0x10
[  307.853187][T13479]  sysfs_kf_seq_show+0x216/0x3e0
[  307.853207][T13479]  seq_read_iter+0x509/0x12c0
[  307.853231][T13479]  kernfs_fop_read_iter+0x46c/0x610
[  307.853245][T13479]  ? rw_verify_area+0xcf/0x6c0
[  307.853262][T13479]  vfs_read+0x8bc/0xcf0
[  307.853283][T13479]  ? __pfx___mutex_lock+0x10/0x10
[  307.853305][T13479]  ? __pfx_vfs_read+0x10/0x10
[  307.853334][T13479]  ksys_read+0x12a/0x250
[  307.853349][T13479]  ? __pfx_ksys_read+0x10/0x10
[  307.853372][T13479]  do_syscall_64+0xcd/0x4c0
[  307.853386][T13479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.853400][T13479] RIP: 0033:0x7f2d62d8eec9
[  307.853413][T13479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.853426][T13479] RSP: 002b:00007f2d63b8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  307.853441][T13479] RAX: ffffffffffffffda RBX: 00007f2d62fe5fa0 RCX: 00007f2d62d8eec9
[  307.853451][T13479] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006
[  307.853460][T13479] RBP: 00007f2d62e11f91 R08: 0000000000000000 R09: 0000000000000000
[  307.853469][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.853477][T13479] R13: 00007f2d62fe6038 R14: 00007f2d62fe5fa0 R15: 00007fff27c4a588
[  307.853497][T13479]  </TASK>
[  308.437816][T13481] Process accounting resumed

syzkaller
syzkaller login: [  309.413404][T13509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  309.571935][   T30] audit: type=1400 audit(4294969432.335:11): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13490 comm="syz.2.884"
[  309.626330][T13518] netlink: zone id is out of range
[  309.644407][T13479] ACPI Error: ffff88802607b000 walk still has a scope list (20250404/dswstate-694)
[  310.108684][T13533] block nbd8: shutting down sockets
[  310.231350][T13544] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  310.641078][T13504] tty tty49: ldisc open failed (-12), clearing slot 48
[  312.210718][T13666] zswap: compressor  not available
[  312.809034][T13707] netlink: 342 bytes leftover after parsing attributes in process `syz.4.904'.
[  312.850531][T13707] netlink: 254 bytes leftover after parsing attributes in process `syz.4.904'.
[  313.443277][ T8397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  313.451413][ T8397] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  313.637763][T13758] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  314.102080][T13797] netlink: 186 bytes leftover after parsing attributes in process `syz.1.911'.
[  314.146005][T13793] netlink: 186 bytes leftover after parsing attributes in process `syz.1.911'.
[  314.867978][T13827] : Can't lookup blockdev
[  314.939645][T13835] capability: warning: `syz.4.917' uses deprecated v2 capabilities in a way that may be insecure
[  315.033484][   T30] audit: type=1800 audit(4294969437.812:12): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.916" name="features" dev="configfs" ino=32276 res=0 errno=0
[  315.516840][T13852] zswap: compressor  not available
[  315.938279][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  315.944574][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  318.644009][ T8397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  318.651582][ T8397] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  318.718325][T13965] ima: policy update failed
[  318.771132][   T30] audit: type=1802 audit(4294969441.560:13): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.930" res=0 errno=0
[  319.997309][T14139] zswap: compressor  not available
[  322.556569][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'.
[  324.754509][T14401] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  325.453692][ T8143] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  326.184690][T14504] blktrace: Concurrent blktraces are not allowed on loop2
[  327.304606][T14533] netlink: 342 bytes leftover after parsing attributes in process `syz.4.970'.
[  327.363946][T14533] netlink: 342 bytes leftover after parsing attributes in process `syz.4.970'.
[  327.897125][T14563] random: crng reseeded on system resumption
[  328.028916][T14552] FAULT_INJECTION: forcing a failure.
[  328.028916][T14552] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  328.218261][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.2.972 Not tainted syzkaller #0 PREEMPT(full) 
[  328.218284][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  328.218293][T14552] Call Trace:
[  328.218298][T14552]  <TASK>
[  328.218304][T14552]  dump_stack_lvl+0x16c/0x1f0
[  328.218331][T14552]  should_fail_ex+0x512/0x640
[  328.218356][T14552]  _copy_from_user+0x2e/0xd0
[  328.218372][T14552]  vmci_host_unlocked_ioctl+0xbdb/0x2040
[  328.218395][T14552]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  328.218416][T14552]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  328.218438][T14552]  ? do_vfs_ioctl+0x128/0x14f0
[  328.218460][T14552]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  328.218487][T14552]  ? find_held_lock+0x2b/0x80
[  328.218501][T14552]  ? hook_file_ioctl_common+0x145/0x410
[  328.218523][T14552]  ? __fget_files+0x20e/0x3c0
[  328.218541][T14552]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  328.218563][T14552]  __x64_sys_ioctl+0x18e/0x210
[  328.218585][T14552]  do_syscall_64+0xcd/0x4c0
[  328.218599][T14552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.218613][T14552] RIP: 0033:0x7f241ef8eec9
[  328.218625][T14552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.218639][T14552] RSP: 002b:00007f241fe7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  328.218653][T14552] RAX: ffffffffffffffda RBX: 00007f241f1e6180 RCX: 00007f241ef8eec9
[  328.218663][T14552] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 000000000000000a
[  328.218671][T14552] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  328.218680][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.218688][T14552] R13: 00007f241f1e6218 R14: 00007f241f1e6180 R15: 00007ffc8fc41fa8
[  328.218706][T14552]  </TASK>
[  330.085078][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'.
[  330.283770][T14685] veth1_macvtap: left promiscuous mode
[  330.947112][ T8397] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  330.955211][ T8397] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  331.675127][T14797] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  332.989403][T14859] random: crng reseeded on system resumption
[  334.089174][T14930] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  335.115098][T14967] ecryptfs_miscdev_write: Invalid packet size [192]
[  335.647708][T14995] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1009'.
[  335.741499][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'.
[  336.132271][T15003] Invalid ELF header magic: != ELF
[  337.112873][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1015'.
[  338.730212][T15042] FAULT_INJECTION: forcing a failure.
[  338.730212][T15042] name failslab, interval 1, probability 0, space 0, times 0
[  339.109172][T15042] CPU: 1 UID: 0 PID: 15042 Comm: syz.1.1017 Not tainted syzkaller #0 PREEMPT(full) 
[  339.109195][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  339.109205][T15042] Call Trace:
[  339.109210][T15042]  <TASK>
[  339.109215][T15042]  dump_stack_lvl+0x16c/0x1f0
[  339.109242][T15042]  should_fail_ex+0x512/0x640
[  339.109263][T15042]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  339.109284][T15042]  should_failslab+0xc2/0x120
[  339.109303][T15042]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  339.109320][T15042]  ? shmem_alloc_inode+0x25/0x50
[  339.109343][T15042]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  339.109362][T15042]  shmem_alloc_inode+0x25/0x50
[  339.109380][T15042]  alloc_inode+0x64/0x240
[  339.109400][T15042]  new_inode+0x22/0x1c0
[  339.109421][T15042]  shmem_get_inode+0x19a/0xfb0
[  339.109446][T15042]  shmem_mknod+0x1a8/0x450
[  339.109469][T15042]  ? __pfx_shmem_create+0x10/0x10
[  339.109489][T15042]  lookup_open.isra.0+0x11d0/0x1580
[  339.109508][T15042]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  339.109532][T15042]  ? __pfx_down_write+0x10/0x10
[  339.109545][T15042]  ? mnt_get_write_access+0x20c/0x300
[  339.109568][T15042]  path_openat+0x893/0x2cb0
[  339.109591][T15042]  ? __pfx_path_openat+0x10/0x10
[  339.109613][T15042]  do_filp_open+0x20b/0x470
[  339.109630][T15042]  ? __pfx_do_filp_open+0x10/0x10
[  339.109660][T15042]  ? alloc_fd+0x471/0x7d0
[  339.109688][T15042]  do_sys_openat2+0x11b/0x1d0
[  339.109710][T15042]  ? __pfx_do_sys_openat2+0x10/0x10
[  339.109739][T15042]  __x64_sys_openat+0x174/0x210
[  339.109752][T15042]  ? __pfx___x64_sys_openat+0x10/0x10
[  339.109773][T15042]  do_syscall_64+0xcd/0x4c0
[  339.109788][T15042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.109802][T15042] RIP: 0033:0x7f15cf18eec9
[  339.109815][T15042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.109828][T15042] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  339.109842][T15042] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  339.109852][T15042] RDX: 0000000000080643 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  339.109861][T15042] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  339.109870][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.109878][T15042] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  339.109898][T15042]  </TASK>
[  339.625706][T15064] Process accounting paused
[  340.458300][T15116] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  341.232306][T15130] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1029'.
[  341.290479][T15131] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1029'.
[  342.999283][T15148] netlink: 'syz.4.1031': attribute type 1 has an invalid length.
[  343.426514][T15192] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  343.512992][T15147] vivid-007: =================  START STATUS  =================
[  343.600155][T15147] vivid-007: Enable Output Cropping: true
[  343.660904][T15147] vivid-007: Enable Output Composing: true
[  343.703294][T15147] vivid-007: Enable Output Scaler: true
[  343.725799][T15211] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  343.752156][T15147] vivid-007: Tx RGB Quantization Range: Automatic
[  343.769678][T15147] vivid-007: Transmit Mode: HDMI
[  343.786876][T15147] vivid-007: Hotplug Present: 0x00000000
[  343.808487][T15147] vivid-007: RxSense Present: 0x00000000
[  343.828308][T15147] vivid-007: EDID Present: 0x00000000
[  343.842661][T15147] vivid-007: ==================  END STATUS  ==================
[  344.775678][T15244] FAULT_INJECTION: forcing a failure.
[  344.775678][T15244] name failslab, interval 1, probability 0, space 0, times 0
[  344.829342][T15244] CPU: 1 UID: 0 PID: 15244 Comm: syz.2.1047 Not tainted syzkaller #0 PREEMPT(full) 
[  344.829364][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  344.829372][T15244] Call Trace:
[  344.829378][T15244]  <TASK>
[  344.829384][T15244]  dump_stack_lvl+0x16c/0x1f0
[  344.829410][T15244]  should_fail_ex+0x512/0x640
[  344.829434][T15244]  should_failslab+0xc2/0x120
[  344.829453][T15244]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  344.829470][T15244]  ? zswap_store+0x839/0x25a0
[  344.829493][T15244]  zswap_store+0x839/0x25a0
[  344.829521][T15244]  ? __pfx_zswap_store+0x10/0x10
[  344.829541][T15244]  ? do_raw_spin_lock+0x12c/0x2b0
[  344.829562][T15244]  ? find_held_lock+0x2b/0x80
[  344.829576][T15244]  ? folio_free_swap+0x171/0x580
[  344.829594][T15244]  ? do_raw_spin_unlock+0x172/0x230
[  344.829613][T15244]  ? swp_swap_info+0xce/0x130
[  344.829631][T15244]  ? __pfx_swp_swap_info+0x10/0x10
[  344.829649][T15244]  ? __pfx_try_to_unmap+0x10/0x10
[  344.829667][T15244]  swap_writeout+0x3b2/0xfe0
[  344.829687][T15244]  ? folio_clear_dirty_for_io+0x112/0x810
[  344.829711][T15244]  shrink_folio_list+0x3e46/0x4880
[  344.829733][T15244]  ? __pfx_shrink_folio_list+0x10/0x10
[  344.829776][T15244]  ? mark_held_locks+0x49/0x80
[  344.829793][T15244]  ? finish_task_switch.isra.0+0x221/0xc10
[  344.829808][T15244]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.829828][T15244]  ? finish_task_switch.isra.0+0x221/0xc10
[  344.829844][T15244]  reclaim_folio_list+0xda/0x5d0
[  344.829857][T15244]  ? __pfx_css_rstat_updated+0x10/0x10
[  344.829874][T15244]  ? __pfx_reclaim_folio_list+0x10/0x10
[  344.829896][T15244]  ? lru_gen_update_size+0x543/0xe10
[  344.829914][T15244]  ? lru_gen_del_folio+0x32b/0x540
[  344.829929][T15244]  reclaim_pages+0x47b/0x650
[  344.829945][T15244]  ? __pfx_reclaim_pages+0x10/0x10
[  344.829959][T15244]  ? find_held_lock+0x2b/0x80
[  344.829972][T15244]  ? madvise_cold_or_pageout_pte_range+0x749/0x2120
[  344.829996][T15244]  madvise_cold_or_pageout_pte_range+0x1546/0x2120
[  344.830024][T15244]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  344.830047][T15244]  ? rcu_is_watching+0x12/0xc0
[  344.830062][T15244]  ? css_rstat_updated+0x1c2/0x510
[  344.830077][T15244]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  344.830098][T15244]  walk_pgd_range+0xc05/0x1f50
[  344.830129][T15244]  ? __pfx_walk_pgd_range+0x10/0x10
[  344.830151][T15244]  __walk_page_range+0x163/0x820
[  344.830170][T15244]  ? __lock_acquire+0xb97/0x1ce0
[  344.830192][T15244]  walk_page_range_vma+0x2c7/0xa20
[  344.830211][T15244]  ? __pfx_walk_page_range_vma+0x10/0x10
[  344.830228][T15244]  ? find_held_lock+0x2b/0x80
[  344.830249][T15244]  madvise_pageout+0x257/0x540
[  344.830268][T15244]  ? __pfx_madvise_pageout+0x10/0x10
[  344.830295][T15244]  ? mas_next_slot+0x12d3/0x21b0
[  344.830311][T15244]  madvise_vma_behavior+0xb22/0x2d60
[  344.830340][T15244]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  344.830361][T15244]  ? __pfx_mt_find+0x10/0x10
[  344.830378][T15244]  ? find_vma_prev+0xda/0x160
[  344.830402][T15244]  ? find_vma+0xbf/0x140
[  344.830420][T15244]  ? __pfx_find_vma+0x10/0x10
[  344.830436][T15244]  ? __lock_acquire+0x62e/0x1ce0
[  344.830457][T15244]  madvise_walk_vmas+0x31f/0x9c0
[  344.830479][T15244]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  344.830504][T15244]  madvise_do_behavior+0x1e2/0x530
[  344.830522][T15244]  ? futex_private_hash_put+0x18a/0x300
[  344.830539][T15244]  ? __pfx_madvise_do_behavior+0x10/0x10
[  344.830560][T15244]  ? down_read+0x13d/0x480
[  344.830582][T15244]  do_madvise+0x176/0x240
[  344.830601][T15244]  ? __pfx_do_madvise+0x10/0x10
[  344.830625][T15244]  ? do_futex+0x122/0x350
[  344.830654][T15244]  ? xfd_validate_state+0x61/0x180
[  344.830678][T15244]  __x64_sys_madvise+0xa9/0x110
[  344.830697][T15244]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.830716][T15244]  do_syscall_64+0xcd/0x4c0
[  344.830729][T15244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.830744][T15244] RIP: 0033:0x7f241ef8eec9
[  344.830756][T15244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.830769][T15244] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  344.830783][T15244] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  344.830792][T15244] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000
[  344.830800][T15244] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  344.830808][T15244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.830816][T15244] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  344.830834][T15244]  </TASK>
[  346.863868][T15235] FAULT_INJECTION: forcing a failure.
[  346.863868][T15235] name fail_futex, interval 1, probability 0, space 0, times 0
[  346.893770][T15235] CPU: 1 UID: 0 PID: 15235 Comm: syz.4.1044 Not tainted syzkaller #0 PREEMPT(full) 
[  346.893792][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  346.893800][T15235] Call Trace:
[  346.893806][T15235]  <TASK>
[  346.893811][T15235]  dump_stack_lvl+0x16c/0x1f0
[  346.893836][T15235]  should_fail_ex+0x512/0x640
[  346.893860][T15235]  get_futex_key+0x1d0/0x1560
[  346.893889][T15235]  ? __pfx_get_futex_key+0x10/0x10
[  346.893905][T15235]  ? __mutex_trylock_common+0xe9/0x250
[  346.893929][T15235]  futex_wake+0xea/0x530
[  346.893950][T15235]  ? __pfx_futex_wake+0x10/0x10
[  346.893977][T15235]  do_futex+0x1e3/0x350
[  346.893995][T15235]  ? __pfx_do_futex+0x10/0x10
[  346.894010][T15235]  ? __might_fault+0xe3/0x190
[  346.894031][T15235]  mm_release+0x24e/0x300
[  346.894048][T15235]  do_exit+0x68e/0x2bf0
[  346.894070][T15235]  ? __pfx_do_exit+0x10/0x10
[  346.894088][T15235]  ? do_raw_spin_lock+0x12c/0x2b0
[  346.894108][T15235]  ? find_held_lock+0x2b/0x80
[  346.894124][T15235]  do_group_exit+0xd3/0x2a0
[  346.894144][T15235]  get_signal+0x2673/0x26d0
[  346.894165][T15235]  ? getname_flags.part.0+0x1c5/0x550
[  346.894187][T15235]  ? __pfx_get_signal+0x10/0x10
[  346.894202][T15235]  ? do_futex+0x122/0x350
[  346.894219][T15235]  ? __pfx_do_futex+0x10/0x10
[  346.894237][T15235]  arch_do_signal_or_restart+0x8f/0x790
[  346.894257][T15235]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  346.894279][T15235]  ? xfd_validate_state+0x61/0x180
[  346.894304][T15235]  exit_to_user_mode_loop+0x84/0x110
[  346.894325][T15235]  do_syscall_64+0x41c/0x4c0
[  346.894339][T15235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.894353][T15235] RIP: 0033:0x7fbda518eec9
[  346.894365][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.894379][T15235] RSP: 002b:00007fbda5f860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  346.894392][T15235] RAX: fffffffffffffe00 RBX: 00007fbda53e5fa8 RCX: 00007fbda518eec9
[  346.894402][T15235] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbda53e5fa8
[  346.894410][T15235] RBP: 00007fbda53e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  346.894418][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.894426][T15235] R13: 00007fbda53e6038 R14: 00007ffdb1b80490 R15: 00007ffdb1b80578
[  346.894444][T15235]  </TASK>
[  347.993264][T15431] Malformed UNC in devname
[  347.993264][T15431] 
[  348.031806][T15431] CIFS: VFS: Malformed UNC in devname
[  348.054803][T15428] random: crng reseeded on system resumption
[  348.512657][T15450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'.
[  349.042584][T15485] zswap: compressor  not available
[  349.418110][T15550] ovs_: entered promiscuous mode
[  350.310868][T15574] FAULT_INJECTION: forcing a failure.
[  350.310868][T15574] name failslab, interval 1, probability 0, space 0, times 0
[  350.376832][T15574] CPU: 1 UID: 0 PID: 15574 Comm: syz.4.1071 Not tainted syzkaller #0 PREEMPT(full) 
[  350.376854][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  350.376862][T15574] Call Trace:
[  350.376867][T15574]  <TASK>
[  350.376873][T15574]  dump_stack_lvl+0x16c/0x1f0
[  350.376898][T15574]  should_fail_ex+0x512/0x640
[  350.376919][T15574]  ? __kmalloc_noprof+0xbf/0x510
[  350.376941][T15574]  ? __seq_open_private+0x22/0xd0
[  350.376961][T15574]  should_failslab+0xc2/0x120
[  350.376980][T15574]  __kmalloc_noprof+0xd2/0x510
[  350.376995][T15574]  ? __pfx_apparmor_file_open+0x10/0x10
[  350.377014][T15574]  __seq_open_private+0x22/0xd0
[  350.377035][T15574]  proc_timers_open+0x27/0x150
[  350.377056][T15574]  do_dentry_open+0x982/0x1530
[  350.377074][T15574]  ? __pfx_proc_timers_open+0x10/0x10
[  350.377097][T15574]  vfs_open+0x82/0x3f0
[  350.377119][T15574]  path_openat+0x1de4/0x2cb0
[  350.377142][T15574]  ? __pfx_path_openat+0x10/0x10
[  350.377162][T15574]  do_filp_open+0x20b/0x470
[  350.377179][T15574]  ? __pfx_do_filp_open+0x10/0x10
[  350.377201][T15574]  ? __pfx_kfree_link+0x10/0x10
[  350.377226][T15574]  ? alloc_fd+0x471/0x7d0
[  350.377245][T15574]  do_sys_openat2+0x11b/0x1d0
[  350.377265][T15574]  ? __pfx_do_sys_openat2+0x10/0x10
[  350.377292][T15574]  __x64_sys_openat+0x174/0x210
[  350.377305][T15574]  ? __pfx___x64_sys_openat+0x10/0x10
[  350.377324][T15574]  do_syscall_64+0xcd/0x4c0
[  350.377338][T15574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.377352][T15574] RIP: 0033:0x7fbda518eec9
[  350.377364][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.377377][T15574] RSP: 002b:00007fbda5f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  350.377391][T15574] RAX: ffffffffffffffda RBX: 00007fbda53e5fa0 RCX: 00007fbda518eec9
[  350.377400][T15574] RDX: 00000000001a3540 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  350.377408][T15574] RBP: 00007fbda5211f91 R08: 0000000000000000 R09: 0000000000000000
[  350.377417][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.377425][T15574] R13: 00007fbda53e6038 R14: 00007fbda53e5fa0 R15: 00007ffdb1b80578
[  350.377442][T15574]  </TASK>
[  350.601730][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.392108][T15625] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  352.495993][T15621] zswap: compressor  not available
[  353.823745][ T8110] bridge0: port 3(syz_tun) entered disabled state
[  356.205983][T15811] netlink: 29 bytes leftover after parsing attributes in process `syz.2.1092'.
[  356.328170][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'.
[  356.625561][T15822] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  357.354091][T15845] zswap: compressor 000 not available
[  357.906422][ T8397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  357.913921][ T8397] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  359.270157][T15971] binder: 15942:15971 unknown command 0
[  359.297836][T15970] binder: 15942:15970 unknown command 0
[  359.388646][T15971] binder: 15942:15971 ioctl c0306201 2000000000c0 returned -22
[  359.419165][T15970] binder: 15942:15970 ioctl c0306201 2000000000c0 returned -22
[  360.312934][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'.
[  360.418407][T16035] zswap: compressor  not available
[  361.373925][T16100] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  362.798618][T16214] vivid-003: =================  START STATUS  =================
[  362.829385][T16214] vivid-003: Radio HW Seek Mode: Bounded
[  362.868258][T16214] vivid-003: Radio Programmable HW Seek: false
[  362.917865][T16214] vivid-003: RDS Rx I/O Mode: Block I/O
[  362.981848][T16214] vivid-003: Generate RBDS Instead of RDS: false
[  362.988206][T16214] vivid-003: RDS Reception: true
[  363.045981][T16214] vivid-003: RDS Program Type: 0 inactive
[  363.087116][T16214] vivid-003: RDS PS Name:  inactive
[  363.135546][T16214] vivid-003: RDS Radio Text:  inactive
[  363.249321][T16214] vivid-003: RDS Traffic Announcement: false inactive
[  363.327692][T16214] vivid-003: RDS Traffic Program: false inactive
[  363.446895][T16214] vivid-003: RDS Music: false inactive
[  363.521219][T16214] vivid-003: ==================  END STATUS  ==================
[  365.155103][T16350] syz.0.1127(16350): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  365.245245][T16350] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[16350]
[  366.707313][T16482] zswap: compressor  not available
[  367.012064][ T8143] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  367.878178][T16549] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  368.098061][T16549] File: /dev/mtdblock0 PID: 16549 Comm: syz.2.1147
[  368.167401][T16558] cgroup: fork rejected by pids controller in /syz2
[  368.750957][T16660] random: crng reseeded on system resumption
[  369.236226][T16664] zswap: compressor  not available
[  369.398161][T16683] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1159'.
[  371.999409][   T30] audit: type=1326 audit(4294968352.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16772 comm="syz.0.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d62d8eec9 code=0x0
[  372.108452][T16782] misc userio: No port type given on /dev/userio
[  372.229034][T16782] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  372.312745][T16782] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  372.663456][T16801] zswap: compressor  not available
[  373.020860][T16810] zswap: compressor  not available
[  373.078237][T16837] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1174'.
[  374.840712][T16924] hub 1-0:1.0: USB hub found
[  375.025573][T16924] hub 1-0:1.0: 1 port detected
[  375.491952][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'.
[  375.541610][T17002] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1183'.
[  375.816433][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'.
[  376.163108][T17010] CIFS: VFS: Invalid SecurityFlags: 
[  376.342777][T17025] zswap: compressor  not available
[  378.332928][T17191] =======================================================
[  378.332928][T17191] WARNING: The mand mount option has been deprecated and
[  378.332928][T17191]          and is ignored by this kernel. Remove the mand
[  378.332928][T17191]          option from the mount to silence this warning.
[  378.332928][T17191] =======================================================
[  378.661726][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'.
[  378.689646][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.696217][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  378.723246][T17212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.753377][T17212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.780987][   T30] audit: type=1800 audit(4294968359.145:15): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1194" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0
[  378.812418][T17212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.834006][T17212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.030611][T17225] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  379.401615][T17233] zswap: compressor  not available
[  380.038061][T17294] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  381.102167][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  381.596242][   T30] audit: type=1326 audit(4294968361.954:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17422 comm="syz.1.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15cf18eec9 code=0x0
[  381.891213][T17433] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  382.035876][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  382.288848][T17442] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  382.738342][T17435] FAULT_INJECTION: forcing a failure.
[  382.738342][T17435] name failslab, interval 1, probability 0, space 0, times 0
[  382.943107][T17435] CPU: 1 UID: 0 PID: 17435 Comm: syz.1.1212 Not tainted syzkaller #0 PREEMPT(full) 
[  382.943131][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  382.943140][T17435] Call Trace:
[  382.943146][T17435]  <TASK>
[  382.943152][T17435]  dump_stack_lvl+0x16c/0x1f0
[  382.943179][T17435]  should_fail_ex+0x512/0x640
[  382.943200][T17435]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  382.943222][T17435]  should_failslab+0xc2/0x120
[  382.943240][T17435]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  382.943257][T17435]  ? __alloc_skb+0x2b2/0x380
[  382.943279][T17435]  __alloc_skb+0x2b2/0x380
[  382.943298][T17435]  ? __pfx___alloc_skb+0x10/0x10
[  382.943317][T17435]  ? __lock_acquire+0x62e/0x1ce0
[  382.943347][T17435]  alloc_skb_with_frags+0xe0/0x860
[  382.943366][T17435]  sock_alloc_send_pskb+0x7fb/0x990
[  382.943392][T17435]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  382.943412][T17435]  ? ip6_finish_output2+0xb30/0x2020
[  382.943438][T17435]  __ip6_append_data+0x2a98/0x4750
[  382.943460][T17435]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  382.943490][T17435]  ? __pfx___ip6_append_data+0x10/0x10
[  382.943508][T17435]  ? __pfx_ip6_mtu+0x10/0x10
[  382.943523][T17435]  ? ip6_setup_cork+0xc51/0x1530
[  382.943543][T17435]  ip6_make_skb+0x2c8/0x3f0
[  382.943562][T17435]  ? ip6_dst_check+0x343/0x950
[  382.943578][T17435]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  382.943600][T17435]  ? __pfx_ip6_make_skb+0x10/0x10
[  382.943619][T17435]  ? find_held_lock+0x2b/0x80
[  382.943637][T17435]  ? sk_dst_check+0x1da/0x540
[  382.943659][T17435]  ? udpv6_sendmsg+0x235c/0x2d20
[  382.943672][T17435]  udpv6_sendmsg+0x235c/0x2d20
[  382.943685][T17435]  ? aa_label_sk_perm+0x195/0x600
[  382.943703][T17435]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  382.943730][T17435]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  382.943755][T17435]  ? __pfx___might_resched+0x10/0x10
[  382.943768][T17435]  ? __lock_acquire+0xb97/0x1ce0
[  382.943793][T17435]  ? iovec_from_user+0xbb/0x140
[  382.943812][T17435]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  382.943827][T17435]  ? inet6_sendmsg+0x105/0x140
[  382.943840][T17435]  inet6_sendmsg+0x105/0x140
[  382.943855][T17435]  ____sys_sendmsg+0x705/0xc70
[  382.943871][T17435]  ? copy_msghdr_from_user+0x10a/0x160
[  382.943891][T17435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  382.943909][T17435]  ? kfree+0x24f/0x4d0
[  382.943922][T17435]  ? futex_unqueue+0x133/0x2c0
[  382.943941][T17435]  ___sys_sendmsg+0x134/0x1d0
[  382.943962][T17435]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.943999][T17435]  ? __pfx___might_resched+0x10/0x10
[  382.944017][T17435]  __sys_sendmmsg+0x200/0x420
[  382.944039][T17435]  ? __pfx___sys_sendmmsg+0x10/0x10
[  382.944064][T17435]  ? __pfx_do_futex+0x10/0x10
[  382.944088][T17435]  ? fput+0x9b/0xd0
[  382.944108][T17435]  ? xfd_validate_state+0x61/0x180
[  382.944127][T17435]  ? __pfx_ksys_write+0x10/0x10
[  382.944146][T17435]  __x64_sys_sendmmsg+0x9c/0x100
[  382.944166][T17435]  ? lockdep_hardirqs_on+0x7c/0x110
[  382.944186][T17435]  do_syscall_64+0xcd/0x4c0
[  382.944200][T17435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.944214][T17435] RIP: 0033:0x7f15cf18eec9
[  382.944226][T17435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.944240][T17435] RSP: 002b:00007f15d002a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  382.944255][T17435] RAX: ffffffffffffffda RBX: 00007f15cf3e6270 RCX: 00007f15cf18eec9
[  382.944265][T17435] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003
[  382.944273][T17435] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  382.944282][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.944291][T17435] R13: 00007f15cf3e6308 R14: 00007f15cf3e6270 R15: 00007ffeabcd1868
[  382.944309][T17435]  </TASK>
[  384.239127][ T8397] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12
[  384.950612][ T8397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  384.958223][ T8397] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  385.568835][T17559] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  385.607472][T17562] HfR: entered promiscuous mode
[  386.283173][ T8143] Bluetooth: hci1: command 0x0c1a tx timeout
[  386.402239][T17570] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  386.438113][T17570] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  386.493424][T17570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  386.533283][T17570] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  386.557082][T17570] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  386.594107][T17570] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  386.600072][T17570] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  386.669897][T17570] CPU0 is offline.
[  387.030445][T17622] random: crng reseeded on system resumption
[  387.156687][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1233'.
[  388.043643][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  388.528621][ T8143] Bluetooth: hci2: command 0x0c1a tx timeout
[  388.604269][ T8143] Bluetooth: hci3: command 0x0c1a tx timeout
[  388.684399][ T8143] Bluetooth: hci1: command 0x0c1a tx timeout
[  388.921779][T17640] kexec: Could not allocate control_code_buffer
[  390.124768][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  390.607044][ T8143] Bluetooth: hci2: command 0x0c1a tx timeout
[  390.764859][ T8143] Bluetooth: hci1: command 0x0c1a tx timeout
[  393.955671][T17915] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  393.997087][T17913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'.
[  395.472381][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[  397.328674][T18137] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  398.523124][T18225] sg_write: data in/out 1685414155/2147479510 bytes for SCSI command 0x0-- guessing data in;
[  398.523124][T18225]    program syz.4.1278 not setting count and/or reply_len properly
[  398.559263][T18210] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  398.878584][T18232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  399.497268][T18284] zswap: compressor  not available
[  399.866642][T18286] zswap: compressor  not available
[  400.166557][T18344] zswap: compressor  not available
[  400.522556][ T8143] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  400.590714][T18370] Console: switching to colour VGA+ 80x25
[  401.895775][T18472] netlink: 'syz.4.1290': attribute type 1 has an invalid length.
[  401.909761][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1292'.
[  402.333915][T18476] veth0_macvtap: left promiscuous mode
[  403.922917][T18628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'.
[  403.949843][T18612] zswap: compressor  not available
[  403.963252][T18628] syz_tun: left allmulticast mode
[  404.004797][T18628] syz_tun: left promiscuous mode
[  404.065675][T18628] bridge0: port 3(syz_tun) entered disabled state
[  404.178540][T18628] bridge_slave_1: left allmulticast mode
[  404.202608][T18628] bridge_slave_1: left promiscuous mode
[  404.248073][T18628] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.260484][T18618] zswap: compressor  not available
[  404.335651][T18628] bridge_slave_0: left allmulticast mode
[  404.361645][T18628] bridge_slave_0: left promiscuous mode
[  404.378650][T18628] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.701779][T18613] kexec: Could not allocate control_code_buffer
[  405.587638][T18683] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.

syzkaller
syzkaller login: [  408.320641][T18793] random: crng reseeded on system resumption
[  408.550446][T18793] sg_write: process 1472 (syz.2.1313) changed security contexts after opening file descriptor, this is not allowed.
[  408.606088][T18793] rnbd_client L213: map_device: Parameters missing
[  408.682938][   T30] audit: type=1400 audit(4294967303.966:17): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18778 comm="syz.1.1312"
[  408.990783][T18816] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  409.563225][T18841] zswap: compressor  not available
[  409.785777][T18850] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.

syzkaller
syzkaller login: [  410.995399][T18884] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  411.099887][T18886] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1325'.
[  411.349876][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'.
[  412.537607][T18937] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1333'.
[  414.197738][T19013] can: request_module (can-proto-0) failed.
[  415.126383][T19056] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.

getty: ttyS0: read error: Resource temporarily unavailable
[  417.823585][T19179] can: request_module (can-proto-0) failed.
[  418.682711][T19206] random: crng reseeded on system resumption
[  418.770414][T19203] netlink: 'syz.4.1353': attribute type 2 has an invalid length.
[  420.620934][T19250] openvswitch: netlink: Missing valid actions attribute.
[  421.421961][T19308] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  421.652339][T19272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.295205][T19347] random: crng reseeded on system resumption
[  422.655316][T19372] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24
[  423.877566][T19416] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1374'.
[  424.171942][T19429] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  424.642480][T19442] kAFS: Invalid Command on /proc/fs/afs/cells file
[  424.845819][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1383'.
[  426.409003][T19590] block2mtd: parameter too long

syzkaller
syzkaller login: [  427.260942][T19581] vivid-007: =================  START STATUS  =================
[  427.353463][T19581] vivid-007: Enable Output Cropping: true
[  427.446261][T19581] vivid-007: Enable Output Composing: true
[  427.488823][T19581] vivid-007: Enable Output Scaler: true
[  427.594760][T19581] vivid-007: Tx RGB Quantization Range: Automatic
[  427.747837][T19581] vivid-007: Transmit Mode: HDMI
[  427.754423][T19697] sd 0:0:1:0: PR command failed: 1026
[  427.791990][T19697] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  427.813217][T19697] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  427.875132][T19581] vivid-007: Hotplug Present: 0x00000000
[  427.924991][T19581] vivid-007: RxSense Present: 0x00000000
[  428.035739][T19581] vivid-007: EDID Present: 0x00000000
[  428.139991][T19581] vivid-007: ==================  END STATUS  ==================
[  429.060972][T19735] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  431.012570][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'.
[  432.526706][T19927] random: crng reseeded on system resumption
[  435.401274][T20040] IPVS: length: 131 != 8
[  435.885015][T20079] : Can't lookup blockdev
[  436.957786][T20026] kexec: Could not allocate control_code_buffer
[  437.662065][ T8397] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6
[  438.904149][T20178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26
[  439.128796][T20198] FAULT_INJECTION: forcing a failure.
[  439.128796][T20198] name failslab, interval 1, probability 0, space 0, times 0
[  439.263608][T20198] CPU: 1 UID: 0 PID: 20198 Comm: syz.2.1452 Not tainted syzkaller #0 PREEMPT(full) 
[  439.263632][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  439.263640][T20198] Call Trace:
[  439.263646][T20198]  <TASK>
[  439.263652][T20198]  dump_stack_lvl+0x16c/0x1f0
[  439.263680][T20198]  should_fail_ex+0x512/0x640
[  439.263702][T20198]  ? __kmalloc_noprof+0xbf/0x510
[  439.263721][T20198]  ? __register_sysctl_table+0xb3/0x1900
[  439.263742][T20198]  should_failslab+0xc2/0x120
[  439.263768][T20198]  __kmalloc_noprof+0xd2/0x510
[  439.263790][T20198]  __register_sysctl_table+0xb3/0x1900
[  439.263811][T20198]  ? is_module_address+0x5f/0xf0
[  439.263833][T20198]  ? __pfx___register_sysctl_table+0x10/0x10
[  439.263853][T20198]  ? is_module_address+0x69/0xf0
[  439.263871][T20198]  ? register_net_sysctl_sz+0x228/0x3e0
[  439.263886][T20198]  ? __asan_memcpy+0x3c/0x60
[  439.263902][T20198]  xfrm4_net_init+0xf0/0x1c0
[  439.263923][T20198]  ? __pfx_xfrm4_net_init+0x10/0x10
[  439.263942][T20198]  ops_init+0x1e2/0x5f0
[  439.263966][T20198]  setup_net+0x10f/0x380
[  439.263976][T20198]  ? lockdep_init_map_type+0x5c/0x280
[  439.263996][T20198]  ? __pfx_setup_net+0x10/0x10
[  439.264009][T20198]  ? debug_mutex_init+0x37/0x70
[  439.264025][T20198]  copy_net_ns+0x2a6/0x5f0
[  439.264041][T20198]  create_new_namespaces+0x3ea/0xa90
[  439.264062][T20198]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  439.264080][T20198]  ksys_unshare+0x45b/0xa40
[  439.264098][T20198]  ? __pfx_ksys_unshare+0x10/0x10
[  439.264118][T20198]  ? xfd_validate_state+0x61/0x180
[  439.264144][T20198]  __x64_sys_unshare+0x31/0x40
[  439.264162][T20198]  do_syscall_64+0xcd/0x4c0
[  439.264176][T20198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.264190][T20198] RIP: 0033:0x7f241ef8eec9
[  439.264203][T20198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.264217][T20198] RSP: 002b:00007f241fe9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  439.264231][T20198] RAX: ffffffffffffffda RBX: 00007f241f1e6090 RCX: 00007f241ef8eec9
[  439.264241][T20198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  439.264250][T20198] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  439.264260][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.264268][T20198] R13: 00007f241f1e6128 R14: 00007f241f1e6090 R15: 00007ffc8fc41fa8
[  439.264287][T20198]  </TASK>
[  440.052086][T20233] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1454'.
[  440.169855][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.176143][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  440.996915][T20262] random: crng reseeded on system resumption
[  441.053858][T20262] FAULT_INJECTION: forcing a failure.
[  441.053858][T20262] name failslab, interval 1, probability 0, space 0, times 0
[  441.124575][T20262] CPU: 1 UID: 0 PID: 20262 Comm: syz.2.1458 Not tainted syzkaller #0 PREEMPT(full) 
[  441.124599][T20262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  441.124608][T20262] Call Trace:
[  441.124613][T20262]  <TASK>
[  441.124619][T20262]  dump_stack_lvl+0x16c/0x1f0
[  441.124646][T20262]  should_fail_ex+0x512/0x640
[  441.124667][T20262]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  441.124685][T20262]  should_failslab+0xc2/0x120
[  441.124704][T20262]  __kmalloc_cache_noprof+0x6a/0x3e0
[  441.124719][T20262]  ? create_basic_memory_bitmaps+0xeb/0x320
[  441.124739][T20262]  create_basic_memory_bitmaps+0xeb/0x320
[  441.124758][T20262]  snapshot_open+0x235/0x2b0
[  441.124773][T20262]  ? __pfx_snapshot_open+0x10/0x10
[  441.124791][T20262]  misc_open+0x35a/0x420
[  441.124808][T20262]  ? __pfx_misc_open+0x10/0x10
[  441.124824][T20262]  chrdev_open+0x234/0x6a0
[  441.124842][T20262]  ? __pfx_apparmor_file_open+0x10/0x10
[  441.124859][T20262]  ? __pfx_chrdev_open+0x10/0x10
[  441.124878][T20262]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  441.124897][T20262]  do_dentry_open+0x982/0x1530
[  441.124915][T20262]  ? __pfx_chrdev_open+0x10/0x10
[  441.124937][T20262]  vfs_open+0x82/0x3f0
[  441.124959][T20262]  path_openat+0x1de4/0x2cb0
[  441.124982][T20262]  ? __pfx_path_openat+0x10/0x10
[  441.125004][T20262]  do_filp_open+0x20b/0x470
[  441.125021][T20262]  ? __pfx_do_filp_open+0x10/0x10
[  441.125051][T20262]  ? alloc_fd+0x471/0x7d0
[  441.125071][T20262]  do_sys_openat2+0x11b/0x1d0
[  441.125091][T20262]  ? __pfx_do_sys_openat2+0x10/0x10
[  441.125120][T20262]  __x64_sys_openat+0x174/0x210
[  441.125132][T20262]  ? __pfx___x64_sys_openat+0x10/0x10
[  441.125153][T20262]  do_syscall_64+0xcd/0x4c0
[  441.125167][T20262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.125181][T20262] RIP: 0033:0x7f241ef8eec9
[  441.125193][T20262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.125207][T20262] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  441.125220][T20262] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  441.125230][T20262] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  441.125239][T20262] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  441.125247][T20262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.125256][T20262] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  441.125275][T20262]  </TASK>
[  441.712775][T20271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'.
[  441.800223][T20273] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[  442.081627][T20277] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd
[  443.147575][T20316] vivid-007: =================  START STATUS  =================
[  443.231100][T20316] vivid-007: Enable Output Cropping: true
[  443.236863][T20316] vivid-007: Enable Output Composing: true
[  443.366865][T20316] vivid-007: Enable Output Scaler: true
[  443.451218][T20316] vivid-007: Tx RGB Quantization Range: Automatic
[  443.477955][T20316] vivid-007: Transmit Mode: HDMI
[  443.522275][T20316] vivid-007: Hotplug Present: 0x00000000
[  443.555176][T20316] vivid-007: RxSense Present: 0x00000000
[  443.581450][T20316] vivid-007: EDID Present: 0x00000000
[  443.637030][T20316] vivid-007: ==================  END STATUS  ==================
[  445.534929][ T8397] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  445.542407][ T8397] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  445.672732][T20461] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  447.750504][T20599] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1484'.
[  447.967367][T20618] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  448.714271][T20654] zswap: compressor 000 not available
[  450.118105][T20795] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  451.568528][ T8143] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  452.132697][T20874] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1499'.
[  453.252031][T20890] __vm_enough_memory: pid: 20890, comm: syz.0.1501, bytes: 4398046511104 not enough memory for the allocation
[  453.596994][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  453.790092][T20902] vivid-007: =================  START STATUS  =================
[  453.937217][T20902] vivid-007: Enable Output Cropping: true
[  454.006719][T20902] vivid-007: Enable Output Composing: true
[  454.088256][T20902] vivid-007: Enable Output Scaler: true
[  454.197818][T20902] vivid-007: Tx RGB Quantization Range: Automatic
[  454.276621][T20902] vivid-007: Transmit Mode: HDMI
[  454.313661][T20902] vivid-007: Hotplug Present: 0x00000000
[  454.344559][T20902] vivid-007: RxSense Present: 0x00000000
[  454.374011][T20902] vivid-007: EDID Present: 0x00000000
[  454.396018][T20902] vivid-007: ==================  END STATUS  ==================
[  454.407411][T20957] netlink: 'syz.4.1506': attribute type 27 has an invalid length.
[  454.448600][T20957] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1506'.
[  454.634512][T20957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.842752][T20957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.980738][T20957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.119680][T20957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.294865][T21000] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1511'.
[  455.587461][T21010] FAULT_INJECTION: forcing a failure.
[  455.587461][T21010] name failslab, interval 1, probability 0, space 0, times 0
[  455.680796][T21010] CPU: 1 UID: 0 PID: 21010 Comm: syz.1.1512 Not tainted syzkaller #0 PREEMPT(full) 
[  455.680818][T21010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  455.680827][T21010] Call Trace:
[  455.680832][T21010]  <TASK>
[  455.680837][T21010]  dump_stack_lvl+0x16c/0x1f0
[  455.680863][T21010]  should_fail_ex+0x512/0x640
[  455.680884][T21010]  ? __kvmalloc_node_noprof+0x124/0x620
[  455.680906][T21010]  should_failslab+0xc2/0x120
[  455.680924][T21010]  __kvmalloc_node_noprof+0x137/0x620
[  455.680940][T21010]  ? alloc_netdev_mqs+0xf76/0x1530
[  455.680964][T21010]  ? alloc_netdev_mqs+0xf76/0x1530
[  455.680983][T21010]  alloc_netdev_mqs+0xf76/0x1530
[  455.681013][T21010]  ppp_ioctl+0x1761/0x2670
[  455.681035][T21010]  ? find_held_lock+0x2b/0x80
[  455.681050][T21010]  ? __pfx_ppp_ioctl+0x10/0x10
[  455.681073][T21010]  ? __fget_files+0x20e/0x3c0
[  455.681091][T21010]  ? __pfx_ppp_ioctl+0x10/0x10
[  455.681112][T21010]  __x64_sys_ioctl+0x18e/0x210
[  455.681135][T21010]  do_syscall_64+0xcd/0x4c0
[  455.681149][T21010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.681163][T21010] RIP: 0033:0x7f15cf18eec9
[  455.681175][T21010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.681188][T21010] RSP: 002b:00007f15d004b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  455.681202][T21010] RAX: ffffffffffffffda RBX: 00007f15cf3e6180 RCX: 00007f15cf18eec9
[  455.681211][T21010] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000e
[  455.681219][T21010] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  455.681227][T21010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.681235][T21010] R13: 00007f15cf3e6218 R14: 00007f15cf3e6180 R15: 00007ffeabcd1868
[  455.681253][T21010]  </TASK>
[  456.840274][T21064] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  457.245366][T21073] binder: BINDER_SET_CONTEXT_MGR already set
[  457.360979][T21073] binder: 21072:21073 ioctl 4018620d 9 returned -16
[  458.059008][T21195] zero sized request
[  458.562178][T21225] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  459.271106][T21238] erspan0: entered allmulticast mode
[  459.311896][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1536'.
[  459.375248][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'.
[  460.517958][T21286] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1546'.
[  460.875132][T21295] random: crng reseeded on system resumption
[  460.928652][T21295] FAULT_INJECTION: forcing a failure.
[  460.928652][T21295] name failslab, interval 1, probability 0, space 0, times 0
[  461.016699][T21295] CPU: 1 UID: 0 PID: 21295 Comm: syz.2.1549 Not tainted syzkaller #0 PREEMPT(full) 
[  461.016725][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  461.016735][T21295] Call Trace:
[  461.016740][T21295]  <TASK>
[  461.016746][T21295]  dump_stack_lvl+0x16c/0x1f0
[  461.016778][T21295]  should_fail_ex+0x512/0x640
[  461.016800][T21295]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  461.016818][T21295]  should_failslab+0xc2/0x120
[  461.016836][T21295]  __kmalloc_cache_noprof+0x6a/0x3e0
[  461.016851][T21295]  ? create_basic_memory_bitmaps+0xeb/0x320
[  461.016871][T21295]  create_basic_memory_bitmaps+0xeb/0x320
[  461.016890][T21295]  snapshot_open+0x235/0x2b0
[  461.016906][T21295]  ? __pfx_snapshot_open+0x10/0x10
[  461.016923][T21295]  misc_open+0x35a/0x420
[  461.016941][T21295]  ? __pfx_misc_open+0x10/0x10
[  461.016957][T21295]  chrdev_open+0x234/0x6a0
[  461.016975][T21295]  ? __pfx_apparmor_file_open+0x10/0x10
[  461.016991][T21295]  ? __pfx_chrdev_open+0x10/0x10
[  461.017010][T21295]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  461.017030][T21295]  do_dentry_open+0x982/0x1530
[  461.017048][T21295]  ? __pfx_chrdev_open+0x10/0x10
[  461.017069][T21295]  vfs_open+0x82/0x3f0
[  461.017092][T21295]  path_openat+0x1de4/0x2cb0
[  461.017116][T21295]  ? __pfx_path_openat+0x10/0x10
[  461.017137][T21295]  do_filp_open+0x20b/0x470
[  461.017154][T21295]  ? __pfx_do_filp_open+0x10/0x10
[  461.017184][T21295]  ? alloc_fd+0x471/0x7d0
[  461.017205][T21295]  do_sys_openat2+0x11b/0x1d0
[  461.017225][T21295]  ? __pfx_do_sys_openat2+0x10/0x10
[  461.017253][T21295]  __x64_sys_openat+0x174/0x210
[  461.017266][T21295]  ? __pfx___x64_sys_openat+0x10/0x10
[  461.017286][T21295]  do_syscall_64+0xcd/0x4c0
[  461.017301][T21295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.017315][T21295] RIP: 0033:0x7f241ef8eec9
[  461.017328][T21295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.017342][T21295] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  461.017356][T21295] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  461.017366][T21295] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  461.017376][T21295] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  461.017384][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.017393][T21295] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  461.017412][T21295]  </TASK>
[  462.176414][T21374] netlink: 'syz.4.1556': attribute type 11 has an invalid length.
[  463.081189][T21420] 
[  463.852262][T21458] blktrace: Concurrent blktraces are not allowed on ram7
[  464.183333][T21430] ptrace attach of "./syz-executor exec"[6688] was attempted by "./syz-executor exec"[21430]
[  465.299093][T21553] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1570'.
[  465.397738][T21553] : renamed from bond0 (while UP)
[  466.272367][T21612] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  467.315965][T21676] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1581'.
[  468.254861][T21779] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  469.155986][ T8143] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1
[  469.377281][T21823] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[  469.509464][T21807] zswap: compressor û not available
[  469.576120][T21835] FAULT_INJECTION: forcing a failure.
[  469.576120][T21835] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  469.639449][T21835] CPU: 1 UID: 0 PID: 21835 Comm: syz.2.1594 Not tainted syzkaller #0 PREEMPT(full) 
[  469.639473][T21835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  469.639482][T21835] Call Trace:
[  469.639487][T21835]  <TASK>
[  469.639493][T21835]  dump_stack_lvl+0x16c/0x1f0
[  469.639519][T21835]  should_fail_ex+0x512/0x640
[  469.639544][T21835]  should_fail_alloc_page+0xe7/0x130
[  469.639565][T21835]  prepare_alloc_pages+0x3c2/0x610
[  469.639588][T21835]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  469.639611][T21835]  ? __up_read+0x1f8/0x750
[  469.639637][T21835]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  469.639674][T21835]  __folio_alloc_noprof+0x11/0x220
[  469.639698][T21835]  alloc_migration_target+0x2bf/0x770
[  469.639721][T21835]  migrate_pages_batch+0x39c/0x3bd0
[  469.639744][T21835]  ? __pfx_alloc_migration_target+0x10/0x10
[  469.639772][T21835]  ? __pfx_migrate_pages_batch+0x10/0x10
[  469.639796][T21835]  ? __pfx_walk_pgd_range+0x10/0x10
[  469.639814][T21835]  migrate_pages_sync+0x12d/0x8a0
[  469.639835][T21835]  ? __pfx_alloc_migration_target+0x10/0x10
[  469.639858][T21835]  ? queue_pages_test_walk+0x279/0x410
[  469.639878][T21835]  ? __pfx_migrate_pages_sync+0x10/0x10
[  469.639898][T21835]  ? walk_page_test+0x9b/0x180
[  469.639916][T21835]  ? walk_page_range_mm+0x235/0xb40
[  469.639936][T21835]  migrate_pages+0x1b67/0x23b0
[  469.639959][T21835]  ? __pfx_alloc_migration_target+0x10/0x10
[  469.639983][T21835]  ? __pfx_migrate_pages+0x10/0x10
[  469.640004][T21835]  ? queue_pages_range+0x11e/0x180
[  469.640024][T21835]  ? __pfx___up_read+0x10/0x10
[  469.640043][T21835]  ? do_migrate_pages+0x458/0x750
[  469.640065][T21835]  do_migrate_pages+0x48e/0x750
[  469.640088][T21835]  ? __pfx_do_migrate_pages+0x10/0x10
[  469.640107][T21835]  ? rcu_is_watching+0x12/0xc0
[  469.640124][T21835]  ? cap_capable+0xb3/0x250
[  469.640137][T21835]  ? get_task_mm+0xc2/0xf0
[  469.640153][T21835]  ? security_capable+0x250/0x260
[  469.640169][T21835]  kernel_migrate_pages+0x55b/0x700
[  469.640188][T21835]  ? __pfx_kernel_migrate_pages+0x10/0x10
[  469.640208][T21835]  ? __pfx_do_writev+0x10/0x10
[  469.640226][T21835]  __x64_sys_migrate_pages+0x96/0x100
[  469.640245][T21835]  ? lockdep_hardirqs_on+0x7c/0x110
[  469.640266][T21835]  do_syscall_64+0xcd/0x4c0
[  469.640280][T21835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.640294][T21835] RIP: 0033:0x7f241ef8eec9
[  469.640307][T21835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.640320][T21835] RSP: 002b:00007f241fe9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  469.640335][T21835] RAX: ffffffffffffffda RBX: 00007f241f1e6090 RCX: 00007f241ef8eec9
[  469.640344][T21835] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000
[  469.640353][T21835] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  469.640361][T21835] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  469.640370][T21835] R13: 00007f241f1e6128 R14: 00007f241f1e6090 R15: 00007ffc8fc41fa8
[  469.640389][T21835]  </TASK>
[  471.542453][T21879] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  473.039249][ T8143] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1
[  474.889401][T22026] nvme_fabrics: missing parameter 'transport=%s'
[  474.955908][T22026] nvme_fabrics: missing parameter 'nqn=%s'
[  475.838293][T22073] random: crng reseeded on system resumption
[  475.872585][T22073] FAULT_INJECTION: forcing a failure.
[  475.872585][T22073] name failslab, interval 1, probability 0, space 0, times 0
[  475.999632][T22073] CPU: 1 UID: 0 PID: 22073 Comm: syz.2.1621 Not tainted syzkaller #0 PREEMPT(full) 
[  475.999655][T22073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  475.999665][T22073] Call Trace:
[  475.999671][T22073]  <TASK>
[  475.999677][T22073]  dump_stack_lvl+0x16c/0x1f0
[  475.999705][T22073]  should_fail_ex+0x512/0x640
[  475.999726][T22073]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  475.999744][T22073]  should_failslab+0xc2/0x120
[  475.999763][T22073]  __kmalloc_cache_noprof+0x6a/0x3e0
[  475.999778][T22073]  ? create_basic_memory_bitmaps+0xeb/0x320
[  475.999797][T22073]  create_basic_memory_bitmaps+0xeb/0x320
[  475.999815][T22073]  snapshot_open+0x235/0x2b0
[  475.999832][T22073]  ? __pfx_snapshot_open+0x10/0x10
[  475.999849][T22073]  misc_open+0x35a/0x420
[  475.999866][T22073]  ? __pfx_misc_open+0x10/0x10
[  475.999882][T22073]  chrdev_open+0x234/0x6a0
[  475.999900][T22073]  ? __pfx_apparmor_file_open+0x10/0x10
[  475.999916][T22073]  ? __pfx_chrdev_open+0x10/0x10
[  475.999935][T22073]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  475.999954][T22073]  do_dentry_open+0x982/0x1530
[  475.999972][T22073]  ? __pfx_chrdev_open+0x10/0x10
[  475.999993][T22073]  vfs_open+0x82/0x3f0
[  476.000016][T22073]  path_openat+0x1de4/0x2cb0
[  476.000040][T22073]  ? __pfx_path_openat+0x10/0x10
[  476.000062][T22073]  do_filp_open+0x20b/0x470
[  476.000079][T22073]  ? __pfx_do_filp_open+0x10/0x10
[  476.000109][T22073]  ? alloc_fd+0x471/0x7d0
[  476.000130][T22073]  do_sys_openat2+0x11b/0x1d0
[  476.000150][T22073]  ? __pfx_do_sys_openat2+0x10/0x10
[  476.000178][T22073]  __x64_sys_openat+0x174/0x210
[  476.000191][T22073]  ? __pfx___x64_sys_openat+0x10/0x10
[  476.000211][T22073]  do_syscall_64+0xcd/0x4c0
[  476.000226][T22073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.000240][T22073] RIP: 0033:0x7f241ef8eec9
[  476.000252][T22073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.000266][T22073] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  476.000280][T22073] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  476.000290][T22073] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  476.000299][T22073] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  476.000316][T22073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.000324][T22073] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  476.000344][T22073]  </TASK>
[  476.269106][T22074] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  476.365008][T22086] Â: entered promiscuous mode
[  476.686651][   T30] audit: type=1800 audit(4294967335.348:18): pid=22102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1629" name="lu_gp_id" dev="configfs" ino=51255 res=0 errno=0
[  477.871415][T22205] netlink: 'syz.4.1635': attribute type 1 has an invalid length.
[  477.976990][T22202] random: crng reseeded on system resumption
[  478.030830][T22202] FAULT_INJECTION: forcing a failure.
[  478.030830][T22202] name failslab, interval 1, probability 0, space 0, times 0
[  478.123544][T22202] CPU: 1 UID: 0 PID: 22202 Comm: syz.2.1634 Not tainted syzkaller #0 PREEMPT(full) 
[  478.123567][T22202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  478.123576][T22202] Call Trace:
[  478.123582][T22202]  <TASK>
[  478.123589][T22202]  dump_stack_lvl+0x16c/0x1f0
[  478.123616][T22202]  should_fail_ex+0x512/0x640
[  478.123637][T22202]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  478.123654][T22202]  should_failslab+0xc2/0x120
[  478.123672][T22202]  __kmalloc_cache_noprof+0x6a/0x3e0
[  478.123687][T22202]  ? create_basic_memory_bitmaps+0xeb/0x320
[  478.123708][T22202]  create_basic_memory_bitmaps+0xeb/0x320
[  478.123727][T22202]  snapshot_open+0x235/0x2b0
[  478.123743][T22202]  ? __pfx_snapshot_open+0x10/0x10
[  478.123760][T22202]  misc_open+0x35a/0x420
[  478.123777][T22202]  ? __pfx_misc_open+0x10/0x10
[  478.123793][T22202]  chrdev_open+0x234/0x6a0
[  478.123811][T22202]  ? __pfx_apparmor_file_open+0x10/0x10
[  478.123828][T22202]  ? __pfx_chrdev_open+0x10/0x10
[  478.123854][T22202]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  478.123874][T22202]  do_dentry_open+0x982/0x1530
[  478.123893][T22202]  ? __pfx_chrdev_open+0x10/0x10
[  478.123915][T22202]  vfs_open+0x82/0x3f0
[  478.123937][T22202]  path_openat+0x1de4/0x2cb0
[  478.123961][T22202]  ? __pfx_path_openat+0x10/0x10
[  478.123982][T22202]  do_filp_open+0x20b/0x470
[  478.123999][T22202]  ? __pfx_do_filp_open+0x10/0x10
[  478.124030][T22202]  ? alloc_fd+0x471/0x7d0
[  478.124050][T22202]  do_sys_openat2+0x11b/0x1d0
[  478.124071][T22202]  ? __pfx_do_sys_openat2+0x10/0x10
[  478.124099][T22202]  __x64_sys_openat+0x174/0x210
[  478.124112][T22202]  ? __pfx___x64_sys_openat+0x10/0x10
[  478.124132][T22202]  do_syscall_64+0xcd/0x4c0
[  478.124147][T22202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.124161][T22202] RIP: 0033:0x7f241ef8eec9
[  478.124174][T22202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.124188][T22202] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  478.124202][T22202] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  478.124211][T22202] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  478.124220][T22202] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  478.124229][T22202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.124237][T22202] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  478.124255][T22202]  </TASK>
[  480.008182][T22331] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  481.131052][T22382] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  481.131052][T22382]    program syz.4.1653 not setting count and/or reply_len properly
[  481.316072][T22383] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1652'.
[  481.427596][T22388] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1653'.
[  481.514972][T22390] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1653'.
[  481.613261][T22386] netlink: 290 bytes leftover after parsing attributes in process `syz.4.1653'.
[  481.678245][T22388] netlink: 290 bytes leftover after parsing attributes in process `syz.4.1653'.
[  481.789084][T22391] random: crng reseeded on system resumption
[  481.912706][T22391] FAULT_INJECTION: forcing a failure.
[  481.912706][T22391] name failslab, interval 1, probability 0, space 0, times 0
[  482.122074][T22391] CPU: 1 UID: 0 PID: 22391 Comm: syz.2.1655 Not tainted syzkaller #0 PREEMPT(full) 
[  482.122098][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  482.122107][T22391] Call Trace:
[  482.122112][T22391]  <TASK>
[  482.122119][T22391]  dump_stack_lvl+0x16c/0x1f0
[  482.122145][T22391]  should_fail_ex+0x512/0x640
[  482.122166][T22391]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  482.122184][T22391]  should_failslab+0xc2/0x120
[  482.122203][T22391]  __kmalloc_cache_noprof+0x6a/0x3e0
[  482.122218][T22391]  ? create_basic_memory_bitmaps+0xeb/0x320
[  482.122238][T22391]  create_basic_memory_bitmaps+0xeb/0x320
[  482.122256][T22391]  snapshot_open+0x235/0x2b0
[  482.122273][T22391]  ? __pfx_snapshot_open+0x10/0x10
[  482.122290][T22391]  misc_open+0x35a/0x420
[  482.122307][T22391]  ? __pfx_misc_open+0x10/0x10
[  482.122323][T22391]  chrdev_open+0x234/0x6a0
[  482.122341][T22391]  ? __pfx_apparmor_file_open+0x10/0x10
[  482.122357][T22391]  ? __pfx_chrdev_open+0x10/0x10
[  482.122377][T22391]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  482.122397][T22391]  do_dentry_open+0x982/0x1530
[  482.122430][T22391]  ? __pfx_chrdev_open+0x10/0x10
[  482.122453][T22391]  vfs_open+0x82/0x3f0
[  482.122476][T22391]  path_openat+0x1de4/0x2cb0
[  482.122500][T22391]  ? __pfx_path_openat+0x10/0x10
[  482.122522][T22391]  do_filp_open+0x20b/0x470
[  482.122539][T22391]  ? __pfx_do_filp_open+0x10/0x10
[  482.122569][T22391]  ? alloc_fd+0x471/0x7d0
[  482.122589][T22391]  do_sys_openat2+0x11b/0x1d0
[  482.122610][T22391]  ? __pfx_do_sys_openat2+0x10/0x10
[  482.122638][T22391]  __x64_sys_openat+0x174/0x210
[  482.122651][T22391]  ? __pfx___x64_sys_openat+0x10/0x10
[  482.122671][T22391]  do_syscall_64+0xcd/0x4c0
[  482.122686][T22391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.122700][T22391] RIP: 0033:0x7f241ef8eec9
[  482.122712][T22391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.122726][T22391] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  482.122740][T22391] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  482.122750][T22391] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  482.122759][T22391] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  482.122768][T22391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.122776][T22391] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  482.122795][T22391]  </TASK>
[  483.888323][T22485] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1668'.
[  484.456170][T22478] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  484.471182][T22478] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  484.493840][T22478] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  484.502215][T22478] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  484.520558][T22478] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  484.570915][T22478] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  484.585198][T22478] CPU0 is offline.
[  485.099105][T22544] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  486.007586][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  486.218232][T22615] random: crng reseeded on system resumption
[  486.313326][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[  486.414479][T22618] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1682'.
[  486.561126][ T8143] Bluetooth: hci3: command 0x0c1a tx timeout
[  486.567197][ T8143] Bluetooth: hci2: command 0x0c1a tx timeout
[  486.640169][ T8143] Bluetooth: hci1: command 0x0c1a tx timeout
[  487.420740][T22697] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  488.024867][T22722] program syz.1.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  488.080679][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  488.637509][ T8143] Bluetooth: hci3: command 0x0c1a tx timeout
[  490.055594][T22893] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  492.057820][T23015] delete_channel: no stack
[  492.239736][T23021] nbd: socks must be embedded in a SOCK_ITEM attr
[  492.251737][T23021] block nbd0: shutting down sockets
[  494.708372][T23131] netlink: 568 bytes leftover after parsing attributes in process `syz.0.1730'.
[  495.114065][T23141] tipc: Started in network mode
[  495.136103][T23141] tipc: Node identity 45e5412, cluster identity 4711
[  495.166159][T23141] tipc: Node number set to 73290770
[  495.194800][T23143] delete_channel: no stack
[  496.040555][   T30] audit: type=1800 audit(4294967354.768:19): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1732" name="dbroot" dev="configfs" ino=53617 res=0 errno=0
[  496.138594][T23179] db_root: not a directory: /dev/audio1
[  497.177171][T23271] random: crng reseeded on system resumption
[  499.516684][T23320] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present
[  501.599920][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.606231][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  502.682960][T23412] kexec: Could not allocate control_code_buffer
[  504.396345][T23489] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  504.470427][T23489] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  505.920514][T23527] random: crng reseeded on system resumption
[  507.498021][ T8143] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  508.223742][T23564] FAULT_INJECTION: forcing a failure.
[  508.223742][T23564] name failslab, interval 1, probability 0, space 0, times 0
[  508.289666][T23564] CPU: 1 UID: 0 PID: 23564 Comm: syz.1.1769 Not tainted syzkaller #0 PREEMPT(full) 
[  508.289690][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  508.289699][T23564] Call Trace:
[  508.289705][T23564]  <TASK>
[  508.289710][T23564]  dump_stack_lvl+0x16c/0x1f0
[  508.289738][T23564]  should_fail_ex+0x512/0x640
[  508.289759][T23564]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  508.289777][T23564]  should_failslab+0xc2/0x120
[  508.289796][T23564]  __kmalloc_cache_noprof+0x6a/0x3e0
[  508.289811][T23564]  ? snd_card_file_add+0x52/0x340
[  508.289830][T23564]  ? __pfx_snd_ctl_open+0x10/0x10
[  508.289855][T23564]  snd_card_file_add+0x52/0x340
[  508.289870][T23564]  ? __pfx_snd_ctl_open+0x10/0x10
[  508.289889][T23564]  ? __pfx_snd_ctl_open+0x10/0x10
[  508.289910][T23564]  snd_ctl_open+0x9d/0x5f0
[  508.289930][T23564]  ? __pfx_snd_ctl_open+0x10/0x10
[  508.289949][T23564]  snd_open+0x22a/0x4c0
[  508.289962][T23564]  ? __pfx_snd_open+0x10/0x10
[  508.289975][T23564]  chrdev_open+0x234/0x6a0
[  508.289992][T23564]  ? __pfx_apparmor_file_open+0x10/0x10
[  508.290009][T23564]  ? __pfx_chrdev_open+0x10/0x10
[  508.290027][T23564]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  508.290047][T23564]  do_dentry_open+0x982/0x1530
[  508.290064][T23564]  ? __pfx_chrdev_open+0x10/0x10
[  508.290086][T23564]  vfs_open+0x82/0x3f0
[  508.290108][T23564]  path_openat+0x1de4/0x2cb0
[  508.290131][T23564]  ? __pfx_path_openat+0x10/0x10
[  508.290152][T23564]  do_filp_open+0x20b/0x470
[  508.290168][T23564]  ? __pfx_do_filp_open+0x10/0x10
[  508.290197][T23564]  ? alloc_fd+0x471/0x7d0
[  508.290217][T23564]  do_sys_openat2+0x11b/0x1d0
[  508.290237][T23564]  ? __pfx_do_sys_openat2+0x10/0x10
[  508.290264][T23564]  __x64_sys_openat+0x174/0x210
[  508.290277][T23564]  ? __pfx___x64_sys_openat+0x10/0x10
[  508.290297][T23564]  do_syscall_64+0xcd/0x4c0
[  508.290311][T23564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.290326][T23564] RIP: 0033:0x7f15cf18eec9
[  508.290342][T23564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.290357][T23564] RSP: 002b:00007f15d006c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  508.290372][T23564] RAX: ffffffffffffffda RBX: 00007f15cf3e6090 RCX: 00007f15cf18eec9
[  508.290381][T23564] RDX: 0000000000000802 RSI: 00002000000010c0 RDI: ffffffffffffff9c
[  508.290391][T23564] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  508.290400][T23564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.290408][T23564] R13: 00007f15cf3e6128 R14: 00007f15cf3e6090 R15: 00007ffeabcd1868
[  508.290427][T23564]  </TASK>
[  508.554266][    C1] vkms_vblank_simulate: vblank timer overrun
[  509.742788][ T8143] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  509.742815][ T8143] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260
[  509.757965][ T8143] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  509.758003][ T8143] Bluetooth: hci1: adv larger than maximum supported
[  509.765734][ T8143] Bluetooth: hci1: Malformed LE Event: 0x0d
[  511.058076][T23709] ptrace attach of "./syz-executor exec"[5864] was attempted by ""[23709]
[  511.330131][T23719] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  511.348301][T23722] random: crng reseeded on system resumption
[  512.758307][T23759] FAULT_INJECTION: forcing a failure.
[  512.758307][T23759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.885959][T23759] CPU: 1 UID: 0 PID: 23759 Comm: syz.1.1791 Not tainted syzkaller #0 PREEMPT(full) 
[  512.885982][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  512.885990][T23759] Call Trace:
[  512.885995][T23759]  <TASK>
[  512.886001][T23759]  dump_stack_lvl+0x16c/0x1f0
[  512.886026][T23759]  should_fail_ex+0x512/0x640
[  512.886050][T23759]  _copy_from_user+0x2e/0xd0
[  512.886065][T23759]  snd_rawmidi_kernel_write1+0x50a/0x8a0
[  512.886089][T23759]  snd_rawmidi_write+0x26e/0xc10
[  512.886111][T23759]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  512.886129][T23759]  ? __pfx_default_wake_function+0x10/0x10
[  512.886145][T23759]  ? bpf_lsm_file_permission+0x9/0x10
[  512.886165][T23759]  ? security_file_permission+0x71/0x210
[  512.886185][T23759]  ? rw_verify_area+0xcf/0x6c0
[  512.886200][T23759]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  512.886216][T23759]  vfs_write+0x2a0/0x11d0
[  512.886235][T23759]  ? __pfx_vfs_write+0x10/0x10
[  512.886249][T23759]  ? find_held_lock+0x2b/0x80
[  512.886264][T23759]  ? __fget_files+0x204/0x3c0
[  512.886282][T23759]  ? __fget_files+0x20e/0x3c0
[  512.886308][T23759]  ksys_write+0x1f8/0x250
[  512.886323][T23759]  ? __pfx_ksys_write+0x10/0x10
[  512.886344][T23759]  do_syscall_64+0xcd/0x4c0
[  512.886357][T23759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.886371][T23759] RIP: 0033:0x7f15cf18eec9
[  512.886383][T23759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.886396][T23759] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  512.886410][T23759] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  512.886419][T23759] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005
[  512.886427][T23759] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  512.886435][T23759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  512.886443][T23759] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  512.886461][T23759]  </TASK>
[  513.087661][    C1] vkms_vblank_simulate: vblank timer overrun
[  514.468235][T23847] delete_channel: no stack
[  514.472789][T23847] delete_channel: no stack
[  514.532754][T23847] delete_channel: no stack
[  514.718709][T23856] random: crng reseeded on system resumption
[  515.252322][T23845] delete_channel: no stack
[  515.256885][T23845] delete_channel: no stack
[  515.362238][T23845] delete_channel: no stack
[  515.366770][T23845] delete_channel: no stack
[  515.449315][T23845] delete_channel: no stack
[  515.508132][T23845] delete_channel: no stack
[  515.565260][T23845] delete_channel: no stack
[  515.628102][T23845] delete_channel: no stack
[  515.632673][T23845] delete_channel: no stack
[  515.637201][T23845] delete_channel: no stack
[  515.767250][T23845] delete_channel: no stack
[  515.851393][T23845] delete_channel: no stack
[  515.885708][T23845] delete_channel: no stack
[  515.945833][T23845] delete_channel: no stack
[  516.007377][T23845] delete_channel: no stack
[  516.047688][T23845] delete_channel: no stack
[  516.147694][T23845] delete_channel: no stack
[  516.152256][T23845] delete_channel: no stack
[  516.156766][T23845] delete_channel: no stack
[  516.267805][T23845] delete_channel: no stack
[  516.380378][T23845] delete_channel: no stack
[  516.384940][T23845] delete_channel: no stack
[  516.427649][T23845] delete_channel: no stack
[  516.454654][T23845] delete_channel: no stack
[  516.468524][T23845] delete_channel: no stack
[  516.495442][T23845] delete_channel: no stack
[  516.520726][T23845] delete_channel: no stack
[  516.544299][T23845] delete_channel: no stack
[  516.566255][T23845] delete_channel: no stack
[  516.587870][T23845] delete_channel: no stack
[  517.511107][T23924] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1815'.
[  517.724941][T23927] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  517.986276][T23944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1820'.
[  518.105872][T23949] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1821'.
[  518.161032][T23948] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1821'.
[  518.903968][T23978] could not allocate digest TFM handle 
[  519.188115][T23977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1825'.
[  519.863192][T24084] netlink: zone id is out of range
[  519.883166][T24084] netlink: zone id is out of range
[  520.150630][ T8143] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12
[  520.172236][T24122] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  520.433566][   T30] audit: type=1800 audit(4294967379.158:20): pid=24139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1837" name="dbroot" dev="configfs" ino=55839 res=0 errno=0
[  522.145718][ T8143] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1
[  522.252226][ T8143] Bluetooth: hci0: command 0x0c1a tx timeout
[  522.336712][T24251] random: crng reseeded on system resumption
[  522.381920][T24251] FAULT_INJECTION: forcing a failure.
[  522.381920][T24251] name failslab, interval 1, probability 0, space 0, times 0
[  522.475583][T24251] CPU: 1 UID: 0 PID: 24251 Comm: syz.2.1846 Not tainted syzkaller #0 PREEMPT(full) 
[  522.475606][T24251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  522.475615][T24251] Call Trace:
[  522.475621][T24251]  <TASK>
[  522.475627][T24251]  dump_stack_lvl+0x16c/0x1f0
[  522.475653][T24251]  should_fail_ex+0x512/0x640
[  522.475675][T24251]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  522.475693][T24251]  should_failslab+0xc2/0x120
[  522.475712][T24251]  __kmalloc_cache_noprof+0x6a/0x3e0
[  522.475727][T24251]  ? memory_bm_create+0x154/0x810
[  522.475744][T24251]  memory_bm_create+0x154/0x810
[  522.475766][T24251]  create_basic_memory_bitmaps+0x10b/0x320
[  522.475786][T24251]  snapshot_open+0x235/0x2b0
[  522.475802][T24251]  ? __pfx_snapshot_open+0x10/0x10
[  522.475819][T24251]  misc_open+0x35a/0x420
[  522.475836][T24251]  ? __pfx_misc_open+0x10/0x10
[  522.475853][T24251]  chrdev_open+0x234/0x6a0
[  522.475870][T24251]  ? __pfx_apparmor_file_open+0x10/0x10
[  522.475886][T24251]  ? __pfx_chrdev_open+0x10/0x10
[  522.475905][T24251]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  522.475925][T24251]  do_dentry_open+0x982/0x1530
[  522.475942][T24251]  ? __pfx_chrdev_open+0x10/0x10
[  522.475964][T24251]  vfs_open+0x82/0x3f0
[  522.475987][T24251]  path_openat+0x1de4/0x2cb0
[  522.476010][T24251]  ? __pfx_path_openat+0x10/0x10
[  522.476032][T24251]  do_filp_open+0x20b/0x470
[  522.476048][T24251]  ? __pfx_do_filp_open+0x10/0x10
[  522.476079][T24251]  ? alloc_fd+0x471/0x7d0
[  522.476099][T24251]  do_sys_openat2+0x11b/0x1d0
[  522.476119][T24251]  ? __pfx_do_sys_openat2+0x10/0x10
[  522.476147][T24251]  __x64_sys_openat+0x174/0x210
[  522.476160][T24251]  ? __pfx___x64_sys_openat+0x10/0x10
[  522.476180][T24251]  do_syscall_64+0xcd/0x4c0
[  522.476194][T24251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.476209][T24251] RIP: 0033:0x7f241ef8eec9
[  522.476221][T24251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.476235][T24251] RSP: 002b:00007f241fe9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  522.476249][T24251] RAX: ffffffffffffffda RBX: 00007f241f1e6090 RCX: 00007f241ef8eec9
[  522.476262][T24251] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  522.476271][T24251] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  522.476279][T24251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.476287][T24251] R13: 00007f241f1e6128 R14: 00007f241f1e6090 R15: 00007ffc8fc41fa8
[  522.476306][T24251]  </TASK>
[  523.713723][T24279] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1849'.
[  525.254055][T24381] Invalid ELF header magic: != ELF
[  526.293468][T24386] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1860'.
[  526.869728][T24486] __vm_enough_memory: pid: 24486, comm: syz.2.1866, bytes: 4398046511104 not enough memory for the allocation
[  528.385263][T24608] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1873'.
[  530.276667][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  530.352179][T24753] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1885'.
[  531.172595][ T8143] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260
[  531.172621][ T8143] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5
[  531.279309][T24781] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1892'.
[  531.332420][T24781] : renamed from vcan0 (while UP)
[  532.125336][T24805] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1895'.
[  532.918402][T24836] FAULT_INJECTION: forcing a failure.
[  532.918402][T24836] name failslab, interval 1, probability 0, space 0, times 0
[  532.998758][T24836] CPU: 1 UID: 0 PID: 24836 Comm: syz.2.1902 Not tainted syzkaller #0 PREEMPT(full) 
[  532.998781][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  532.998790][T24836] Call Trace:
[  532.998795][T24836]  <TASK>
[  532.998802][T24836]  dump_stack_lvl+0x16c/0x1f0
[  532.998828][T24836]  should_fail_ex+0x512/0x640
[  532.998850][T24836]  ? __kmalloc_noprof+0xbf/0x510
[  532.998869][T24836]  ? mpi_alloc_limb_space+0x31/0x60
[  532.998886][T24836]  should_failslab+0xc2/0x120
[  532.998905][T24836]  __kmalloc_noprof+0xd2/0x510
[  532.998925][T24836]  mpi_alloc_limb_space+0x31/0x60
[  532.998943][T24836]  mpi_powm+0x511/0x1bf0
[  532.998964][T24836]  ? kasan_quarantine_put+0x10a/0x240
[  532.998979][T24836]  ? lockdep_hardirqs_on+0x7c/0x110
[  532.999000][T24836]  ? __pfx_mpi_powm+0x10/0x10
[  532.999016][T24836]  ? kfree+0x2b4/0x4d0
[  532.999033][T24836]  ? mpi_free+0xe1/0x160
[  532.999052][T24836]  ? mpi_free+0xe1/0x160
[  532.999070][T24836]  rsa_enc+0x1fe/0x3b0
[  532.999088][T24836]  ? __pfx_rsa_enc+0x10/0x10
[  532.999103][T24836]  ? __virt_addr_valid+0x81/0x610
[  532.999120][T24836]  ? __phys_addr+0xe8/0x180
[  532.999136][T24836]  ? sg_init_one+0xf5/0x1b0
[  532.999157][T24836]  rsassa_pkcs1_verify+0x4ff/0xb60
[  532.999181][T24836]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  532.999214][T24836]  ? rsa_max_size+0xd/0x70
[  532.999229][T24836]  ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0
[  532.999249][T24836]  public_key_verify_signature+0x672/0x970
[  532.999270][T24836]  ? __pfx_public_key_verify_signature+0x10/0x10
[  532.999301][T24836]  ? __pfx_public_key_verify_signature_2+0x10/0x10
[  532.999320][T24836]  verify_signature+0xdf/0x130
[  532.999342][T24836]  pkcs7_validate_trust+0x220/0x7e0
[  532.999366][T24836]  verify_pkcs7_message_sig+0x12c/0x250
[  532.999388][T24836]  ? __pfx_verify_pkcs7_message_sig+0x10/0x10
[  532.999408][T24836]  ? kfree+0x2b4/0x4d0
[  532.999419][T24836]  ? public_key_signature_free+0xda/0x110
[  532.999438][T24836]  ? pkcs7_parse_message+0x536/0x720
[  532.999458][T24836]  verify_pkcs7_signature+0x6d/0xa0
[  532.999480][T24836]  valid_regdb+0x211/0x590
[  532.999501][T24836]  ? __pfx___mutex_lock+0x10/0x10
[  532.999523][T24836]  ? __pfx_valid_regdb+0x10/0x10
[  532.999547][T24836]  reg_reload_regdb+0x11a/0x460
[  532.999561][T24836]  ? __pfx_reg_reload_regdb+0x10/0x10
[  532.999578][T24836]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  532.999595][T24836]  ? nl80211_pre_doit+0x1b0/0xb10
[  532.999615][T24836]  genl_family_rcv_msg_doit+0x206/0x2f0
[  532.999632][T24836]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  532.999646][T24836]  ? rcu_is_watching+0x12/0xc0
[  532.999666][T24836]  ? bpf_lsm_capable+0x9/0x10
[  532.999680][T24836]  ? security_capable+0x7e/0x260
[  532.999698][T24836]  genl_rcv_msg+0x55c/0x800
[  532.999715][T24836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.999730][T24836]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  532.999746][T24836]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  532.999773][T24836]  ? __pfx_nl80211_post_doit+0x10/0x10
[  532.999794][T24836]  netlink_rcv_skb+0x155/0x420
[  532.999820][T24836]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.999835][T24836]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  532.999864][T24836]  ? netlink_deliver_tap+0x1ae/0xd30
[  532.999886][T24836]  genl_rcv+0x28/0x40
[  532.999898][T24836]  netlink_unicast+0x5aa/0x870
[  532.999922][T24836]  ? __pfx_netlink_unicast+0x10/0x10
[  532.999942][T24836]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  532.999962][T24836]  ? __lock_acquire+0xb97/0x1ce0
[  532.999985][T24836]  netlink_sendmsg+0x8d1/0xdd0
[  533.000008][T24836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.000031][T24836]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  533.000050][T24836]  ____sys_sendmsg+0xa95/0xc70
[  533.000066][T24836]  ? copy_msghdr_from_user+0x10a/0x160
[  533.000087][T24836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  533.000107][T24836]  ? __pfx_futex_wake_mark+0x10/0x10
[  533.000131][T24836]  ___sys_sendmsg+0x134/0x1d0
[  533.000152][T24836]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.000196][T24836]  __sys_sendmsg+0x16d/0x220
[  533.000216][T24836]  ? __pfx___sys_sendmsg+0x10/0x10
[  533.000236][T24836]  ? __x64_sys_futex+0x1e0/0x4c0
[  533.000264][T24836]  do_syscall_64+0xcd/0x4c0
[  533.000293][T24836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.000307][T24836] RIP: 0033:0x7f241ef8eec9
[  533.000320][T24836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.000340][T24836] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.000354][T24836] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  533.000364][T24836] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000a
[  533.000372][T24836] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  533.000381][T24836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.000389][T24836] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  533.000409][T24836]  </TASK>
[  537.543826][T25010] kexec: Could not allocate control_code_buffer
[  537.964286][T25039] zswap: compressor  not available
[  540.482759][T25329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1941'.
[  541.354408][T25374] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  541.513532][T25396] Invalid ELF header magic: != ELF
[  543.173722][   T30] audit: type=1800 audit(4294967401.898:21): pid=25488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1955" name="members" dev="configfs" ino=58446 res=0 errno=0
[  543.916294][T25508] openvswitch: HfR: Dropping previously announced user features
[  544.025140][T25514] netlink: set zone limit has 8 unknown bytes
[  545.034003][T25562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'.
[  545.358548][T25562] bond0: (slave bond_slave_1): Releasing backup interface
[  548.059636][T25652] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  549.266687][T25684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'.
[  549.354644][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'.
[  549.422918][T25697] FAULT_INJECTION: forcing a failure.
[  549.422918][T25697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.466242][T25697] CPU: 1 UID: 0 PID: 25697 Comm: syz.1.1984 Not tainted syzkaller #0 PREEMPT(full) 
[  549.466264][T25697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  549.466273][T25697] Call Trace:
[  549.466278][T25697]  <TASK>
[  549.466284][T25697]  dump_stack_lvl+0x16c/0x1f0
[  549.466310][T25697]  should_fail_ex+0x512/0x640
[  549.466334][T25697]  _copy_from_user+0x2e/0xd0
[  549.466349][T25697]  __x64_sys_mq_notify+0xde/0x170
[  549.466366][T25697]  ? __pfx___x64_sys_mq_notify+0x10/0x10
[  549.466386][T25697]  ? rcu_is_watching+0x12/0xc0
[  549.466403][T25697]  do_syscall_64+0xcd/0x4c0
[  549.466417][T25697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.466431][T25697] RIP: 0033:0x7f15cf18eec9
[  549.466443][T25697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.466457][T25697] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4
[  549.466471][T25697] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  549.466480][T25697] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffffff
[  549.466488][T25697] RBP: 00007f15d008d090 R08: 0000000000000000 R09: 0000000000000000
[  549.466497][T25697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.466504][T25697] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  549.466522][T25697]  </TASK>
[  550.518733][T25730] Scaler: =================  START STATUS  =================
[  550.555032][T25730] Scaler: ==================  END STATUS  ==================
[  551.066700][T25748] FAULT_INJECTION: forcing a failure.
[  551.066700][T25748] name fail_futex, interval 1, probability 0, space 0, times 0
[  551.134056][T25748] CPU: 1 UID: 0 PID: 25748 Comm: syz.1.1996 Not tainted syzkaller #0 PREEMPT(full) 
[  551.134079][T25748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  551.134087][T25748] Call Trace:
[  551.134093][T25748]  <TASK>
[  551.134099][T25748]  dump_stack_lvl+0x16c/0x1f0
[  551.134126][T25748]  should_fail_ex+0x512/0x640
[  551.134151][T25748]  get_futex_key+0x1d0/0x1560
[  551.134169][T25748]  ? __might_fault+0x13b/0x190
[  551.134186][T25748]  ? __pfx_get_futex_key+0x10/0x10
[  551.134204][T25748]  ? __might_fault+0x154/0x190
[  551.134220][T25748]  ? sk_ioctl+0x173/0x360
[  551.134239][T25748]  futex_wait_setup+0x9d/0x550
[  551.134264][T25748]  __futex_wait+0x194/0x2f0
[  551.134285][T25748]  ? __pfx___futex_wait+0x10/0x10
[  551.134309][T25748]  ? __pfx_futex_wake_mark+0x10/0x10
[  551.134333][T25748]  ? futex_private_hash_put+0x176/0x300
[  551.134352][T25748]  ? futex_private_hash_put+0x18a/0x300
[  551.134370][T25748]  futex_wait+0xe8/0x380
[  551.134389][T25748]  ? __pfx_futex_wait+0x10/0x10
[  551.134414][T25748]  ? __pfx_sock_ioctl+0x10/0x10
[  551.134430][T25748]  ? do_vfs_ioctl+0x128/0x14f0
[  551.134454][T25748]  do_futex+0x229/0x350
[  551.134471][T25748]  ? __pfx_do_futex+0x10/0x10
[  551.134489][T25748]  ? find_held_lock+0x2b/0x80
[  551.134505][T25748]  __x64_sys_futex+0x1e0/0x4c0
[  551.134524][T25748]  ? __fget_files+0x20e/0x3c0
[  551.134539][T25748]  ? __pfx___x64_sys_futex+0x10/0x10
[  551.134559][T25748]  ? fput+0x9b/0xd0
[  551.134589][T25748]  do_syscall_64+0xcd/0x4c0
[  551.134604][T25748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.134619][T25748] RIP: 0033:0x7f15cf18eec9
[  551.134631][T25748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  551.134645][T25748] RSP: 002b:00007f15d008d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  551.134659][T25748] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa8 RCX: 00007f15cf18eec9
[  551.134668][T25748] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15cf3e5fa8
[  551.134677][T25748] RBP: 00007f15cf3e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  551.134685][T25748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.134693][T25748] R13: 00007f15cf3e6038 R14: 00007ffeabcd1780 R15: 00007ffeabcd1868
[  551.134711][T25748]  </TASK>
[  551.388426][T25738] syz.2.1994 (25738): /proc/25725/oom_adj is deprecated, please use /proc/25725/oom_score_adj instead.
[  552.559088][T25808] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1998'.
[  553.237729][T25824] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2000'.
[  554.578666][T25853] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  554.600668][T25853] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  554.634067][T25853] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  554.660481][T25853] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  554.682727][T25853] CPU0 is offline.
[  555.311624][ T8143] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  555.413138][T25920] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2009'.
[  556.081299][ T8397] Bluetooth: hci0: command 0x0c1a tx timeout
[  556.640587][ T8397] Bluetooth: hci3: command 0x0c1a tx timeout
[  556.646644][ T8397] Bluetooth: hci2: command 0x0c1a tx timeout
[  556.727730][T25970] Bluetooth: hci1: command 0x0c1a tx timeout
[  558.193246][T26011] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[  561.357841][T26153] random: crng reseeded on system resumption
[  561.391108][T26153] FAULT_INJECTION: forcing a failure.
[  561.391108][T26153] name failslab, interval 1, probability 0, space 0, times 0
[  561.446533][T26153] CPU: 1 UID: 0 PID: 26153 Comm: syz.1.2029 Not tainted syzkaller #0 PREEMPT(full) 
[  561.446557][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  561.446566][T26153] Call Trace:
[  561.446572][T26153]  <TASK>
[  561.446578][T26153]  dump_stack_lvl+0x16c/0x1f0
[  561.446606][T26153]  should_fail_ex+0x512/0x640
[  561.446627][T26153]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  561.446645][T26153]  should_failslab+0xc2/0x120
[  561.446664][T26153]  __kmalloc_cache_noprof+0x6a/0x3e0
[  561.446679][T26153]  ? memory_bm_create+0x154/0x810
[  561.446696][T26153]  memory_bm_create+0x154/0x810
[  561.446718][T26153]  create_basic_memory_bitmaps+0x10b/0x320
[  561.446737][T26153]  snapshot_open+0x235/0x2b0
[  561.446754][T26153]  ? __pfx_snapshot_open+0x10/0x10
[  561.446778][T26153]  misc_open+0x35a/0x420
[  561.446800][T26153]  ? __pfx_misc_open+0x10/0x10
[  561.446817][T26153]  chrdev_open+0x234/0x6a0
[  561.446835][T26153]  ? __pfx_apparmor_file_open+0x10/0x10
[  561.446851][T26153]  ? __pfx_chrdev_open+0x10/0x10
[  561.446870][T26153]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  561.446890][T26153]  do_dentry_open+0x982/0x1530
[  561.446907][T26153]  ? __pfx_chrdev_open+0x10/0x10
[  561.446930][T26153]  vfs_open+0x82/0x3f0
[  561.446952][T26153]  path_openat+0x1de4/0x2cb0
[  561.446976][T26153]  ? __pfx_path_openat+0x10/0x10
[  561.446998][T26153]  do_filp_open+0x20b/0x470
[  561.447014][T26153]  ? __pfx_do_filp_open+0x10/0x10
[  561.447045][T26153]  ? alloc_fd+0x471/0x7d0
[  561.447065][T26153]  do_sys_openat2+0x11b/0x1d0
[  561.447086][T26153]  ? __pfx_do_sys_openat2+0x10/0x10
[  561.447114][T26153]  __x64_sys_openat+0x174/0x210
[  561.447127][T26153]  ? __pfx___x64_sys_openat+0x10/0x10
[  561.447147][T26153]  do_syscall_64+0xcd/0x4c0
[  561.447162][T26153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.447176][T26153] RIP: 0033:0x7f15cf18eec9
[  561.447189][T26153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.447203][T26153] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  561.447217][T26153] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  561.447226][T26153] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  561.447236][T26153] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  561.447244][T26153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.447253][T26153] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  561.447272][T26153]  </TASK>
[  562.105681][T26173] netlink: 'syz.2.2030': attribute type 10 has an invalid length.
[  562.129386][T26173] netlink: 230 bytes leftover after parsing attributes in process `syz.2.2030'.
[  562.329027][T26178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2031'.
[  563.045333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  563.051837][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  563.286336][T26228] .^: entered promiscuous mode
[  563.590861][T26226] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28
[  563.850842][T26253] openvswitch: HfR: Dropping previously announced user features
[  564.560286][T26299] random: crng reseeded on system resumption
[  566.608542][T26361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2050'.
[  566.688976][T26361] ipvlan0: entered promiscuous mode
[  566.694213][T26361] ipvlan0: entered allmulticast mode
[  566.896593][T26361] veth0_vlan: entered allmulticast mode
[  567.490428][T26373] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  567.599228][T26373] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  567.662738][T26373] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  568.796139][ T8143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  568.806951][ T8143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  568.816831][ T8143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  568.828317][ T8143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  568.837639][ T8143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  570.028566][T26563] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  570.076700][T26414] chnl_net:caif_netlink_parms(): no params data found
[  570.107788][T26563] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  570.131358][T26563] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  570.404558][T26563] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  570.514134][T26414] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.522368][T26563] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  570.550842][T26414] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.579560][T26414] bridge_slave_0: entered allmulticast mode
[  570.612300][T26414] bridge_slave_0: entered promiscuous mode
[  570.651602][T26563] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  570.669217][T26414] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.693575][T26414] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.727007][T26414] bridge_slave_1: entered allmulticast mode
[  570.760344][T26414] bridge_slave_1: entered promiscuous mode
[  570.767839][T26563] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  571.043867][T26563] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  571.116953][T26414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.168438][T26414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.180309][T26563] CPU0 is offline.
[  571.619903][T26414] team0: Port device team_slave_0 added
[  571.676263][T26414] team0: Port device team_slave_1 added
[  571.745038][T26714] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  571.874512][T26414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.922348][T26414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.077551][T25970] Bluetooth: hci0: command 0x0c1a tx timeout
[  572.083937][T26414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.157663][T25970] Bluetooth: hci2: command 0x0c1a tx timeout
[  572.230420][T26414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.277759][T26414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  572.303874][    C1] vkms_vblank_simulate: vblank timer overrun
[  572.449976][T26414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.478562][T25970] Bluetooth: hci3: command 0x0c1a tx timeout
[  572.559052][T25970] Bluetooth: hci1: command 0x0c1a tx timeout
[  572.720596][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  572.811717][T26414] hsr_slave_0: entered promiscuous mode
[  572.843891][T26414] hsr_slave_1: entered promiscuous mode
[  572.869949][T26414] debugfs: 'hsr0' already exists in 'hsr'
[  572.896699][T26414] Cannot create hsr debugfs directory
[  574.237607][T25970] Bluetooth: hci2: command 0x0c1a tx timeout
[  574.561329][T26905] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  574.800188][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  575.104842][T26414] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  575.260135][T26414] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  575.301774][T26414] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  575.419534][T26414] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  575.792183][T26414] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.880602][T26414] 8021q: adding VLAN 0 to HW filter on device team0
[  575.999230][T10775] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.006384][T10775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.091472][T10775] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.099346][T10775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.209814][T26978] zswap: compressor  not available
[  576.366099][T26992] Console: switching to colour frame buffer device 128x48
[  576.881700][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  576.950041][T26414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.802499][T26414] veth0_vlan: entered promiscuous mode
[  577.855900][T26414] veth1_vlan: entered promiscuous mode
[  577.982222][T26414] veth0_macvtap: entered promiscuous mode
[  578.058561][T26414] veth1_macvtap: entered promiscuous mode
[  578.223969][T26414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.256905][T26414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.331929][ T8161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.368138][ T8161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.478245][T27058] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2089'.
[  578.604141][ T8161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.696866][ T8161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.950154][ T8161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.960076][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  579.018649][ T8161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.208626][T10773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.247564][T10773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.866431][T27102] sd 0:0:1:0: PR command failed: 1026
[  580.175198][T27102] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  580.211949][T27102] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  581.037825][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  581.821733][T27134] netlink: 'syz.1.2095': attribute type 16 has an invalid length.
[  581.837754][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.837854][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.844971][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.852834][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.861600][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.868745][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.875854][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.883045][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.890171][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.897240][T25970] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7
[  581.918161][T27120] zswap: compressor  not available
[  581.943161][T27134] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2095'.
[  582.447323][T27148] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2098'.
[  583.117800][T25970] Bluetooth: hci4: command 0x041b tx timeout
[  587.128644][T27395] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2109'.
[  587.221450][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'.
[  587.354233][T11054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.771223][T11054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.159907][T27442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  588.181716][T11054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.596757][T27460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'.
[  588.773112][T11054] bridge_slave_1: left allmulticast mode
[  588.793998][T11054] bridge_slave_1: left promiscuous mode
[  588.830323][T11054] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.923143][T11054] bridge_slave_0: left allmulticast mode
[  588.943315][T11054] bridge_slave_0: left promiscuous mode
[  588.963655][T11054] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.401245][T11054] erspan0 (unregistering): left allmulticast mode
[  589.819099][T11054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.841036][T11054] bond0 (unregistering): Released all slaves
[  589.880454][T27473] FAULT_INJECTION: forcing a failure.
[  589.880454][T27473] name failslab, interval 1, probability 0, space 0, times 0
[  589.988525][T27473] CPU: 1 UID: 0 PID: 27473 Comm: syz.1.2117 Not tainted syzkaller #0 PREEMPT(full) 
[  589.988549][T27473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  589.988559][T27473] Call Trace:
[  589.988564][T27473]  <TASK>
[  589.988570][T27473]  dump_stack_lvl+0x16c/0x1f0
[  589.988596][T27473]  should_fail_ex+0x512/0x640
[  589.988629][T27473]  should_failslab+0xc2/0x120
[  589.988649][T27473]  __kmalloc_cache_noprof+0x6a/0x3e0
[  589.988665][T27473]  ? nfc_genl_rcv_nl_event+0xc1/0x2e0
[  589.988684][T27473]  nfc_genl_rcv_nl_event+0xc1/0x2e0
[  589.988701][T27473]  notifier_call_chain+0xb9/0x410
[  589.988719][T27473]  ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10
[  589.988739][T27473]  blocking_notifier_call_chain+0x69/0xa0
[  589.988759][T27473]  netlink_release+0x189d/0x2060
[  589.988783][T27473]  ? netlink_release+0x1de/0x2060
[  589.988805][T27473]  ? __pfx_netlink_release+0x10/0x10
[  589.988827][T27473]  ? __pfx_locks_remove_file+0x10/0x10
[  589.988844][T27473]  __sock_release+0xb0/0x270
[  589.988867][T27473]  ? __pfx_sock_close+0x10/0x10
[  589.988878][T27473]  sock_close+0x1c/0x30
[  589.988889][T27473]  __fput+0x402/0xb70
[  589.988913][T27473]  task_work_run+0x14d/0x240
[  589.988934][T27473]  ? __pfx_task_work_run+0x10/0x10
[  589.988955][T27473]  ? __pfx___fput_deferred+0x10/0x10
[  589.988974][T27473]  ? __pfx___file_ref_put+0x10/0x10
[  589.988992][T27473]  get_signal+0x1d1/0x26d0
[  589.989008][T27473]  ? fput+0xb8/0xd0
[  589.989026][T27473]  ? __sys_sendto+0x2b1/0x520
[  589.989045][T27473]  ? __pfx___sys_sendto+0x10/0x10
[  589.989064][T27473]  ? __pfx_get_signal+0x10/0x10
[  589.989085][T27473]  arch_do_signal_or_restart+0x8f/0x790
[  589.989105][T27473]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  589.989134][T27473]  exit_to_user_mode_loop+0x84/0x110
[  589.989156][T27473]  do_syscall_64+0x41c/0x4c0
[  589.989170][T27473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.989184][T27473] RIP: 0033:0x7f15cf190d5c
[  589.989196][T27473] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  589.989211][T27473] RSP: 002b:00007f15d006aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  589.989224][T27473] RAX: 0000000000000020 RBX: 00007f15d006afc0 RCX: 00007f15cf190d5c
[  589.989234][T27473] RDX: 0000000000000020 RSI: 00007f15d006b010 RDI: 0000000000000009
[  589.989243][T27473] RBP: 0000000000000000 R08: 00007f15d006af14 R09: 000000000000000c
[  589.989252][T27473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  589.989261][T27473] R13: 00007f15d006af68 R14: 00007f15d006b010 R15: 0000000000000000
[  589.989286][T27473]  </TASK>
[  590.523923][T11054] HfR: left promiscuous mode
[  591.339360][T25970] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  591.436895][T11054] hsr_slave_0: left promiscuous mode
[  591.535215][T11054] hsr_slave_1: left promiscuous mode
[  591.689382][T11054] veth1_macvtap: left promiscuous mode
[  591.739130][T11054] veth1_vlan: left promiscuous mode
[  591.744429][T11054] veth0_vlan: left promiscuous mode
[  592.717850][T27597] FAULT_INJECTION: forcing a failure.
[  592.717850][T27597] name failslab, interval 1, probability 0, space 0, times 0
[  592.796402][T27597] CPU: 1 UID: 0 PID: 27597 Comm: syz.2.2128 Not tainted syzkaller #0 PREEMPT(full) 
[  592.796432][T27597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  592.796441][T27597] Call Trace:
[  592.796448][T27597]  <TASK>
[  592.796455][T27597]  dump_stack_lvl+0x16c/0x1f0
[  592.796482][T27597]  should_fail_ex+0x512/0x640
[  592.796503][T27597]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  592.796523][T27597]  should_failslab+0xc2/0x120
[  592.796542][T27597]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  592.796558][T27597]  ? alloc_empty_file+0x55/0x1e0
[  592.796582][T27597]  alloc_empty_file+0x55/0x1e0
[  592.796602][T27597]  path_openat+0xda/0x2cb0
[  592.796617][T27597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.796638][T27597]  ? __pfx_path_openat+0x10/0x10
[  592.796663][T27597]  do_filp_open+0x20b/0x470
[  592.796680][T27597]  ? __pfx_do_filp_open+0x10/0x10
[  592.796709][T27597]  ? alloc_fd+0x471/0x7d0
[  592.796729][T27597]  do_sys_openat2+0x11b/0x1d0
[  592.796749][T27597]  ? __pfx_do_sys_openat2+0x10/0x10
[  592.796769][T27597]  ? find_held_lock+0x2b/0x80
[  592.796784][T27597]  ? handle_mm_fault+0x2ab/0xd10
[  592.796802][T27597]  __x64_sys_openat+0x174/0x210
[  592.796815][T27597]  ? __pfx___x64_sys_openat+0x10/0x10
[  592.796834][T27597]  do_syscall_64+0xcd/0x4c0
[  592.796849][T27597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.796863][T27597] RIP: 0033:0x7f241ef8eec9
[  592.796875][T27597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.796889][T27597] RSP: 002b:00007f241fec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  592.796902][T27597] RAX: ffffffffffffffda RBX: 00007f241f1e5fa0 RCX: 00007f241ef8eec9
[  592.796912][T27597] RDX: 000000000008a100 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  592.796920][T27597] RBP: 00007f241f011f91 R08: 0000000000000000 R09: 0000000000000000
[  592.796929][T27597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.796936][T27597] R13: 00007f241f1e6038 R14: 00007f241f1e5fa0 R15: 00007ffc8fc41fa8
[  592.796954][T27597]  </TASK>
[  593.098370][T27595] random: crng reseeded on system resumption
[  593.135815][T27595] FAULT_INJECTION: forcing a failure.
[  593.135815][T27595] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  593.149190][T27595] CPU: 1 UID: 0 PID: 27595 Comm: syz.1.2127 Not tainted syzkaller #0 PREEMPT(full) 
[  593.149214][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  593.149223][T27595] Call Trace:
[  593.149229][T27595]  <TASK>
[  593.149235][T27595]  dump_stack_lvl+0x16c/0x1f0
[  593.149263][T27595]  should_fail_ex+0x512/0x640
[  593.149288][T27595]  should_fail_alloc_page+0xe7/0x130
[  593.149309][T27595]  prepare_alloc_pages+0x3c2/0x610
[  593.149330][T27595]  ? rcu_is_watching+0x12/0xc0
[  593.149347][T27595]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  593.149369][T27595]  ? stack_trace_save+0x8e/0xc0
[  593.149385][T27595]  ? __pfx_stack_trace_save+0x10/0x10
[  593.149402][T27595]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  593.149422][T27595]  ? kasan_save_stack+0x42/0x60
[  593.149436][T27595]  ? kasan_save_stack+0x33/0x60
[  593.149454][T27595]  ? do_dentry_open+0x982/0x1530
[  593.149470][T27595]  ? vfs_open+0x82/0x3f0
[  593.149488][T27595]  ? path_openat+0x1de4/0x2cb0
[  593.149503][T27595]  ? do_filp_open+0x20b/0x470
[  593.149517][T27595]  ? do_sys_openat2+0x11b/0x1d0
[  593.149536][T27595]  ? __x64_sys_openat+0x174/0x210
[  593.149547][T27595]  ? do_syscall_64+0xcd/0x4c0
[  593.149558][T27595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.149573][T27595]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  593.149593][T27595]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  593.149614][T27595]  ? policy_nodemask+0xea/0x4e0
[  593.149641][T27595]  alloc_pages_mpol+0x1fb/0x550
[  593.149661][T27595]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  593.149686][T27595]  alloc_pages_noprof+0x131/0x390
[  593.149706][T27595]  get_zeroed_page_noprof+0x18/0xb0
[  593.149726][T27595]  get_image_page+0x18/0x190
[  593.149741][T27595]  alloc_rtree_node+0x3c/0xb0
[  593.149755][T27595]  memory_bm_create+0x519/0x810
[  593.149776][T27595]  create_basic_memory_bitmaps+0xbd/0x320
[  593.149795][T27595]  snapshot_open+0x235/0x2b0
[  593.149812][T27595]  ? __pfx_snapshot_open+0x10/0x10
[  593.149829][T27595]  misc_open+0x35a/0x420
[  593.149845][T27595]  ? __pfx_misc_open+0x10/0x10
[  593.149861][T27595]  chrdev_open+0x234/0x6a0
[  593.149878][T27595]  ? __pfx_apparmor_file_open+0x10/0x10
[  593.149895][T27595]  ? __pfx_chrdev_open+0x10/0x10
[  593.149914][T27595]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  593.149934][T27595]  do_dentry_open+0x982/0x1530
[  593.149951][T27595]  ? __pfx_chrdev_open+0x10/0x10
[  593.149973][T27595]  vfs_open+0x82/0x3f0
[  593.149996][T27595]  path_openat+0x1de4/0x2cb0
[  593.150018][T27595]  ? __pfx_path_openat+0x10/0x10
[  593.150040][T27595]  do_filp_open+0x20b/0x470
[  593.150057][T27595]  ? __pfx_do_filp_open+0x10/0x10
[  593.150087][T27595]  ? alloc_fd+0x471/0x7d0
[  593.150107][T27595]  do_sys_openat2+0x11b/0x1d0
[  593.150128][T27595]  ? __pfx_do_sys_openat2+0x10/0x10
[  593.150156][T27595]  __x64_sys_openat+0x174/0x210
[  593.150169][T27595]  ? __pfx___x64_sys_openat+0x10/0x10
[  593.150189][T27595]  do_syscall_64+0xcd/0x4c0
[  593.150203][T27595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.150217][T27595] RIP: 0033:0x7f15cf18eec9
[  593.150230][T27595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.150244][T27595] RSP: 002b:00007f15d008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  593.150258][T27595] RAX: ffffffffffffffda RBX: 00007f15cf3e5fa0 RCX: 00007f15cf18eec9
[  593.150268][T27595] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c
[  593.150278][T27595] RBP: 00007f15cf211f91 R08: 0000000000000000 R09: 0000000000000000
[  593.150287][T27595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.150296][T27595] R13: 00007f15cf3e6038 R14: 00007f15cf3e5fa0 R15: 00007ffeabcd1868
[  593.150315][T27595]  </TASK>
[  593.921345][ T8143] Bluetooth: hci3: command 0x0c1a tx timeout
[  594.047750][T27603] svc: failed to register nfsdv3 RPC service (errno 111).
[  594.107623][T27603] svc: failed to register nfsaclv3 RPC service (errno 111).
[  595.677095][T27638] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  595.802301][T11054] team0 (unregistering): Port device team_slave_1 removed
[  595.940237][T11054] team0 (unregistering): Port device team_slave_0 removed
[  597.209910][T27674] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  597.225532][T27674] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  597.258909][T27674] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  597.301326][T27674] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  597.343120][T27674] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  597.374235][T27674] CPU0 is offline.
[  598.296889][T27783] random: crng reseeded on system resumption
[  599.039986][ T8143] Bluetooth: hci2: command 0x0c1a tx timeout
[  599.280102][ T8143] Bluetooth: hci3: command 0x0c1a tx timeout
[  599.358787][ T8143] Bluetooth: hci4: command 0x041b tx timeout
[  599.365219][T25970] Bluetooth: hci1: command 0x0c1a tx timeout
[  601.210211][T27905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  601.357548][T25970] Bluetooth: hci3: command 0x0c1a tx timeout
[  601.642583][T27900] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)

syzkaller
syzkaller login: [  603.493730][T28021] zswap: compressor 000 not available
[  604.242533][T28061] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2171'.
[  604.634903][T28091] vivid-007: =================  START STATUS  =================
[  604.692863][T28091] vivid-007: Generate PTS: true
[  604.736061][T28091] vivid-007: Generate SCR: true
[  604.751026][T28091] tpg source WxH: 320x240 (Y'CbCr)
[  604.796026][T28091] tpg field: 1
[  604.835000][T28091] tpg crop: (0,0)/320x240
[  604.857305][T28091] tpg compose: (0,0)/320x240
[  604.884666][T28091] tpg colorspace: 8
[  604.919423][T28091] tpg transfer function: 0/0
[  604.950252][T28091] tpg Y'CbCr encoding: 0/0
[  604.973026][T28091] tpg quantization: 0/0
[  604.994517][T28091] tpg RGB range: 0/2
[  605.013420][T28091] vivid-007: ==================  END STATUS  ==================
[  605.981896][T25970] bt_warn_ratelimited: 55 callbacks suppressed
[  605.981911][T25970] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1
[  607.030674][T28215] nvme_fabrics: missing parameter 'transport=%s'
[  607.030702][T28215] nvme_fabrics: missing parameter 'nqn=%s'
[  609.668056][T25970] Bluetooth: hci4: Unable to find connection for big 0xd2
[  609.806607][T28442] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2190'.
[  611.449679][   T30] audit: type=1804 audit(4294967470.178:22): pid=28457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2186" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=1110 res=1 errno=0
[  611.474411][    C1] vkms_vblank_simulate: vblank timer overrun
[  611.762580][T28537] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  612.177227][T28495] ------------[ cut here ]------------
[  612.183138][T28495] WARNING: CPU: 1 PID: 28495 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130
[  612.193855][T28495] Modules linked in:
[  612.198389][T28495] CPU: 1 UID: 0 PID: 28495 Comm: syz.4.2195 Not tainted syzkaller #0 PREEMPT(full) 
[  612.208052][T28495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  612.218366][T28495] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130
[  612.224995][T28495] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a
[  612.245624][T28495] RSP: 0018:ffffc9000ba97990 EFLAGS: 00010293
[  612.252515][T28495] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9
[  612.260893][T28495] RDX: ffff88805cb51e00 RSI: ffffffff81bfadcc RDI: 0000000000000005
[  612.269346][T28495] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000
[  612.277929][T28495] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888033b36408
[  612.285892][T28495] R13: dffffc0000000000 R14: ffffc9000ba97a28 R15: 0000000000000000
[  612.294170][T28495] FS:  0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000
[  612.303503][T28495] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  612.310619][T28495] CR2: 0000001b332b6ff8 CR3: 000000000e380000 CR4: 00000000003526f0
[  612.319049][T28495] Call Trace:
[  612.322510][T28495]  <TASK>
[  612.325439][T28495]  remove_vma+0x85/0x160
[  612.329883][T28495]  exit_mmap+0x511/0xb90
[  612.334121][T28495]  ? __pfx_exit_mmap+0x10/0x10
[  612.339084][T28495]  ? __lock_acquire+0xb97/0x1ce0
[  612.344775][T28495]  __mmput+0x12a/0x410
[  612.349553][T28495]  mmput+0x62/0x70
[  612.353265][T28495]  do_exit+0x7c7/0x2bf0
[  612.357791][T28495]  ? __pfx_do_exit+0x10/0x10
[  612.362385][T28495]  ? do_raw_spin_lock+0x12c/0x2b0
[  612.367991][T28495]  ? find_held_lock+0x2b/0x80
[  612.373151][T28495]  do_group_exit+0xd3/0x2a0
[  612.377982][T28495]  get_signal+0x2673/0x26d0
[  612.382478][T28495]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  612.388651][T28495]  ? __pfx_get_signal+0x10/0x10
[  612.393792][T28495]  arch_do_signal_or_restart+0x8f/0x790
[  612.399689][T28495]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  612.405849][T28495]  ? ksys_write+0x1ac/0x250
[  612.410666][T28495]  ? __pfx_ksys_write+0x10/0x10
[  612.415526][T28495]  exit_to_user_mode_loop+0x84/0x110
[  612.421064][T28495]  do_syscall_64+0x41c/0x4c0
[  612.425647][T28495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.431798][T28495] RIP: 0033:0x7fbda518eec9
[  612.436193][T28495] Code: Unable to access opcode bytes at 0x7fbda518ee9f.
[  612.443392][T28495] RSP: 002b:00007fbda5f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.452573][T28495] RAX: 0000000000000081 RBX: 00007fbda53e5fa0 RCX: 00007fbda518eec9
[  612.461107][T28495] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000027
[  612.469653][T28495] RBP: 00007fbda5211f91 R08: 0000000000000000 R09: 0000000000000000
[  612.478376][T28495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.486361][T28495] R13: 00007fbda53e6038 R14: 00007fbda53e5fa0 R15: 00007ffdb1b80578
[  612.494602][T28495]  </TASK>
[  612.497832][T28495] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  612.505093][T28495] CPU: 1 UID: 0 PID: 28495 Comm: syz.4.2195 Not tainted syzkaller #0 PREEMPT(full) 
[  612.514532][T28495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  612.524569][T28495] Call Trace:
[  612.527832][T28495]  <TASK>
[  612.530745][T28495]  dump_stack_lvl+0x3d/0x1f0
[  612.535330][T28495]  vpanic+0x6e8/0x7a0
[  612.539324][T28495]  ? __pfx_vpanic+0x10/0x10
[  612.543837][T28495]  ? tracing_buffers_mmap_close+0xdd/0x130
[  612.549630][T28495]  panic+0xca/0xd0
[  612.553339][T28495]  ? __pfx_panic+0x10/0x10
[  612.557769][T28495]  ? check_panic_on_warn+0x1f/0xb0
[  612.562882][T28495]  check_panic_on_warn+0xab/0xb0
[  612.567831][T28495]  __warn+0xf6/0x3c0
[  612.571718][T28495]  ? tracing_buffers_mmap_close+0xdd/0x130
[  612.577523][T28495]  report_bug+0x3c3/0x580
[  612.581858][T28495]  ? tracing_buffers_mmap_close+0xdd/0x130
[  612.587652][T28495]  handle_bug+0x184/0x210
[  612.591969][T28495]  exc_invalid_op+0x17/0x50
[  612.596454][T28495]  asm_exc_invalid_op+0x1a/0x20
[  612.601287][T28495] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130
[  612.607688][T28495] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a
[  612.627290][T28495] RSP: 0018:ffffc9000ba97990 EFLAGS: 00010293
[  612.633363][T28495] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9
[  612.641380][T28495] RDX: ffff88805cb51e00 RSI: ffffffff81bfadcc RDI: 0000000000000005
[  612.649434][T28495] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000
[  612.657408][T28495] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888033b36408
[  612.665440][T28495] R13: dffffc0000000000 R14: ffffc9000ba97a28 R15: 0000000000000000
[  612.673421][T28495]  ? __pfx_tracing_buffers_mmap_close+0x10/0x10
[  612.679679][T28495]  ? tracing_buffers_mmap_close+0xc9/0x130
[  612.685498][T28495]  ? tracing_buffers_mmap_close+0xdc/0x130
[  612.691315][T28495]  remove_vma+0x85/0x160
[  612.695559][T28495]  exit_mmap+0x511/0xb90
[  612.699811][T28495]  ? __pfx_exit_mmap+0x10/0x10
[  612.704584][T28495]  ? __lock_acquire+0xb97/0x1ce0
[  612.709559][T28495]  __mmput+0x12a/0x410
[  612.713640][T28495]  mmput+0x62/0x70
[  612.717365][T28495]  do_exit+0x7c7/0x2bf0
[  612.721538][T28495]  ? __pfx_do_exit+0x10/0x10
[  612.726188][T28495]  ? do_raw_spin_lock+0x12c/0x2b0
[  612.731225][T28495]  ? find_held_lock+0x2b/0x80
[  612.735909][T28495]  do_group_exit+0xd3/0x2a0
[  612.740411][T28495]  get_signal+0x2673/0x26d0
[  612.744945][T28495]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  612.750852][T28495]  ? __pfx_get_signal+0x10/0x10
[  612.755718][T28495]  arch_do_signal_or_restart+0x8f/0x790
[  612.761278][T28495]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  612.767449][T28495]  ? ksys_write+0x1ac/0x250
[  612.771954][T28495]  ? __pfx_ksys_write+0x10/0x10
[  612.776815][T28495]  exit_to_user_mode_loop+0x84/0x110
[  612.782117][T28495]  do_syscall_64+0x41c/0x4c0
[  612.786712][T28495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.792638][T28495] RIP: 0033:0x7fbda518eec9
[  612.797051][T28495] Code: Unable to access opcode bytes at 0x7fbda518ee9f.
[  612.804052][T28495] RSP: 002b:00007fbda5f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  612.812448][T28495] RAX: 0000000000000081 RBX: 00007fbda53e5fa0 RCX: 00007fbda518eec9
[  612.820421][T28495] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000027
[  612.828398][T28495] RBP: 00007fbda5211f91 R08: 0000000000000000 R09: 0000000000000000
[  612.836358][T28495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  612.844361][T28495] R13: 00007fbda53e6038 R14: 00007fbda53e5fa0 R15: 00007ffdb1b80578
[  612.852558][T28495]  </TASK>
[  612.855632][T28495] Kernel Offset: disabled
[  612.859966][T28495] Rebooting in 86400 seconds..