last executing test programs:

9m20.541103399s ago: executing program 1 (id=288):
r0 = socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="02002abd7000ffdbdf2502000000040002001c00048005bc48242d10b34cfb6a801306b44fd2162bb3596680cddf080007000010000008000100"], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x4008004)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

9m20.096826474s ago: executing program 1 (id=291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r2)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
setsockopt$auto(r2, 0x6, 0xc, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b)
read$auto(r5, 0x0, 0x2)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x14, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)

9m19.776240232s ago: executing program 1 (id=293):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x41c03, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x8}, 0x3, 0x0)
socket(0x5, 0x5, 0x7f)

9m19.260281219s ago: executing program 1 (id=295):
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) (async)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
pread64$auto(r1, 0x0, 0x8, 0x5006)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x3, 0x6)
clone$auto(0x200, 0x2, 0x0, 0x0, 0x2) (async)
clone$auto(0x200, 0x2, 0x0, 0x0, 0x2)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) (async)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x23, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x11, 0x3, 0x9) (async)
socket(0x11, 0x3, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r4=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)

9m15.751446073s ago: executing program 1 (id=311):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) (async)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
socket(0x28, 0x804, 0x0) (async)
socket(0xa, 0x5, 0x0) (async)
socket(0x1e, 0x1, 0x0) (async)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4fa0b, 0x3, 0x3, 0x62, 0x0, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async)
sysfs$auto(0x2, 0xe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = open(0x0, 0xeee00, 0x31)
unshare$auto(0x40000080) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000010c0), r2) (async)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
open_tree$auto(r2, &(0x7f0000000080)='./file0\x00', 0x0) (async)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) (async)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b52, 0x1) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4096, 0x1000) (async)
mmap$auto(0x0, 0x2020009, 0xb, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x10, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})

9m14.59677019s ago: executing program 1 (id=317):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, 0x0, 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc5, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0x1, 0x0, 0x5, 0x5, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0x2003f0, 0x15)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
memfd_create$auto(0x0, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r3 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0xa013, &(0x7f0000000100)={&(0x7f0000000140), 0x49}, 0x4, 0x0, 0x5, 0x1}, 0x1}, 0x5, 0x100)

9m14.17144896s ago: executing program 32 (id=317):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, 0x0, 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc5, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0x1, 0x0, 0x5, 0x5, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0x2003f0, 0x15)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
memfd_create$auto(0x0, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r3 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0xa013, &(0x7f0000000100)={&(0x7f0000000140), 0x49}, 0x4, 0x0, 0x5, 0x1}, 0x1}, 0x5, 0x100)

7m49.063282777s ago: executing program 3 (id=628):
mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
write$auto(r0, 0x0, 0xfffffdef)
close_range$auto(r0, r0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
socket(0x32, 0x2, 0x9)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14760900", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0)
setreuid$auto(0x80000000, 0x7fffffffffffffff)
ioctl$auto_SNDCTL_DSP_POST(r3, 0x5008, 0x0)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0x20901, 0x0)
openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy1/hwsim/dfs_simulate_radar\x00', 0x14802, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
setreuid$auto(0x7, 0x806)
ioctl$auto(0x3, 0x8b0b, 0x91)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x101, <r5=>0x0})
keyctl$auto(0x7, 0xfffffffb, 0x2, r5, 0x8)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
sendfile$auto(r6, r6, 0x0, 0x4456)

7m48.288254599s ago: executing program 3 (id=630):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (fail_nth: 12)
mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)

7m47.385517431s ago: executing program 3 (id=635):
mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000)
mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xb}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "00000000000010000000aaf7"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004084)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x400}, 0x5)
mmap$auto(0x1, 0x7, 0x4, 0x7fff, r0, 0x16)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0xea)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
ioctl$auto(r5, 0x5523, r5)
r6 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0)
writev$auto(r6, &(0x7f0000000140)={0x0, 0xe4}, 0x4)

7m46.177465881s ago: executing program 3 (id=642):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
semctl$auto(0x80001ff, 0x804, 0x3, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f00000008c0)={0x7, 0x3, 0x3}, 0xa2b, 0x0)
landlock_restrict_self$auto(r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00')
clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)

7m45.839835979s ago: executing program 3 (id=644):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (fail_nth: 13)
mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)

7m44.783449701s ago: executing program 3 (id=649):
mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x80010001)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0x8a00, 0x0)
ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r2, 0x5522, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, 0x0, 0x6b)
io_uring_setup$auto(0x6, 0x0)

7m44.521526411s ago: executing program 33 (id=649):
mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x80010001)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0x8a00, 0x0)
ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r2, 0x5522, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, 0x0, 0x6b)
io_uring_setup$auto(0x6, 0x0)

6m5.774949294s ago: executing program 5 (id=994):
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
r0 = open(0x0, 0x261c2, 0x84)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0)
read$auto(r1, 0x0, 0x1ff) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
r2 = socket(0xa, 0x2, 0x88) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r2}, 0x10) (async)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, <r3=>r0, 0x0, 0x3}, 0xc)
bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf)
syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r3) (async)
socket(0xa, 0x2, 0x0)

6m5.596959487s ago: executing program 5 (id=995):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyd0/power/runtime_suspended_time\x00', 0x42100, 0x0)
read$auto(r0, 0x0, 0x20)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
write$auto(0x3, 0x0, 0xfdef)

6m5.398910956s ago: executing program 5 (id=997):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xfffffffffffeffff, 0x15)
mprotect$auto(0xfffffffffffffffe, 0x7d, 0x8)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0)
read$auto(r0, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001)
readlink$auto(&(0x7f0000000040)='./file2/file0\x00', 0x0, 0x6)
r1 = socketpair$auto(0x1, 0x3, 0x5, 0x0)
adjtimex$auto(&(0x7f0000000300)={0x7, 0x0, 0xfffffffffffffff3, 0xffffffffffff7fff, 0x3, 0xa769, 0x6, 0x0, 0x400, 0xfffffffffffffff9, 0x8000, {0x7, 0x3b}, 0x3, 0x80, 0x5795, 0x323, 0x0, 0x2, 0xffffffffffff0000, 0x3, 0x8, 0x3c, 0x5})
ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff)
readlink$auto(0x0, 0x0, 0x800)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0)
pread64$auto(r2, 0x0, 0x100000001, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2c0, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x28, 0x5b, "9eac768ecddcdb943da0081899d89875ea6e966ed0d71b7cb7130439b893bb20dc6dcf94"}, @NL80211_ATTR_MESH_CONFIG={0x27a, 0x23, 0x0, 0x1, [@nested={0x1d2, 0x107, 0x0, 0x1, [@typed={0xc, 0x56, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x40}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}}, @nested={0x4, 0x6f}, @generic="0d902a24fe544a7c36fb2dfe5ae023ff7299c5a22da63856fffb7e81a9bdcac63955a3eddbee37c157f1a0e36bcd052f74ebb60a609e2a7e19c7b92cb6370fb9a6fca7d11ec15f7624790ac3bc62c73c29c1655adeb0d472696f416cda58d1d50537bb7a284a0cc77ba3ef5500bd1a95b4fe20c76a7e5651265c20014c61b5922b5bcc3deaabb2575e774af951ecad128a8d328cbda96892dca8d436ff1170fd377bc5afafec4424cb4e", @generic="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", @nested={0x4, 0xc3}, @nested={0x4, 0x2f}, @nested={0x4, 0x140}]}, @generic="bd355fabd02691695846a08754ecad520699be31aed8d89e85a562e0af16d14bbfb3bfccf7e81f3c58f76404349c98c92c0055686294d220abe5b2701180bd1715f09ccf91139d246d583eea3c9db1f6c42a98b26e33d4b058aaa09fbbd4ed79ea69e9a4afed38da777e52cc6384e6a6c7fc86eff601fedc2936e28fbbc019abc5524efccb8f4362a7f9ece165b7a01c696a64120e090cf1478dd921053949e4ef4d"]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x81}, 0x40)
ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf25080003000800", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)
mmap$auto(0x0, 0x6, 0x5, 0x14, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x8000000000000000, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x401, 0x1, 0xdf, 0x16, 0xffffffffffffffff, 0x0)

6m3.860131924s ago: executing program 5 (id=1002):
socket(0xa, 0x1, 0x100)
io_uring_setup$auto(0x1, 0x0)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x8008800)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x260bc0, 0x0)
ioctl$auto_BLKPG2(r1, 0x1269, 0x0)
setreuid$auto(0x0, 0xee00)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xe3, 0x400000000a, 0x200000003}, 0x6f1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2324f35cf549403, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x572, 0x400, 0x2}]})
pidfd_send_signal$auto_SIGCONT(r2, 0x12, &(0x7f0000000040)={@_si_pad}, 0x9)
arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x3)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffff9, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)

6m3.396223785s ago: executing program 5 (id=1003):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x8000001b, 0x80000003, 0x2}, 0x0, 0x6, 0x1)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x81}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @multicast}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x4}, @HSR_A_IF1_AGE={0x8, 0x3, 0x3e}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x6}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/icmp6\x00', 0xa00, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r1 = pidfd_open$auto(0xffffffffffffffff, 0x6)
r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), r0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xffffffffffffff43, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, r2, 0x8, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

6m3.202011871s ago: executing program 5 (id=1004):
mmap$auto(0x0, 0x800000000000003, 0x4000000000df, 0x40000000040ebd, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x5, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.5/usb6/busnum\x00', 0xa400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/178, 0xb2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="752f129482de7a87fd6606"], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x48000)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x100, 0x0)
getdents64$auto(r4, &(0x7f0000000080)={0x2, 0x3ff, 0x7, 0x2, "0893cec5dacae7d17668f0ea05787c000963ba0d3c47df3dd391e84c0e902379499f91d4559a353bdf867681fe260c0317368ede1f97"}, 0xff)
fsopen$auto(0x0, 0x1)

5m48.045370996s ago: executing program 34 (id=1004):
mmap$auto(0x0, 0x800000000000003, 0x4000000000df, 0x40000000040ebd, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x5, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.5/usb6/busnum\x00', 0xa400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/178, 0xb2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
ioperm$auto(0x7, 0x5ad2, 0x8)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="752f129482de7a87fd6606"], 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x48000)
r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x100, 0x0)
getdents64$auto(r4, &(0x7f0000000080)={0x2, 0x3ff, 0x7, 0x2, "0893cec5dacae7d17668f0ea05787c000963ba0d3c47df3dd391e84c0e902379499f91d4559a353bdf867681fe260c0317368ede1f97"}, 0xff)
fsopen$auto(0x0, 0x1)

8.603767152s ago: executing program 2 (id=2256):
r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000)
sysfs$auto(0x3, 0xd, 0x99)
r1 = fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
unshare$auto(0x40000080)
r2 = socket(0xf, 0x80000, 0x7fffffff)
setsockopt$auto(r1, 0x0, 0x1b, 0x0, 0x56b)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
socket(0x2, 0x5, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x4, 0xffffffc0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5)
mmap$auto(0x53, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
madvise$auto(0xffdffffffffffffc, 0x200006, 0x0)
setresuid$auto(0x0, 0x7, 0x0)
socket(0x2b, 0x2, 0x20a)

7.586532375s ago: executing program 0 (id=2260):
unshare$auto(0x1)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
syslog$auto(0x3, 0x0, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x210000, 0x0)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
clock_nanosleep$auto(0x0, 0x7, 0x0, &(0x7f0000000140)={0x9, 0x100})

6.320842516s ago: executing program 2 (id=2263):
r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0)
read$auto_suspend_stats_fops_(r0, &(0x7f00000004c0)=""/200, 0xc8)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000000)=0x8001)
mmap$auto(0x0, 0x7, 0x1, 0x17, r1, 0x10002)
ppoll$auto(0x0, 0x2f9638f3, &(0x7f0000000080)={0x66e2, 0x512d}, &(0x7f0000000100)={0x3ff}, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
r2 = socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
socketpair$auto(0xaf, 0x8, 0x3, 0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @local}, 0x54)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00f50000893e8222b6fd435937a093c74762b998199f2c45653cdc2a3ad20c1a966366ea4e86aa27f889a8b6a26af9be0daa59dc00b684bdadf2b4835fbaa33d1134703210ea7953efb382b860cf5b1db599e8e8a99895b005f796948efa639cf29fcd30dc6df610e10ddcfdbe20ecf57c0600000000000000cc70ef759a353dbab763b78afa4df8b41cd71d70361ec1eaebf7f2bf6fdac170db0c775bf0176b1ff19c43bb8bdffc1248ac5c2fa4386c6f34dcb52ade", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
socket(0xa, 0x1, 0x100)

6.067807492s ago: executing program 0 (id=2264):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
sendfile$auto(r0, r1, 0x0, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
read$auto(r2, &(0x7f0000000180)='!]\x00', 0x7fff)

5.169922734s ago: executing program 0 (id=2267):
mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x3, 0x4)
io_uring_setup$auto(0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r1)
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000006f04bcfa229e5c45b29fbe58d78c8d5870946cbe227b690a21476351642dfc7b355d6cdb69c36b58d84730dfe045b0a3bb987d273aa5f21ac611754ef7b01cdcac7f4cf045f15035982038f2732cc6e6a82948ea79acc3d812063576a5e6783ef8e351911bc038641e", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250100000008000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8100)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r3 = signalfd$auto(r0, &(0x7f0000000040)={0x9}, 0x5)
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0)
lseek$auto(r3, 0x3be, 0xb)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r4)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="09ae26759b0b9c404cf16e9a0bc726000894c4be0b02f361b28e57751f7e295b0350e6f5dbf95cb3a01e3cd142766852ef858a4f9ace145bfa5c0e64ea680824f1fac896869f55790d0270db6823cc3e99ac7d3f3bc8c1f22b76c19e9091e4c21543463aa46926b6c6ea451fbd19f77e219ae0f3d2090f196dab89155cffcd66d2bfa56d447c3525c9b1deaf51bfe55bd777b4abfa014d"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syz_tun\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)

5.049930492s ago: executing program 2 (id=2268):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) (async)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) (async)
socket(0x1d, 0x5, 0x3d56) (async)
ioctl$auto(0x3, 0x5605, r0)

4.809001016s ago: executing program 2 (id=2269):
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye7\x00', 0x800, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0x26, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x3, 0xff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000180101801400020073797a5f74756e0000000000000000000500020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
socket(0x2, 0x3, 0x2)
socket(0x2c, 0x5, 0x0)

4.71011333s ago: executing program 4 (id=2270):
r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000)
sysfs$auto(0x3, 0xd, 0x99)
r1 = fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
unshare$auto(0x40000080)
r2 = socket(0xf, 0x80000, 0x7fffffff)
setsockopt$auto(r1, 0x0, 0x1b, 0x0, 0x56b)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$auto_SO_MAX_PACING_RATE(r2, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
socket(0x2, 0x5, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x10, 0x4, 0xffffffc0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5)
mmap$auto(0x53, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
madvise$auto(0xffdffffffffffffc, 0x200006, 0x0)
setresuid$auto(0x0, 0x7, 0x0)
socket(0x2b, 0x2, 0x20a)

4.431508605s ago: executing program 6 (id=2271):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mlock$auto(0x8001, 0xb)
mlock$auto(0x7c88, 0x7fff)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f)
io_uring_setup$auto(0x8000, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, 0x0, 0x2e, 0x0, 0x7, 0x1083}, 0x5}, 0x2, 0x100)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
acct$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_submit$auto(0x0, 0x400000000000007f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x81, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffbfe, 0x2, 0x8, 0x0, 0x6})
writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
read$auto(r0, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)

4.088009849s ago: executing program 0 (id=2272):
unshare$auto(0x1)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
syslog$auto(0x3, 0x0, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x210000, 0x0)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
clock_nanosleep$auto(0x0, 0x7, 0x0, &(0x7f0000000140)={0x9, 0x100})

3.810137675s ago: executing program 6 (id=2273):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0)
r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0)
write$auto_drm_edid_fops_drm_debugfs(r0, &(0x7f00000003c0)="b7a53caf1b305860206af11a0ec35e7e5c46caffe279de8e9945d6e37dfaf9058103dbe387321e23d5cf1c271069baa482db442a5748c1fec17e92c29d2df967f9c1ce0bd79ec3d67c9f0aff55674e238d4b83e2372ae3a03950aaa641f736e6f9065e5b9af9e2de49f8a01693aa28b5e53dd7d970575e42c6720cff2f6f9bf902968a36b1851ffc6497e410d51f340b92b74f972cd68de180f42bcfc5ac64a8977e242b9ca63c58d603fea4fad558f0071db6e24de9bda2b835957f69a06c0d0000000000000000d4b8db86be62388110e03ef34b1fadaffc761c3fa220cbc9bf9e94d03a0fe70ca30710a7b237632954060b9ebd27fd3f82f7c7dd8d16dbc8", 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000080), r1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r3, r2, 0x0, 0x7)
socket(0x10, 0x2, 0x4)
socket(0x2c, 0x2, 0x8b)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0)
read$auto(r8, 0x0, 0x39b8)
ioctl$auto(r6, 0x4008ae6a, r7)
sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x10008880)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'caif0\x00'})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0)
mmap$auto(0x1, 0xae, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000)

2.912137876s ago: executing program 4 (id=2274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x200c0000)
pwrite64$auto(r0, &(0x7f0000000180)=')@^/&%\x00', 0x100, 0x10)
ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)={0x3, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_CACHE_ID={0xd3, 0xfd, "bea504b2850e006778ec0ce6f984eeef350b777c0983e100f686e68969919285585ddb56e494c93f5c57d57b93a46dd49bdbb686f5885607c0a0683a8a07a30f7df63830e8dd759db95ec3d246305d4517e3ad8049941d6adeefe32f0037f838b9b86e1a35c11651c7f26ba140ed7f7ac03b59fb8ba0475daeb645ad415117dc4ebc525619783b5df279d331ad6d632244c1303044cc81bd571f2433bb442f10aa34138f7da326d730f44a7fa35506e6c8964c3c969730d0eb37ca03d3d35dfbb189af1d4a2c48d803bb951bca7dc4"}]}, 0xe8}}, 0x8010)
mmap$auto(0x1, 0xc9, 0x7ff, 0x9b4, r3, 0xf)
io_submit$auto(0xd1d7, 0x7ff, &(0x7f0000000440)=&(0x7f0000000400)={0x5, 0x7, 0x5, 0x9, 0x9, <r5=>r0, 0x100, 0x7, 0xa, 0x0, 0x0, r0})
r6 = bpf$auto(0x34d, &(0x7f0000000480)=@task_fd_query={0xffffffffffffffff, <r7=>r0, 0x2, 0x2, 0x7, 0x9, <r8=>r5, 0x5, 0x5}, 0x800)
ioctl$auto(r0, 0x2, r5)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/tracing/set_event\x00', 0x395a00, 0x0)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r5)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000002700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000026c0)={&(0x7f0000000600)={0x2090, r9, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, "909bf02be0f7a3a6edb01af75921bd9745451eb688"}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_MLD_ADDR={0x1004, 0x13a, "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"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "a57740c20cd25f1f6b5307efab694541784d791ffd81ee73e43ef4663b1deb0e7c2bbef3281b099fc53a2325e3fdc5a68f771bf5a5d2942775164778c4340fd1274bdd20962c4d31c5904197a1040a1ec7fdcd353e46b376ad7f2858486a5080ab671d51077e0ce93e9587112e25ba101c8c9c012a2696f94230f077ef039a95165a3e800e200c19d66b281772b526dd3f4c87f366679387a593118e49e7cb5d6744ac77cbba770c3600283939a33c03a5ae696c72a40e6162b4edd155e760ef5027c6933e5c435a5b56f30a853756cf46412c47dcf6c17056029fc0abb97a92b22a715ddf9ffb45c2d04785b96665147881568e34de617d4102e3453fa4f329d1a539c4d5308d82b6efddd842132f3a0cdef59628206a4022f25f584aecb6018fc1e799d3469c5bb3ce43e975514067507f5048bccdafb3ce8719cd809923ff9c1a05c0c41876b6a76dd11fc3127e7ea4c88912f156c9f8353442a91e71e5e343ca7386dc4eaba9747fea369ec25bea0e03be12a0bee0af8d820c02a2ce5b610d0c67e254ad8773758059484ce5f3824b498a059f38ded5032fa5f2523b6c6e6513febe975353f4cdc2b703d2a02ee1a24f135466c1cd6760001a930d8d7c22d759a565fd66f46f2cc3dc39e3539e7be29c4765ca649800245fe2dec58991508ed5979d1bd07c51bb4216891c4340dacaef29cdbf067fc324edd46f84d4164185350bac5c181293b1fe805a8708bade72db3ca50b82ed2f3e898eb9280a5c1184e306ee06b831ccdd5c720a6627ff6bf604a5127836052f5175d05e7acd0aea150da886a0275388d6d873313dec586d24c5260b930e50b3295169f607c23c23f6e48a96e45175354b3c24ed1364b25d30bce97108cbc28fe768e626538ad1d716ccf6e62eaa5ea6e9b0a8f0006774ebd829020cb5e8d4fc8abcf91d7c5cb71acd29692132ec69a46644c647f65d5a346b32483c054bca0173f51bff6d2320da49bfa11bd272ab0cfce71148b9c79e99ae735acf8c945f369f1c3acb3c7ee8b4d5201c5586d77d6f6c4c765593ec66d09c16c8fd04ae5821e4ccd16071e8a1a81e7667f4883613b6c44c260d13c0d8bbefeea27e516a7974479fd0d642e8f70a06386e7b024edc4986319414f17fd9a353b02be3e4c72887cf7c1d1ec4e1bab196676284b1747cc80098fa8ac4dfe1836c6b9bdd6402a5948aba1eb2d6311629125d89fc3b219106a20729ab0a36fc4902eb7ab2b64f919828ab956fdaca65411e1755bdb8a526755d2b525c7794f221576714b3b4de5e2c2d027e288a23661005dee9c6252b9f7b695bdcbc30fadb5be3573b5b77fbe49fd8a8eee5b8dc419dfedfb9258bb0f53e815e2bbac2c90e2fdd07d242d9b221388e09eab3161428aba51656ae7c1307d4b7f96487b12f0034fe6026bb8d65ad819e113fc990005acce49ad4605158a326e49bcfa4019fca43f732cbcdb6559d73b6dee0349b8fe2af1494539fe445daa63724d8b42ae063daa74d9e38df9a4e01a9680f5a9e82cf6878ea4e46b36018e3cae6053a6205bc84a1bf35218a3137a0b5d5087f5edb2067b97718f7f5779556930b15a6bb900f89044f03947e2950cf9031c152b56648812c08d9806ae81c6ef59bb6fc96d9355c46c32acef3bdd577ea2e89cc29827e072effedb4db07673505a134bc15e2918bd52ce97dd576dec8cdd352e37e6d1ed13f6ded20aced3030dcfd9602496a39715ae850c2f04e40dca768857f4594a125fbd4ee01ed38590ae936f9ea1b8aff01d4a8230b9751109191b017e1e3694ace5d688258a8f70913c565593627eb34c6fe2dd7daab1b59171cff9b3dc722791303994e9d3f62619a5bc82799fc3a2891236f64df33437c7ac271f01432129539fac3a3250f5d09ba4d1fbda34604536c7e41e753f50c82fcb09c47762303addbfb09b4be589ee8fbeddce21b3f369610555bf56a626febddf663e1578eb29b16c173cb05e25b73d7002545b2d18f099b3257ebbe48926feceb12b97ade518bccc4a948dc427085d510e5b84eab0b05ea73cadd52b6809cf2ef23540aed2b0ca4e95f28259e667d81d0f77f5c1a7bb621bcba1fa46f3d8659dc726c71ccafac5889b0a6086717c39d07f9c4fd1337b5f88c1087a2e04b64860d675f840e829b05e0be6f493636cd7aed6d6d47dcbec42d2699c3fa538d96e1bcb44b1112688933a5b852638aa05adb7648ba5e07d651571bd6db2850609af0a3457c3dae25e5cea8791ee0f33b18337327f9a24433479399207e308abddea8cc8ce94ea3a1d0380653a138ab9833669880404915ed47a50dc6d66b14f5119edacd107eab22e6aba4a9fadaaf3d162201ce170b37f28c426360acaba0315c1c40107fe335a1f88285809e9f1f61763ad2f04d1b809bd62d8bfacad30d7a113baa18651629cc72be628bc2d3c94cd72ffd04c90f9afdb411f4ecf4a74eee350db2914935c362fde229963b8a8d8bac7bf4926f034b020bf31cb37f9ac63c8eaecb91c5ee7f913fe4f879c563aa47806927412375679f0d7131c93c44bf15ff9a4d3f51ebb4fa90049b14b970e784bd73df52b7947c4bdae31bf67a42b1ca7d0143fbc7fff2a8fb4d2b09d7c860a96b83279c3097c8ae26ba76cc84b53104cca9e38b08dc0b8f01a5fb1b79272793d0a40e26c2103ad867cf65de2d4d5405b0506633be086b8f014a3e5b6415cd758f6c6701670cb8d3b3091a08882e1d2cb7d894f1e34a1ecc2b87060685bc09aaeca93cfeb3c6e8890d77c36dd493aca25e26d61a67701f2d76d13640b82271f576fe178d34a54dc0dcc81957f62442b429cd92df5c58c236137685bff1d602c2c63633f8441bc4cdfe2f3a1555841dfc77978ead0d4d54d7ced09c648fc10a4c119f9484e071f9847cb2aed5cc7ce3463a708d7c4b10a17344f6d159efdaab3c96cf91cd9c6b676a1b4dbfbbb828ad6ede99e54bc3834429a46394c1ffe159756885fb07f8da36a7a0875eb3acb814c43078eb87213e1964b30779e515bbecff7eba1650d2e59bd0bd273ebf16ccb4be758d595937d579c30b0c87b741b8eeaee026982091c5debde61c201a83b476676632b2e43f15319ea15c8238e97c69365f2b008d93277d6660c5a885370f79e753b936264c5768b9c114ca65a6802ce009f6a616637c5e66d284980dabcc18829451cc270bdfc7346b81711431a66258d72b9baaeb934a4e7976d6316b92085edf0646b3dc7abcbd4f83b0d8b575e593374a88dbc98de92a045aca67379d3c1b87bbb8f99a0a3e6c42de3e71a895c8bb753775568be60e558538e3c5003ec9e14a4861db0260ce644d45e3fb4545b45ae9d22c544e0e86501cc017135bc51de8233417c1f6776c758c990124175600942d58b90efc88de27d5e4d1b62ad5d1eb99ccfa683c86df2bd4583cf72ffd51713154df10eeb42153a7270301faf3836cb024216020836dda0b1226f8e3e45ee1eb8ecfe27b08c35859182807ee1b8036df43b6096a9eb77e0b5ce121ac5fa34a8c61dff936872fcf8826f2f7b3fa85dc306f29651fcf0c60b111dffd227842a7effc523334c4b37b3d858afa424fd219316b1c7ff40a6075d67f7d5cee743cf4081b04fa7ac403ca3413f1846b621744ba0d65ef4ce9bb5ffc3b9a8289a893b2199e49ed9ee8ca1b345c363496eb4af2880817d1af4d1c21cc0af8d59c03008f177d41a6f6c72ecc94875b397f63422cf277803aa2a3e55520b924a7d566112f88b8b8f833f0fce9283a6ecda0fa9d3a04bad4051f9dfc231ea73ec090d61167bb2b9997d3a4f1fb799414f520dd6c2f0b17a0a39432ddc5b73be902e35368ebf1ab2b1a3a572b0e6269c6d2b0f7a88e59d715f021956c7760d3fe3dc3da1afff0f69489ee056f74a64a1bf7ee601d18d7e5ba16ceaf4a3adc10dd34b0a1a96602c890bb2afd8cf37cd12c63b299e0a8daa2e09248666354d7c0be7376ab85324532f8b0a67170c03a7f04b46b685b8fad3e415151e27dc5defe7897049742203a6124c86caa508ee39548464ea22b2804e6c655cc661c369ca57068daf844211d24b30364f99c9698a33c6367a461df955e311d20b2847e50446010ae65f67a767a5349c88bcdeaafea205c45118199ea40b25302715c3ec766ac176369b613727a115fec2ef3815b016c3ffe5ab75cb01d069bf7a2083f415c8f5a3bd4385502386beeb21a83fa85ce4f45c7003c8b20096d2291a7ccb7a7638ddd29b08cd6e613e61279ffbd425b3189281294c6b3cbeb5ed110ce3143cde2424bf540d24f6db7f6a9cbf003f261e011d727330d598a2328b03e98d89706a3ca0f48107acc36aa845c9a0cbfbc6cffc8ac8ef7e26576fc3b624e5ef07c1c1ca0b0130eb2e8f08c3878d880b206ebd1f62b918a73728f64c64398780a019fc3926bbf914a1a245619fa197fe15abb279fb2b8ad12768d3aa3a80dc56f731515ff2bd7a39869fb9958abe2247cb89141c9cc73c5a9b188dc699f3383eaca264a6daa05d8c49b37342d513ccd8d919afe9b4202ad5b3f1c894bc0ad094fc08c54d60842ffe9cfdaf2c3fd62266e9cc79c960fbd7d012acd82720e92986fa3b3aa7624abd92fc544d901a0128d90f5f116312ed8c6eb9191ba1806b07523dbe999f11aff24fc81df6482327501caaad8e1d76228616fde670d5a8adba8b5ba2d4ae2f52b8f1fff05b63d630769a63a01cc757b07f09ed4a34c9ba6f207831f906a3c8b86a9f6d25b0a852a68bdd297c738138f11312789ceaba3072822bb8f16c905a7cd3af1763b201ff041246c87d3cb274504a03924bc04e962617cd4b81b799a165e3edf57a885ea4a1a7e86aaf219ca6b93333346a83deaa98d5fe95bb70ad8cd64b5e5e412aca4d54a8311ce606f91bc4c3000c881fe89fab759032a370b67753a46cf7963cf8cb0ba4a9fe763c9b83daca3de7f2e0b0fe4b0e7a4bee127ad4474b4f878a421cb3a9960831f8ed307bb352d731a05f62d04126ecc585b9e2d94978eda5d0ba21a0534a4f77edd56d9f074b780ad9fe6007ad47e410b07673b123761b77116d3fb0da45ea33b897c8faaf6681b400972d8cf0ad4204e9d8ea99f2c93c785e7895e14a6af4adf5019934f1f4c5cc1bebadc95f89a01a07a098308cfe3819440c4546ef72b141c6f28a12cdadb947c9a64d05e881abc722a9ddb6f557f6c70cf4161846f203941b7e326290d40a35653e4e839a80afba3c692cade7a451c23d2e1b6c22a3f66d52cae366958d8287548d8f03d4e5584b191f3da504d964b251f9bf9a37a98b4bf51d6bd1f234cbd5cb307779a752abdb4fd63f48fe1450dda1986b6f1092c9f36ffaaf4210a1e6580540ec1febe832aa96afb7d0c94f9c8ab4f334769d19f006757f6e03042f3cdf6e65663c80e836483d3b45e1bef5d875a9f63e363a0431b08a89e76f990388b84f389e18ea5140256e6ffa03b84252d5f190a13eb5d9bc91265cfbc82651724583f008f0f8ac98b3479423393741cce3c2640ec5296c245d982516cac693fc1e8a19b4e3017ade54267511dcdbcf9da9932d7c7d8c72f54bd3ea019e260f45310bd6ae7538bf23fc9acf46facd20413ff60d80e51f67ba1c2dbda22db0fa2ceeacf76e8dee5e5cf7c9e315504a4494e639668c93261badd577db938dff086bb082908fe5a204f51cf39ebed1c5e03a465e29d529118fbd5afcec7ce87c3148bb61703304351f2885741d87858d6f002782cf9e30b82cf528a19fbb7c93c94c24aa9d82effc2d5ca3772be"}, @NL80211_ATTR_FILS_NONCES={0x35, 0xf3, "c573061e12ad6ac74c8bf10bbfceddb565ae47934a4501fc3056e3ebad88b030a5bfc37aee2934902aedbbd668f7403356"}]}, 0x2090}, 0x1, 0x0, 0x0, 0x8001}, 0x40010)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002740)='/dev/dmmidi2\x00', 0x10002, 0x0)
r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000027c0), r6)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r6, &(0x7f0000003ac0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a80)={&(0x7f0000002800)={0x125c, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x1244, 0x3, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @str=':^!\x00'}, @generic="66c6524c1e2c08f558298e5f5df78a4a8b8c6d7a599109b35f15fb5c0259f849cbd6fb9c139e9b4298a549ccdf385d97cdc65b83b7c7b4067842d130fe664b501d3632610680e47df44b046088b9e1e6a27ba99777941b0e30de9067346e1f393d0d7c49d061682b411bd350cca8f63c1ca050c0ea7c01a72477ed091309043e66be82fe19d39e8ca7f94fcf31a28f679db0e0c55a914a1c91c3a747de365b865f22144717041b1ce96d2205d14f68d0068a5b03ece076eab8b7f5dc99a5a4619c2b4e089111ce", @generic="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", @nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0x2a}]}, @generic="0dd0c25230dd090975effbead658939d3f004340c219b3cf1a9709e896b6d4c3df230f4c8a7851a6f626cd4324ad434bc7c5579118f334dc30254ad82929e16eb179ec91012b5f11a5f336b0161db705de0c5d7807c4a490b588bddd6d10e189ae537bdc471cd52ef20eb5b567c5911c0fd22c0504a84f9181f56370b7bb7bce2de5d91a9c0836d2a380053a0ec14ef185a804d68c1f44af751c0f51e75fb57f6482a3498bc3946f6504427c651744fce1f6a542a17702abca", @nested={0x4, 0xc6}, @typed={0xc, 0x99, 0x0, 0x0, @str='$#!#.*@\x00'}, @generic="a8ae47498c279c97c8755e542eda8bcb131f59ab1f16da37ec438e2f31a48971999fcdcf88258fdbc9ca37503f21fcdcd5f418bd3c8bcf43393dbd9009c4cebd2ad08798d1b367f34f4925ac6decdcd29b807e80e4386a8f60a94ca70e6a84c938e8d136837507c835c300286f1a75fa683bb033670a0f8b680d96e54bf476c06bcc130389f183a37288522ad323ee11", @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x125c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r7)
getsockopt$auto_SO_BROADCAST(r0, 0xf, 0x6, &(0x7f0000003b40)='\x00', &(0x7f0000003b80)=0x6)
sendmsg$auto_NL80211_CMD_START_AP(r7, &(0x7f0000004300)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000042c0)={&(0x7f0000003c00)={0x6b4, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x2bc, 0x7f, "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"}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x3e0, 0x80, "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"}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r11 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/failslab/space\x00', 0x40a000, 0x0)
write$auto_fops_atomic_t_(r11, &(0x7f0000004380)="af4cb7e99f655c8c8fe332784eaccdaad24940eb3845ea6dbde7fb18f02e7853a13f16230b3ffe9b5c1ccc8f49c9fabcbc5d8e413b12f28618d683c9631b025f8485a86ccec4602618600fab86369cef693774f7ec9f9b8d25be5c6cedd30a064e0a956cbee693aee863b83381a79ad2ec6faca4769771b0eb849eb5a9cd269b4cd3cb9ff51f109485a9be33fd0e0b2a64fa5a2c0743f9ac39831ecbf759ca505625004b11926451dc4e1cc4e450ae12473877a72f48f09ec7fae9bd60931b3b395762fd38070e7f3f4e9b19af1e5daef5f7c3c3349ece", 0xd7)
sendmmsg$auto(r6, &(0x7f0000004600)={{&(0x7f0000004480)="168cd50202ecaa3dc25c8a6b5a3a9229fcaabbc9be5274031b6f96b4324500e6b0a132721df105fc172ae8d7c75f66c8bc1ace6ae94362807f800d1434399635c16c6b2e8f9d201ea674eaee242669fcf55058c26577954325e44c91c0af011a8224a2f34d578c2d53e27571fb1c55f6e822a776f60af30cd0d613fe5878ea22", 0x402f4240, &(0x7f0000004540)={&(0x7f0000004500)="e71bdbef89eea3616ca917098905812a22df34f5c763066f5803e90464ab8e6465d4e7daa4a7cb4e1f78145a20700ed721c8940606e8dcfec7e486e14d", 0x8}, 0x1, &(0x7f0000004580)="eb925083d27afa53be5f8c06a272fffc14e6fde2d4f523d7bbe4803f554e725fbe6f7899f03addb272b1e6d22c45d35dd58c9636d2245c79d810e137afa42df5d6fa3dceced1ed", 0x2, 0xff}, 0x7}, 0xb67, 0x6)
socket(0x29, 0xa, 0xfff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000004680)={'bond_slave_0\x00', <r12=>0x0})
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r5, &(0x7f0000004840)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004800)={&(0x7f00000046c0)={0x140, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_START_CONTEXT={0x8}, @ETHTOOL_A_RSS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7dbe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_RSS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_RSS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x98}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x6}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x190}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x80000000}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c005}, 0x4805)
init_module$auto(&(0x7f0000004880)="8908957bcbf091f8da2970b5d59762d63f17289efd9ecf894a34599d887ec2b78784cff47597d3a7cb8a357e461b38f394334c8df8b3f2c0a1a1a5c012a7d7463b0382d0b3b5da8fef7b8674f5ce486c0e621eb1087734d785282e91cb1d47b1e30fcb01a7edce39acd32b68d22e291abff3188320a3799c6823e77992edc340981ffca25d5caa27d73763aacc0cb5334a0c5e07a98e566f970d419b733bfe5c874b23f02af2605d695c0f9f56edede0ff9245f249be985370d0db41a76cea849972cc849c6e0d5458a827", 0x6, &(0x7f0000004980)='/sys/kernel/debug/failslab/space\x00')
r13 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000049c0), 0x200000, 0x0)
setsockopt$auto(r13, 0x4, 0x3, &(0x7f0000004a00)='bond_slave_0\x00', 0xfff)

2.658213013s ago: executing program 4 (id=2275):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
read$auto(r0, &(0x7f0000000180)='!]\x00', 0x7fff)

2.455398438s ago: executing program 6 (id=2276):
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}}, 0x40000)
mmap$auto(0x8, 0x2020009, 0x3, 0x8eb1, r1, 0x8000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
getdents64$auto(r4, 0x0, 0x8004)
r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0)
write$auto_uprobe_events_ops_trace_uprobe(r5, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
read$auto(0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)={0x14, r3, 0x1, 0x2, 0x21dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)

2.382424591s ago: executing program 4 (id=2277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="64200000e0eabd1952dd49125ce11858ebc8636fc58a765fb11d98fb9b0e0c4ad6a609e9d79cab554fe6897b010dfcbbee4b0167e7d793f45cea3b2a53dc057712c8ba4c1e095fce06b5001db77a153562a5cd356808195aaf089d7a5c0d2e3382b8276ecf0c5ea50ee125a9eb813bb3318f99448ea2b8280d0625c8e78ce51c082de7a835ddb539ec205c31dd8d31e64de1df2650c09dbdb9f9a69a04136d38d23db01e31ae9df8a76b53d132369b", @ANYRES16, @ANYBLOB="040026bd7000ffdbdf250f0000004b2008800c1028800800de00", @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x2064}}, 0x4)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x7, 0x202000c, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = socket(0x22, 0x1, 0x800bfffe)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x8300, 0x0)
read$auto(r3, &(0x7f0000000240)='nl80211\x00', 0x7)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
r4 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x1, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xfffffff7, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, r4, 0x2000010001)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="13"], 0x1ac}}, 0x40)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ppoll$auto(&(0x7f0000000040)={r4, 0x3, 0xb}, 0x200, &(0x7f0000000080)={0x101, 0xcf4}, 0x0, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x200, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0))
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x400, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x20)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)

2.234189876s ago: executing program 0 (id=2278):
rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0)
r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/available_tracers\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x5, 0xfff)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$auto_SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000340))
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000)
kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000)
unshare$auto(0x40000080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000)

1.822326075s ago: executing program 0 (id=2279):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB, @ANYBLOB=']'], 0x1ac}}, 0x40000)
r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r4, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r4, 0x0, @_sigev_thread={0x0, 0x0}})
read$auto_proc_page_owner_operations_page_owner(r4, 0x0, 0x0)
r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/modules\x00', 0x101000, 0x0)
ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, 0x0)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0)
write$auto(r6, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b)
syz_clone3(0x0, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0)
write$auto(r7, &(0x7f0000000140)='+\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0x5c8)
sendfile$auto(r0, r0, 0x0, 0x4456)

1.796617667s ago: executing program 4 (id=2280):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x1d, 0xa, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r1, 0x40095505, &(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x7, 0x9, 0x8, 0x1})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x6, 0x61da, 0xffffffffffffffff, 0x18, 0xffffffffffffffff, 0x2000000000017fff)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000001100)=""/4096, 0x1000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev$auto(r3, &(0x7f0000000100)={0x0, 0x10}, 0x1)
madvise$auto(0x0, 0x20499d, 0x9)
r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$auto_RNDGETENTCNT(r4, 0x80045200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24040cd1)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder0\x00', 0x20800, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x5, 0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0)
ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x200002, 0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.525947378s ago: executing program 6 (id=2281):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1.145097878s ago: executing program 6 (id=2282):
mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x3, 0x4)
io_uring_setup$auto(0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r1)
sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000006f04bcfa229e5c45b29fbe58d78c8d5870946cbe227b690a21476351642dfc7b355d6cdb69c36b58d84730dfe045b0a3bb987d273aa5f21ac611754ef7b01cdcac7f4cf045f15035982038f2732cc6e6a82948ea79acc3d812063576a5e6783ef8e351911bc038641e", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250100000008000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8100)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
r3 = signalfd$auto(r0, &(0x7f0000000040)={0x9}, 0x5)
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0)
lseek$auto(r3, 0x3be, 0xb)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
capget$auto(&(0x7f0000000000)={0x19980330}, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r4)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="09ae26759b0b9c404cf16e9a0bc726000894c4be0b02f361b28e57751f7e295b0350e6f5dbf95cb3a01e3cd142766852ef858a4f9ace145bfa5c0e64ea680824f1fac896869f55790d0270db6823cc3e99ac7d3f3bc8c1f22b76c19e9091e4c21543463aa46926b6c6ea451fbd19f77e219ae0f3d2090f196dab89155cffcd66d2bfa56d447c3525c9b1deaf51bfe55bd777b4abfa014d"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syz_tun\x00'})
socket(0xa, 0x23af690fef30229, 0x9)
sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0)

363.193477ms ago: executing program 4 (id=2284):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f642, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
gettid()
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0)

362.791983ms ago: executing program 2 (id=2285):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
read$auto(r0, &(0x7f0000000180)='!]\x00', 0x7fff)

188.714µs ago: executing program 2 (id=2286):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0)
r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0)
write$auto_drm_edid_fops_drm_debugfs(r0, &(0x7f00000003c0)="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", 0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000080), r1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0)
sendfile$auto(r3, r2, 0x0, 0x7)
socket(0x10, 0x2, 0x4)
socket(0x2c, 0x2, 0x8b)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0)
read$auto(r8, 0x0, 0x39b8)
ioctl$auto(r6, 0x4008ae6a, r7)
sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x10008880)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'caif0\x00'})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0)
mmap$auto(0x1, 0xae, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000)

0s ago: executing program 6 (id=2287):
r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0)
read$auto_suspend_stats_fops_(r0, &(0x7f00000004c0)=""/200, 0xc8)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000000)=0x8001)
mmap$auto(0x0, 0x7, 0x1, 0x17, r1, 0x10002)
ppoll$auto(0x0, 0x2f9638f3, &(0x7f0000000080)={0x66e2, 0x512d}, &(0x7f0000000100)={0x3ff}, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
r2 = socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x1, 0x84)
socketpair$auto(0xaf, 0x8, 0x3, 0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @local}, 0x54)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00f50000893e8222b6fd435937a093c74762b998199f2c45653cdc2a3ad20c1a966366ea4e86aa27f889a8b6a26af9be0daa59dc00b684bdadf2b4835fbaa33d1134703210ea7953efb382b860cf5b1db599e8e8a99895b005f796948efa639cf29fcd30dc6df610e10ddcfdbe20ecf57c0600000000000000cc70ef759a353dbab763b78afa4df8b41cd71d70361ec1eaebf7f2bf6fdac170db0c775bf0176b1ff19c43bb8bdffc1248ac5c2fa4386c6f34dcb52ade", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
socket(0xa, 0x1, 0x100)

kernel console output (not intermixed with test programs):

alloc_mpol_noprof+0x36/0x2f0
[  371.978862][T11136]  vma_alloc_folio_noprof+0xed/0x1e0
[  371.978884][T11136]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  371.978906][T11136]  ? find_held_lock+0x2b/0x80
[  371.978926][T11136]  ? __handle_mm_fault+0x1092/0x5490
[  371.978955][T11136]  __handle_mm_fault+0x2f21/0x5490
[  371.978988][T11136]  ? __pfx___handle_mm_fault+0x10/0x10
[  371.979015][T11136]  ? __pte_offset_map_lock+0x174/0x310
[  371.979036][T11136]  ? find_held_lock+0x2b/0x80
[  371.979053][T11136]  ? find_held_lock+0x2b/0x80
[  371.979078][T11136]  ? follow_page_pte+0x3af/0x14c0
[  371.979106][T11136]  handle_mm_fault+0x589/0xd10
[  371.979137][T11136]  __get_user_pages+0x589/0x3b80
[  371.979166][T11136]  ? __pfx_mt_find+0x10/0x10
[  371.979185][T11136]  ? __pfx___get_user_pages+0x10/0x10
[  371.979217][T11136]  populate_vma_page_range+0x278/0x3a0
[  371.979243][T11136]  ? __pfx_populate_vma_page_range+0x10/0x10
[  371.979266][T11136]  ? __pfx_find_vma_intersection+0x10/0x10
[  371.979291][T11136]  ? do_mmap+0x69c/0x1210
[  371.979315][T11136]  __mm_populate+0x1d8/0x380
[  371.979340][T11136]  ? __pfx___mm_populate+0x10/0x10
[  371.979366][T11136]  ? up_write+0x1b2/0x520
[  371.979397][T11136]  vm_mmap_pgoff+0x362/0x450
[  371.979420][T11136]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  371.979441][T11136]  ? __pfx_sched_core_share_pid+0x10/0x10
[  371.979466][T11136]  ? __x64_sys_futex+0x1e0/0x4c0
[  371.979489][T11136]  ? __x64_sys_futex+0x1e9/0x4c0
[  371.979517][T11136]  ksys_mmap_pgoff+0x7d/0x5c0
[  371.979537][T11136]  ? xfd_validate_state+0x61/0x180
[  371.979562][T11136]  ? __pfx___do_sys_close_range+0x10/0x10
[  371.979595][T11136]  __x64_sys_mmap+0x125/0x190
[  371.979631][T11136]  do_syscall_64+0xcd/0x490
[  371.979664][T11136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.979685][T11136] RIP: 0033:0x7f859af8e929
[  371.979702][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.979722][T11136] RSP: 002b:00007f859be74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  371.979740][T11136] RAX: ffffffffffffffda RBX: 00007f859b1b5fa0 RCX: 00007f859af8e929
[  371.979754][T11136] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  371.979766][T11136] RBP: 00007f859b010b39 R08: 0000000000000002 R09: 0000000000008000
[  371.979778][T11136] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  371.979790][T11136] R13: 0000000000000000 R14: 00007f859b1b5fa0 R15: 00007ffc86ad40b8
[  371.979815][T11136]  </TASK>
[  372.705889][   T30] audit: type=1800 audit(6045892504.834:9): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.923" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  373.709620][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  374.686690][T11203] syz.2.932 (11203) used obsolete PPPIOCDETACH ioctl
[  375.243270][ T7527] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  375.243346][ T7527] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15
[  375.259341][ T7527] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  375.370572][T11216] FAULT_INJECTION: forcing a failure.
[  375.370572][T11216] name fail_futex, interval 1, probability 0, space 0, times 0
[  375.437301][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.0.936 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  375.437338][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.437354][T11216] Call Trace:
[  375.437362][T11216]  <TASK>
[  375.437372][T11216]  dump_stack_lvl+0x16c/0x1f0
[  375.437419][T11216]  should_fail_ex+0x512/0x640
[  375.437464][T11216]  get_futex_key+0x1d0/0x1540
[  375.437500][T11216]  ? __pfx_get_futex_key+0x10/0x10
[  375.437530][T11216]  ? __schedule+0x1181/0x5de0
[  375.437568][T11216]  ? __pfx___schedule+0x10/0x10
[  375.437621][T11216]  futex_wait_setup+0x9d/0x550
[  375.437674][T11216]  __futex_wait+0x194/0x2f0
[  375.437718][T11216]  ? __pfx___futex_wait+0x10/0x10
[  375.437766][T11216]  ? __pfx_futex_wake_mark+0x10/0x10
[  375.437810][T11216]  ? preempt_schedule_thunk+0x16/0x30
[  375.437847][T11216]  ? futex_private_hash_put+0xd0/0x240
[  375.437881][T11216]  futex_wait+0xe8/0x380
[  375.437919][T11216]  ? __pfx_futex_wait+0x10/0x10
[  375.437964][T11216]  ? __pfx___up_read+0x10/0x10
[  375.438002][T11216]  ? madvise_unlock+0xf6/0x190
[  375.438041][T11216]  do_futex+0x229/0x350
[  375.438075][T11216]  ? __pfx_do_futex+0x10/0x10
[  375.438109][T11216]  ? __pfx_do_madvise+0x10/0x10
[  375.438145][T11216]  __x64_sys_futex+0x1e0/0x4c0
[  375.438185][T11216]  ? __pfx___x64_sys_futex+0x10/0x10
[  375.438221][T11216]  ? xfd_validate_state+0x61/0x180
[  375.438268][T11216]  do_syscall_64+0xcd/0x490
[  375.438315][T11216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.438343][T11216] RIP: 0033:0x7f859af8e929
[  375.438364][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.438391][T11216] RSP: 002b:00007f859be740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  375.438417][T11216] RAX: ffffffffffffffda RBX: 00007f859b1b5fa8 RCX: 00007f859af8e929
[  375.438434][T11216] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f859b1b5fa8
[  375.438450][T11216] RBP: 00007f859b1b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  375.438466][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f859b1b5fac
[  375.438482][T11216] R13: 0000000000000000 R14: 00007ffc86ad3fd0 R15: 00007ffc86ad40b8
[  375.438516][T11216]  </TASK>
[  375.926367][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'.
[  376.335783][T11225] Invalid ELF header magic: != ELF
[  379.330262][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.948'.
[  379.477161][T11290] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[11290]
[  382.662727][T11368] netlink: 338 bytes leftover after parsing attributes in process `syz.2.967'.
[  382.880317][T11373] netlink: 296 bytes leftover after parsing attributes in process `syz.2.969'.
[  383.506410][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  383.523118][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  383.669145][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'.
[  383.678965][T11400] netlink: 25 bytes leftover after parsing attributes in process `syz.0.975'.
[  383.692426][T11399] ima: policy update failed
[  383.711513][   T30] audit: type=1802 audit(6045892515.824:10): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.975" res=0 errno=0
[  384.385972][T11426] FAULT_INJECTION: forcing a failure.
[  384.385972][T11426] name failslab, interval 1, probability 0, space 0, times 0
[  384.416418][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.5.980 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  384.416461][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  384.416478][T11426] Call Trace:
[  384.416487][T11426]  <TASK>
[  384.416498][T11426]  dump_stack_lvl+0x16c/0x1f0
[  384.416548][T11426]  should_fail_ex+0x512/0x640
[  384.416611][T11426]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  384.416659][T11426]  should_failslab+0xc2/0x120
[  384.416686][T11426]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  384.416729][T11426]  ? alloc_unbound_pwq+0x3ff/0xe10
[  384.416763][T11426]  alloc_unbound_pwq+0x3ff/0xe10
[  384.416800][T11426]  apply_wqattrs_prepare+0x3af/0xbd0
[  384.416843][T11426]  apply_workqueue_attrs_locked+0x64/0xe0
[  384.416874][T11426]  __alloc_workqueue+0xf41/0x1810
[  384.416915][T11426]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  384.416958][T11426]  alloc_workqueue+0xd2/0x200
[  384.416992][T11426]  ? __pfx_alloc_workqueue+0x10/0x10
[  384.417035][T11426]  ? __pfx___debug_object_init+0x10/0x10
[  384.417073][T11426]  nci_register_device+0x511/0xb80
[  384.417112][T11426]  ? __pfx_nci_register_device+0x10/0x10
[  384.417155][T11426]  ? lockdep_init_map_type+0x5c/0x280
[  384.417200][T11426]  virtual_ncidev_open+0x141/0x220
[  384.417234][T11426]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  384.417267][T11426]  misc_open+0x35d/0x420
[  384.417300][T11426]  ? __pfx_misc_open+0x10/0x10
[  384.417334][T11426]  chrdev_open+0x231/0x6a0
[  384.417375][T11426]  ? __pfx_apparmor_file_open+0x10/0x10
[  384.417410][T11426]  ? __pfx_chrdev_open+0x10/0x10
[  384.417459][T11426]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  384.417505][T11426]  do_dentry_open+0x744/0x1c10
[  384.417548][T11426]  ? __pfx_chrdev_open+0x10/0x10
[  384.417608][T11426]  vfs_open+0x82/0x3f0
[  384.417643][T11426]  path_openat+0x1de4/0x2cb0
[  384.417696][T11426]  ? __pfx_path_openat+0x10/0x10
[  384.417740][T11426]  ? __lock_acquire+0xb8a/0x1c90
[  384.417780][T11426]  do_filp_open+0x20b/0x470
[  384.417821][T11426]  ? __pfx_do_filp_open+0x10/0x10
[  384.417887][T11426]  ? alloc_fd+0x471/0x7d0
[  384.417935][T11426]  do_sys_openat2+0x11b/0x1d0
[  384.417966][T11426]  ? __pfx_do_sys_openat2+0x10/0x10
[  384.418011][T11426]  __x64_sys_openat+0x174/0x210
[  384.418041][T11426]  ? __pfx___x64_sys_openat+0x10/0x10
[  384.418088][T11426]  do_syscall_64+0xcd/0x490
[  384.418134][T11426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.418162][T11426] RIP: 0033:0x7f4ff238e929
[  384.418184][T11426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.418213][T11426] RSP: 002b:00007f4ff31e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  384.418237][T11426] RAX: ffffffffffffffda RBX: 00007f4ff25b5fa0 RCX: 00007f4ff238e929
[  384.418256][T11426] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  384.418274][T11426] RBP: 00007f4ff2410b39 R08: 0000000000000000 R09: 0000000000000000
[  384.418291][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.418306][T11426] R13: 0000000000000000 R14: 00007f4ff25b5fa0 R15: 00007ffd154a9f98
[  384.418341][T11426]  </TASK>
[  384.724442][    C0] vkms_vblank_simulate: vblank timer overrun
[  387.178428][T11541] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  387.220218][T11541] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  387.289713][T11541] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  387.302890][T11541] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  388.616017][ T7527] Bluetooth: hci0: command 0x0c1a tx timeout
[  389.258774][ T7527] Bluetooth: hci3: command 0x0c1a tx timeout
[  389.338186][ T7527] Bluetooth: hci1: command 0x0c1a tx timeout
[  389.344275][ T7527] Bluetooth: hci2: command 0x0c1a tx timeout
[  389.587592][T11611] netlink: 266 bytes leftover after parsing attributes in process `syz.5.1003'.
[  389.619600][T11611] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.974585][T11624] FAULT_INJECTION: forcing a failure.
[  390.974585][T11624] name failslab, interval 1, probability 0, space 0, times 0
[  391.078150][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.4.1006 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  391.078190][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  391.078207][T11624] Call Trace:
[  391.078217][T11624]  <TASK>
[  391.078228][T11624]  dump_stack_lvl+0x16c/0x1f0
[  391.078275][T11624]  should_fail_ex+0x512/0x640
[  391.078333][T11624]  ? __kmalloc_cache_node_noprof+0x5a/0x420
[  391.078381][T11624]  should_failslab+0xc2/0x120
[  391.078409][T11624]  __kmalloc_cache_node_noprof+0x6d/0x420
[  391.078463][T11624]  ? lockdep_init_map_type+0x5c/0x280
[  391.078500][T11624]  ? __alloc_workqueue+0x506/0x1810
[  391.078540][T11624]  __alloc_workqueue+0x506/0x1810
[  391.078581][T11624]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  391.078630][T11624]  alloc_workqueue+0xd2/0x200
[  391.078665][T11624]  ? __pfx_alloc_workqueue+0x10/0x10
[  391.078709][T11624]  ? __pfx___debug_object_init+0x10/0x10
[  391.078749][T11624]  nci_register_device+0x511/0xb80
[  391.078790][T11624]  ? __pfx_nci_register_device+0x10/0x10
[  391.078834][T11624]  ? lockdep_init_map_type+0x5c/0x280
[  391.078880][T11624]  virtual_ncidev_open+0x141/0x220
[  391.078915][T11624]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  391.078949][T11624]  misc_open+0x35d/0x420
[  391.078984][T11624]  ? __pfx_misc_open+0x10/0x10
[  391.079030][T11624]  chrdev_open+0x231/0x6a0
[  391.079074][T11624]  ? __pfx_apparmor_file_open+0x10/0x10
[  391.079112][T11624]  ? __pfx_chrdev_open+0x10/0x10
[  391.079157][T11624]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  391.079203][T11624]  do_dentry_open+0x744/0x1c10
[  391.079245][T11624]  ? __pfx_chrdev_open+0x10/0x10
[  391.079296][T11624]  vfs_open+0x82/0x3f0
[  391.079330][T11624]  path_openat+0x1de4/0x2cb0
[  391.079382][T11624]  ? __pfx_path_openat+0x10/0x10
[  391.079425][T11624]  ? __lock_acquire+0xb8a/0x1c90
[  391.079466][T11624]  do_filp_open+0x20b/0x470
[  391.079507][T11624]  ? __pfx_do_filp_open+0x10/0x10
[  391.079573][T11624]  ? alloc_fd+0x471/0x7d0
[  391.079620][T11624]  do_sys_openat2+0x11b/0x1d0
[  391.079651][T11624]  ? __pfx_do_sys_openat2+0x10/0x10
[  391.079697][T11624]  __x64_sys_openat+0x174/0x210
[  391.079730][T11624]  ? __pfx___x64_sys_openat+0x10/0x10
[  391.079777][T11624]  do_syscall_64+0xcd/0x490
[  391.079823][T11624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.079851][T11624] RIP: 0033:0x7f357258e929
[  391.079874][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.079901][T11624] RSP: 002b:00007f357345f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  391.079928][T11624] RAX: ffffffffffffffda RBX: 00007f35727b5fa0 RCX: 00007f357258e929
[  391.079947][T11624] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  391.079964][T11624] RBP: 00007f3572610b39 R08: 0000000000000000 R09: 0000000000000000
[  391.079981][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.080005][T11624] R13: 0000000000000000 R14: 00007f35727b5fa0 R15: 00007ffde2bca0e8
[  391.080043][T11624]  </TASK>
[  391.384161][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.788473][T11603] device-mapper: ioctl: Unable to rename non-existent device,  to uuid 0211_HWSIM
[  393.475414][T11663] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  393.877772][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1012'.
[  394.557253][ T7527] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  394.557295][ T7527] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15
[  394.572189][ T7527] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  394.925714][T11685] Invalid ELF header magic: != ELF
[  395.000491][T11687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.643274][T11685] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1017'.
[  399.238240][T11728] bond0: option all_slaves_active: invalid value ()
[  399.300077][T11724] bond0: option all_slaves_active: invalid value ()
[  400.818390][T11765] FAULT_INJECTION: forcing a failure.
[  400.818390][T11765] name failslab, interval 1, probability 0, space 0, times 0
[  400.858408][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.4.1034 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  400.858448][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  400.858465][T11765] Call Trace:
[  400.858474][T11765]  <TASK>
[  400.858484][T11765]  dump_stack_lvl+0x16c/0x1f0
[  400.858533][T11765]  should_fail_ex+0x512/0x640
[  400.858572][T11765]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  400.858619][T11765]  should_failslab+0xc2/0x120
[  400.858646][T11765]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  400.858689][T11765]  ? __d_alloc+0x31/0xaa0
[  400.858737][T11765]  __d_alloc+0x31/0xaa0
[  400.858784][T11765]  d_alloc+0x4a/0x1e0
[  400.858828][T11765]  d_alloc_parallel+0xe3/0x12e0
[  400.858872][T11765]  ? find_held_lock+0x2b/0x80
[  400.858901][T11765]  ? __pfx_d_alloc_parallel+0x10/0x10
[  400.858939][T11765]  ? __d_lookup+0x266/0x4a0
[  400.858979][T11765]  lookup_open.isra.0+0x665/0x1580
[  400.859023][T11765]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  400.859078][T11765]  ? mnt_get_write_access+0x20c/0x300
[  400.859115][T11765]  path_openat+0x893/0x2cb0
[  400.859175][T11765]  ? __pfx_path_openat+0x10/0x10
[  400.859219][T11765]  ? __lock_acquire+0xb8a/0x1c90
[  400.859262][T11765]  do_filp_open+0x20b/0x470
[  400.859303][T11765]  ? __pfx_do_filp_open+0x10/0x10
[  400.859358][T11765]  ? __pfx_kfree_link+0x10/0x10
[  400.859401][T11765]  ? alloc_fd+0x471/0x7d0
[  400.859450][T11765]  do_sys_openat2+0x11b/0x1d0
[  400.859481][T11765]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.859526][T11765]  __x64_sys_openat+0x174/0x210
[  400.859558][T11765]  ? __pfx___x64_sys_openat+0x10/0x10
[  400.859607][T11765]  do_syscall_64+0xcd/0x490
[  400.859653][T11765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.859683][T11765] RIP: 0033:0x7f357258d290
[  400.859704][T11765] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  400.859732][T11765] RSP: 002b:00007f357345ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  400.859759][T11765] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f357258d290
[  400.859776][T11765] RDX: 0000000000000002 RSI: 00007f357345efa0 RDI: 00000000ffffff9c
[  400.859794][T11765] RBP: 00007f357345efa0 R08: 0000000000000000 R09: 0000000000000000
[  400.859810][T11765] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  400.859826][T11765] R13: 0000000000000000 R14: 00007f35727b5fa0 R15: 00007ffde2bca0e8
[  400.859862][T11765]  </TASK>
[  401.108787][    C1] vkms_vblank_simulate: vblank timer overrun

syzkaller
syzkaller login: [  406.556011][T11851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1055'.
[  407.118269][T11843] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  407.138579][T11843] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  407.148438][T11843] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  407.155017][T11843] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  407.305674][ T7527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  407.329229][ T7527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  407.337561][ T7527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  407.348806][ T7527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  407.356574][ T7527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  407.527573][T11858] FAULT_INJECTION: forcing a failure.
[  407.527573][T11858] name fail_futex, interval 1, probability 0, space 0, times 0
[  407.541208][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.2.1056 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  407.541244][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  407.541261][T11858] Call Trace:
[  407.541270][T11858]  <TASK>
[  407.541280][T11858]  dump_stack_lvl+0x16c/0x1f0
[  407.541327][T11858]  should_fail_ex+0x512/0x640
[  407.541373][T11858]  get_futex_key+0x1d0/0x1540
[  407.541411][T11858]  ? __pfx_get_futex_key+0x10/0x10
[  407.541454][T11858]  futex_wake+0xea/0x530
[  407.541490][T11858]  ? futex_wait+0x120/0x380
[  407.541529][T11858]  ? __pfx_futex_wait+0x10/0x10
[  407.541567][T11858]  ? __pfx_futex_wake+0x10/0x10
[  407.541623][T11858]  ? ksys_write+0x190/0x250
[  407.541669][T11858]  do_futex+0x1e3/0x350
[  407.541702][T11858]  ? __pfx_do_futex+0x10/0x10
[  407.541735][T11858]  ? __pfx_do_sys_openat2+0x10/0x10
[  407.541773][T11858]  __x64_sys_futex+0x1e0/0x4c0
[  407.541811][T11858]  ? __pfx___x64_sys_futex+0x10/0x10
[  407.541845][T11858]  ? xfd_validate_state+0x61/0x180
[  407.541892][T11858]  do_syscall_64+0xcd/0x490
[  407.541937][T11858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.541965][T11858] RIP: 0033:0x7f4486d8e929
[  407.541987][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.542015][T11858] RSP: 002b:00007f4487b740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  407.542040][T11858] RAX: ffffffffffffffda RBX: 00007f4486fb5fa8 RCX: 00007f4486d8e929
[  407.542059][T11858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4486fb5fac
[  407.542076][T11858] RBP: 00007f4486fb5fa0 R08: 00007f4487b75000 R09: 0000000000000000
[  407.542093][T11858] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4486fb5fac
[  407.542110][T11858] R13: 0000000000000000 R14: 00007ffc5031a540 R15: 00007ffc5031a628
[  407.542144][T11858]  </TASK>
[  407.732893][    C0] vkms_vblank_simulate: vblank timer overrun
[  408.059438][ T7527] Bluetooth: hci0: command 0x0c1a tx timeout
[  408.400337][T11846] chnl_net:caif_netlink_parms(): no params data found
[  409.168431][ T7527] Bluetooth: hci1: command 0x0c1a tx timeout
[  409.175003][ T7527] Bluetooth: hci2: command 0x0c1a tx timeout
[  409.181096][T10336] Bluetooth: hci3: command 0x0c1a tx timeout
[  409.377919][T11846] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.398355][T11846] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.408516][ T7527] Bluetooth: hci4: command tx timeout
[  409.415121][T11846] bridge_slave_0: entered allmulticast mode
[  409.436627][T11846] bridge_slave_0: entered promiscuous mode
[  409.498714][T11846] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.528251][T11846] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.535940][T11846] bridge_slave_1: entered allmulticast mode
[  409.597372][T11846] bridge_slave_1: entered promiscuous mode
[  409.767692][T11846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.924791][T11846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.150551][T11846] team0: Port device team_slave_0 added
[  410.184601][T11846] team0: Port device team_slave_1 added
[  410.378904][T11846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.387506][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.468152][T11846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.505671][T11846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.549007][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.611137][T11846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.382646][T11846] hsr_slave_0: entered promiscuous mode
[  411.389648][T11846] hsr_slave_1: entered promiscuous mode
[  411.396767][T11846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  411.405015][T11846] Cannot create hsr debugfs directory
[  411.503404][ T7527] Bluetooth: hci4: command tx timeout
[  411.981968][T11907] WARNING! power/level is deprecated; use power/control instead
[  412.191484][T11846] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  412.233033][T11846] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  412.275072][T11846] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  412.316220][T11846] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  412.621149][T11846] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.699011][T11846] 8021q: adding VLAN 0 to HW filter on device team0
		
		

		
	
	

		
		

		
	
	




		
		
	


		
		
	
	
	

	
		


	
	

	

	

	
		

	


	
	

		
	
		
	


	



			








	




	





			

			

	

		
	

		
	
		

	
	

				
		
	

		
	
	
	
	
	
	
	






	




	





		









	


	





	

	









	

	




			
	
			
	
			
	
			
	


				


			


				


			
	

	
		




















		






	

	
		
	

	
		
	

	
		
	

	



	



	
	

	
		

	


		

		
	
		
	


	



			








	


	



	

	

	

		

	




	

	




	



	








	




	






		









	

	
	

	
	
				
		




		


	


	

	
		

	
		

	


	
	

		
	
		
	


	



			








	





	




		

		

		




	




		





		
			
			
		

	
	
	
	
	
	




	

		











	

	
	
















	




	





		








	


	
	

	
		
	

	
		
	

	
		
	

	
		
	
	

	

	
				
	
		


	

	
		

	


	
	

		
	
		
	


	



			








	





	




		

		

		




	




		





		
			
			
		

	
	
	
	
	
	




	

		











	

	
	
















	




	




		






	


	



	
	
	
	
	
	
	




	


	
	


	
	

	

	


	
			
	

	


	
	

	
		

	


	
	

		
	
		
	


	



			








	

	




















	
		
		
	



	




	
	
	
	


	

	


	
	
			

	
			
	



			
			
	

	
	


		

		
		


	

			


	
	
	






	

	

	
	

			

	
			
	



			
			
	

	
	


		


	
	

	

	



		
	

	


	




	



	




	




	






	






	





	






		








	

	
			
	
	



	

	

	
		

	
		

	


	
	

		
	
		
	


	



			








	





	




		

		

		




	




		





		
			
			
		

	
	
	
	
	
	




	

		











	

	
	
















	




	





		








	


	

	
			

			

			

			

			

			

			

			

			

			

	

	
		
	

	
		
	

	



	

			

				
	





			

	
		

	
		

	


		
	
	
	

	
		
	

	
	

	
	

	
	

	
	

	
	
	
	
	
	

	
		
	

	
	

	
		
	

	
	

	
	

	
	

	

	


		
	

	

	


	

	
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	


	



			








	




	





	
	


	


	









		










	

		











	

	
	
















	





	






		







		


		

	

	
	

	
	

	
	

	
	

	
	

	
	

	
	

	
	

	
	

	









	


	


	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		

	


		
	
	
	
	
	
	
	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	



syzkaller
syzkaller login: [  511.426475][T13634] futex_wake_op: syz.0.1412 tries to shift op by -9; fix this program
[  513.087236][T13679] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1419'.
[  513.310855][T13661] sysfs_service_op_show: Client not running :-5:
[  515.783960][T13733] FAULT_INJECTION: forcing a failure.
[  515.783960][T13733] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  515.825702][T13733] CPU: 0 UID: 0 PID: 13733 Comm: syz.6.1429 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  515.825741][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  515.825757][T13733] Call Trace:
[  515.825766][T13733]  <TASK>
[  515.825776][T13733]  dump_stack_lvl+0x16c/0x1f0
[  515.825825][T13733]  should_fail_ex+0x512/0x640
[  515.825869][T13733]  should_fail_alloc_page+0xe7/0x130
[  515.825901][T13733]  prepare_alloc_pages+0x3c2/0x610
[  515.825940][T13733]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  515.825985][T13733]  ? kasan_save_stack+0x33/0x60
[  515.826025][T13733]  ? kasan_save_track+0x14/0x30
[  515.826063][T13733]  ? __kasan_kmalloc+0xaa/0xb0
[  515.826101][T13733]  ? __kmalloc_node_track_caller_noprof+0x221/0x510
[  515.826145][T13733]  ? kstrdup+0x53/0x100
[  515.826182][T13733]  ? apply_subsystem_event_filter+0x46d/0x17a0
[  515.826218][T13733]  ? subsystem_filter_write+0x95/0x120
[  515.826254][T13733]  ? vfs_write+0x29d/0x1150
[  515.826291][T13733]  ? ksys_write+0x12a/0x250
[  515.826328][T13733]  ? do_syscall_64+0xcd/0x490
[  515.826370][T13733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.826417][T13733]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  515.826496][T13733]  __alloc_pages_noprof+0xb/0x1b0
[  515.826539][T13733]  ___kmalloc_large_node+0x84/0x1e0
[  515.826577][T13733]  __kmalloc_large_noprof+0x1c/0x70
[  515.826613][T13733]  append_filter_err+0x8f/0x5e0
[  515.826651][T13733]  apply_subsystem_event_filter+0x740/0x17a0
[  515.826701][T13733]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  515.826746][T13733]  ? _copy_from_user+0x59/0xd0
[  515.826793][T13733]  subsystem_filter_write+0x95/0x120
[  515.826831][T13733]  ? __pfx_subsystem_filter_write+0x10/0x10
[  515.826865][T13733]  vfs_write+0x29d/0x1150
[  515.826911][T13733]  ? __pfx___mutex_lock+0x10/0x10
[  515.826954][T13733]  ? __pfx_vfs_write+0x10/0x10
[  515.827003][T13733]  ? __fget_files+0x20e/0x3c0
[  515.827052][T13733]  ksys_write+0x12a/0x250
[  515.827090][T13733]  ? __pfx_ksys_write+0x10/0x10
[  515.827142][T13733]  do_syscall_64+0xcd/0x490
[  515.827189][T13733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.827218][T13733] RIP: 0033:0x7f8deb18e929
[  515.827240][T13733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.827268][T13733] RSP: 002b:00007f8dec011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  515.827294][T13733] RAX: ffffffffffffffda RBX: 00007f8deb3b6160 RCX: 00007f8deb18e929
[  515.827313][T13733] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000b
[  515.827329][T13733] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  515.827346][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.827362][T13733] R13: 0000000000000000 R14: 00007f8deb3b6160 R15: 00007fffb4072cb8
[  515.827406][T13733]  </TASK>
[  518.122115][T13792] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1440'.
[  523.637961][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.639519][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1463'.
[  523.670352][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.719129][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.752846][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.838403][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.895166][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.904593][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  523.915809][T13897] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1464'.
[  524.248865][T13913] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  524.256035][T13913] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  524.278391][T13913] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  524.284766][T13913] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  524.300729][T13913] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  524.798240][T13915] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  526.303627][T13387] Bluetooth: hci1: command 0x0c1a tx timeout
[  526.310800][ T7257] Bluetooth: hci2: command 0x0c1a tx timeout
[  526.316840][ T7257] Bluetooth: hci3: command 0x0c1a tx timeout
[  526.322955][ T7527] Bluetooth: hci0: command 0x0c1a tx timeout
[  526.368085][ T7257] Bluetooth: hci4: command 0x0c1a tx timeout
[  526.798755][T13956] FAULT_INJECTION: forcing a failure.
[  526.798755][T13956] name fail_futex, interval 1, probability 0, space 0, times 0
[  526.798797][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.6.1478 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  526.798831][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  526.798848][T13956] Call Trace:
[  526.798857][T13956]  <TASK>
[  526.798867][T13956]  dump_stack_lvl+0x16c/0x1f0
[  526.798914][T13956]  should_fail_ex+0x512/0x640
[  526.798959][T13956]  get_futex_key+0x1d0/0x1540
[  526.798993][T13956]  ? find_held_lock+0x2b/0x80
[  526.799021][T13956]  ? __pfx_get_futex_key+0x10/0x10
[  526.799049][T13956]  ? __might_fault+0xe3/0x190
[  526.799102][T13956]  futex_wake+0xea/0x530
[  526.799145][T13956]  ? __pfx_futex_wake+0x10/0x10
[  526.799185][T13956]  ? __pfx_sock_do_ioctl+0x10/0x10
[  526.799228][T13956]  do_futex+0x1e3/0x350
[  526.799262][T13956]  ? __pfx_do_futex+0x10/0x10
[  526.799294][T13956]  ? sock_ioctl+0x3a9/0x6b0
[  526.799334][T13956]  __x64_sys_futex+0x1e0/0x4c0
[  526.799370][T13956]  ? __fget_files+0x20e/0x3c0
[  526.799416][T13956]  ? __pfx___x64_sys_futex+0x10/0x10
[  526.799456][T13956]  ? fput+0x70/0xf0
[  526.799487][T13956]  do_syscall_64+0xcd/0x490
[  526.799534][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.799562][T13956] RIP: 0033:0x7f8deb18e929
[  526.799584][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.799612][T13956] RSP: 002b:00007f8dec0530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  526.799638][T13956] RAX: ffffffffffffffda RBX: 00007f8deb3b5fa8 RCX: 00007f8deb18e929
[  526.799655][T13956] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8deb3b5fac
[  526.799672][T13956] RBP: 00007f8deb3b5fa0 R08: 00007f8dec054000 R09: 0000000000000000
[  526.799689][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8deb3b5fac
[  526.799705][T13956] R13: 0000000000000000 R14: 00007fffb4072bd0 R15: 00007fffb4072cb8
[  526.799740][T13956]  </TASK>
[  529.885644][T13963] kexec: Could not allocate control_code_buffer
[  531.008339][T14021] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.088346][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.098417][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.128115][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.137363][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.233686][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.313888][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.360072][T14026] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1491'.
[  531.434733][T14033] vivid-003: =================  START STATUS  =================
[  531.459423][T14033] vivid-003: Radio HW Seek Mode: Bounded
[  531.465125][T14033] vivid-003: Radio Programmable HW Seek: false
[  531.583324][T14033] vivid-003: RDS Rx I/O Mode: Block I/O
[  531.638091][T14033] vivid-003: Generate RBDS Instead of RDS: false
[  531.644502][T14033] vivid-003: RDS Reception: true
[  531.684526][T14033] vivid-003: RDS Program Type: 0 inactive
[  531.711634][T14033] vivid-003: RDS PS Name:  inactive
[  531.717750][T14033] vivid-003: RDS Radio Text:  inactive
[  531.727677][T14033] vivid-003: RDS Traffic Announcement: false inactive
[  531.735822][T14033] vivid-003: RDS Traffic Program: false inactive
[  531.748861][T14033] vivid-003: RDS Music: false inactive
[  531.755294][T14033] vivid-003: ==================  END STATUS  ==================
[  532.463923][T14047] Process accounting resumed
[  537.264941][T14114] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  537.337705][T14114] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  537.346890][T14114] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  537.353262][T14114] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  537.359795][T14114] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  538.279420][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1517'.
[  538.464135][T14151] usb usb36: usbfs: process 14151 (syz.6.1518) did not claim interface 0 before use
[  538.492010][T14148] ip6tnl0: entered promiscuous mode
[  538.770065][ T7257] Bluetooth: hci0: command 0x0c1a tx timeout
[  539.012444][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.020210][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.038702][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.074022][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.154537][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.203391][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.226701][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.242414][T14163] FAULT_INJECTION: forcing a failure.
[  539.242414][T14163] name failslab, interval 1, probability 0, space 0, times 0
[  539.255364][T14163] CPU: 0 UID: 0 PID: 14163 Comm: syz.6.1522 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  539.255399][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  539.255415][T14163] Call Trace:
[  539.255425][T14163]  <TASK>
[  539.255435][T14163]  dump_stack_lvl+0x16c/0x1f0
[  539.255481][T14163]  should_fail_ex+0x512/0x640
[  539.255526][T14163]  should_failslab+0xc2/0x120
[  539.255552][T14163]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  539.255598][T14163]  ? __alloc_skb+0x2b2/0x380
[  539.255641][T14163]  __alloc_skb+0x2b2/0x380
[  539.255679][T14163]  ? __pfx___alloc_skb+0x10/0x10
[  539.255716][T14163]  ? skb_copy_and_csum_bits+0x127/0x980
[  539.255763][T14163]  ? __asan_memcpy+0x3c/0x60
[  539.255803][T14163]  skb_segment+0x971/0x3e20
[  539.255830][T14163]  ? __lock_acquire+0x622/0x1c90
[  539.255896][T14163]  __udp_gso_segment+0xef4/0x2a70
[  539.255931][T14163]  ? __pfx_sock_wfree+0x10/0x10
[  539.255983][T14163]  udp4_ufo_fragment+0x51a/0x710
[  539.256022][T14163]  ? __pfx_udp4_ufo_fragment+0x10/0x10
[  539.256057][T14163]  inet_gso_segment+0x573/0x1330
[  539.256103][T14163]  skb_mac_gso_segment+0x2a8/0x650
[  539.256130][T14163]  ? __pfx_inet_gso_segment+0x10/0x10
[  539.256165][T14163]  ? __pfx_skb_mac_gso_segment+0x10/0x10
[  539.256194][T14163]  ? trace_fib_table_lookup+0x19f/0x220
[  539.256242][T14163]  __skb_gso_segment+0x36e/0x700
[  539.256274][T14163]  validate_xmit_skb+0x662/0x1200
[  539.256316][T14163]  __dev_queue_xmit+0x71b/0x43e0
[  539.256367][T14163]  ? __pfx___dev_queue_xmit+0x10/0x10
[  539.256399][T14163]  ? look_up_lock_class+0x6b/0x150
[  539.256442][T14163]  ? arp_constructor+0x3ab/0xdc0
[  539.256484][T14163]  ? __lock_acquire+0xb8a/0x1c90
[  539.256524][T14163]  ? ___neigh_create+0x1945/0x28c0
[  539.256563][T14163]  ? find_held_lock+0x2b/0x80
[  539.256604][T14163]  neigh_connected_output+0x3da/0x620
[  539.256660][T14163]  ip_finish_output2+0x7f8/0x21a0
[  539.256693][T14163]  ? ip_skb_dst_mtu+0x487/0xe90
[  539.256727][T14163]  ? __pfx_ip_finish_output2+0x10/0x10
[  539.256755][T14163]  ? ip_skb_dst_mtu+0x496/0xe90
[  539.256783][T14163]  ? skb_gso_transport_seglen+0x1a5/0x3b0
[  539.256819][T14163]  __ip_finish_output+0x49e/0x950
[  539.256853][T14163]  ip_finish_output+0x35/0x380
[  539.256887][T14163]  ip_output+0x13b/0x2a0
[  539.256912][T14163]  ? __pfx_ip_output+0x10/0x10
[  539.256943][T14163]  ip_send_skb+0x3e8/0x560
[  539.256977][T14163]  udp_send_skb+0x71d/0x15b0
[  539.257015][T14163]  udp_sendmsg+0x18f0/0x29f0
[  539.257049][T14163]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  539.257083][T14163]  ? __pfx_udp_sendmsg+0x10/0x10
[  539.257109][T14163]  ? __lock_acquire+0xb8a/0x1c90
[  539.257162][T14163]  ? __lock_acquire+0xb8a/0x1c90
[  539.257196][T14163]  ? __pfx___might_resched+0x10/0x10
[  539.257230][T14163]  ? aa_sk_perm+0x2f4/0xb10
[  539.257267][T14163]  ? __import_iovec+0x1dd/0x650
[  539.257306][T14163]  ? __might_fault+0xe3/0x190
[  539.257342][T14163]  ? __might_fault+0x13b/0x190
[  539.257380][T14163]  ? __pfx_udp_sendmsg+0x10/0x10
[  539.257410][T14163]  inet_sendmsg+0x105/0x140
[  539.257447][T14163]  ____sys_sendmsg+0x973/0xc70
[  539.257478][T14163]  ? copy_msghdr_from_user+0x10a/0x160
[  539.257517][T14163]  ? __pfx_____sys_sendmsg+0x10/0x10
[  539.257563][T14163]  ___sys_sendmsg+0x134/0x1d0
[  539.257611][T14163]  ? __pfx____sys_sendmsg+0x10/0x10
[  539.257668][T14163]  ? find_held_lock+0x2b/0x80
[  539.257718][T14163]  __sys_sendmmsg+0x200/0x420
[  539.257764][T14163]  ? __pfx___sys_sendmmsg+0x10/0x10
[  539.257804][T14163]  ? __local_bh_enable_ip+0xa4/0x120
[  539.257843][T14163]  ? __pfx_do_futex+0x10/0x10
[  539.257875][T14163]  ? fput+0x70/0xf0
[  539.257917][T14163]  ? xfd_validate_state+0x61/0x180
[  539.257949][T14163]  ? __sys_setsockopt+0x140/0x1a0
[  539.257997][T14163]  __x64_sys_sendmmsg+0x9c/0x100
[  539.258038][T14163]  ? lockdep_hardirqs_on+0x7c/0x110
[  539.258079][T14163]  do_syscall_64+0xcd/0x490
[  539.258124][T14163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.258153][T14163] RIP: 0033:0x7f8deb18e929
[  539.258175][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.258183][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.258207][T14163] RSP: 002b:00007f8dec053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  539.258232][T14163] RAX: ffffffffffffffda RBX: 00007f8deb3b5fa0 RCX: 00007f8deb18e929
[  539.258252][T14163] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  539.258273][T14163] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  539.258295][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  539.258316][T14163] R13: 0000000000000000 R14: 00007f8deb3b5fa0 R15: 00007fffb4072cb8
[  539.258355][T14163]  </TASK>
[  539.419546][ T7257] Bluetooth: hci4: command 0x0c1a tx timeout
[  539.733774][T13387] Bluetooth: hci1: command 0x0c1a tx timeout
[  539.739815][T13387] Bluetooth: hci2: command 0x0c1a tx timeout
[  539.745812][T13387] Bluetooth: hci3: command 0x0c1a tx timeout
[  539.760933][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.801682][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.849426][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.887730][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.913103][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.923219][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  539.993404][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  540.066785][T14158] nvme_fcloop: unknown parameter or missing value '7'
[  540.516634][T14179] sd 0:0:1:0: PR command failed: 1026
[  540.554760][T14179] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  540.561851][T14179] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  541.484398][T14206] netlink: 'syz.6.1529': attribute type 1 has an invalid length.
[  543.619571][T14236] FAULT_INJECTION: forcing a failure.
[  543.619571][T14236] name failslab, interval 1, probability 0, space 0, times 0
[  543.632972][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.6.1535 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  543.633001][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.633013][T14236] Call Trace:
[  543.633020][T14236]  <TASK>
[  543.633028][T14236]  dump_stack_lvl+0x16c/0x1f0
[  543.633062][T14236]  should_fail_ex+0x512/0x640
[  543.633092][T14236]  ? __kmalloc_noprof+0xbf/0x510
[  543.633124][T14236]  ? xfrm_hash_alloc+0xd1/0x100
[  543.633150][T14236]  should_failslab+0xc2/0x120
[  543.633170][T14236]  __kmalloc_noprof+0xd2/0x510
[  543.633199][T14236]  ? xfrm_state_init+0x377/0x630
[  543.633232][T14236]  ? xfrm_state_init+0x3c1/0x630
[  543.633262][T14236]  xfrm_hash_alloc+0xd1/0x100
[  543.633289][T14236]  xfrm_net_init+0x35f/0xcc0
[  543.633323][T14236]  ? __pfx_xfrm_net_init+0x10/0x10
[  543.633352][T14236]  ops_init+0x1df/0x5f0
[  543.633386][T14236]  setup_net+0x1ff/0x510
[  543.633403][T14236]  ? lockdep_init_map_type+0x5c/0x280
[  543.633431][T14236]  ? __pfx_setup_net+0x10/0x10
[  543.633451][T14236]  ? debug_mutex_init+0x37/0x70
[  543.633472][T14236]  copy_net_ns+0x2a6/0x5f0
[  543.633501][T14236]  create_new_namespaces+0x3ea/0xa90
[  543.633547][T14236]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  543.633575][T14236]  ksys_unshare+0x45b/0xa40
[  543.633607][T14236]  ? __pfx_ksys_unshare+0x10/0x10
[  543.633639][T14236]  ? xfd_validate_state+0x61/0x180
[  543.633677][T14236]  __x64_sys_unshare+0x31/0x40
[  543.633707][T14236]  do_syscall_64+0xcd/0x490
[  543.633745][T14236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.633769][T14236] RIP: 0033:0x7f8deb18e929
[  543.633786][T14236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  543.633810][T14236] RSP: 002b:00007f8dec053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  543.633832][T14236] RAX: ffffffffffffffda RBX: 00007f8deb3b5fa0 RCX: 00007f8deb18e929
[  543.633847][T14236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  543.633862][T14236] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  543.633876][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.633890][T14236] R13: 0000000000000000 R14: 00007f8deb3b5fa0 R15: 00007fffb4072cb8
[  543.633919][T14236]  </TASK>
[  547.249922][T14303] delete_channel: no stack
[  550.334138][T14350] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input21
[  550.506540][T14354] ima: policy update failed
[  550.528880][T14354] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1562'.
[  550.529760][   T30] audit: type=1802 audit(6045892694.648:12): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1562" res=0 errno=0
[  550.552262][T14355] ubi0: attaching mtd0
[  550.610474][T14355] ubi0: scanning is finished
[  550.640548][T14355] ubi0: empty MTD device detected
[  551.045963][T14355] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  551.098194][T14355] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  551.105459][T14355] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  551.248152][T14355] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  551.282648][T14355] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  551.303058][T14355] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  551.311363][T14355] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4072102078
[  551.322145][T14355] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  551.431925][T14368] ubi0: background thread "ubi_bgt0d" started, PID 14368

		


			

	

	
				
	
	



	
	

	
				
	
	



	


	
	

	
		




	

			
			
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	
	
	
	
	
	
	

	

		
		



	





	
		

	


	
	

		
	
		
	


	



			








	





	





	










	


	












	








	




	





		






	
	

	


			




			



			




			



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
		



	
	

	

		
		

syzkaller
syzkaller login: [  593.468028][T15085] nvme_fabrics: missing parameter 'transport=%s'
[  593.487247][T15085] nvme_fabrics: missing parameter 'nqn=%s'
[  593.890007][T15099] nvme_fabrics: missing parameter 'transport=%s'
[  593.950795][T15099] nvme_fabrics: missing parameter 'nqn=%s'
[  594.911637][T15155] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  595.385379][T15168] ptrace attach of "./syz-executor exec"[11846] was attempted by "./syz-executor exec"[15168]
[  595.869789][T15174] random: crng reseeded on system resumption
[  598.828699][ T7257] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  598.828727][ T7257] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  598.847449][ T7257] Bluetooth: hci0: adv larger than maximum supported
[  598.847477][ T7257] Bluetooth: hci0: Unknown advertising packet type: 0x20
[  598.854969][ T7257] Bluetooth: hci0: adv larger than maximum supported
[  598.863111][ T7257] Bluetooth: hci0: Unknown advertising packet type: 0x20
[  598.873163][ T7257] Bluetooth: hci0: Unknown advertising packet type: 0x20
[  599.216660][T15222] sd 0:0:1:0: PR command failed: 1026
[  599.247445][T15222] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  599.288137][T15222] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  601.284895][T15254] FAULT_INJECTION: forcing a failure.
[  601.284895][T15254] name failslab, interval 1, probability 0, space 0, times 0
[  601.373706][T15254] CPU: 1 UID: 0 PID: 15254 Comm: syz.6.1749 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  601.373739][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  601.373753][T15254] Call Trace:
[  601.373760][T15254]  <TASK>
[  601.373768][T15254]  dump_stack_lvl+0x16c/0x1f0
[  601.373807][T15254]  should_fail_ex+0x512/0x640
[  601.373841][T15254]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  601.373879][T15254]  should_failslab+0xc2/0x120
[  601.373901][T15254]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  601.373936][T15254]  ? alloc_empty_file+0x55/0x1e0
[  601.373965][T15254]  alloc_empty_file+0x55/0x1e0
[  601.373990][T15254]  path_openat+0xda/0x2cb0
[  601.374021][T15254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.374062][T15254]  ? __pfx_path_openat+0x10/0x10
[  601.374097][T15254]  ? __lock_acquire+0xb8a/0x1c90
[  601.374132][T15254]  do_filp_open+0x20b/0x470
[  601.374165][T15254]  ? __pfx_do_filp_open+0x10/0x10
[  601.374220][T15254]  ? alloc_fd+0x471/0x7d0
[  601.374258][T15254]  do_sys_openat2+0x11b/0x1d0
[  601.374284][T15254]  ? __pfx_do_sys_openat2+0x10/0x10
[  601.374323][T15254]  __x64_sys_openat+0x174/0x210
[  601.374349][T15254]  ? __pfx___x64_sys_openat+0x10/0x10
[  601.374387][T15254]  do_syscall_64+0xcd/0x490
[  601.374424][T15254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.374447][T15254] RIP: 0033:0x7f8deb18e929
[  601.374464][T15254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  601.374486][T15254] RSP: 002b:00007f8dec053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  601.374507][T15254] RAX: ffffffffffffffda RBX: 00007f8deb3b5fa0 RCX: 00007f8deb18e929
[  601.374522][T15254] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  601.374536][T15254] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  601.374550][T15254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.374563][T15254] R13: 0000000000000000 R14: 00007f8deb3b5fa0 R15: 00007fffb4072cb8
[  601.374591][T15254]  </TASK>
[  602.022872][T15263] random: crng reseeded on system resumption
[  602.704990][   T30] audit: type=1804 audit(6045892746.840:15): pid=15275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1754" name="/newroot/441/file0" dev="tmpfs" ino=2327 res=1 errno=0
[  602.874111][   T30] audit: type=1800 audit(6045892746.871:16): pid=15275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1754" name="file0" dev="tmpfs" ino=2327 res=0 errno=0
[  603.516920][T15291] cougar: G6 mapped to space
[  607.340125][T15351] zswap: compressor 000 not available
[  611.220317][   T30] audit: type=1804 audit(6045892755.365:17): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1792" name=2F6E6577726F6F742F3436362F22050820 dev="tmpfs" ino=2472 res=1 errno=0
[  611.317462][   T30] audit: type=1800 audit(6045892755.395:18): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1792" name=22050820 dev="tmpfs" ino=2472 res=0 errno=0
[  611.380036][T15448] ima: policy update failed
[  611.392336][   T30] audit: type=1802 audit(6045892755.545:19): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1793" res=0 errno=0
[  613.861482][T15493] Setting dangerous option i915.mitigations - tainting kernel
[  615.452178][T15519] netlink: 350 bytes leftover after parsing attributes in process `syz.6.1808'.
[  615.542231][T15522] nbd: must specify at least one socket
[  616.829041][T15542] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1812'.
[  619.877663][T15601] netlink: 302 bytes leftover after parsing attributes in process `syz.4.1825'.
[  619.923525][T15603] netlink: 302 bytes leftover after parsing attributes in process `syz.4.1825'.
[  620.449005][T15627] netlink: 'syz.4.1830': attribute type 11 has an invalid length.
[  620.483728][T15625] HfR: entered promiscuous mode
[  620.504450][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'.
[  620.615759][T15628] openvswitch: HfR: Dropping previously announced user features
[  620.683806][T15620] could not allocate digest TFM handle 
[  620.692484][T15635] device-mapper: ioctl: Unable to rename non-existent device,  to �
[  622.154374][T15665] bridge0: port 3(netdevsim1) entered blocking state
[  622.184103][T15665] bridge0: port 3(netdevsim1) entered disabled state
[  622.206621][T15665] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  622.242074][T15665] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  622.250836][T15665] bridge0: port 3(netdevsim1) entered blocking state
[  622.257632][T15665] bridge0: port 3(netdevsim1) entered listening state
[  625.001833][T15706] zswap: compressor  not available
[  625.585655][T15723] zswap: compressor  not available
[  628.023642][T15773] vivid-003: =================  START STATUS  =================
[  628.087050][T15773] vivid-003: Radio HW Seek Mode: Bounded
[  628.148748][T15773] vivid-003: Radio Programmable HW Seek: false
[  628.155304][T15773] vivid-003: RDS Rx I/O Mode: Block I/O
[  628.164945][T15773] vivid-003: Generate RBDS Instead of RDS: false
[  628.191618][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'.
[  628.254077][T15773] vivid-003: RDS Reception: true
[  628.374131][T15773] vivid-003: RDS Program Type: 0 inactive
[  628.391535][T15773] vivid-003: RDS PS Name:  inactive
[  628.397158][T15773] vivid-003: RDS Radio Text:  inactive
[  628.402821][T15773] vivid-003: RDS Traffic Announcement: false inactive
[  628.411139][T15773] vivid-003: RDS Traffic Program: false inactive
[  628.417931][T15773] vivid-003: RDS Music: false inactive
[  628.423615][T15773] vivid-003: ==================  END STATUS  ==================
[  629.159600][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1870'.
[  629.188738][T15788] caif0: entered promiscuous mode
[  629.236969][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  629.243312][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  629.941470][T15812] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[  630.407963][T15826] cougar: G6 mapped to space
[  630.683434][T15829] netlink: zone id is out of range
[  630.710664][T15829] netlink: del zone limit has 4 unknown bytes
[  631.236219][ T7257] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  631.588914][T15846] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  632.891713][T15871] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input27
[  634.038550][T15906] random: crng reseeded on system resumption
[  635.190263][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1897'.
[  637.547511][    C0] bridge0: port 3(netdevsim1) entered learning state
[  640.544212][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'.
[  641.147867][T16045] svc: failed to register nfsdv3 RPC service (errno 111).
[  641.171603][T16045] svc: failed to register nfsaclv3 RPC service (errno 111).
[  646.027639][T16119] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  648.851894][T16162] ubi: mtd0 is already attached to ubi0
[  649.086741][T16173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[  649.828626][T16175] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[  650.851216][T16198] random: crng reseeded on system resumption
[  651.545750][T16207] 
[  651.976943][T16209] netlink: set zone limit has 8 unknown bytes
[  652.908556][    C0] bridge0: port 3(netdevsim1) entered forwarding state
[  652.915499][    C0] bridge0: topology change detected, propagating
[  657.908262][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  657.914671][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  657.959590][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  657.967093][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  657.985583][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  657.994450][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  658.005389][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  658.011789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  661.886845][T16364] ip_vti0: entered allmulticast mode
[  664.999043][T16428] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2003'.
[  665.540610][T16436] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2008'.
[  667.477299][T16468] input: f�
 as /devices/virtual/input/input31
[  667.488538][T16466] vivid-007: =================  START STATUS  =================
[  667.776293][T16466] vivid-007: Generate PTS: true
[  667.876083][T16466] vivid-007: Generate SCR: true
[  667.893775][T16484] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  667.929690][T16466] tpg source WxH: 320x240 (Y'CbCr)
[  668.035333][T16466] tpg field: 1
[  668.126243][T16466] tpg crop: (0,0)/320x240
[  668.187393][T16466] tpg compose: (0,0)/320x240
[  668.222464][T16466] tpg colorspace: 8
[  668.249048][T16466] tpg transfer function: 0/0
[  668.267064][T16466] tpg Y'CbCr encoding: 0/0
[  668.313358][T16466] tpg quantization: 0/0
[  668.381145][T16466] tpg RGB range: 0/2
[  668.421523][T16466] vivid-007: ==================  END STATUS  ==================
[  670.791250][T16530] netlink: zone id is out of range
[  670.796483][T16530] netlink: zone id is out of range
[  670.801808][T16530] netlink: zone id is out of range
[  676.475939][T16613] usb usb16: usbfs: process 16613 (syz.4.2042) did not claim interface 0 before use
[  676.666999][ T7257] Bluetooth: hci3: Unable to find connection for big 0xd2
[  676.735310][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.735509][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.735698][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.735878][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.736059][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.736239][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.736414][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.743718][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.743940][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  676.744150][T16619] netlink: 206 bytes leftover after parsing attributes in process `syz.6.2046'.
[  677.548263][T16643] svc: failed to register nfsdv3 RPC service (errno 111).
[  677.572736][T16643] svc: failed to register nfsaclv3 RPC service (errno 111).
[  678.299231][T16656] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  679.178367][T16657] ima: policy update failed
[  679.204465][   T30] audit: type=1802 audit(6045892823.329:20): pid=16657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2052" res=0 errno=0
[  679.388509][T16672] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33
[  685.806929][T16743] __nla_validate_parse: 56 callbacks suppressed
[  685.806955][T16743] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2067'.
[  687.288108][T16788] netlink: 'syz.4.2078': attribute type 2 has an invalid length.
[  687.320627][T16788] netlink: 'syz.4.2078': attribute type 2 has an invalid length.
[  688.077272][T16801] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2081'.
[  688.517904][T16785] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[16785]
[  690.312740][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2089'.
[  690.411459][T16836] random: crng reseeded on system resumption
[  690.440365][T16834] caif0: entered promiscuous mode
[  690.672404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  690.678860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  694.955456][ T7257] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  695.169288][T16893] netlink: 'syz.2.2102': attribute type 2 has an invalid length.
[  695.845036][T16898] FAULT_INJECTION: forcing a failure.
[  695.845036][T16898] name failslab, interval 1, probability 0, space 0, times 0
[  696.057251][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.6.2103 Tainted: G     U              6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  696.057286][T16898] Tainted: [U]=USER
[  696.057293][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  696.057306][T16898] Call Trace:
[  696.057312][T16898]  <TASK>
[  696.057320][T16898]  dump_stack_lvl+0x16c/0x1f0
[  696.057358][T16898]  should_fail_ex+0x512/0x640
[  696.057388][T16898]  ? __kmalloc_noprof+0xbf/0x510
[  696.057422][T16898]  ? __vb2_queue_alloc+0x23e/0x1280
[  696.057442][T16898]  should_failslab+0xc2/0x120
[  696.057462][T16898]  __kmalloc_noprof+0xd2/0x510
[  696.057492][T16898]  ? bitmap_find_next_zero_area_off+0xb4/0xd0
[  696.057521][T16898]  __vb2_queue_alloc+0x23e/0x1280
[  696.057544][T16898]  ? __kmalloc_noprof+0x242/0x510
[  696.057583][T16898]  vb2_core_reqbufs+0xa90/0xfe0
[  696.057611][T16898]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  696.057647][T16898]  __vb2_init_fileio+0x3f1/0x1100
[  696.057670][T16898]  ? __mutex_lock+0x1ca/0xb90
[  696.057703][T16898]  ? __pfx___futex_wait+0x10/0x10
[  696.057733][T16898]  ? vb2_fop_write+0xe6/0x3f0
[  696.057750][T16898]  ? lockdep_hardirqs_on+0x7c/0x110
[  696.057783][T16898]  __vb2_perform_fileio+0x9c2/0x1660
[  696.057813][T16898]  ? __pfx___vb2_perform_fileio+0x10/0x10
[  696.057844][T16898]  vb2_fop_write+0x207/0x3f0
[  696.057868][T16898]  v4l2_write+0x226/0x360
[  696.057897][T16898]  ? __pfx_v4l2_write+0x10/0x10
[  696.057923][T16898]  vfs_write+0x29d/0x1150
[  696.057965][T16898]  ? __pfx_vfs_write+0x10/0x10
[  696.057993][T16898]  ? find_held_lock+0x2b/0x80
[  696.058014][T16898]  ? __fget_files+0x204/0x3c0
[  696.058046][T16898]  ? __fget_files+0x20e/0x3c0
[  696.058082][T16898]  ksys_write+0x12a/0x250
[  696.058110][T16898]  ? __pfx_ksys_write+0x10/0x10
[  696.058148][T16898]  do_syscall_64+0xcd/0x490
[  696.058182][T16898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.058203][T16898] RIP: 0033:0x7f8deb18e929
[  696.058219][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  696.058240][T16898] RSP: 002b:00007f8dec053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  696.058260][T16898] RAX: ffffffffffffffda RBX: 00007f8deb3b5fa0 RCX: 00007f8deb18e929
[  696.058274][T16898] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  696.058287][T16898] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  696.058299][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.058312][T16898] R13: 0000000000000000 R14: 00007f8deb3b5fa0 R15: 00007fffb4072cb8
[  696.058338][T16898]  </TASK>
[  696.623081][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  696.629500][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  698.949551][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'.
[  699.427802][T16967] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2118'.
[  699.457981][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  699.510390][T16972] openvswitch: netlink: Flow key attr not present in new flow.
[  702.762273][T17038] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2130'.
[  702.775990][T17038] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  703.142019][T17049] Invalid ELF header magic: != ELF
[  703.150811][ T7257] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  703.915071][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'.
[  704.018900][T17061] bridge_slave_1: left allmulticast mode
[  704.043206][T17061] bridge_slave_1: left promiscuous mode
[  704.116036][T17061] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.168591][T17061] bridge_slave_0: left allmulticast mode
[  704.184620][T17061] bridge_slave_0: left promiscuous mode
[  704.205039][T17061] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.093875][T17081] openvswitch: netlink: Unknown nsh attribute 0
[  705.453139][T17088] Device name cannot be null; rc = [-22]
[  712.237628][T17231] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2159'.
[  712.338526][T17231] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2159'.
[  712.968216][T17252] <
[  714.684011][T17281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2167'.
[  714.990259][T17281] hsr_slave_0 (unregistering): left promiscuous mode
[  716.506078][T17304] random: crng reseeded on system resumption
[  716.518300][T17299] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2172'.
[  716.686262][T17299] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2172'.

syzkaller
syzkaller login: [  720.472733][T17360] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2184'.
[  720.571616][T17361] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2184'.
[  720.696696][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2183'.
[  723.086994][ T7257] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  723.087025][ T7257] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260
[  723.101817][ T7257] Bluetooth: hci2: adv larger than maximum supported
[  723.101835][ T7257] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  723.109768][ T7257] Bluetooth: hci2: adv larger than maximum supported
[  723.116892][ T7257] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  723.123578][ T7257] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  723.732014][T17396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2193'.
[  725.794388][T17425] random: crng reseeded on system resumption
[  726.259644][T17430] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  726.367904][T17430] netlink: 230 bytes leftover after parsing attributes in process `syz.2.2198'.
[  726.479060][T17430] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  727.043382][ T7257] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[  727.043420][ T7257] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260
[  727.060224][ T7257] Bluetooth: hci4: adv larger than maximum supported
[  727.060268][ T7257] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  727.069662][ T7257] Bluetooth: hci4: adv larger than maximum supported
[  727.076875][ T7257] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  727.083598][ T7257] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  729.942354][T17488] random: crng reseeded on system resumption
[  730.925511][T17511] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34
[  732.536441][T17539] FAULT_INJECTION: forcing a failure.
[  732.536441][T17539] name failslab, interval 1, probability 0, space 0, times 0
[  732.567244][T17539] CPU: 1 UID: 0 PID: 17539 Comm: syz.6.2217 Tainted: G     U              6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  732.567292][T17539] Tainted: [U]=USER
[  732.567302][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  732.567320][T17539] Call Trace:
[  732.567329][T17539]  <TASK>
[  732.567340][T17539]  dump_stack_lvl+0x16c/0x1f0
[  732.567391][T17539]  should_fail_ex+0x512/0x640
[  732.567434][T17539]  ? fs_reclaim_acquire+0xae/0x150
[  732.567470][T17539]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  732.567521][T17539]  should_failslab+0xc2/0x120
[  732.567546][T17539]  __kmalloc_noprof+0xd2/0x510
[  732.567595][T17539]  tomoyo_realpath_from_path+0xc2/0x6e0
[  732.567636][T17539]  ? tomoyo_profile+0x47/0x60
[  732.567681][T17539]  tomoyo_path_number_perm+0x245/0x580
[  732.567713][T17539]  ? tomoyo_path_number_perm+0x237/0x580
[  732.567748][T17539]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  732.567817][T17539]  ? find_held_lock+0x2b/0x80
[  732.567842][T17539]  ? hook_file_ioctl_common+0x145/0x410
[  732.567880][T17539]  ? __fget_files+0x20e/0x3c0
[  732.567925][T17539]  security_file_ioctl+0x9b/0x240
[  732.567960][T17539]  __x64_sys_ioctl+0xb7/0x210
[  732.567995][T17539]  do_syscall_64+0xcd/0x490
[  732.568041][T17539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.568069][T17539] RIP: 0033:0x7f8deb18e929
[  732.568101][T17539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  732.568129][T17539] RSP: 002b:00007f8dec011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.568155][T17539] RAX: ffffffffffffffda RBX: 00007f8deb3b6160 RCX: 00007f8deb18e929
[  732.568174][T17539] RDX: 0000000000000000 RSI: 00000000405c5503 RDI: 0000000000000006
[  732.568191][T17539] RBP: 00007f8deb210b39 R08: 0000000000000000 R09: 0000000000000000
[  732.568208][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.568224][T17539] R13: 0000000000000000 R14: 00007f8deb3b6160 R15: 00007fffb4072cb8
[  732.568262][T17539]  </TASK>
[  733.017155][T17539] ERROR: Out of memory at tomoyo_realpath_from_path.
[  733.927447][T17548] zswap: compressor 000 not available
[  734.465452][T17568] netlink: 'syz.4.2232': attribute type 10 has an invalid length.
[  734.499655][T17568] netlink: 230 bytes leftover after parsing attributes in process `syz.4.2232'.
[  734.534107][T17568] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  737.162301][T17600] zswap: compressor 000 not available
[  738.470252][T17628] netlink: 'syz.6.2236': attribute type 10 has an invalid length.
[  738.526562][T17628] netlink: 230 bytes leftover after parsing attributes in process `syz.6.2236'.
[  738.618822][T17628] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  738.918363][   T30] audit: type=1804 audit(4294967332.176:21): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2239" name=2F6E6577726F6F742F3239372F22050820 dev="tmpfs" ino=1569 res=1 errno=0
[  738.969413][T17638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36
[  739.034364][   T30] audit: type=1800 audit(4294967332.206:22): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2239" name=22050820 dev="tmpfs" ino=1569 res=0 errno=0
[  739.173654][T17640] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2241'.
[  739.553696][T17641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37
[  742.102858][T17679] synth uevent: /bus/mei: unknown uevent action string
[  744.204772][T17709] zswap: compressor 000 not available
[  747.055861][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'.
[  747.526041][T17763] zswap: compressor 000 not available
[  748.272402][T17794] HfR: entered promiscuous mode
[  750.653606][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2277'.
[  750.680978][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'.
[  750.742093][T17828] ipvlan1: entered allmulticast mode
[  750.766906][T17828] veth0_vlan: entered allmulticast mode
[  750.777007][T17831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2278'.
[  751.040826][T17820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2269'.
[  751.476146][T17840] can: request_module (can-proto-4) failed.
[  752.122122][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  752.128704][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  752.206905][T17850] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  752.244129][T17851] HfR: entered promiscuous mode
[  752.260076][T17850] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  752.329407][T17850] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  752.531559][T17853] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum
[  753.063114][ T9829] ------------[ cut here ]------------
[  753.068695][ T9829] ODEBUG: free active (active state 0) object: ffff8880773892d8 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0
[  753.111357][ T9829] WARNING: CPU: 1 PID: 9829 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0
[  753.120927][ T9829] Modules linked in:
[  753.124854][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.0.693 Tainted: G     U              6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  753.138378][ T9829] Tainted: [U]=USER
[  753.142180][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  753.152318][ T9829] RIP: 0010:debug_print_object+0x1a2/0x2b0
[  753.158483][ T9829] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 76 15 8c 4c 89 e6 48 c7 c7 00 6b 15 8c e8 5f 75 9c fc 90 <0f> 0b 90 90 58 83 05 76 34 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  753.178615][ T9829] RSP: 0000:ffffc900040ef768 EFLAGS: 00010286
[  753.184715][ T9829] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1a8
[  753.192969][ T9829] RDX: ffff88803072bc00 RSI: ffffffff817aa1b5 RDI: 0000000000000001
[  753.201003][ T9829] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  753.209004][ T9829] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1571a0
[  753.216980][ T9829] R13: ffffffff8bafe840 R14: ffffffff8a880fd0 R15: ffffc900040ef868
[  753.224985][ T9829] FS:  0000000000000000(0000) GS:ffff888124860000(0000) knlGS:0000000000000000
[  753.233979][ T9829] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  753.240846][ T9829] CR2: 0000200000325000 CR3: 00000000847c6000 CR4: 00000000003526f0
[  753.248876][ T9829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  753.256858][ T9829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  753.264912][ T9829] Call Trace:
[  753.268233][ T9829]  <TASK>
[  753.271172][ T9829]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  753.276662][ T9829]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  753.282752][ T9829]  debug_check_no_obj_freed+0x4b7/0x600
[  753.288488][ T9829]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  753.294571][ T9829]  ? rcu_is_watching+0x12/0xc0
[  753.299388][ T9829]  ? kmem_cache_free+0x2d1/0x4d0
[  753.304349][ T9829]  kfree+0x28f/0x4d0
[  753.308292][ T9829]  ? hci_release_dev+0x4d8/0x600
[  753.313290][ T9829]  hci_release_dev+0x4d8/0x600
[  753.318165][ T9829]  ? __pfx_hci_release_dev+0x10/0x10
[  753.323470][ T9829]  ? rcu_is_watching+0x12/0xc0
[  753.328273][ T9829]  ? kfree+0x24f/0x4d0
[  753.332358][ T9829]  bt_host_release+0x6a/0xb0
[  753.336954][ T9829]  ? __pfx_bt_host_release+0x10/0x10
[  753.342281][ T9829]  device_release+0xa1/0x240
[  753.346881][ T9829]  kobject_put+0x1e7/0x5a0
[  753.351347][ T9829]  ? __pfx_vhci_release+0x10/0x10
[  753.356387][ T9829]  put_device+0x1f/0x30
[  753.360590][ T9829]  vhci_release+0x81/0xf0
[  753.364935][ T9829]  __fput+0x402/0xb70
[  753.368946][ T9829]  task_work_run+0x14d/0x240
[  753.373553][ T9829]  ? __pfx_task_work_run+0x10/0x10
[  753.378739][ T9829]  do_exit+0x86c/0x2bd0
[  753.383178][ T9829]  ? __pfx_do_exit+0x10/0x10
[  753.387948][ T9829]  ? do_raw_spin_lock+0x12c/0x2b0
[  753.392993][ T9829]  ? find_held_lock+0x2b/0x80
[  753.397726][ T9829]  do_group_exit+0xd3/0x2a0
[  753.402242][ T9829]  get_signal+0x2673/0x26d0
[  753.406757][ T9829]  ? __pfx_get_signal+0x10/0x10
[  753.411634][ T9829]  ? do_futex+0x122/0x350
[  753.415972][ T9829]  ? __pfx_do_futex+0x10/0x10
[  753.420702][ T9829]  arch_do_signal_or_restart+0x8f/0x790
[  753.426255][ T9829]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  753.432449][ T9829]  exit_to_user_mode_loop+0x84/0x110
[  753.437793][ T9829]  do_syscall_64+0x3f6/0x490
[  753.442408][ T9829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.448354][ T9829] RIP: 0033:0x7f859af8e929
[  753.452773][ T9829] Code: Unable to access opcode bytes at 0x7f859af8e8ff.
[  753.459820][ T9829] RSP: 002b:00007f859be740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  753.468260][ T9829] RAX: fffffffffffffe00 RBX: 00007f859b1b5fa8 RCX: 00007f859af8e929
[  753.476235][ T9829] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f859b1b5fa8
[  753.484543][ T9829] RBP: 00007f859b1b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  753.492672][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f859b1b5fac
[  753.500680][ T9829] R13: 0000000000000000 R14: 00007ffc86ad3fd0 R15: 00007ffc86ad40b8
[  753.508720][ T9829]  </TASK>
[  753.511740][ T9829] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  753.519023][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.0.693 Tainted: G     U              6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  753.532495][ T9829] Tainted: [U]=USER
[  753.536297][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  753.546351][ T9829] Call Trace:
[  753.549634][ T9829]  <TASK>
[  753.552580][ T9829]  dump_stack_lvl+0x3d/0x1f0
[  753.557208][ T9829]  panic+0x71c/0x800
[  753.561118][ T9829]  ? __pfx_panic+0x10/0x10
[  753.565550][ T9829]  ? show_trace_log_lvl+0x29b/0x3e0
[  753.570776][ T9829]  ? check_panic_on_warn+0x1f/0xb0
[  753.575900][ T9829]  ? debug_print_object+0x1a2/0x2b0
[  753.581104][ T9829]  check_panic_on_warn+0xab/0xb0
[  753.586066][ T9829]  __warn+0xf6/0x3c0
[  753.589976][ T9829]  ? debug_print_object+0x1a2/0x2b0
[  753.595179][ T9829]  report_bug+0x3c3/0x580
[  753.599519][ T9829]  ? debug_print_object+0x1a2/0x2b0
[  753.604724][ T9829]  handle_bug+0x184/0x210
[  753.609065][ T9829]  exc_invalid_op+0x17/0x50
[  753.613575][ T9829]  asm_exc_invalid_op+0x1a/0x20
[  753.618436][ T9829] RIP: 0010:debug_print_object+0x1a2/0x2b0
[  753.624250][ T9829] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 80 76 15 8c 4c 89 e6 48 c7 c7 00 6b 15 8c e8 5f 75 9c fc 90 <0f> 0b 90 90 58 83 05 76 34 ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  753.643870][ T9829] RSP: 0000:ffffc900040ef768 EFLAGS: 00010286
[  753.649946][ T9829] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa1a8
[  753.657920][ T9829] RDX: ffff88803072bc00 RSI: ffffffff817aa1b5 RDI: 0000000000000001
[  753.665892][ T9829] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  753.673871][ T9829] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1571a0
[  753.681861][ T9829] R13: ffffffff8bafe840 R14: ffffffff8a880fd0 R15: ffffc900040ef868
[  753.689846][ T9829]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  753.695336][ T9829]  ? __warn_printk+0x198/0x350
[  753.700120][ T9829]  ? __warn_printk+0x1a5/0x350
[  753.704926][ T9829]  ? debug_print_object+0x1a1/0x2b0
[  753.710133][ T9829]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  753.715618][ T9829]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  753.721451][ T9829]  debug_check_no_obj_freed+0x4b7/0x600
[  753.727018][ T9829]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  753.733103][ T9829]  ? rcu_is_watching+0x12/0xc0
[  753.737898][ T9829]  ? kmem_cache_free+0x2d1/0x4d0
[  753.742870][ T9829]  kfree+0x28f/0x4d0
[  753.746782][ T9829]  ? hci_release_dev+0x4d8/0x600
[  753.751744][ T9829]  hci_release_dev+0x4d8/0x600
[  753.756530][ T9829]  ? __pfx_hci_release_dev+0x10/0x10
[  753.761859][ T9829]  ? rcu_is_watching+0x12/0xc0
[  753.766648][ T9829]  ? kfree+0x24f/0x4d0
[  753.770757][ T9829]  bt_host_release+0x6a/0xb0
[  753.775360][ T9829]  ? __pfx_bt_host_release+0x10/0x10
[  753.780657][ T9829]  device_release+0xa1/0x240
[  753.785264][ T9829]  kobject_put+0x1e7/0x5a0
[  753.789717][ T9829]  ? __pfx_vhci_release+0x10/0x10
[  753.794779][ T9829]  put_device+0x1f/0x30
[  753.798968][ T9829]  vhci_release+0x81/0xf0
[  753.803351][ T9829]  __fput+0x402/0xb70
[  753.807352][ T9829]  task_work_run+0x14d/0x240
[  753.811971][ T9829]  ? __pfx_task_work_run+0x10/0x10
[  753.817122][ T9829]  do_exit+0x86c/0x2bd0
[  753.821313][ T9829]  ? __pfx_do_exit+0x10/0x10
[  753.825930][ T9829]  ? do_raw_spin_lock+0x12c/0x2b0
[  753.830999][ T9829]  ? find_held_lock+0x2b/0x80
[  753.835699][ T9829]  do_group_exit+0xd3/0x2a0
[  753.840240][ T9829]  get_signal+0x2673/0x26d0
[  753.844790][ T9829]  ? __pfx_get_signal+0x10/0x10
[  753.849690][ T9829]  ? do_futex+0x122/0x350
[  753.854047][ T9829]  ? __pfx_do_futex+0x10/0x10
[  753.858762][ T9829]  arch_do_signal_or_restart+0x8f/0x790
[  753.864333][ T9829]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  753.870531][ T9829]  exit_to_user_mode_loop+0x84/0x110
[  753.875843][ T9829]  do_syscall_64+0x3f6/0x490
[  753.880469][ T9829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.886376][ T9829] RIP: 0033:0x7f859af8e929
[  753.890800][ T9829] Code: Unable to access opcode bytes at 0x7f859af8e8ff.
[  753.897836][ T9829] RSP: 002b:00007f859be740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  753.906275][ T9829] RAX: fffffffffffffe00 RBX: 00007f859b1b5fa8 RCX: 00007f859af8e929
[  753.914278][ T9829] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f859b1b5fa8
[  753.922279][ T9829] RBP: 00007f859b1b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  753.930263][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f859b1b5fac
[  753.938249][ T9829] R13: 0000000000000000 R14: 00007ffc86ad3fd0 R15: 00007ffc86ad40b8
[  753.946247][ T9829]  </TASK>
[  753.949579][ T9829] Kernel Offset: disabled
[  753.953926][ T9829] Rebooting in 86400 seconds..