last executing test programs:

2m21.803612446s ago: executing program 2 (id=334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d52827d6fd24ebcc7a83b03a136290c93d3e6e506", @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25020000007a000700656bb2f8b5b8d13c322fe1d63d8b46facadf82104d7ba1d3a8e7f60f902195ee8c1d691c38b5187b84488c05cd1561cdbdb158a63e04cfaf49c24d05f136dd663af70309cb9d2b668c88404ef3fec7c3ca9f235453640a93e0428ef56ebb22ba3ca974a3cee4f60376868cdf5ac0a8dcd7093fc5abbf0000080005007f00000108000400ffffffff1400030000000000000000000000ffffe000000108000500ac1414aa050001000700000014000300fc020000000000000000000000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x68d0, 0x3, 0xeb1, r2, 0x7ffc)
r3 = io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001a00), 0x88000, 0x0)
ioctl$auto_RTC_IRQP_SET(r4, 0x4008700c, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0)
ioctl$auto(r5, 0x64ca, 0x40)
sendfile$auto(r3, r2, &(0x7f0000000000)=0x8f4, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
ioctl$auto(0x3, 0xc0585605, 0x38)
clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r6, 0x0, 0x20)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20007, 0x0, 0x100000eb1, r3, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)

2m21.126276138s ago: executing program 2 (id=337):
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
socket(0x2, 0x5, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000)
prctl$auto(0x23, 0xf, 0x0, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000140), 0x55)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
eventfd$auto(0x8c)
socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x7, &(0x7f0000000180), 0x1)
io_uring_register$auto(0x2, 0x7, 0x0, 0x1)
socket(0x28, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)

2m20.204139258s ago: executing program 2 (id=342):
memfd_secret$auto(0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ftruncate$auto(0x3, 0x700) (async)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = socket(0x2, 0x1, 0x0) (async)
memfd_create$auto(0x0, 0xe) (async)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
memfd_secret$auto(0x0) (async)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
ftruncate$auto(0x3, 0x700) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0xb1)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) (async)
mprotect$auto(0xa73, 0x4, 0x99e4) (async)
io_uring_setup$auto(0x6, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000)
mbind$auto(0xffffffffffffff00, 0xb, 0x4, &(0x7f0000000180)=0x100000001, 0x0, 0x8b0e) (async)
socket(0x10, 0x2, 0x0) (async)
io_uring_setup$auto(0x4bf15e08, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) (async)
socket(0xa, 0x801, 0x84) (async)
socket(0xa, 0x4, 0x431f) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0xa) (async)
getsockopt$auto(0x6, 0x0, 0xd0, 0xfffffffffffffffe, 0x0)

2m20.015218533s ago: executing program 2 (id=343):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_NAME={0x6, 0x1, 'k\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x7, 0x3, '^+\x00'}, @SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0x14, 0x3, '!*[()@-h\\:-(#@%\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xe}, @SMC_PNETID_NAME={0x4}, @SMC_PNETID_NAME={0x9, 0x1, '\x96#*@\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xfa}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20048800)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
r3 = socket(0x10, 0x2, 0x4) (async)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) (async)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 32)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) (async)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) (async, rerun: 32)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
lsm_list_modules$auto(0x0, 0x0, 0x0)
poll$auto(&(0x7f0000000d40)={r0, 0x1, 0xa}, 0x5, 0x3)

2m17.935478536s ago: executing program 2 (id=350):
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x4a380, 0x0) (async, rerun: 32)
r1 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/failslab/times\x00', 0x80000, 0x0) (rerun: 32)
close_range$auto(r0, r1, 0xfff) (async)
r2 = socket(0xa, 0x0, 0x7)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c002}, 0x8000)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x50842, 0x134, 0x8}, 0x18)
setsockopt$auto(r4, 0x0, 0x9, &(0x7f0000000240)='\x00', 0x5) (async)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) (async)
rt_sigprocmask$auto(0x8d, &(0x7f00000002c0)={0x9}, &(0x7f0000000300)={0x4}, 0x8) (async)
close_range$auto(r4, r1, 0xf71)
capset$auto(&(0x7f0000000380)={0x673, <r6=>0x0}, &(0x7f00000003c0)={0x80000000, 0xe, 0x8}) (async)
stat$auto(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x80000000, 0x45, 0x4, 0x7, <r7=>0xee00, 0x0, 0x0, 0x4, 0x4, 0x5, 0x2, 0x8, 0x101, 0x1, 0x7ff, 0x88e76f0, 0xe})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x360, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x349, 0x30, 0x0, 0x1, [@generic="32458db2393246e603c582bd96e1b014f7e43a08e015b99454feb1223fef03f75751af5581c1674011baff51c74e8266bbd53562c62433fdbd1346a66159654072c8a30f410b428b95a00fd1de2068665ab9fe2f3729d7e8f9650fb25210600e5bd6b4f14230d84bb4a0854f8062a71eba4805192afdf62d", @generic="1fed3b5f0da230ee69457a2cc50b1a00ada6985c34739f2b9cd571c1f9d4a896255aa5822ae99de12a6d27b8993c8c12f5580b2632c545e2dec244a9a7daf07e6a1c3cffa7664a13e076188c59aefbb2d9f88e05543fda8140979b15773af33aaa93f5b52906cbd5940d4dce5db754b13281d0973e5c79463d24cd4ba088918f3a999f68533b98f2732f11be561a", @typed={0x8, 0xbf, 0x0, 0x0, @pid=r6}, @generic="7701de996cc1b441a6be49ba64847483a99a0a7fb7b1909e66f5cb057ae227296c80c795edbb47bd77d57964b8134db7335a6060b1258359f450768e6bd41d", @typed={0xc1, 0xd9, 0x0, 0x0, @binary="aa7f1c8d552e73d1c1668417e8049f26651efa44ea4d8e895c55221dc768e4766c40d04877436672da3375b7cf28aa1f6e912255c9b14e73956027741b1faa81a134747cad94614df470f29125467460cac2edb1b53446165a80556c948ba57adb6309ceb8d29c44e9b42fa6e2f4a636c33016c15e103aa41a4c56903e390b34d4536f75b1ccfd7288856f7994c0625e198bd0e12f9eb305f438bbab1a1608c20b88a60a83643d9105b0e3647fd38c070568cc5446840ea5704643ed10"}, @nested={0x24, 0xf9, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x13f}]}, @generic="f1166669343b9f35098bf9a16f7d6f56dbe8401e81b92b1c3c3cf423551c83dc91ff37192a8a9ff0906f1c17171153fe", @typed={0x4, 0x87}, @generic="d123550a426c9e7e5c34892f122513fdb1c136283d3a87396492a3fe54e294138f8d9949bcd0a05c3c770cf27fa554d0c00d9e78d8f29a4f74276c2c71f000d9a604bfe3666f40490df6b5a0f6eb883968231594ecf5e623eaa716ee75771c7f8121e773381e3b729aa10a23a5e6b49dd10ad6c62f85d88f811cd847aec871a0d8bc6e841e911f6cabe372d9f4480050f6ce802585077775858bb733cb41e876599e781234048cb4c12e6420905ba44facd55d139cb8be1cc502fc2186b53b51d323f657c69308b6459674b330c7d54eb97e4adf", @typed={0x8, 0x65, 0x0, 0x0, @fd=r2}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x23}, 0x0)
r8 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000940), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'pimreg0\x00', <r9=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'veth1_to_batadv\x00', <r10=>0x0})
sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x254, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NCSI_ATTR_IFINDEX={0x8, 0x1, r9}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r10}, @NCSI_ATTR_PACKAGE_LIST={0x90, 0x2, 0x0, 0x1, [@nested={0x89, 0x97, 0x0, 0x1, [@generic="9eac48254276bc472f55f7ab0f487577c21900a2c2a1abac7e09c8241036c7eafe29d3105fa9eef367272be04b688920ec87f1dcb9a05f77a8903fea8df91302882702f452c7a64f09d36b618a9d016cc346ce547a4b3e085fcca0d554e87c78661433112fd91aacdf3e19e689e79622abdbc8f401111b3d5a", @nested={0x4, 0x3}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x31}]}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x80000000}, @NCSI_ATTR_PACKAGE_LIST={0x198, 0x2, 0x0, 0x1, [@nested={0xc, 0x7, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0x143}]}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0xe2}]}, @nested={0xf9, 0x107, 0x0, 0x1, [@nested={0x4, 0xc7}, @generic="61af3e6000fb8124b7568ea192a1f46f3bfeab3f067eabf5f8d3e20d2fd9c1cdea6e0d70d58a58fcb27fcfe55037125cc2d5a7db742900bf62d6e6376f767f4fd463924a6c143c9dd5a0d1457fd5512b8c88b4bd60dc6ed18a420e1f399400484baa77f1c7fb879e5214aed4fb77f3eaf2b04e8357983f87dd4b6950baae77051eac0fb50e515f30a9b0327fde9931cfc7ebe7fe237e4e4ee43c176ce679b07b7f51b5667546de583f07bfe1807adeb2b18a2c0717096754e84cc25c59674ea22c735dc451a4e6da9818adf663faa3a15025ba0cc2738326185c4f5ba76a269a995586abd718221431f7a01a90", @nested={0x4, 0xcc}]}, @typed={0x1d, 0xca, 0x0, 0x0, @binary="0d256c10596615cc42d346d421a856e42eedb4bdd4d4f0e363"}, @typed={0x8, 0xbd, 0x0, 0x0, @fd=r1}, @generic="ac37a4b3ba19d0b3c3715a334e4688bd4f43351e1e158d66218e9749da54636db7fe3f804c4f4e47f962615372b2e734edcd7b7935754765744bb0d4cb6478b9"]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/input/event2\x00', 0x60480, 0x0)
r11 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/mtd0ro\x00', 0x0, 0x0)
read$auto_mtd_fops_mtdchar(r11, &(0x7f0000000d80)=""/112, 0x70) (async)
io_uring_setup$auto(0x7901b903, &(0x7f0000000e00)={0x6, 0xf6, 0xffffffff, 0x9b5e, 0x0, 0x7ff, <r12=>r11, [0x0, 0x8, 0xac2], {0x3, 0x0, 0x80, 0x0, 0x29a, 0x6, 0x1ff, 0x8, 0x4376}, {0x3, 0x1, 0x2, 0x6, 0x2, 0x10000, 0x4, 0x6, 0xb2}}) (async)
r13 = signalfd$auto(r0, &(0x7f0000000e80)={0x2}, 0x3)
r14 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000f00), r12)
sendmsg$auto_SEG6_CMD_DUMPHMAC(r13, &(0x7f0000000fc0)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r14, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32)
r15 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000001000)='/dev/binderfs/features/oneway_spam_detection\x00', 0x280, 0x0) (rerun: 32)
setsockopt$auto(r15, 0x6, 0x80000001, &(0x7f0000001040)='/dev/full\x00', 0xfffffff7) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFC_CMD_LLC_SDREQ(r16, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x4)
ioctl$auto(r5, 0x200, r0)

2m14.779778658s ago: executing program 2 (id=363):
mmap$auto(0x2, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x11c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0xf5, 0x5, "0b5aafbe33966982016192b3534fafdfd848faf69b6a3aead8ea332fff3fcdfcd16034f69b276e5c2a3f310250d98db6f20aa571b679762e13b7818407b5f9c8ad8b443bdc918ae0c94f6cf897d82a1971cccc355dac6e94203eab97ba9439e1ca3a9a787c025a7da3a34941173f2598c00090b7ce5ebf1df8886b8cf2e828efbe1f9d9818780efde08d5a9b66660eeb887282467c19d3a297e40797bd063b5fee75f7652d0685bc78f4c83fe4484dcebef0735fcb553c593561905557722d24f8974f186173d8652e1e05490ad8569bfbed0bc049a0a2c2020632e21c6262df4b893cfd4f5bbf5c145cc3c6edc1442c98"}, @OVS_VPORT_ATTR_NAME={0xa9, 0x3, 'SMC_PNETID\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1200c001}, 0x240000c8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xfbff7, &(0x7f0000000140)='/\x00\x00\xe0\x00\x00\x00\x00\x00cgs/Qlatform/dummy_hcd.6/usb7/power/wakeup_acti\x06e_count\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000004, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
capset$auto(0x0, 0x0)
move_mount$auto(r0, 0x0, r0, 0x0, 0x48d)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfcffffff, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x44804)
setfsuid$auto(0xee01)
r4 = setfsuid$auto(0xee01)
setresuid$auto(0x0, r4, 0x0)
sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000828bdf37bdee02d3a3af50a8a3aa5e80095df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40)

1m59.332920618s ago: executing program 32 (id=363):
mmap$auto(0x2, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)
ioperm$auto(0x7, 0x6, 0x2)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x11c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0xf5, 0x5, "0b5aafbe33966982016192b3534fafdfd848faf69b6a3aead8ea332fff3fcdfcd16034f69b276e5c2a3f310250d98db6f20aa571b679762e13b7818407b5f9c8ad8b443bdc918ae0c94f6cf897d82a1971cccc355dac6e94203eab97ba9439e1ca3a9a787c025a7da3a34941173f2598c00090b7ce5ebf1df8886b8cf2e828efbe1f9d9818780efde08d5a9b66660eeb887282467c19d3a297e40797bd063b5fee75f7652d0685bc78f4c83fe4484dcebef0735fcb553c593561905557722d24f8974f186173d8652e1e05490ad8569bfbed0bc049a0a2c2020632e21c6262df4b893cfd4f5bbf5c145cc3c6edc1442c98"}, @OVS_VPORT_ATTR_NAME={0xa9, 0x3, 'SMC_PNETID\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1200c001}, 0x240000c8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xfbff7, &(0x7f0000000140)='/\x00\x00\xe0\x00\x00\x00\x00\x00cgs/Qlatform/dummy_hcd.6/usb7/power/wakeup_acti\x06e_count\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000004, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
capset$auto(0x0, 0x0)
move_mount$auto(r0, 0x0, r0, 0x0, 0x48d)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfcffffff, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x44804)
setfsuid$auto(0xee01)
r4 = setfsuid$auto(0xee01)
setresuid$auto(0x0, r4, 0x0)
sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000828bdf37bdee02d3a3af50a8a3aa5e80095df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40)

26.779633548s ago: executing program 0 (id=777):
mmap$auto(0x40000002, 0x202000b, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = getpid()
sched_setparam$auto(r0, &(0x7f0000000000)={0xa})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x383140, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r1 = socket(0xa, 0x3, 0x3a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop9/queue/io_poll\x00', 0x240103, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
acct$auto(&(0x7f0000000000)='/sys/devices/pla\xe1form/i8042/serio1/resync_t)me\x00')
setsockopt$auto(r1, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc)
mprotect$auto(0x1, 0x8000000000000001, 0x7)
add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9)
acct$auto(0x0)
getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
epoll_create1$auto(0x4)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x53b040, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x2480, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
ustat$auto(0x801, 0x0)
keyctl$auto(0x0, 0x0, 0x2, 0x628, 0xfffffffffffffffd)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x108881, 0x0)
clone$auto(0xfffffffffffffffa, 0x8, &(0x7f0000000080)=0xe3f, &(0x7f0000000100)=0x7, 0x7)
write$auto(r4, &(0x7f0000000140)='\x00\x81\x00\x00\x00\x00\x01\xff\x00', 0x20)

25.857385701s ago: executing program 0 (id=781):
connect$auto(0x3, 0x0, 0x55)
syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, 0x0, 0x4000804)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00`\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bc)

25.352558061s ago: executing program 0 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
lsm_get_self_attr$auto(0x1, &(0x7f0000000080)={0xfffffffffffffffa, 0x8, 0x8, 0x2c, "3daffff0590d888cbb34751b50f7c8225511bdbedbeaa962d439e17b9df3b15cb619d81bb474e7bf5479b063"}, &(0x7f0000000000)=0x80000000, 0x80)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
listen$auto(0x3, 0xfffffffa)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_ENABLED={0x4}]}, @NFSD_A_SERVER_PROTO_VERSION={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/hsr_slave_1/forwarding\x00', 0x2002, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20343, 0x0)
sendfile$auto(r2, r3, 0x0, 0x1)

24.80785481s ago: executing program 0 (id=787):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x100100000109}, 0x84)
io_uring_setup$auto(0x6, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd10/queue/wbt_lat_usec\x00', 0x181040, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r1, 0x4b72, r2)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mlock$auto(0xfbe8, 0x4)
r5 = syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
move_pages$auto(r5, 0xdcd, &(0x7f00000001c0)=&(0x7f0000000100)="2afc04d6cb3be8a45d57f5202d860d9a94571f38950d4ccd636759a000af60e812126ba1462e1a9e40", &(0x7f0000000280)=0x9cb, &(0x7f00000002c0)=0xbb, 0x0)
lsm_list_modules$auto(&(0x7f0000000040)=0x401, &(0x7f0000000080)=0x4, 0x6)

23.269738538s ago: executing program 0 (id=791):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x108881, 0x0)
write$auto(r0, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x01\xff\x00', 0x20) (async)
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x22)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x28, 0x1, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) (async, rerun: 64)
socket(0x28, 0x3, 0x10001) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2438d4cb2de063a3e5dcd4c26ee78d80042d81c37dd38221d4b71dbf365dce3d05bb18cbce0434ca5e8e47625d78635aad429f562712ec3f3d7159eed41db4a183bcf6c4d2a7027f0516a3e65afde6bbe0d0a364f3de6308fdc4ee20eae92fbee719e8d22f2d406e2962d8f5c0d5101308c6e84c356c7a112d5d01b9d22b7b13880100000061cba05cda6a3138c62a", @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) (async, rerun: 32)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) (async)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x2, 0x1, 0x3, 0x300000000000000, 0x7ffffffe, 0x5, 0x6d3c, 0x5, 0x2]}, 0x0) (async)
unshare$auto(0x40000080) (async)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400fe00e4e819d1eba5df4b92b50cc7c1119b183cb8c20711833e16fef33721c375387424ae26cfad96b2ad946a", @ANYRES16, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x0) (async)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b3ac3fb4a05156f5206c000000", @ANYRES16, @ANYRES64=r4], 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x5) (async)
open$auto(&(0x7f0000000200)='./file0\x00', 0x49193, 0xff90)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x300) (rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYBLOB="f6b22bba88ca377c6f72f93b44bc18c57ca71a77277fec2b2cc3d831e67785a6e28aaf1a36b452418382378cd407449892265433e62d71197685bcf555781402be9f031ae7037278056593424def863e0b03a9c907c0cbd0c7931b8f20aa80f2591e3d4e1393e9cd24b072476a686005665056abb3383b8f62cd67aff1ec55c190e70258ba50971006131d6448f8a6d988538193cd53ba8afb19b6b900e4e6cbfec1029ab37b26167bc7ba2a09a3c1961a9ce50d46d83d24798772e05973a6c8b5224f14e65704bf1ac59e56ec4032fd927a6d30", @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x4000000) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ff) (async, rerun: 64)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) (rerun: 64)

20.11585509s ago: executing program 0 (id=800):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/24/effective_affinity\x00', 0x189900, 0x0)
lseek$auto(r1, 0x5, 0x0)
read$auto(r0, 0x0, 0xb4d3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
write$auto(0x3, 0x0, 0xfffffded)
write$auto(0x3, 0x0, 0xfdef)

7.775801768s ago: executing program 3 (id=863):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
open_by_handle_at$auto(r0, &(0x7f0000000080)={0x6b, 0xfffffffa, "cb61489fcd65044c99e153ba6fd2d1047f10e4d1b3078a20fcbe6ac471cd3f152d7a71fcd56282940f012ccfc68a9e57bcacfb1c607ac286e529b8d1f79780ee5bf951a3a85bf7e276d0bc43e436e0a94b198cf031ae71ea2a99c2b2266b31d7c04501ae9b33f02f420f43"}, 0x4)
mmap$auto(0x0, 0x9, 0x9, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/014/001\x00', 0xa901, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0)
mmap$auto(0x7, 0xa846, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, r0, 0x0)
close_range$auto(0x2, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xf, 0x4, 0x0)
getpeername$auto(0x3, 0x0, 0x0)
r4 = socket(0x26, 0x6, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0x8ed)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_DEL_PMK(r4, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="0400bd000400ae00c6005b00fa9f5f5bda62cbaa2bc17abc0aeab2f73fd3a1fcc6c6f34e69115be5cc629207764f4c90ca3014bbd67a2a8f5e2bb3b1795517d4411b9e5c5f66b72716069f84032e90e07730c64055f213dc6e50707e574c1fe1a33d30419aaa85c0cd1ea6fc59224870fcd0a8ed015a9f0f89229bacfd81f62d2aaa577a3e5917b63b83fea25f6f10c217756653fdecc65fee06d7db4ecad8c7e7484d0a4580cdf165fd967da362aa5a1a64caf2e751f17756b0dfb84e523fdca29248d58e14d90004000000", @ANYBLOB="08030000", @ANYRES32=r5], 0x308}, 0x1, 0x0, 0x0, 0xc804}, 0x8004)
sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000082bc6dce650e549fc86a0277a2024390f5d6b82bf362983d1bd95fa99be404a388ad8768f910017a5ceee1387b36529150162312dd57757637ee6f86c022fddf3f9aa8437b5b53861477c9a413", @ANYRES16=r6, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
recvfrom$auto(r5, &(0x7f0000000080)="65e7f3bb48f5f7602bf1eba49ec88af1b433947eee5da9b930016fc8408e96cbf5fa45cce0daa6e750a832e0465218e5477a163d48a6b3929c0d2d81df9eb26eb1357b1966886be9f0f50ddfc8e4", 0xa, 0x6, &(0x7f0000000100)=@ethernet={0x306, @multicast}, &(0x7f0000000140))
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
mmap$auto(0x0, 0x5, 0xe13, 0x9b75, r3, 0x7ffd)
setrlimit$auto(0x1000000007, 0x0)
ioctl$auto(0x3, 0x4020940c, 0x5)
ioctl$auto(0x3, 0xae41, r8)
ioctl$auto_KVM_CREATE_VM(r7, 0x8400ae8e, 0x0)
migrate_pages$auto(0x0, 0xffffffffffffffc0, 0x0, 0x0)

7.436286353s ago: executing program 3 (id=864):
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x400, 0x0)
setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0)
bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
acct$auto(&(0x7f0000000000)='/proc/12/smp_ity_list\x00\x00\x00\x00\x00\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket(0x2, 0x800, 0x106)
setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x2)
mbind$auto(0x0, 0x1, 0x0, 0x0, 0x7, 0x6)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x80008000)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
pidfd_open$auto(0x1, 0x0)
socketpair$auto(0x1e, 0xffffffff, 0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80047437, 0x0)

7.300012804s ago: executing program 4 (id=865):
connect$auto(0x3, 0x0, 0x55)
syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, 0x0, 0x4000804)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00l\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bc)

7.073485376s ago: executing program 4 (id=867):
unshare$auto(0x40000080)
mmap$auto(0x3e0, 0x400005, 0xdf, 0x9b72, 0x2, 0x40)
madvise$auto(0x0, 0x6, 0x1)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x8040, 0x0)
ppoll$auto(&(0x7f0000000080)={r0, 0x9, 0x6}, 0x10001, 0x0, 0x0, 0x8)
acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2')
removexattr$auto(0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCGDEV2(r1, 0x542f, 0x0)
mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4a140, 0x0)
mmap$auto(0x0, 0x20009, 0x4010000000df, 0x400ebf, r3, 0xc004)
writev$auto(0xca, 0x0, 0x7e)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0)
madvise$auto(0x0, 0x2000040080000005, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
close_range$auto(0x2, 0x8, 0x0)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0x1ff, 0x401, 0x8000)
madvise$auto(0x5e3, 0xffffffffffff0005, 0x7d5)
mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x2, 0x1)
mmap$auto(0xa6, 0x4400006, 0x9, 0xffffffffffffefff, r4, 0x800000000000006e)

6.435227927s ago: executing program 4 (id=868):
mmap$auto(0x0, 0x2000002000a, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
io_uring_register$auto(r0, 0x4, &(0x7f0000000100)="eff89c9ccffdca785a4730320331d4e41d1fc3f2dac45e49b348a1268411826933503e776b3caadc17f41cc1d62847f05a9cd3d14eba3257e310a9a8f7504fc24ac2cadb85af6c6f998956e7f85246cbf63e727c740159b8928d7a5d4b804f5586ce8ebd77d73e3e3d926c1a007288e146d7", 0x81)
move_pages$auto(0x0, 0x33b, &(0x7f0000000080), 0x0, 0x0, 0x4)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mmap$auto(0xffffffffffffffff, 0x2020008, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x40a01, 0x0)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r2, 0x4b72, r3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0xa, 0x5, 0x84)
r5 = getsockopt$auto(r4, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r6 = socket(0xa, 0x2, 0x0)
r7 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r7, 0x29, 0x14, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\x9a\xa0\x14\x95\xb9A\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x02\x00\x00\x00y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00', 0x10000110)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='_'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r9 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="332a3285", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf250300000004000800"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x800)
r11 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000180), r6)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xe4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008881}, 0x24000010)
ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x7, r8})
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000400), r4)

6.171901242s ago: executing program 4 (id=869):
r0 = socket(0x2, 0x6, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, 0x0, 0x4004804)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x623d)
mmap$auto(0x3, 0x400005, 0x5, 0x9b72, 0x2, 0x8000)
close_range$auto(r0, r0, 0x1ffffff)
futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x40000, 0x4}, 0x5, 0x6, 0x0, 0xffffd88b)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000)
close_range$auto(0x2, r0, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x1e, &(0x7f0000000240)="a83e675c209d2f0f2443bf5b582802317c5887d72e1614a4ba664292f51edf65361ead7b91a8fc0d431b5e975a4ac267580fa7278af48baf30ad9f5eebb1e7a34debed0de529e1fdec4f2023cecd60133617090cf0f7d136fe6c000000003ca8cbb2c35f57da0c84fde0847972e85e53050000000000000097d8a73af769ef9ecfa89c3c4df880571bb5280bdf47c94b24f836fc5446035fcb22a0c07ae0c63400fbd716244db91934a65edfb5ea9569149ce79ea8957adf8738be2b67dafce597037fd2e29ad8a3d62e96c702d4025454ad3b3f8c5f7380da14dbca5b0d106b92f23616bc2d772549e23fb0aa90b24c54ce145b377a494e66c28076298747b9eb0f5a3c312b60a8195dec4bc7278969b0534f4132b1d45aca6c919054bc0b3979d3b10d0278e0d836c0ee98b80448edee7d6bb4ce77cc4cb1a2886278a994c9fa0f229afc4e15d859ca30f1130ce30f6eb8c00117b4861544a5ee5f2137584231ba4f326b0430b2c13e6e486dddc287f6ad7e", 0x1)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x2, 0x80002, 0x73)
r2 = socket(0x38, 0x1, 0x81)
bind$auto(0x3, 0x0, 0x6a)
write$auto(0x3, 0x0, 0xfdef)
mknod$auto(0x0, 0x1, 0x4)
futex$auto(0xfffffffffffffffc, 0x56, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x10)
finit_module$auto(r2, &(0x7f0000000040)='\x00', 0x9)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x0, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r3)
ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xe6, 0x15, 0xffffffffffffffff, 0x8000)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, 0x0, 0x1000, 0x4)
msgctl$auto(0x0, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)

6.028838582s ago: executing program 4 (id=870):
ioperm$auto(0x3, 0xe, 0x2000000000000149)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x4, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r1 = socket(0x11, 0x80003, 0x300)
sysfs$auto(0x2, 0x2, 0x0)
setsockopt$auto(r1, 0x107, 0x8, 0x0, 0x6)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
capget$auto(0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
write$auto_tracing_err_log_fops_trace(r0, 0x0, 0x0)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800)
unshare$auto(0x40000080)
recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0)
ioprio_set$auto(0x1, 0x0, 0x0)

5.407193906s ago: executing program 3 (id=871):
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7)
fanotify_init$auto(0x4f1, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x88441, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x127b, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
madvise$auto(0x3, 0xce2, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
poll$auto(0x0, 0x5, 0x108)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80802, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_targets\x00', 0x8340, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = gettid()
rt_sigqueueinfo$auto(r3, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}})
read$auto_proc_page_owner_operations_page_owner(r2, &(0x7f0000002080)=""/4096, 0x1000)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0)
pread64$auto(r5, &(0x7f0000000040)='IOAM6\x00', 0x9, 0x4)
ioctl$auto(r1, 0x4b72, r4)

5.339800666s ago: executing program 1 (id=872):
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000)
unshare$auto(0x40000080)
r0 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0)
get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x402501, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r2, 0x301, 0x70bc2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4010)
unlink$auto(&(0x7f0000000040)='./file0\x00')

4.743661433s ago: executing program 33 (id=800):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/24/effective_affinity\x00', 0x189900, 0x0)
lseek$auto(r1, 0x5, 0x0)
read$auto(r0, 0x0, 0xb4d3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
write$auto(0x3, 0x0, 0xfffffded)
write$auto(0x3, 0x0, 0xfdef)

4.229039416s ago: executing program 1 (id=874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x10000000024, 0x0, 0xfffffffffffffffa, 0x7, 0x80001)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x10d002, 0x0)
r1 = geteuid()
r2 = geteuid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000002d40)=ANY=[@ANYBLOB="401b0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f4a5c4aeae079451561204c679c3ccb2b1899a8558770d750df0f72348900265ee010bbfbe110f29fda6d5ca55f66e69099bfab6cd9b00a3b669900c4e2c6ba98327c803531e444d1bc296794d3b6d65897f0c573b41f86917fb79de8e32a1d7e891d84b9165ff6a5507bbf2d15d1481d733b2b167036a264e1afd75a2a7c2ef5a98e9a02974f5e16cfa6ec74853ae0e349680bc36b343359706366b02ef800400978008000400ac1e01013ee493cb545086131c987ce5487a4f37322aac8a7cba1424a0bba3c241309deb5d1e4eef377c405ce0dd12ebe57d17a105c85772b308e4df4d289e10dce1ddee98e26c3a8893799d20259459cc31af8cb69c7fac96d48755ca3a7b1f06d275bd65af721dd5ac00ec4cd6de3a2352bd45e555d8ce0a1ae51c623a9703811361a4f3d7a588887b5076112d7601c67e85612771e09d0b3a0b59e8e8df5925620d3fa5fb3e5693b99c15f1c261e106359779f9977e3655c928601defd480579d73ef3dbbc0c2606613a4cf5408b3d0a9073fa2bcfe7d740e3971f2188cddb4aabdf6414ca4d534c722edf55582082809005a007d5b215b000000006bc0fb618a0560476357614f1ed9eca1ca66c4a4cc7d53a802e8866f7458df1862a5ba090bf68c5e5fb0bbf984af36a52a06e7d5e97011a2b71161f277b8fb84177c01375ec3ceb3f7eff608b0d92824db88a172d3f37dfd24f4ed04ad088816f6af8f08003d00", @ANYRES32=r2, @ANYBLOB="1400320000000200000000000000ffffffffffff0800e500", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1b40}, 0x1, 0x0, 0x0, 0x20004050}, 0x930fc642645ec9f6)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.7/driver_override\x00', 0x182, 0x0)
sendfile$auto(r4, r4, 0x0, 0x20000000088)
socket(0x23, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fbdbdf2599000000040008010c0025800800f300", @ANYRES32=r4, @ANYBLOB="1e009400154691fd4d31c4bba80900000000000000611dafc485008007ba00000dec63090000c1bd000000000000000000008616b336179ec3ce3f8526e407739c1572e5e50a40686bacdfdc02461cf76d29d729bae6a08788d41abf1e1341e1be8cf341e97afe4b724e67"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xf, 0x5, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/interrupts/gpe0E\x00', 0x0, 0x0)
ioctl$auto(0x3, 0x1, 0x90000800000402)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000500)="2da657dbf3c65d458546e20bcf5ab6d0067aaa5ede40f81c440b62fe94ac038fc9dc2cb94d9228c5aa413181cd92f7509b6bd084d84a0214ca31aff321dbcb7e087ca0d7358b5f89a666688c1bef3e824a36afc96eef8299901e35a5c0d347361417c4d5a582fade4d21866d398f9513a2470796915b1647", 0x1aa, &(0x7f0000000100)={0x0, 0xa}, 0x3, 0x0, 0x5, 0x1000}, 0x6}, 0x2, 0x101)
r6 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(0x3, 0x4188aec6, r6)

3.725636s ago: executing program 1 (id=875):
connect$auto(0x3, 0x0, 0x55)
syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, 0x0, 0x4000804)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x84\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bc)

3.325301325s ago: executing program 1 (id=876):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
write$auto(0x3, 0x0, 0xffd8)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x16f042, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)

2.227906506s ago: executing program 1 (id=877):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0xd86, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
setgroups$auto(0xe32, 0x0)
unshare$auto(0x8)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xca92040223a91af0, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0)
open(0x0, 0x163340, 0x2a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x9, 0xe, 0x0, 0x1d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, 0x0, &(0x7f0000000300)={0x7ff}, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[], 0x3f20}, 0x1, 0x0, 0x0, 0x4806}, 0x80c4)
mremap$auto(0x7, 0xad, 0x3000006, 0x7, 0x6)
syz_clone(0x4300, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x6)
socket(0x2, 0x6, 0x0)
setsockopt$auto(0x4, 0x0, 0xa, 0xfffffffffffffffe, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x2, 0x0, 0x9129)

1.782790885s ago: executing program 3 (id=878):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2, 0xa000000000, 0xdd, 0x59, 0x401, 0x9000000000000003)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0)
lseek$auto(r0, 0x0, 0x2)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x8}, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x2, 0xa000000000, 0xdd, 0x59, 0x401, 0x9000000000000003) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) (async)
lseek$auto(r0, 0x0, 0x2) (async)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x8}, 0x6) (async)

1.48557472s ago: executing program 4 (id=879):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
removexattr$auto(0x0, 0x0)
mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd)
getrandom$auto(0x0, 0x6000000, 0x3)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)=""/4092, 0xffc)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x252802, 0x190)
socket(0x1, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
connect$auto(0x3, &(0x7f00000001c0), 0x55)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)

386.639079ms ago: executing program 1 (id=880):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041)
mmap$auto(0x0, 0x402000c, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x4000000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2, 0x300]}, 0x0)
connect$auto(0x3, &(0x7f00000000c0), 0x55)

195.845008ms ago: executing program 3 (id=881):
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup$auto(0x8, 0x0)
socket(0x840000000002, 0x3, 0xff) (async)
socket(0x840000000002, 0x3, 0xff)
connect$auto(0x3, &(0x7f0000000000), 0x55) (async)
connect$auto(0x3, &(0x7f0000000000), 0x55)
write$auto(0x3, 0x0, 0xfdf3)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x6)
fallocate$auto(r0, 0x1, 0x0, 0x7)
socket(0x10, 0x2, 0x14) (async)
r2 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001314af57"], 0x14}, 0x1, 0x0, 0x0, 0x20004082}, 0x0)
socket(0xa, 0x2, 0x3a)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "22342c707bff2459b582b1a63a7f"}, 0x6a)
r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80000, 0x0)
ioctl$auto_evdev_fops_evdev(r3, 0x400445a0, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="4cea6ed1", 0x4) (async)
write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="4cea6ed1", 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000080)="6c2f71ab40af96b9a6e38ca4eb55b04fd5602cc4cc8b30f170df9bd8b7b3fea6e5fa6aa473d4cdc014bf7cca8dcfceaf31cad48c0b4aac46c4f693e7ff54b54b2a8a3ed992c5b448bdeb87ec97c7fc76dea4e6bacbda83de971f522d6b5d1aea1135b8c9c475f921d9d2e8f5623ce5b6c3bba90de36e026f9831cce3907b6f17d72693816dd066fb0aba0763c39f1046acafb7cff1bf39e9235f0652073b8bf6add8b4979e3910305370", 0x0, &(0x7f0000000200)={&(0x7f0000000140)="5444cacb20cc4a7573580a0dd190feb77371a382864d07aa6e3c61a518e3f810c499bbf0f628aab1e01f003b06762e44444ca6d3f899c02eb7fffee0a34341bb6cad621a9eb79146e7275d81edca6df405b30251699e16ad2ef40c330462d8ccbea3ecf1c7656b5824870a63cbefd9b3327346795b1cffcea94f10723040d68381a1ae2d69857f1e4ecac9c234ee49a4009d889cd1db28ef3ad0f0635321c0829f287a1bc070b4bc68895ecfcf7f4b0e5297a567437d99bce4fa", 0x401}, 0x1, &(0x7f0000000240)="17990d90c828129e4d27d89dda07e720c03921aec0b1e93d5923e9d6162c6a42616cb261e3a09880c8fd8cee9dac78e0fdc0728c1f00b5b451369aca92deedfff56ba6dd57d58c8a7d87bddf09106e3dc93f6630fa8e7f81784773a777b04f73518275c567f8f2651557e96640ccce9221dff57c3dc3d67153333419d3b8f34e7369497cbc98d0bd5c8e54d2c3a16e5ad83cffead0683bb888eb4a9fd4ae8eda3496fe5dffe70013e399491d044ac698d4eeee028df7f13f25dbebcdb5af508c3a01023b250612546a1d1c23dc85f5112c99c98228d6e6c45662cb28", 0x1, 0xb50}}, 0x51, 0x5) (async)
sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000080)="6c2f71ab40af96b9a6e38ca4eb55b04fd5602cc4cc8b30f170df9bd8b7b3fea6e5fa6aa473d4cdc014bf7cca8dcfceaf31cad48c0b4aac46c4f693e7ff54b54b2a8a3ed992c5b448bdeb87ec97c7fc76dea4e6bacbda83de971f522d6b5d1aea1135b8c9c475f921d9d2e8f5623ce5b6c3bba90de36e026f9831cce3907b6f17d72693816dd066fb0aba0763c39f1046acafb7cff1bf39e9235f0652073b8bf6add8b4979e3910305370", 0x0, &(0x7f0000000200)={&(0x7f0000000140)="5444cacb20cc4a7573580a0dd190feb77371a382864d07aa6e3c61a518e3f810c499bbf0f628aab1e01f003b06762e44444ca6d3f899c02eb7fffee0a34341bb6cad621a9eb79146e7275d81edca6df405b30251699e16ad2ef40c330462d8ccbea3ecf1c7656b5824870a63cbefd9b3327346795b1cffcea94f10723040d68381a1ae2d69857f1e4ecac9c234ee49a4009d889cd1db28ef3ad0f0635321c0829f287a1bc070b4bc68895ecfcf7f4b0e5297a567437d99bce4fa", 0x401}, 0x1, &(0x7f0000000240)="17990d90c828129e4d27d89dda07e720c03921aec0b1e93d5923e9d6162c6a42616cb261e3a09880c8fd8cee9dac78e0fdc0728c1f00b5b451369aca92deedfff56ba6dd57d58c8a7d87bddf09106e3dc93f6630fa8e7f81784773a777b04f73518275c567f8f2651557e96640ccce9221dff57c3dc3d67153333419d3b8f34e7369497cbc98d0bd5c8e54d2c3a16e5ad83cffead0683bb888eb4a9fd4ae8eda3496fe5dffe70013e399491d044ac698d4eeee028df7f13f25dbebcdb5af508c3a01023b250612546a1d1c23dc85f5112c99c98228d6e6c45662cb28", 0x1, 0xb50}}, 0x51, 0x5)
syz_clone(0x10200011, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid$auto(0x909b, 0x1, 0x0)
write$auto(0x3, 0x0, 0xfffffdef) (async)
write$auto(0x3, 0x0, 0xfffffdef)

0s ago: executing program 3 (id=882):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/00/01.3\x00', 0xa00, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x7}, 0xfff, 0x0, 0x6)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r1 = open(0x0, 0xeee00, 0x0)
mmap$auto(0x0, 0x6, 0x4000000000df, 0x91, r0, 0x8001)
mmap$auto(0x9, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x100082)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
socket(0x22, 0x4, 0x5a8890ce)
mmap$auto(0x0, 0x6, 0x200000000000df, 0x9b72, 0x7, 0x0)
setsockopt$auto(0x3, 0x10d, 0x11, 0x0, 0x17)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(r0, 0x80)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
writev$auto(r0, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
r2 = socket(0xa, 0x2, 0x73)
write$auto_msr_fops_msr(r1, 0x0, 0x0)
getsockname$auto(r2, &(0x7f0000000240)=@in={0x2, 0x4e23, @multicast1}, &(0x7f0000000280)=0x7)
fcntl$auto(0x0, 0x407, 0x100000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
syz_clone(0x0, &(0x7f0000000340)="908532344f4421b283f8985bb6a8375b2dfae6eda43bcf51bc0a4c5cc8907f3702719c296cc38b9fda5fce8f3fd1f87a95a63cadfe2d62f12e4b324c666c5f24991337cb073fcc6cc5839da45e726cccd0", 0x51, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1c918a95b51935c68c99067c30568ba1ec0a0434896176620f081e4e116e4d1d3c7c00f50c098aff291452f6e89318bad26206611a936267")
memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/clear_refs\x00', 0x404241, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
write$auto(0xffffffffffffffff, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts.
[   96.252842][ T5823] cgroup: Unknown subsys name 'net'
[   96.382699][ T5823] cgroup: Unknown subsys name 'cpuset'
[   96.391333][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   98.365279][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  100.261982][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.279668][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.298075][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.310455][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.328126][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  100.335519][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.381105][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.391627][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.408060][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.416448][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.424866][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  100.432422][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  100.472150][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.480970][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.502548][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.510463][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  100.519326][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  100.527822][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  100.535931][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  100.550502][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  100.557342][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.558341][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  100.565402][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  100.580660][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.849381][ T5832] chnl_net:caif_netlink_parms(): no params data found
[  101.039860][ T5840] chnl_net:caif_netlink_parms(): no params data found
[  101.109699][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.116954][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.124650][ T5832] bridge_slave_0: entered allmulticast mode
[  101.133165][ T5832] bridge_slave_0: entered promiscuous mode
[  101.142256][ T5841] chnl_net:caif_netlink_parms(): no params data found
[  101.173461][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.180968][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.188556][ T5832] bridge_slave_1: entered allmulticast mode
[  101.195391][ T5832] bridge_slave_1: entered promiscuous mode
[  101.245760][ T5836] chnl_net:caif_netlink_parms(): no params data found
[  101.289346][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.305620][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.329641][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.336813][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.344394][ T5840] bridge_slave_0: entered allmulticast mode
[  101.351466][ T5840] bridge_slave_0: entered promiscuous mode
[  101.360603][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.367814][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.375081][ T5840] bridge_slave_1: entered allmulticast mode
[  101.382329][ T5840] bridge_slave_1: entered promiscuous mode
[  101.444428][ T5832] team0: Port device team_slave_0 added
[  101.460210][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.467434][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.475031][ T5841] bridge_slave_0: entered allmulticast mode
[  101.482795][ T5841] bridge_slave_0: entered promiscuous mode
[  101.501068][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.526576][ T5832] team0: Port device team_slave_1 added
[  101.533051][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.540460][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.547762][ T5841] bridge_slave_1: entered allmulticast mode
[  101.554597][ T5841] bridge_slave_1: entered promiscuous mode
[  101.563862][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.636967][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.650699][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.676818][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.684206][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.691803][ T5836] bridge_slave_0: entered allmulticast mode
[  101.698911][ T5836] bridge_slave_0: entered promiscuous mode
[  101.707304][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.718146][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.744202][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.768359][ T5840] team0: Port device team_slave_0 added
[  101.785151][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.792639][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.800024][ T5836] bridge_slave_1: entered allmulticast mode
[  101.807162][ T5836] bridge_slave_1: entered promiscuous mode
[  101.814837][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.822261][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.848915][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.862450][ T5840] team0: Port device team_slave_1 added
[  101.872366][ T5841] team0: Port device team_slave_0 added
[  101.921472][ T5841] team0: Port device team_slave_1 added
[  101.942896][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.955474][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.984586][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.992890][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.018959][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.032122][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.039222][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.065367][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.094823][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.102184][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.128942][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.164470][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.171758][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.198038][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.214965][ T5832] hsr_slave_0: entered promiscuous mode
[  102.222016][ T5832] hsr_slave_1: entered promiscuous mode
[  102.231762][ T5836] team0: Port device team_slave_0 added
[  102.255763][ T5836] team0: Port device team_slave_1 added
[  102.284530][ T5840] hsr_slave_0: entered promiscuous mode
[  102.291008][ T5840] hsr_slave_1: entered promiscuous mode
[  102.297242][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.305308][ T5840] Cannot create hsr debugfs directory
[  102.340065][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.347092][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.373313][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.411014][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.418389][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.444885][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.458158][ T5846] Bluetooth: hci0: command tx timeout
[  102.517220][ T5836] hsr_slave_0: entered promiscuous mode
[  102.520287][ T5846] Bluetooth: hci1: command tx timeout
[  102.529796][ T5836] hsr_slave_1: entered promiscuous mode
[  102.538242][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.545942][ T5836] Cannot create hsr debugfs directory
[  102.555719][ T5841] hsr_slave_0: entered promiscuous mode
[  102.562606][ T5841] hsr_slave_1: entered promiscuous mode
[  102.570068][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.577839][ T5841] Cannot create hsr debugfs directory
[  102.677856][ T5145] Bluetooth: hci3: command tx timeout
[  102.683916][ T5846] Bluetooth: hci2: command tx timeout
[  102.842274][    T9] cfg80211: failed to load regulatory.db
[  102.906843][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.927178][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.938408][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.957380][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.003676][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.016880][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.035189][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.056364][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.131073][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.143417][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.170419][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.181328][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.256634][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.286721][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.299733][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.322915][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.416865][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.429904][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.470952][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  103.494825][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[  103.505448][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.533691][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.541234][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.555774][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.562945][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.574261][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.581430][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.627468][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.634745][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.650891][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[  103.674336][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.681550][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.732539][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.739800][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.761917][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.814253][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.887242][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[  103.904836][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.941106][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.948318][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.000612][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.007825][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.222600][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.353992][ T5832] veth0_vlan: entered promiscuous mode
[  104.373790][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.386585][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.447525][ T5832] veth1_vlan: entered promiscuous mode
[  104.474046][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.491663][ T5840] veth0_vlan: entered promiscuous mode
[  104.507988][ T5846] Bluetooth: hci0: command tx timeout
[  104.533218][ T5840] veth1_vlan: entered promiscuous mode
[  104.548640][ T5841] veth0_vlan: entered promiscuous mode
[  104.590996][ T5846] Bluetooth: hci1: command tx timeout
[  104.596693][ T5841] veth1_vlan: entered promiscuous mode
[  104.613285][ T5832] veth0_macvtap: entered promiscuous mode
[  104.639831][ T5836] veth0_vlan: entered promiscuous mode
[  104.651147][ T5832] veth1_macvtap: entered promiscuous mode
[  104.674506][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.697261][ T5840] veth0_macvtap: entered promiscuous mode
[  104.705607][ T5836] veth1_vlan: entered promiscuous mode
[  104.719571][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.747229][ T5840] veth1_macvtap: entered promiscuous mode
[  104.759422][ T5846] Bluetooth: hci2: command tx timeout
[  104.764912][ T5846] Bluetooth: hci3: command tx timeout
[  104.788170][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.797238][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.808151][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.816985][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.834779][ T5841] veth0_macvtap: entered promiscuous mode
[  104.853387][ T5841] veth1_macvtap: entered promiscuous mode
[  104.865452][ T5836] veth0_macvtap: entered promiscuous mode
[  104.882356][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.893754][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.906048][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.921179][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.933052][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.945524][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.954269][ T5836] veth1_macvtap: entered promiscuous mode
[  104.985311][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.996466][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.005610][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.015731][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.056151][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.070305][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.080609][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.091624][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.103143][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.117239][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.128596][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.140899][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.155640][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.165814][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.176953][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.190500][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.222370][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.233816][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.245975][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.261700][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.272908][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.282055][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.293868][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.304328][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.316329][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.326332][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.337224][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.349811][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.367067][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.384227][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.393644][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.404785][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.428965][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.441427][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.450750][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.459940][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.521730][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.534953][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.619306][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.631791][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.633682][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.650918][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.741928][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.750925][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.764423][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.774027][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.781309][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  105.871018][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.918303][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.970876][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.982658][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.040863][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.079373][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.590088][ T5846] Bluetooth: hci0: command tx timeout
[  106.685550][ T5846] Bluetooth: hci1: command tx timeout
[  106.829242][ T5846] Bluetooth: hci3: command tx timeout
[  106.835409][ T5145] Bluetooth: hci2: command tx timeout
[  107.791684][ T5895] RDS: rds_bind could not find a transport for 86a4:131b:e300:1000::, load rds_tcp or rds_rdma?
[  108.669125][ T5846] Bluetooth: hci0: command tx timeout
[  108.749769][ T5846] Bluetooth: hci1: command tx timeout
[  108.908402][ T5846] Bluetooth: hci3: command tx timeout
[  108.913906][ T5846] Bluetooth: hci2: command tx timeout
[  109.757462][ T5945] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13'.
[  109.936686][ T5925] lo: entered allmulticast mode
[  109.960129][ T5924] lo: left allmulticast mode
[  111.101793][ T5949] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[5949]
[  112.697740][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[  113.578977][ T5995] Zero length message leads to an empty skb
[  114.500085][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.839282][ T5997] ptrace attach of "./syz-executor exec"[5836] was attempted by "���MW�T�+�����\x0cSq؉��[\x0a#�?��ñxޠ�TϏ����Wo������ Ǽ0�Y��7a���>�տ� �����~�z�)\x0c�i�1�\x0b�S�\x22�͏��fz$\x5c���1�\x0d\x09�k��:�v��ׁP��Ց{��ȥ+\x22�C�=(�+B�ޝH��\x0b;��1@����S�0E��y��q4���L�ڸ�me#��#�g�a�g�_'s�E2t�\x1b\x0960����ę� �\x1boRY�jN�A��\x0aj\x0c%�/�D���� 9)� �@� N�����f�/�]�Jeao�]Q�Ug�(�I'��;8ڭǾ�h8:�|\x0as�u?�)d;��e�S�,���x 4�Oгq̾S�o��n�Z��+2ߊ�ju� ���m�� ����[s(�Y<��tڹK�#���H)�a��+���!\x07�|���ƄA�v�4oB���'��̶���������WP�����Tj�������4����8�����3S��7�T;�-@���2����!�Gk�����y���߁V��Lƶ�`�h��o�?��\x5cs�tۧ#O]����$���&�\x5cG@O��Q��$R�Ok���D��u�/}ނq���ѥ����Ǡ:Ԏ\x0c���m��E>��\x095SNAH�?3���j����]����pTi./��\x0d4�N�|V��7#c�Nt\x07ܙ�_�8K�\x090/\x22lISg��[+�V\x5cF-�M;�OR�ڠ�-P$䣻�͚?�[Z�Ǹ��D�~�������:�[cgWI��l��\x07dK�$!�3���Rs̼�s���.��ε�e%����u�r�+S�o;jk\x0drM��OWrkX���,���\x0aCE \x1b��|dT�O9H�8\x0b4����.U}��zf�T��N6��\x09
�Yp��G���w
[  120.161433][ T6106] mmap: syz.0.50 (6106) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  123.588809][ T6178] sg_write: data in/out 2012/28903 bytes for SCSI command 0x0-- guessing data in;
[  123.588809][ T6178]    program syz.1.64 not setting count and/or reply_len properly
[  126.305790][ T6239] netlink: 338 bytes leftover after parsing attributes in process `syz.1.76'.
[  127.313604][ T6250] netlink: 72 bytes leftover after parsing attributes in process `syz.3.79'.
[  129.962484][ T6304] netlink: 72 bytes leftover after parsing attributes in process `syz.1.90'.
[  131.257908][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'.
[  131.653329][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.96'.
[  134.976901][ T6356] Invalid ELF header magic: != ELF
[  136.359269][ T6350] kexec: Could not allocate control_code_buffer
[  137.303236][ T6394] FAULT_INJECTION: forcing a failure.
[  137.303236][ T6394] name failslab, interval 1, probability 0, space 0, times 1
[  137.316421][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.3.112 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  137.326721][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  137.336843][ T6394] Call Trace:
[  137.340160][ T6394]  <TASK>
[  137.343217][ T6394]  dump_stack_lvl+0x16c/0x1f0
[  137.347956][ T6394]  should_fail_ex+0x497/0x5b0
[  137.352694][ T6394]  should_failslab+0xc2/0x120
[  137.357431][ T6394]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  137.362862][ T6394]  ? llc_sap_find+0x27e/0x430
[  137.367593][ T6394]  ? skb_clone+0x190/0x3f0
[  137.372065][ T6394]  skb_clone+0x190/0x3f0
[  137.376349][ T6394]  ? __pfx_llc_sap_handler+0x10/0x10
[  137.381675][ T6394]  ? __pfx_snap_rcv+0x10/0x10
[  137.386381][ T6394]  llc_rcv+0x613/0xc10
[  137.390494][ T6394]  ? __pfx_llc_rcv+0x10/0x10
[  137.395138][ T6394]  __netif_receive_skb_one_core+0x1b1/0x1e0
[  137.401075][ T6394]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  137.407531][ T6394]  ? rcu_is_watching+0x12/0xc0
[  137.412337][ T6394]  ? ktime_get_with_offset+0x26f/0x3b0
[  137.417846][ T6394]  ? lockdep_hardirqs_on+0x7c/0x110
[  137.423110][ T6394]  ? netif_receive_skb+0x109/0x7b0
[  137.428262][ T6394]  __netif_receive_skb+0x1d/0x160
[  137.433321][ T6394]  netif_receive_skb+0x13f/0x7b0
[  137.438286][ T6394]  ? __pfx_netif_receive_skb+0x10/0x10
[  137.443776][ T6394]  ? __pfx___lock_acquire+0x10/0x10
[  137.449007][ T6394]  tun_rx_batched.isra.0+0x3eb/0x730
[  137.454331][ T6394]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  137.460178][ T6394]  ? tun_get_user+0x13c9/0x3e40
[  137.465068][ T6394]  ? lock_acquire+0x2f/0xb0
[  137.469592][ T6394]  ? tun_get_user+0x13c9/0x3e40
[  137.474479][ T6394]  tun_get_user+0x2a0d/0x3e40
[  137.479207][ T6394]  ? __pfx_tun_get_user+0x10/0x10
[  137.484262][ T6394]  ? find_held_lock+0x2d/0x110
[  137.489088][ T6394]  ? __pfx_lock_release+0x10/0x10
[  137.494172][ T6394]  tun_chr_write_iter+0xdc/0x210
[  137.499145][ T6394]  vfs_write+0x5ae/0x1150
[  137.503505][ T6394]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  137.509089][ T6394]  ? __pfx_lock_release+0x10/0x10
[  137.514136][ T6394]  ? __pfx_vfs_write+0x10/0x10
[  137.518956][ T6394]  ? lock_acquire+0x2f/0xb0
[  137.523478][ T6394]  ? __fget_files+0x40/0x3a0
[  137.528115][ T6394]  __x64_sys_pwrite64+0x1f6/0x250
[  137.533172][ T6394]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  137.538754][ T6394]  do_syscall_64+0xcd/0x250
[  137.543296][ T6394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.549226][ T6394] RIP: 0033:0x7f0aa9b85d29
[  137.553674][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.573303][ T6394] RSP: 002b:00007f0aaa90d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  137.581738][ T6394] RAX: ffffffffffffffda RBX: 00007f0aa9d75fa0 RCX: 00007f0aa9b85d29
[  137.589732][ T6394] RDX: 000000000000004e RSI: 0000000020000600 RDI: 00000000000000c8
[  137.597719][ T6394] RBP: 00007f0aaa90d090 R08: 0000000000000000 R09: 0000000000000000
[  137.605706][ T6394] R10: 00000000000008bc R11: 0000000000000246 R12: 0000000000000001
[  137.613693][ T6394] R13: 0000000000000000 R14: 00007f0aa9d75fa0 R15: 00007ffda4ae0a28
[  137.621785][ T6394]  </TASK>
[  137.624958][    C1] vkms_vblank_simulate: vblank timer overrun
[  137.982513][ T6397] i2c i2c-0: delete_device: Can't parse I2C address
[  138.959563][ T6418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.121'.
[  139.794196][ T6401] process 'syz.0.113' launched '/dev/fd/3' with NULL argv: empty string added
[  139.828925][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.1.122'.
[  140.857666][ T6442] FAULT_INJECTION: forcing a failure.
[  140.857666][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  141.070038][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.3.126 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  141.080377][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  141.090485][ T6442] Call Trace:
[  141.093801][ T6442]  <TASK>
[  141.096767][ T6442]  dump_stack_lvl+0x16c/0x1f0
[  141.101516][ T6442]  should_fail_ex+0x497/0x5b0
[  141.106241][ T6442]  _copy_to_user+0x32/0xd0
[  141.110696][ T6442]  simple_read_from_buffer+0xd0/0x160
[  141.116096][ T6442]  proc_fail_nth_read+0x198/0x270
[  141.121163][ T6442]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.126752][ T6442]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.132351][ T6442]  vfs_read+0x1df/0xbe0
[  141.136532][ T6442]  ? __fget_files+0x1fc/0x3a0
[  141.141239][ T6442]  ? __pfx___mutex_lock+0x10/0x10
[  141.146310][ T6442]  ? __pfx_vfs_read+0x10/0x10
[  141.151017][ T6442]  ? __fget_files+0x206/0x3a0
[  141.155731][ T6442]  ksys_read+0x12b/0x250
[  141.160004][ T6442]  ? __pfx_ksys_read+0x10/0x10
[  141.164805][ T6442]  do_syscall_64+0xcd/0x250
[  141.169353][ T6442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.175278][ T6442] RIP: 0033:0x7f0aa9b8473c
[  141.179712][ T6442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  141.199343][ T6442] RSP: 002b:00007f0aaa90d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  141.207784][ T6442] RAX: ffffffffffffffda RBX: 00007f0aa9d75fa0 RCX: 00007f0aa9b8473c
[  141.215786][ T6442] RDX: 000000000000000f RSI: 00007f0aaa90d0a0 RDI: 0000000000000004
[  141.223778][ T6442] RBP: 00007f0aaa90d090 R08: 0000000000000000 R09: 0000000000000000
[  141.231771][ T6442] R10: 00000000000008bc R11: 0000000000000246 R12: 0000000000000001
[  141.239764][ T6442] R13: 0000000000000000 R14: 00007f0aa9d75fa0 R15: 00007ffda4ae0a28
[  141.247774][ T6442]  </TASK>
[  141.250928][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.381624][ T6412] kexec: Could not allocate control_code_buffer
[  141.782205][ T6458] netlink: 72 bytes leftover after parsing attributes in process `syz.2.130'.
[  141.948564][ T6461] capability: warning: `syz.3.129' uses 32-bit capabilities (legacy support in use)
[  143.219205][ T6498] Invalid ELF header magic: != ELF
[  143.792080][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  143.798888][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  144.359143][ T6509] sctp: [Deprecated]: syz.0.142 (pid 6509) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.359143][ T6509] Use struct sctp_sack_info instead
[  147.363778][ T6579] netlink: 72 bytes leftover after parsing attributes in process `syz.3.157'.
[  150.661705][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'.
[  153.563377][ T6679] binder: binder_mmap: 6675 0-1000 bad vm_flags failed -1
[  154.509249][ T6692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.181'.
[  157.645975][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'.
[  157.983534][ T6742] netlink: 72 bytes leftover after parsing attributes in process `syz.3.193'.
[  160.967236][ T6786] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'.
[  161.421407][ T6794] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  161.676960][ T6802] netlink: 122 bytes leftover after parsing attributes in process `syz.0.208'.
[  163.699769][ T6829] netlink: 288 bytes leftover after parsing attributes in process `syz.2.212'.
[  163.810847][ T6829] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  164.828059][ T6823] kexec: Could not allocate control_code_buffer
[  167.189965][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  170.829772][ T6911] kexec: Could not allocate control_code_buffer
[  171.374039][ T6932] netlink: zone id is out of range
[  172.012398][ T6944] FAULT_INJECTION: forcing a failure.
[  172.012398][ T6944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.128675][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.3.238 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  172.139012][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  172.149110][ T6944] Call Trace:
[  172.152430][ T6944]  <TASK>
[  172.155401][ T6944]  dump_stack_lvl+0x16c/0x1f0
[  172.160141][ T6944]  should_fail_ex+0x497/0x5b0
[  172.164879][ T6944]  _copy_from_user+0x2e/0xd0
[  172.169531][ T6944]  core_sys_select+0x34f/0xa10
[  172.174355][ T6944]  ? __pfx_core_sys_select+0x10/0x10
[  172.179708][ T6944]  ? find_held_lock+0x2d/0x110
[  172.184569][ T6944]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  172.190627][ T6944]  kern_select+0x15e/0x1e0
[  172.195106][ T6944]  ? __pfx_kern_select+0x10/0x10
[  172.200108][ T6944]  ? __pfx_ksys_write+0x10/0x10
[  172.205027][ T6944]  __x64_sys_select+0xbd/0x160
[  172.209850][ T6944]  ? do_syscall_64+0x91/0x250
[  172.214590][ T6944]  ? lockdep_hardirqs_on+0x7c/0x110
[  172.219852][ T6944]  do_syscall_64+0xcd/0x250
[  172.224425][ T6944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.230386][ T6944] RIP: 0033:0x7f0aa9b85d29
[  172.234841][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.254500][ T6944] RSP: 002b:00007f0aaa8ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  172.262964][ T6944] RAX: ffffffffffffffda RBX: 00007f0aa9d76080 RCX: 00007f0aa9b85d29
[  172.270979][ T6944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e
[  172.278997][ T6944] RBP: 00007f0aaa8ec090 R08: 0000000000000000 R09: 0000000000000000
[  172.287012][ T6944] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001
[  172.295031][ T6944] R13: 0000000000000001 R14: 00007f0aa9d76080 R15: 00007ffda4ae0a28
[  172.303065][ T6944]  </TASK>
[  174.927604][ T6954] kexec: Could not allocate control_code_buffer
[  175.085726][ T6980] =======================================================
[  175.085726][ T6980] WARNING: The mand mount option has been deprecated and
[  175.085726][ T6980]          and is ignored by this kernel. Remove the mand
[  175.085726][ T6980]          option from the mount to silence this warning.
[  175.085726][ T6980] =======================================================
[  175.120698][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.467373][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  175.481028][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  176.864291][ T6997] FAULT_INJECTION: forcing a failure.
[  176.864291][ T6997] name failslab, interval 1, probability 0, space 0, times 0
[  176.902210][ T6997] CPU: 1 UID: 0 PID: 6997 Comm: syz.3.251 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  176.912546][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  176.922645][ T6997] Call Trace:
[  176.925961][ T6997]  <TASK>
[  176.928940][ T6997]  dump_stack_lvl+0x16c/0x1f0
[  176.933699][ T6997]  should_fail_ex+0x497/0x5b0
[  176.938434][ T6997]  ? fs_reclaim_acquire+0xae/0x150
[  176.943610][ T6997]  should_failslab+0xc2/0x120
[  176.948352][ T6997]  __kmalloc_cache_noprof+0x68/0x420
[  176.953690][ T6997]  ? lock_acquire+0x2f/0xb0
[  176.958245][ T6997]  ? __pfx_binder_poll+0x10/0x10
[  176.963242][ T6997]  binder_get_thread+0x223/0x8c0
[  176.968238][ T6997]  ? __fget_files+0x206/0x3a0
[  176.972982][ T6997]  ? __pfx_binder_poll+0x10/0x10
[  176.977980][ T6997]  binder_poll+0x3f/0x400
[  176.982363][ T6997]  ? __pfx_binder_poll+0x10/0x10
[  176.987356][ T6997]  do_select+0xd88/0x17e0
[  176.991759][ T6997]  ? __pfx_do_select+0x10/0x10
[  176.996573][ T6997]  ? __pfx_mark_lock+0x10/0x10
[  177.001378][ T6997]  ? mark_lock+0xb5/0xc60
[  177.005750][ T6997]  ? __pfx___pollwait+0x10/0x10
[  177.010651][ T6997]  ? __pfx_pollwake+0x10/0x10
[  177.015404][ T6997]  ? __pfx_pollwake+0x10/0x10
[  177.020128][ T6997]  ? __pfx_pollwake+0x10/0x10
[  177.024898][ T6997]  ? trace_lock_acquire+0x14e/0x1f0
[  177.030162][ T6997]  ? lock_acquire+0x2f/0xb0
[  177.034703][ T6997]  ? __might_fault+0xe3/0x190
[  177.039422][ T6997]  ? __might_fault+0xe3/0x190
[  177.044156][ T6997]  ? core_sys_select+0x3a6/0xa10
[  177.049146][ T6997]  core_sys_select+0x3a6/0xa10
[  177.053975][ T6997]  ? __pfx_core_sys_select+0x10/0x10
[  177.059313][ T6997]  ? find_held_lock+0x2d/0x110
[  177.064180][ T6997]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  177.070230][ T6997]  kern_select+0x15e/0x1e0
[  177.074701][ T6997]  ? __pfx_kern_select+0x10/0x10
[  177.079693][ T6997]  ? __pfx_ksys_write+0x10/0x10
[  177.084597][ T6997]  __x64_sys_select+0xbd/0x160
[  177.089409][ T6997]  ? do_syscall_64+0x91/0x250
[  177.094165][ T6997]  ? lockdep_hardirqs_on+0x7c/0x110
[  177.099419][ T6997]  do_syscall_64+0xcd/0x250
[  177.103993][ T6997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.109945][ T6997] RIP: 0033:0x7f0aa9b85d29
[  177.114405][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.134062][ T6997] RSP: 002b:00007f0aaa8ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  177.142530][ T6997] RAX: ffffffffffffffda RBX: 00007f0aa9d76080 RCX: 00007f0aa9b85d29
[  177.150544][ T6997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e
[  177.158560][ T6997] RBP: 00007f0aaa8ec090 R08: 0000000000000000 R09: 0000000000000000
[  177.166581][ T6997] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001
[  177.174595][ T6997] R13: 0000000000000001 R14: 00007f0aa9d76080 R15: 00007ffda4ae0a28
[  177.182631][ T6997]  </TASK>
[  180.075550][ T7019] Process accounting resumed
[  180.507009][ T7007] kexec: Could not allocate control_code_buffer
[  180.740928][ T7033] gspca_gl860.sensor: string doesn't fit in 6 chars.
[  181.910195][ T7048] syz.3.264 uses obsolete (PF_INET,SOCK_PACKET)
[  185.164459][ T7067] kexec: Could not allocate control_code_buffer
[  185.200495][ T7089] nbd: must specify at least one socket
[  186.047621][ T6848] syz.2.215 (6848) used greatest stack depth: 19808 bytes left
[  186.114128][ T6849] syz.2.215 (6849) used greatest stack depth: 19312 bytes left
[  188.811236][ T7150] cifs: Unknown parameter '#�ʑ���C�	ˀH�/R{�<'
[  189.418586][ T7138] kexec: Could not allocate control_code_buffer
[  190.243627][ T7168] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  190.250643][ T7168] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  190.297598][ T7168] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  190.368650][ T7168] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  190.423896][ T7168] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  190.531280][ T7168] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  190.581776][ T7168] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  190.589018][ T7168] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  190.600875][ T7168] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  190.635013][ T7168] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  190.641523][ T7168] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  190.655884][ T7168] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  190.720220][ T7190] netlink: 72 bytes leftover after parsing attributes in process `syz.0.296'.
[  191.654139][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[  192.291288][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.381343][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  192.611562][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  192.692258][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  192.787086][ T7206] kexec: Could not allocate control_code_buffer
[  193.941789][ T7260] netlink: 72 bytes leftover after parsing attributes in process `syz.0.307'.
[  194.372421][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  194.453042][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  194.692573][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  194.774074][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  196.458852][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.533445][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.535475][ T7282] kexec: Could not allocate control_code_buffer
[  196.773643][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  196.853589][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  197.836511][ T7342] netlink: 72 bytes leftover after parsing attributes in process `syz.1.330'.
[  198.479610][ T7359] FAULT_INJECTION: forcing a failure.
[  198.479610][ T7359] name failslab, interval 1, probability 0, space 0, times 0
[  198.511350][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.2.334 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  198.521676][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  198.531794][ T7359] Call Trace:
[  198.535126][ T7359]  <TASK>
[  198.538096][ T7359]  dump_stack_lvl+0x16c/0x1f0
[  198.542838][ T7359]  should_fail_ex+0x497/0x5b0
[  198.547573][ T7359]  ? fs_reclaim_acquire+0xae/0x150
[  198.552735][ T7359]  should_failslab+0xc2/0x120
[  198.557491][ T7359]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  198.562918][ T7359]  ? __pfx_acct_collect+0x10/0x10
[  198.567992][ T7359]  ? taskstats_exit+0x650/0xbe0
[  198.572901][ T7359]  ? acct_update_integrals+0x3e7/0x4b0
[  198.578410][ T7359]  taskstats_exit+0x650/0xbe0
[  198.583158][ T7359]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  198.588587][ T7359]  ? __pfx_taskstats_exit+0x10/0x10
[  198.593838][ T7359]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.599100][ T7359]  ? __seccomp_filter_orphan+0x18/0x110
[  198.604705][ T7359]  ? __put_seccomp_filter+0x16/0xf0
[  198.605308][ T7366] random: crng reseeded on system resumption
[  198.609948][ T7359]  do_exit+0x845/0x2d70
[  198.610002][ T7359]  ? get_signal+0x8f7/0x2610
[  198.625000][ T7359]  ? __pfx_do_exit+0x10/0x10
[  198.629660][ T7359]  ? do_raw_spin_lock+0x12d/0x2c0
[  198.634753][ T7359]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  198.640212][ T7359]  do_group_exit+0xd3/0x2a0
[  198.644773][ T7359]  get_signal+0x2576/0x2610
[  198.649369][ T7359]  ? __pfx_get_signal+0x10/0x10
[  198.654273][ T7359]  ? __pfx_do_futex+0x10/0x10
[  198.658998][ T7359]  arch_do_signal_or_restart+0x90/0x7e0
[  198.659052][ T7359]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  198.670855][ T7359]  ? rcu_is_watching+0x12/0xc0
[  198.670911][ T7359]  syscall_exit_to_user_mode+0x150/0x2a0
[  198.681471][ T7359]  do_syscall_64+0xda/0x250
[  198.686128][ T7359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.692094][ T7359] RIP: 0033:0x7f1ec6d85d29
[  198.696548][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.716439][ T7359] RSP: 002b:00007f1ec7b520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  198.716474][ T7359] RAX: fffffffffffffe00 RBX: 00007f1ec6f75fa8 RCX: 00007f1ec6d85d29
[  198.716494][ T7359] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ec6f75fa8
[  198.716511][ T7359] RBP: 00007f1ec6f75fa0 R08: 0000000000000000 R09: 0000000000000000
[  198.716530][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1ec6f75fac
[  198.716548][ T7359] R13: 0000000000000000 R14: 00007ffd11de9b90 R15: 00007ffd11de9c78
[  198.716583][ T7359]  </TASK>
[  199.594553][ T7352] kexec: Could not allocate control_code_buffer
[  200.195831][ T7396] cgroup: fork rejected by pids controller in /syz2
[  203.953387][ T7463] kexec: Could not allocate control_code_buffer
[  205.261410][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  205.267895][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  206.458880][ T7532] vivid-003: =================  START STATUS  =================
[  206.496729][ T7532] vivid-003: Radio HW Seek Mode: Bounded
[  206.589294][ T7532] vivid-003: Radio Programmable HW Seek: false
[  206.595556][ T7532] vivid-003: RDS Rx I/O Mode: Block I/O
[  206.616486][ T7532] vivid-003: Generate RBDS Instead of RDS: false
[  206.628399][ T7532] vivid-003: RDS Reception: true
[  206.633420][ T7532] vivid-003: RDS Program Type: 0 inactive
[  206.708950][ T7532] vivid-003: RDS PS Name:  inactive
[  206.734806][ T7532] vivid-003: RDS Radio Text:  inactive
[  206.744937][ T7532] vivid-003: RDS Traffic Announcement: false inactive
[  206.795867][ T7532] vivid-003: RDS Traffic Program: false inactive
[  206.836453][ T7532] vivid-003: RDS Music: false inactive
[  206.858675][ T7532] vivid-003: ==================  END STATUS  ==================
[  207.297132][ T7522] kexec: Could not allocate control_code_buffer
[  207.700756][ T7558] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[7558]
[  208.369028][ T7562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.363'.
[  211.875214][ T7594] kexec: Could not allocate control_code_buffer
[  215.418915][ T7638] kexec: Could not allocate control_code_buffer
[  217.436422][ T7662] netlink: 'syz.0.394': attribute type 4 has an invalid length.
[  217.458598][ T7662] netlink: 110 bytes leftover after parsing attributes in process `syz.0.394'.
[  218.126269][ T7670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.395'.
[  222.051288][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  222.060710][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  222.068869][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  222.090776][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  222.099343][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  222.106772][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  223.102149][ T7717] chnl_net:caif_netlink_parms(): no params data found
[  223.552631][ T7700] kexec: Could not allocate control_code_buffer
[  224.152834][ T5145] Bluetooth: hci4: command tx timeout
[  224.365803][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.398299][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.437638][ T7717] bridge_slave_0: entered allmulticast mode
[  224.455541][ T7717] bridge_slave_0: entered promiscuous mode
[  224.541393][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.557555][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.564828][ T7717] bridge_slave_1: entered allmulticast mode
[  224.623898][ T7717] bridge_slave_1: entered promiscuous mode
[  225.170022][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.203135][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.343884][ T7747] netlink: 72 bytes leftover after parsing attributes in process `syz.0.411'.
[  225.615456][ T7717] team0: Port device team_slave_0 added
[  225.643944][ T7717] team0: Port device team_slave_1 added
[  225.777154][ T7756] program syz.1.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  225.787137][ T7757] program syz.1.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  225.788654][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.848515][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.934823][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.965893][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.976894][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.008327][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.185437][ T7763] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  226.219304][ T7763] CIFS mount error: No usable UNC path provided in device string!
[  226.219304][ T7763] 
[  226.247457][ T5145] Bluetooth: hci4: command tx timeout
[  226.299793][ T7763] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  226.454696][ T7717] hsr_slave_0: entered promiscuous mode
[  226.604588][ T7419] syz.2.343 (7419) used greatest stack depth: 19056 bytes left
[  226.620421][ T7717] hsr_slave_1: entered promiscuous mode
[  226.742122][ T7717] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.768539][ T7717] Cannot create hsr debugfs directory
[  227.166216][ T7780] netlink: 72 bytes leftover after parsing attributes in process `syz.3.420'.
[  227.687559][ T7792] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,�˿�&�
[  227.687559][ T7792] H}��6l2�p(wml5M�:����;aQ�����쀌�'
[  228.028036][ T7717] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.100753][ T7717] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.296743][ T7717] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.328553][ T5145] Bluetooth: hci4: command tx timeout
[  228.435847][ T7717] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  228.743123][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.803309][ T7717] 8021q: adding VLAN 0 to HW filter on device team0
[  228.857187][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.865360][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.930000][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.937232][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.544269][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.391946][ T5145] Bluetooth: hci4: command tx timeout
[  230.448466][ T7717] veth0_vlan: entered promiscuous mode
[  230.507414][ T7717] veth1_vlan: entered promiscuous mode
[  230.829131][ T7717] veth0_macvtap: entered promiscuous mode
[  230.929086][ T7717] veth1_macvtap: entered promiscuous mode
[  230.995998][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.050628][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.087374][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.118312][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.147316][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.178820][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.217106][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.240917][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.288733][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.314064][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.355133][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.386549][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.427786][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.490972][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.550572][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.587999][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.618956][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.645093][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.946746][ T7717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.011207][ T7717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.037066][ T7717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.061250][ T7717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.452613][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.460660][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.565794][ T6632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.597681][ T6632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.118463][ T7858] Invalid ELF header magic: != ELF
[  233.463449][ T7861] nbd: socks must be embedded in a SOCK_ITEM attr
[  233.668162][ T7861] block nbd0: shutting down sockets
[  236.805498][ T7910] [U] 
[  236.808505][ T7910] [U] 
[  236.811257][ T7910] [U] 
[  236.814003][ T7910] [U] 
[  236.843989][ T7910] [U] 
[  236.846773][ T7910] [U] 
[  236.849516][ T7910] [U] 
[  236.852264][ T7910] [U] 
[  236.888927][ T7910] [U] 
[  236.891891][ T7910] [U] 
[  236.894655][ T7910] [U] 
[  236.897426][ T7910] [U] 
[  236.944704][ T7910] [U] 
[  236.947453][ T7910] [U] ����eֻH���4嵅��L��
[  236.969764][ T7910] [U] �-�xg�^��W%]RbK��Xu@c�D���Ջ�
��ܥ��*���> 	Xu(
)t}LJw�۔�ҡc�<*�oSY�T�"7I���q��Ƀ2�w�L*^���:����IB2ޖ��(FD�
��]��TZi/��s���x!�<�;Ƌ6��Q�t]�V��m�޹4m��h��5^���X�w�K�6���ac�ņID���L�N��
[  236.990602][ T7910] [U] ����NUJ�G"��7�
�o�$��ϟ(07��J
[  237.037722][ T7910] [U] �,�	�s��J9t
[  237.041554][ T7910] [U] Y�EB�P."�)��z>��V��|Ģ�
[  237.058368][ T7910] [U] �a�g	���KUB|��3+�,K3A�����u��J
[  237.074925][ T7910] [U] z?8���d�M�fxJ�v�?�C�ni�
[  237.088548][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'.
[  237.117073][ T7910] [U] ����G��JcϿlﻶYV��j�|��X�������%=��ju��\��b��U�sG�`�=tm gѺ��/n%�<1�}�58h+{��c�ϟ��髼x *���S�?��GaI��Tm���ۄ)����A�����J��ȃ_�ڟi;���^�/l���D�`����(��JC��
[  237.135816][ T7910] [U] @��`��s�^Mb��A��]?��ʜeƤ�
[  237.157799][ T7916] syz.4.449(7916): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  237.190853][ T7910] [U] ?{�)
[  237.222691][ T7910] [U] R�� c���.�tb�b(ۥ�~H���^/���sN�*�
[  237.227573][ T7916] sp0: Synchronizing with TNC
[  237.259646][ T7910] [U] ����Y�g��Ix�R����<%��iD%�su޴z^�$_�=�Ht�Q�Zt�	���(�Gst$�k��zB�'�\�����טM�O�q3*�eOC��ۃ�^�t:#�)�\ϯ]�k2��%���1>R���;�f���k�>�*��v/<a/fqd0�+�:���"��(I�
[  237.337432][ T7910] [U]  ��qEqj�
[  237.373944][ T7910] [U] q�jL�p}abz����w���U�P��`�)��b�3f��2�E\.,6N��\�0�/��7�EP�>�=��gG���l�J|�D���
[  237.413241][ T7910] [U] #>��yv�\y�!$��T9� yxq�[������Q,d�O�9wZ>k;=�@�N��Ң����5Ɋm>���D��N��Ex:'.��/1�J�l�0�B��,#�n�w��?�c�q��Q9���օ'�3�t��S~S�b^$��I�7�C�4����,�b��)-ѿ��p�g�e+
���w����%��T���]�B�+�6�o3�*'Yd�x��!�Y��;B����M�y
[  237.464928][ T7910] [U] �?l�����3]��MsR�JI}��X����#=�k�(
[  237.471025][ T7910] [U] 
[  237.473777][ T7910] [U] 
[  237.476514][ T7910] [U] 
[  237.493735][ T7910] [U] 
[  237.496512][ T7910] [U] 
[  237.499281][ T7910] [U] 
[  237.502032][ T7910] [U] 
[  237.524374][ T7910] [U] 
[  237.527165][ T7910] [U] 
[  237.529913][ T7910] [U] 
[  237.532661][ T7910] [U] 
[  237.559940][ T7910] [U] 
[  237.562814][ T7910] [U] 
[  237.565576][ T7910] [U] 
[  237.568322][ T7910] [U] 
[  237.572285][ T7910] [U] 
[  237.575039][ T7910] [U] 
[  237.577759][ T7910] [U] 
[  237.580486][ T7910] [U] 
[  237.613098][ T7910] [U] 
[  238.374009][ T7940] syz.3.454 (7940): /proc/7939/oom_adj is deprecated, please use /proc/7939/oom_score_adj instead.
[  238.880876][ T7948] netlink: 72 bytes leftover after parsing attributes in process `syz.3.457'.
[  241.776339][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'.
[  241.795253][ T7971] kexec: Could not allocate control_code_buffer
[  241.807468][ T8000] bridge_slave_1: left allmulticast mode
[  241.813967][ T8000] bridge_slave_1: left promiscuous mode
[  241.826463][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.865353][ T8000] bridge_slave_0: left allmulticast mode
[  241.871379][ T8000] bridge_slave_0: left promiscuous mode
[  241.885059][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.468524][ T8012] could not allocate digest TFM handle 
[  243.207753][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[  243.691151][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.480'.
[  245.549399][ T8072] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8072]
[  245.559876][ T8064] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8064]
[  246.302878][ T8040] kexec: Could not allocate control_code_buffer
[  247.400021][ T8102] ubi0: attaching mtd0
[  247.469188][ T8102] ubi0: scanning is finished
[  247.479937][ T8103] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6)
[  247.484085][ T8102] ubi0: empty MTD device detected
[  247.528731][ T8102] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  248.008014][ T8102] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  249.886291][ T8139] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1986356271.1937073711.101), cmd(5)
[  251.588966][ T8123] kexec: Could not allocate control_code_buffer
[  254.793230][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'.
[  255.111147][ T8208] kexec: Could not allocate control_code_buffer

syzkaller
syzkaller login: [  258.186463][ T8283] kexec: Could not allocate control_code_buffer
[  258.646820][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'.
[  258.683420][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'.
[  259.186916][ T8328] netlink: 330 bytes leftover after parsing attributes in process `syz.4.549'.
[  262.493466][ T8349] kexec: Could not allocate control_code_buffer
[  262.716166][ T8396] ubi0: attaching mtd0
[  262.743798][ T8396] ubi0: scanning is finished
[  262.755770][ T8396] ubi0: empty MTD device detected
[  263.222791][ T8396] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  263.289823][ T8396] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  263.337635][ T8396] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  263.344657][ T8396] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  263.380491][ T8396] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  263.412779][ T8396] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  263.455505][ T8396] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 333901619
[  263.494688][ T8396] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  263.527306][ T8408] ubi0: background thread "ubi_bgt0d" started, PID 8408
[  264.809167][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  265.850428][ T8430] program syz.4.569 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.925965][ T8430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  266.735478][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  266.741904][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  267.042131][ T8445] kexec: Could not allocate control_code_buffer
[  268.321138][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'.
[  270.894741][ T8505] kexec: Could not allocate control_code_buffer
[  271.318842][ T8522] Invalid ELF header magic: != ELF
[  275.952326][ T8635] netlink: 342 bytes leftover after parsing attributes in process `syz.4.616'.
[  276.693284][ T8657] openvswitch: netlink: Flow key attr not present in new flow.
[  277.723749][ T2986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.002301][ T2986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.242556][ T2986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.543929][ T2986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.570750][ T8692] Invalid ELF header magic: != ELF
[  279.308985][ T2986] bridge_slave_1: left allmulticast mode
[  279.344784][ T2986] bridge_slave_1: left promiscuous mode
[  279.375578][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.544130][ T2986] bridge_slave_0: left allmulticast mode
[  279.565097][ T2986] bridge_slave_0: left promiscuous mode
[  279.570885][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.771500][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'.
[  280.586005][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.614643][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.639544][ T2986] bond0 (unregistering): Released all slaves
[  281.055338][ T8731] device-mapper: ioctl: Unable to rename non-existent device,  to �&^�
[  281.593004][ T8748] FAULT_INJECTION: forcing a failure.
[  281.593004][ T8748] name failslab, interval 1, probability 0, space 0, times 0
[  281.618288][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: syz.1.639 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  281.628608][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  281.638706][ T8748] Call Trace:
[  281.642015][ T8748]  <TASK>
[  281.644978][ T8748]  dump_stack_lvl+0x16c/0x1f0
[  281.649724][ T8748]  should_fail_ex+0x497/0x5b0
[  281.654477][ T8748]  ? fs_reclaim_acquire+0xae/0x150
[  281.659653][ T8748]  should_failslab+0xc2/0x120
[  281.664407][ T8748]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  281.669859][ T8748]  ? lock_acquire+0x2f/0xb0
[  281.674428][ T8748]  ? __proc_create+0xa4/0x8b0
[  281.679162][ T8748]  ? __proc_create+0x2c3/0x8b0
[  281.683992][ T8748]  __proc_create+0x2c3/0x8b0
[  281.688643][ T8748]  ? __pfx___proc_create+0x10/0x10
[  281.693905][ T8748]  ? __pfx_lock_release+0x10/0x10
[  281.698993][ T8748]  proc_create_reg+0x7d/0x180
[  281.703734][ T8748]  ? __pfx_xfrm_statistics_seq_show+0x10/0x10
[  281.709884][ T8748]  proc_create_net_single+0x87/0x170
[  281.715237][ T8748]  ? __pfx_proc_create_net_single+0x10/0x10
[  281.721223][ T8748]  ? __pfx_xfrm_net_init+0x10/0x10
[  281.726384][ T8748]  xfrm_proc_init+0x4d/0x70
[  281.730919][ T8748]  xfrm_net_init+0x1f1/0xcb0
[  281.735533][ T8748]  ? __pfx_xfrm_net_init+0x10/0x10
[  281.740680][ T8748]  ops_init+0x1df/0x5f0
[  281.744863][ T8748]  setup_net+0x21f/0x860
[  281.749143][ T8748]  ? __pfx_setup_net+0x10/0x10
[  281.753929][ T8748]  ? down_read_killable+0xcc/0x380
[  281.759076][ T8748]  ? __pfx_down_read_killable+0x10/0x10
[  281.764755][ T8748]  ? debug_mutex_init+0x37/0x70
[  281.769661][ T8748]  copy_net_ns+0x2b4/0x6c0
[  281.774139][ T8748]  create_new_namespaces+0x3ea/0xad0
[  281.779472][ T8748]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  281.785140][ T8748]  ksys_unshare+0x45d/0xa40
[  281.789678][ T8748]  ? __pfx_ksys_unshare+0x10/0x10
[  281.794730][ T8748]  ? xfd_validate_state+0x5d/0x180
[  281.799873][ T8748]  __x64_sys_unshare+0x31/0x40
[  281.804666][ T8748]  do_syscall_64+0xcd/0x250
[  281.809221][ T8748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.815258][ T8748] RIP: 0033:0x7f76e2185d29
[  281.819714][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.839354][ T8748] RSP: 002b:00007f76e2ee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  281.847794][ T8748] RAX: ffffffffffffffda RBX: 00007f76e2375fa0 RCX: 00007f76e2185d29
[  281.855876][ T8748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  281.863871][ T8748] RBP: 00007f76e2201b08 R08: 0000000000000000 R09: 0000000000000000
[  281.871870][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.879864][ T8748] R13: 0000000000000000 R14: 00007f76e2375fa0 R15: 00007ffc11393ab8
[  281.887867][ T8748]  </TASK>
[  281.900447][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'.
[  281.946133][ T2986] hsr_slave_0: left promiscuous mode
[  281.976414][ T2986] hsr_slave_1: left promiscuous mode
[  281.989185][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.014563][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.040031][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.063397][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.177180][ T2986] veth1_macvtap: left promiscuous mode
[  282.199254][ T2986] veth0_macvtap: left promiscuous mode
[  282.215454][ T2986] veth1_vlan: left promiscuous mode
[  282.263675][ T2986] veth0_vlan: left promiscuous mode
[  283.286210][ T2986] team0 (unregistering): Port device team_slave_1 removed
[  283.332538][ T2986] team0 (unregistering): Port device team_slave_0 removed
[  283.837309][ T8746] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  283.848486][ T8752] veth1_macvtap: left promiscuous mode
[  283.872746][ T8746] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  284.745830][ T8768] kexec: Could not allocate control_code_buffer
[  285.758033][ T8806] netlink: 72 bytes leftover after parsing attributes in process `syz.4.647'.
[  286.211275][ T8802] smc: net device syz_tun applied user defined pnetid ETHTOOL
[  287.231369][ T8855] netlink: 72 bytes leftover after parsing attributes in process `syz.4.656'.
[  287.561008][ T8868] erspan0: entered allmulticast mode
[  288.657023][ T8893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  288.972466][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.667'.
[  289.037490][ T8911] veth0_macvtap: left promiscuous mode
[  289.137857][ T8911] macvtap0: entered allmulticast mode
[  290.581136][ T8954] random: crng reseeded on system resumption
[  292.766685][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'.
[  292.857614][ T9001] vxcan1: entered promiscuous mode
[  294.361225][ T9046] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  294.443984][ T9046] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  294.450092][ T9046] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  294.543583][ T9046] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  294.641435][ T9046] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  294.814477][ T9046] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  296.423402][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  296.503456][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout
[  296.509666][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  296.593491][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  297.253259][ T9067] kexec: Could not allocate control_code_buffer
[  298.664741][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  299.112706][ T9134] svc: failed to register nfsdv3 RPC service (errno 111).
[  299.196257][ T9134] svc: failed to register nfsaclv3 RPC service (errno 111).
[  300.541524][ T9181] netlink: 72 bytes leftover after parsing attributes in process `syz.1.705'.
[  300.745607][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  301.296714][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'.
[  301.810088][ T9162] kexec: Could not allocate control_code_buffer
[  302.202558][ T9234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.714'.
[  302.795727][ T9257] nbd: must specify at least one socket
[  304.071155][ T9282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.725'.
[  304.476828][ T9251] kexec: Could not allocate control_code_buffer
[  304.821843][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'.
[  304.840010][ T9312] netlink: 330 bytes leftover after parsing attributes in process `syz.4.730'.
[  305.336745][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  305.346022][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  306.729052][ T9320] kexec: Could not allocate control_code_buffer
[  308.093001][ T9406] sg_write: data in/out 4194268/28899 bytes for SCSI command 0x40-- guessing data in;
[  308.093001][ T9406]    program syz.1.750 not setting count and/or reply_len properly
[  311.972070][ T9522] netlink: 72 bytes leftover after parsing attributes in process `syz.0.770'.
[  312.611468][ T9539] Line length is too long: Should be less than 4094
[  313.228178][ T9562] netlink: 338 bytes leftover after parsing attributes in process `syz.4.775'.
[  313.241737][ T9563] Process accounting resumed
[  313.344183][ T9557] netlink: 338 bytes leftover after parsing attributes in process `syz.4.775'.
[  314.841279][ T9619] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006
[  315.558792][ T9645] device-mapper: ioctl: only supply one of name or uuid, cmd(7)
[  318.875662][ T9654] kexec: Could not allocate control_code_buffer
[  318.960012][ T9687] IPVS: length: 11322 != 8
[  319.637573][ T9703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.798'.
[  320.697934][ T9727] netlink: 72 bytes leftover after parsing attributes in process `syz.4.805'.
[  322.805526][ T9777] netlink: 72 bytes leftover after parsing attributes in process `syz.4.817'.
[  323.734017][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'.
[  323.971973][ T9796] hsr_slave_0 (unregistering): left promiscuous mode
[  324.749381][ T9816] Process accounting resumed
[  324.780834][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'.
[  324.813705][ T9818] netlink: 342 bytes leftover after parsing attributes in process `syz.1.835'.
[  325.367792][   T29] audit: type=1800 audit(4296016044.840:2): pid=9831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.834" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0
[  325.930501][ T9842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.838'.
[  325.944741][ T9842] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  326.107663][ T9844] lo: entered promiscuous mode
[  326.129572][ T9844] netlink: 342 bytes leftover after parsing attributes in process `syz.1.840'.
[  326.408368][ T9843] lo: left promiscuous mode
[  327.170523][ T9856] netlink: 72 bytes leftover after parsing attributes in process `syz.1.842'.
[  327.919094][ T9862] Process accounting resumed
[  328.204560][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  328.212226][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  331.474474][ T9897] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  331.489284][ T9897] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  331.510825][ T9897] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  331.517393][ T9897] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  331.783833][   T29] audit: type=1326 audit(4296016051.277:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9911 comm="syz.1.861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76e2185d29 code=0x0
[  332.921963][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  333.481917][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout
[  333.561985][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  333.568142][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  336.339538][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  336.369898][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  336.387649][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.401019][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.415225][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.432571][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.082959][T10002] chnl_net:caif_netlink_parms(): no params data found
[  337.356372][T10002] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.379086][T10002] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.404260][T10002] bridge_slave_0: entered allmulticast mode
[  337.411522][T10002] bridge_slave_0: entered promiscuous mode
[  337.419942][T10002] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.427396][T10002] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.434740][T10002] bridge_slave_1: entered allmulticast mode
[  337.441960][T10002] bridge_slave_1: entered promiscuous mode
[  337.488112][T10002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.516951][T10002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.639440][T10002] team0: Port device team_slave_0 added
[  337.667622][T10002] team0: Port device team_slave_1 added
[  337.757400][T10002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.774118][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.850357][T10002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.864819][T10002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.871965][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.898733][T10002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.987761][T10002] hsr_slave_0: entered promiscuous mode
[  338.004348][T10002] hsr_slave_1: entered promiscuous mode
[  338.020349][T10002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.054175][T10002] Cannot create hsr debugfs directory
[  338.524611][ T5846] Bluetooth: hci1: command tx timeout
[  338.532800][T10002] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  338.577133][T10002] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  338.628701][T10002] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  338.757184][T10002] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  339.231527][T10002] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.318265][T10002] 8021q: adding VLAN 0 to HW filter on device team0
[  339.378234][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.385467][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.446530][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.453678][ T9246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.597059][T10002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  339.817020][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'.
[  340.030759][ T9709] ------------[ cut here ]------------
[  340.036758][ T9709] WARNING: CPU: 1 PID: 9709 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x1f66/0x2470
[  340.046895][ T9709] Modules linked in:
[  340.050858][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.0.800 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  340.061684][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  340.072632][ T9709] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470
[  340.079334][ T9709] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 1c 9f 57 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00
[  340.099462][ T9709] RSP: 0018:ffffc9000d37f918 EFLAGS: 00010246
[  340.106190][ T9709] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  340.115361][ T9709] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40
[  340.123487][ T9709] RBP: 0000000000800000 R08: 0000000000000006 R09: 00000000003fffff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  340.131991][ T9709] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b
[  340.140378][ T9709] R13: 1ffff92001a6ff37 R14: 0000000000800000 R15: 00000000003fffff
[  340.148524][ T9709] FS:  00007fbe70fba6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  340.157905][ T9709] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.164985][ T9709] CR2: 00000000003ff000 CR3: 0000000025194000 CR4: 00000000003526f0
[  340.173518][ T9709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  340.181606][ T9709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  340.189750][ T9709] Call Trace:
[  340.193081][ T9709]  <TASK>
[  340.196153][ T9709]  ? __warn+0xea/0x3c0
[  340.200299][ T9709]  ? __alloc_pages_noprof+0x1f66/0x2470
[  340.206050][ T9709]  ? report_bug+0x3c0/0x580
[  340.210914][ T9709]  ? handle_bug+0x54/0xa0
[  340.215635][ T9709]  ? exc_invalid_op+0x17/0x50
[  340.220379][ T9709]  ? asm_exc_invalid_op+0x1a/0x20
[  340.225559][ T9709]  ? __alloc_pages_noprof+0x1f66/0x2470
[  340.231185][ T9709]  ? find_held_lock+0x2d/0x110
[  340.236069][ T9709]  ? hlock_class+0x4e/0x130
[  340.240636][ T9709]  ? __lock_acquire+0x15a9/0x3c40
[  340.245803][ T9709]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  340.251606][ T9709]  ? handle_mm_fault+0x497/0xaa0
[  340.256669][ T9709]  ? find_held_lock+0x2d/0x110
[  340.261506][ T9709]  ___kmalloc_large_node+0x84/0x1b0
[  340.267189][ T9709]  __kmalloc_large_node_noprof+0x1c/0x70
[  340.273513][ T9709]  __kmalloc_noprof.cold+0xc/0x63
[  340.278663][ T9709]  ? __might_fault+0xe3/0x190
[  340.283402][ T9709]  ? tomoyo_write_control+0x267/0x13d0
[  340.289031][ T9709]  tomoyo_write_control+0x267/0x13d0
[  340.294390][ T9709]  ? rcu_is_watching+0x12/0xc0
[  340.299261][ T9709]  ? __pfx_tomoyo_write_control+0x10/0x10
[  340.305044][ T9709]  ? ksys_write+0x12b/0x250
[  340.309952][ T9709]  ? __pfx_tomoyo_write+0x10/0x10
[  340.315046][ T9709]  vfs_write+0x24c/0x1150
[  340.316754][T10002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.319732][ T9709]  ? __fget_files+0x1fc/0x3a0
[  340.330947][ T9709]  ? __pfx___mutex_lock+0x10/0x10
[  340.336169][ T9709]  ? __pfx_vfs_write+0x10/0x10
[  340.340993][ T9709]  ? __fget_files+0x206/0x3a0
[  340.345773][ T9709]  ksys_write+0x12b/0x250
[  340.350156][ T9709]  ? __pfx_ksys_write+0x10/0x10
[  340.355086][ T9709]  ? do_user_addr_fault+0x83d/0x13f0
[  340.360488][ T9709]  do_syscall_64+0xcd/0x250
[  340.365059][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.371474][ T9709] RIP: 0033:0x7fbe70185d29
[  340.376397][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.396186][ T9709] RSP: 002b:00007fbe70fba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  340.404666][ T9709] RAX: ffffffffffffffda RBX: 00007fbe70376080 RCX: 00007fbe70185d29
[  340.412992][ T9709] RDX: 00000000fffffded RSI: 0000000000000000 RDI: 0000000000000003
[  340.421359][ T9709] RBP: 00007fbe70201b08 R08: 0000000000000000 R09: 0000000000000000
[  340.429478][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.437557][ T9709] R13: 0000000000000001 R14: 00007fbe70376080 R15: 00007ffedbdf7ee8
[  340.445669][ T9709]  </TASK>
[  340.448738][ T9709] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  340.456046][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.0.800 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  340.466326][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  340.476428][ T9709] Call Trace:
[  340.479743][ T9709]  <TASK>
[  340.482705][ T9709]  dump_stack_lvl+0x3d/0x1f0
[  340.487359][ T9709]  panic+0x71d/0x800
[  340.491312][ T9709]  ? __pfx_panic+0x10/0x10
[  340.495786][ T9709]  ? show_trace_log_lvl+0x29d/0x3d0
[  340.501022][ T9709]  ? __alloc_pages_noprof+0x1f66/0x2470
[  340.506644][ T9709]  check_panic_on_warn+0xab/0xb0
[  340.511620][ T9709]  __warn+0xf6/0x3c0
[  340.515553][ T9709]  ? __alloc_pages_noprof+0x1f66/0x2470
[  340.521156][ T9709]  report_bug+0x3c0/0x580
[  340.525520][ T9709]  handle_bug+0x54/0xa0
[  340.529705][ T9709]  exc_invalid_op+0x17/0x50
[  340.534245][ T9709]  asm_exc_invalid_op+0x1a/0x20
[  340.539131][ T9709] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470
[  340.545321][ T9709] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 1c 9f 57 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00
[  340.564980][ T9709] RSP: 0018:ffffc9000d37f918 EFLAGS: 00010246
[  340.571084][ T9709] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  340.579095][ T9709] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40
[  340.587087][ T9709] RBP: 0000000000800000 R08: 0000000000000006 R09: 00000000003fffff
[  340.595077][ T9709] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b
[  340.603064][ T9709] R13: 1ffff92001a6ff37 R14: 0000000000800000 R15: 00000000003fffff
[  340.611068][ T9709]  ? find_held_lock+0x2d/0x110
[  340.615889][ T9709]  ? hlock_class+0x4e/0x130
[  340.620423][ T9709]  ? __lock_acquire+0x15a9/0x3c40
[  340.625471][ T9709]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  340.631236][ T9709]  ? handle_mm_fault+0x497/0xaa0
[  340.636226][ T9709]  ? find_held_lock+0x2d/0x110
[  340.641025][ T9709]  ___kmalloc_large_node+0x84/0x1b0
[  340.646260][ T9709]  __kmalloc_large_node_noprof+0x1c/0x70
[  340.651918][ T9709]  __kmalloc_noprof.cold+0xc/0x63
[  340.657039][ T9709]  ? __might_fault+0xe3/0x190
[  340.661731][ T9709]  ? tomoyo_write_control+0x267/0x13d0
[  340.667229][ T9709]  tomoyo_write_control+0x267/0x13d0
[  340.672560][ T9709]  ? rcu_is_watching+0x12/0xc0
[  340.677370][ T9709]  ? __pfx_tomoyo_write_control+0x10/0x10
[  340.683124][ T9709]  ? ksys_write+0x12b/0x250
[  340.687668][ T9709]  ? __pfx_tomoyo_write+0x10/0x10
[  340.692762][ T9709]  vfs_write+0x24c/0x1150
[  340.697124][ T9709]  ? __fget_files+0x1fc/0x3a0
[  340.701832][ T9709]  ? __pfx___mutex_lock+0x10/0x10
[  340.706897][ T9709]  ? __pfx_vfs_write+0x10/0x10
[  340.711700][ T9709]  ? __fget_files+0x206/0x3a0
[  340.716419][ T9709]  ksys_write+0x12b/0x250
[  340.720776][ T9709]  ? __pfx_ksys_write+0x10/0x10
[  340.725678][ T9709]  ? do_user_addr_fault+0x83d/0x13f0
[  340.730993][ T9709]  do_syscall_64+0xcd/0x250
[  340.735533][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.741480][ T9709] RIP: 0033:0x7fbe70185d29
[  340.745935][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.765566][ T9709] RSP: 002b:00007fbe70fba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  340.774003][ T9709] RAX: ffffffffffffffda RBX: 00007fbe70376080 RCX: 00007fbe70185d29
[  340.781993][ T9709] RDX: 00000000fffffded RSI: 0000000000000000 RDI: 0000000000000003
[  340.789977][ T9709] RBP: 00007fbe70201b08 R08: 0000000000000000 R09: 0000000000000000
[  340.797962][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.805948][ T9709] R13: 0000000000000001 R14: 00007fbe70376080 R15: 00007ffedbdf7ee8
[  340.813950][ T9709]  </TASK>
[  340.817714][ T9709] Kernel Offset: disabled
[  340.822120][ T9709] Rebooting in 86400 seconds..