last executing test programs:

7m13.166946241s ago: executing program 1 (id=1221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r1)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0xfffd, 0x40}, 0x40800)

7m12.858482738s ago: executing program 1 (id=1222):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2)
setxattrat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)='/dev/sg0\x00', 0xffffffffffffffff, 0x3)
io_uring_setup$auto(0x5, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x17, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3c, 0x3ff, 0x1ffdf, 0x7, 0x6, 0x2, 0x9, 0x2, 0x9, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000ffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0x2000000d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

7m11.787485012s ago: executing program 1 (id=1223):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
ioctl$auto(r1, 0xb21064a7, 0x20000a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)=0xd)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
unshare$auto(0x8000000)
semtimedop$auto(0x0, 0x0, 0x1f4, 0x0)
unshare$auto(0x8000400)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
ioctl$auto_TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000000c0)=0x2)
socket(0x10, 0x2, 0xc)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x82, 0x0)
writev$auto(0x3, 0x0, 0x3)

7m10.911766431s ago: executing program 1 (id=1228):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) (async, rerun: 64)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async, rerun: 64)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x56e) (rerun: 64)
fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
fremovexattr$auto(r2, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00') (async)
pread64$auto(0xffffffffffffffff, 0x0, 0x831d, 0xa78) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async, rerun: 64)
r3 = socketcall$auto(0xffe, 0x0) (rerun: 64)
mmap$auto(0x0, 0xeb0f, 0xffffffff, 0x1000000eb5, 0xffffffffffffffff, 0x20008000) (async)
close_range$auto(0x2, 0xa, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$auto(r0, 0xae58, 0x10000000000402) (async)
ioctl$auto(0x3, 0xc008ae67, r3) (async, rerun: 32)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) (rerun: 32)
close_range$auto(0x2, r5, 0x0) (async)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$auto(r0, 0xae3e, r6)
ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x8ff, 0x10, 0x1}]}) (async)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x134302, 0x0)
sendfile$auto(r7, r7, 0x0, 0x2)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)

7m9.732426877s ago: executing program 1 (id=1230):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
close_range$auto(0x0, 0xffffeffe, 0x2)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$auto(r2, 0x6, 0x8, &(0x7f00000002c0)='$\xfe\x88\xc8\x91\x8bo\xc6#\x00\x00\x00\xfd\xb1\x00\xdb\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\x9c~\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xe6\xb7\xd3\xe4\x00\x00\x00T@\xf0\x8b\xd4XE\x17\xaa\b\x00'/71, &(0x7f0000000100)=0xa5)
socket(0xa, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x1, 0x2, 0x0, 0x7fff)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x1, 0xb, 0x3ff, 0x3)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000)
bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r3, 0xdfff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}})
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)="cfb8491dbb34513ca7637da194f4")
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

7m9.477205704s ago: executing program 1 (id=1231):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0x2a0902, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0)
read$auto(r1, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0x70)
write$auto(0x3, 0x0, 0x5c8)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
r2 = socket(0x2, 0x3, 0x2)
setsockopt$auto(r2, 0x0, 0x8, 0xfffffffffffffffc, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto(r3, 0x80dc5521, 0xffffffffffffffff)
io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r0, 0x5, &(0x7f0000000080)="d3964a42ad898f09b49fd4ebac6021da70d850a1547709469dde4a09e2b7e9be01de8942af7613aab6e1701a995230984e1c19545513f8f9a6d3e79758cade2dd4cd79a2d69de1990bbc", 0x3fe000)
r4 = open(&(0x7f0000000040)='./file0\x00', 0xd50290b0965a67ba, 0x2)
mmap$auto(0x0, 0xffffffffffff3afb, 0x8000, 0x4000000000011, r4, 0x3ff)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r5, 0x400c4d07, r5)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8)

6m54.035748354s ago: executing program 32 (id=1231):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0x2a0902, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0)
read$auto(r1, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0x70)
write$auto(0x3, 0x0, 0x5c8)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
r2 = socket(0x2, 0x3, 0x2)
setsockopt$auto(r2, 0x0, 0x8, 0xfffffffffffffffc, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0)
ioctl$auto(r3, 0x80dc5521, 0xffffffffffffffff)
io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r0, 0x5, &(0x7f0000000080)="d3964a42ad898f09b49fd4ebac6021da70d850a1547709469dde4a09e2b7e9be01de8942af7613aab6e1701a995230984e1c19545513f8f9a6d3e79758cade2dd4cd79a2d69de1990bbc", 0x3fe000)
r4 = open(&(0x7f0000000040)='./file0\x00', 0xd50290b0965a67ba, 0x2)
mmap$auto(0x0, 0xffffffffffff3afb, 0x8000, 0x4000000000011, r4, 0x3ff)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r5, 0x400c4d07, r5)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8)

5m28.792949733s ago: executing program 2 (id=1492):
msgctl$auto_MSG_STAT(0xfb8, 0xb, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x50, 0x9, 0x3, 0x40, 0x7fff, 0x10, 0x100, @raw=0xffffffff, @raw=0x4})
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0xe334, 0x15, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f0000000100)=0x7)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sysfs$auto(0x2, 0x49, 0x0)
fsopen$auto(0x0, 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r3, 0x5453, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x0, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r5, 0x0, 0x24, 0x0, 0x9)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xc048aec8, r2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008)
ioctl$auto_RNDADDTOENTCNT2(r7, 0x40045201, &(0x7f0000000000)=0x9)

5m26.771310759s ago: executing program 2 (id=1502):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0) (async)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
io_uring_setup$auto(0x6, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef)
mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, r0, 0x8000) (async)
write$auto(0x3, 0x0, 0x1)

5m25.555611791s ago: executing program 2 (id=1506):
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x1, 0x84)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x0, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7e)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(r0, 0x0)
r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x410140, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001580)={r0, &(0x7f0000000400)="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", 0x95, &(0x7f0000001400)="bbec78d43399911fd5e4dab0b8856d2bf937513be625ab56226d81f309840db3c65869cf1be0e257932cde890f90e800a86794bddc199180dd3fbf3b8c76829b6a3682934e9528cccb6df8669b88ec211d83f977eff47d1797a1095869614b54d4cb7dee3d1f877140", 0x6, &(0x7f0000001480)="09c86681fa501a71055e096cf8b592c5be6ba4e60b6e86111fe26f51b397e77fa3970c891a90d508ec98c6842df46f20263e028f6f92785d0efc7216aa58622db43bf5e5c48100d11640b17b224d2ea06150e29febc3b8bea6ec29e2b6c3253567551b602ef9e64b01e6d8e5e60d1d9f86a98517dce76875681b79ceca61ca81797f7525a3e514b08cca1b454954c0fa34feaaccebe4e871b404b8830eb71caf62c56b1242c894", &(0x7f0000001540)=0x6})
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5)
ioctl$auto_VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)={0x9, 0x0, [{0x8, 0x5}]})
ioctl$auto_VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)

5m24.00209881s ago: executing program 2 (id=1512):
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0)
pwrite64$auto(r0, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x0, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7e)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(0xffffffffffffffff, 0x0)
r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x410140, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001580)={0xffffffffffffffff, &(0x7f0000000400)="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", 0x95, &(0x7f0000001400)="bbec78d43399911fd5e4dab0b8856d2bf937513be625ab56226d81f309840db3c65869cf1be0e257932cde890f90e800a86794bddc199180dd3fbf3b8c76829b6a3682934e9528cccb6df8669b88ec211d83f977eff47d1797a1095869614b54d4cb7dee3d1f877140", 0x6, &(0x7f0000001480)="09c86681fa501a71055e096cf8b592c5be6ba4e60b6e86111fe26f51b397e77fa3970c891a90d508ec98c6842df46f20263e028f6f92785d0efc7216aa58622db43bf5e5c48100d11640b17b224d2ea06150e29febc3b8bea6ec29e2b6c3253567551b602ef9e64b01e6d8e5e60d1d9f86a98517dce76875681b79ceca61ca81797f7525a3e514b08cca1b454954c0fa34feaaccebe4e871b404b8830eb71caf62c56b1242c894", &(0x7f0000001540)=0x6})
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5)
ioctl$auto_VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000080)={0x9, 0x0, [{0x8, 0x5}]})
ioctl$auto_VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)

5m22.490245643s ago: executing program 2 (id=1516):
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x1, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
write$auto(0x3, 0x0, 0x100085)

5m22.188833172s ago: executing program 2 (id=1517):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x41, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f4002cbd7000fbd2df25030000000400080018000180612fde55100008807f457545537138"], 0x30}}, 0x20008801)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/trace\x00', 0x29c780, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x3, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x202, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
fchdir$auto(0xffffffffffffffff)
r3 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x400000000, 0xde3, 0x20017)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
madvise$auto(0x401, 0x10001, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{@raw=0xff, 0x5, 0x3, 0xa, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x9}, 0xfffffffc, 0x1, 0x5, @inferred=r3, @enumerated={0x0, 0x3fc0, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113a9b60cd7bd82081ec020066e011b430c0a636577776a600", 0x5, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983ee020024b626f54ad9d763dcdc9120af8b7c848ceb55a7"})
mmap$auto(0x0, 0x380000000000000, 0x6, 0x40eb0, 0x401, 0x8300000000000)
bpf$auto(0x6, 0xffffffffffffffff, 0x0)
mmap$auto(0x8, 0x400008, 0x28, 0x10, 0xffffffffffffffff, 0x3fd)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x6, 0x2)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000)
mmap$auto(0x0, 0x600006, 0x2, 0x406b1, 0xffffffffffffffff, 0x300000000000)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video49\x00', 0x1, 0x0)
ioctl$auto(r4, 0xc0285629, r4)
socket(0x2c, 0x80003, 0x300)

5m6.941997904s ago: executing program 33 (id=1517):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x41, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f4002cbd7000fbd2df25030000000400080018000180612fde55100008807f457545537138"], 0x30}}, 0x20008801)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/trace\x00', 0x29c780, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x3, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x202, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
fchdir$auto(0xffffffffffffffff)
r3 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x400000000, 0xde3, 0x20017)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
madvise$auto(0x401, 0x10001, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{@raw=0xff, 0x5, 0x3, 0xa, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @raw=0x9}, 0xfffffffc, 0x1, 0x5, @inferred=r3, @enumerated={0x0, 0x3fc0, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113a9b60cd7bd82081ec020066e011b430c0a636577776a600", 0x5, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983ee020024b626f54ad9d763dcdc9120af8b7c848ceb55a7"})
mmap$auto(0x0, 0x380000000000000, 0x6, 0x40eb0, 0x401, 0x8300000000000)
bpf$auto(0x6, 0xffffffffffffffff, 0x0)
mmap$auto(0x8, 0x400008, 0x28, 0x10, 0xffffffffffffffff, 0x3fd)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x6, 0x2)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000)
mmap$auto(0x0, 0x600006, 0x2, 0x406b1, 0xffffffffffffffff, 0x300000000000)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video49\x00', 0x1, 0x0)
ioctl$auto(r4, 0xc0285629, r4)
socket(0x2c, 0x80003, 0x300)

13.234110108s ago: executing program 4 (id=2373):
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', &(0x7f0000000280)={0xd91f, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0)
r2 = socket(0x1e, 0x80000, 0x9)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xa8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44881}, 0x4000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
open_tree$auto(r1, &(0x7f0000000540)='./file0\x00', 0xf)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r5 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10)
write$auto_dev_fops_plock(r5, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r6, r4, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
unshare$auto(0x40000080)

10.984560331s ago: executing program 4 (id=2378):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
setresuid$auto(0x0, 0x0, 0x0)
prctl$auto(0x1b, 0x6, 0x0, 0x0, 0x0)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8004)
r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0)
write$auto(r0, 0x0, 0x8)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0)
unshare$auto(0x100000001)
unshare$auto(0x40000080)
mmap$auto(0x5, 0x202000a, 0x3, 0x10, 0xfffffffffffffffa, 0x80000005)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/wlan0/force_mld_version\x00', 0x0, 0x0)
write$auto(r1, &(0x7f0000000200)='[-\xa1U\x85\x1d*D&c^\xbf[\xdf\xf8\x87(\xc1\xc3\xf1\'\x1dZ\xd7\xf6_\x91\xf7\x81X\xec0\xe9$\xa8\xc2Jb\xcb\xf1P\xc3\xe5p\xfe0\xc2\\J\xd1\xde\x19H\xd3\xe9\x9d\xefm\xa3\xb5\xbc\x99\x89\x95\xd5\xed\xc5\xfcn\xfc\xe51Ym)\x8c;p\xdf\x90\x1d\xda\xfd\xee\xc4E\xca^u\xdd\x8d\x1b\x8b\x94\x9c\x015ji\xdfY\x9f\x06\x84di\x06l\xf4U\xc9)\x9b\x95\x95!\xcd\x8f\xe4\x83D\x89\xf1n\xed\xc8\xce\x1a\xebm9\xf0\x87\xf3#\xfbu\xc4\x11\xc5R\xce\x81m\x8c\x8a\x8d\xdfH\xe8\xca\x1cHQ\xf4\xb8\xbe\x05L\xe06\x8e\xd2\t\xec\xcd\x14\xd6\xf9J\x8d[gt\xb0\x9f\xa0\xa0\xf0\xe5X\xe6\a\x05P\xd4\xe4s\xdbXt\xde\x06\xbfO\xba\x15\x84\x10\xed\xe0\xbfM\xdd\x1f\x96\xc6\xf7\xac\r4\x7f\x8d=\xa5\xef)/\x12/\xe2\xdd', 0x83)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = getpid()
write$auto(0xffffffffffffffff, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x7f)
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x404002, 0x0)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
rename$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
io_uring_setup$auto(0x4000008, 0x0)

10.662190035s ago: executing program 0 (id=2379):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x8, 0x28, &(0x7f0000000500)=',{\x00', 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x0, 0x8000)
bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000008, 0x80000001, 0x20000000010008, 0xffffffffffffc32b, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x106)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x8)
read$auto(0x3, 0x0, 0x8080)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)

9.533208592s ago: executing program 4 (id=2382):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
ioctl$auto(0x3, 0x5411, 0x38)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2b, 0x1, 0xc9)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x3, 0x0)
r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/failslab/probability\x00', 0x0, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a)
close_range$auto(0x0, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)="37e154c4c5bf32df6d8f2f45", 0xc02)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x8002, 0x0)
write$auto(r2, 0x0, 0x9)

8.139673805s ago: executing program 4 (id=2384):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x800, 0xfffffbfe)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(r0, 0x0, 0x10000, 0x7, 0x0)
shutdown$auto(0x200000003, 0x400002)
mlockall$auto(0x7)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/security/tomoyo/manager\x00', 0x40802, 0x0)
read$auto(r1, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ioctl$auto_BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000009c0)={0xffffffff, 0x9, "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", "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"})
mq_notify$auto(r3, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r3, 0x1, @_tid})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

8.089499103s ago: executing program 0 (id=2385):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$auto(r0, 0x84, 0x22, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80)
r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x2)
mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x7ffe)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
rmdir$auto(&(0x7f0000000200)='}[,&*}\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x4, 0x2083f3, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r4 = socket(0x29, 0x2, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
r6 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r6, 0x114, 0x6, 0x0, 0x8000002)
setfsuid$auto(0xee01)
ioctl$auto(r4, 0x89f2, 0x24)

7.155913707s ago: executing program 3 (id=2317):
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0x18, 0xa, 0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4\x00', 0x20000, 0x0)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x4, 0x7, 0x4, 0x6, 0x1, 0xfffffffffffffff8, 0x1, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
r2 = fsmount$auto(r1, 0x1000, 0xffff)
ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000240)=0x9)
close_range$auto(0x2, 0x8, 0x0)

6.761003189s ago: executing program 3 (id=2386):
r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x48063, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/inflight\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/166, 0xa6)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2)
sendmsg$auto_NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xa8, 0x125, "dc9c417d0b0d6138fb53cf0ddf1eebd4e71cfefe0a97f50a649e9503db256b577dfa28f6998c0e42e356916527d2e4c128b0e27bac26f0ef5f3b68d17d00a1515b3286d39fdf6e4271c86ddb91cbf6e64c3910db33c6ac72d6bf6bd528004c585343c4f791a6292772ad8bf39d166ad4dd2f36d2ac0f185bc3e79abc751570bc928cbdb701b87263a68b92b9025edd7be6588d4d48031d2b904cb5953cec930a270ab417"}]}, 0xc4}}, 0x0)
write$auto(0x3, 0x0, 0x200000100082)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r5 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r5, 0x29, 0x3d, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto(0x0, 0x88c, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty21\x00', 0x40000, 0x0)
msgctl$auto_IPC_INFO(0x8, 0x3, 0x0)
ioctl$auto(r6, 0x560a, 0x7)

6.611234539s ago: executing program 0 (id=2387):
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', &(0x7f0000000280)={0xd91f, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0)
r2 = socket(0x1e, 0x80000, 0x9)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000340), r1)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xa8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44881}, 0x4000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
open_tree$auto(r1, &(0x7f0000000540)='./file0\x00', 0xf)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r5 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10)
write$auto_dev_fops_plock(r5, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r6, r4, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
unshare$auto(0x40000080)

5.978619876s ago: executing program 3 (id=2389):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0) (async, rerun: 64)
r1 = epoll_create$auto(0x8800001) (rerun: 64)
epoll_ctl$auto(r1, 0x1, r0, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000200de, 0xeb1, 0x404, 0x8000) (async)
socket(0xa, 0x5, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
sysfs$auto(0x2, 0x1, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async, rerun: 64)
r3 = socket(0xa, 0x2, 0x73) (async, rerun: 64)
r4 = io_uring_setup$auto(0x9, 0x0) (async)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
close_range$auto(0x2, r4, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) (async, rerun: 64)
r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (rerun: 64)
write$auto_sg_fops_sg(r5, &(0x7f0000000240)="4a0200000001040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b0", 0x30)
setsockopt$auto_SO_BINDTOIFINDEX(r3, 0x6, 0x3e, &(0x7f0000000080)='/dev/sda1\x00', 0xac8)
acct$auto(&(0x7f0000000040)='/dev/sda1\x00') (async)
r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r4)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4150338f06a89cc3b94a33000062a8a17f77cec55daed8d03ba195b137ba6dcf27d80f95e2d45360adbc595f42040dee834e417dc5f8b86caedf694565e87c567e15c0c5696c3a60a63c86ecbbbdbd077cd5b93204f2b35e15c112c6cf79df0ea1e99231b8dcdce825b819f61db6bf6430ad02533f88404d973db4633d909eba95c21eba5b54218f55509e1f017182331fe086b5c583817b199789551e196e486c4e990c0628954c6dc8df7fb4df647a75415556f2af97dfc801533064466ddd2d4726d83fae1c8297ef22", @ANYRES16=r6, @ANYBLOB="00032cbd7000fedbdf250a0000000c00188008003700", @ANYRES32=r3, @ANYBLOB="08001100ffffffff0800150001000000080017006a04000008000b000010000008000500ff01000008001600c6090000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20044894)
open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94)

5.311477765s ago: executing program 0 (id=2390):
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', &(0x7f0000000280)={0xd91f, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0)
r2 = socket(0x1e, 0x80000, 0x9)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000340), r1)
sendmsg$auto_OVS_DP_CMD_NEW(r2, 0x0, 0x4000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
open_tree$auto(r1, &(0x7f0000000540)='./file0\x00', 0xf)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
r4 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10)
write$auto_dev_fops_plock(r4, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r5, r3, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
unshare$auto(0x40000080)

4.344441735s ago: executing program 3 (id=2391):
close_range$auto(0x0, 0x5, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x200, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
bpf$auto(0xfffffdff, &(0x7f00000001c0)=@task_fd_query={<r2=>0x0, r1, 0x1, 0x10004, 0x5, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x2, 0x0, 0x0, 0x6}, 0x20000007}, 0x3, 0x800000)
socket(0x2, 0x3, 0x100)
r3 = socket(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
mmap$auto(0x0, 0x20009, 0x400000007, 0xeb1, 0x401, 0x8003)
close_range$auto(0x2, 0x8, 0x0)
r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r5 = fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r5)
sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r6, @ANYBLOB="040028bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0)
dup2$auto(0x5, 0x4)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, r4, 0x0, 0x6c06, 0x8)

3.746572625s ago: executing program 5 (id=2392):
mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffc)
socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
ioctl$auto(0x3, 0x5411, 0x38)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x3, 0x29, 0x2d, 0x0, 0x88)
r1 = socket(0x2b, 0x1, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
settimeofday$auto(0xfffffffffffffffd, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_STOP_AP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x4}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @str='\'.!\x00'}]}, @NL80211_ATTR_IE_PROBE_RESP={0x84, 0x7f, "52f5efe5b339894d13da20c2a9a37311da9aa1c736b2249fe38176cac4045991d20a438948eefc0615ed619ffa9c86047386cdfe3b3f9238b450717bb0595913730b4394860a1dba22b844b8b3b140f4d6147e06e991c854bef94277d0de3af593e619c18a7dee7f5cc0b655b5414e7ca95636d056bd2a14c439abfc04096e98"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
io_uring_setup$auto(0x3, 0x0)
r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/failslab/probability\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r3, 0x1a, &(0x7f0000000000)="37e154c4c5bf32df6d8f2f45", 0xc02)
r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x8002, 0x0)
write$auto(r4, 0x0, 0x9)

3.624144997s ago: executing program 0 (id=2393):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$auto(r0, 0x84, 0x22, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80)
r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x2)
mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x7ffe)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
rmdir$auto(&(0x7f0000000200)='}[,&*}\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x4, 0x2083f3, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r4 = socket(0x29, 0x2, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
r6 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r6, 0x114, 0x6, 0x0, 0x8000002)
setfsuid$auto(0xee01)
ioctl$auto(r4, 0x89f2, 0x24)

3.271966243s ago: executing program 5 (id=2394):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$auto(0x8, 0x0, 0x0, 0x2, 0x100000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x4020009, 0x0, 0x411, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0)
write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\xa5$sj\x9a%Y\xbd\xb8  )\x03\xcb\x12\xfa\b\x1c\tk', 0x5b33734d)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
ioctl$auto(0x1, 0x541b, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000)
fcntl$auto(0x0, 0x407, 0x8100000)

2.82765997s ago: executing program 5 (id=2395):
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x515901, 0x0) (async)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x515901, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
futex_wait$auto(0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x1) (async)
futex_wait$auto(0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x1)
keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x7, 0xc, 0x0, 0x9)
semtimedop$auto(0xa, &(0x7f0000000000)={0x8, 0x9, 0xe}, 0x0, &(0x7f0000000040)={0x3, 0x8})
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x1, 0x84) (async)
socket(0xa, 0x1, 0x84)
statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000029, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0)
ppoll$auto(0x0, 0xd6, 0x0, 0x0, 0x8) (async)
ppoll$auto(0x0, 0xd6, 0x0, 0x0, 0x8)
statx$auto(0xffffffffffffffff, 0x0, 0x1100, 0xbdf4, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) (async)
setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8)
prlimit64$auto(0x0, 0x9, &(0x7f0000000040)={0x0, 0xfffffffffffffffa}, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = memfd_create$auto(0x0, 0x4)
write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f0000001500)="a2877bac7c93c5037ad7113cb197e876c8c6b5dbe3e3ff585221627f1ab2964803f3fc7660512b16730c9cb96c658daa61ae4e6d905e342583499d8aecd51556c2df0ddc88c471fb7c531980c475af1f669d444f292da77504296da40dd18ca92a5cbb4d154a9a0f9424d7e85bee0594f82ba56d028d3b71cc00ed7f3f031d3a5093054d2100f2b6fa19f711147981ba10639d9715f2", 0x96)
statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) (async)
statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev5\x00', 0x0, 0x0) (async)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev5\x00', 0x0, 0x0)
ioctl$auto(r2, 0xc0305602, r1)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
open(&(0x7f0000000080)='./file0\x00', 0x2a4c0, 0x44)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)=&(0x7f00000000c0)='\x10\x10', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000440), r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x80000, 0x0) (async)
socket(0x29, 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)

2.356501075s ago: executing program 5 (id=2396):
msgsnd$auto(0x0, 0x0, 0x4000400, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r2, 0xb, 0xa79e)
lstat$auto(0x0, 0x0)
ioctl$auto_snd_seq_f_ops_seq_clientmgr(r1, 0x4089, &(0x7f0000000140)="decf10511530263373acd6f9decf1c77c7a6a590c592e9e58ea62e21cd2765ca8f1f892884a9f72728da7e63e36793559b37b8cb67c5848a0ca588b90fc31f83b96fb4479f88387be540a0bf3eaf666eea2a923021ff5275e583f6de88f92960a8c61112ef450d46378f1230727f2327bcefd165a2d3b21cda4ddf82f0c1bd69063456084e8d19f5d2afc1bd13ab18cc835497f764e9390a5b348f2d838d8ac558d5d24879c34066f191fccf8a95e7c1bf42a9c2481d1da9ff8076f5d93b3509a6a6b2bceeb13088cd2bfe176dd756e04fa879ecb7df92e3e99a0b0acfbf146bed4a52e8bb7b30623c7487")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf2531000000180001801400020076657468315f6d616376746170"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r6 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2681, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r7)
r9 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0xe, 0x2, 0x0, 0x7fe, 0x7db3)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x244, 0x2d, 0x0, 0x1, [@generic="006e3baf9ea8b90cdd21cad607f681896673625df2791fde03d8223fdf733e6078460a563372e0dd5091b75343a7581edccefce2c63a211c988de50abb27de2e6c7c84248c6171cc0ee863f2d38f9a2e4ae808ce2d3cd7eecbcee7b2d7cfe0b8f861912fcd0ca57cb0b9b3d5d8991fac282181193e75adc503c0d47545b1848e256c4e2de7b19e19f8", @generic="73f6cf239a492cdb4ffd9d56ae", @generic="d31318e74c4961bafc1de600dfff57efb55e3493d493eed996f438e98c9f8667e4559e1e156e318a662911407b2229600137d50ce35ba8742598eb5c7bca58561d80f3394484fe5a75fb45b6ae637d46370023f40fe1a71bfd55e433dc8b3b4a56", @generic="cc2dba9bb0122e4555570ec09e63b310470b01f8d0bd6dcea99f1a440620ae35c87dbb649c61c2786494dad6a30f97c7d3", @typed={0x8, 0xa3, 0x0, 0x0, @u32=0x7f}, @generic="91391573a0409c7bc2e41b8ee5d21c644aaae4581f44ed32911507d25884b41079469c95647bdf9f87f3df2af8df80bc7facc498c215eea3c1f24a863b94c29dc594bc28a5421f5d873330d5e65ac3e32f256383d4d9ca32b7058b646bdd311fdb1219e0d8d9c3bb06804d37fbd81dd62c257acc9a268b8c031ea9337ebc31b53b9e1fbbc43d2786fc35dd74467fbe016df639ac21651a99619fcb7f294fcd3945a578b6cdbafbfe73c72814e9a198fc6b915507130e1ade9a2e6196df040012b33dd699b5083f2a14035431de022ae4a5f0c4e6f7d181a17ae1c27359a182dacbe1e48111a4c0d192785347", @typed={0xc, 0xd2, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x12f, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x4c, 0x0, 0x0, @fd=r6}]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000051)
sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$auto(0x3, 0xc040aed4, r0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

2.025337194s ago: executing program 0 (id=2397):
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/name\x00', 0xa8001, 0x0)
mmap$auto(0xe6, 0x20009, 0x4000000000df, 0x16, 0xffffffffffffffff, 0x8000)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0)
pread64$auto(r0, 0x0, 0x80, 0xffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0xffffffffffffffff)
migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
io_uring_setup$auto(0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r5)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0029d5c799f6de5ec4b44e13ae946393040f00", @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf25020000000800010000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4)
futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd15\x00', 0x2081, 0x0)
ioctl$auto_BLKBSZGET(r7, 0x80081270, &(0x7f0000000280)=0xa)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x4042, 0x0)
mq_timedreceive$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x16, &(0x7f0000000040)=0x5, &(0x7f0000000080)={0xe4b, 0xb})
write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f00000002c0), 0x0)

1.413320951s ago: executing program 3 (id=2398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x0)
getsockopt$auto(r1, 0x84, 0xa, &(0x7f0000000240)='\xc8\xfdV%\r\x80\\\xf7\\\x00\x0eU\xa7\x1a\x04J\xbb\xb3\xcb$=\xdd\xf3\x9a\x98\xf2\xde\x1e{\n\xb5=\xff\x01&\xcbk\xec\xe0P\xdb9\xb5]\xb2E^78\xfd~\x80\x89?\x80\xe2`\xa9M\xf1dJ\xf4TB\xd9\x89ta\x1e \x15C\tgBd\x0ew\x05\xc7j\xc9-\x82\xabie%\x96zl\x1f\xf6\x90\x90\xefr\xd0p\xb6\xb4sx\x91\\\xc1\x12?\xd3\xedF\x9e^O\x1f\x14b\xa9G\xe1\xa7\xb2\xaa1\x0f\xafX\x1c]\xb1\x84\x83\xa5\xdc\xe4\xa7\"\xd2H>\xc0\xb7A\x01\xaa\bu-p(\xb3M*B\xe7)\xc7b$\x8fI', &(0x7f0000000040)=0x1002)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0)
connect$auto(0x3, 0x0, 0x54)
prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xffffffffffffff8d, &(0x7f0000000980)={&(0x7f00000012c0)=ANY=[@ANYBLOB="a40900000f30a46891ac004cea16b228b9534c8d469c49ae4f8846508125e979b43785e7ed45b61ffe84f16e322c1d36041294052e9d51929c30a3b0077fb443", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf251d00000000003e000100000004002d010400470106006500020000006a087f005876b23ab20af1a76238d0b700069ce8ec01d1f25c78081319d882f97e0227d1b783c09312ac55fdfc38e49e848f490244c04a7968124250353d430dafa6b0664630857ea058bf3e35c08b6db82c8e69532461e5354cb8125a7aa93e3cc80bc32bb4016d781f676fc43ce3cb3e760c6d9b61513a1329a404baa66a1e7bc3cb943297923d1503be3dd57810f2e1d001f3f81d8a18d4bf3444fd59ed49c4ff22cb97a68b07365ce988e440792eb1fe14267216c89ca37fb48205478f9eb607367efd20be2aa97785928ef604c4e50ed4b4c727c12405c511ea3e30cbccd555645dde1742b7862defeb2976c86deb2583330dbe4be298d836983a3721c4047ef80194fb620c9fe9b6f6d3a7a2a9776a098a32a69eb57f6c89005f7122678749506cd67959737bfb5a994dd8ed207facc4be3c47a5a2dd044a9b0d4baa809d8ce4de75f34d940be1898bed835dc275178a3a90cae13f219eb852c6afd5b85c62b3d93c4e9f4df41e0a3fa1dd5c88e17260c6fd0b37148037e80a4eae80ef2b6893dbb21933a973682e25e115343d73732984e9856c7477277cbb60551bac71e70f498e18ea09f5e2b7c8a6078ee1397d182dbcabfe02df8effe648941aa814f8893d99965daa858b989751de34039471c9e2c23e5d07a3dbc5fb5fe097c11f10bc0c77b73009a04eae1ce6382652fedc321d70798e062244fd5a21ed346a692f30509dd7d8e96c4ef8ff7dcaace58bfcd76fcd39d3e14fd563225d4c29b24191f7b0c1f92ffa559db57849d04439f9a3fd26456c0fca5069ec10c00e19c737ce31169d31465e4886e86c9f64abe57a949f75a2c9ea2aebab0efdea45e1beef64d2e2b14305934912451b8b9767d5bff94b9fdb0d41fcc5fd32231824d7db8a08431849bd9e49c0d635e442324d057e746ad89bfd929bbcb6b963632522e3e424da70b46e040dcd3666b17cecc2d4d90050636eeffd2055aef411425045caa9454143e2bd19772246fec3232b5f581f2065249fead170d42a8f523dbcfcb0c76005fc79547b730a61189a7370d278912103b42901cf05c8d493ab76d382eb5221a8c9c3fc81c4620ccde19a9b1be5697e56a36665747b6920d0fd460c6862ecc17ad48f8b647d59d468f11861110fc01645bed7831e34bf6687f4a9159d198e5d00db3e872395f840541587897b04ecbb023fd5e914de367e1f22a4c029b0637296347004d58913a1a1e1a48dee5829f8ef058850f884ffd313a58cadffee1f0f6521193481bcf720967ffc064457884fc68060ef607c4e0b724330edb3ea926253dfcbe8919d7d4641a7e7c0e898fb6e5e6b3a95ae25ab86892d6151a51f378dd98cb20d3cf23f5fee96ef9fd8263c090b3e4e1ad29aaf0a514c72a31a8ac0b3fb183dd29445d9024f716772fa7024f1e4ef81e5c9f39b861d78f08f1c4460a16b92cd140ac5e77f9c39b304b5bb696a4f6475c2ff615361f31575b44430def2bbef3ac410f90701b822dc7b10fcd4b6a33c13ed9207581ecfc8d1b022301f7d22bd76078cbe836e836d2dd0689cf6c17a7154cc8e46daf59a7502bbf4e4331d0b9f16add3802d2f7e9cec50a6b4ac3ae2636e44e6255f77c3ff2ece3f2fea20a8b1ffb84a4d21b54b5c76d1e6f8911c36aa8d28fed225e431568d15ce7b25b96564b2a64da802367811a7dcd22d7e32d7f5a8b5137c488c432cecc87ed8fccd5110ae3f28f838f1a114c5c8276418822cb49af30902ef718307bac67b622f802254fced639370e4ef947fc0a898ff2b8b9716d06e51fb9266b2978a55de94fe61985e85f3972a01389964b363f644b005d982ca356073db91df8af9cf5e01aaad31218e3921a851251641d50d635144165bda0b35e4249753f6dfd82bd85cdab21c918f609d6971b94338a429b45123324cbf450c5592161af941afbbbabd9e8b3d6ed691f053a7d734101ea15d638ac071058a283ca1fd2dc5a954b39376270f72eed2c23ffac868dc613fdd00452fde80341dec09b4a9aaf47213eb755592f77432b1bef61279fab8e00819ba3628f83b4ec685842622581cd1d08c36a0156648fa7e3f271eea6ee7b9da21a8d1ecd3d960a6c428cb4b972ec1c4b647747da345e91baf012285f1800dfe1d03b2f50082445c69b29ee2271f8133aa3bfb530b5680a86dec973d3a4d738022504df2699c2d0cab9f1db32f99eb09d29a831d3db7e6bfbc75c06271807f62200c680ce9fc4cf328e82cf99e98ba5b60ce164d5c542d6e510ee77308bb68d9484fc941c934025a82fb2486e9aad255e88956bcb5ff60ca0bf3d42f50cdfef66b24240c0200006d37e45246bd4de9544f7f501f79fa351684303d5a200940ba5187491a64235f81da1a5eca903a8c846ffc7e68ed5488c1db70773717d7c5daafe137cf044c41c0f899ecaceffc74d4ed4dd841c70fe82147b2b3a4bf456d788538718278d58de1a39e9ee2ea9cb5f90a0bc87a9dd292aaf4e5de17a80d00a8bd4863aa27316ee8edd4e553dc7e95dc7a43bd185ab32891046ce816f3cffb5460296dd348b30c9325b678da6a2616f2581f1e9e0317dc5604e390bfc7f462126eea1dafd2d7aaf0c1ace743692c47fac54f8c8b61e5e9af8699cd1b8e1d5863f460f9a2e573249cbf4ca14d26a045beb8dc4e2bd927b9f6f1acfc5d204e5d364b2c395b9537ca962a7fcf660edac7cd556dced23e238e398edf36785dfe22f6b8a0c3677a54066afaa8c79150ffe26c92ae61fc37f5b2bf1f438c170dc8dfb538c020b1b4ac9a95166e869231588780946c7fc20d7323d2b14b40c3e1001b163250d798b3cd99115ee8afe069689a210bfc6081f467a74f209d6607be4bdb93f9503ba7fad2ef7eb3a88f880c1a20ec1e12db5b1e5ae22cdf004edf0cbd87af96b06bb653a87aad152b8e4132c5a0888a013ed41b43324bba43a1e6c22301379a2a0cf17863bea07ecf2f27ee89b91859e267c0f5bcf359f1e332d8c4772a65fd78448d0da6425362247bf53b0f50039eefb304f8651b9288578adb00000a009d00cfb7c80733650000"], 0x8a4}, 0x1, 0x0, 0x0, 0x14044801}, 0x85)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000000)='.\x00', 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000)
timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0xa, 0x5, 0x84)
sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f)
r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0)
ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2})
clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4)
set_tid_address$auto(0x0)
setns(0xffffffffffffffff, 0x60020000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)

1.288751042s ago: executing program 5 (id=2399):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
mmap$auto(0x2, 0x2, 0xdd, 0xeb1, r0, 0x8000)
ioctl$auto(0x3, 0x5411, 0x38)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x0, 0x43, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', &(0x7f0000000080))
socket(0x2b, 0x1, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x3, 0x0)
r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/failslab/probability\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x5b, 0x0)
r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x100e01, 0x0)
ioctl$auto_FS_IOC_RESVSP64(r2, 0x4030582a, 0xfffffffffffffff9)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_CREATE_VM(r3, 0x4018aee1, 0x0)
read$auto(0x3, 0x0, 0x80)
io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000000)="37e154c4c5bf32df6d8f2f45", 0xc02)
r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x8002, 0x0)
write$auto(r5, 0x0, 0x9)
msgsnd$auto(0x6, &(0x7f00000000c0)={0x3, 0x7}, 0x3, 0x3)

1.026746124s ago: executing program 4 (id=2400):
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x1, 0x84)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0)
pwrite64$auto(r1, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x0, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7e)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(r0, 0x0)
r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x410140, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000001580)={r0, &(0x7f0000000400)="0e67b0a10460d80c974fe68f8e5c590dc2103191a8ffc3a749c64b37499caf10d4354a36bd4fdf751d1f30ff121ed379bc696def7380d4ea7b9ffe7a7ca97b71454abb5d50400228d66438437d0875127d30aa281640e2b9058a8bf57782122f9a39cceb2cebba149930ec484beb40bb8c21f990025fb9c6ef0745b66a32cac2ed5055133fa5f8bbc8a20729dbeca12733a53cf76093b4a5670e973ac5d1b284f95fd5a495fc4f22a83d785c18e932229b13b5fa51da8d1766bb0b7d4e1548cde25685fa07698fac7fa3e4d080c303181eaee658fde7483159529c7452154d7a4d54820a02d19f8b7cbe6b12268bac6b7949a32d4649acc4dd6df8b03f92b2177f1a527cba9e157af1e64a21562cf8162664cdea53a87a1a0a3c82578b0151d7bd1c05c9fc2f86778e4c3140b3969600e0d2218d80e8ef8093cb166612ff87398367837430362a81e5f92fcde59b756f66a89e2dd5c0ac1943b9a470af5e23e83e6c7b0b0080f17f53fd6d112bfffd7eb72b93583a0092383789f007bd20c04ade32339bcab6fb99c6a3a836bc1b69e7a40d7eb8e0019f5a3642494b2f3e4cbb1694b544c1b9befe4ac93fced36f0dbbb9717e36e906b0c1c58570bcbaf6e94197c3c491a0869a7cac35e3a5f356d33c7cf58209f7a89ae08002aa13ad322d590f54fa5c555970123e3b1af2643f5b021d6fc0726ceef2aafa43a9b78da60ddd6d03e93d4cac4b6235c8ce0621a3895139cccdf5c1201568c151deb9d133ce8bda798f1e4416431559ddae8d7ce79a829fc51c13ab0d69ecaa9ee613ed553d8b17266cedea90d8739a45ea9da67f81cd1cb16d5d11a277841d01749f127cfb84d61749a38eaecd4468294932cc096be5f86ffe230ac3283a459f35b6aeda0fd2b3026250a71975b0576888032691997db44b21a71c9ea17639c51d24df378cae31606acff8e22976bf6e85c753a550c9ecc0bccc84a372c489d5bfb650e69fa8f4865dab22a31b4af1b1cdbca7fab175629053c7f15a4c8a84f2ec4dd7be19c18cd108c1afef636282882c85004f5960fe4c4c5af009ffd721d675dfc317c45462f214566fbc109be8739fc1a0bfc8a9f023fe3b18d9c4b21e41451d1b69706ba7bfc6d45f50cc940ba6225f7cd44cec39c0d18d068d479d67f55100a2c961e7d722d01fe44a98e5ab15b00d9f99c0b6d4bb53b2369654b5e092f52a30589601e86e2e28fc271c696b6722cbcc0b9321e8a4019d4b08c8d781eb81d4331de02901fe39fb53903ab78677dfe84c45dbf0a5d58fe239979a097c6ece9a02aeca1de438bf52dd461f866f699202c054a7f356d08e408fa4fb6c3063de3525778d8e3667cbbc4d7523c6c2f6e7eab64e6457d387de98abb5db52d3e2b88bdc68458fa8962c1d7decf3132d2c28a96840a5becf0b8ae9c24f4a99a5ccd35bc34c0a6ff5b3900d14ae0749a160a4494fd1d27dc6e129fe5d1f7dd521592f59b78900606cb5b49fc2b25670e802e63973efa5ed612ac9be7dfa304d97b6bacf91a92e5b41341c26e6769f86d882e7b640fdcb7f5798953d0dd7f5932854cd3db4ac772ebabef89f5f82f98a7eaf9916cebaa9cfcdb664ef48118fdebb4a21f4ff9a966d9a78c345b38f1d22b52f78fdbccda07fef1e12e408bc7ce4556d8acc3e8ad0f31611c27972110b354e670c741a847be7ce5295d1f455cb3d88e408a57ebbd87e0aa0731cee5de964967995ab3e915d86fe358bd68075af6865f7ac96c5c621175936d886b1216533bb5be5df1c75e5f9dbc93d48bc1f632cd84b5107e1f5efd71e39da82cbebc509072b9326001416f630b18014b18773901f6016f530ef79c704238c4ca179696e86ee15d75469ff63f1bf7ca5f90e3dda62d450bef78cb132bf69eb78aee05db3d5c33bba1feb0a2ca78d8f0c30e54ec05c4e61abcd04522d716cef04f91e73de06c8166dfd7d556751b8fa1179243418ccc3ccb5803f25518e948bc43f15a59b85dda99ec94b86d02d6c05c9d2fb2c851806301ac71eb577a2bf3df62fa1a128fa057b2966fe40a5ae69c4f910c7c7ebc743913ccdb0856456fd7a92f811bf36a4abafd5b012dcc1220c3ebf25b7356a4f174ec9c91fba5e843731de66bb2c36df45e0f9dba0b6c6ede918111e4c2ae2a189f6e78de793ca319a1c1b8fdca5d3956b4d115c88e945a7ac7a6a27c758f56ce660b99e8ea34d5efb6ecd8ad44e3587064bcd4494464d4fe2bc38027dcb3d513f7af13f99f8a7f91dddfa92ec226a078b7db9fe9d4a803d4952aec7f87a027fa91fff062a5a00e0389ba3bb382eef200098b17ca082180e9b6a4c2477f394383521cdf6feddc11c0557bcc3cf951c1ab3fc40a5262c867b575308be70633c513fad3b48f7a7c8044a93ec3f7281040700bc7118939d0d1037fd4bce2534ca7cc7432fd5dd2dfb64a709247c0a51459b615a5ff6767f531abaecc3a387ef7a80c6a0af6f467f773ae551f24e43daea9ac7150a97699eaa7d961c399be39f81a369121f83ac94ccd8b0638a2329817849adfe106c09ce621cc76c10705a192eb79e10cccd3506f4e61bc868c7102bee6f02919f4bfb15a182e9d2ef423a3db42d339c109365aca08328696d5968b18799361f96672592d37137669919f619fbb658925eafed7469ba18cb1e998d02822d13d020131d208ab2614c4d2a2ec94d4f37f6c8a0f668863c9be80cc58de67a834d0c7637f662cf8199ab51cb00aaf8f16b71f4cd5658ebf067d001e81b2339008dfacc2653244f559457c3d18e32dd5269ab8a756bc10f79ff3cf76941043b92923540ac2a457eb45fb88349b1221e096816db9e1cc70ee7a57f2bd9482375582a6469faf616ace440af24ed7ac8f2f0cae2dd284de1416aba8d4cdb3d0b9a871f92781dc45142369daa7451eb1549bcdaeaccc1f16d245f975964212f91beda6773c1deaaf6290025daed20fc7b7a05becb5abe065a9ad9b3c838aa6f701df90e2d78b1492c998a9c3a87ba844a53118f1eac7dfbefc46e8d52f576bfc9af67046aefe798331b153483f2e5f2836f698dcd6eafb66a7f86202ed622786450549a043a5ce644b769f8d3ea8a91cb37bafd3f4c0f2f9d5bed5e933e3dee6bb1836f24709117d79635431598fa631ea2e21f8d01f680530587f13712fc007d53deeb1a282af883d0abe44c606e5cd63c70b4602b3f8aec62840c1b7c52dece3dd106a8bb01cba243663bad3e9c3c8574b40565ad61a1be1bf6772cef966e7fd0f3ad3bfb70c65af17867065c7210078862ca4e68564abfb6ea40c1267ea331b0aa173ae042404587df4b5bfdec11aa11847a16e3075e22310f52172830fae615421bc963c45db0d730f6ed631c4af114870b2db02445160449ed275eb03bfd93010fa08ab54c5d0b8cda9ec3508fed804e78d03724ed8c1a36de9d4a0310e0f271fb2c1869c458ec69581071115f2c9184f1ab989f0887c7e0d2662d523b18646dd994a771a2030f9353f8ac3457e9210916cdd35d058191af0061af25fce64bb6b240a01e170b0566d33e6241c54ecd8ad4b3bb1e937fc06b93f011ee54d7598a7d2a9822a1596dfb305de77dfdd7bfa942fa75115ab693aa363c9659bf758602afd18b0086f014b04d3bfe7dc94cd2399e38b16631d5d4f0b45e6f9d764b9a1b970bfa939bc97415a2c30bd7a1c13a18c0f3d8fc0a4f2c2c5f7734460f86023be9e411d91e0a0671be7704a3f9edd7df24f8f2b0a59e1a92be42c9a028e478331a844b7576884da1f3627849c684ba6eebdb617c2271bca3e63fbff3e14dc8e8c139afe21b178d3f11cbbe477e8ae6b13d55eb1ec45e31a03291bae0817d269fb1695ce1cba211641a5a20b29c8f2af38b8512a26067719ce6496e6bfd0650257405b46c912196c632f347a1a86b4fd88320ef578896922694aa60dba515a2688e0e0fa2624be8b83f7d7aa3b98b9157caca3ac7bffd46cc8f6e9bd5e8ae5a2ecdb28c8de8f1ecd6bfcf37f9776257a68fb0c80c538b7705e86037fefa1c2abd54c663aaea0180b83c15cdcc73b3bc4f7cc34b847ffe4d80311e16eaa6de9340c07bf5a39f4db567da9d1370cb843b08a09646b2983a007d9dad0e7322c9e0851b2068b80b961682981ab5d9a8b046438182da96352c728d631ae01c7b762ed2a8cb1ea2c1aa5107fee32bd19ef3d242fea5400d044c26df563afcb92e93cc017aa01a48cf9c8f278e95ae04d1960432cc628da2f8d0ebff8b780b5caf30903994163b5eff6cf34c3aa999fe597e55c8f6ab29a2f9ac5774637df757819bdd4a059c8ab3af7500eb3606bbc008369a931326ae18292a2bbb1f6dd0b6bc1df86beb723bdccbce909ac43ca3f2bf0ab871fca110920e7aa1ec386ef434e0c31809e62fcfdf1859f14b434aa1fc4cc8a6ff700fe5f629aa6d14a94e0321a3cd3d3a7914e5ecdeecfa7ddd199b13c16687d53b368d4f5a32f7eca470f7d2e55186ebda2c96cca3acea4eb89c2ad7bff4037fbdcd879a8edf86cbe008b82c2542ccdd4f7c15765fa94114506ff282deb58fefc580c829f2eed7b07f32293a58a02fbb270f7e5f180abee4565bddf6a60573f1fa6c51bfe6e92f4d6a5736d6e94ac91eb617d8032b4571df6104c2d1e06a9e7c15f6925ed0bc10d98bfa9d7b4c21661601a68e45ba86eb694022c476e2674c1aa0f0bb4e12e016327df1e63d3d2ed64cfc70087aba3a8e4615401f6d46e61184f1fe149c433d6b76e333a7a1f910302c76b10da2b3a440d4e07f0f9c9f2f9b9b2ad6865776ab7f86f6a3264712ef30350e80b247411262ad9124f2bcad35240804b4dca5e924b889ec78ee84c11b945588c8c376414609b7bbdb6a6f343df8159ba238ea581bb1d2afef9a25f3eab257462077719c0e97c2e0add42bdfe19249a09a019475ac2973336659986071f6506bba246776a856b14d92a2f5be94a9d0526dc2169a19885c9164ce00bf878b8f1262255c55fc6bc7682030df87308d4ba090ad0d2f9dd2d5f942203d480f3c46483499540821c40ebcb6cc3b6e1e6465bb42b49291e06642a33ddbf309af69c6bbba388aeba108a4c82bf6b8d34161a2ae8a13014aa63a1abf219ccf9dd620a69a2c5d14093689a6207d3101204ed827d8a054074e0b19a451d8d790377d79a138b58936cd7696b58cb1642e7eac82445cbd98db726cce821a61dbaedaa5a0107a4090a7737abe7dc58f6bae8f7a8c91f7985ad1f0e3334225b00f4a324c47de456a8250434a66f41d50ebe6ed9ae922672b16a11b09224111e3cf77f91d1c0b5d8686e0816f2a078ccf7a1afee8463286f80a7f9a6e95fb2244648846457f83fce83a65c2846740f8bc3c8ef5c207485c99fdb33bdcc84cd0204c5622530ddcc8b6070cb671b22344ecc4fff3d8fe01c7105d8b43e0d14341e5f124dc9dd98c753aa1cd9d4fc5bd9e803382f97da163330d791f741aef73fbff01df029c5f17ba878d3e46bc869b1e81f27c393b53369c2d8a2dd1191014a1bdf87d238765dace66e50e8d3a745ac6164eb9f884981a92f3039c16e3a914a773eea15d54f87fb56537531600b2e3c23acf2195ec2a910e8fddd4e4dff1", 0x95, &(0x7f0000001400)="bbec78d43399911fd5e4dab0b8856d2bf937513be625ab56226d81f309840db3c65869cf1be0e257932cde890f90e800a86794bddc199180dd3fbf3b8c76829b6a3682934e9528cccb6df8669b88ec211d83f977eff47d1797a1095869614b54d4cb7dee3d1f877140", 0x6, &(0x7f0000001480)="09c86681fa501a71055e096cf8b592c5be6ba4e60b6e86111fe26f51b397e77fa3970c891a90d508ec98c6842df46f20263e028f6f92785d0efc7216aa58622db43bf5e5c48100d11640b17b224d2ea06150e29febc3b8bea6ec29e2b6c3253567551b602ef9e64b01e6d8e5e60d1d9f86a98517dce76875681b79ceca61ca81797f7525a3e514b08cca1b454954c0fa34feaaccebe4e871b404b8830eb71caf62c56b1242c894", &(0x7f0000001540)=0x6})
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
pread64$auto(r5, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5)
ioctl$auto_VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000080)={0x9, 0x0, [{0x8, 0x5}]})
ioctl$auto_VHOST_NET_SET_BACKEND(r7, 0x4008af30, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)

533.373886ms ago: executing program 5 (id=2402):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x11, 0x5, 0x10a)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0)
io_uring_setup$auto(0xc, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi/parameters/acpica_version\x00', 0x400, 0x0)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/error_log\x00', 0x20c00, 0x0)
socket(0x2, 0x5, 0x0)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)

67.243463ms ago: executing program 3 (id=2403):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x0, 0x8000)
bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000008, 0x80000001, 0x20000000010008, 0xffffffffffffc32b, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x106)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0x200007, 0x8)
read$auto(0x3, 0x0, 0x8080)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)

0s ago: executing program 4 (id=2404):
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001080)='ns/uts\x00')
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x16e)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
setns(r0, 0x0)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
msync$auto(0x80400000000003, 0x8d2, 0xc)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"7c03be02a973e5f9b0a9d9b2d11203de8938e09687140ff22df377b4043a64e1", 0x7f, 0x80, 0x2, 0x4, 0x4, <r1=>0x0})
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/mnt\x00')
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x200, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r2)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2c, 0x4, 0xfffff800)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

kernel console output (not intermixed with test programs):

link: 186 bytes leftover after parsing attributes in process `syz.0.1106'.
[  425.574957][   T29] audit: type=1800 audit(4294967367.370:6): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1105" name="sr0" dev="devtmpfs" ino=2859 res=0 errno=0
[  426.912529][T10994] FAULT_INJECTION: forcing a failure.
[  426.912529][T10994] name failslab, interval 1, probability 0, space 0, times 0
[  427.086644][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.2.1110 Not tainted syzkaller #0 PREEMPT(full) 
[  427.086675][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  427.086690][T10994] Call Trace:
[  427.086697][T10994]  <TASK>
[  427.086705][T10994]  dump_stack_lvl+0x100/0x190
[  427.086735][T10994]  should_fail_ex.cold+0x5/0xa
[  427.086764][T10994]  ? __blkdev_direct_IO_simple+0x112/0x890
[  427.086792][T10994]  should_failslab+0xc2/0x120
[  427.086819][T10994]  __kmalloc_noprof+0xe0/0x850
[  427.086855][T10994]  ? bpf_ksym_find+0x124/0x1c0
[  427.086884][T10994]  __blkdev_direct_IO_simple+0x112/0x890
[  427.086915][T10994]  ? __pfx___blkdev_direct_IO_simple+0x10/0x10
[  427.086973][T10994]  ? ktime_get_coarse_real_ts64_mg+0x249/0x300
[  427.086998][T10994]  ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300
[  427.087028][T10994]  blkdev_direct_IO+0xc76/0x1fb0
[  427.087066][T10994]  ? __pfx_blkdev_direct_IO+0x10/0x10
[  427.087096][T10994]  ? rcu_is_watching+0x12/0xc0
[  427.087124][T10994]  ? __mark_inode_dirty+0x55c/0x1720
[  427.087147][T10994]  ? filemap_check_errors+0xa9/0x150
[  427.087182][T10994]  blkdev_write_iter+0x703/0xd70
[  427.087214][T10994]  vfs_write+0x6ac/0x1070
[  427.087240][T10994]  ? __pfx_blkdev_write_iter+0x10/0x10
[  427.087269][T10994]  ? __pfx_vfs_write+0x10/0x10
[  427.087292][T10994]  ? find_held_lock+0x2b/0x80
[  427.087339][T10994]  ksys_write+0x12a/0x250
[  427.087364][T10994]  ? __pfx_ksys_write+0x10/0x10
[  427.087395][T10994]  ? rcu_is_watching+0x12/0xc0
[  427.087426][T10994]  do_syscall_64+0x10b/0xf80
[  427.087454][T10994]  ? clear_bhb_loop+0x40/0x90
[  427.087481][T10994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.087505][T10994] RIP: 0033:0x7fac39d9cdd9
[  427.087523][T10994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.087545][T10994] RSP: 002b:00007fac3ad21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  427.087567][T10994] RAX: ffffffffffffffda RBX: 00007fac3a016090 RCX: 00007fac39d9cdd9
[  427.087582][T10994] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000008
[  427.087595][T10994] RBP: 00007fac3ad21090 R08: 0000000000000000 R09: 0000000000000000
[  427.087608][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.087621][T10994] R13: 00007fac3a016128 R14: 00007fac3a016090 R15: 00007fff0d51a628
[  427.087650][T10994]  </TASK>
[  428.126350][T11012] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  428.936521][ T6104] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260
[  428.936553][ T6104] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260
[  428.951979][ T6104] Bluetooth: hci2: Dropping invalid advertising data
[  428.963504][ T6104] Bluetooth: hci2: unknown advertising packet type: 0xe9
[  428.963538][ T6104] Bluetooth: hci2: Dropping invalid advertising data
[  428.980015][ T6104] Bluetooth: hci2: Malformed LE Event: 0x02
[  431.619527][T11058] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  435.096265][T11098] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  435.554050][T11109] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  435.782821][T11110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1137'.
[  438.609690][T11154] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  439.055854][T11160] FAULT_INJECTION: forcing a failure.
[  439.055854][T11160] name failslab, interval 1, probability 0, space 0, times 0
[  439.128126][T11163] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1152'.
[  439.151848][T11160] CPU: 0 UID: 0 PID: 11160 Comm: syz.1.1152 Not tainted syzkaller #0 PREEMPT(full) 
[  439.151879][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.151892][T11160] Call Trace:
[  439.151899][T11160]  <TASK>
[  439.151908][T11160]  dump_stack_lvl+0x100/0x190
[  439.151938][T11160]  should_fail_ex.cold+0x5/0xa
[  439.151968][T11160]  should_failslab+0xc2/0x120
[  439.151995][T11160]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  439.152031][T11160]  ? security_file_alloc+0x34/0x2c0
[  439.152056][T11160]  ? trace_kmem_cache_alloc+0xd5/0x100
[  439.152088][T11160]  security_file_alloc+0x34/0x2c0
[  439.152114][T11160]  init_file+0x95/0x480
[  439.152147][T11160]  alloc_empty_file+0x79/0x1c0
[  439.152182][T11160]  path_openat+0xe8/0x31a0
[  439.152209][T11160]  ? kasan_save_stack+0x3f/0x50
[  439.152235][T11160]  ? kasan_save_stack+0x30/0x50
[  439.152256][T11160]  ? kasan_save_track+0x14/0x30
[  439.152276][T11160]  ? __kasan_slab_alloc+0x89/0x90
[  439.152299][T11160]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  439.152335][T11160]  ? do_getname+0x35/0x390
[  439.152370][T11160]  ? do_sys_openat2+0xc5/0x1e0
[  439.152404][T11160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.152431][T11160]  ? __pfx_path_openat+0x10/0x10
[  439.152470][T11160]  do_file_open+0x20e/0x430
[  439.152525][T11160]  ? __pfx_do_file_open+0x10/0x10
[  439.152573][T11160]  ? alloc_fd+0x476/0x790
[  439.152602][T11160]  ? do_getname+0x191/0x390
[  439.152638][T11160]  do_sys_openat2+0x10d/0x1e0
[  439.152673][T11160]  ? __pfx_do_sys_openat2+0x10/0x10
[  439.152706][T11160]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  439.152740][T11160]  ? __fget_files+0x21f/0x3d0
[  439.152770][T11160]  __x64_sys_openat+0x12d/0x210
[  439.152806][T11160]  ? __pfx___x64_sys_openat+0x10/0x10
[  439.152840][T11160]  ? ksys_write+0x1ac/0x250
[  439.152869][T11160]  ? rcu_is_watching+0x12/0xc0
[  439.152900][T11160]  do_syscall_64+0x10b/0xf80
[  439.152926][T11160]  ? clear_bhb_loop+0x40/0x90
[  439.152954][T11160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.152978][T11160] RIP: 0033:0x7fe9c6f9cdd9
[  439.152996][T11160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.153018][T11160] RSP: 002b:00007fe9c7e63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  439.153039][T11160] RAX: ffffffffffffffda RBX: 00007fe9c7215fa0 RCX: 00007fe9c6f9cdd9
[  439.153054][T11160] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  439.153068][T11160] RBP: 00007fe9c7e63090 R08: 0000000000000000 R09: 0000000000000000
[  439.153081][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.153094][T11160] R13: 00007fe9c7216038 R14: 00007fe9c7215fa0 R15: 00007ffd3ca908c8
[  439.153123][T11160]  </TASK>
[  439.928026][T11176] netlink: zone id is out of range
[  439.977662][T11176] netlink: zone id is out of range
[  440.082001][T11176] netlink: zone id is out of range
[  440.131355][T11177] netlink: 6232 bytes leftover after parsing attributes in process `syz.2.1154'.
[  440.313922][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  440.324596][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  440.380779][T11176] netlink: set zone limit has 8 unknown bytes
[  441.302656][T11179] bridge0: port 3(geneve1) entered blocking state
[  441.398541][T11179] bridge0: port 3(geneve1) entered disabled state
[  441.493621][T11179] geneve1: entered allmulticast mode
[  441.637174][T11179] geneve1: entered promiscuous mode
[  441.748713][T11179] bridge0: port 3(geneve1) entered blocking state
[  441.755319][T11179] bridge0: port 3(geneve1) entered forwarding state
[  442.474211][   T29] audit: type=1804 audit(4294967384.270:7): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1157" name="/newroot/313/file0" dev="tmpfs" ino=1636 res=1 errno=0
[  442.601081][   T29] audit: type=1804 audit(4294967384.300:8): pid=11198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1157" name="/newroot/313/file0" dev="tmpfs" ino=1636 res=1 errno=0
[  442.746541][   T29] audit: type=1800 audit(4294967384.320:9): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="file0" dev="tmpfs" ino=1636 res=0 errno=0
[  443.099816][T11211] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1161'.
[  444.904002][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'.
[  445.896945][   T29] audit: type=1800 audit(4294967387.690:10): pid=11251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1169" name="sr0" dev="devtmpfs" ino=2859 res=0 errno=0
[  445.943506][T11231] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  448.221070][ T6104] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260
[  448.221102][ T6104] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260
[  448.236302][ T6104] Bluetooth: hci0: Dropping invalid advertising data
[  448.244438][ T6104] Bluetooth: hci0: unknown advertising packet type: 0xe9
[  448.244467][ T6104] Bluetooth: hci0: Dropping invalid advertising data
[  448.258436][ T6104] Bluetooth: hci0: Malformed LE Event: 0x02
[  448.316149][T11289] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1179'.
[  451.712839][T11344] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  453.222888][T11357] random: crng reseeded on system resumption
[  453.731481][T11379] futex_wake_op: syz.0.1197 tries to shift op by -2048; fix this program
[  454.356129][T11394] FAULT_INJECTION: forcing a failure.
[  454.356129][T11394] name failslab, interval 1, probability 0, space 0, times 0
[  454.517240][T11394] CPU: 0 UID: 0 PID: 11394 Comm: syz.2.1199 Not tainted syzkaller #0 PREEMPT(full) 
[  454.517270][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  454.517284][T11394] Call Trace:
[  454.517291][T11394]  <TASK>
[  454.517299][T11394]  dump_stack_lvl+0x100/0x190
[  454.517328][T11394]  should_fail_ex.cold+0x5/0xa
[  454.517374][T11394]  ? iter_file_splice_write+0x1d8/0x10a0
[  454.517403][T11394]  should_failslab+0xc2/0x120
[  454.517445][T11394]  __kmalloc_noprof+0xe0/0x850
[  454.517486][T11394]  iter_file_splice_write+0x1d8/0x10a0
[  454.517516][T11394]  ? copy_splice_read+0x670/0xb90
[  454.517542][T11394]  ? copy_splice_read+0x734/0xb90
[  454.517576][T11394]  ? __pfx_iter_file_splice_write+0x10/0x10
[  454.517604][T11394]  ? __lock_acquire+0x4a5/0x2630
[  454.517627][T11394]  ? __pfx_copy_splice_read+0x10/0x10
[  454.517668][T11394]  ? __pfx_iter_file_splice_write+0x10/0x10
[  454.517699][T11394]  direct_splice_actor+0x192/0x6c0
[  454.517728][T11394]  splice_direct_to_actor+0x345/0xa30
[  454.517758][T11394]  ? __pfx_direct_splice_actor+0x10/0x10
[  454.517790][T11394]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  454.517826][T11394]  do_splice_direct+0x174/0x240
[  454.517854][T11394]  ? __pfx_do_splice_direct+0x10/0x10
[  454.517882][T11394]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  454.517913][T11394]  ? rw_verify_area+0xce/0x6d0
[  454.517936][T11394]  do_sendfile+0xadc/0xe20
[  454.517965][T11394]  ? __pfx_do_sendfile+0x10/0x10
[  454.517988][T11394]  ? __fget_files+0x21f/0x3d0
[  454.518020][T11394]  __x64_sys_sendfile64+0x1d8/0x220
[  454.518049][T11394]  ? ksys_write+0x1ac/0x250
[  454.518073][T11394]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  454.518106][T11394]  ? rcu_is_watching+0x12/0xc0
[  454.518136][T11394]  do_syscall_64+0x10b/0xf80
[  454.518168][T11394]  ? clear_bhb_loop+0x40/0x90
[  454.518198][T11394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.518221][T11394] RIP: 0033:0x7fac39d9cdd9
[  454.518239][T11394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.518260][T11394] RSP: 002b:00007fac3ad42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  454.518281][T11394] RAX: ffffffffffffffda RBX: 00007fac3a015fa0 RCX: 00007fac39d9cdd9
[  454.518296][T11394] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  454.518308][T11394] RBP: 00007fac3ad42090 R08: 0000000000000000 R09: 0000000000000000
[  454.518321][T11394] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001
[  454.518334][T11394] R13: 00007fac3a016038 R14: 00007fac3a015fa0 R15: 00007fff0d51a628
[  454.518362][T11394]  </TASK>
[  455.499293][T11413] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  456.979498][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'.
[  460.167897][T11466] block2mtd: illegal erase size
[  464.226278][T11502] netlink: 'syz.1.1222': attribute type 23 has an invalid length.
[  464.318910][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'.
[  464.678022][T11504] veth1_macvtap: entered allmulticast mode
[  466.016061][T11526] random: crng reseeded on system resumption
[  469.065490][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'.
[  472.869954][T11602] block2mtd: illegal erase size
[  473.183768][T11587] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  473.216823][T11587] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  473.255497][T11587] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  473.296746][T11587] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  474.661142][   T29] audit: type=1800 audit(4294967416.460:11): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1244" name="members" dev="configfs" ino=37819 res=0 errno=0
[  474.770214][T11593] kexec: Could not allocate control_code_buffer
[  475.098557][ T6104] Bluetooth: hci0: command 0x0c1a tx timeout
[  475.258763][ T6104] Bluetooth: hci2: command 0x0c1a tx timeout
[  475.265103][ T6100] Bluetooth: hci1: command 0x0c1a tx timeout
[  475.338514][ T6104] Bluetooth: hci3: command 0x0c1a tx timeout
[  475.482686][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'.
[  475.542278][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'.
[  476.097192][T11627] udc dummy_udc.0: soft-connect without a gadget driver
[  476.250638][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'.
[  478.124409][T11658] FAULT_INJECTION: forcing a failure.
[  478.124409][T11658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.205095][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.3.1256 Not tainted syzkaller #0 PREEMPT(full) 
[  478.205125][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  478.205138][T11658] Call Trace:
[  478.205145][T11658]  <TASK>
[  478.205153][T11658]  dump_stack_lvl+0x100/0x190
[  478.205182][T11658]  should_fail_ex.cold+0x5/0xa
[  478.205216][T11658]  _copy_to_user+0x32/0xd0
[  478.205254][T11658]  simple_read_from_buffer+0xcb/0x170
[  478.205281][T11658]  proc_fail_nth_read+0x1af/0x230
[  478.205317][T11658]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  478.205354][T11658]  ? rw_verify_area+0xce/0x6d0
[  478.205374][T11658]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  478.205416][T11658]  vfs_read+0x1e4/0xb30
[  478.205443][T11658]  ? __pfx_vfs_read+0x10/0x10
[  478.205467][T11658]  ? __fget_files+0x215/0x3d0
[  478.205498][T11658]  ? __fget_files+0x21f/0x3d0
[  478.205530][T11658]  ksys_read+0x12a/0x250
[  478.205554][T11658]  ? __pfx_ksys_read+0x10/0x10
[  478.205580][T11658]  ? rcu_is_watching+0x12/0xc0
[  478.205610][T11658]  do_syscall_64+0x10b/0xf80
[  478.205637][T11658]  ? clear_bhb_loop+0x40/0x90
[  478.205664][T11658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.205687][T11658] RIP: 0033:0x7ff72df5d60e
[  478.205704][T11658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  478.205726][T11658] RSP: 002b:00007ff72eedefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  478.205746][T11658] RAX: ffffffffffffffda RBX: 00007ff72eedf6c0 RCX: 00007ff72df5d60e
[  478.205760][T11658] RDX: 000000000000000f RSI: 00007ff72eedf0a0 RDI: 0000000000000006
[  478.205773][T11658] RBP: 00007ff72eedf090 R08: 0000000000000000 R09: 0000000000000000
[  478.205786][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.205799][T11658] R13: 00007ff72e216038 R14: 00007ff72e215fa0 R15: 00007fffa8056338
[  478.205826][T11658]  </TASK>
[  479.272995][T11673] FAULT_INJECTION: forcing a failure.
[  479.272995][T11673] name failslab, interval 1, probability 0, space 0, times 0
[  479.328624][T11673] CPU: 0 UID: 0 PID: 11673 Comm: syz.3.1261 Not tainted syzkaller #0 PREEMPT(full) 
[  479.328656][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  479.328670][T11673] Call Trace:
[  479.328678][T11673]  <TASK>
[  479.328687][T11673]  dump_stack_lvl+0x100/0x190
[  479.328719][T11673]  should_fail_ex.cold+0x5/0xa
[  479.328753][T11673]  should_failslab+0xc2/0x120
[  479.328781][T11673]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  479.328820][T11673]  ? ext4_alloc_io_end_vec+0x2b/0x1c0
[  479.328859][T11673]  ext4_alloc_io_end_vec+0x2b/0x1c0
[  479.328895][T11673]  ext4_do_writepages+0x1765/0x3f20
[  479.328919][T11673]  ? do_raw_spin_lock+0x128/0x260
[  479.328950][T11673]  ? find_held_lock+0x2b/0x80
[  479.328989][T11673]  ? hrtimer_start_range_ns+0x860/0x1a50
[  479.329024][T11673]  ? __pfx_ext4_do_writepages+0x10/0x10
[  479.329064][T11673]  ? ext4_writepages+0x347/0x790
[  479.329087][T11673]  ext4_writepages+0x347/0x790
[  479.329113][T11673]  ? __pfx_ext4_writepages+0x10/0x10
[  479.329147][T11673]  ? do_writepages+0x4b5/0x600
[  479.329177][T11673]  ? do_writepages+0x4b5/0x600
[  479.329208][T11673]  ? __pfx_ext4_writepages+0x10/0x10
[  479.329235][T11673]  do_writepages+0x278/0x600
[  479.329277][T11673]  ? __pfx_do_writepages+0x10/0x10
[  479.329306][T11673]  ? do_raw_spin_unlock+0x145/0x1e0
[  479.329335][T11673]  ? _raw_spin_unlock+0x28/0x50
[  479.329364][T11673]  filemap_writeback+0x22d/0x2e0
[  479.329397][T11673]  ? __pfx_filemap_writeback+0x10/0x10
[  479.329460][T11673]  ? mt_find+0x45e/0x8e0
[  479.329493][T11673]  ? __pfx_mt_find+0x10/0x10
[  479.329528][T11673]  file_write_and_wait_range+0xcd/0x140
[  479.329567][T11673]  ext4_sync_file+0x358/0xb90
[  479.329622][T11673]  ? __pfx_ext4_sync_file+0x10/0x10
[  479.329659][T11673]  ? __up_read+0x230/0x6e0
[  479.329685][T11673]  ? __pfx___up_read+0x10/0x10
[  479.329709][T11673]  ? __do_sys_msync+0x39b/0x590
[  479.329748][T11673]  ? __pfx_ext4_sync_file+0x10/0x10
[  479.329784][T11673]  vfs_fsync_range+0x9b/0x190
[  479.329818][T11673]  __do_sys_msync+0x3ca/0x590
[  479.329862][T11673]  do_syscall_64+0x10b/0xf80
[  479.329889][T11673]  ? clear_bhb_loop+0x40/0x90
[  479.329918][T11673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.329941][T11673] RIP: 0033:0x7ff72df9cdd9
[  479.329960][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.329982][T11673] RSP: 002b:00007ff72eedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a
[  479.330004][T11673] RAX: ffffffffffffffda RBX: 00007ff72e215fa0 RCX: 00007ff72df9cdd9
[  479.330020][T11673] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000
[  479.330034][T11673] RBP: 00007ff72e032d69 R08: 0000000000000000 R09: 0000000000000000
[  479.330049][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.330063][T11673] R13: 00007ff72e216038 R14: 00007ff72e215fa0 R15: 00007fffa8056338
[  479.330092][T11673]  </TASK>
[  480.864547][T11692] netlink: 'syz.3.1263': attribute type 1 has an invalid length.
[  481.931220][T11702] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  483.669053][ T6100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  483.676113][ T6100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  483.678705][ T6100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  483.683411][ T6100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  483.683999][ T6100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  483.762663][T11725] FAULT_INJECTION: forcing a failure.
[  483.762663][T11725] name failslab, interval 1, probability 0, space 0, times 0
[  483.762711][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.0.1271 Not tainted syzkaller #0 PREEMPT(full) 
[  483.762739][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.762753][T11725] Call Trace:
[  483.762760][T11725]  <TASK>
[  483.762769][T11725]  dump_stack_lvl+0x100/0x190
[  483.762799][T11725]  should_fail_ex.cold+0x5/0xa
[  483.762835][T11725]  should_failslab+0xc2/0x120
[  483.762863][T11725]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  483.762889][T11725]  ? uinput_dev_setup+0x1d1/0x2f0
[  483.762916][T11725]  ? uinput_dev_setup+0x1bd/0x2f0
[  483.762943][T11725]  ? rcu_is_watching+0x12/0xc0
[  483.762976][T11725]  kstrndup+0x64/0x120
[  483.763002][T11725]  uinput_dev_setup+0x1d1/0x2f0
[  483.763030][T11725]  ? dev_set_name+0xc7/0x100
[  483.763064][T11725]  ? __pfx_uinput_dev_setup+0x10/0x10
[  483.763090][T11725]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  483.763134][T11725]  ? input_allocate_device+0x271/0x350
[  483.763178][T11725]  uinput_ioctl_handler.isra.0+0xf21/0x1d20
[  483.763217][T11725]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  483.763241][T11725]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  483.763279][T11725]  ? find_held_lock+0x2b/0x80
[  483.763310][T11725]  ? __fget_files+0x215/0x3d0
[  483.763350][T11725]  ? __pfx_uinput_ioctl+0x10/0x10
[  483.763380][T11725]  __x64_sys_ioctl+0x18e/0x210
[  483.763405][T11725]  do_syscall_64+0x10b/0xf80
[  483.763434][T11725]  ? clear_bhb_loop+0x40/0x90
[  483.763463][T11725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.763488][T11725] RIP: 0033:0x7f2e82f9cdd9
[  483.763507][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.763530][T11725] RSP: 002b:00007f2e83e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.763552][T11725] RAX: ffffffffffffffda RBX: 00007f2e83216090 RCX: 00007f2e82f9cdd9
[  483.763568][T11725] RDX: 00002000000000c0 RSI: 00000000405c5503 RDI: 0000000000000002
[  483.763583][T11725] RBP: 00007f2e83032d69 R08: 0000000000000000 R09: 0000000000000000
[  483.763597][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.763610][T11725] R13: 00007f2e83216128 R14: 00007f2e83216090 R15: 00007fff9c3c92e8
[  483.763640][T11725]  </TASK>
[  485.819095][ T6104] Bluetooth: hci4: command tx timeout
[  487.110391][T11724] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.162849][T11724] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.202328][T11724] bridge_slave_0: entered allmulticast mode
[  487.237613][T11760] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1274'.
[  487.254250][T11724] bridge_slave_0: entered promiscuous mode
[  487.291473][T11760] mac80211_hwsim hwsim4 ›: renamed from wlan0 (while UP)
[  487.348761][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'.
[  487.434087][T11724] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.465971][T11724] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.506214][T11724] bridge_slave_1: entered allmulticast mode
[  487.542477][T11724] bridge_slave_1: entered promiscuous mode
[  487.854279][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.898839][ T6104] Bluetooth: hci4: command tx timeout
[  487.986180][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.439347][T11724] team0: Port device team_slave_0 added
[  488.499549][T11724] team0: Port device team_slave_1 added
[  488.860576][T11724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.908295][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.139384][T11724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.219770][T11724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.265870][T11724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.358039][T11797] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  489.432444][T11724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.703917][T11724] hsr_slave_0: entered promiscuous mode
[  489.742223][T11724] hsr_slave_1: entered promiscuous mode
[  489.782007][T11724] debugfs: 'hsr0' already exists in 'hsr'
[  489.812218][T11724] Cannot create hsr debugfs directory
[  489.978398][ T6104] Bluetooth: hci4: command tx timeout
[  490.942048][T11809] netlink: 'syz.0.1286': attribute type 2 has an invalid length.
[  491.008609][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'.
[  491.043725][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'.
[  491.955046][T11724] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  492.038798][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  492.058723][ T6104] Bluetooth: hci4: command tx timeout
[  492.159264][T11724] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  492.169604][T11836] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  492.222042][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  492.385795][T11724] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  492.427008][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  492.652624][T11724] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  492.684606][T11724] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  493.223382][T11724] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.252998][T11847] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  493.384674][T11724] 8021q: adding VLAN 0 to HW filter on device team0
[  493.456682][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.463907][ T7158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.555818][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.563176][ T7158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.881689][T11859] Invalid ELF header magic: != ELF
[  495.553215][T11828] kexec: Could not allocate control_code_buffer
[  496.483950][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.797468][T11899] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1301'.
[  498.177515][T11724] veth0_vlan: entered promiscuous mode
[  498.275801][T11724] veth1_vlan: entered promiscuous mode
[  498.527559][T11724] veth0_macvtap: entered promiscuous mode
[  498.587134][T11724] veth1_macvtap: entered promiscuous mode
[  498.741887][T11724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.827641][T11724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.934948][ T7158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.010130][ T7158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.073733][ T7158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.124570][ T7158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.555372][T11913] can: request_module (can-proto-0) failed.
[  499.881347][ T9274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.433070][ T9274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.527304][ T6105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.565244][ T6105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.766473][ T9274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.816759][T11935] FAULT_INJECTION: forcing a failure.
[  500.816759][T11935] name failslab, interval 1, probability 0, space 0, times 0
[  500.875384][T11935] CPU: 0 UID: 0 PID: 11935 Comm: syz.0.1310 Not tainted syzkaller #0 PREEMPT(full) 
[  500.875415][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  500.875429][T11935] Call Trace:
[  500.875436][T11935]  <TASK>
[  500.875445][T11935]  dump_stack_lvl+0x100/0x190
[  500.875479][T11935]  should_fail_ex.cold+0x5/0xa
[  500.875509][T11935]  should_failslab+0xc2/0x120
[  500.875536][T11935]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  500.875573][T11935]  ? vm_area_alloc+0x1f/0x160
[  500.875624][T11935]  vm_area_alloc+0x1f/0x160
[  500.875656][T11935]  __mmap_region+0x104d/0x2da0
[  500.875696][T11935]  ? __pfx___mmap_region+0x10/0x10
[  500.875752][T11935]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[  500.875794][T11935]  ? find_held_lock+0x2b/0x80
[  500.875823][T11935]  ? ima_match_policy+0x8c4/0x2350
[  500.875845][T11935]  ? ima_match_policy+0x8c4/0x2350
[  500.875894][T11935]  ? process_measurement+0x4c8/0x2350
[  500.875972][T11935]  mmap_region+0x527/0x620
[  500.875995][T11935]  ? __pfx_mmap_region+0x10/0x10
[  500.876018][T11935]  ? cap_mmap_addr+0x4b/0x120
[  500.876050][T11935]  ? bpf_lsm_mmap_addr+0x9/0x30
[  500.876070][T11935]  ? security_mmap_addr+0x71/0x1e0
[  500.876095][T11935]  ? __get_unmapped_area+0x255/0x3e0
[  500.876126][T11935]  do_mmap+0xc63/0x12f0
[  500.876157][T11935]  ? __pfx_do_mmap+0x10/0x10
[  500.876184][T11935]  ? __pfx_down_write_killable+0x10/0x10
[  500.876221][T11935]  vm_mmap_pgoff+0x29e/0x470
[  500.876254][T11935]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  500.876280][T11935]  ? __fget_files+0x215/0x3d0
[  500.876310][T11935]  ? __fget_files+0x21f/0x3d0
[  500.876340][T11935]  ksys_mmap_pgoff+0x3cb/0x610
[  500.876367][T11935]  ? __x64_sys_futex+0x358/0x4d0
[  500.876392][T11935]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  500.876418][T11935]  ? xfd_validate_state+0x129/0x190
[  500.876441][T11935]  ? ksys_write+0x1ac/0x250
[  500.876470][T11935]  __x64_sys_mmap+0x125/0x190
[  500.876497][T11935]  do_syscall_64+0x10b/0xf80
[  500.876523][T11935]  ? clear_bhb_loop+0x40/0x90
[  500.876570][T11935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.876594][T11935] RIP: 0033:0x7f2e82f9cdd9
[  500.876613][T11935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.876636][T11935] RSP: 002b:00007f2e83e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  500.876658][T11935] RAX: ffffffffffffffda RBX: 00007f2e83216180 RCX: 00007f2e82f9cdd9
[  500.876674][T11935] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000
[  500.876688][T11935] RBP: 00007f2e83032d69 R08: 00000000000000dd R09: 0000000000000000
[  500.876701][T11935] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  500.876715][T11935] R13: 00007f2e83216218 R14: 00007f2e83216180 R15: 00007fff9c3c92e8
[  500.876748][T11935]  </TASK>
[  501.427249][ T9274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.447233][ T6132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.487005][ T6132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.743063][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  501.752114][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  503.077690][ T9274] geneve1: left allmulticast mode
[  503.106626][ T9274] geneve1: left promiscuous mode
[  503.143403][ T9274] bridge0: port 3(geneve1) entered disabled state
[  503.215290][ T9274] bridge_slave_1: left allmulticast mode
[  503.242180][ T9274] bridge_slave_1: left promiscuous mode
[  503.267808][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.302313][ T9274] bridge_slave_0: left allmulticast mode
[  503.325059][ T9274] bridge_slave_0: left promiscuous mode
[  503.348669][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.905715][ T9274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.940537][ T9274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.963443][ T9274] bond0 (unregistering): Released all slaves
[  504.118847][ T9274] i: left promiscuous mode
[  504.324627][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1
[  504.342825][ T9274] HfR: left promiscuous mode
[  505.167209][T11988] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  505.296121][ T9274] hsr_slave_0: left promiscuous mode
[  505.340662][ T9274] hsr_slave_1: left promiscuous mode
[  505.385867][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.448479][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.491494][ T9274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.523437][ T9274] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.741481][ T9274] veth0_macvtap: left promiscuous mode
[  505.788705][ T9274] veth1_vlan: left promiscuous mode
[  505.826486][ T9274] veth0_vlan: left promiscuous mode
[  506.819745][T11997] kexec: Could not allocate control_code_buffer
[  507.490435][ T9274] team0 (unregistering): Port device team_slave_1 removed
[  507.596347][ T9274] team0 (unregistering): Port device team_slave_0 removed
[  507.716998][T12031] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1323'.
[  508.046170][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2
[  508.639316][T12041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  510.911096][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3
[  511.142911][T12063] random: crng reseeded on system resumption
[  511.296522][T12071] FAULT_INJECTION: forcing a failure.
[  511.296522][T12071] name failslab, interval 1, probability 0, space 0, times 0
[  511.510518][T12071] CPU: 0 UID: 0 PID: 12071 Comm: syz.3.1328 Not tainted syzkaller #0 PREEMPT(full) 
[  511.510551][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  511.510567][T12071] Call Trace:
[  511.510575][T12071]  <TASK>
[  511.510584][T12071]  dump_stack_lvl+0x100/0x190
[  511.510617][T12071]  should_fail_ex.cold+0x5/0xa
[  511.510648][T12071]  should_failslab+0xc2/0x120
[  511.510677][T12071]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  511.510703][T12071]  ? resume_store+0x1b8/0x460
[  511.510737][T12071]  kstrndup+0x64/0x120
[  511.510764][T12071]  resume_store+0x1b8/0x460
[  511.510795][T12071]  ? __pfx_resume_store+0x10/0x10
[  511.510832][T12071]  ? find_held_lock+0x2b/0x80
[  511.510863][T12071]  ? sysfs_file_kobj+0xe4/0x290
[  511.510899][T12071]  ? sysfs_file_kobj+0xe4/0x290
[  511.510945][T12071]  ? __pfx_resume_store+0x10/0x10
[  511.510973][T12071]  kobj_attr_store+0x58/0x80
[  511.511007][T12071]  ? __pfx_kobj_attr_store+0x10/0x10
[  511.511039][T12071]  sysfs_kf_write+0xf2/0x150
[  511.511080][T12071]  kernfs_fop_write_iter+0x3e0/0x5f0
[  511.511113][T12071]  ? __pfx_sysfs_kf_write+0x10/0x10
[  511.511155][T12071]  vfs_write+0x6ac/0x1070
[  511.511188][T12071]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  511.511226][T12071]  ? __pfx_vfs_write+0x10/0x10
[  511.511271][T12071]  ksys_write+0x12a/0x250
[  511.511298][T12071]  ? __pfx_ksys_write+0x10/0x10
[  511.511327][T12071]  ? rcu_is_watching+0x12/0xc0
[  511.511360][T12071]  do_syscall_64+0x10b/0xf80
[  511.511389][T12071]  ? clear_bhb_loop+0x40/0x90
[  511.511419][T12071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.511444][T12071] RIP: 0033:0x7ff72df9cdd9
[  511.511464][T12071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.511487][T12071] RSP: 002b:00007ff72ee7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  511.511510][T12071] RAX: ffffffffffffffda RBX: 00007ff72e216270 RCX: 00007ff72df9cdd9
[  511.511526][T12071] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  511.511540][T12071] RBP: 00007ff72e032d69 R08: 0000000000000000 R09: 0000000000000000
[  511.511555][T12071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.511569][T12071] R13: 00007ff72e216308 R14: 00007ff72e216270 R15: 00007fffa8056338
[  511.511600][T12071]  </TASK>
[  512.820865][T12107] block2mtd: illegal erase size
[  513.642330][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4
[  518.423519][T12194] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1351'.
[  526.483637][T12339] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  528.552478][T12349] FAULT_INJECTION: forcing a failure.
[  528.552478][T12349] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  528.713431][T12349] CPU: 0 UID: 0 PID: 12349 Comm: syz.3.1382 Not tainted syzkaller #0 PREEMPT(full) 
[  528.713462][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  528.713476][T12349] Call Trace:
[  528.713484][T12349]  <TASK>
[  528.713493][T12349]  dump_stack_lvl+0x100/0x190
[  528.713523][T12349]  should_fail_ex.cold+0x5/0xa
[  528.713548][T12349]  ? prepare_alloc_pages+0x16d/0x5f0
[  528.713580][T12349]  should_fail_alloc_page+0xeb/0x140
[  528.713610][T12349]  prepare_alloc_pages+0x1f0/0x5f0
[  528.713648][T12349]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  528.713689][T12349]  ? __pfx_stack_trace_save+0x10/0x10
[  528.713723][T12349]  ? stack_depot_save_flags+0x27/0x9d0
[  528.713755][T12349]  ? kasan_save_stack+0x30/0x50
[  528.713780][T12349]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  528.713818][T12349]  ? look_up_lock_class+0x55/0x120
[  528.713848][T12349]  ? register_lock_class+0x40/0x560
[  528.713877][T12349]  ? __lock_acquire+0x4a5/0x2630
[  528.713903][T12349]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  528.713940][T12349]  ? policy_nodemask+0xed/0x4f0
[  528.713968][T12349]  alloc_pages_mpol+0x1fb/0x540
[  528.713996][T12349]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  528.714023][T12349]  ? __anon_vma_prepare+0x2db/0x5e0
[  528.714057][T12349]  ? __anon_vma_prepare+0x2db/0x5e0
[  528.714095][T12349]  folio_alloc_mpol_noprof+0x36/0x260
[  528.714128][T12349]  vma_alloc_folio_noprof+0xed/0x1d0
[  528.714159][T12349]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  528.714199][T12349]  do_anonymous_page+0xb46/0x2050
[  528.714234][T12349]  ? rcu_read_unlock+0x2d/0xb0
[  528.714276][T12349]  __handle_mm_fault+0x1d2c/0x2a00
[  528.714320][T12349]  ? reacquire_held_locks+0xce/0x1e0
[  528.714343][T12349]  ? __pfx___handle_mm_fault+0x10/0x10
[  528.714382][T12349]  ? lock_vma_under_rcu+0x17c/0x590
[  528.714432][T12349]  handle_mm_fault+0x36d/0xa20
[  528.714472][T12349]  do_user_addr_fault+0x5a3/0x12f0
[  528.714508][T12349]  exc_page_fault+0x6f/0xd0
[  528.714536][T12349]  asm_exc_page_fault+0x26/0x30
[  528.714560][T12349] RIP: 0033:0x7ff72df59f84
[  528.714578][T12349] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c
[  528.714601][T12349] RSP: 002b:00007fffa80562e0 EFLAGS: 00010246
[  528.714620][T12349] RAX: 00007ff72ee3b000 RBX: 00007ff72ee5b6c0 RCX: 00007ff72df9cbd7
[  528.714641][T12349] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ff72ee5b6c0
[  528.714655][T12349] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  528.714669][T12349] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffa8056430
[  528.714684][T12349] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  528.714713][T12349]  </TASK>
[  529.264116][T12349] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  532.646648][T12434] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  533.592074][T12449] openvswitch: netlink: Message has 4 unknown bytes.
[  533.956998][T12457] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.88), cmd(3)
[  534.030676][T12449] : entered promiscuous mode
[  534.684122][T12450] Line length is too long: Should be less than 4094
[  535.294772][T12435] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  535.647463][T12476] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  537.543452][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1406'.
[  540.319817][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'.
[  541.122317][T12558] can0: slcan on pty238.
[  541.272159][T12556] can0 (unregistered): slcan off pty238.
[  541.708561][   T29] audit: type=1800 audit(4294967483.510:12): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1421" name="lu_gp_id" dev="configfs" ino=44173 res=0 errno=0
[  544.500984][T12619] ubi31: attaching mtd0
[  544.600288][T12619] ubi31: scanning is finished
[  544.654285][T12619] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  545.390253][T12619] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  547.275167][T12658] usb usb3: usbfs: process 12658 (syz.0.1437) did not claim interface 0 before use
[  547.626904][T12671] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  547.699609][T12671] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  547.812543][T12671] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  547.894685][T12671] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  547.962889][T12671] page dumped because: unmovable page
[  548.000981][T12671] page_owner info is not present (never set?)
[  548.660271][T12682] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  548.763548][T12682] vhci_hcd vhci_hcd.2: invalid port number 47
[  548.824578][T12682] vhci_hcd vhci_hcd.2: invalid port number 47
[  552.487389][T12759] FAULT_INJECTION: forcing a failure.
[  552.487389][T12759] name failslab, interval 1, probability 0, space 0, times 0
[  552.793257][T12759] CPU: 0 UID: 0 PID: 12759 Comm: syz.3.1457 Not tainted syzkaller #0 PREEMPT(full) 
[  552.793289][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  552.793304][T12759] Call Trace:
[  552.793312][T12759]  <TASK>
[  552.793321][T12759]  dump_stack_lvl+0x100/0x190
[  552.793351][T12759]  should_fail_ex.cold+0x5/0xa
[  552.793383][T12759]  should_failslab+0xc2/0x120
[  552.793411][T12759]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  552.793450][T12759]  ? security_file_alloc+0x34/0x2c0
[  552.793477][T12759]  ? trace_kmem_cache_alloc+0xd5/0x100
[  552.793510][T12759]  security_file_alloc+0x34/0x2c0
[  552.793538][T12759]  init_file+0x95/0x480
[  552.793571][T12759]  alloc_empty_file+0x79/0x1c0
[  552.793607][T12759]  alloc_file_pseudo+0x13a/0x230
[  552.793645][T12759]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  552.793682][T12759]  ? security_inode_init_security_anon+0x7b/0x230
[  552.793741][T12759]  __anon_inode_getfile+0xe8/0x280
[  552.793779][T12759]  ? _copy_to_user+0xaf/0xd0
[  552.793818][T12759]  io_uring_setup.cold+0x1951/0x1c6e
[  552.793861][T12759]  ? __pfx_io_uring_setup+0x10/0x10
[  552.793905][T12759]  ? __pfx_do_futex+0x10/0x10
[  552.793950][T12759]  ? irqentry_exit+0x246/0x790
[  552.793993][T12759]  ? xfd_validate_state+0x129/0x190
[  552.794020][T12759]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  552.794063][T12759]  __x64_sys_io_uring_setup+0xc2/0x170
[  552.794093][T12759]  do_syscall_64+0x10b/0xf80
[  552.794121][T12759]  ? clear_bhb_loop+0x40/0x90
[  552.794150][T12759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.794175][T12759] RIP: 0033:0x7ff72df9cdd9
[  552.794195][T12759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  552.794219][T12759] RSP: 002b:00007ff72eedf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  552.794241][T12759] RAX: ffffffffffffffda RBX: 00007ff72e215fa0 RCX: 00007ff72df9cdd9
[  552.794257][T12759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  552.794271][T12759] RBP: 00007ff72e032d69 R08: 0000000000000000 R09: 0000000000000000
[  552.794286][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  552.794300][T12759] R13: 00007ff72e216038 R14: 00007ff72e215fa0 R15: 00007fffa8056338
[  552.794330][T12759]  </TASK>
[  554.658303][T12773] can: request_module (can-proto-0) failed.
[  560.407060][ T6104] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  560.416816][ T6104] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  560.945527][T12837] Process accounting resumed
[  562.132728][T12859] vivid-008: =================  START STATUS  =================
[  562.176295][T12859] vivid-008: ==================  END STATUS  ==================
[  563.186016][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  563.197867][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  563.997125][   T29] audit: type=1800 audit(4294985849.793:13): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1484" name="discovery_nqn" dev="configfs" ino=45952 res=0 errno=0
[  564.506277][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'.
[  568.250888][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1493'.
[  570.090624][ T6100] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  570.090656][ T6100] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15
[  570.105409][ T6100] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  571.617820][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'.
[  572.947097][T12996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1512'.
[  574.002351][T13012] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  575.872715][T13047] bond0: option mode: unable to set because the bond device is up
[  576.406826][T13064] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  577.307893][T13076] vivid-008: =================  START STATUS  =================
[  577.355862][T13076] vivid-008: ==================  END STATUS  ==================
[  579.082195][T13105] can0: slcan on ptm0.
[  579.272215][T13101] can0 (unregistered): slcan off ptm0.
[  582.523476][T13154] binder: 13122:13154 ioctl 40086602 e20 returned -22
[  590.331206][ T6104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  590.348039][ T6104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  590.360397][ T6104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  590.371541][ T6104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  590.381044][ T6104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  592.460848][ T6104] Bluetooth: hci0: command tx timeout
[  593.750049][T13278] ubi0: attaching mtd0
[  593.926957][T13278] ubi0: scanning is finished
[  593.963588][T13278] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  594.166761][T13269] Process accounting paused
[  594.538355][ T6104] Bluetooth: hci0: command tx timeout
[  594.557292][T13278] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  595.138510][T13241] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.192972][T13241] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.241976][T13241] bridge_slave_0: entered allmulticast mode
[  595.310734][T13241] bridge_slave_0: entered promiscuous mode
[  595.374114][T13241] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.425337][T13241] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.471069][T13241] bridge_slave_1: entered allmulticast mode
[  595.492900][T13300] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  595.510765][T13241] bridge_slave_1: entered promiscuous mode
[  595.609282][ T6104] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  595.624998][ T6100] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  595.632513][ T6100] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  595.747319][T13310] futex_wake_op: syz.4.1570 tries to shift op by -2048; fix this program
[  595.798038][T13305] futex_wake_op: syz.4.1570 tries to shift op by -2048; fix this program
[  596.618221][ T6100] Bluetooth: hci0: command tx timeout
[  597.867918][T13241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.972715][T13241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.291917][T13241] team0: Port device team_slave_0 added
[  598.329452][T13241] team0: Port device team_slave_1 added
[  598.613733][T13241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.642270][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.702453][ T6100] Bluetooth: hci0: command tx timeout
[  598.738492][T13241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.816020][T13241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.843425][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.932649][T13241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  599.372135][T13241] hsr_slave_0: entered promiscuous mode
[  599.402471][T13241] hsr_slave_1: entered promiscuous mode
[  599.435949][T13241] debugfs: 'hsr0' already exists in 'hsr'
[  599.464978][T13241] Cannot create hsr debugfs directory
[  600.960809][T13341] FAULT_INJECTION: forcing a failure.
[  600.960809][T13341] name fail_futex, interval 1, probability 0, space 0, times 0
[  601.027088][T13341] CPU: 0 UID: 0 PID: 13341 Comm: syz.0.1578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.027128][T13341] Tainted: [L]=SOFTLOCKUP
[  601.027137][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  601.027152][T13341] Call Trace:
[  601.027160][T13341]  <TASK>
[  601.027169][T13341]  dump_stack_lvl+0x100/0x190
[  601.027201][T13341]  should_fail_ex.cold+0x5/0xa
[  601.027233][T13341]  get_futex_key+0x1d2/0x1510
[  601.027260][T13341]  ? __pfx_get_futex_key+0x10/0x10
[  601.027294][T13341]  futex_wait_setup+0x83/0x510
[  601.027346][T13341]  __futex_wait+0x19f/0x300
[  601.027381][T13341]  ? __pfx___futex_wait+0x10/0x10
[  601.027412][T13341]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  601.027446][T13341]  ? __pfx_futex_wake_mark+0x10/0x10
[  601.027481][T13341]  ? futex_hash+0x2ad/0x370
[  601.027505][T13341]  ? futex_hash+0x141/0x370
[  601.027531][T13341]  futex_wait+0xe6/0x370
[  601.027563][T13341]  ? __pfx_futex_wait+0x10/0x10
[  601.027601][T13341]  ? ksys_write+0x190/0x250
[  601.027627][T13341]  ? ksys_write+0x190/0x250
[  601.027660][T13341]  do_futex+0x1ef/0x350
[  601.027686][T13341]  ? __pfx_do_futex+0x10/0x10
[  601.027712][T13341]  ? do_set_mempolicy+0x217/0x3d0
[  601.027740][T13341]  ? __pfx_do_set_mempolicy+0x10/0x10
[  601.027771][T13341]  __x64_sys_futex+0x34f/0x4d0
[  601.027801][T13341]  ? __pfx___x64_sys_futex+0x10/0x10
[  601.027829][T13341]  ? __pfx_kernel_set_mempolicy+0x10/0x10
[  601.027860][T13341]  ? rcu_is_watching+0x12/0xc0
[  601.027893][T13341]  do_syscall_64+0x10b/0xf80
[  601.027922][T13341]  ? clear_bhb_loop+0x40/0x90
[  601.027951][T13341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.027976][T13341] RIP: 0033:0x7f2e82f9cdd9
[  601.027996][T13341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.028020][T13341] RSP: 002b:00007f2e83e550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  601.028044][T13341] RAX: ffffffffffffffda RBX: 00007f2e83215fa8 RCX: 00007f2e82f9cdd9
[  601.028059][T13341] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e83215fa8
[  601.028074][T13341] RBP: 00007f2e83215fa0 R08: 0000000000000000 R09: 0000000000000000
[  601.028089][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.028107][T13341] R13: 00007f2e83216038 R14: 00007fff9c3c9200 R15: 00007fff9c3c92e8
[  601.028136][T13341]  </TASK>
[  602.022971][T13344] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  602.767399][T13241] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  602.814317][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  602.875853][T13241] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  602.914870][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.966001][T13241] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  603.006296][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  603.188007][T13241] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  603.234565][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  603.827752][T13241] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.980637][ T6100] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  604.669769][T13241] 8021q: adding VLAN 0 to HW filter on device team0
[  604.947341][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.954631][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.310432][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.319077][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.654802][T13241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  606.224353][ T6100] Bluetooth: hci4: command 0x0406 tx timeout
[  607.255679][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1585'.
[  608.486587][T13405] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  608.665980][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  609.718593][T13429] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  610.303487][T13241] veth0_vlan: entered promiscuous mode
[  610.385778][T13241] veth1_vlan: entered promiscuous mode
[  610.606096][T13241] veth0_macvtap: entered promiscuous mode
[  610.682807][T13241] veth1_macvtap: entered promiscuous mode
[  610.834244][T13241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.920867][T13241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  611.053904][ T6168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.104626][ T6168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.157201][ T6168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.207442][ T6168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.755433][ T6168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.820746][ T6168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.944969][T13459] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input16
[  611.984789][ T6168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.024327][ T6168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.832035][T13478] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  614.326738][T13502] netlink: 'syz.3.1606': attribute type 2 has an invalid length.
[  614.368733][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'.
[  616.174391][T13525] netlink: 'syz.5.1611': attribute type 2 has an invalid length.
[  616.647675][T13534] FAULT_INJECTION: forcing a failure.
[  616.647675][T13534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  616.723134][T13534] CPU: 0 UID: 0 PID: 13534 Comm: syz.5.1615 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.723182][T13534] Tainted: [L]=SOFTLOCKUP
[  616.723190][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  616.723203][T13534] Call Trace:
[  616.723211][T13534]  <TASK>
[  616.723219][T13534]  dump_stack_lvl+0x100/0x190
[  616.723250][T13534]  should_fail_ex.cold+0x5/0xa
[  616.723279][T13534]  _copy_to_user+0x32/0xd0
[  616.723323][T13534]  simple_read_from_buffer+0xcb/0x170
[  616.723352][T13534]  proc_fail_nth_read+0x1af/0x230
[  616.723390][T13534]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  616.723428][T13534]  ? rw_verify_area+0xce/0x6d0
[  616.723450][T13534]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  616.723485][T13534]  vfs_read+0x1e4/0xb30
[  616.723514][T13534]  ? __pfx_vfs_read+0x10/0x10
[  616.723538][T13534]  ? __fget_files+0x215/0x3d0
[  616.723570][T13534]  ? __fget_files+0x21f/0x3d0
[  616.723610][T13534]  ksys_read+0x12a/0x250
[  616.723634][T13534]  ? __pfx_ksys_read+0x10/0x10
[  616.723662][T13534]  ? rcu_is_watching+0x12/0xc0
[  616.723694][T13534]  do_syscall_64+0x10b/0xf80
[  616.723721][T13534]  ? clear_bhb_loop+0x40/0x90
[  616.723750][T13534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.723774][T13534] RIP: 0033:0x7fed0055d60e
[  616.723792][T13534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  616.723814][T13534] RSP: 002b:00007fecfe7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  616.723836][T13534] RAX: ffffffffffffffda RBX: 00007fecfe7f66c0 RCX: 00007fed0055d60e
[  616.723852][T13534] RDX: 000000000000000f RSI: 00007fecfe7f60a0 RDI: 0000000000000003
[  616.723866][T13534] RBP: 00007fecfe7f6090 R08: 0000000000000000 R09: 0000000000000000
[  616.723880][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.723894][T13534] R13: 00007fed00816038 R14: 00007fed00815fa0 R15: 00007fffc6bea198
[  616.723924][T13534]  </TASK>
[  619.128397][T13560] netlink: 'syz.0.1622': attribute type 19 has an invalid length.
[  619.192795][T13560] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1622'.
[  619.405129][T13552] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1620'.
[  619.522715][ T6104] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  624.626603][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  624.637825][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  625.184316][T13599] Process accounting resumed
[  625.392786][T13638] futex_wake_op: syz.0.1640 tries to shift op by -2048; fix this program
[  627.241941][T13661] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  631.643756][T13737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1663'.
[  631.943891][T13737] macvlan0: entered promiscuous mode
[  632.021952][T13737] macvlan0: entered allmulticast mode
[  632.078364][T13737] veth1_vlan: entered allmulticast mode
[  633.423251][T13724] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  634.039671][T13763] zswap: compressor  not available
[  637.325411][T13807] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  637.454337][T13807] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  637.482224][T13807] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  637.515668][T13807] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  637.557362][T13807] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  637.610040][T13807] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  637.661120][T13807] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  637.706441][T13807] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  637.772461][T13807] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  638.618226][ T6104] Bluetooth: hci1: command 0x0c1a tx timeout
[  638.922013][T13831] kexec: Could not allocate control_code_buffer
[  639.499252][ T6100] Bluetooth: hci2: command 0x0c1a tx timeout
[  639.505451][ T6104] Bluetooth: hci3: command 0x0c1a tx timeout
[  639.579260][ T6104] Bluetooth: hci4: command 0x0406 tx timeout
[  639.658438][ T6104] Bluetooth: hci0: command 0x0c1a tx timeout
[  640.133231][T13860] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  640.477570][T13870] block2mtd: illegal erase size
[  641.658390][ T6104] Bluetooth: hci4: command 0x0406 tx timeout
[  641.738399][ T6104] Bluetooth: hci0: command 0x0c1a tx timeout
[  641.892428][T13892] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  642.910045][ T6104] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5
[  643.507195][ T6104] Bluetooth: hci0: Malformed Event: 0x02
[  643.738544][ T6104] Bluetooth: hci4: command 0x0406 tx timeout
[  643.819548][ T6104] Bluetooth: hci0: command 0x0c1a tx timeout
[  643.904366][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1706'.
[  644.133214][T13917] geneve0: entered promiscuous mode
[  644.183065][T13917] geneve0: entered allmulticast mode
[  644.271709][T13928] FAULT_INJECTION: forcing a failure.
[  644.271709][T13928] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  644.374599][T13928] CPU: 0 UID: 0 PID: 13928 Comm: syz.0.1708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.374638][T13928] Tainted: [L]=SOFTLOCKUP
[  644.374647][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  644.374661][T13928] Call Trace:
[  644.374670][T13928]  <TASK>
[  644.374678][T13928]  dump_stack_lvl+0x100/0x190
[  644.374710][T13928]  should_fail_ex.cold+0x5/0xa
[  644.374737][T13928]  ? prepare_alloc_pages+0x16d/0x5f0
[  644.374771][T13928]  should_fail_alloc_page+0xeb/0x140
[  644.374804][T13928]  prepare_alloc_pages+0x1f0/0x5f0
[  644.374840][T13928]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  644.374883][T13928]  ? __pfx_stack_trace_save+0x10/0x10
[  644.374918][T13928]  ? stack_depot_save_flags+0x27/0x9d0
[  644.374945][T13928]  ? kasan_save_stack+0x3f/0x50
[  644.374966][T13928]  ? kasan_save_stack+0x30/0x50
[  644.374988][T13928]  ? kasan_save_track+0x14/0x30
[  644.375013][T13928]  ? kasan_save_stack+0x3f/0x50
[  644.375039][T13928]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  644.375085][T13928]  ? __lock_acquire+0x4a5/0x2630
[  644.375108][T13928]  ? css_rstat_updated+0x1ce/0x5a0
[  644.375162][T13928]  ? lock_acquire+0x1b1/0x370
[  644.375184][T13928]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  644.375221][T13928]  ? policy_nodemask+0xed/0x4f0
[  644.375251][T13928]  alloc_pages_mpol+0x1fb/0x540
[  644.375281][T13928]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  644.375311][T13928]  ? __lock_acquire+0x4a5/0x2630
[  644.375337][T13928]  folio_alloc_mpol_noprof+0x36/0x260
[  644.375371][T13928]  vma_alloc_folio_noprof+0xed/0x1d0
[  644.375404][T13928]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  644.375445][T13928]  do_anonymous_page+0xb46/0x2050
[  644.375483][T13928]  ? rcu_read_unlock+0x2d/0xb0
[  644.375526][T13928]  __handle_mm_fault+0x1d2c/0x2a00
[  644.375566][T13928]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  644.375598][T13928]  ? __pfx___handle_mm_fault+0x10/0x10
[  644.375637][T13928]  ? pte_offset_map_lock+0x174/0x320
[  644.375664][T13928]  ? find_held_lock+0x2b/0x80
[  644.375712][T13928]  ? follow_page_pte+0x4d0/0x13f0
[  644.375747][T13928]  handle_mm_fault+0x36d/0xa20
[  644.375789][T13928]  __get_user_pages+0x1178/0x32a0
[  644.375830][T13928]  ? __pfx___get_user_pages+0x10/0x10
[  644.375868][T13928]  populate_vma_page_range+0x267/0x3f0
[  644.375903][T13928]  ? __pfx_populate_vma_page_range+0x10/0x10
[  644.375935][T13928]  ? __pfx_find_vma_intersection+0x10/0x10
[  644.375965][T13928]  ? do_mmap+0x93f/0x12f0
[  644.375997][T13928]  __mm_populate+0x107/0x3a0
[  644.376030][T13928]  ? __pfx___mm_populate+0x10/0x10
[  644.376064][T13928]  ? up_write+0x28c/0x4f0
[  644.376094][T13928]  vm_mmap_pgoff+0x37f/0x470
[  644.376128][T13928]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  644.376166][T13928]  ? do_futex+0x192/0x350
[  644.376193][T13928]  ? __pfx_do_futex+0x10/0x10
[  644.376225][T13928]  ksys_mmap_pgoff+0xe4/0x610
[  644.376254][T13928]  ? __x64_sys_futex+0x358/0x4d0
[  644.376282][T13928]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  644.376311][T13928]  ? xfd_validate_state+0x129/0x190
[  644.376342][T13928]  __x64_sys_mmap+0x125/0x190
[  644.376371][T13928]  do_syscall_64+0x10b/0xf80
[  644.376400][T13928]  ? clear_bhb_loop+0x40/0x90
[  644.376430][T13928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.376456][T13928] RIP: 0033:0x7f2e82f9cdd9
[  644.376475][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.376499][T13928] RSP: 002b:00007f2e83e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  644.376523][T13928] RAX: ffffffffffffffda RBX: 00007f2e83215fa0 RCX: 00007f2e82f9cdd9
[  644.376539][T13928] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  644.376553][T13928] RBP: 00007f2e83032d69 R08: 0000000000000007 R09: 0000000000028000
[  644.376568][T13928] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  644.376583][T13928] R13: 00007f2e83216038 R14: 00007f2e83215fa0 R15: 00007fff9c3c92e8
[  644.376614][T13928]  </TASK>
[  647.289191][T13954] FAULT_INJECTION: forcing a failure.
[  647.289191][T13954] name failslab, interval 1, probability 0, space 0, times 0
[  647.571191][T13954] CPU: 0 UID: 0 PID: 13954 Comm: syz.4.1714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.571235][T13954] Tainted: [L]=SOFTLOCKUP
[  647.571244][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  647.571259][T13954] Call Trace:
[  647.571267][T13954]  <TASK>
[  647.571277][T13954]  dump_stack_lvl+0x100/0x190
[  647.571309][T13954]  should_fail_ex.cold+0x5/0xa
[  647.571340][T13954]  should_failslab+0xc2/0x120
[  647.571369][T13954]  __kmalloc_cache_noprof+0x7a/0x6f0
[  647.571405][T13954]  ? kernfs_fop_open+0x9fa/0xd50
[  647.571446][T13954]  kernfs_fop_open+0x9fa/0xd50
[  647.571488][T13954]  do_dentry_open+0x6d8/0x1660
[  647.571517][T13954]  ? __pfx_kernfs_fop_open+0x10/0x10
[  647.571560][T13954]  vfs_open+0x82/0x3f0
[  647.571599][T13954]  path_openat+0x208c/0x31a0
[  647.571639][T13954]  ? __pfx_path_openat+0x10/0x10
[  647.571680][T13954]  do_file_open+0x20e/0x430
[  647.571712][T13954]  ? __pfx_do_file_open+0x10/0x10
[  647.571763][T13954]  ? alloc_fd+0x476/0x790
[  647.571794][T13954]  ? do_getname+0x191/0x390
[  647.571833][T13954]  do_sys_openat2+0x10d/0x1e0
[  647.571869][T13954]  ? __pfx_do_sys_openat2+0x10/0x10
[  647.571917][T13954]  __x64_sys_openat+0x12d/0x210
[  647.571971][T13954]  ? __pfx___x64_sys_openat+0x10/0x10
[  647.572014][T13954]  ? rcu_is_watching+0x12/0xc0
[  647.572048][T13954]  do_syscall_64+0x10b/0xf80
[  647.572077][T13954]  ? clear_bhb_loop+0x40/0x90
[  647.572106][T13954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.572131][T13954] RIP: 0033:0x7f848999cdd9
[  647.572152][T13954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.572177][T13954] RSP: 002b:00007f848a7e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  647.572200][T13954] RAX: ffffffffffffffda RBX: 00007f8489c16270 RCX: 00007f848999cdd9
[  647.572216][T13954] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  647.572231][T13954] RBP: 00007f8489a32d69 R08: 0000000000000000 R09: 0000000000000000
[  647.572245][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  647.572260][T13954] R13: 00007f8489c16308 R14: 00007f8489c16270 R15: 00007fff196e2598
[  647.572291][T13954]  </TASK>
[  650.755813][T14006] netlink: 'syz.5.1724': attribute type 1 has an invalid length.
[  653.185927][T14045] bond0: option packets_per_slave: invalid value (Xµn‘pæ)
[  653.253951][T14049] syz.4.1734 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  653.324092][T14045] bond0: option packets_per_slave: allowed values 0 - 65535
[  654.396107][T14074] futex_wake_op: syz.5.1741 tries to shift op by -2048; fix this program
[  654.451058][T14074] futex_wake_op: syz.5.1741 tries to shift op by -2048; fix this program
[  654.511085][T14079] 0x000000000001-0x000000020000 : ""
[  654.725700][T14079] ftl_cs: FTL header corrupt!
[  656.121478][T14069] Process accounting paused
[  656.427142][T14093] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1744'.
[  657.916243][T14109] bond0: no command found in slaves file - use +ifname or -ifname
[  661.701015][T14153] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  662.029159][T14155] ima: policy update failed
[  662.211191][   T29] audit: type=1802 audit(4294985948.003:14): pid=14155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1759" res=0 errno=0
[  665.088612][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'.
[  667.825491][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1780'.
[  669.031773][T14259] random: crng reseeded on system resumption
[  670.607701][T14290] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  671.782850][T14300] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  671.917045][T14300] pci 0000:00:01.3: PCI INT A: no GSI
[  674.584271][T14349] netlink: Setting conntrack mark requires 'commit' flag.
[  674.736678][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'.
[  674.899466][T14360] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:686f:6e65:7400:0, load rds_tcp or rds_rdma?
[  674.997944][T14362] random: crng reseeded on system resumption
[  686.061307][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  686.074575][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  686.519003][T14467] Process accounting resumed
[  690.093505][T14518] FAULT_INJECTION: forcing a failure.
[  690.093505][T14518] name failslab, interval 1, probability 0, space 0, times 0
[  690.218889][T14518] CPU: 0 UID: 0 PID: 14518 Comm: syz.5.1839 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  690.218927][T14518] Tainted: [L]=SOFTLOCKUP
[  690.218936][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  690.218950][T14518] Call Trace:
[  690.218958][T14518]  <TASK>
[  690.218967][T14518]  dump_stack_lvl+0x100/0x190
[  690.219000][T14518]  should_fail_ex.cold+0x5/0xa
[  690.219030][T14518]  should_failslab+0xc2/0x120
[  690.219059][T14518]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  690.219102][T14518]  ? ptlock_alloc+0x1f/0x70
[  690.219143][T14518]  ptlock_alloc+0x1f/0x70
[  690.219178][T14518]  pte_alloc_one+0x82/0x3d0
[  690.219213][T14518]  __pte_alloc+0x6d/0x3e0
[  690.219239][T14518]  ? __pfx___pte_alloc+0x10/0x10
[  690.219278][T14518]  ? walk_pgd_range+0x1391/0x1dd0
[  690.219300][T14518]  ? walk_pgd_range+0x1391/0x1dd0
[  690.219326][T14518]  walk_pgd_range+0xb99/0x1dd0
[  690.219353][T14518]  ? __pfx_guard_install_set_pte+0x10/0x10
[  690.219381][T14518]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  690.219414][T14518]  ? __pfx_guard_install_set_pte+0x10/0x10
[  690.219445][T14518]  ? __pfx_guard_install_set_pte+0x10/0x10
[  690.219475][T14518]  ? __pfx_guard_install_set_pte+0x10/0x10
[  690.219504][T14518]  ? __pfx_walk_pgd_range+0x10/0x10
[  690.219534][T14518]  __walk_page_range+0x163/0x820
[  690.219560][T14518]  ? find_vma+0xbf/0x140
[  690.219584][T14518]  ? __pfx_find_vma+0x10/0x10
[  690.219611][T14518]  ? walk_page_test+0x78/0x180
[  690.219635][T14518]  walk_page_range_mm_unsafe+0x563/0xa10
[  690.219663][T14518]  ? __pfx_walk_page_range_mm_unsafe+0x10/0x10
[  690.219701][T14518]  madvise_guard_install+0x2dd/0x790
[  690.219738][T14518]  ? __pfx_madvise_guard_install+0x10/0x10
[  690.219768][T14518]  ? find_held_lock+0x2b/0x80
[  690.219806][T14518]  ? __pfx_guard_install_pud_entry+0x10/0x10
[  690.219834][T14518]  ? __pfx_guard_install_pmd_entry+0x10/0x10
[  690.219863][T14518]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  690.219897][T14518]  ? __pfx_guard_install_set_pte+0x10/0x10
[  690.219927][T14518]  ? mtree_range_walk+0x72b/0xb70
[  690.219956][T14518]  madvise_vma_behavior+0xc40/0x2200
[  690.219992][T14518]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  690.220031][T14518]  ? find_vma_prev+0xd8/0x150
[  690.220058][T14518]  ? lock_vma_under_rcu+0x1f9/0x590
[  690.220110][T14518]  ? __pfx_find_vma_prev+0x10/0x10
[  690.220146][T14518]  ? find_held_lock+0x2b/0x80
[  690.220176][T14518]  ? madvise_do_behavior+0x1ea/0x510
[  690.220207][T14518]  ? madvise_do_behavior+0x1ea/0x510
[  690.220245][T14518]  madvise_walk_vmas+0x2fe/0xa90
[  690.220281][T14518]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  690.220316][T14518]  ? find_held_lock+0x2b/0x80
[  690.220351][T14518]  madvise_do_behavior+0x1ea/0x510
[  690.220382][T14518]  ? futex_private_hash_put+0x107/0x1c0
[  690.220425][T14518]  ? __pfx_madvise_do_behavior+0x10/0x10
[  690.220456][T14518]  ? futex_wake+0x1ad/0x530
[  690.220494][T14518]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  690.220534][T14518]  do_madvise+0x195/0x240
[  690.220566][T14518]  ? __pfx_do_madvise+0x10/0x10
[  690.220597][T14518]  ? do_futex+0x192/0x350
[  690.220628][T14518]  ? blkcg_maybe_throttle_current+0x5e7/0xeb0
[  690.220675][T14518]  __x64_sys_madvise+0xa9/0x110
[  690.220707][T14518]  ? lockdep_hardirqs_on+0x78/0x100
[  690.220737][T14518]  do_syscall_64+0x10b/0xf80
[  690.220765][T14518]  ? clear_bhb_loop+0x40/0x90
[  690.220800][T14518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.220825][T14518] RIP: 0033:0x7fed0059cdd9
[  690.220845][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.220869][T14518] RSP: 002b:00007fecfe7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  690.220892][T14518] RAX: ffffffffffffffda RBX: 00007fed00815fa0 RCX: 00007fed0059cdd9
[  690.220908][T14518] RDX: 0000000000000066 RSI: 0000000100010000 RDI: 0000000000000000
[  690.220923][T14518] RBP: 00007fed00632d69 R08: 0000000000000000 R09: 0000000000000000
[  690.220938][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.220952][T14518] R13: 00007fed00816038 R14: 00007fed00815fa0 R15: 00007fffc6bea198
[  690.220983][T14518]  </TASK>
[  691.159087][T14523] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1840'.
[  691.194187][T14522] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1840'.
[  693.237917][T14545] FAULT_INJECTION: forcing a failure.
[  693.237917][T14545] name failslab, interval 1, probability 0, space 0, times 0
[  693.314540][T14545] CPU: 0 UID: 0 PID: 14545 Comm: syz.4.1844 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.314590][T14545] Tainted: [L]=SOFTLOCKUP
[  693.314599][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  693.314614][T14545] Call Trace:
[  693.314621][T14545]  <TASK>
[  693.314631][T14545]  dump_stack_lvl+0x100/0x190
[  693.314662][T14545]  should_fail_ex.cold+0x5/0xa
[  693.314694][T14545]  should_failslab+0xc2/0x120
[  693.314722][T14545]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  693.314762][T14545]  ? alloc_inode+0x68/0x250
[  693.314801][T14545]  ? simple_start_creating+0xb0/0x110
[  693.314830][T14545]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  693.314866][T14545]  alloc_inode+0x68/0x250
[  693.314904][T14545]  new_inode+0x22/0x1c0
[  693.314943][T14545]  __debugfs_create_file+0x105/0x4f0
[  693.314984][T14545]  debugfs_create_file_full+0x41/0x60
[  693.315024][T14545]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  693.315053][T14545]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  693.315107][T14545]  ? lockdep_init_map_type+0x5c/0x250
[  693.315137][T14545]  preinit_net.part.0+0x43b/0x920
[  693.315166][T14545]  copy_net_ns+0x339/0x7c0
[  693.315197][T14545]  create_new_namespaces+0x3ea/0xac0
[  693.315236][T14545]  unshare_nsproxy_namespaces+0xf2/0x220
[  693.315271][T14545]  ksys_unshare+0x438/0xab0
[  693.315310][T14545]  ? __pfx_ksys_unshare+0x10/0x10
[  693.315345][T14545]  ? xfd_validate_state+0x129/0x190
[  693.315379][T14545]  __x64_sys_unshare+0x31/0x40
[  693.315415][T14545]  do_syscall_64+0x10b/0xf80
[  693.315445][T14545]  ? clear_bhb_loop+0x40/0x90
[  693.315474][T14545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.315499][T14545] RIP: 0033:0x7f848999cdd9
[  693.315520][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.315543][T14545] RSP: 002b:00007f848a84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  693.315566][T14545] RAX: ffffffffffffffda RBX: 00007f8489c15fa0 RCX: 00007f848999cdd9
[  693.315589][T14545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  693.315604][T14545] RBP: 00007f8489a32d69 R08: 0000000000000000 R09: 0000000000000000
[  693.315618][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.315633][T14545] R13: 00007f8489c16038 R14: 00007f8489c15fa0 R15: 00007fff196e2598
[  693.315663][T14545]  </TASK>
[  693.317534][T14545] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807a63a9b8'
[  693.809980][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'.
[  693.987360][T14540] openvswitch: netlink: Multiple metadata blocks provided
[  697.933037][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'.
[  701.000043][T14607] FAULT_INJECTION: forcing a failure.
[  701.000043][T14607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  701.103533][T14607] CPU: 0 UID: 0 PID: 14607 Comm: syz.4.1855 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  701.103570][T14607] Tainted: [L]=SOFTLOCKUP
[  701.103577][T14607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  701.103591][T14607] Call Trace:
[  701.103598][T14607]  <TASK>
[  701.103607][T14607]  dump_stack_lvl+0x100/0x190
[  701.103636][T14607]  should_fail_ex.cold+0x5/0xa
[  701.103664][T14607]  _copy_from_user+0x2e/0xd0
[  701.103701][T14607]  __x64_sys_epoll_ctl+0x131/0x1e0
[  701.103733][T14607]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  701.103766][T14607]  ? rcu_is_watching+0x12/0xc0
[  701.103796][T14607]  do_syscall_64+0x10b/0xf80
[  701.103823][T14607]  ? clear_bhb_loop+0x40/0x90
[  701.103850][T14607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.103873][T14607] RIP: 0033:0x7f848999cdd9
[  701.103891][T14607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.103913][T14607] RSP: 002b:00007f848a84c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  701.103935][T14607] RAX: ffffffffffffffda RBX: 00007f8489c15fa0 RCX: 00007f848999cdd9
[  701.103950][T14607] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  701.103963][T14607] RBP: 00007f848a84c090 R08: 0000000000000000 R09: 0000000000000000
[  701.103976][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.103996][T14607] R13: 00007f8489c16038 R14: 00007f8489c15fa0 R15: 00007fff196e2598
[  701.104032][T14607]  </TASK>
[  701.597712][T14614] futex_wake_op: syz.5.1857 tries to shift op by -2048; fix this program
[  702.969139][T14639] blktrace: Concurrent blktraces are not allowed on loop2
[  705.094598][T14635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.069665][T14635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.400370][T14635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.616902][T14671] hub 1-0:1.0: USB hub found
[  706.680811][T14635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.730539][T14671] hub 1-0:1.0: 1 port detected
[  706.772595][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'.
[  707.479153][T14685] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  707.706998][T14685] CIFS mount error: No usable UNC path provided in device string!
[  707.706998][T14685] 
[  708.069754][T14685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  708.438379][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1872'.
[  708.603525][T14698] bond0: entered promiscuous mode
[  708.669199][T14698] bond_slave_0: entered promiscuous mode
[  708.700773][T14698] bond_slave_1: entered promiscuous mode
[  709.091406][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'.
[  709.136945][ T6104] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  709.136978][ T6104] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  709.152569][ T6104] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  709.152619][ T6104] Bluetooth: hci0: Unknown advertising packet type: 0x50
[  709.165545][ T6104] Bluetooth: hci0: Unknown advertising packet type: 0x5a
[  709.172837][ T6104] Bluetooth: hci0: adv larger than maximum supported
[  709.180348][ T6104] Bluetooth: hci0: Malformed LE Event: 0x0d
[  711.282145][T14740] capability: warning: `syz.5.1879' uses deprecated v2 capabilities in a way that may be insecure
[  711.907910][T14751] FAULT_INJECTION: forcing a failure.
[  711.907910][T14751] name failslab, interval 1, probability 0, space 0, times 0
[  712.034430][T14751] CPU: 0 UID: 8 PID: 14751 Comm: syz.5.1881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.034468][T14751] Tainted: [L]=SOFTLOCKUP
[  712.034477][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  712.034492][T14751] Call Trace:
[  712.034499][T14751]  <TASK>
[  712.034508][T14751]  dump_stack_lvl+0x100/0x190
[  712.034538][T14751]  should_fail_ex.cold+0x5/0xa
[  712.034569][T14751]  should_failslab+0xc2/0x120
[  712.034598][T14751]  __kmalloc_cache_noprof+0x7a/0x6f0
[  712.034633][T14751]  ? key_user_lookup+0x1a3/0x5a0
[  712.034665][T14751]  key_user_lookup+0x1a3/0x5a0
[  712.034691][T14751]  ? __pfx_key_user_lookup+0x10/0x10
[  712.034718][T14751]  ? security_key_permission+0x7b/0x230
[  712.034764][T14751]  key_alloc+0x18b/0x1310
[  712.034797][T14751]  ? __pfx_keyring_search+0x10/0x10
[  712.034829][T14751]  ? __pfx_key_alloc+0x10/0x10
[  712.034854][T14751]  ? __pfx_key_default_cmp+0x10/0x10
[  712.034885][T14751]  ? __pfx_keyring_search_iterator+0x10/0x10
[  712.034919][T14751]  keyring_alloc+0x44/0xc0
[  712.034950][T14751]  look_up_user_keyrings+0x465/0x790
[  712.034995][T14751]  ? __pfx_look_up_user_keyrings+0x10/0x10
[  712.035046][T14751]  lookup_user_key+0xbb1/0x1300
[  712.035072][T14751]  ? __pfx_lookup_user_key+0x10/0x10
[  712.035095][T14751]  ? __pfx_do_futex+0x10/0x10
[  712.035127][T14751]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  712.035173][T14751]  ? xfd_validate_state+0x129/0x190
[  712.035207][T14751]  ? ksys_read+0x1ac/0x250
[  712.035237][T14751]  keyctl_keyring_unlink+0x1f/0x1b0
[  712.035274][T14751]  __do_sys_keyctl+0x3dd/0x5a0
[  712.035313][T14751]  do_syscall_64+0x10b/0xf80
[  712.035343][T14751]  ? clear_bhb_loop+0x40/0x90
[  712.035372][T14751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.035397][T14751] RIP: 0033:0x7fed0059cdd9
[  712.035420][T14751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.035444][T14751] RSP: 002b:00007fecfe7d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  712.035467][T14751] RAX: ffffffffffffffda RBX: 00007fed00816090 RCX: 00007fed0059cdd9
[  712.035483][T14751] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009
[  712.035498][T14751] RBP: 00007fed00632d69 R08: 0000000000000008 R09: 0000000000000000
[  712.035513][T14751] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000
[  712.035528][T14751] R13: 00007fed00816128 R14: 00007fed00816090 R15: 00007fffc6bea198
[  712.035559][T14751]  </TASK>
[  713.117543][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1884'.
[  713.951900][T14770] netlink: 'syz.5.1885': attribute type 1 has an invalid length.
[  714.003308][T14770] netlink: 'syz.5.1885': attribute type 6 has an invalid length.
[  715.916710][T14806] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  715.935231][T14805] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1893'.
[  716.326228][T14810] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  716.635798][T14800] Process accounting paused
[  717.573904][T14826] NFSD: Failed to start, no listeners configured.
[  718.608571][T14836] wlan1: mtu less than device minimum
[  718.621462][T14833] FAULT_INJECTION: forcing a failure.
[  718.621462][T14833] name failslab, interval 1, probability 0, space 0, times 0
[  718.792106][T14833] CPU: 0 UID: 0 PID: 14833 Comm: syz.4.1901 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  718.792145][T14833] Tainted: [L]=SOFTLOCKUP
[  718.792153][T14833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  718.792169][T14833] Call Trace:
[  718.792177][T14833]  <TASK>
[  718.792186][T14833]  dump_stack_lvl+0x100/0x190
[  718.792217][T14833]  should_fail_ex.cold+0x5/0xa
[  718.792248][T14833]  should_failslab+0xc2/0x120
[  718.792277][T14833]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  718.792315][T14833]  ? copy_net_ns+0xe8/0x7c0
[  718.792349][T14833]  copy_net_ns+0xe8/0x7c0
[  718.792375][T14833]  ? copy_cgroup_ns+0x71/0x970
[  718.792401][T14833]  create_new_namespaces+0x3ea/0xac0
[  718.792439][T14833]  unshare_nsproxy_namespaces+0xf2/0x220
[  718.792474][T14833]  ksys_unshare+0x438/0xab0
[  718.792511][T14833]  ? __pfx_ksys_unshare+0x10/0x10
[  718.792546][T14833]  ? xfd_validate_state+0x129/0x190
[  718.792580][T14833]  __x64_sys_unshare+0x31/0x40
[  718.792616][T14833]  do_syscall_64+0x10b/0xf80
[  718.792645][T14833]  ? clear_bhb_loop+0x40/0x90
[  718.792715][T14833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.792741][T14833] RIP: 0033:0x7f848999cdd9
[  718.792761][T14833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.792785][T14833] RSP: 002b:00007f848a82b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  718.792808][T14833] RAX: ffffffffffffffda RBX: 00007f8489c16090 RCX: 00007f848999cdd9
[  718.792824][T14833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  718.792838][T14833] RBP: 00007f8489a32d69 R08: 0000000000000000 R09: 0000000000000000
[  718.792853][T14833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  718.792868][T14833] R13: 00007f8489c16128 R14: 00007f8489c16090 R15: 00007fff196e2598
[  718.792898][T14833]  </TASK>
[  721.239008][T14873] FAULT_INJECTION: forcing a failure.
[  721.239008][T14873] name failslab, interval 1, probability 0, space 0, times 0
[  721.664584][T14873] CPU: 0 UID: 0 PID: 14873 Comm: syz.4.1905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.664623][T14873] Tainted: [L]=SOFTLOCKUP
[  721.664631][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  721.664646][T14873] Call Trace:
[  721.664666][T14873]  <TASK>
[  721.664675][T14873]  dump_stack_lvl+0x100/0x190
[  721.664705][T14873]  should_fail_ex.cold+0x5/0xa
[  721.664735][T14873]  should_failslab+0xc2/0x120
[  721.664767][T14873]  __kmalloc_cache_noprof+0x7a/0x6f0
[  721.664801][T14873]  ? loopback_open+0x145/0x1330
[  721.664831][T14873]  loopback_open+0x145/0x1330
[  721.664861][T14873]  snd_pcm_open_substream+0xa76/0x1850
[  721.664902][T14873]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  721.664942][T14873]  ? rcu_is_watching+0x12/0xc0
[  721.664976][T14873]  snd_pcm_open+0x2a3/0x710
[  721.665017][T14873]  ? __pfx_snd_pcm_open+0x10/0x10
[  721.665058][T14873]  ? __pfx_default_wake_function+0x10/0x10
[  721.665098][T14873]  ? __pfx_snd_pcm_playback_open+0x10/0x10
[  721.665137][T14873]  snd_pcm_playback_open+0x86/0xe0
[  721.665176][T14873]  snd_open+0x201/0x450
[  721.665206][T14873]  ? __pfx_snd_open+0x10/0x10
[  721.665235][T14873]  chrdev_open+0x234/0x6a0
[  721.665263][T14873]  ? __pfx_apparmor_file_open+0x10/0x10
[  721.665300][T14873]  ? __pfx_chrdev_open+0x10/0x10
[  721.665331][T14873]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  721.665368][T14873]  do_dentry_open+0x6d8/0x1660
[  721.665395][T14873]  ? __pfx_chrdev_open+0x10/0x10
[  721.665431][T14873]  vfs_open+0x82/0x3f0
[  721.665468][T14873]  path_openat+0x208c/0x31a0
[  721.665514][T14873]  ? __pfx_path_openat+0x10/0x10
[  721.665553][T14873]  do_file_open+0x20e/0x430
[  721.665584][T14873]  ? __pfx_do_file_open+0x10/0x10
[  721.665633][T14873]  ? alloc_fd+0x476/0x790
[  721.665664][T14873]  ? do_getname+0x191/0x390
[  721.665701][T14873]  do_sys_openat2+0x10d/0x1e0
[  721.665737][T14873]  ? __pfx_do_sys_openat2+0x10/0x10
[  721.665775][T14873]  ? __fget_files+0x21f/0x3d0
[  721.665807][T14873]  __x64_sys_openat+0x12d/0x210
[  721.665844][T14873]  ? __pfx___x64_sys_openat+0x10/0x10
[  721.665885][T14873]  ? rcu_is_watching+0x12/0xc0
[  721.665917][T14873]  do_syscall_64+0x10b/0xf80
[  721.665945][T14873]  ? clear_bhb_loop+0x40/0x90
[  721.665973][T14873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.665997][T14873] RIP: 0033:0x7f848999cdd9
[  721.666017][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.666041][T14873] RSP: 002b:00007f848a7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  721.666063][T14873] RAX: ffffffffffffffda RBX: 00007f8489c16450 RCX: 00007f848999cdd9
[  721.666078][T14873] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c
[  721.666093][T14873] RBP: 00007f8489a32d69 R08: 0000000000000000 R09: 0000000000000000
[  721.666107][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  721.666121][T14873] R13: 00007f8489c164e8 R14: 00007f8489c16450 R15: 00007fff196e2598
[  721.666152][T14873]  </TASK>
[  723.339898][ T6104] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  725.811194][T14923] NFSD: Failed to start, no listeners configured.
[  728.017917][T14957] futex_wake_op: syz.0.1926 tries to shift op by -2048; fix this program
[  728.092783][T14957] futex_wake_op: syz.0.1926 tries to shift op by -2048; fix this program
[  729.944150][T14977] NFSD: Failed to start, no listeners configured.
[  731.819980][T15002] NFSD: Failed to start, no listeners configured.
[  733.081568][T15019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1941'.
[  735.197137][T15037] NFSD: Failed to start, no listeners configured.
[  736.152926][T15061] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  740.106582][T15114] NFSD: Failed to start, no listeners configured.
[  741.847785][T15144] ima: policy update failed
[  741.914133][   T29] audit: type=1802 audit(4294986027.713:15): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1974" res=0 errno=0
[  742.500969][T15156] FAULT_INJECTION: forcing a failure.
[  742.500969][T15156] name failslab, interval 1, probability 0, space 0, times 0
[  742.578865][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.5.1978 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  742.578904][T15156] Tainted: [L]=SOFTLOCKUP
[  742.578913][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  742.578928][T15156] Call Trace:
[  742.578935][T15156]  <TASK>
[  742.578944][T15156]  dump_stack_lvl+0x100/0x190
[  742.578982][T15156]  should_fail_ex.cold+0x5/0xa
[  742.579013][T15156]  should_failslab+0xc2/0x120
[  742.579054][T15156]  __kmalloc_cache_noprof+0x7a/0x6f0
[  742.579088][T15156]  ? tipc_sub_subscribe+0x15c/0x730
[  742.579118][T15156]  ? find_held_lock+0x2b/0x80
[  742.579152][T15156]  tipc_sub_subscribe+0x15c/0x730
[  742.579185][T15156]  tipc_conn_rcv_sub+0x21e/0x3d0
[  742.579215][T15156]  tipc_topsrv_kern_subscr+0x20b/0x3c0
[  742.579245][T15156]  ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10
[  742.579277][T15156]  ? net_generic+0xea/0x2a0
[  742.579310][T15156]  tipc_group_create+0x4ab/0x660
[  742.579343][T15156]  tipc_setsockopt+0x611/0xe30
[  742.579380][T15156]  ? __pfx_tipc_setsockopt+0x10/0x10
[  742.579427][T15156]  ? __pfx_tipc_setsockopt+0x10/0x10
[  742.579463][T15156]  do_sock_setsockopt+0xf3/0x1d0
[  742.579495][T15156]  __sys_setsockopt+0x119/0x190
[  742.579539][T15156]  __x64_sys_setsockopt+0xbd/0x160
[  742.579576][T15156]  ? do_syscall_64+0x90/0xf80
[  742.579604][T15156]  ? lockdep_hardirqs_on+0x78/0x100
[  742.579632][T15156]  do_syscall_64+0x10b/0xf80
[  742.579659][T15156]  ? clear_bhb_loop+0x40/0x90
[  742.579692][T15156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.579716][T15156] RIP: 0033:0x7fed0059cdd9
[  742.579735][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.579758][T15156] RSP: 002b:00007fecfe7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  742.579780][T15156] RAX: ffffffffffffffda RBX: 00007fed00815fa0 RCX: 00007fed0059cdd9
[  742.579795][T15156] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  742.579809][T15156] RBP: 00007fed00632d69 R08: 0000000000000014 R09: 0000000000000000
[  742.579823][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.579837][T15156] R13: 00007fed00816038 R14: 00007fed00815fa0 R15: 00007fffc6bea198
[  742.579866][T15156]  </TASK>
[  742.584427][T15156] tipc: Subscription rejected, no memory
[  743.411386][T15164] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1979'.
[  745.763943][   T29] audit: type=1804 audit(4294986031.563:16): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1986" name="/newroot/510/file0" dev="tmpfs" ino=2657 res=1 errno=0
[  745.932387][   T29] audit: type=1804 audit(4294986031.593:17): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1986" name="/newroot/510/file0" dev="tmpfs" ino=2657 res=1 errno=0
[  746.857917][T15229] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1993'.
[  746.929532][T15219] Process accounting resumed
[  747.237424][T15237] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  747.504015][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  747.517157][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  748.577385][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2004'.
[  749.810603][T15287] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  750.542708][T15295] random: crng reseeded on system resumption
[  753.750429][T15355] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  757.097816][T15373] can: request_module (can-proto-5) failed.
[  759.918344][   T29] audit: type=1326 audit(1843104523.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.3.2042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff72df9cdd9 code=0x0
[  760.277366][T15461] snd_virmidi snd_virmidi.0: control 61648:131113:-1:yª:0 is already present
[  761.305623][T15469] loop6: detected capacity change from 0 to 524288000
[  762.109994][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'.
[  763.012651][T15505] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  763.313450][T15507] FAULT_INJECTION: forcing a failure.
[  763.313450][T15507] name failslab, interval 1, probability 0, space 0, times 0
[  763.401981][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.5.2054 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  763.402019][T15507] Tainted: [L]=SOFTLOCKUP
[  763.402027][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  763.402042][T15507] Call Trace:
[  763.402050][T15507]  <TASK>
[  763.402059][T15507]  dump_stack_lvl+0x100/0x190
[  763.402090][T15507]  should_fail_ex.cold+0x5/0xa
[  763.402122][T15507]  should_failslab+0xc2/0x120
[  763.402149][T15507]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  763.402189][T15507]  ? __kernfs_new_node+0xd2/0x9f0
[  763.402221][T15507]  __kernfs_new_node+0xd2/0x9f0
[  763.402250][T15507]  ? __pfx___kernfs_new_node+0x10/0x10
[  763.402283][T15507]  ? find_held_lock+0x2b/0x80
[  763.402314][T15507]  ? kernfs_root+0xee/0x2a0
[  763.402338][T15507]  ? kernfs_root+0xee/0x2a0
[  763.402369][T15507]  kernfs_new_node+0x11b/0x1a0
[  763.402410][T15507]  kernfs_create_link+0xcc/0x240
[  763.402454][T15507]  sysfs_do_create_link_sd+0x90/0x140
[  763.402495][T15507]  sysfs_create_link+0x61/0xc0
[  763.402519][T15507]  device_add+0x5da/0x1950
[  763.402551][T15507]  ? __pfx_device_add+0x10/0x10
[  763.402579][T15507]  ? lockdep_init_map_type+0x5c/0x250
[  763.402603][T15507]  ? __init_waitqueue_head+0xca/0x150
[  763.402638][T15507]  rfkill_register+0x1ad/0xb30
[  763.402664][T15507]  nfc_register_device+0x11f/0x3e0
[  763.402695][T15507]  nci_register_device+0x7f1/0xb80
[  763.402735][T15507]  ? __pfx_nci_register_device+0x10/0x10
[  763.402777][T15507]  ? lockdep_init_map_type+0x5c/0x250
[  763.402805][T15507]  virtual_ncidev_open+0x141/0x220
[  763.402841][T15507]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  763.402875][T15507]  misc_open+0x26d/0x450
[  763.402903][T15507]  ? __pfx_misc_open+0x10/0x10
[  763.402930][T15507]  chrdev_open+0x234/0x6a0
[  763.402959][T15507]  ? __pfx_apparmor_file_open+0x10/0x10
[  763.402996][T15507]  ? __pfx_chrdev_open+0x10/0x10
[  763.403038][T15507]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  763.403073][T15507]  do_dentry_open+0x6d8/0x1660
[  763.403099][T15507]  ? __pfx_chrdev_open+0x10/0x10
[  763.403132][T15507]  vfs_open+0x82/0x3f0
[  763.403167][T15507]  path_openat+0x208c/0x31a0
[  763.403224][T15507]  ? __pfx_path_openat+0x10/0x10
[  763.403263][T15507]  do_file_open+0x20e/0x430
[  763.403294][T15507]  ? __pfx_do_file_open+0x10/0x10
[  763.403343][T15507]  ? alloc_fd+0x476/0x790
[  763.403373][T15507]  ? do_getname+0x191/0x390
[  763.403438][T15507]  do_sys_openat2+0x10d/0x1e0
[  763.403475][T15507]  ? __pfx_do_sys_openat2+0x10/0x10
[  763.403512][T15507]  ? blkcg_maybe_throttle_current+0x5e7/0xeb0
[  763.403548][T15507]  __x64_sys_openat+0x12d/0x210
[  763.403585][T15507]  ? __pfx___x64_sys_openat+0x10/0x10
[  763.403627][T15507]  ? rcu_is_watching+0x12/0xc0
[  763.403659][T15507]  do_syscall_64+0x10b/0xf80
[  763.403687][T15507]  ? clear_bhb_loop+0x40/0x90
[  763.403715][T15507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.403740][T15507] RIP: 0033:0x7fed0059cdd9
[  763.403760][T15507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  763.403782][T15507] RSP: 002b:00007fecfe7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  763.403805][T15507] RAX: ffffffffffffffda RBX: 00007fed00815fa0 RCX: 00007fed0059cdd9
[  763.403821][T15507] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  763.403836][T15507] RBP: 00007fed00632d69 R08: 0000000000000000 R09: 0000000000000000
[  763.403850][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  763.403864][T15507] R13: 00007fed00816038 R14: 00007fed00815fa0 R15: 00007fffc6bea198
[  763.403894][T15507]  </TASK>
[  767.857157][T15527] kexec: Could not allocate control_code_buffer
[  768.154388][T15560] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  770.363300][T15588] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2073'.
[  771.049719][T15578] FAULT_INJECTION: forcing a failure.
[  771.049719][T15578] name failslab, interval 1, probability 0, space 0, times 0
[  771.145567][T15578] CPU: 0 UID: 0 PID: 15578 Comm: syz.0.2069 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  771.145606][T15578] Tainted: [L]=SOFTLOCKUP
[  771.145614][T15578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  771.145629][T15578] Call Trace:
[  771.145637][T15578]  <TASK>
[  771.145645][T15578]  dump_stack_lvl+0x100/0x190
[  771.145677][T15578]  should_fail_ex.cold+0x5/0xa
[  771.145708][T15578]  should_failslab+0xc2/0x120
[  771.145737][T15578]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  771.145775][T15578]  ? copy_net_ns+0xe8/0x7c0
[  771.145809][T15578]  copy_net_ns+0xe8/0x7c0
[  771.145843][T15578]  ? copy_cgroup_ns+0x71/0x970
[  771.145869][T15578]  create_new_namespaces+0x3ea/0xac0
[  771.145919][T15578]  unshare_nsproxy_namespaces+0xf2/0x220
[  771.145953][T15578]  ksys_unshare+0x438/0xab0
[  771.145990][T15578]  ? __pfx_ksys_unshare+0x10/0x10
[  771.146024][T15578]  ? xfd_validate_state+0x129/0x190
[  771.146057][T15578]  __x64_sys_unshare+0x31/0x40
[  771.146092][T15578]  do_syscall_64+0x10b/0xf80
[  771.146120][T15578]  ? clear_bhb_loop+0x40/0x90
[  771.146148][T15578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.146173][T15578] RIP: 0033:0x7f2e82f9cdd9
[  771.146191][T15578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.146214][T15578] RSP: 002b:00007f2e83e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  771.146236][T15578] RAX: ffffffffffffffda RBX: 00007f2e83216090 RCX: 00007f2e82f9cdd9
[  771.146252][T15578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  771.146266][T15578] RBP: 00007f2e83032d69 R08: 0000000000000000 R09: 0000000000000000
[  771.146280][T15578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  771.146293][T15578] R13: 00007f2e83216128 R14: 00007f2e83216090 R15: 00007fff9c3c92e8
[  771.146322][T15578]  </TASK>
[  773.027717][T15638] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  773.740088][ T6104] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  776.177876][T15691] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  776.495562][T15698] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  777.005858][T15705] Process accounting paused
[  778.992208][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2098'.
[  780.577219][T15763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'.
[  783.654794][T15811] block2mtd: error: cannot open device ï;0
[  787.575521][T15862] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2133'.
[  787.640194][T15862] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2133'.
[  788.062165][T15873] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2136'.
[  788.180530][T15874] FAULT_INJECTION: forcing a failure.
[  788.180530][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  788.279701][T15886] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  788.386378][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.0.2136 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  788.386415][T15874] Tainted: [L]=SOFTLOCKUP
[  788.386423][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  788.386437][T15874] Call Trace:
[  788.386444][T15874]  <TASK>
[  788.386453][T15874]  dump_stack_lvl+0x100/0x190
[  788.386483][T15874]  should_fail_ex.cold+0x5/0xa
[  788.386513][T15874]  _copy_from_user+0x2e/0xd0
[  788.386551][T15874]  memdup_user+0x6b/0xe0
[  788.386576][T15874]  strndup_user+0x78/0xe0
[  788.386601][T15874]  __x64_sys_fsopen+0x9e/0x220
[  788.386646][T15874]  do_syscall_64+0x10b/0xf80
[  788.386673][T15874]  ? clear_bhb_loop+0x40/0x90
[  788.386705][T15874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.386729][T15874] RIP: 0033:0x7f2e82f9cdd9
[  788.386747][T15874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  788.386770][T15874] RSP: 002b:00007f2e83e34028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  788.386792][T15874] RAX: ffffffffffffffda RBX: 00007f2e83216090 RCX: 00007f2e82f9cdd9
[  788.386808][T15874] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  788.386822][T15874] RBP: 00007f2e83032d69 R08: 0000000000000000 R09: 0000000000000000
[  788.386835][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  788.386849][T15874] R13: 00007f2e83216128 R14: 00007f2e83216090 R15: 00007fff9c3c92e8
[  788.386878][T15874]  </TASK>
[  792.327811][T15938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2145'.
[  796.612170][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2154'.
[  797.057135][T15972] bridge0: port 3(vlan0) entered blocking state
[  797.093554][T15972] bridge0: port 3(vlan0) entered disabled state
[  797.149365][T15972] vlan0: entered allmulticast mode
[  797.190355][T15972] veth0_vlan: entered allmulticast mode
[  797.242941][T15972] vlan0: entered promiscuous mode
[  797.297227][T15972] bridge0: port 3(vlan0) entered blocking state
[  797.303734][T15972] bridge0: port 3(vlan0) entered forwarding state
[  798.000421][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2155'.
[  799.232716][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2158'.
[  801.156063][T16018] i2c i2c-0: delete_device: Can't find device in list
[  802.709092][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2167'.
[  802.751643][T16036] usb usb3: usbfs: process 16036 (syz.5.2168) did not claim interface 0 before use
[  802.941490][T16036] ptrace attach of "./syz-executor exec"[13241] was attempted by "./syz-executor exec"[16036]
[  804.774429][   T29] audit: type=1800 audit(1843104568.060:19): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2169" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  807.414428][T16060] Process accounting resumed
[  808.943087][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  808.956654][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  809.948498][T16096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'.
[  811.082970][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'.
[  817.473800][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2203'.
[  820.993365][T16201] .^: entered promiscuous mode
[  821.536929][T16217] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  822.837738][ T6104] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  822.910002][T16232] futex_wake_op: syz.4.2216 tries to shift op by -2048; fix this program
[  823.214527][T16232] futex_wake_op: syz.4.2216 tries to shift op by -2048; fix this program
[  826.601523][T16272] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  828.932004][T16286] kfence: disabled
[  831.048459][T16310] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  831.751280][T16319] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  837.811010][T16372] NFSD: Failed to start, no listeners configured.
[  837.942140][T16367] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  838.194028][T16367] vhci_hcd vhci_hcd.2: invalid port number 111
[  838.417322][T16367] vhci_hcd vhci_hcd.2: invalid port number 111
[  838.722407][T16375] Process accounting paused
[  839.727596][T16409] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  840.399254][T16413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2260'.
[  840.540434][T16413] team0 (unregistering): Port device team_slave_0 removed
[  840.620410][T16413] team0 (unregistering): Port device team_slave_1 removed
[  843.245630][T16437] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  843.736204][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2267'.
[  844.544679][T16457] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  845.043624][T16466] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  845.873107][T16483] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  847.638680][T16494] FAULT_INJECTION: forcing a failure.
[  847.638680][T16494] name failslab, interval 1, probability 0, space 0, times 0
[  847.838665][T16494] CPU: 0 UID: 0 PID: 16494 Comm: syz.4.2281 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  847.838704][T16494] Tainted: [L]=SOFTLOCKUP
[  847.838712][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  847.838726][T16494] Call Trace:
[  847.838734][T16494]  <TASK>
[  847.838756][T16494]  dump_stack_lvl+0x100/0x190
[  847.838785][T16494]  should_fail_ex.cold+0x5/0xa
[  847.838816][T16494]  should_failslab+0xc2/0x120
[  847.838843][T16494]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  847.838882][T16494]  ? __d_alloc+0x34/0xa40
[  847.838920][T16494]  __d_alloc+0x34/0xa40
[  847.838953][T16494]  d_alloc+0x4a/0x1e0
[  847.838985][T16494]  lookup_one_qstr_excl+0x171/0x250
[  847.839024][T16494]  start_dirop+0x59/0xb0
[  847.839050][T16494]  simple_start_creating+0xf9/0x110
[  847.839078][T16494]  ? __pfx_simple_start_creating+0x10/0x10
[  847.839107][T16494]  ? mntput+0x70/0xa0
[  847.839130][T16494]  ? simple_pin_fs+0xa3/0x190
[  847.839154][T16494]  debugfs_start_creating.part.0+0x82/0x170
[  847.839191][T16494]  __debugfs_create_file+0xb3/0x4f0
[  847.839230][T16494]  debugfs_create_file_full+0x41/0x60
[  847.839273][T16494]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  847.839303][T16494]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  847.839330][T16494]  ? ida_alloc_range+0x70d/0x830
[  847.839383][T16494]  ? lockdep_init_map_type+0x5c/0x250
[  847.839411][T16494]  preinit_net.part.0+0x252/0x920
[  847.839438][T16494]  copy_net_ns+0x339/0x7c0
[  847.839468][T16494]  create_new_namespaces+0x3ea/0xac0
[  847.839505][T16494]  unshare_nsproxy_namespaces+0xf2/0x220
[  847.839542][T16494]  ksys_unshare+0x438/0xab0
[  847.839579][T16494]  ? __pfx_ksys_unshare+0x10/0x10
[  847.839613][T16494]  ? xfd_validate_state+0x129/0x190
[  847.839636][T16494]  ? ksys_write+0x1ac/0x250
[  847.839670][T16494]  __x64_sys_unshare+0x31/0x40
[  847.839705][T16494]  do_syscall_64+0x10b/0xf80
[  847.839732][T16494]  ? clear_bhb_loop+0x40/0x90
[  847.839760][T16494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.839784][T16494] RIP: 0033:0x7f848999cdd9
[  847.839804][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  847.839827][T16494] RSP: 002b:00007f848a84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  847.839850][T16494] RAX: ffffffffffffffda RBX: 00007f8489c15fa0 RCX: 00007f848999cdd9
[  847.839865][T16494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  847.839879][T16494] RBP: 00007f8489a32d69 R08: 0000000000000000 R09: 0000000000000000
[  847.839893][T16494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.839907][T16494] R13: 00007f8489c16038 R14: 00007f8489c15fa0 R15: 00007fff196e2598
[  847.839937][T16494]  </TASK>
[  849.145822][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'.
[  851.443441][T16553] FAULT_INJECTION: forcing a failure.
[  851.443441][T16553] name failslab, interval 1, probability 0, space 0, times 0
[  851.541920][T16553] CPU: 0 UID: 0 PID: 16553 Comm: syz.3.2294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  851.541960][T16553] Tainted: [L]=SOFTLOCKUP
[  851.541969][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  851.541984][T16553] Call Trace:
[  851.541991][T16553]  <TASK>
[  851.542000][T16553]  dump_stack_lvl+0x100/0x190
[  851.542031][T16553]  should_fail_ex.cold+0x5/0xa
[  851.542062][T16553]  should_failslab+0xc2/0x120
[  851.542091][T16553]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  851.542116][T16553]  ? devinet_init_net+0xca/0x8d0
[  851.542154][T16553]  kmemdup_noprof+0x29/0x60
[  851.542179][T16553]  devinet_init_net+0xca/0x8d0
[  851.542218][T16553]  ? __pfx_devinet_init_net+0x10/0x10
[  851.542249][T16553]  ops_init+0x1e2/0x5f0
[  851.542277][T16553]  setup_net+0x118/0x3a0
[  851.542303][T16553]  ? __pfx_setup_net+0x10/0x10
[  851.542332][T16553]  ? mutex_init_lockdep+0xf1/0x120
[  851.542363][T16553]  copy_net_ns+0x46f/0x7c0
[  851.542394][T16553]  create_new_namespaces+0x3ea/0xac0
[  851.542432][T16553]  unshare_nsproxy_namespaces+0xf2/0x220
[  851.542467][T16553]  ksys_unshare+0x438/0xab0
[  851.542506][T16553]  ? __pfx_ksys_unshare+0x10/0x10
[  851.542541][T16553]  ? xfd_validate_state+0x129/0x190
[  851.542575][T16553]  __x64_sys_unshare+0x31/0x40
[  851.542611][T16553]  do_syscall_64+0x10b/0xf80
[  851.542640][T16553]  ? clear_bhb_loop+0x40/0x90
[  851.542669][T16553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.542694][T16553] RIP: 0033:0x7ff72df9cdd9
[  851.542714][T16553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.542737][T16553] RSP: 002b:00007ff72eebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  851.542760][T16553] RAX: ffffffffffffffda RBX: 00007ff72e216090 RCX: 00007ff72df9cdd9
[  851.542777][T16553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  851.542791][T16553] RBP: 00007ff72e032d69 R08: 0000000000000000 R09: 0000000000000000
[  851.542806][T16553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  851.542820][T16553] R13: 00007ff72e216128 R14: 00007ff72e216090 R15: 00007fffa8056338
[  851.542850][T16553]  </TASK>
[  852.780330][T16568] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  854.251720][T16582] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2302'.
[  854.885791][T16593] : Can't lookup blockdev
[  857.876343][T16647] binder: 16616:16647 ioctl c0306201 200000001100 returned -14
[  859.129791][ T6100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  859.150310][ T6100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  859.161598][ T6100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  859.181628][ T6100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  859.193092][ T6100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  860.673462][T15617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.081321][T15617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.281257][ T6100] Bluetooth: hci5: command tx timeout
[  861.469114][T15617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.766365][T15617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.267650][T16696] batman_adv: Routing algorithm '7' is not supported
[  863.361914][ T6100] Bluetooth: hci5: command tx timeout
[  864.069335][T15617] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.444381][ T6100] Bluetooth: hci5: command tx timeout
[  865.594875][T15617] bridge_slave_1: left allmulticast mode
[  865.625595][T15617] bridge_slave_1: left promiscuous mode
[  865.681120][T15617] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.754942][T15617] bridge_slave_0: left allmulticast mode
[  865.802173][T15617] bridge_slave_0: left promiscuous mode
[  865.841480][T15617] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.018793][T16748] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  866.102216][T16741] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  866.607453][T15617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.642947][T15617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.677639][T15617] bond0 (unregistering): Released all slaves
[  866.771916][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5
[  866.960159][T15617] : left promiscuous mode
[  867.173433][T15617] tipc: Left network mode
[  867.191182][T16653] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.274163][T16653] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.331818][T16653] bridge_slave_0: entered allmulticast mode
[  867.397625][T16653] bridge_slave_0: entered promiscuous mode
[  867.467975][T16653] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.524421][ T6100] Bluetooth: hci5: command tx timeout
[  867.541490][T16653] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.589739][T16653] bridge_slave_1: entered allmulticast mode
[  867.665422][T16653] bridge_slave_1: entered promiscuous mode
[  868.450718][T16653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.669090][T16653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  869.200767][T16653] team0: Port device team_slave_0 added
[  869.241765][T16653] team0: Port device team_slave_1 added
[  869.854421][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6
[  869.901044][T16653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  869.950028][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.061575][T16653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.350759][T16653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.384160][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.440002][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  870.448744][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  870.497403][T16653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.834183][T16787] Process accounting resumed
[  870.843746][T15617] hsr_slave_0: left promiscuous mode
[  870.872282][T15617] hsr_slave_1: left promiscuous mode
[  870.905055][T15617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  870.950993][T15617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.987787][T15617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.002278][T16812] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  871.027560][T15617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.094039][T15617] veth1_macvtap: left promiscuous mode
[  871.111632][T15617] veth0_macvtap: left promiscuous mode
[  871.135267][T15617] veth1_vlan: left promiscuous mode
[  871.155660][T15617] veth0_vlan: left promiscuous mode
[  871.871856][ T6100] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5
[  872.491214][T16653] hsr_slave_0: entered promiscuous mode
[  872.559211][T16653] hsr_slave_1: entered promiscuous mode
[  872.580315][T16653] debugfs: 'hsr0' already exists in 'hsr'
[  872.613907][T16653] Cannot create hsr debugfs directory
[  873.774385][T16846] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  875.305299][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7
[  875.952912][T16868] Setting dangerous option i915.mitigations - tainting kernel
[  876.516831][T16877] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:0 is already present
[  878.337643][T16653] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  878.420379][T16653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  878.472501][T16653] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  878.551364][T16653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  878.607483][T16653] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  878.742128][T16653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  878.812493][T16653] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  878.902003][T16653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  879.038066][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9
[  880.674728][T16653] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.829490][T16653] 8021q: adding VLAN 0 to HW filter on device team0
[  880.924349][T15623] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.931657][T15623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.088862][T16955] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  881.101319][T15623] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.108484][T15623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.258637][T16984] snd_virmidi snd_virmidi.0: control 61646:131081:-1:yª:3 is already present
[  883.003592][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2371'.
[  883.062642][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2370'.
[  883.244517][T16995] bond0: (slave bond_slave_0): Releasing backup interface
[  883.306610][T16995] bond_slave_0 (unregistering): left promiscuous mode
[  884.154788][T16653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.439009][T16653] veth0_vlan: entered promiscuous mode
[  885.710541][T16653] veth1_vlan: entered promiscuous mode
[  886.212086][T16653] veth0_macvtap: entered promiscuous mode
[  886.342665][T16653] veth1_macvtap: entered promiscuous mode
[  886.639627][T16653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.729621][T16653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.828886][T15617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.891561][T15617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.278824][T15617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.370475][T15617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.470859][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2381'.
[  888.295609][T15617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.373246][T15617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.819606][T15624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.870658][T15624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.544575][T17122] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078007400 pfn:0x78004
[  891.648394][T17122] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  891.759931][T17122] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  891.860699][T17122] raw: ffff888078007400 0000000000000000 00000001ffffffff 0000000000000000
[  891.993700][T17122] page dumped because: unmovable page
[  892.033930][T17122] page_owner tracks the page as allocated
[  892.102332][T17122] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 17012, tgid 17009 (syz.4.2373), ts 884572981272, free_ts 884313553129
[  892.291782][T17122]  post_alloc_hook+0x153/0x170
[  892.335672][T17122]  get_page_from_freelist+0x11a6/0x33b0
[  892.390747][T17122]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[  892.454568][T17122]  alloc_pages_mpol+0x1fb/0x540
[  892.491988][T17122]  alloc_pages_noprof+0x1a/0x160
[  892.531188][T17122]  stack_depot_save_flags+0x8f1/0x9d0
[  892.571143][T17122]  kasan_save_stack+0x3f/0x50
[  892.608809][T17122]  kasan_save_track+0x14/0x30
[  892.608890][T17122]  __kasan_kmalloc+0xaa/0xb0
[  892.608920][T17122]  __kmalloc_noprof+0x301/0x850
[  892.608985][T17122]  cfg80211_inform_single_bss_data+0x557/0x1de0
[  892.609026][T17122]  cfg80211_inform_bss_data+0x237/0x3a00
[  892.609064][T17122]  cfg80211_inform_bss_frame_data+0x247/0x780
[  892.609102][T17122]  ieee80211_bss_info_update+0x310/0xab0
[  892.609140][T17122]  ieee80211_scan_rx+0x4e6/0xb60
[  892.609176][T17122]  __ieee80211_rx_handle_packet+0x7da/0xe20
[  892.609202][T17122] page last free pid 16653 tgid 16653 stack trace:
[  892.609218][T17122]  __free_frozen_pages+0x747/0x1040
[  892.609251][T17122]  qlist_free_all+0x47/0xf0
[  892.609288][T17122]  kasan_quarantine_reduce+0x1a0/0x1f0
[  892.609328][T17122]  __kasan_slab_alloc+0x69/0x90
[  892.609353][T17122]  kmem_cache_alloc_node_noprof+0x25a/0x6f0
[  892.609393][T17122]  __alloc_skb+0x140/0x710
[  892.609431][T17122]  rtmsg_ifinfo_build_skb+0x81/0x260
[  892.609461][T17122]  rtnetlink_event+0x137/0x1f0
[  892.609501][T17122]  notifier_call_chain+0x99/0x400
[  892.609538][T17122]  call_netdevice_notifiers_info+0xbe/0x110
[  892.609567][T17122]  netif_set_mac_address+0x370/0x4a0
[  892.609589][T17122]  do_setlink.isra.0+0x75f/0x3e60
[  892.609612][T17122]  rtnl_newlink+0x11c2/0x2380
[  892.609635][T17122]  rtnetlink_rcv_msg+0x95e/0xe90
[  892.609659][T17122]  netlink_rcv_skb+0x159/0x420
[  892.609689][T17122]  netlink_unicast+0x585/0x850
[  896.004162][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2400'.
[  896.862496][T17193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  896.881906][T17193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  896.893489][T17193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  896.910080][T17193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  896.926604][T17193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  896.982436][T17185] ==================================================================
[  896.990560][T17185] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0
[  896.997975][T17185] Write of size 4 at addr ffff88802dd64508 by task syz.5.2402/17185
[  897.005962][T17185] 
[  897.008303][T17185] CPU: 0 UID: 0 PID: 17185 Comm: syz.5.2402 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  897.008339][T17185] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  897.008348][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  897.008363][T17185] Call Trace:
[  897.008372][T17185]  <TASK>
[  897.008382][T17185]  dump_stack_lvl+0x100/0x190
[  897.008411][T17185]  print_report+0x13d/0x4b0
[  897.008446][T17185]  ? __virt_addr_valid+0x239/0x430
[  897.008486][T17185]  ? try_module_get+0x4c/0xd0
[  897.008516][T17185]  kasan_report+0xdf/0x1d0
[  897.008543][T17185]  ? try_module_get+0x4c/0xd0
[  897.008576][T17185]  kasan_check_range+0x10f/0x1e0
[  897.008608][T17185]  try_module_get+0x4c/0xd0
[  897.008638][T17185]  dvb_device_open+0x124/0x3b0
[  897.008677][T17185]  ? __pfx_dvb_device_open+0x10/0x10
[  897.008714][T17185]  chrdev_open+0x234/0x6a0
[  897.008743][T17185]  ? __pfx_apparmor_file_open+0x10/0x10
[  897.008779][T17185]  ? __pfx_chrdev_open+0x10/0x10
[  897.008808][T17185]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  897.008851][T17185]  do_dentry_open+0x6d8/0x1660
[  897.008879][T17185]  ? __pfx_chrdev_open+0x10/0x10
[  897.008911][T17185]  vfs_open+0x82/0x3f0
[  897.008945][T17185]  path_openat+0x208c/0x31a0
[  897.008979][T17185]  ? __pfx_path_openat+0x10/0x10
[  897.009013][T17185]  do_file_open+0x20e/0x430
[  897.009043][T17185]  ? __pfx_do_file_open+0x10/0x10
[  897.009101][T17185]  ? alloc_fd+0x476/0x790
[  897.009141][T17185]  ? do_getname+0x191/0x390
[  897.009182][T17185]  do_sys_openat2+0x10d/0x1e0
[  897.009219][T17185]  ? __pfx_do_sys_openat2+0x10/0x10
[  897.009285][T17185]  __x64_sys_openat+0x12d/0x210
[  897.009341][T17185]  ? __pfx___x64_sys_openat+0x10/0x10
[  897.009392][T17185]  ? rcu_is_watching+0x12/0xc0
[  897.009423][T17185]  do_syscall_64+0x10b/0xf80
[  897.009459][T17185]  ? clear_bhb_loop+0x40/0x90
[  897.009487][T17185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.009513][T17185] RIP: 0033:0x7fed0059cdd9
[  897.009533][T17185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.009558][T17185] RSP: 002b:00007fecfe7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  897.009581][T17185] RAX: ffffffffffffffda RBX: 00007fed00816090 RCX: 00007fed0059cdd9
[  897.009598][T17185] RDX: 00000000000c8e03 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  897.009614][T17185] RBP: 00007fed00632d69 R08: 0000000000000000 R09: 0000000000000000
[  897.009628][T17185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.009643][T17185] R13: 00007fed00816128 R14: 00007fed00816090 R15: 00007fffc6bea198
[  897.009667][T17185]  </TASK>
[  897.009675][T17185] 
[  897.269941][T17185] Allocated by task 1:
[  897.274031][T17185]  kasan_save_stack+0x30/0x50
[  897.278723][T17185]  kasan_save_track+0x14/0x30
[  897.283411][T17185]  __kasan_kmalloc+0xaa/0xb0
[  897.288022][T17185]  bus_add_driver+0x92/0x5b0
[  897.292695][T17185]  driver_register+0x1e2/0x360
[  897.297480][T17185]  i2c_register_driver+0xd9/0x1f0
[  897.302518][T17185]  do_one_initcall+0x121/0x750
[  897.307309][T17185]  kernel_init_freeable+0x6ea/0x7b0
[  897.312521][T17185]  kernel_init+0x1f/0x1e0
[  897.316907][T17185]  ret_from_fork+0x72b/0xd50
[  897.321508][T17185]  ret_from_fork_asm+0x1a/0x30
[  897.326299][T17185] 
[  897.328625][T17185] The buggy address belongs to the object at ffff88802dd64400
[  897.328625][T17185]  which belongs to the cache kmalloc-256 of size 256
[  897.342685][T17185] The buggy address is located 56 bytes to the right of
[  897.342685][T17185]  allocated 208-byte region [ffff88802dd64400, ffff88802dd644d0)
[  897.357285][T17185] 
[  897.359628][T17185] The buggy address belongs to the physical page:
[  897.366041][T17185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dd64
[  897.374811][T17185] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  897.383340][T17185] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  897.390896][T17185] page_type: f5(slab)
[  897.394890][T17185] raw: 00fff00000000040 ffff88813fe2db40 dead000000000100 dead000000000122
[  897.403487][T17185] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  897.412104][T17185] head: 00fff00000000040 ffff88813fe2db40 dead000000000100 dead000000000122
[  897.420796][T17185] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  897.429493][T17185] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  897.438191][T17185] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  897.446901][T17185] page dumped because: kasan: bad access detected
[  897.453321][T17185] page_owner tracks the page as allocated
[  897.459038][T17185] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20434604263, free_ts 0
[  897.478775][T17185]  post_alloc_hook+0x153/0x170
[  897.483586][T17185]  get_page_from_freelist+0x11a6/0x33b0
[  897.489175][T17185]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[  897.495093][T17185]  new_slab+0xa6/0x6c0
[  897.499190][T17185]  refill_objects+0x277/0x420
[  897.503898][T17185]  __pcs_replace_empty_main+0x375/0x650
[  897.509470][T17185]  __kmalloc_cache_noprof+0x493/0x6f0
[  897.514882][T17185]  bus_add_driver+0x92/0x5b0
[  897.519496][T17185]  driver_register+0x1e2/0x360
[  897.524292][T17185]  usb_register_driver+0x21c/0x3e0
[  897.529432][T17185]  do_one_initcall+0x121/0x750
[  897.534217][T17185]  kernel_init_freeable+0x6ea/0x7b0
[  897.539443][T17185]  kernel_init+0x1f/0x1e0
[  897.543806][T17185]  ret_from_fork+0x72b/0xd50
[  897.548405][T17185]  ret_from_fork_asm+0x1a/0x30
[  897.553197][T17185] page_owner free stack trace missing
[  897.558565][T17185] 
[  897.560915][T17185] Memory state around the buggy address:
[  897.566571][T17185]  ffff88802dd64400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  897.574645][T17185]  ffff88802dd64480: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[  897.582732][T17185] >ffff88802dd64500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  897.590815][T17185]                       ^
[  897.595167][T17185]  ffff88802dd64580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  897.603236][T17185]  ffff88802dd64600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  897.611300][T17185] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  899.095027][T17193] Bluetooth: hci2: command tx timeout
[  899.889220][ T8924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.301500][ T8924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.637664][ T8924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.201667][T17185] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  901.208923][T17185] CPU: 0 UID: 0 PID: 17185 Comm: syz.5.2402 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  901.219884][T17185] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  901.225081][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  901.235162][T17185] Call Trace:
[  901.238448][T17185]  <TASK>
[  901.241401][T17185]  dump_stack_lvl+0x100/0x190
[  901.246098][T17185]  vpanic+0x552/0x970
[  901.250097][T17185]  ? __pfx_vpanic+0x10/0x10
[  901.254615][T17185]  ? try_module_get+0x4c/0xd0
[  901.259365][T17185]  panic+0xd1/0xe0
[  901.263097][T17185]  ? __pfx_panic+0x10/0x10
[  901.267528][T17185]  ? try_module_get+0x4c/0xd0
[  901.272225][T17185]  ? preempt_schedule_common+0x42/0xc0
[  901.277708][T17185]  check_panic_on_warn.cold+0x19/0x34
[  901.283127][T17185]  end_report.part.0+0x3a/0x90
[  901.287919][T17185]  kasan_report.cold+0xe/0x18
[  901.292624][T17185]  ? try_module_get+0x4c/0xd0
[  901.297501][T17185]  kasan_check_range+0x10f/0x1e0
[  901.302466][T17185]  try_module_get+0x4c/0xd0
[  901.306993][T17185]  dvb_device_open+0x124/0x3b0
[  901.311788][T17185]  ? __pfx_dvb_device_open+0x10/0x10
[  901.317133][T17185]  chrdev_open+0x234/0x6a0
[  901.321573][T17185]  ? __pfx_apparmor_file_open+0x10/0x10
[  901.327146][T17185]  ? __pfx_chrdev_open+0x10/0x10
[  901.332137][T17185]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  901.338506][T17185]  do_dentry_open+0x6d8/0x1660
[  901.343288][T17185]  ? __pfx_chrdev_open+0x10/0x10
[  901.348249][T17185]  vfs_open+0x82/0x3f0
[  901.352354][T17185]  path_openat+0x208c/0x31a0
[  901.356965][T17185]  ? __pfx_path_openat+0x10/0x10
[  901.361926][T17185]  do_file_open+0x20e/0x430
[  901.366451][T17185]  ? __pfx_do_file_open+0x10/0x10
[  901.371506][T17185]  ? alloc_fd+0x476/0x790
[  901.375879][T17185]  ? do_getname+0x191/0x390
[  901.380410][T17185]  do_sys_openat2+0x10d/0x1e0
[  901.385114][T17185]  ? __pfx_do_sys_openat2+0x10/0x10
[  901.390345][T17185]  __x64_sys_openat+0x12d/0x210
[  901.395223][T17185]  ? __pfx___x64_sys_openat+0x10/0x10
[  901.400629][T17185]  ? rcu_is_watching+0x12/0xc0
[  901.405426][T17185]  do_syscall_64+0x10b/0xf80
[  901.410077][T17185]  ? clear_bhb_loop+0x40/0x90
[  901.414794][T17185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.420722][T17185] RIP: 0033:0x7fed0059cdd9
[  901.425152][T17185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  901.444774][T17185] RSP: 002b:00007fecfe7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  901.453207][T17185] RAX: ffffffffffffffda RBX: 00007fed00816090 RCX: 00007fed0059cdd9
[  901.461188][T17185] RDX: 00000000000c8e03 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  901.469167][T17185] RBP: 00007fed00632d69 R08: 0000000000000000 R09: 0000000000000000
[  901.477147][T17185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  901.485132][T17185] R13: 00007fed00816128 R14: 00007fed00816090 R15: 00007fffc6bea198
[  901.493123][T17185]  </TASK>
[  901.496225][T17185] Kernel Offset: disabled
[  901.500569][T17185] Rebooting in 86400 seconds..