last executing test programs:

4m15.015889974s ago: executing program 1 (id=137):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000)
ioctl$auto(0x4000000000000c8, 0x1000, 0x3)
ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x250400, 0x0)
writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)

4m14.663662876s ago: executing program 1 (id=138):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x9, 0x9, 0x1, 0x2, 0x4, 0x200000015f4da0e, 0x3, 0xd08, 0xc, 0xa, 0x4, 0x6d3f, 0x9, 0x2, 0x2]}, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
socket(0x2c, 0x1, 0x3) (async)
mmap$auto(0x0, 0x202000b, 0x9, 0xdf, 0xfffffffffffffffa, 0x7fff) (async)
madvise$auto(0xf53, 0xffffffffffff0008, 0x17)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
bind$auto(0x3, 0x0, 0x6a) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0) (async)
io_uring_setup$auto(0xb, 0x0)
socket(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0)
ioctl$auto(r1, 0xc038563c, r0)

4m13.694183865s ago: executing program 1 (id=142):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x4d)
socket(0x10, 0x2, 0x0)
r1 = getuid() (async)
r2 = set_tid_address$auto(&(0x7f00000008c0)=0xfffffff8) (async)
capset$auto(&(0x7f0000000900)={0x401, <r3=>0x0}, &(0x7f0000000940)={0xb7f, 0x7fffffff, 0x88e8})
shmctl$auto_IPC_INFO(0x200, 0x3, &(0x7f0000000a40)={{0x401, r1, 0xee01, 0x1ff, 0x7, 0x5, 0x40}, 0x9, 0x0, 0xfffffffffffffffa, 0x80, @inferred=r2, @inferred=r3, 0x6, 0x0, &(0x7f0000000980)="ebf3a2", &(0x7f00000009c0)="fd415f786b9d2c73d3a3390946399d0980f19ba1e2b0556fa7a38c720385471a26841ec15edca7a27261552984ac7333fd92122585da1a67b528ff0b0d7dafea46c8e0bde82e79b0b835a38d534882b9fa251e46eedbe7386c184e67"}) (async)
r4 = setfsuid$auto(0x0)
setuid$auto(r4)
r5 = setfsgid$auto(0xee00)
fchown$auto(0xffffffffffffffff, 0xee00, r5)
fsconfig$auto(0xffffffffffffffff, 0x200006, 0x0, 0x0, r5) (async)
r6 = getpgid$auto(0xffffffffffffffff)
getpgrp(0x0)
shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000140)={{0x7, 0xee00, r5, 0xfffffff9, 0x5, 0x7ab6, 0x87}, 0xd153, 0x3, 0x7, 0x40, @inferred=r6, @raw=0x4, 0xb, 0x0, &(0x7f0000000000)="2ee7bcf8e4f78642470ef05fe303fda91bffa59954554caf8ebe2fc9c9d1fac3cae2b55b3a7716ec867a7b58a7129d49ba6e4714329f77064ff307de9d5fe156725bcdee2c31f1e45e5927f103af008dd002584763dd1045c18c2b338771948a4d744b8aa51a710bd4c92fcc843b1f497ed27dddce6d20d5c6582389bb9f92d3328151fb2f435a3f56f94808ab412f6031cca244d685adfd234f60bb50012820bea9fb50a3f7372f8fdd163be50a", &(0x7f00000000c0)="913e1d977d7eb7a463481199fe20ef1115ceb03f14b96419d914425ef8f32ce1aeb18b0df2e31c25d7ab8a6764f11e537718695b97e6b05416dc26dae1649b5e3b4c01a7f33802687e466c76a38f046b06f12239459f81987e9b"}) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vhci_hcd.13/usbmon/usbmon35/power/runtime_status\x00', 0xec2, 0x0)
fanotify_init$auto(0x5, 0x2000000000002) (async)
socket(0x26, 0x80805, 0x0) (async)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001a14af"], 0x14}}, 0x4000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r7 = getpid()
process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

4m13.196889537s ago: executing program 1 (id=143):
r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
r1 = io_uring_setup$auto(0x8, &(0x7f0000000040)={0x9, 0xa, 0x458, 0x40, 0x6, 0x6, <r2=>r0, [0xd, 0xfffffff8, 0x5], {0x2, 0x95f7, 0x4, 0x4, 0x3, 0xc7, 0x7, 0x9, 0xc7a6}, {0x0, 0x2, 0x3, 0x40, 0x81, 0x4, 0x8000, 0x5, 0x5}})
read$auto_nvmf_dev_fops_fabrics(r2, &(0x7f00000000c0)=""/31, 0x1f)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x404800, 0x0)
ioctl$auto_CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000140)={0x3, 0x3, 0x7ff, 0x9, 0x0, 0x4, "ea92ab1d95ef9ac1f9a1874226c466f5", 0x7f, 0x6, 0x8, 0x0, 0x6, 0x7, 0x6})
r3 = fcntl$auto(r0, 0x23, 0xffffffffffffffff)
ioctl$auto_TIOCMBIC2(r3, 0x5417, &(0x7f0000000180)="1ddb506af8ec5d909ff6238af59d8778bf82087edb1173de346eb8a272c167b9393e620d829776f505db63711af477f0fc225a3a3998cd0fa88e44d772be662e5718a77059f5b996101e57d0f410208c5e35fd9b1c9a0216883d612bd416f9a87471ec177010b6ac6d1f6ea42017c47642ce46d7518ab25b3e61fc0453fe7c46c53bbb07cc486e1ad089f6a36f475c57995cbdf452ef2223893a5cf9bcd607e30f6d0d99042a8946b2b9f66d2412d5f2431c3cd448c5")
pread64$auto(r1, &(0x7f0000000240)='\x00', 0x587, 0x0)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000002c0), r2)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4)
r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000400), r2)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, '/dev/mixer\x00'}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x42385e2229486b5c}, 0x54)
setsockopt$auto(r1, 0x4, 0x8dfed4b9, &(0x7f0000000500)='/dev/dvb/adapter0/frontend0\x00', 0xb92)
r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000540), 0x103a02, 0x0)
recvmmsg$auto(r6, &(0x7f00000007c0)={{&(0x7f0000000580)="2f70ff91003c3a8615d5d641fac545a59262eb537a867815a6500b83b86b102555a327757d117ad97fd0192d96e8b6e4ef136cfbcd978715e45d1e3f868845f4b8c278971fc53cb3302634e34ba579e96f9fb3f33319468028706d77f160f333ec6842a684c39131c830d51f241b46e646ad645f1062a2241b3161442f96ef8c20a72b03fbbc351277f439236944083c279da9db5529c419dba5a2c4df433ab493970f6ac33599a57d3dacc7f79b37b0cb4f12e526a06518aa7d37165364de046672edc717af88e7de1d0f08fc5f4698c8d639866575bbed9c31638ad5e74c21c548b054278c7b42b1671348514be052ae", 0xfffffffa, &(0x7f00000006c0)={&(0x7f0000000680)="ef5b165734c2b2", 0x1d}, 0x100, &(0x7f0000000700)="796cd22b651636e2fb86c1edb20b7bf113b1d08f73924bee587497e2d5421e6b64b69f2cc97b8ec19ebb8b21f9de57d1b57909106b15f4deaf401b129276ab687df21e7153f5cd20c29d34cde7752fbf9b2995201845ef38c345ac41c0b798afea4b6112f02bb2f8737e55b08a43582f3328199ca442b2aa6a0d2c47867505778aadb863ee31d7f5573152aaa11665c381d44840ecf4adb1c057ea5d998844fd8f086e55429c5dac8bb2cf1cef49f34a5231bf", 0x4, 0x7}, 0x4}, 0xfffffff9, 0x1ff, &(0x7f0000000800)={0x2, 0x40})
r7 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/tracing/trace_marker\x00', 0x400000, 0x0)
readv$auto(r7, &(0x7f0000000940)={&(0x7f0000000880)="4c89096f83be2f62e0277f6800cb4b6367dc8a1eaf8deeed03f79d610c69c8708be17f482f345c5f867f997a29e478d911c3decae83ef6be6893c64690a8658c49f5174827ce6960bc247fc57d098978ec9b2680046bdab33c6140f50d1f22e935d62e67dad97d831eae8d7ce2f598df2f932c1ac122867c0fa7905b9589cec865add0dd"}, 0x1)
r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000980), r0)
getsockopt$auto_SO_NETNS_COOKIE(r1, 0xff, 0x47, &(0x7f00000009c0)='/dev/ptp0\x00', &(0x7f0000000a00)=0xfffffff0)
r9 = ioctl$auto_TUNGETFILTER(r2, 0x801054db, &(0x7f0000000a80)={0xdc08, &(0x7f0000000a40)={0x9f5, 0x4, 0x4, @inferred=<r10=>r6}})
ioctl$auto_PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000ac0)=0x2)
r11 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000b40), r9)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000b80)={'tunl0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000bc0)={'pimreg0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c00)={'wg2\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c40)={'pimreg1\x00', <r15=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xe0, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r12}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r13}, @NET_SHAPER_A_HANDLE={0x24, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xffffffff}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r14}, @NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x401}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r15}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xfffffffb}, @NET_SHAPER_A_HANDLE_SCOPE={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40041}, 0x4000001)
sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0xa}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1800000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffff54e}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xfe34}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}]}, 0x4c}}, 0x4004000)
shmctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f00000010c0)={{0x68b, <r16=>0xee01, 0xee01, 0x5, 0xc, 0x2, 0x100}, 0x80000000, 0x5, 0x7, 0x3, @raw=0x7, @raw=0xc, 0x4, 0x0, &(0x7f0000000f40)="2a7da8e6a2f1d7c31248041f0886cc39d33b4643d284206b2f6309c7699cf2f2c1596f94294a6f184fb8bfe07de3c774ff7d20e6b280f18247e66e85b62e12f4841ab67dc4db895707e5732693875b70430ef0729bba0e1ead0796c241f9c517bbfc475cb3ef386ba9efefd0e915b983dbe89bb2e781f7c902bb37c7eae87df7e89bae3e98f4b617f6b16a7270bdd64c6b794d73a514f8b48ed0ec7e17eb83ec", &(0x7f0000001000)="2833334ddd6284db75d15c4e332d91665ae28611de77b6c2914cd2b56c8be918f75878141832760fd6a6aaae30a5c8070998da5cae019e4a0f18672914755c861b2c47ce94e63328d6eee22624d5eb047456d388dd73eb174c152d661965bfcc02aeacc0b696574db7b1a5fbd28fc101c159ed8b42e0faf6ed59ce4ab4c43d7cc5ac65b2"})
msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000001240)={{0x401, r16, 0x0, 0x357, 0x3, 0xff}, &(0x7f0000001180)=0x3, &(0x7f00000011c0)=0x80, 0x400, 0x5, 0x1f88, 0x4, 0x80000000, 0x8000, 0xc, 0x0, @raw=0x9})

4m13.098805304s ago: executing program 1 (id=144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readahead$auto(r0, 0xfffffffffffffffa, 0x1)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x60102, 0x0)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r2, 0x560f, r3)
semget$auto(0x4, 0xece3, 0x6)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
readahead$auto(r0, 0xfffffffffffffffa, 0x1) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x60102, 0x0) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
ioctl$auto(r2, 0x560f, r3) (async)
semget$auto(0x4, 0xece3, 0x6) (async)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)

4m12.962463407s ago: executing program 1 (id=145):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$auto_SO_BUSY_POLL(r0, 0x5, 0x2e, &(0x7f0000000000)='/dev/sequencer\x00', 0x6) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
socketpair$auto(0x1, 0x2, 0x5, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x7, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
ioctl$auto_TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=0x7f) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0xa, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce633", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x3, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10)
ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000140)={"c9f502b4e4360c9e29638b05adbbc7bb89ae052bf03d827261c4535aed295a93", 0xb7c3, 0x86, 0x9, 0x8, 0x6, <r4=>0xffffffffffffffff})
move_pages$auto(r4, 0x1000001, 0x0, 0x0, 0x0, 0x0) (async)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_fd=r3, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0xb, 0x0, 0x1, 0x4}}, 0x81)
madvise$auto(0x0, 0x20000a, 0x4) (async)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) (async)
prctl$auto(0x1, 0x400000001, 0x0, 0x1, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x8000000000000, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000000000008000)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x4, 0x7f, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0)

3m57.28734578s ago: executing program 32 (id=145):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$auto_SO_BUSY_POLL(r0, 0x5, 0x2e, &(0x7f0000000000)='/dev/sequencer\x00', 0x6) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
socketpair$auto(0x1, 0x2, 0x5, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x7, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
ioctl$auto_TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=0x7f) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0xa, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce633", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x3, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x10)
ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000140)={"c9f502b4e4360c9e29638b05adbbc7bb89ae052bf03d827261c4535aed295a93", 0xb7c3, 0x86, 0x9, 0x8, 0x6, <r4=>0xffffffffffffffff})
move_pages$auto(r4, 0x1000001, 0x0, 0x0, 0x0, 0x0) (async)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_fd=r3, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0xb, 0x0, 0x1, 0x4}}, 0x81)
madvise$auto(0x0, 0x20000a, 0x4) (async)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) (async)
prctl$auto(0x1, 0x400000001, 0x0, 0x1, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x8000000000000, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000000000008000)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
recvmmsg$auto(0x3, 0x0, 0x4, 0x7f, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0)

3m9.857691907s ago: executing program 0 (id=339):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f00000001c0)="5a155f7b3051c7f51c4ce6f77db9149075c7f01bb73a48d170d52f3aeed6229407a6be668f899d36b0b075752bb468d0df9a98a6ae65125106c71952e6e345575a920b8d74aaba")
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r1, 0x65, 0x8, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x4b, &(0x7f0000000040)={{0x3, 0x1}, {0xc, 0x4c}}, 0x0)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0xe, 0x1ab6, 0x101, 0x20, 0x1})
ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0)
r3 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x40)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/irq/3/effective_affinity_list\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x9)
socket(0x2, 0x80002, 0x73)
setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x211)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
timer_gettime$auto(0x0, 0x0)
ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)

3m8.590776951s ago: executing program 0 (id=342):
mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1a, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000)
socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw9\x00', 0x22183, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, <r2=>0x8}, 0x6f4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0x9, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x62, 0x8002001f, 0x79d, 0x6d3e, 0xc, 0x6, 0x9]}, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f0000000440)={"ee065c074b27898acdeaf1fb31c0f3fef573b70e6b5330933abefbbde2b5fd74a6f554fb40de54aaf7dc0e1a78bedc0c3d033619eaec5795bc06634437fe9fc3d4a68726a1be9a53063405b4918013b6cf727afca1cc0c4ea81344cf58094500746a1728e38d8f9a5f0793b73837355b8dca8dacc7a2389e59d398f432fc8abb", "6a16759a35caeedb28ef4b7a39444ccb5488152413ababd531a9b3fbadfd412748c205733636797cc3e73f321ad3caed5886ed0aa6947dbdc973ee11ab3715c84497f973a2844081795baf46d69ce13d3180b366ea962150e727e299de2d746ad6e61a00c1c12cd2208bb99ea592cecd33e7a807f234e392bb7afe59b26ede7a", 0x2})
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x2, 0x4)
timer_create$auto(0x8, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timer_create$auto(0xfffffffc, 0x0, 0x0)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pwr_btn\x00', 0x10b142, 0x0)
write$auto(r5, 0x0, 0x8)

3m7.351821791s ago: executing program 0 (id=346):
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x100, 0x0)
read$auto(0x3, 0x0, 0x80)
io_uring_register$auto(0x2, 0x1a, &(0x7f00000000c0), 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x1, 0x0)
io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r0, 0x400, 0x1)
fcntl$auto(0x3, 0x8, 0xffffffffffffffff)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$auto_SO_NO_CHECK(r1, 0x9, 0xb, &(0x7f0000000000)='-*/.,{\x00', &(0x7f0000000080)=0x9)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)

3m6.506928508s ago: executing program 0 (id=350):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
io_uring_setup$auto(0x800, 0x0) (async)
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x1e, 0x1, 0x0)
sendto$auto(0x3, 0x0, 0xfdef, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x20)

3m5.505802004s ago: executing program 0 (id=354):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200006, 0x19)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x18, 0xa, 0x1) (async)
socket(0xa, 0x2, 0x88) (async)
bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
fcntl$auto(r2, 0x402, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async)
r3 = socket(0x2b, 0x1, 0x1)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x84180, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) (async)
munmap$auto(0x8000, 0xffffffff)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
sendmmsg$auto(r1, &(0x7f0000000340)={{&(0x7f0000000280)="87aeb46710f5ad16262f090b6adab27a0e65d3e13c39af549a3fc20bc5fa5b50862404d1c8773bed51878ff043ba7bfd5152024c9d13e0ae0059902e84afb58942168ca4b61473b5928d1d198c260984dd57ff3562f065b488019e8d8e2389443f3de1ab4ffb03221ca0f31adf4e7c2a7742aef1daaa0c6533088d7e3b5b7b52e32f38da176f297680f2516a1d3a51fb9ef591fa79bc", 0x7, &(0x7f0000000040)={&(0x7f00000000c0)="3bae8cdb8603435e8d65298297fca80139858ea8a2a39e82770c430188f938796c623c24b53b03637f6dd92fd4f65ff7b0619451a6d1a1a4f95257190b5769", 0x4}, 0x7ff, &(0x7f0000000180)="19", 0x7e6, 0xfffffffd}}, 0xfffffff2, 0x8) (async)
ioctl$auto(r0, 0x901064aa, 0xffeffffffffffdff) (async)
fanotify_init$auto(0x3, 0x2)

3m3.465004133s ago: executing program 0 (id=362):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/profile\x00', 0x1, 0x0)
write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000000300)="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", 0xff6)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6f6801, 0x0)
ioctl$auto(r2, 0x400454ca, 0x38)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r1, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe)
socket(0xa, 0x3, 0x3c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)

2m48.25976324s ago: executing program 33 (id=362):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/profile\x00', 0x1, 0x0)
write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000000300)="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", 0xff6)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6f6801, 0x0)
ioctl$auto(r2, 0x400454ca, 0x38)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r1, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe)
socket(0xa, 0x3, 0x3c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0)
open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0)

2m43.980452718s ago: executing program 4 (id=413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, 0x0, 0x0)
r4 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@_si_pad}, 0x3d3, &(0x7f00000002c0)={{0xab4, 0xdb1}, {0x100, 0x1}, 0x5, 0x2, 0x4, 0xfff, 0x0, 0x619, 0x8, 0x2, 0x6, 0x6, 0x2, 0x7000000, 0xf, 0x4})
prctl$auto(0x0, 0x80000001, r4, 0x9, 0x80000000)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010025bd04000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r6 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r6, 0x114, 0x271e, 0xfffffffffffffffc, 0x0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="09edff00", @ANYRES16=r1, @ANYBLOB="030727bd7000fcd9df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) (async)
write$auto_ftrace_subsystem_filter_fops_trace_events(r3, 0x0, 0x0) (async)
waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@_si_pad}, 0x3d3, &(0x7f00000002c0)={{0xab4, 0xdb1}, {0x100, 0x1}, 0x5, 0x2, 0x4, 0xfff, 0x0, 0x619, 0x8, 0x2, 0x6, 0x6, 0x2, 0x7000000, 0xf, 0x4}) (async)
prctl$auto(0x0, 0x80000001, r4, 0x9, 0x80000000) (async)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r0) (async)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010025bd04000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async)
socket(0x15, 0x5, 0x0) (async)
getsockopt$auto(r6, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) (async)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="09edff00", @ANYRES16=r1, @ANYBLOB="030727bd7000fcd9df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async)

2m43.641044686s ago: executing program 4 (id=414):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="ed696e58cacaef96b602fc74c707d58970d2c5c4fc1c5cf7b7c4f30ff789f59142e70a423e", 0x25)
r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x520ec0, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0)
lseek$auto(0x3, 0x20000, 0x1)
read$auto_tracing_cpumask_fops_trace(r1, &(0x7f0000000180)=""/151, 0x97)

2m43.408445312s ago: executing program 4 (id=415):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0)
r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x68000, 0x0)
setresuid$auto(0x5, 0x7f, 0x200)
r3 = socket(0x10, 0x3, 0xa)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf257f00daca0700f700050b00000600b100050000003273aea7c83a12be5624dc6b738b4760029db439426e0e727609000000fa"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0)

2m42.867995781s ago: executing program 4 (id=417):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) (rerun: 32)
timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
unshare$auto(0x40000080)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x404e82, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x9, 0xff, &(0x7f00000002c0)='SEG6\x00', 0xeec) (async)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x4, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x7fff}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
gettid() (async)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
write$auto(0x3, 0x0, 0x100082)

2m41.129280083s ago: executing program 4 (id=423):
mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8085}, 0x8000)
sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841)

2m40.980866581s ago: executing program 4 (id=425):
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3da02fe1b59afa8df25030000000400080004000380120001008b097914854700000040000000000000102d8a6e0c001000", @ANYRES16=0x0, @ANYBLOB='@\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x2c820) (async)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0xfffffff8, 0x0, 0x2, 0x0, 0x9, 0xb55}, 0x6}, 0x40, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="0801"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) (async)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async)
write$auto(0x3, 0x0, 0xfdf3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xbfe}, 0x7}, 0x3, 0x0) (async)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x1b2102, 0x0)

2m25.486245571s ago: executing program 34 (id=425):
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3da02fe1b59afa8df25030000000400080004000380120001008b097914854700000040000000000000102d8a6e0c001000", @ANYRES16=0x0, @ANYBLOB='@\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x2c820) (async)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0xfffffff8, 0x0, 0x2, 0x0, 0x9, 0xb55}, 0x6}, 0x40, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="0801"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) (async)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) (async)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async)
write$auto(0x3, 0x0, 0xfdf3) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xbfe}, 0x7}, 0x3, 0x0) (async)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x1b2102, 0x0)

13.583459727s ago: executing program 6 (id=943):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x400009})
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
read$auto(0x3, 0x0, 0x1f40)
read$auto(0x3, 0x0, 0x1f40)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
socket(0x3, 0x5, 0x3)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0)
openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/250, 0xfa)

12.342327989s ago: executing program 6 (id=947):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
fchown$auto(0xffffffffffffffff, 0x0, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
setresgid$auto(0x81, 0x800000a0, 0x8)
setgroups$auto(0xc00000000, 0xfffffffffffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, 0x0, 0x6f3)
getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0)
setresuid$auto(0x0, 0x8, 0x8000)
shmget$auto(0x8, 0x10563, 0x568d1af2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd)
prctl$auto(0x1000000001c, 0x5, 0x0, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
fcntl$auto(r2, 0x400, 0x1)

9.906632613s ago: executing program 5 (id=950):
unshare$auto(0x40000080)
r0 = prctl$auto_SECCOMP_MODE_FILTER(0x4786, 0x2, 0xffffffffffffffff, 0x80000001, 0x81)
mmap$auto(0x0, 0x40000b, 0x80de, 0x9b72, r0, 0x800008000)
socket(0xa, 0x801, 0x84)
prctl$auto_PR_SET_SECCOMP(0x16, 0x7, 0xffffffffffffffff, 0xbc, 0xfff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x40000, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x6, 0x4008)
r2 = socket(0x29, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10012b5a071d"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20044000)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r2, 0x89f0, 0x24)

8.888691913s ago: executing program 6 (id=955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0)
ioctl$auto(r2, 0x9210640c, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40005, 0x4, 0x9b72, r0, 0x28000)
prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
msgrcv$auto(0x0, 0x0, 0x3, 0x1, 0xf1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x5609, r4)
msgrcv$auto(0x3, &(0x7f0000000080)={0x1, 0x5}, 0x8, 0x8, 0x848)

8.57588767s ago: executing program 5 (id=956):
r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd6/hctx0/tags_bitmap\x00', 0x60000, 0x0)
socket(0x10, 0x4, 0xffffffc0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0)
sendfile$auto(r0, r0, &(0x7f00000000c0)=0x9, 0x1)
write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xc7\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcfn\x15\xc5D\xcct\xff\x84\xd2*\xf8=\x1b\x90Z\xc0\xd72\xbc\x14R\x80\x00\x1b\xca\xbdV\xb0)\x1b\xa1\xbaC\x91\xc8\x16\xc9\x1e\xb2\xd7\xb7\x88g\x98\x7f\x95\xb2-F\xf7\xb4y\x19\x8e\xd2}uy\xfa\x1c\x82h\x01\x136\xfb\xef\x93\xdc\x1a@\x91bD\xcexS\x82C\xf9\xd2Y\xe2\x18o\xd8\xdc\xc3\xac\xb2\x1d\xebR\xa9\x98B\x19\x9c\x1e\x11\x91\x17\xce\xc0\xb47{\xc73\xeb\xdf7\x03\xf22\xdf\xa9\x90P\xfd\xaf\xed\xa3B\xec\xab\x8b\xdb\xbaP\x99;\xd6\x98x\xbbF\xb2\xd7\xc4g\xdc>\xe7>3\xd8\xbe\x8a2\xf283\xd6\xbd\x86Hs{#\x9d\x05\x05\xf8\x8d\x873W\xd9\xde\x12\x01e\x96\fVT\xefWSs\xda\xe33\xa3\xbc\xa4\x8b\xf7\\h\xaa_Q\x9a\xe3Z;\xa7\xe2Tzx\xa7]Dh5\xad(\xf8\xdb\xe6\xb6\x12\x91\xfa\xe2\xea`\x92\xce\xaf>', 0x100000a3d7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r3)
mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6)
r4 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3)
mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000)

7.795203675s ago: executing program 6 (id=959):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
sendfile$auto(r1, r0, 0x0, 0xa15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
mmap$auto(0x0, 0x800, 0xaa, 0xeb1, 0xffffffffffffffff, 0xfff)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae78, r6)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
msgctl$auto_MSG_INFO(0x7, 0xc, 0x0)
lstat$auto(0x0, 0x0)
close_range$auto(r3, r2, 0x4)
socket(0x22, 0x2, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000000), 0x40003ff, 0x0, 0x9, 0x0, 0x3ff, 0x24000001}, 0xb7}, 0x5, 0x2)
mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0)

6.712471448s ago: executing program 2 (id=961):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x3, 0x3, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r3, 0x5, 0x0)
getdents$auto(r3, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
sendfile$auto(r5, r4, 0x0, 0x1000202)
ioctl$auto(0x3, 0x541b, 0x38)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b3fe}, 0x80)

6.453122128s ago: executing program 5 (id=962):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22882, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r1, 0x0, 0x20)
writev$auto(r0, 0x0, 0x3)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)

6.083389037s ago: executing program 5 (id=963):
io_uring_setup$auto(0xffffffff, &(0x7f0000000040)={0x4, 0x4, 0x5, 0xa8000000, 0x100, 0x78cef96b, 0xffffffffffffffff, [0x10000, 0xffff], {0x4, 0xb2, 0x7, 0x5, 0x0, 0x5, 0x1, 0x8, 0x7}, {0x3c8, 0x0, 0x0, 0x8, 0x4, 0xf9dc, 0x1, 0x4, 0x8}})
ioctl$auto(0xffffffffffffffff, 0x40046207, 0x9)
writev$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000002ac0), 0x1ff}, 0x4)
r0 = socket(0x2, 0x1, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000480)={0x80000000, <r1=>0xee00, 0x5, 0xd032})
r2 = setfsgid$auto(r1)
fchown$auto(0xffffffffffffffff, 0xee00, r2)
fsconfig$auto(0xffffffffffffffff, 0x6, &(0x7f0000000080)=',\xd6{/@){--\xd4\x00', &(0x7f0000000380)="ed866ad7625148e6fb7003dd923e63ba59443a3c4d8ec4985e3531c2dfb7145166453aa4e0ec035225fc27a72a14d2d8ab4954fa5e4258cd2bada8a685a08639a60b1acff51d6be788231f7c975aac4bfae7a4586644a5babedf816e9f4777e2b4d68236c6fe1b730575cdb7ffbde3b38743a6e8a92392fb684fdfa902490837c2dc4b134394b2898b0125b91bc355a794c94fdb63a0e450818598", r2)
keyctl$auto(0x4, 0x0, 0x0, r2, 0xfffffffffffffff9)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg1\x00'})
unlink$auto(&(0x7f0000000380)='./file0\x00')
mmap$auto(0xf000, 0x1, 0x3ff, 0x12, 0xffffffffffffffff, 0x0)
read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec18\x00', 0x0, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0)
socketpair$auto(0x1, 0x5, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
write$auto(0x6, 0x0, 0x100000001)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
shmdt$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
shmdt$auto(&(0x7f0000000000)='\x00')

5.877955667s ago: executing program 3 (id=964):
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
memfd_create$auto(0x0, 0x5)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec5)
r0 = socket(0x10, 0x3, 0x6)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f32bbd7000fbdbdf251c0000001400040074756e6c300000000000000000000000082c89a74112e76293844160c8d5097bb2a526d431c2178dc04efd241f509f11c29f5472d0240d524c0bdebc2fad605f5709aa06a123d026e39b24ab7b9986a2b453246e81647983568099c2bf847cbd33d65c75f0d0"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0)

5.729505489s ago: executing program 3 (id=965):
unshare$auto(0x40000080)
r0 = prctl$auto_SECCOMP_MODE_FILTER(0x4786, 0x2, 0xffffffffffffffff, 0x80000001, 0x81)
mmap$auto(0x0, 0x40000b, 0x80de, 0x9b72, r0, 0x800008000)
socket(0xa, 0x801, 0x84)
prctl$auto_PR_SET_SECCOMP(0x16, 0x7, 0xffffffffffffffff, 0xbc, 0xfff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x40000, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x6, 0x4008)
r2 = socket(0x29, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10012b5a071d"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20044000)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r2, 0x89f0, 0x24)

5.039102457s ago: executing program 5 (id=966):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
bpf$auto(0xd, 0x0, 0x6f5)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r4, &(0x7f0000000080)={{&(0x7f0000000280), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x2}, 0x8}, 0xfffffffe, 0x100)
pivot_root$auto(0x0, 0x0)
nanosleep$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
madvise$auto(0x8001, 0x9, 0x138)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(r5, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
connect$auto(0x3, 0x0, 0x10)

5.038450286s ago: executing program 2 (id=967):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x1, 0x84)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
madvise$auto(0x5, 0xd, 0x7)
close_range$auto(r0, 0xffffffffffffffff, 0x3)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0)
ioctl$auto(0x3, 0xc0485619, 0x38)
r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r1, 0x5509, 0x0)
prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x5, 0x0, 0x4, 0x7f)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000010, 0xfffffffffffffffa, 0x8000)
r2 = getpgrp(0x0)
prctl$auto(0x3, 0x2, r2, 0x6, 0x200000d)
r3 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0)
socket(0x1e, 0x5, 0x0)
shutdown$auto(0x200000003, 0x2)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
readv$auto(r3, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
ioctl$auto_BLKTRACESTART(r4, 0x1274, 0x0)

4.326917157s ago: executing program 6 (id=968):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
read$auto(0x3, 0x0, 0x1f40)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto(r1, 0x5408, r1)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
read$auto_proc_single_file_operations_base(r3, &(0x7f00000000c0)=""/41, 0x29)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
ioctl$auto_PPPIOCGIDLE64(r4, 0x8010743f, 0x0)
fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
ioperm$auto(0x7, 0x6, 0x2)
add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r5 = socket(0xa, 0x2, 0x3a)
bind$auto(r5, &(0x7f0000000080)=@isdn={0x22, 0x5d, 0x5, 0x9, 0x4}, 0x101)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x808000)

4.298722543s ago: executing program 3 (id=969):
r0 = prctl$auto(0x3a, 0x1, 0x0, 0x2, 0x203)
r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
write$auto_mousedev_fops_mousedev(r1, &(0x7f0000000400)="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", 0x103)
bind$auto(r0, 0x0, 0x7fffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x0, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x3, 0x2, 0x9, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000001, 0x9d8d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5f, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
memfd_create$auto(0x0, 0xb)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'})
rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}})
r4 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r4, 0x0, 0x5, 0x100)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r5, 0xffffffffffffffff, 0x9)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)={0x1c, r6, 0xb81, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_TAIL={0x5, 0xf, "9a"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
sendmsg$auto_NL80211_CMD_START_NAN(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48004)
clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff)
openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x40000, 0x0)

4.276687183s ago: executing program 2 (id=970):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(r0, 0xab09, r0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebf, 0x401, 0x5)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mprotect$auto(0x200000000003, 0x80611e, 0x2)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000040)={0x0, 0xffff8000, 0x84})
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
semctl$auto(0x8, 0x806, 0x13, 0x46)
select$auto(0x13, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x7, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x1, 0x8]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
vmsplice$auto(0xffffffffffffffff, 0x0, 0x2, 0x9a6)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa)
socket(0x18, 0xa, 0x1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/bInterfaceNumber\x00', 0x4201, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)="98", 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)

3.147602556s ago: executing program 2 (id=971):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x140000000)
unshare$auto(0x40000080)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/erspan0/locktime\x00', 0x82, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0)
write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
gettid()
kexec_load$auto(0x8, 0x4, &(0x7f0000000040)={@buf=&(0x7f0000000180)="c6ace5f220944285c3aea9e2307f37af4d86ad4b7edbd6327b65c601dba0577ba1a41d4255b2c4dafa043c64d18197046a4d3cf51a26c5a9f060220ec6b50e98c8b92a6e766dda14910e42686d615af2c75bf4959e8a80a344b24437c9429939e854cc83b26371440bcd78d718d12b4c103b6117ae84de79c84d0eb68246b91cfdc030e1ad2d78ec7324213661807a5c5a970ddb9f7498f278ee604e2e342563da", 0x2aa7, 0x6c0000c002, 0xc000}, 0x4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x420440, 0x0)
openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x450003, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
writev$auto(r4, 0x0, 0x7fff)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto_tun_fops_tun(0xffffffffffffffff, 0x0, 0x0)
madvise$auto(0x0, 0x600009, 0x19)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2002, 0x0)
ioctl$auto(r5, 0x4b4e, r5)
fanotify_init$auto(0x0, 0x5)
sysfs$auto(0x2, 0x11, 0x0)

3.108835411s ago: executing program 5 (id=972):
r0 = socket(0x1b, 0x3, 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000680)={0x7, 0x20000})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r3, 0x29, 0x3e, 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0xf728, 0x0, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x0)
r5 = socket(0x5, 0xa, 0x2000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)
recvmmsg$auto(r5, &(0x7f0000000280)={{0x0, 0x7, 0x0, 0x0, 0x0, 0x34, 0x50}}, 0x3, 0x8, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044854}, 0x8410)

2.97074556s ago: executing program 3 (id=973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ima/parameters/ahash_bufsize\x00', 0x62, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)="328017bc", 0x4)
lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x7a, 0x1, 0xfffffffffffffff9, 0x8, 0x0, <r3=>0xee01, 0x0, 0x1ff, 0xffff, 0x1ff, 0x7, 0xff, 0xb6ae, 0xfffffffffffffffc, 0x6, 0x7ff, 0x4})
stat$auto(0x0, &(0x7f00000001c0)={0x101, 0x9, 0x4, 0xffffffff, 0xee01, r3, 0x0, 0x3, 0x800000000000, 0x9, 0x7, 0x0, 0x1, 0x5, 0x8000, 0x4, 0x7})
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400001, 0x103)
futimesat$auto(r5, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x7, 0x4})
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11)
r6 = socket(0x22, 0x2, 0x4)
write$auto(r6, 0x0, 0x2fb)
sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x800)

2.836989976s ago: executing program 3 (id=974):
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0xa, 0x1, 0x100)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8, 0x8fd6, 0x2000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x1, 0x0, 0x7, 0x1, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b41, 0x7)
r5 = clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001)
r6 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e")
r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x42080, 0x0)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800e0000800000008", @ANYRES8=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES8=r7, @ANYBLOB="000000780106806b01f280130023002f70726f632f73656c662f6d656d000008c9d451718186ef0f145a4d958b53cebcfe438680acf0147b604b417d325fe3c850cac7fb32489905cfaf0bd1a2c2612373e78432623f1012ed9d27cee61cf77a1e0360f73a9f793fb5fe4485a9cbae3ce1e7ff1d23f0d0aa97e1e6bf7cf53bf89a4339b0cb4a301a26c185a36ab00c6155c008b87c8a1e264cc7375eabb29a27157cbe58ba8de303d6eed371099086ef220fc44de4b45c935a9f7a308b558d0b381728de27b7a1e1df774970d94aa4aa857bcb447f09610b88a7a3c48e409bc031922afe35ff366378251efdedf396f807b9db4213fe75cf1aede0475a1c1abcd0c843fd08003900", @ANYRES32=0x0, @ANYBLOB="0400558004001680d126208daca71b0f3108d0e68081c9e015a55f8e8ef40efa3fb842b9d1f72a8ffcc9b8b94b1b4706d039f84bc23eebaf13099930336cbe34c45fe840ea4b28cbe31dafbfd42a923270c38f07478f93e39607039e11d4dfd0fdf670df676c0008001b00", @ANYRES32=r5, @ANYBLOB="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"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880)

1.421198667s ago: executing program 3 (id=975):
read$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)=""/216, 0xd8)
r0 = prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
getrandom$auto(&(0x7f0000000280)='\xff\xff', 0x8000000000000001, 0x1)
msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7ffffffd, 0x7fff, 0x5}, &(0x7f0000000000)=0x6, 0x0, 0x3, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x7ff, 0x2, @raw=0x8})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
migrate_pages$auto(0x0, 0x99, 0x0, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000380)="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")
r3 = socket(0xa, 0x1, 0x84)
r4 = getsockopt$auto(r3, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9b)
r5 = socket(0x2a, 0x2, 0xffffffff)
connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55)
getpeername$auto(r5, &(0x7f0000000000)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=0x4)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
read$auto(r2, 0x0, 0x1000)
mmap$auto(0x0, 0x80, 0x8000, 0x9b75, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000340)={0x6, 0xff, 0x8, 0xfb8, 0x6, 0x5, &(0x7f0000001a40)="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"})
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot/mode\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)="34ae", 0x2)

461.543928ms ago: executing program 2 (id=976):
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0)
write$auto(r1, 0x0, 0x0)
pwrite64$auto(r1, &(0x7f0000002500)=']\x00', 0x3, 0xd)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x44)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = memfd_secret$auto(0x0)
mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd2\x00', 0x8001, 0x0)
ioctl$auto_BLKROTATIONAL(r4, 0x127e, 0x0)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r6=>0x0})
write$auto_proc_mem_operations_base(r3, &(0x7f0000000280)="d96a6b73396593627c3c1d554bf5c8fdab530940fc1e37c64edb233bb94e5864a5bca7326bd6c0a21b89943a520b7f5016229f63996400cd7aa6875dc1b473", 0x3f)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GET2(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8001)
mmap$auto(0x0, 0x810004, 0xf78, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x20499d, 0x9)
socket(0x15, 0x5, 0x0)

282.795441ms ago: executing program 2 (id=977):
msgctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000280)={{0x12a, <r0=>0x0, 0xee00, 0x6, 0xfa4f, 0xf, 0x101}, &(0x7f0000000040)=0x25, &(0x7f0000000100)=0xb, 0xc650, 0x8, 0x7c, 0x3, 0x10, 0x0, 0x7, 0x3, @raw=0x4a08, @inferred=0xffffffffffffffff})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timer_create$auto(0x3, 0x0, 0x0)
madvise$auto(0x7fffffff, 0xccb, 0x7)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
keyctl$auto(0xf, 0x400, r0, 0x100, 0x6)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={0x12ac, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x126f, 0x3, 0x0, 0x1, [@nested={0x122, 0xd7, 0x0, 0x1, [@nested={0x4, 0x13}, @nested={0x4, 0x1122}, @generic="44390390290f75271fb21b8b795e6a10f86c963d59631b886c835f706f1e1091fb43dd53babdbe6ad961ad5a4fe7342c9166cb074599dbec51a2e79078592fb860017ef6f20158dc8b31bd1d539620b38f45e1c24db9d35a0793d084918c2b51db1475357944b8fca4538c7ee53b06f4f7eb", @generic="0d6b2da9e82cc2b88008de5303ec46ad5948293003dd67406ae90e989488", @typed={0x4, 0x66}, @nested={0x4, 0x27}, @typed={0x74, 0x109, 0x0, 0x0, @binary="477461a7c51c32a34a0ea379ee4705427bf4a47a423b9192addbb32310c14391064cf039471dc0de78a0daf1d3a465d55d9ff9f1a94380073c8c9d215e19f048dc2dcd217941221d1a6b046c27529aec254ed6781195e3362eb08de3f0ad0c90177e141ef3183318e74eb7b677f6b3d9"}, @generic, @typed={0x8, 0xaf, 0x0, 0x0, @fd=r1}, @generic='$8']}, @generic="87833b7571605252a505ecadddf041812700a249873eb47dfdfdf6d4187b0d44360f671f9ca0b219ba4f2df2cef45421323f72aaf2e1b56f4506e6b731d867529e61d9608022d281a3d4b3820af668d3693b49f5f4dd6ea06e7d6342a478cdaf8ae78ab73a6b55d1a6778db71a4ee1abb3d59c927fc649798a2324270f8e5025e355de1c9f290ce1bc9170c53e5c7a7a742f93c92ea8a9c9866fdb5a0eea8abd43eee8510f289bfc18dbb60829309abf10c343746a5e1d12b2e09f", @generic="470678969e6bb2417d5e3ba4c5515f8cf312150af49aa3d241b4cc7d69996cf249df817a885baed31c8de44cf9634ebfe9a259bda889f53f0037b5ac71df69483b0f01d29ca25e6600d8e19396993a642bb92dccbc3e059a6fc77ac4b80838564fab921f6c3886e0a2cf056a815545879a1dd532524573575d708393b1db4d1edb894ec3", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r0}, @generic="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"]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12ac}, 0x1, 0x0, 0x0, 0x6404c800}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), r2)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x171742, 0x0)
setreuid$auto(r0, r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4, 0x0)
r7 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r7, 0x0, 0xe)

0s ago: executing program 6 (id=978):
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0xa, 0x1, 0x100)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8, 0x8fd6, 0x2000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x1, 0x0, 0x7, 0x1, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b41, 0x7)
seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e")

kernel console output (not intermixed with test programs):






	

	
		
	






		



	
		

	
		
	


	



			


















	











	

	

	



	

	

	

	

	




	

	

	

	
		

	
		




	

	

	



	





	
	

		

		
	
	



	




	


	
	

	
		



		


		

	
	











	









	





	






		






	

	
	
	
	



			
			
	
	
		



	


	








	
	




	
	
	

			
			
	

		
		
		


	







	



	
	
	

			
			
	

		
		
		


	







	


	
	

			
		
	
	
	
	

			
			
		






			
		
	
	
	
	

			
			
		






			
		
	
	
	
	

			
			
		






			
		
	
	
	
	

			
			
		















	
	
	


	
	
	
	
	
	
	
	
	
	
	



	












	



	
	
	
	
	
	
	
	
	
	
	

	





	

	
		






	





	





	





	






	











	









			


		


		



		



	




	


			

			

	
			

			

	

	
		
	

	
		

	
		

	
		

		
		

		
	
	

		
		

		
	
	


	
		



	

	


	


	





	

	









	

	




			
	
			
	
			
	
			
	


				


			


				


			

	
				
	
	



	
		
	
	

	

	

	
		
				
	

	
		
	

	
		

	


	
	

		
	
	
	
	
	
	
	
		
	


	



			








	





	












	


	











		

		
		

		


		


















	










	





	






		







	

	
	

	
		
	

	
		

		
	




	
	
		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	

		

	




	



	
	






		









	



	
	






			
	

		

	





		



	
		

	
	

	
		
		
		


	
			
	

	
				
		
		








		









	



	
	






			
	

		

	





		



	
		

	

	

	
		






	
			


			

	
	
			

			

			

	




	
				

	
		

	
		

		
		

		
	
	

		
		

		
	
	



		
		
	

	
		

	


	
	

		
	
		
	


	



			








	


	




	



	





	

	
	

	

		



		

		

		
		
			
	


	
	

	



	


	
	






	







	







		









	
	

	
		



	

	

		

		
		
		

	





	


	





	

	









	

	




			
	
			
	
			
	
			
	

	
		




				


			


				


			
						
	
						
	
						
	

		

		
		
	
	

	
	
						
	
	

	

	
	
		
		


	

	

	
	
		
		





			

	
	
	

			

	
	
	

			



	
	

	
	

	
				
	
	



	
			

	

	





	

	









		









	

	









		






	


	

	

	
	

	
	
				
		
	



				
					
		
			
	
		

		


	

		


	


	

	

	



	
	

	
	
	

	
		

				



				




	

				




	




	
				
	




	
				
	
				
	
		
	
				
	
		

syzkaller
syzkaller login: [  176.858321][ T7609] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  179.788917][ T7677] kexec: Could not allocate control_code_buffer
[  182.296530][   T30] audit: type=1800 audit(4294967355.358:8): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.303" name="discovery_nqn" dev="configfs" ino=15797 res=0 errno=0
[  182.564913][ T7762] FAULT_INJECTION: forcing a failure.
[  182.564913][ T7762] name failslab, interval 1, probability 0, space 0, times 0
[  182.666575][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.4.302 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  182.666620][ T7762] Tainted: [U]=USER
[  182.666629][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.666648][ T7762] Call Trace:
[  182.666657][ T7762]  <TASK>
[  182.666670][ T7762]  dump_stack_lvl+0x16c/0x1f0
[  182.666703][ T7762]  should_fail_ex+0x512/0x640
[  182.666731][ T7762]  ? __kvmalloc_node_noprof+0x124/0x620
[  182.666761][ T7762]  should_failslab+0xc2/0x120
[  182.666792][ T7762]  __kvmalloc_node_noprof+0x137/0x620
[  182.666819][ T7762]  ? __pfx___mutex_lock+0x10/0x10
[  182.666846][ T7762]  ? traverse.part.0.constprop.0+0x392/0x640
[  182.666893][ T7762]  ? traverse.part.0.constprop.0+0x392/0x640
[  182.666930][ T7762]  traverse.part.0.constprop.0+0x392/0x640
[  182.666982][ T7762]  seq_read_iter+0x932/0x12c0
[  182.667030][ T7762]  ? aa_file_perm+0x4d6/0xfb0
[  182.667066][ T7762]  seq_read+0x39e/0x4e0
[  182.667106][ T7762]  ? __pfx_seq_read+0x10/0x10
[  182.667174][ T7762]  full_proxy_read+0x13c/0x200
[  182.667207][ T7762]  ? __pfx_full_proxy_read+0x10/0x10
[  182.667241][ T7762]  vfs_read+0x1e4/0xc60
[  182.667274][ T7762]  ? __pfx_vfs_read+0x10/0x10
[  182.667297][ T7762]  ? find_held_lock+0x2b/0x80
[  182.667326][ T7762]  ? __fget_files+0x204/0x3c0
[  182.667356][ T7762]  ? __fget_files+0x20e/0x3c0
[  182.667392][ T7762]  __x64_sys_pread64+0x1eb/0x250
[  182.667420][ T7762]  ? __pfx___x64_sys_pread64+0x10/0x10
[  182.667460][ T7762]  do_syscall_64+0xcd/0x490
[  182.667491][ T7762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.667518][ T7762] RIP: 0033:0x7f4e4078e9a9
[  182.667539][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.667564][ T7762] RSP: 002b:00007f4e41638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  182.667589][ T7762] RAX: ffffffffffffffda RBX: 00007f4e409b5fa0 RCX: 00007f4e4078e9a9
[  182.667607][ T7762] RDX: 00000000000007ff RSI: 0000000000000000 RDI: 0000000000000006
[  182.667622][ T7762] RBP: 00007f4e40810d69 R08: 0000000000000000 R09: 0000000000000000
[  182.667638][ T7762] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000
[  182.667654][ T7762] R13: 0000000000000000 R14: 00007f4e409b5fa0 R15: 00007ffcc2581b28
[  182.667690][ T7762]  </TASK>
[  183.174484][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[  183.188912][ T7791] netlink: 98 bytes leftover after parsing attributes in process `syz.2.306'.
[  184.932079][ T7831] netlink: 186 bytes leftover after parsing attributes in process `syz.4.312'.
[  185.719242][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.750119][ T7858] FAULT_INJECTION: forcing a failure.
[  185.750119][ T7858] name failslab, interval 1, probability 0, space 0, times 0
[  185.764243][ T7860] random: crng reseeded on system resumption
[  185.863140][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.3.318 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  185.863184][ T7858] Tainted: [U]=USER
[  185.863192][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  185.863206][ T7858] Call Trace:
[  185.863214][ T7858]  <TASK>
[  185.863223][ T7858]  dump_stack_lvl+0x16c/0x1f0
[  185.863255][ T7858]  should_fail_ex+0x512/0x640
[  185.863281][ T7858]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  185.863311][ T7858]  should_failslab+0xc2/0x120
[  185.863340][ T7858]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  185.863366][ T7858]  ? security_file_alloc+0x34/0x2b0
[  185.863407][ T7858]  security_file_alloc+0x34/0x2b0
[  185.863444][ T7858]  init_file+0x93/0x4c0
[  185.863472][ T7858]  alloc_empty_file+0x73/0x1e0
[  185.863503][ T7858]  alloc_file_pseudo+0x13a/0x230
[  185.863536][ T7858]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  185.863577][ T7858]  ioctx_alloc+0x5ab/0x2120
[  185.863624][ T7858]  ? find_held_lock+0x2b/0x80
[  185.863649][ T7858]  ? __pfx_ioctx_alloc+0x10/0x10
[  185.863680][ T7858]  ? __might_fault+0x13b/0x190
[  185.863720][ T7858]  __x64_sys_io_setup+0xc9/0x210
[  185.863760][ T7858]  do_syscall_64+0xcd/0x490
[  185.863789][ T7858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.863814][ T7858] RIP: 0033:0x7fc7a218e9a9
[  185.863834][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.863855][ T7858] RSP: 002b:00007fc7a302d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  185.863878][ T7858] RAX: ffffffffffffffda RBX: 00007fc7a23b5fa0 RCX: 00007fc7a218e9a9
[  185.863894][ T7858] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff
[  185.863909][ T7858] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  185.863925][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.863940][ T7858] R13: 0000000000000000 R14: 00007fc7a23b5fa0 R15: 00007ffea744af98
[  185.863975][ T7858]  </TASK>
[  185.865590][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.819724][ T7901] FAULT_INJECTION: forcing a failure.
[  187.819724][ T7901] name failslab, interval 1, probability 0, space 0, times 0
[  187.893645][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.3.322 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  187.893688][ T7901] Tainted: [U]=USER
[  187.893697][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.893712][ T7901] Call Trace:
[  187.893721][ T7901]  <TASK>
[  187.893730][ T7901]  dump_stack_lvl+0x16c/0x1f0
[  187.893760][ T7901]  should_fail_ex+0x512/0x640
[  187.893785][ T7901]  ? __kmalloc_noprof+0xbf/0x510
[  187.893810][ T7901]  ? lsm_blob_alloc+0x68/0x90
[  187.893836][ T7901]  should_failslab+0xc2/0x120
[  187.893865][ T7901]  __kmalloc_noprof+0xd2/0x510
[  187.893897][ T7901]  lsm_blob_alloc+0x68/0x90
[  187.893923][ T7901]  security_sk_alloc+0x30/0x270
[  187.893956][ T7901]  sk_prot_alloc+0xfb/0x2a0
[  187.893989][ T7901]  sk_alloc+0x36/0xc20
[  187.894015][ T7901]  inet6_create+0x381/0x12b0
[  187.894047][ T7901]  ? inet6_create+0x7f/0x12b0
[  187.894078][ T7901]  __sock_create+0x338/0x8d0
[  187.894120][ T7901]  smc_create_clcsk+0x37/0xd0
[  187.894157][ T7901]  ? __pfx_smc_inet_init_sock+0x10/0x10
[  187.894186][ T7901]  inet6_create+0xb30/0x12b0
[  187.894214][ T7901]  ? inet6_create+0x7f/0x12b0
[  187.894244][ T7901]  __sock_create+0x338/0x8d0
[  187.894281][ T7901]  __sys_socket+0x14d/0x260
[  187.894317][ T7901]  ? __pfx___sys_socket+0x10/0x10
[  187.894353][ T7901]  ? xfd_validate_state+0x61/0x180
[  187.894387][ T7901]  ? __pfx_do_writev+0x10/0x10
[  187.894445][ T7901]  __x64_sys_socket+0x72/0xb0
[  187.894480][ T7901]  ? lockdep_hardirqs_on+0x7c/0x110
[  187.894508][ T7901]  do_syscall_64+0xcd/0x490
[  187.894540][ T7901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.894567][ T7901] RIP: 0033:0x7fc7a218e9a9
[  187.894588][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.894615][ T7901] RSP: 002b:00007fc7a300c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  187.894641][ T7901] RAX: ffffffffffffffda RBX: 00007fc7a23b6080 RCX: 00007fc7a218e9a9
[  187.894660][ T7901] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[  187.894677][ T7901] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  187.894694][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.894711][ T7901] R13: 0000000000000000 R14: 00007fc7a23b6080 R15: 00007ffea744af98
[  187.894748][ T7901]  </TASK>
[  188.233331][ T7906] Unable to find swap-space signature
[  188.972900][ T7917] netlink: 342 bytes leftover after parsing attributes in process `syz.3.325'.
[  189.166874][ T7921] vhci_hcd: invalid port number 16
[  189.195101][ T7921] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  190.310091][ T7945] netlink: 342 bytes leftover after parsing attributes in process `syz.2.330'.
[  192.578251][ T8013] FAULT_INJECTION: forcing a failure.
[  192.578251][ T8013] name failslab, interval 1, probability 0, space 0, times 0
[  192.644192][ T8013] CPU: 0 UID: 0 PID: 8013 Comm: syz.3.340 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  192.644238][ T8013] Tainted: [U]=USER
[  192.644247][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.644262][ T8013] Call Trace:
[  192.644270][ T8013]  <TASK>
[  192.644281][ T8013]  dump_stack_lvl+0x16c/0x1f0
[  192.644313][ T8013]  should_fail_ex+0x512/0x640
[  192.644340][ T8013]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  192.644386][ T8013]  should_failslab+0xc2/0x120
[  192.644423][ T8013]  __kmalloc_cache_noprof+0x6a/0x3e0
[  192.644464][ T8013]  ? mon_bin_open+0x1a8/0x4a0
[  192.644502][ T8013]  mon_bin_open+0x1a8/0x4a0
[  192.644535][ T8013]  ? __pfx_mon_bin_open+0x10/0x10
[  192.644567][ T8013]  chrdev_open+0x231/0x6a0
[  192.644596][ T8013]  ? __pfx_apparmor_file_open+0x10/0x10
[  192.644634][ T8013]  ? __pfx_chrdev_open+0x10/0x10
[  192.644666][ T8013]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  192.644721][ T8013]  do_dentry_open+0x744/0x1c10
[  192.644750][ T8013]  ? __pfx_chrdev_open+0x10/0x10
[  192.644785][ T8013]  vfs_open+0x82/0x3f0
[  192.644824][ T8013]  path_openat+0x1de4/0x2cb0
[  192.644863][ T8013]  ? __pfx_path_openat+0x10/0x10
[  192.644892][ T8013]  ? __lock_acquire+0xb8a/0x1c90
[  192.644931][ T8013]  do_filp_open+0x20b/0x470
[  192.644958][ T8013]  ? __pfx_do_filp_open+0x10/0x10
[  192.645013][ T8013]  ? alloc_fd+0x471/0x7d0
[  192.645063][ T8013]  do_sys_openat2+0x11b/0x1d0
[  192.645098][ T8013]  ? __pfx_do_sys_openat2+0x10/0x10
[  192.645147][ T8013]  __x64_sys_openat+0x174/0x210
[  192.645182][ T8013]  ? __pfx___x64_sys_openat+0x10/0x10
[  192.645233][ T8013]  do_syscall_64+0xcd/0x490
[  192.645264][ T8013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.645291][ T8013] RIP: 0033:0x7fc7a218e9a9
[  192.645313][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.645338][ T8013] RSP: 002b:00007fc7a302d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  192.645363][ T8013] RAX: ffffffffffffffda RBX: 00007fc7a23b5fa0 RCX: 00007fc7a218e9a9
[  192.645384][ T8013] RDX: 0000000000000400 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  192.645401][ T8013] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  192.645417][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.645433][ T8013] R13: 0000000000000000 R14: 00007fc7a23b5fa0 R15: 00007ffea744af98
[  192.645471][ T8013]  </TASK>
[  193.976755][ T8031] 0x000000000001-0x000000020000 : ""
[  194.166907][ T8031] ftl_cs: FTL header corrupt!
[  194.210338][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.216865][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  195.120955][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.213234][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.235981][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.245333][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.286211][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.295470][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.382555][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.462833][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.496043][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  195.551951][ T8067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.348'.
[  199.784851][ T8195] cougar: G6 mapped to space
[  204.381342][ T8271] hub 8-0:1.0: USB hub found
[  204.397733][ T8271] hub 8-0:1.0: 1 port detected
[  208.019351][ T8346] __nla_validate_parse: 56 callbacks suppressed
[  208.019371][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'.
[  208.051146][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.067979][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.084134][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.095085][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.657799][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'.
[  210.660403][ T8378] FAULT_INJECTION: forcing a failure.
[  210.660403][ T8378] name failslab, interval 1, probability 0, space 0, times 0
[  210.764070][ T8378] CPU: 1 UID: 0 PID: 8378 Comm: syz.2.387 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  210.764114][ T8378] Tainted: [U]=USER
[  210.764123][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  210.764139][ T8378] Call Trace:
[  210.764147][ T8378]  <TASK>
[  210.764158][ T8378]  dump_stack_lvl+0x16c/0x1f0
[  210.764191][ T8378]  should_fail_ex+0x512/0x640
[  210.764218][ T8378]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  210.764251][ T8378]  should_failslab+0xc2/0x120
[  210.764282][ T8378]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  210.764309][ T8378]  ? kmem_cache_free+0x2d1/0x4d0
[  210.764333][ T8378]  ? getname_kernel+0x52/0x370
[  210.764371][ T8378]  getname_kernel+0x52/0x370
[  210.764405][ T8378]  do_file_open_root+0x19d/0x610
[  210.764434][ T8378]  ? __pfx_do_file_open_root+0x10/0x10
[  210.764495][ T8378]  ? vsnprintf+0x318/0x1160
[  210.764523][ T8378]  file_open_root+0x2a7/0x450
[  210.764553][ T8378]  ? __pfx_file_open_root+0x10/0x10
[  210.764579][ T8378]  ? find_held_lock+0x2b/0x80
[  210.764608][ T8378]  ? kernel_read_file_from_path_initns+0x17a/0x260
[  210.764650][ T8378]  kernel_read_file_from_path_initns+0x189/0x260
[  210.764690][ T8378]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  210.764736][ T8378]  _request_firmware+0x744/0x1470
[  210.764791][ T8378]  ? __pfx__request_firmware+0x10/0x10
[  210.764863][ T8378]  request_firmware+0x35/0x50
[  210.764903][ T8378]  valid_regdb+0x188/0x590
[  210.764932][ T8378]  ? __pfx___mutex_lock+0x10/0x10
[  210.764962][ T8378]  ? __pfx_valid_regdb+0x10/0x10
[  210.765004][ T8378]  reg_reload_regdb+0x11e/0x460
[  210.765041][ T8378]  ? __pfx_reg_reload_regdb+0x10/0x10
[  210.765077][ T8378]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  210.765102][ T8378]  ? nl80211_pre_doit+0x1b0/0xb10
[  210.765132][ T8378]  genl_family_rcv_msg_doit+0x209/0x2f0
[  210.765173][ T8378]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  210.765208][ T8378]  ? rcu_is_watching+0x12/0xc0
[  210.765247][ T8378]  ? bpf_lsm_capable+0x9/0x10
[  210.765283][ T8378]  ? security_capable+0x7e/0x260
[  210.765321][ T8378]  genl_rcv_msg+0x55c/0x800
[  210.765361][ T8378]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.765397][ T8378]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  210.765420][ T8378]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  210.765451][ T8378]  ? __pfx_nl80211_post_doit+0x10/0x10
[  210.765492][ T8378]  netlink_rcv_skb+0x158/0x420
[  210.765520][ T8378]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.765554][ T8378]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.765601][ T8378]  ? netlink_deliver_tap+0x1ae/0xd30
[  210.765639][ T8378]  genl_rcv+0x28/0x40
[  210.765671][ T8378]  netlink_unicast+0x58a/0x850
[  210.765708][ T8378]  ? __pfx_netlink_unicast+0x10/0x10
[  210.765749][ T8378]  netlink_sendmsg+0x8d1/0xdd0
[  210.765786][ T8378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.765841][ T8378]  ____sys_sendmsg+0xa95/0xc70
[  210.765879][ T8378]  ? copy_msghdr_from_user+0x10a/0x160
[  210.765907][ T8378]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.765952][ T8378]  ? __pfx_futex_wake_mark+0x10/0x10
[  210.765996][ T8378]  ___sys_sendmsg+0x134/0x1d0
[  210.766026][ T8378]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.766051][ T8378]  ? __lock_acquire+0x622/0x1c90
[  210.766135][ T8378]  __sys_sendmsg+0x16d/0x220
[  210.766164][ T8378]  ? __pfx___sys_sendmsg+0x10/0x10
[  210.766192][ T8378]  ? __x64_sys_futex+0x1e0/0x4c0
[  210.766248][ T8378]  do_syscall_64+0xcd/0x490
[  210.766279][ T8378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.766306][ T8378] RIP: 0033:0x7f7d8df8e9a9
[  210.766327][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.766352][ T8378] RSP: 002b:00007f7d8ee8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.766376][ T8378] RAX: ffffffffffffffda RBX: 00007f7d8e1b5fa0 RCX: 00007f7d8df8e9a9
[  210.766394][ T8378] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008
[  210.766410][ T8378] RBP: 00007f7d8e010d69 R08: 0000000000000000 R09: 0000000000000000
[  210.766427][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.766442][ T8378] R13: 0000000000000000 R14: 00007f7d8e1b5fa0 R15: 00007fff622125d8
[  210.766479][ T8378]  </TASK>
[  211.212754][ T8378] platform regulatory.0: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12
[  211.226202][ T8378] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  211.235984][ T8378] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  211.245842][ T8378] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  211.296238][   T30] audit: type=1800 audit(4294967384.308:9): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.387" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0
[  213.487447][ T8445] input: 	= as /devices/virtual/input/input11
[  213.696337][ T8452] : Can't lookup blockdev
[  214.451231][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.475781][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.484497][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.503912][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.516006][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.094397][ T8479] ptrace attach of "./syz-executor exec"[6606] was attempted by "./syz-executor exec"[8479]
[  215.994051][ T8466] chnl_net:caif_netlink_parms(): no params data found
[  216.298925][ T8490] syz.2.405 uses obsolete (PF_INET,SOCK_PACKET)
[  216.433445][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.441368][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.448909][ T8466] bridge_slave_0: entered allmulticast mode
[  216.456940][ T8466] bridge_slave_0: entered promiscuous mode
[  216.466034][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.473307][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.480769][ T8466] bridge_slave_1: entered allmulticast mode
[  216.488619][ T8466] bridge_slave_1: entered promiscuous mode
[  216.597874][   T51] Bluetooth: hci5: command tx timeout
[  216.779182][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.829975][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.228484][ T8466] team0: Port device team_slave_0 added
[  217.245019][ T8466] team0: Port device team_slave_1 added
[  217.461666][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.520358][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.520511][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.522664][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.522683][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.522727][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.609500][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.410'.
[  217.769828][ T8466] hsr_slave_0: entered promiscuous mode
[  217.771439][ T8466] hsr_slave_1: entered promiscuous mode
[  218.362298][ T8536] block2mtd: error: cannot open device �inX���t�Չp����\��������B�
[  218.362298][ T8536] B>
[  218.676441][   T51] Bluetooth: hci5: command tx timeout
[  218.677760][ T8539] netlink: 28 bytes leftover after parsing attributes in process `'.
[  219.062379][ T8466] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  219.122287][ T8466] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  219.162448][ T8466] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  219.210420][ T8466] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  219.544838][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.849547][ T8466] 8021q: adding VLAN 0 to HW filter on device team0
[  219.946076][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.953301][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.056821][ T8567] netlink: 'syz.2.418': attribute type 2 has an invalid length.
[  220.100407][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.107600][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.515872][ T8466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.760908][   T51] Bluetooth: hci5: command tx timeout
[  221.740016][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.836936][   T51] Bluetooth: hci5: command tx timeout
[  223.241250][ T8466] veth0_vlan: entered promiscuous mode
[  223.289956][ T8466] veth1_vlan: entered promiscuous mode
[  223.804150][ T8466] veth0_macvtap: entered promiscuous mode
[  223.921891][ T8466] veth1_macvtap: entered promiscuous mode
[  224.002782][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.045212][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.079583][ T8466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.094216][ T8466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.107482][ T8466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.117021][ T8466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.629269][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.640966][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.820833][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.870119][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.286918][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.

syzkaller
syzkaller login: [  228.197625][   T51] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5
[  228.654013][ T8739] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  228.725652][ T8739] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  228.746427][ T8739] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  228.755057][ T8739] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  228.824236][ T8739] page dumped because: unmovable page
[  228.867307][ T8739] page_owner info is not present (never set?)
[  230.045090][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'.
[  234.195829][ T8879] netlink: 'syz.5.470': attribute type 1 has an invalid length.
[  235.768974][ T8908] nbd: socks must be embedded in a SOCK_ITEM attr
[  235.825208][ T8908] block nbd0: shutting down sockets
[  237.591756][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.606487][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.618012][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.636471][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.646000][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.292147][   T30] audit: type=1400 audit(4294967472.370:10): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8951 comm="syz.2.479"
[  238.919072][ T8937] chnl_net:caif_netlink_parms(): no params data found
[  239.164181][ T8974] : Can't lookup blockdev
[  239.171299][ T8974] FAULT_INJECTION: forcing a failure.
[  239.171299][ T8974] name failslab, interval 1, probability 0, space 0, times 0
[  239.184819][ T8974] CPU: 0 UID: 0 PID: 8974 Comm: syz.3.482 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  239.184861][ T8974] Tainted: [U]=USER
[  239.184870][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  239.184885][ T8974] Call Trace:
[  239.184901][ T8974]  <TASK>
[  239.184911][ T8974]  dump_stack_lvl+0x16c/0x1f0
[  239.184945][ T8974]  should_fail_ex+0x512/0x640
[  239.184973][ T8974]  ? __kvmalloc_node_noprof+0x124/0x620
[  239.185003][ T8974]  should_failslab+0xc2/0x120
[  239.185031][ T8974]  __kvmalloc_node_noprof+0x137/0x620
[  239.185053][ T8974]  ? rcu_is_watching+0x12/0xc0
[  239.185080][ T8974]  ? kfree+0x24f/0x4d0
[  239.185109][ T8974]  ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30
[  239.185148][ T8974]  ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30
[  239.185180][ T8974]  snd_pcm_oss_change_params_locked+0x1d18/0x3a30
[  239.185229][ T8974]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  239.185290][ T8974]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  239.185330][ T8974]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  239.185366][ T8974]  ? hook_file_ioctl_common+0x145/0x410
[  239.185401][ T8974]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  239.185439][ T8974]  ? __fget_files+0x20e/0x3c0
[  239.185469][ T8974]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  239.185503][ T8974]  __x64_sys_ioctl+0x18e/0x210
[  239.185540][ T8974]  do_syscall_64+0xcd/0x490
[  239.185570][ T8974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.185595][ T8974] RIP: 0033:0x7fc7a218e9a9
[  239.185620][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.185644][ T8974] RSP: 002b:00007fc7a302d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.185667][ T8974] RAX: ffffffffffffffda RBX: 00007fc7a23b5fa0 RCX: 00007fc7a218e9a9
[  239.185683][ T8974] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008
[  239.185696][ T8974] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  239.185710][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.185722][ T8974] R13: 0000000000000000 R14: 00007fc7a23b5fa0 R15: 00007ffea744af98
[  239.185754][ T8974]  </TASK>
[  239.718075][ T5167] Bluetooth: hci2: command tx timeout
[  240.183374][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.220214][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.233449][ T8937] bridge_slave_0: entered allmulticast mode
[  240.247717][ T8937] bridge_slave_0: entered promiscuous mode
[  240.421438][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.461347][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.481084][ T8937] bridge_slave_1: entered allmulticast mode
[  240.523603][ T8937] bridge_slave_1: entered promiscuous mode
[  240.644956][ T8937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.695537][ T8937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.884137][ T8937] team0: Port device team_slave_0 added
[  241.003237][ T8937] team0: Port device team_slave_1 added
[  241.073322][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.087945][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.153020][ T8937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.188508][ T8937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.195495][ T8937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.230007][ T8937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.673880][ T8937] hsr_slave_0: entered promiscuous mode
[  241.685539][ T8937] hsr_slave_1: entered promiscuous mode
[  241.716123][ T8937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.723731][ T8937] Cannot create hsr debugfs directory
[  241.796064][ T5167] Bluetooth: hci2: command tx timeout
[  242.176303][ T8937] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  242.227096][ T8937] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  242.244958][ T8937] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  242.272246][ T8937] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  242.496010][ T9036] Scaler: =================  START STATUS  =================
[  242.504372][ T9036] Scaler: ==================  END STATUS  ==================
[  242.534791][ T8937] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.590252][ T8937] 8021q: adding VLAN 0 to HW filter on device team0
[  242.618674][  T149] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.625877][  T149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.694366][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.701595][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.766817][ T9057] phram: not enough arguments
[  243.839152][ T9066] sd 0:0:1:0: PR command failed: 1026
[  243.844614][ T9066] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  243.875807][ T5167] Bluetooth: hci2: command tx timeout
[  243.881889][ T8937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.902635][ T9066] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  244.305358][ T8820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.759740][ T8820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.932667][ T8937] veth0_vlan: entered promiscuous mode
[  244.959214][ T8937] veth1_vlan: entered promiscuous mode
[  245.028679][ T8937] veth0_macvtap: entered promiscuous mode
[  245.054191][ T8937] veth1_macvtap: entered promiscuous mode
[  245.259041][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.378856][ T8820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.502830][ T8937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.579772][ T8937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.618024][ T8937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.656524][ T8937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.690373][ T8937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.707545][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[  245.741107][ T9121] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[  245.766732][ T9121] netlink: 342 bytes leftover after parsing attributes in process `syz.2.503'.
[  245.921243][ T8820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.956550][ T5167] Bluetooth: hci2: command tx timeout
[  246.143351][ T9129] HfR: entered promiscuous mode
[  246.271027][ T9129] openvswitch: HfR: Dropping previously announced user features
[  246.280184][ T9103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.331478][ T9103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.572954][ T8820] bridge_slave_1: left allmulticast mode
[  246.589244][ T8820] bridge_slave_1: left promiscuous mode
[  246.595045][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.618236][ T8820] bridge_slave_0: left allmulticast mode
[  246.623915][ T8820] bridge_slave_0: left promiscuous mode
[  246.652133][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.066387][ T9147] ptrace attach of "./syz-executor exec"[6606] was attempted by "./syz-executor exec"[9147]
[  247.515251][ T8820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.546189][ T8820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.561969][ T8820] bond0 (unregistering): Released all slaves
[  247.673594][ T9093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.704741][ T9093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.050770][ T9154] netlink: 'syz.2.512': attribute type 1 has an invalid length.
[  248.179498][ T9157] netlink: 338 bytes leftover after parsing attributes in process `syz.2.512'.
[  248.213053][ T9154] netlink: 338 bytes leftover after parsing attributes in process `syz.2.512'.
[  248.581104][ T8820] hsr_slave_0: left promiscuous mode
[  248.592572][ T8820] hsr_slave_1: left promiscuous mode
[  248.616825][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.635172][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.670297][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.780996][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.803611][ T5167] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260
[  248.803640][ T5167] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9
[  248.959790][ T8820] veth1_macvtap: left promiscuous mode
[  248.965413][ T8820] veth0_macvtap: left promiscuous mode
[  248.973432][ T8820] veth1_vlan: left promiscuous mode
[  248.983315][ T8820] veth0_vlan: left promiscuous mode
[  249.021613][ T9183] random: crng reseeded on system resumption
[  249.807330][ T9200] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  250.077391][ T9205] MTRR 1 not used
[  250.524232][ T8820] team0 (unregistering): Port device team_slave_1 removed
[  250.665569][ T8820] team0 (unregistering): Port device team_slave_0 removed
[  251.536967][   T30] audit: type=1400 audit(4294967485.620:11): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9226 comm="syz.6.523"
[  252.602785][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  252.803567][ T5167] Bluetooth: hci1: unexpected event 0x03 length: 725 > 11
[  254.221868][ T9279] zswap: compressor 000 not available
[  254.610801][ T9292] random: crng reseeded on system resumption
[  254.688110][ T9292] random: crng reseeded on system resumption
[  254.724377][ T9298] usb usb2: usbfs: process 9298 (syz.6.534) did not claim interface 1 before use
[  255.622773][ T9321] netlink: zone id is out of range
[  255.649487][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.656313][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.995958][ T9100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.449112][ T9100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.754947][ T9100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.627858][ T9100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.618003][ T9100] bridge_slave_1: left allmulticast mode
[  258.636013][ T9100] bridge_slave_1: left promiscuous mode
[  258.641837][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.777181][ T9100] bridge_slave_0: left allmulticast mode
[  258.782879][ T9100] bridge_slave_0: left promiscuous mode
[  258.896030][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.919598][ T9378] can: request_module (can-proto-3) failed.
[  260.699210][ T9100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.730526][ T9100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.748668][ T9100] bond0 (unregistering): Released all slaves
[  261.658681][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.553'.
[  262.694075][ T9443] kexec: Could not allocate control_code_buffer
[  263.254059][ T9100] hsr_slave_0: left promiscuous mode
[  263.264018][ T9100] hsr_slave_1: left promiscuous mode
[  263.278545][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.304565][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.313809][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.332533][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.333221][ T9473] FAULT_INJECTION: forcing a failure.
[  263.333221][ T9473] name failslab, interval 1, probability 0, space 0, times 0
[  263.379412][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.3.557 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  263.379455][ T9473] Tainted: [U]=USER
[  263.379464][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.379478][ T9473] Call Trace:
[  263.379487][ T9473]  <TASK>
[  263.379497][ T9473]  dump_stack_lvl+0x16c/0x1f0
[  263.379539][ T9473]  should_fail_ex+0x512/0x640
[  263.379566][ T9473]  ? fs_reclaim_acquire+0xae/0x150
[  263.379605][ T9473]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  263.379630][ T9473]  should_failslab+0xc2/0x120
[  263.379661][ T9473]  __kmalloc_noprof+0xd2/0x510
[  263.379697][ T9473]  tomoyo_realpath_from_path+0xc2/0x6e0
[  263.379735][ T9473]  tomoyo_check_open_permission+0x2ab/0x3c0
[  263.379773][ T9473]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  263.379850][ T9473]  ? do_raw_spin_lock+0x12c/0x2b0
[  263.379901][ T9473]  tomoyo_file_open+0x6b/0x90
[  263.379933][ T9473]  security_file_open+0x84/0x1e0
[  263.379972][ T9473]  do_dentry_open+0x596/0x1c10
[  263.380012][ T9473]  shmem_tmpfile+0x140/0x180
[  263.380049][ T9473]  vfs_tmpfile+0x2bb/0x890
[  263.380083][ T9473]  path_openat+0x1683/0x2cb0
[  263.380107][ T9473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.380147][ T9473]  ? __pfx_path_openat+0x10/0x10
[  263.380183][ T9473]  do_filp_open+0x20b/0x470
[  263.380209][ T9473]  ? __pfx_do_filp_open+0x10/0x10
[  263.380263][ T9473]  ? _raw_spin_unlock+0x28/0x50
[  263.380298][ T9473]  ? alloc_fd+0x471/0x7d0
[  263.380348][ T9473]  do_sys_openat2+0x11b/0x1d0
[  263.380382][ T9473]  ? __pfx_do_sys_openat2+0x10/0x10
[  263.380431][ T9473]  __x64_sys_open+0x153/0x1e0
[  263.380464][ T9473]  ? __pfx___x64_sys_open+0x10/0x10
[  263.380506][ T9473]  ? rcu_is_watching+0x12/0xc0
[  263.380544][ T9473]  do_syscall_64+0xcd/0x490
[  263.380576][ T9473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.380603][ T9473] RIP: 0033:0x7fc7a218e9a9
[  263.380624][ T9473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.380648][ T9473] RSP: 002b:00007fc7a300c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  263.380672][ T9473] RAX: ffffffffffffffda RBX: 00007fc7a23b6080 RCX: 00007fc7a218e9a9
[  263.380691][ T9473] RDX: 0000000000000408 RSI: 0000000000591083 RDI: 0000200000000100
[  263.380708][ T9473] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  263.380723][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.380739][ T9473] R13: 0000000000000000 R14: 00007fc7a23b6080 R15: 00007ffea744af98
[  263.380774][ T9473]  </TASK>
[  263.380784][ T9473] ERROR: Out of memory at tomoyo_realpath_from_path.
[  263.607434][ T9100] veth1_macvtap: left promiscuous mode
[  263.679462][ T9100] veth0_macvtap: left promiscuous mode
[  263.685175][ T9100] veth1_vlan: left promiscuous mode
[  263.730848][ T9100] veth0_vlan: left promiscuous mode
[  264.870722][ T9100] team0 (unregistering): Port device team_slave_1 removed
[  264.938317][ T9100] team0 (unregistering): Port device team_slave_0 removed
[  265.039956][ T9491] program syz.3.562 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.104778][ T9542] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input13
[  267.482071][ T9529] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  268.318829][ T9559] .RRo�\�&p�: entered promiscuous mode
[  269.487666][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'.
[  269.498684][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'.
[  269.804301][ T9600] can0: slcan on ptm0.
[  269.996667][ T9595] can0 (unregistered): slcan off ptm0.
[  273.599997][   T30] audit: type=1804 audit(4294967507.690:12): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.589" name="/newroot/33/file0" dev="tmpfs" ino=193 res=1 errno=0
[  275.088528][ T9712] syz.2.594 (9712) used greatest stack depth: 19784 bytes left
[  275.395022][ T9732] netlink: 186 bytes leftover after parsing attributes in process `syz.5.596'.
[  276.703557][ T9771] random: crng reseeded on system resumption
[  276.804329][ T9780] netlink: 334 bytes leftover after parsing attributes in process `syz.3.602'.
[  277.846691][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'.
[  278.073263][ T9812] binder: 9811:9812 ioctl 40046210 0 returned -14
[  278.150528][ T5167] Bluetooth: hci5: unexpected event 0x3e length: 1020 > 260
[  278.150564][ T5167] Bluetooth: hci5: unexpected subevent 0x01 length: 1019 > 18

syzkaller
syzkaller login: [  278.757325][ T9835] openvswitch: netlink: IPv4 tunnel dst address is zero
[  279.413090][ T9835] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  281.189632][ T9888] kafs: addr_prefs: Invalid Command
[  281.555093][ T9896] __vm_enough_memory: pid: 9896, comm: syz.6.623, bytes: 4398046511104 not enough memory for the allocation
[  282.721721][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.628'.
[  282.948260][ T9927] veth0_macvtap: entered allmulticast mode
[  284.277270][ T9975] random: crng reseeded on system resumption
[  285.326686][ T9978] Unrecognized hibernate image header format!
[  285.354655][ T9978] PM: hibernation: Image mismatch: architecture specific data
[  289.561938][T10038] cgroup: fork rejected by pids controller in /syz5
[  290.319218][T10163] netlink: 25 bytes leftover after parsing attributes in process `syz.3.647'.
[  291.058024][T10200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  291.928400][T10201] ovs_��: entered promiscuous mode
[  294.922479][   T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  296.314420][T10313] FAULT_INJECTION: forcing a failure.
[  296.314420][T10313] name failslab, interval 1, probability 0, space 0, times 0
[  296.327654][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.6.663 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  296.327683][T10313] Tainted: [U]=USER
[  296.327687][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  296.327696][T10313] Call Trace:
[  296.327701][T10313]  <TASK>
[  296.327707][T10313]  dump_stack_lvl+0x16c/0x1f0
[  296.327726][T10313]  should_fail_ex+0x512/0x640
[  296.327741][T10313]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  296.327759][T10313]  should_failslab+0xc2/0x120
[  296.327776][T10313]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  296.327791][T10313]  ? __d_alloc+0x31/0xaa0
[  296.327809][T10313]  __d_alloc+0x31/0xaa0
[  296.327825][T10313]  d_alloc+0x4a/0x1e0
[  296.327841][T10313]  d_alloc_parallel+0xe3/0x12e0
[  296.327857][T10313]  ? trace_mm_page_alloc+0x11f/0x1a0
[  296.327874][T10313]  ? widen_string+0xdc/0x2d0
[  296.327890][T10313]  ? put_dec_trunc8+0x28b/0x370
[  296.327906][T10313]  ? __pfx_widen_string+0x10/0x10
[  296.327927][T10313]  ? __pfx_d_alloc_parallel+0x10/0x10
[  296.327947][T10313]  ? lockdep_init_map_type+0x5c/0x280
[  296.327967][T10313]  ? lockdep_init_map_type+0x5c/0x280
[  296.327989][T10313]  __lookup_slow+0x193/0x460
[  296.328007][T10313]  ? __pfx___lookup_slow+0x10/0x10
[  296.328027][T10313]  ? compaction_alloc+0x2bb0/0x4220
[  296.328050][T10313]  ? compaction_alloc+0x2bb0/0x4220
[  296.328076][T10313]  ? d_lookup+0xe7/0x190
[  296.328097][T10313]  lookup_noperm_unlocked+0xa2/0xc0
[  296.328117][T10313]  lookup_noperm_positive_unlocked+0x1c/0xc0
[  296.328137][T10313]  debugfs_lookup+0xc9/0x150
[  296.328159][T10313]  kvm_dev_ioctl+0xf89/0x1ad0
[  296.328177][T10313]  ? __sys_sendmsg+0x18c/0x220
[  296.328191][T10313]  ? hook_file_ioctl_common+0x145/0x410
[  296.328209][T10313]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  296.328229][T10313]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  296.328243][T10313]  __x64_sys_ioctl+0x18e/0x210
[  296.328263][T10313]  do_syscall_64+0xcd/0x490
[  296.328278][T10313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.328292][T10313] RIP: 0033:0x7f5659f8e9a9
[  296.328304][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.328317][T10313] RSP: 002b:00007f565ad8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  296.328330][T10313] RAX: ffffffffffffffda RBX: 00007f565a1b5fa0 RCX: 00007f5659f8e9a9
[  296.328339][T10313] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007
[  296.328347][T10313] RBP: 00007f565a010d69 R08: 0000000000000000 R09: 0000000000000000
[  296.328356][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.328364][T10313] R13: 0000000000000000 R14: 00007f565a1b5fa0 R15: 00007ffe45105ff8
[  296.328383][T10313]  </TASK>
[  296.624354][T10323] FAULT_INJECTION: forcing a failure.
[  296.624354][T10323] name failslab, interval 1, probability 0, space 0, times 0
[  296.637057][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.5.666 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  296.637099][T10323] Tainted: [U]=USER
[  296.637107][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  296.637123][T10323] Call Trace:
[  296.637132][T10323]  <TASK>
[  296.637142][T10323]  dump_stack_lvl+0x16c/0x1f0
[  296.637173][T10323]  should_fail_ex+0x512/0x640
[  296.637200][T10323]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  296.637244][T10323]  should_failslab+0xc2/0x120
[  296.637275][T10323]  __kmalloc_cache_noprof+0x6a/0x3e0
[  296.637314][T10323]  ? binder_open+0x148/0xde0
[  296.637347][T10323]  binder_open+0x148/0xde0
[  296.637375][T10323]  ? __pfx_apparmor_file_open+0x10/0x10
[  296.637414][T10323]  ? __pfx_binder_open+0x10/0x10
[  296.637444][T10323]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  296.637488][T10323]  do_dentry_open+0x744/0x1c10
[  296.637513][T10323]  ? __pfx_binder_open+0x10/0x10
[  296.637541][T10323]  vfs_open+0x82/0x3f0
[  296.637576][T10323]  path_openat+0x1de4/0x2cb0
[  296.637610][T10323]  ? __pfx_path_openat+0x10/0x10
[  296.637637][T10323]  ? __lock_acquire+0xb8a/0x1c90
[  296.637675][T10323]  do_filp_open+0x20b/0x470
[  296.637707][T10323]  ? __pfx_do_filp_open+0x10/0x10
[  296.637760][T10323]  ? alloc_fd+0x471/0x7d0
[  296.637811][T10323]  do_sys_openat2+0x11b/0x1d0
[  296.637844][T10323]  ? __pfx_do_sys_openat2+0x10/0x10
[  296.637893][T10323]  __x64_sys_openat+0x174/0x210
[  296.637928][T10323]  ? __pfx___x64_sys_openat+0x10/0x10
[  296.637979][T10323]  do_syscall_64+0xcd/0x490
[  296.638008][T10323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.638042][T10323] RIP: 0033:0x7f7a0038e9a9
[  296.638065][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.638091][T10323] RSP: 002b:00007f7a01264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  296.638117][T10323] RAX: ffffffffffffffda RBX: 00007f7a005b5fa0 RCX: 00007f7a0038e9a9
[  296.638135][T10323] RDX: 0000000000002001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  296.638154][T10323] RBP: 00007f7a00410d69 R08: 0000000000000000 R09: 0000000000000000
[  296.638170][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.638186][T10323] R13: 0000000000000000 R14: 00007f7a005b5fa0 R15: 00007fffb454fe48
[  296.638222][T10323]  </TASK>
[  296.641463][T10323] netlink: 326 bytes leftover after parsing attributes in process `syz.5.666'.
[  297.313588][T10337] binder: 10335:10337 ioctl c0306201 0 returned -14
[  298.783182][T10368] vhci_hcd: invalid port number 16
[  298.794732][T10368] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  298.840256][T10380] random: crng reseeded on system resumption
[  299.881960][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.679'.
[  299.931170][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.679'.

syzkaller
syzkaller login: [  300.550180][T10416] can: request_module (can-proto-0) failed.
[  300.823695][T10416] can: request_module (can-proto-0) failed.
[  301.008208][T10416] can: request_module (can-proto-0) failed.
[  302.088460][T10470] __vm_enough_memory: pid: 10470, comm: syz.5.688, bytes: 4398046511104 not enough memory for the allocation
[  302.203145][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.688'.
[  302.276033][T10468] hsr_slave_0: left promiscuous mode
[  302.345398][T10468] hsr_slave_1: left promiscuous mode
[  302.790049][   T30] audit: type=1107 audit(4294967536.880:13): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  302.806162][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.691'.
[  302.889341][T10486] bond0: option packets_per_slave: invalid value (X�n�p�)
[  302.917652][T10486] bond0: option packets_per_slave: allowed values 0 - 65535
[  302.926623][T10490] bridge_slave_1: left allmulticast mode
[  302.932284][T10490] bridge_slave_1: left promiscuous mode
[  302.941517][T10490] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.976056][T10490] bridge_slave_0: left allmulticast mode
[  302.984883][T10490] bridge_slave_0: left promiscuous mode
[  302.998514][T10490] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.233011][T10498] can: request_module (can-proto-5) failed.
[  303.398417][T10511] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78010
[  303.407476][T10511] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  303.510675][T10511] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  303.567499][T10511] page_type: f5(slab)
[  303.670153][T10511] raw: 00fff00000000040 ffff88801b842280 ffffea0001f2da00 dead000000000004
[  303.749422][T10523] netlink: 342 bytes leftover after parsing attributes in process `syz.2.698'.
[  303.772563][T10511] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  303.850234][T10511] head: 00fff00000000040 ffff88801b842280 ffffea0001f2da00 dead000000000004
[  304.153669][T10511] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  304.291072][T10511] head: 00fff00000000003 ffffea0001e00401 00000000ffffffff 00000000ffffffff
[  304.379902][T10511] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  304.424944][T10511] page dumped because: unmovable page
[  304.452213][T10511] page_owner tracks the page as allocated
[  304.471237][T10511] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5584, tgid 5584 (rcS), ts 54515212067, free_ts 54345594431
[  304.505843][T10511]  post_alloc_hook+0x1c0/0x230
[  304.510681][T10511]  get_page_from_freelist+0x1321/0x3890
[  304.516558][T10511]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  304.522576][T10511]  alloc_pages_mpol+0x1fb/0x550
[  304.535644][T10511]  new_slab+0x23b/0x330
[  304.545735][T10511]  ___slab_alloc+0xd9c/0x1940
[  304.556173][T10511]  __slab_alloc.constprop.0+0x56/0xb0
[  304.562037][T10511]  __kmalloc_cache_noprof+0xfb/0x3e0
[  304.620659][T10511]  tomoyo_init_log+0xc8a/0x2140
[  304.639539][T10511]  tomoyo_supervisor+0x302/0x13b0
[  304.649347][T10511]  tomoyo_env_perm+0x191/0x200
[  304.654184][T10511]  tomoyo_find_next_domain+0xec2/0x20b0
[  304.675726][T10511]  tomoyo_bprm_check_security+0x12e/0x1d0
[  304.734880][T10544] random: crng reseeded on system resumption
[  304.748179][T10511]  security_bprm_check+0x1b9/0x1e0
[  304.761101][T10511]  bprm_execve+0x810/0x1650
[  304.771864][T10511]  do_execveat_common.isra.0+0x4a5/0x610
[  304.783171][T10511] page last free pid 5578 tgid 5578 stack trace:
[  304.801523][T10511]  __free_frozen_pages+0x7fe/0x1180
[  304.814695][T10511]  __put_partials+0x16d/0x1c0
[  304.825058][T10511]  qlist_free_all+0x4d/0x120
[  304.844857][T10511]  kasan_quarantine_reduce+0x195/0x1e0
[  304.857511][T10511]  __kasan_slab_alloc+0x69/0x90
[  304.862433][T10511]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  304.868772][T10511]  getname_flags.part.0+0x4c/0x550
[  304.873941][T10511]  getname_flags+0x93/0xf0
[  304.878828][T10511]  do_sys_openat2+0xb8/0x1d0
[  304.883472][T10511]  __x64_sys_openat+0x174/0x210
[  304.888878][T10511]  do_syscall_64+0xcd/0x490
[  304.893643][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.182705][T10550] XFS: irix_symlink_mode sysctl option is deprecated.
[  305.647032][T10568] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  306.134864][T10580] binder: 10579:10580 ioctl 40046210 0 returned -14
[  311.508625][T10729] FAULT_INJECTION: forcing a failure.
[  311.508625][T10729] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  311.548116][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.5.733 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  311.548141][T10729] Tainted: [U]=USER
[  311.548147][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  311.548155][T10729] Call Trace:
[  311.548160][T10729]  <TASK>
[  311.548167][T10729]  dump_stack_lvl+0x16c/0x1f0
[  311.548185][T10729]  should_fail_ex+0x512/0x640
[  311.548204][T10729]  should_fail_alloc_page+0xe7/0x130
[  311.548222][T10729]  prepare_alloc_pages+0x3c2/0x610
[  311.548242][T10729]  ? rcu_is_watching+0x12/0xc0
[  311.548258][T10729]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  311.548276][T10729]  ? stack_trace_save+0x8e/0xc0
[  311.548292][T10729]  ? __pfx_stack_trace_save+0x10/0x10
[  311.548307][T10729]  ? stack_depot_save_flags+0x28/0xa40
[  311.548323][T10729]  ? __kernel_text_address+0xd/0x40
[  311.548339][T10729]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  311.548354][T10729]  ? __lock_acquire+0x622/0x1c90
[  311.548373][T10729]  ? uvcg_uncompressed_b_aspect_ratio_x_show+0x130/0x160
[  311.548396][T10729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.548415][T10729]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  311.548437][T10729]  ? policy_nodemask+0xea/0x4e0
[  311.548455][T10729]  alloc_pages_mpol+0x1fb/0x550
[  311.548471][T10729]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  311.548492][T10729]  alloc_pages_noprof+0x131/0x390
[  311.548509][T10729]  alloc_pages_exact_noprof+0x37/0xe0
[  311.548527][T10729]  ? __asan_memset+0x23/0x50
[  311.548549][T10729]  snd_pcm_attach_substream+0x4bb/0xd60
[  311.548575][T10729]  snd_pcm_open_substream+0x8d/0x17f0
[  311.548596][T10729]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  311.548622][T10729]  snd_pcm_oss_open+0x735/0x1400
[  311.548646][T10729]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  311.548664][T10729]  ? __lock_acquire+0xb8a/0x1c90
[  311.548682][T10729]  ? __pfx_default_wake_function+0x10/0x10
[  311.548698][T10729]  ? __lock_acquire+0xb8a/0x1c90
[  311.548720][T10729]  ? do_raw_spin_lock+0x12c/0x2b0
[  311.548742][T10729]  ? soundcore_open+0x35a/0x580
[  311.548757][T10729]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  311.548774][T10729]  soundcore_open+0x40c/0x580
[  311.548799][T10729]  ? __pfx_soundcore_open+0x10/0x10
[  311.548813][T10729]  chrdev_open+0x231/0x6a0
[  311.548832][T10729]  ? __pfx_apparmor_file_open+0x10/0x10
[  311.548853][T10729]  ? __pfx_chrdev_open+0x10/0x10
[  311.548869][T10729]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  311.548895][T10729]  do_dentry_open+0x744/0x1c10
[  311.548910][T10729]  ? __pfx_chrdev_open+0x10/0x10
[  311.548928][T10729]  vfs_open+0x82/0x3f0
[  311.548947][T10729]  path_openat+0x1de4/0x2cb0
[  311.548968][T10729]  ? __pfx_path_openat+0x10/0x10
[  311.548982][T10729]  ? __lock_acquire+0xb8a/0x1c90
[  311.549002][T10729]  do_filp_open+0x20b/0x470
[  311.549015][T10729]  ? __pfx_do_filp_open+0x10/0x10
[  311.549042][T10729]  ? alloc_fd+0x471/0x7d0
[  311.549068][T10729]  do_sys_openat2+0x11b/0x1d0
[  311.549085][T10729]  ? __pfx_do_sys_openat2+0x10/0x10
[  311.549110][T10729]  __x64_sys_openat+0x174/0x210
[  311.549127][T10729]  ? __pfx___x64_sys_openat+0x10/0x10
[  311.549153][T10729]  do_syscall_64+0xcd/0x490
[  311.549169][T10729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.549184][T10729] RIP: 0033:0x7f7a0038e9a9
[  311.549195][T10729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.549209][T10729] RSP: 002b:00007f7a01264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  311.549222][T10729] RAX: ffffffffffffffda RBX: 00007f7a005b5fa0 RCX: 00007f7a0038e9a9
[  311.549231][T10729] RDX: 00000000000a2b40 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  311.549240][T10729] RBP: 00007f7a00410d69 R08: 0000000000000000 R09: 0000000000000000
[  311.549248][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.549256][T10729] R13: 0000000000000000 R14: 00007f7a005b5fa0 R15: 00007fffb454fe48
[  311.549274][T10729]  </TASK>
[  312.148662][T10703] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  313.169564][T10761] FAULT_INJECTION: forcing a failure.
[  313.169564][T10761] name failslab, interval 1, probability 0, space 0, times 0
[  313.212245][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'.
[  313.234342][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.2.739 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  313.234389][T10761] Tainted: [U]=USER
[  313.234399][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.234416][T10761] Call Trace:
[  313.234430][T10761]  <TASK>
[  313.234439][T10761]  dump_stack_lvl+0x16c/0x1f0
[  313.234472][T10761]  should_fail_ex+0x512/0x640
[  313.234501][T10761]  ? fs_reclaim_acquire+0xae/0x150
[  313.234538][T10761]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  313.234573][T10761]  should_failslab+0xc2/0x120
[  313.234605][T10761]  __kmalloc_noprof+0xd2/0x510
[  313.234641][T10761]  tomoyo_realpath_from_path+0xc2/0x6e0
[  313.234677][T10761]  tomoyo_check_open_permission+0x2ab/0x3c0
[  313.234717][T10761]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  313.234793][T10761]  ? find_held_lock+0x2b/0x80
[  313.234831][T10761]  tomoyo_file_open+0x6b/0x90
[  313.234863][T10761]  security_file_open+0x84/0x1e0
[  313.234900][T10761]  do_dentry_open+0x596/0x1c10
[  313.234941][T10761]  vfs_open+0x82/0x3f0
[  313.234975][T10761]  path_openat+0x1de4/0x2cb0
[  313.235014][T10761]  ? __pfx_path_openat+0x10/0x10
[  313.235044][T10761]  ? __lock_acquire+0xb8a/0x1c90
[  313.235082][T10761]  do_filp_open+0x20b/0x470
[  313.235108][T10761]  ? __pfx_do_filp_open+0x10/0x10
[  313.235160][T10761]  ? alloc_fd+0x471/0x7d0
[  313.235208][T10761]  do_sys_openat2+0x11b/0x1d0
[  313.235242][T10761]  ? __pfx_do_sys_openat2+0x10/0x10
[  313.235292][T10761]  __x64_sys_openat+0x174/0x210
[  313.235325][T10761]  ? __pfx___x64_sys_openat+0x10/0x10
[  313.235372][T10761]  do_syscall_64+0xcd/0x490
[  313.235402][T10761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.235426][T10761] RIP: 0033:0x7f7d8df8e9a9
[  313.235447][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.235473][T10761] RSP: 002b:00007f7d8ee8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  313.235497][T10761] RAX: ffffffffffffffda RBX: 00007f7d8e1b5fa0 RCX: 00007f7d8df8e9a9
[  313.235515][T10761] RDX: 0000000000040802 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  313.235532][T10761] RBP: 00007f7d8e010d69 R08: 0000000000000000 R09: 0000000000000000
[  313.235547][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.235570][T10761] R13: 0000000000000000 R14: 00007f7d8e1b5fa0 R15: 00007fff622125d8
[  313.235605][T10761]  </TASK>
[  313.533262][T10761] ERROR: Out of memory at tomoyo_realpath_from_path.
[  314.707592][T10818] FAULT_INJECTION: forcing a failure.
[  314.707592][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  314.765787][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.3.749 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  314.765813][T10818] Tainted: [U]=USER
[  314.765818][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  314.765826][T10818] Call Trace:
[  314.765831][T10818]  <TASK>
[  314.765837][T10818]  dump_stack_lvl+0x16c/0x1f0
[  314.765856][T10818]  should_fail_ex+0x512/0x640
[  314.765873][T10818]  _copy_from_user+0x2e/0xd0
[  314.765890][T10818]  copy_msghdr_from_user+0x98/0x160
[  314.765906][T10818]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  314.765929][T10818]  ___sys_sendmsg+0xfe/0x1d0
[  314.765944][T10818]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.765956][T10818]  ? __lock_acquire+0x622/0x1c90
[  314.765998][T10818]  __sys_sendmsg+0x16d/0x220
[  314.766012][T10818]  ? __pfx___sys_sendmsg+0x10/0x10
[  314.766038][T10818]  do_syscall_64+0xcd/0x490
[  314.766054][T10818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.766068][T10818] RIP: 0033:0x7fc7a218e9a9
[  314.766080][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.766093][T10818] RSP: 002b:00007fc7a302d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.766106][T10818] RAX: ffffffffffffffda RBX: 00007fc7a23b5fa0 RCX: 00007fc7a218e9a9
[  314.766116][T10818] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003
[  314.766124][T10818] RBP: 00007fc7a302d090 R08: 0000000000000000 R09: 0000000000000000
[  314.766132][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.766140][T10818] R13: 0000000000000000 R14: 00007fc7a23b5fa0 R15: 00007ffea744af98
[  314.766166][T10818]  </TASK>
[  316.499060][T10865] random: crng reseeded on system resumption
[  317.100297][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.128333][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.362857][T10889] FAULT_INJECTION: forcing a failure.
[  317.362857][T10889] name failslab, interval 1, probability 0, space 0, times 0
[  317.443360][T10889] CPU: 1 UID: 0 PID: 10889 Comm: syz.5.760 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  317.443397][T10889] Tainted: [U]=USER
[  317.443402][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  317.443410][T10889] Call Trace:
[  317.443415][T10889]  <TASK>
[  317.443421][T10889]  dump_stack_lvl+0x16c/0x1f0
[  317.443441][T10889]  should_fail_ex+0x512/0x640
[  317.443456][T10889]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  317.443473][T10889]  should_failslab+0xc2/0x120
[  317.443490][T10889]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  317.443504][T10889]  ? __alloc_skb+0x2b2/0x380
[  317.443521][T10889]  __alloc_skb+0x2b2/0x380
[  317.443533][T10889]  ? __pfx___alloc_skb+0x10/0x10
[  317.443548][T10889]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  317.443569][T10889]  netlink_alloc_large_skb+0x69/0x130
[  317.443587][T10889]  netlink_sendmsg+0x6a1/0xdd0
[  317.443607][T10889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.443630][T10889]  ____sys_sendmsg+0xa95/0xc70
[  317.443648][T10889]  ? copy_msghdr_from_user+0x10a/0x160
[  317.443662][T10889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.443688][T10889]  ___sys_sendmsg+0x134/0x1d0
[  317.443704][T10889]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.443716][T10889]  ? __lock_acquire+0x622/0x1c90
[  317.443757][T10889]  __sys_sendmsg+0x16d/0x220
[  317.443772][T10889]  ? __pfx___sys_sendmsg+0x10/0x10
[  317.443798][T10889]  do_syscall_64+0xcd/0x490
[  317.443813][T10889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.443828][T10889] RIP: 0033:0x7f7a0038e9a9
[  317.443839][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.443852][T10889] RSP: 002b:00007f7a01264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.443866][T10889] RAX: ffffffffffffffda RBX: 00007f7a005b5fa0 RCX: 00007f7a0038e9a9
[  317.443875][T10889] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003
[  317.443884][T10889] RBP: 00007f7a01264090 R08: 0000000000000000 R09: 0000000000000000
[  317.443893][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.443907][T10889] R13: 0000000000000000 R14: 00007f7a005b5fa0 R15: 00007fffb454fe48
[  317.443925][T10889]  </TASK>
[  319.415890][T10935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  319.704719][T10943] FAULT_INJECTION: forcing a failure.
[  319.704719][T10943] name failslab, interval 1, probability 0, space 0, times 0
[  319.761446][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.3.767 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  319.761494][T10943] Tainted: [U]=USER
[  319.761502][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  319.761517][T10943] Call Trace:
[  319.761525][T10943]  <TASK>
[  319.761536][T10943]  dump_stack_lvl+0x16c/0x1f0
[  319.761567][T10943]  should_fail_ex+0x512/0x640
[  319.761595][T10943]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  319.761630][T10943]  should_failslab+0xc2/0x120
[  319.761661][T10943]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  319.761688][T10943]  ? acpi_ut_create_thread_state+0x63/0x170
[  319.761743][T10943]  acpi_ut_create_thread_state+0x63/0x170
[  319.761786][T10943]  acpi_ps_parse_aml+0x79/0xcb0
[  319.761820][T10943]  acpi_ps_execute_method+0x55a/0xb30
[  319.761854][T10943]  ? acpi_ut_acquire_mutex+0x125/0x1d0
[  319.761891][T10943]  acpi_ns_evaluate+0x76c/0xca0
[  319.761922][T10943]  ? kasan_save_track+0x14/0x30
[  319.761950][T10943]  acpi_evaluate_object+0x1fa/0xa90
[  319.761977][T10943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.762004][T10943]  ? __pfx_acpi_evaluate_object+0x10/0x10
[  319.762032][T10943]  ? __mutex_trylock_common+0xe9/0x250
[  319.762074][T10943]  acpi_evaluate_integer+0xdd/0x200
[  319.762112][T10943]  ? __pfx_acpi_evaluate_integer+0x10/0x10
[  319.762167][T10943]  ? __pfx_status_show+0x10/0x10
[  319.762193][T10943]  status_show+0xa0/0x120
[  319.762220][T10943]  ? __pfx_status_show+0x10/0x10
[  319.762255][T10943]  dev_attr_show+0x53/0xe0
[  319.762289][T10943]  ? __pfx_dev_attr_show+0x10/0x10
[  319.762318][T10943]  sysfs_kf_seq_show+0x216/0x3e0
[  319.762362][T10943]  seq_read_iter+0x506/0x12c0
[  319.762419][T10943]  kernfs_fop_read_iter+0x40f/0x5a0
[  319.762451][T10943]  ? rw_verify_area+0xcf/0x680
[  319.762493][T10943]  vfs_read+0x8bc/0xc60
[  319.762523][T10943]  ? __pfx___mutex_lock+0x10/0x10
[  319.762552][T10943]  ? __pfx_vfs_read+0x10/0x10
[  319.762603][T10943]  ksys_read+0x12a/0x250
[  319.762626][T10943]  ? __pfx_ksys_read+0x10/0x10
[  319.762668][T10943]  do_syscall_64+0xcd/0x490
[  319.762699][T10943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.762725][T10943] RIP: 0033:0x7fc7a218e9a9
[  319.762755][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.762781][T10943] RSP: 002b:00007fc7a2fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  319.762805][T10943] RAX: ffffffffffffffda RBX: 00007fc7a23b6240 RCX: 00007fc7a218e9a9
[  319.762823][T10943] RDX: 000000000000007a RSI: 0000200000000140 RDI: 000000000000000d
[  319.762839][T10943] RBP: 00007fc7a2210d69 R08: 0000000000000000 R09: 0000000000000000
[  319.762856][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.762871][T10943] R13: 0000000000000000 R14: 00007fc7a23b6240 R15: 00007ffea744af98
[  319.762909][T10943]  </TASK>
[  319.765527][T10943] ACPI Error: ffff888028d13000 walk still has a scope list (20250404/dswstate-694)
[  320.176715][T10937] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19
[  320.224566][T10955] nbd: illegal input index -5
[  321.151814][T10989] __vm_enough_memory: pid: 10989, comm: syz.3.775, bytes: 4398046511104 not enough memory for the allocation
[  322.296293][T11026] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in;
[  322.296293][T11026]    program syz.2.781 not setting count and/or reply_len properly
[  322.300930][T10998] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  322.361862][T10998] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  322.372571][T10998] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  322.428125][T10998] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  322.436312][T10998] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  322.461447][T10998] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  322.510469][T10998] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  322.534975][T10998] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  322.570191][T10998] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  322.959764][T11054] FAULT_INJECTION: forcing a failure.
[  322.959764][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.978542][T11054] CPU: 0 UID: 0 PID: 11054 Comm: syz.3.784 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  322.978583][T11054] Tainted: [U]=USER
[  322.978591][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  322.978604][T11054] Call Trace:
[  322.978612][T11054]  <TASK>
[  322.978622][T11054]  dump_stack_lvl+0x16c/0x1f0
[  322.978652][T11054]  should_fail_ex+0x512/0x640
[  322.978691][T11054]  _copy_from_iter+0x29f/0x16f0
[  322.978725][T11054]  ? __alloc_skb+0x200/0x380
[  322.978751][T11054]  ? __pfx__copy_from_iter+0x10/0x10
[  322.978798][T11054]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  322.978841][T11054]  netlink_sendmsg+0x829/0xdd0
[  322.978879][T11054]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.978923][T11054]  ____sys_sendmsg+0xa95/0xc70
[  322.978958][T11054]  ? copy_msghdr_from_user+0x10a/0x160
[  322.978984][T11054]  ? __pfx_____sys_sendmsg+0x10/0x10
[  322.979035][T11054]  ___sys_sendmsg+0x134/0x1d0
[  322.979064][T11054]  ? __pfx____sys_sendmsg+0x10/0x10
[  322.979088][T11054]  ? __lock_acquire+0x622/0x1c90
[  322.979165][T11054]  __sys_sendmsg+0x16d/0x220
[  322.979192][T11054]  ? __pfx___sys_sendmsg+0x10/0x10
[  322.979243][T11054]  do_syscall_64+0xcd/0x490
[  322.979273][T11054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.979299][T11054] RIP: 0033:0x7fc7a218e9a9
[  322.979319][T11054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.979344][T11054] RSP: 002b:00007fc7a302d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.979368][T11054] RAX: ffffffffffffffda RBX: 00007fc7a23b5fa0 RCX: 00007fc7a218e9a9
[  322.979386][T11054] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003
[  322.979402][T11054] RBP: 00007fc7a302d090 R08: 0000000000000000 R09: 0000000000000000
[  322.979417][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.979432][T11054] R13: 0000000000000000 R14: 00007fc7a23b5fa0 R15: 00007ffea744af98
[  322.979466][T11054]  </TASK>
[  324.072496][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.5.790'.
[  324.119552][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  324.454800][   T51] Bluetooth: hci5: command 0x0c1a tx timeout
[  324.454815][ T5167] Bluetooth: hci1: command 0x0406 tx timeout
[  324.515837][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout
[  326.206606][T11146] FAULT_INJECTION: forcing a failure.
[  326.206606][T11146] name failslab, interval 1, probability 0, space 0, times 0
[  326.250886][T11146] CPU: 1 UID: 0 PID: 11146 Comm: syz.2.795 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  326.250929][T11146] Tainted: [U]=USER
[  326.250938][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.250952][T11146] Call Trace:
[  326.250961][T11146]  <TASK>
[  326.250970][T11146]  dump_stack_lvl+0x16c/0x1f0
[  326.251001][T11146]  should_fail_ex+0x512/0x640
[  326.251031][T11146]  should_failslab+0xc2/0x120
[  326.251061][T11146]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  326.251090][T11146]  ? skb_clone+0x190/0x3f0
[  326.251122][T11146]  skb_clone+0x190/0x3f0
[  326.251151][T11146]  netlink_deliver_tap+0xabd/0xd30
[  326.251189][T11146]  netlink_unicast+0x62f/0x850
[  326.251225][T11146]  ? __pfx_netlink_unicast+0x10/0x10
[  326.251273][T11146]  netlink_sendmsg+0x8d1/0xdd0
[  326.251311][T11146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  326.251356][T11146]  ____sys_sendmsg+0xa95/0xc70
[  326.251391][T11146]  ? copy_msghdr_from_user+0x10a/0x160
[  326.251418][T11146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  326.251469][T11146]  ___sys_sendmsg+0x134/0x1d0
[  326.251498][T11146]  ? __pfx____sys_sendmsg+0x10/0x10
[  326.251523][T11146]  ? __lock_acquire+0x622/0x1c90
[  326.251604][T11146]  __sys_sendmsg+0x16d/0x220
[  326.251632][T11146]  ? __pfx___sys_sendmsg+0x10/0x10
[  326.251684][T11146]  do_syscall_64+0xcd/0x490
[  326.251714][T11146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.251740][T11146] RIP: 0033:0x7f7d8df8e9a9
[  326.251760][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.251784][T11146] RSP: 002b:00007f7d8ee8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.251809][T11146] RAX: ffffffffffffffda RBX: 00007f7d8e1b5fa0 RCX: 00007f7d8df8e9a9
[  326.251827][T11146] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003
[  326.251843][T11146] RBP: 00007f7d8ee8a090 R08: 0000000000000000 R09: 0000000000000000
[  326.251858][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.251873][T11146] R13: 0000000000000000 R14: 00007f7d8e1b5fa0 R15: 00007fff622125d8
[  326.251909][T11146]  </TASK>
[  326.516604][ T5167] Bluetooth: hci1: command 0x0406 tx timeout
[  326.522775][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout
[  326.597810][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout
[  326.917464][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.799'.
[  328.387245][T11210] zswap: compressor  not available
[  328.594962][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout
[  328.684589][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout
[  328.761787][T11223] FAULT_INJECTION: forcing a failure.
[  328.761787][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.827649][T11223] CPU: 1 UID: 0 PID: 11223 Comm: syz.2.809 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  328.827699][T11223] Tainted: [U]=USER
[  328.827707][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  328.827722][T11223] Call Trace:
[  328.827730][T11223]  <TASK>
[  328.827740][T11223]  dump_stack_lvl+0x16c/0x1f0
[  328.827770][T11223]  should_fail_ex+0x512/0x640
[  328.827801][T11223]  _copy_to_user+0x32/0xd0
[  328.827840][T11223]  simple_read_from_buffer+0xcb/0x170
[  328.827879][T11223]  proc_fail_nth_read+0x197/0x270
[  328.827915][T11223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  328.827952][T11223]  ? rw_verify_area+0xcf/0x680
[  328.827986][T11223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  328.828020][T11223]  vfs_read+0x1e4/0xc60
[  328.828049][T11223]  ? __pfx___mutex_lock+0x10/0x10
[  328.828076][T11223]  ? __pfx_vfs_read+0x10/0x10
[  328.828108][T11223]  ? __fget_files+0x20e/0x3c0
[  328.828142][T11223]  ksys_read+0x12a/0x250
[  328.828165][T11223]  ? __pfx_ksys_read+0x10/0x10
[  328.828201][T11223]  do_syscall_64+0xcd/0x490
[  328.828228][T11223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.828254][T11223] RIP: 0033:0x7f7d8df8d3bc
[  328.828274][T11223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  328.828299][T11223] RSP: 002b:00007f7d8ee8a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  328.828323][T11223] RAX: ffffffffffffffda RBX: 00007f7d8e1b5fa0 RCX: 00007f7d8df8d3bc
[  328.828340][T11223] RDX: 000000000000000f RSI: 00007f7d8ee8a0a0 RDI: 0000000000000004
[  328.828355][T11223] RBP: 00007f7d8ee8a090 R08: 0000000000000000 R09: 0000000000000000
[  328.828370][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.828385][T11223] R13: 0000000000000000 R14: 00007f7d8e1b5fa0 R15: 00007fff622125d8
[  328.828421][T11223]  </TASK>
[  329.213434][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.810'.
[  329.886639][T11244] FAULT_INJECTION: forcing a failure.
[  329.886639][T11244] name failslab, interval 1, probability 0, space 0, times 0
[  329.976405][T11244] CPU: 0 UID: 0 PID: 11244 Comm: syz.6.813 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  329.976448][T11244] Tainted: [U]=USER
[  329.976457][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  329.976470][T11244] Call Trace:
[  329.976479][T11244]  <TASK>
[  329.976489][T11244]  dump_stack_lvl+0x16c/0x1f0
[  329.976519][T11244]  should_fail_ex+0x512/0x640
[  329.976545][T11244]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  329.976576][T11244]  should_failslab+0xc2/0x120
[  329.976604][T11244]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  329.976632][T11244]  ? sk_prot_alloc+0x60/0x2a0
[  329.976665][T11244]  sk_prot_alloc+0x60/0x2a0
[  329.976699][T11244]  sk_alloc+0x36/0xc20
[  329.976726][T11244]  inet6_create+0x381/0x12b0
[  329.976754][T11244]  ? inet6_create+0x7f/0x12b0
[  329.976783][T11244]  __sock_create+0x338/0x8d0
[  329.976824][T11244]  inet_ctl_sock_create+0x94/0x230
[  329.976867][T11244]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  329.976900][T11244]  ? lockdep_init_map_type+0x5c/0x280
[  329.976933][T11244]  ? do_init_timer+0xc9/0x110
[  329.976966][T11244]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[  329.976991][T11244]  sctp_ctrlsock_init+0x40/0xf0
[  329.977015][T11244]  ops_init+0x1e2/0x5f0
[  329.977046][T11244]  setup_net+0x1ff/0x510
[  329.977072][T11244]  ? lockdep_init_map_type+0x5c/0x280
[  329.977105][T11244]  ? __pfx_setup_net+0x10/0x10
[  329.977133][T11244]  ? debug_mutex_init+0x37/0x70
[  329.977164][T11244]  copy_net_ns+0x2a6/0x5f0
[  329.977198][T11244]  create_new_namespaces+0x3ea/0xa90
[  329.977236][T11244]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  329.977269][T11244]  ksys_unshare+0x45b/0xa40
[  329.977303][T11244]  ? __pfx_ksys_unshare+0x10/0x10
[  329.977337][T11244]  ? xfd_validate_state+0x61/0x180
[  329.977381][T11244]  __x64_sys_unshare+0x31/0x40
[  329.977412][T11244]  do_syscall_64+0xcd/0x490
[  329.977442][T11244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.977468][T11244] RIP: 0033:0x7f5659f8e9a9
[  329.977487][T11244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.977510][T11244] RSP: 002b:00007f565ad6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  329.977532][T11244] RAX: ffffffffffffffda RBX: 00007f565a1b6080 RCX: 00007f5659f8e9a9
[  329.977549][T11244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  329.977564][T11244] RBP: 00007f565a010d69 R08: 0000000000000000 R09: 0000000000000000
[  329.977579][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.977594][T11244] R13: 0000000000000000 R14: 00007f565a1b6080 R15: 00007ffe45105ff8
[  329.977628][T11244]  </TASK>
[  336.151154][T11374] Invalid ELF header magic: != ELF
[  338.909632][T11403] futex_wake_op: syz.5.836 tries to shift op by -2048; fix this program
[  338.918499][T11403] futex_wake_op: syz.5.836 tries to shift op by -2048; fix this program
[  339.531875][ T5167] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  340.444441][T11448] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260
[  340.444479][T11448] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15
[  340.463361][T11448] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  341.495085][T11454] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.591086][T11454] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.675537][T11454] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.782083][T11454] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.387120][T11500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.396306][T11500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.404671][T11500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.413217][T11500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.423173][T11500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  343.506644][T11454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.520966][T11454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.533745][T11454] bond0 (unregistering): Released all slaves
[  343.653181][T11454] HfR: left promiscuous mode
[  344.506817][T11500] Bluetooth: hci4: command tx timeout
[  344.633734][T11454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.646972][T11454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.675650][T11454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.700006][T11454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.754538][T11454] veth1_macvtap: left promiscuous mode
[  344.768827][T11454] veth0_macvtap: left promiscuous mode
[  344.775693][T11454] veth1_vlan: left promiscuous mode
[  344.789167][T11454] veth0_vlan: left promiscuous mode
[  346.120136][T11454] team0 (unregistering): Port device team_slave_1 removed
[  346.208446][T11454] team0 (unregistering): Port device team_slave_0 removed
[  346.590978][T11500] Bluetooth: hci4: command tx timeout
[  347.359511][T11499] chnl_net:caif_netlink_parms(): no params data found
[  347.901444][T11594] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input21
[  348.236223][T11499] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.243507][T11499] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.251420][T11499] bridge_slave_0: entered allmulticast mode
[  348.259913][T11499] bridge_slave_0: entered promiscuous mode
[  348.317701][T11499] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.335521][T11499] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.345149][T11499] bridge_slave_1: entered allmulticast mode
[  348.352172][T11499] bridge_slave_1: entered promiscuous mode
[  348.466114][T11499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.502848][T11499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.594278][T11499] team0: Port device team_slave_0 added
[  348.616217][T11499] team0: Port device team_slave_1 added
[  348.664679][T11500] Bluetooth: hci4: command tx timeout
[  348.706647][T11499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.718430][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.753722][T11499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.788086][T11499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.804247][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.833730][T11499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.906545][T11610] i2c i2c-0: new_device: Can't parse I2C address
[  349.047716][T11614] random: crng reseeded on system resumption
[  349.148176][T11499] hsr_slave_0: entered promiscuous mode
[  349.180070][T11499] hsr_slave_1: entered promiscuous mode
[  350.747618][T11500] Bluetooth: hci4: command tx timeout
[  351.253271][T11499] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  351.275228][T11499] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  351.290327][T11499] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  351.311826][T11499] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  351.652252][T11672] input: f�
 as /devices/virtual/input/input22
[  351.940481][T11499] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.011707][T11499] 8021q: adding VLAN 0 to HW filter on device team0
[  352.065806][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.073002][T11505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.121922][T11598] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.129109][T11598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.760668][T11499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.966091][T11499] veth0_vlan: entered promiscuous mode
[  354.006085][T11499] veth1_vlan: entered promiscuous mode
[  354.246460][T11499] veth0_macvtap: entered promiscuous mode
[  354.304650][T11499] veth1_macvtap: entered promiscuous mode
[  354.405616][T11499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.436533][T11499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.447332][T11499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.461820][T11499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.498496][T11499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.517602][T11499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.102603][T11454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.110432][T11454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.380595][T11447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.419737][T11447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.451921][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'.
[  356.379183][T11824] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input23
[  360.636425][T11919] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  360.695410][T11936] netlink: 330 bytes leftover after parsing attributes in process `syz.3.911'.
[  360.922542][T11936] �: renamed from hsr0 (while UP)
[  361.770424][T11964] ubi: mtd0 is already attached to ubi0
[  362.603936][T11979] ubi: mtd0 is already attached to ubi0
[  363.681462][T11500] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  363.692612][T11500] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  363.700122][T11500] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  364.513797][T12046] vivid-003: =================  START STATUS  =================
[  364.522594][T12046] vivid-003: Radio HW Seek Mode: Bounded
[  364.529215][T12046] vivid-003: Radio Programmable HW Seek: false
[  364.535578][T12046] vivid-003: RDS Rx I/O Mode: Block I/O
[  364.542970][T12046] vivid-003: Generate RBDS Instead of RDS: false
[  364.577992][T12046] vivid-003: RDS Reception: true
[  364.623617][T12046] vivid-003: RDS Program Type: 0 inactive
[  364.635433][T12046] vivid-003: RDS PS Name:  inactive
[  364.645529][T12046] vivid-003: RDS Radio Text:  inactive
[  364.674622][T12046] vivid-003: RDS Traffic Announcement: false inactive
[  364.682684][T12046] vivid-003: RDS Traffic Program: false inactive
[  364.689826][T12046] vivid-003: RDS Music: false inactive
[  364.695355][T12046] vivid-003: ==================  END STATUS  ==================
[  365.537536][T12061] __vm_enough_memory: pid: 12061, comm: syz.2.933, bytes: 4398046511104 not enough memory for the allocation
[  366.984903][T12090] netlink: zone id is out of range
[  367.021017][T12090] netlink: zone id is out of range
[  367.047683][T12090] netlink: zone id is out of range
[  367.115068][T12090] netlink: zone id is out of range
[  367.129187][T12090] netlink: zone id is out of range
[  367.158097][T12090] netlink: zone id is out of range
[  367.177489][T12090] netlink: zone id is out of range
[  367.209263][T12090] netlink: zone id is out of range
[  367.214409][T12090] netlink: zone id is out of range
[  367.219700][T12090] netlink: zone id is out of range
[  369.872741][   T30] audit: type=1400 audit(4294967732.982:14): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12126 comm="syz.2.946"
[  371.386615][T12137] FAULT_INJECTION: forcing a failure.
[  371.386615][T12137] name failslab, interval 1, probability 0, space 0, times 0
[  371.439054][T12137] CPU: 1 UID: 0 PID: 12137 Comm: syz.6.947 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  371.439080][T12137] Tainted: [U]=USER
[  371.439085][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  371.439093][T12137] Call Trace:
[  371.439098][T12137]  <TASK>
[  371.439104][T12137]  dump_stack_lvl+0x16c/0x1f0
[  371.439124][T12137]  should_fail_ex+0x512/0x640
[  371.439139][T12137]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  371.439156][T12137]  should_failslab+0xc2/0x120
[  371.439173][T12137]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  371.439187][T12137]  ? number+0x9aa/0xc70
[  371.439202][T12137]  ? __d_alloc+0x31/0xaa0
[  371.439219][T12137]  __d_alloc+0x31/0xaa0
[  371.439232][T12137]  ? __pfx_number+0x10/0x10
[  371.439250][T12137]  d_alloc+0x4a/0x1e0
[  371.439265][T12137]  d_alloc_parallel+0xe3/0x12e0
[  371.439286][T12137]  ? stack_depot_save_flags+0x28/0xa40
[  371.439302][T12137]  ? __pfx_default_pointer+0x10/0x10
[  371.439323][T12137]  ? __pfx_d_alloc_parallel+0x10/0x10
[  371.439342][T12137]  ? lockdep_init_map_type+0x5c/0x280
[  371.439362][T12137]  ? lockdep_init_map_type+0x5c/0x280
[  371.439392][T12137]  __lookup_slow+0x193/0x460
[  371.439412][T12137]  ? __pfx___lookup_slow+0x10/0x10
[  371.439432][T12137]  ? compaction_alloc+0x2bb0/0x4220
[  371.439457][T12137]  ? compaction_alloc+0x2bb0/0x4220
[  371.439479][T12137]  ? d_lookup+0xe7/0x190
[  371.439500][T12137]  lookup_noperm+0xe1/0x110
[  371.439518][T12137]  start_creating.part.0+0x15a/0x3e0
[  371.439541][T12137]  debugfs_create_dir+0x6c/0x5f0
[  371.439563][T12137]  ptp_open+0x307/0x520
[  371.439586][T12137]  ? __pfx_ptp_open+0x10/0x10
[  371.439611][T12137]  ? __pfx_ptp_open+0x10/0x10
[  371.439632][T12137]  posix_clock_open+0x178/0x290
[  371.439649][T12137]  ? __pfx_posix_clock_open+0x10/0x10
[  371.439664][T12137]  chrdev_open+0x231/0x6a0
[  371.439677][T12137]  ? __pfx_apparmor_file_open+0x10/0x10
[  371.439697][T12137]  ? __pfx_chrdev_open+0x10/0x10
[  371.439713][T12137]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  371.439737][T12137]  do_dentry_open+0x744/0x1c10
[  371.439752][T12137]  ? __pfx_chrdev_open+0x10/0x10
[  371.439770][T12137]  vfs_open+0x82/0x3f0
[  371.439790][T12137]  path_openat+0x1de4/0x2cb0
[  371.439810][T12137]  ? __pfx_path_openat+0x10/0x10
[  371.439824][T12137]  ? __lock_acquire+0xb8a/0x1c90
[  371.439844][T12137]  do_filp_open+0x20b/0x470
[  371.439858][T12137]  ? __pfx_do_filp_open+0x10/0x10
[  371.439900][T12137]  ? alloc_fd+0x471/0x7d0
[  371.439949][T12137]  do_sys_openat2+0x11b/0x1d0
[  371.439981][T12137]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.440023][T12137]  __x64_sys_openat+0x174/0x210
[  371.440041][T12137]  ? __pfx___x64_sys_openat+0x10/0x10
[  371.440060][T12137]  ? syscall_user_dispatch+0x78/0x140
[  371.440079][T12137]  do_syscall_64+0xcd/0x490
[  371.440095][T12137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.440110][T12137] RIP: 0033:0x7f5659f8e9a9
[  371.440123][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.440136][T12137] RSP: 002b:00007f565ad6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  371.440150][T12137] RAX: ffffffffffffffda RBX: 00007f565a1b6080 RCX: 00007f5659f8e9a9
[  371.440159][T12137] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  371.440168][T12137] RBP: 00007f565a010d69 R08: 0000000000000000 R09: 0000000000000000
[  371.440176][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.440184][T12137] R13: 0000000000000000 R14: 00007f565a1b6080 R15: 00007ffe45105ff8
[  371.440203][T12137]  </TASK>
[  372.818959][T12165] __vm_enough_memory: pid: 12165, comm: syz.5.950, bytes: 4398046511104 not enough memory for the allocation
[  377.054388][T12266] .SR: entered promiscuous mode
[  377.071217][T12253] __vm_enough_memory: pid: 12253, comm: syz.3.965, bytes: 4398046511104 not enough memory for the allocation
[  377.821262][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'.
[  378.137162][T12285] hsr_slave_0 (unregistering): left promiscuous mode
[  378.505977][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.513479][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  379.057736][T12311] random: crng reseeded on system resumption
[  379.080642][T12302] FAULT_INJECTION: forcing a failure.
[  379.080642][T12302] name failslab, interval 1, probability 0, space 0, times 0
[  379.124078][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.2.971 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  379.124123][T12302] Tainted: [U]=USER
[  379.124131][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.124146][T12302] Call Trace:
[  379.124155][T12302]  <TASK>
[  379.124165][T12302]  dump_stack_lvl+0x16c/0x1f0
[  379.124198][T12302]  should_fail_ex+0x512/0x640
[  379.124225][T12302]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  379.124263][T12302]  should_failslab+0xc2/0x120
[  379.124294][T12302]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  379.124327][T12302]  ? kstrdup_const+0x63/0x80
[  379.124359][T12302]  kstrdup+0x53/0x100
[  379.124388][T12302]  kstrdup_const+0x63/0x80
[  379.124414][T12302]  __kernfs_new_node+0x9b/0x8e0
[  379.124460][T12302]  ? __pfx___kernfs_new_node+0x10/0x10
[  379.124510][T12302]  ? find_held_lock+0x2b/0x80
[  379.124539][T12302]  ? kernfs_root+0xee/0x2a0
[  379.124572][T12302]  kernfs_new_node+0x13c/0x1e0
[  379.124619][T12302]  kernfs_create_link+0xcc/0x240
[  379.124659][T12302]  sysfs_do_create_link_sd+0x90/0x140
[  379.124701][T12302]  sysfs_create_link+0x61/0xc0
[  379.124741][T12302]  device_add+0x62c/0x1a70
[  379.124780][T12302]  ? __pfx_device_add+0x10/0x10
[  379.124813][T12302]  ? lockdep_init_map_type+0x5c/0x280
[  379.124850][T12302]  ? __init_waitqueue_head+0xca/0x150
[  379.124884][T12302]  netdev_register_kobject+0x182/0x3a0
[  379.124923][T12302]  register_netdevice+0x13dc/0x2270
[  379.124962][T12302]  ? __pfx_register_netdevice+0x10/0x10
[  379.125005][T12302]  __ip_tunnel_create+0x540/0x6e0
[  379.125042][T12302]  ? __pfx___ip_tunnel_create+0x10/0x10
[  379.125088][T12302]  ip_tunnel_init_net+0x22f/0x7d0
[  379.125129][T12302]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  379.125171][T12302]  ? trace_kmalloc+0x2b/0xd0
[  379.125200][T12302]  ? __kmalloc_noprof+0x242/0x510
[  379.125225][T12302]  ? lockdep_init_map_type+0x5c/0x280
[  379.125266][T12302]  ? __pfx_ipgre_tap_init_net+0x10/0x10
[  379.125297][T12302]  ops_init+0x1e2/0x5f0
[  379.125331][T12302]  setup_net+0x1ff/0x510
[  379.125358][T12302]  ? lockdep_init_map_type+0x5c/0x280
[  379.125394][T12302]  ? __pfx_setup_net+0x10/0x10
[  379.125426][T12302]  ? debug_mutex_init+0x37/0x70
[  379.125458][T12302]  copy_net_ns+0x2a6/0x5f0
[  379.125494][T12302]  create_new_namespaces+0x3ea/0xa90
[  379.125534][T12302]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  379.125568][T12302]  ksys_unshare+0x45b/0xa40
[  379.125613][T12302]  ? __pfx_ksys_unshare+0x10/0x10
[  379.125650][T12302]  ? xfd_validate_state+0x61/0x180
[  379.125696][T12302]  __x64_sys_unshare+0x31/0x40
[  379.125730][T12302]  do_syscall_64+0xcd/0x490
[  379.125761][T12302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.125788][T12302] RIP: 0033:0x7f7d8df8e9a9
[  379.125809][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.125834][T12302] RSP: 002b:00007f7d8ee8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  379.125864][T12302] RAX: ffffffffffffffda RBX: 00007f7d8e1b5fa0 RCX: 00007f7d8df8e9a9
[  379.125882][T12302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  379.125898][T12302] RBP: 00007f7d8e010d69 R08: 0000000000000000 R09: 0000000000000000
[  379.125915][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.125931][T12302] R13: 0000000000000000 R14: 00007f7d8e1b5fa0 R15: 00007fff622125d8
[  379.125967][T12302]  </TASK>
[  381.576336][T12342] netlink: 342 bytes leftover after parsing attributes in process `syz.2.976'.
[  381.988197][T12345] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI
[  382.000111][T12345] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7]
[  382.008548][T12345] CPU: 1 UID: 0 PID: 12345 Comm: syz.2.977 Tainted: G     U              6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) 
[  382.022114][T12345] Tainted: [U]=USER
[  382.025914][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  382.035968][T12345] RIP: 0010:__mutex_lock+0x14f/0xb90
[  382.041275][T12345] Code: d0 7c 08 84 d2 0f 85 ab 07 00 00 8b 35 2a 99 5a 0f 85 f6 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 07 00 00 48 3b 5b 60 0f 85 e0 01 00 00 bf 01
[  382.060895][T12345] RSP: 0018:ffffc900043f7a80 EFLAGS: 00010202
[  382.066968][T12345] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffffffff35bd400
[  382.074944][T12345] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 00000000000000b0
[  382.082920][T12345] RBP: ffffc900043f7bc0 R08: ffffffff8a8dd067 R09: ffffed100ee373a8
[  382.090897][T12345] R10: ffffc900043f7be0 R11: 0000000000000000 R12: dffffc0000000000
[  382.098872][T12345] R13: ffffc900043f7b00 R14: 0000000000000000 R15: 1ffff9200087ef5a
[  382.106847][T12345] FS:  00007f7d8ee696c0(0000) GS:ffff88812482d000(0000) knlGS:0000000000000000
[  382.115787][T12345] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.122378][T12345] CR2: 00007f565ace56c0 CR3: 000000007f9e0000 CR4: 00000000003526f0
[  382.130355][T12345] Call Trace:
[  382.133632][T12345]  <TASK>
[  382.136569][T12345]  ? trace_kmem_cache_alloc+0x28/0xc0
[  382.141959][T12345]  ? kmem_cache_alloc_node_noprof+0x225/0x3b0
[  382.148123][T12345]  ? hci_devcd_register+0x47/0x170
[  382.153260][T12345]  ? __pfx___mutex_lock+0x10/0x10
[  382.158292][T12345]  ? __asan_memset+0x23/0x50
[  382.162985][T12345]  ? __build_skb_around+0x278/0x3b0
[  382.168203][T12345]  ? __alloc_skb+0x200/0x380
[  382.172800][T12345]  ? __pfx___alloc_skb+0x10/0x10
[  382.177742][T12345]  ? __pfx_vhci_coredump_hdr+0x10/0x10
[  382.183216][T12345]  ? __pfx_vhci_coredump+0x10/0x10
[  382.188337][T12345]  ? hci_devcd_register+0x47/0x170
[  382.193465][T12345]  hci_devcd_register+0x47/0x170
[  382.198420][T12345]  force_devcd_write+0x16c/0x340
[  382.203372][T12345]  ? __pfx_force_devcd_write+0x10/0x10
[  382.208848][T12345]  full_proxy_write+0x13f/0x200
[  382.213720][T12345]  ? __pfx_full_proxy_write+0x10/0x10
[  382.219100][T12345]  vfs_write+0x29d/0x1150
[  382.223438][T12345]  ? __pfx___mutex_lock+0x10/0x10
[  382.228473][T12345]  ? __pfx_vfs_write+0x10/0x10
[  382.233246][T12345]  ? __fget_files+0x20e/0x3c0
[  382.237930][T12345]  ksys_write+0x12a/0x250
[  382.242263][T12345]  ? __pfx_ksys_write+0x10/0x10
[  382.247127][T12345]  do_syscall_64+0xcd/0x490
[  382.251641][T12345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.257539][T12345] RIP: 0033:0x7f7d8df8e9a9
[  382.261966][T12345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.281582][T12345] RSP: 002b:00007f7d8ee69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  382.290002][T12345] RAX: ffffffffffffffda RBX: 00007f7d8e1b6080 RCX: 00007f7d8df8e9a9
[  382.297976][T12345] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007
[  382.305961][T12345] RBP: 00007f7d8e010d69 R08: 0000000000000000 R09: 0000000000000000
[  382.313940][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.321913][T12345] R13: 0000000000000000 R14: 00007f7d8e1b6080 R15: 00007fff622125d8
[  382.329898][T12345]  </TASK>
[  382.332942][T12345] Modules linked in:
[  382.337225][T12345] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  382.418062][T12345] RIP: 0010:__mutex_lock+0x14f/0xb90
[  382.428147][T12345] Code: d0 7c 08 84 d2 0f 85 ab 07 00 00 8b 35 2a 99 5a 0f 85 f6 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 07 00 00 48 3b 5b 60 0f 85 e0 01 00 00 bf 01
[  382.452576][T12345] RSP: 0018:ffffc900043f7a80 EFLAGS: 00010202
[  382.464123][T12345] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: 1ffffffff35bd400
[  382.472451][T12345] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 00000000000000b0
[  382.480747][T12345] RBP: ffffc900043f7bc0 R08: ffffffff8a8dd067 R09: ffffed100ee373a8
[  382.489938][T12345] R10: ffffc900043f7be0 R11: 0000000000000000 R12: dffffc0000000000
[  382.508821][T12345] R13: ffffc900043f7b00 R14: 0000000000000000 R15: 1ffff9200087ef5a
[  382.518797][T12345] FS:  00007f7d8ee696c0(0000) GS:ffff88812482d000(0000) knlGS:0000000000000000
[  382.530648][T12345] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.548745][T12345] CR2: 000055559531e808 CR3: 000000007f9e0000 CR4: 00000000003526f0
[  382.559648][T12345] Kernel panic - not syncing: Fatal exception
[  382.565973][T12345] Kernel Offset: disabled
[  382.570301][T12345] Rebooting in 86400 seconds..