last executing test programs:

2m18.167101158s ago: executing program 1 (id=279):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty16\x00', 0x420180, 0x0)
write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="fccd6306d3870b801816cc9180d6bbc761c98e578f48aef2829c15445315f6e69c7889a317d97ab1fcdb6777fc3fcd6dac5966bd8345eb18ee3ad719ad560e7c0d07742915d935414279d16325ec612ce9919eb2d019d44c5bb7ed98e1da4e80dff7527b12818153d1b9e4b13208676f734ef2c7ac5cc464e6a7d61580c720b08f20d9322c2fda07e02485ed594dbafe3e2b1fcc0c39bdef5582ca8b6e19ef9c6111d181c09911b9768d46a402b24900002fd81bc9378870", 0xb8)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
close_range$auto(0x2, 0x8, 0x0)
fspick$auto(0xffffffffffffffff, 0x0, 0x5)

2m17.96434296s ago: executing program 1 (id=280):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd6/trace/act_mask\x00', 0x80302, 0x0)
prctl$auto_PR_GET_MDWE(0x42, 0x3, 0xffffffffffffffff, 0x2a, 0xff)
unshare$auto(0x40000080)
read$auto(0xffffffffffffffff, 0x0, 0x10001)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x4, 0x5, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x121c40, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0x9, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"})
sendfile$auto(r0, r0, 0x0, 0x3)

2m17.375402253s ago: executing program 1 (id=283):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose10/addr_assign_type\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/124, 0x7c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=&(0x7f0000000180)='\x00', &(0x7f0000000280)=&(0x7f0000000200)='\vX5n\x91p\xe6\x1eRN8\x99\x88\xa2\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
setresgid$auto(0x800, 0xee01, 0xffffffffffffffff)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='R'], 0x1ac}}, 0x40000)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
mmap$auto(0x0, 0x20005, 0xffffffffffff6400, 0xeb1, r1, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

2m15.842482581s ago: executing program 1 (id=284):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0xf00)

2m15.359832921s ago: executing program 1 (id=286):
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x7fff)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
socket(0x11, 0x80003, 0x300)
prctl$auto(0x43, 0x17, 0x0, 0x1, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4008af13, r0)
prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0x8ada, 0x0, 0x52, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_stat\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2fd6d1fe7baaa616052f7108fc4600fc32311219cbbcad62170200", @ANYRES32=r3, @ANYBLOB="08007d8004006880"], 0x24}}, 0x4000000)
setresgid$auto(0xffffffffffffffff, 0x0, 0x0)

2m14.060790315s ago: executing program 1 (id=288):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'})
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0)
socket(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(r0, 0x0, 0xd)
getsockopt$auto_SO_ACCEPTCONN(r1, 0x5c, 0x1e, &(0x7f0000000680)='\x00', &(0x7f00000006c0)=0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0xc0585605, 0x38)

1m58.927512527s ago: executing program 32 (id=288):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, 0x0, 0x80000000)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'})
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0)
socket(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(r0, 0x0, 0xd)
getsockopt$auto_SO_ACCEPTCONN(r1, 0x5c, 0x1e, &(0x7f0000000680)='\x00', &(0x7f00000006c0)=0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0xc0585605, 0x38)

1m52.039675923s ago: executing program 2 (id=321):
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x810)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
migrate_pages$auto(0x0, 0x3, 0x0, 0x0)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r1)
sendmsg$auto_HANDSHAKE_CMD_DONE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HANDSHAKE_A_DONE_SOCKFD={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20040040)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)

1m50.651393949s ago: executing program 2 (id=322):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000003380)="b25b1a8c398ef400dbcbc7a996eea7f3804ca6c7591adef6578d2f5f520f687f316ba7329774c854d58309037c0ae2ae6eb53b1d", 0x34)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
clock_gettime$auto(0xd, &(0x7f0000000000)={0x7, 0x1})
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0xa, 0x0)
r4 = socket(0x18, 0xa, 0x1)
read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f00000002c0)=""/67, 0x43)
socket(0x25, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0x100082)
madvise$auto(0x0, 0x330, 0x4)
write$auto(0x3, 0x0, 0x100082)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r5 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r5, 0x29, 0x1f, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x1, 0x9)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x4000100000eb1, r4, 0x8002)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)

1m47.20980551s ago: executing program 2 (id=325):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r1 = fcntl$auto(r0, 0x400, 0x1)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x1b0)
close_range$auto(r1, r1, 0x200)
open(0x0, 0xae841, 0x1fb)
socket(0x27, 0xa, 0x3)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
write$auto(0x800000000000c8, 0x0, 0x1a)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = getpid()
r4 = pidfd_open$auto(r3, 0x0)
process_madvise$auto_MADV_COLD(r4, &(0x7f0000000100)={0x0, 0x37e}, 0x1, 0x14, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20b42, 0x0)
r6 = socket(0x28, 0x80000, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
write$auto(0x3, 0x0, 0x100082)
write$auto(r6, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0)

1m44.455838706s ago: executing program 2 (id=329):
r0 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:3/stats\x00', 0x440140, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x21, 0x2, 0x2)
r1 = socket(0x9, 0x2, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003840)=ANY=[@ANYBLOB="30130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0005001f00ab1be0f111d42907", @ANYRES32=0x0, @ANYBLOB="0600090075a1000008000500020000000800210003000000"], 0x1330}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r5=>0x0})
mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353)
unlink$auto(&(0x7f00000000c0)='#(//\x00')
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi29\x00', 0x1c9240, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r6, 0x0, 0x400018)
ioctl$auto(0x3, 0x4020565a, 0x38)
bpf$auto(0x1, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r2, 0x4, 0x1ff, r1, @relative_id=0x11, 0xe602}, 0xf)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc)
bpf$auto(0x7, &(0x7f0000000100)=@query={@target_fd=r0, 0x3, 0xf4, 0x3ff, 0x4, @prog_cnt, 0x0, 0x5, 0xfffffffffffffffb, 0x7, 0x4158}, 0x6)
getsockopt$auto_SO_ZEROCOPY(0xffffffffffffffff, 0x8001, 0x3c, &(0x7f0000000080)='e&)\xb3K\x81\x00\xe2\xff\xea\x00\x00\x00\x13\xd6\xdfe\xe6(\xbeds\x1c-\x00', &(0x7f0000000280)=0x102314)

1m42.41077543s ago: executing program 2 (id=333):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
r0 = io_uring_setup$auto(0x9, 0x0) (async, rerun: 64)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async, rerun: 64)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x0, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pidfd_open$auto(0x1, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x48000) (async)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x0)
r3 = syz_clone3(&(0x7f00000002c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) (async)
socket(0xa, 0x801, 0x1)
unshare$auto(0x40000080) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/mdio_bus/drivers/Generic PHY/unbind\x00', 0x101a02, 0x0)
write$auto(0xca, 0x0, 0x10) (async, rerun: 64)
sendfile$auto(r4, r4, 0x0, 0x3) (async, rerun: 64)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72018809", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) (async, rerun: 32)
fcntl$auto_F_GETOWN(r4, 0x9, r3) (rerun: 32)

1m36.09047852s ago: executing program 2 (id=341):
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve0\x00'})
r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000003c0), 0x402, 0x0)
connect$auto(r1, &(0x7f0000000380)=@l2={0x1f, 0x401, @any, 0x8000, 0x1}, 0x80) (async)
connect$auto(r1, &(0x7f0000000380)=@l2={0x1f, 0x401, @any, 0x8000, 0x1}, 0x80)
mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0)
r2 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0)
lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000)
pipe$auto(&(0x7f00000000c0)=<r3=>r2)
read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000000)=""/84, 0x54)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_SET_EVBIT(r4, 0x40045564, 0x0) (async)
ioctl$auto_UI_SET_EVBIT(r4, 0x40045564, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x800]}, 0x7, 0x81) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x800]}, 0x7, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$auto(r6, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)

1m35.398555783s ago: executing program 33 (id=341):
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve0\x00'})
r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000003c0), 0x402, 0x0)
connect$auto(r1, &(0x7f0000000380)=@l2={0x1f, 0x401, @any, 0x8000, 0x1}, 0x80) (async)
connect$auto(r1, &(0x7f0000000380)=@l2={0x1f, 0x401, @any, 0x8000, 0x1}, 0x80)
mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0)
r2 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0)
lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000)
pipe$auto(&(0x7f00000000c0)=<r3=>r2)
read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000000)=""/84, 0x54)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_SET_EVBIT(r4, 0x40045564, 0x0) (async)
ioctl$auto_UI_SET_EVBIT(r4, 0x40045564, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x800]}, 0x7, 0x81) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x800]}, 0x7, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$auto(r6, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)

1m1.665168231s ago: executing program 4 (id=424):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x15)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000009eb276d90256ed7d27abc3fb47001b1d010d952126", @ANYRES8=r0, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1500"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m1.324641982s ago: executing program 4 (id=428):
setreuid$auto(0x15, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff02c}})
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x100080, 0x7fffffe)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)
keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8)

1m0.028855366s ago: executing program 4 (id=431):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x0, 0x2)
r1 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0)
readv$auto(r1, &(0x7f0000000200)={&(0x7f00000001c0)="d88e6e7b975e979db924051771afd95fab62fc1ee5f6", 0x7}, 0xfffffffffffffff9)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0)
sendmsg$auto_NFC_CMD_START_POLL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05000b000000000005000a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0x4)
r3 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cpu/0/msr\x00', 0x0, 0x0)
ioctl$auto_X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0)
prlimit64$auto(0x0, 0x3, &(0x7f0000000100)={0x6, 0x7}, &(0x7f0000000140)={0x3, 0x6})
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)

59.603908485s ago: executing program 4 (id=433):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async, rerun: 32)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600, 0x60}, 0x18)
r1 = open_tree$auto(r0, 0x0, 0x0)
r2 = pipe$auto(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'pimreg1\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'pim6reg0\x00', <r6=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'caif0\x00', <r7=>0x0}) (async, rerun: 32)
r8 = socket(0xa, 0x2, 0x88)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r10=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x4, 0x1ff, r8, @relative_id=0x13, 0xe600}, 0xf)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'wg0\x00', <r13=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r13, r12, 0x4, 0x401, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r16=>0x0})
sendmsg$auto_NL80211_CMD_DEL_PMK(r14, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r15, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x21}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x885) (async)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0) (async)
r18 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r18, @ANYRES8=r17, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x80)

58.902512878s ago: executing program 4 (id=434):
bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68)

58.607245864s ago: executing program 4 (id=435):
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
madvise$auto(0x900000000, 0xffffffffffff0004, 0x16)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000)
sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880)
sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, 0x0, 0x44084)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
ioperm$auto(0xefdd, 0x4, 0xfffffffa)
semget$auto(0x87, 0x5aa, 0x401)
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001100)={0x6, 0x4, 0x2, @inferred=r0}, 0x80000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x20000, 0x1)
socket(0x10, 0x2, 0x7fffffff)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250200000008000700", @ANYRES32, @ANYBLOB="0800080004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/225, 0xca)

43.244685948s ago: executing program 34 (id=435):
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
madvise$auto(0x900000000, 0xffffffffffff0004, 0x16)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000)
sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880)
sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, 0x0, 0x44084)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0)
ioperm$auto(0xefdd, 0x4, 0xfffffffa)
semget$auto(0x87, 0x5aa, 0x401)
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001100)={0x6, 0x4, 0x2, @inferred=r0}, 0x80000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x20000, 0x1)
socket(0x10, 0x2, 0x7fffffff)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250200000008000700", @ANYRES32, @ANYBLOB="0800080004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/225, 0xca)

11.986079954s ago: executing program 3 (id=531):
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e5b726bd7000fcdbdd251900000018000180140002006d616376746170300000000000000000"], 0x2c}}, 0x4048800) (async)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e5b726bd7000fcdbdd251900000018000180140002006d616376746170300000000000000000"], 0x2c}}, 0x4048800)

10.459079332s ago: executing program 3 (id=538):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyc7/dev\x00', 0x4000, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram5/queue/dax\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/146, 0x92)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
msgrcv$auto(0x0, 0x0, 0x4, 0xfffffffffffffdff, 0xb1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
io_getevents$auto(0x422, 0xfff, 0x5, 0x0, &(0x7f0000000040)={0x1, 0x8})

9.294076891s ago: executing program 3 (id=541):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x7, 0x5, 0x8, 0x10, r1, 0x2)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0)
pwrite64$auto(r4, &(0x7f0000000080)='+\\#', 0x3747, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x7, "539c8672e0c04cc39863c7c45fae0051dd50fc1b17fd6d4faa3ecea901b02460", @raw=0x48})
ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae88, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88) (async)
poll$auto(&(0x7f00000010c0)={0xc8, 0x20, 0x7}, 0xc, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x7, 0x5, 0x8, 0x10, r1, 0x2) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r2) (async)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) (async)
pwrite64$auto(r4, &(0x7f0000000080)='+\\#', 0x3747, 0x0) (async)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x7, "539c8672e0c04cc39863c7c45fae0051dd50fc1b17fd6d4faa3ecea901b02460", @raw=0x48}) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae88, 0x88) (async)

8.638793825s ago: executing program 0 (id=544):
r0 = setfsuid$auto(0xee00)
r1 = setfsuid$auto(0xee01)
setresuid$auto(0xffffffffffffffff, 0x0, r0)
prctl$auto(0x23, 0x20000000000000a, 0x7fffffffefff, 0x0, 0x0)
lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xffffffff, 0xa, 0x9, 0x400, r1, <r2=>0xee01, 0x0, 0x5, 0x0, 0x5, 0x2, 0x8eb4, 0x80, 0x1, 0x100, 0x8, 0x94})
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
flock$auto(r3, 0x1)
ioctl$auto_TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000000100))
keyctl$auto(0x4, r1, r0, r2, 0x5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x2, 0x0)
socket(0x18, 0x5, 0x1)
socket(0x2, 0x801, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd5/hctx0/cpu1/read_rq_list\x00', 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x29, 0xa, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0)
pread64$auto(r4, 0x0, 0x8100000041, 0x3)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3d7}, 0x7}, 0x803, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x5234c0, 0x4)
chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000280)='team_slave_1\x00', 0x0)
execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0)

7.966014642s ago: executing program 3 (id=549):
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
close_range$auto(0x2, 0x8, 0x0)
mknod$auto(0x0, 0xc9, 0xfffffffa)
r1 = getuid()
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2b, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd7, 0x7fffffff, 0x6, 0x0, 0xf0, 0x3690, 0xb76, {0xfffffffc, 0x10001}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0x6, 0xffff, 0xaab4, 0x806})
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @empty}, 0x6e)
fstat$auto(r2, &(0x7f00000000c0)={0xfff, 0x2, 0x4, 0x3, r1, <r5=>0xee01, 0x0, 0x8001, 0x4, 0x10, 0xb, 0x161e, 0x7, 0x7792, 0x3, 0x7, 0x9817})
keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x104, 0x2, r1, r5, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0)
ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, r0)
write$auto(r3, 0x0, 0x80000000)
r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f0000000000)={@siginfo_0_0={0xbb8, 0x155, 0xfffffffc, @_sigchld={0x0, 0x0, 0x80000001, 0x4e, 0xc}}})
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x8000000000000004, 0x0, 0xffffe, 0x3ff, 0xfbfffffffffffffe, 0x9c, 0x0, 0xe5, 0x0, 0x2, 0x0, 0x2})
socket(0x29, 0x801, 0x84)
mmap$auto(0x6, 0x3, 0x7f, 0x11, r6, 0x10001)

7.889157425s ago: executing program 0 (id=550):
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
write$auto(0xffffffffffffffff, 0x0, 0xc9c8)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/vlan1\x00', 0x121800, 0x0)
io_uring_setup$auto(0x9, 0x0)
clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x1b0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
write$auto(0x3, 0x0, 0x100082)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xffffffffffffffff, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x100000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xc, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
geteuid()

7.604831398s ago: executing program 0 (id=551):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000)
ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8)
madvise$auto(0x0, 0x200007, 0x19)
syz_clone3(0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex_wake$auto(0x0, 0x6, 0xfffffffa, 0x6)
sysfs$auto(0x2, 0x23, 0x0)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x4)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x4010)

6.008375799s ago: executing program 6 (id=556):
r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x8, 0x0, 0xffffffffffffffff, 0x989, 0x1)
syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff)
setsockopt$auto(r0, 0x7, 0xfffff5a4, &(0x7f0000000000)='[-%-\x00', 0x9)
r1 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x809, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4)
r4 = ioctl$auto_dma_heap_fops_dma_heap(r3, 0x7c, &(0x7f0000000240)="b9d7b281d6d1d225596e7ba9d03ba7821b8f48a9376db5277236f766eb5455b395e88d8a64c61bb90a4c44a34f2a571c36fb8469832728c0f9677fd59305ce8f5e0b9a97f7caadc0f250fcb31c20b7d5090961b5a0346ee14c6a7f8d93")
ioctl$auto_FIOQSIZE(r1, 0x5460, r4)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r7 = getsid$auto(0x0)
fcntl$auto(0x3, 0x4, r7)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0xa, 0x0, 0x1, 0xc756}, 0xfff}, 0x5, 0x311)

5.626585802s ago: executing program 6 (id=558):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x220000, 0x0)
setgroups$auto(0xe32, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_BLKGETDISKSEQ(r0, 0x80081280, 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x8, 0x2, 0x63, 0xd2, 0x7f, 0x3})

5.184183773s ago: executing program 3 (id=560):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x400000000009b72, 0x5, 0x8000)
r1 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r1, 0x107, 0x12, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
timerfd_gettime$auto(r2, &(0x7f0000000100)={{0x3, 0x5}, {0x7ff, 0x8db}})
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0x4020ae76, 0x38)
madvise$auto(0x0, 0x2003f0, 0x15)

4.705399625s ago: executing program 0 (id=561):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xcab81, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0)
writev$auto(r0, &(0x7f0000003600)={0x0, 0x2}, 0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

4.599682444s ago: executing program 5 (id=562):
gettid()
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152)
rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0xa)
mmap$auto(0x100000000000002, 0x2, 0x8, 0x40dc, 0x401, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
ioctl$auto(r0, 0xc0404d1a, r0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
write$auto_tty_fops_tty_io(r1, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13", 0xc4)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0x402c542b, 0x38)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x943, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0xffffffff, 0x2, 0x7, 0x200, 0x8, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x1, 0xfffff8ab, 0x4, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x3, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
socket(0x25, 0x5, 0x0)
io_setup$auto(0x10000, 0x0)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r4, 0x40084149, &(0x7f0000001080)=0x7)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/4118, 0x1016)
mmap$auto(0x0, 0x4020009, 0x9dd1, 0x90, 0xffffffffffffffff, 0x8000)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001040)='/dev/bus/usb/034/001\x00', 0x8000, 0x0)
ioctl$auto_USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000010c0)={0x9, 0xca})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

4.299991586s ago: executing program 0 (id=563):
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda)
socket(0x10, 0x2, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mlockall$auto(0x7)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2512000000a500138056cbfa42c40766659aa29e5e977fd8c0c5ea07452724775bbe2a991a68ffcde27d30d9539f5af41857c946a10ab75d4455ff05a8c7e2dd82a1b193c14603e7d524459341b3e50ef2aa9f0036e435055f7ced71ecabd242d2772183e1ecccd5862bebfb0c8f2d4aeb08712114c79f828805a9f502ad2cf56faf93edaa4aed6a9f231f9ebe64ef8a62707c3d2a42aedbf90b43fa34f4d09b7d0ddf851881011ee196000000369d7c7bb77a80ef34d5264f437c77dc3c5801be321b62f55347c95a130d67"], 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
socket(0x1e, 0x4, 0x0)
epoll_create$auto(0x3f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
mmap$auto(0x9679, 0x2020009, 0x1003, 0x12, r2, 0x8000)
write$auto(r3, &(0x7f0000000180)='/de\xef\xe7audio1\x00', 0x47a)
write$auto(0xffffffffffffffff, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000001)
write$auto(0x3, 0x0, 0xfffffdef)

3.6491301s ago: executing program 6 (id=564):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setreuid$auto(0x3, 0x7)
personality$auto(0xfffffffc)
write$auto(0x4, 0x0, 0x100082)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000)
kill$auto(0x1, 0x12)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000008c0)=""/61, 0x3d)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x0)

3.546714297s ago: executing program 5 (id=565):
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda)
socket(0x10, 0x2, 0x0)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mlockall$auto(0x7)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2512000000a500138056cbfa42c40766659aa29e5e977fd8c0c5ea07452724775bbe2a991a68ffcde27d30d9539f5af41857c946a10ab75d4455ff05a8c7e2dd82a1b193c14603e7d524459341b3e50ef2aa9f0036e435055f7ced71ecabd242d2772183e1ecccd5862bebfb0c8f2d4aeb08712114c79f828805a9f502ad2cf56faf93edaa4aed6a9f231f9ebe64ef8a62707c3d2a42aedbf90b43fa34f4d09b7d0ddf851881011ee196000000369d7c7bb77a80ef34d5264f437c77dc3c5801be321b62f55347c95a130d67"], 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x40404c8)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
socket(0x1e, 0x4, 0x0)
epoll_create$auto(0x3f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
mmap$auto(0x9679, 0x2020009, 0x1003, 0x12, r2, 0x8000)
write$auto(r3, &(0x7f0000000180)='/de\xef\xe7audio1\x00', 0x47a)
write$auto(0xffffffffffffffff, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000001)
write$auto(0x3, 0x0, 0xfffffdef)

3.374375042s ago: executing program 6 (id=566):
mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40841, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto(r1, 0x560a, 0x7)
keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8)

2.954411621s ago: executing program 6 (id=567):
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14)
r2 = fcntl$auto(r1, 0x409, 0x40003f)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlock$auto(0xfbe8, 0x4)
mlock$auto(0x1a81, 0x2)
mlock$auto(0x7c88, 0x7fff)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080)
clone$auto(0xfffffffffffffffb, 0x401, &(0x7f0000000040)=0x1ff, &(0x7f0000000100)=0x6d, 0x7)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
acct$auto(0x0)
close_range$auto(0xffffffffffffffff, r1, 0x0)
io_uring_setup$auto(0x6, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0))
readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$auto_TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)=0x4)
sendfile$auto(r4, r4, 0x0, 0x5)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x6d2fc1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0)
ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)

2.152664483s ago: executing program 5 (id=568):
mmap$auto(0x0, 0xa00002, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mbind$auto(0x8000, 0x7f, 0x4000000002, &(0x7f0000000280)=0x2, 0x3, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x40045508, r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x3, 0x4, 0x20004000000000df, 0xfffffffffffffff8, 0x401, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x600, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7)
shmget$auto(0x2, 0x0, 0xfffffffb)
madvise$auto(0x0, 0x22, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000080)=""/27, 0x1b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r6=>0x0})
statx$auto(0xffffffffffffff9c, 0x0, 0x2, 0x9, &(0x7f0000001400)={0x2, 0xe23b, 0xebee, 0x80000001, 0xffffffffffffffff, 0x0, 0x81, 0x1, 0xfffc, 0xc, 0x4, 0x8, {0x0, 0xfb0}, {0x7, 0x401}, {0xb03, 0x6}, {0x7, 0x9}, 0x3, 0x7, 0x5, 0x9, 0x7, 0x7, 0x6, 0x3, 0x6, 0x40, 0x8001, 0x401, [0x99, 0x0, 0x6, 0x3, 0x935c, 0x9, 0x6, 0x9e1]})
sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0)
madvise$auto(0x0, 0x2003f0, 0x11)

1.596480379s ago: executing program 3 (id=569):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0)
readahead$auto(r0, 0x7ff, 0x9)
write$auto(0x3, 0x0, 0x7fffffff)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0)
write$auto(r1, &(0x7f0000000040)='\x00', 0x8)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda1\x00', 0x21a4c1, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, r2, 0x8000)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "87fe7b014077e08701ee88c6923077b8542c55f8c30ccb575540f50c0a515ca3", @inferred=r3})
r4 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x40000000000a5, 0x8000)
getsockopt$auto(r4, 0x84, 0x85, 0x0, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x6}, 0x5, 0x6, 0x7ff, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x7, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/038/001\x00', 0x480483, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf)
semctl$auto(0xc, 0x2, 0x13, 0x4)
write$auto(r2, 0x0, 0x4)
fstatfs$auto(r2, &(0x7f0000000000)={0x9, 0xffffffff, 0x0, 0xf, 0x5, 0xa, 0x40, {[0x0, 0xffff]}, 0x0, 0x6, 0x8, [0x9, 0x5, 0x4, 0x9bf9]})
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0)

1.320331975s ago: executing program 5 (id=570):
setreuid$auto(0x15, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mounts\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x0)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9)
io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x5, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8)

657.705233ms ago: executing program 5 (id=571):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0)
socket(0xa, 0x2, 0x0)
r0 = io_uring_setup$auto(0x1, 0x0)
ioctl$auto_UI_GET_VERSION(r0, 0x8004552d, 0x0)
statmount$auto(0x0, &(0x7f00000000c0)={0x1ff, 0x0, 0x7, 0x9f92, 0x1000, 0x5a9, 0x6, 0x6, 0x9, 0x33189806, 0x7, 0x6, 0xaf, 0x1000, 0x2, 0x9, 0x9, 0x5, 0xfffffff8, 0x7, 0x9, 0x2, 0x4000000, 0x10001, 0x0, 0x1ff, [0xbcd1, 0x4a3b, 0xfffffffffffffff9, 0x1, 0x2, 0x5, 0x5, 0x90, 0x5, 0x7, 0x1ff, 0x0, 0x4, 0xc14, 0x8ff0, 0x81, 0x3, 0x8, 0x3, 0x100, 0x0, 0x7, 0x243, 0x8, 0x3, 0xffff, 0x4, 0x2, 0x6, 0x0, 0x0, 0x3, 0x6, 0xffff, 0x7, 0x1000, 0x1, 0x8, 0xffffffff, 0xe2c, 0xfffffffffffffff7, 0x0, 0x4, 0x80000000, 0x5, 0x5]}, 0x2, 0x3ff)
ioperm$auto(0xe4, 0x82f0, 0x942)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0xfdef)

309.851818ms ago: executing program 6 (id=572):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto_SO_PEERSEC(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000200)=0x8)
socket(0x2b, 0x1, 0x1)
socket(0x10, 0x2, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022abd7000fedbdf2503000000100002800c0001000a0000000000000008000100", @ANYRES32=0x0, @ANYBLOB="ce11144d904a9f9145c41e03ad9ff7a36f7b08870dfb143d141cfca57dee49688dfb78681bd933c67169b19320378e2a1fa1ff88273a7b9171d82a7cce62f5930d58033fd345eeb9deec9494612f2abe65fc115fe8f093583e1015def72ae9174cd853bbef4dc614d92da2f994a8835e414bf821cfd4067c47ed5b818c5eeb477bc16c5ba1a28bc389c3"], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0)
write$auto_sg_fops_sg(r3, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0", 0x31)
ioctl$auto_TCFLSH2(r2, 0x8926, 0x0)
r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x60000, 0x0)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000004c0)=0x7)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x18, 0xa, 0x1)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x40, 0x0)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff)
mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x2, 0x8)

215.465071ms ago: executing program 5 (id=573):
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x2, 0x6, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
poll$auto(&(0x7f0000000080)={r0, 0x0, 0x5}, 0x5, 0x49)
write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
mq_open$auto(&(0x7f0000000080)='!\x00', 0x76d0, 0x101, &(0x7f0000000100)={0x7, 0x8, 0x7fffffffffffffff, 0x5b})
bind$auto(0x3, 0x0, 0x6a)
r1 = io_uring_setup$auto(0x6, 0x0)
shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x4, 0xffffffffffffffff, 0xee00, 0x7, 0x2, 0x400040, 0xc}, 0x10000, 0x6, 0x7f1, 0x49e7f4a9, @raw=0x5, @inferred=0xffffffffffffffff, 0xd56, 0x0, 0x0, 0x0})
r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0)
setuid$auto(0xe)
fchown$auto(r2, 0x0, 0x0)
socket(0x2, 0x2, 0x88)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0xa, 0x1, 0x84)
r4 = getsockopt$auto(r3, 0x84, 0x18, 0x0, 0x0)
write$auto(r4, 0x0, 0x1)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0x6ceb, 0x8000)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x114, 0x2717, 0xfffffffffffffffc, 0x0)

0s ago: executing program 0 (id=574):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setreuid$auto(0x3, 0x7)
personality$auto(0xfffffffc)
write$auto(0x4, 0x0, 0x100082)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000)
kill$auto(0x1, 0x12)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000008c0)=""/61, 0x3d)
truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts.
[   90.399261][ T5829] cgroup: Unknown subsys name 'net'
[   90.512529][ T5829] cgroup: Unknown subsys name 'cpuset'
[   90.521732][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.492121][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   94.699360][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.708059][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.717535][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.718375][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.725715][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.732962][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.740891][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.747088][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.754387][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.763218][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.774677][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.784686][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.792929][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.800421][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.808575][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.817268][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.824497][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.834934][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.844654][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.853221][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.393589][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   95.475773][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   95.549539][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   95.682010][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.690371][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.698119][ T5839] bridge_slave_0: entered allmulticast mode
[   95.705624][ T5839] bridge_slave_0: entered promiscuous mode
[   95.776921][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.784639][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.793077][ T5839] bridge_slave_1: entered allmulticast mode
[   95.801365][ T5839] bridge_slave_1: entered promiscuous mode
[   95.820543][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.827818][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.834974][ T5841] bridge_slave_0: entered allmulticast mode
[   95.843262][ T5841] bridge_slave_0: entered promiscuous mode
[   95.882576][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   95.894320][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.901727][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.909578][ T5841] bridge_slave_1: entered allmulticast mode
[   95.916854][ T5841] bridge_slave_1: entered promiscuous mode
[   95.998733][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.008904][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.016117][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.024516][ T5840] bridge_slave_0: entered allmulticast mode
[   96.032657][ T5840] bridge_slave_0: entered promiscuous mode
[   96.059039][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.071079][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.095273][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.103038][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.110777][ T5840] bridge_slave_1: entered allmulticast mode
[   96.118651][ T5840] bridge_slave_1: entered promiscuous mode
[   96.135037][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.178687][ T5839] team0: Port device team_slave_0 added
[   96.221537][ T5839] team0: Port device team_slave_1 added
[   96.272803][ T5841] team0: Port device team_slave_0 added
[   96.296204][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.309998][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.334682][ T5841] team0: Port device team_slave_1 added
[   96.342168][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.349625][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.375689][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.389457][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.396423][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.422487][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.462306][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.469600][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.476789][ T5838] bridge_slave_0: entered allmulticast mode
[   96.485639][ T5838] bridge_slave_0: entered promiscuous mode
[   96.528625][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.536264][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.543976][ T5838] bridge_slave_1: entered allmulticast mode
[   96.551884][ T5838] bridge_slave_1: entered promiscuous mode
[   96.595147][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.604089][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.630684][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.645814][ T5840] team0: Port device team_slave_0 added
[   96.670414][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.680328][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.687305][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.713576][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.727110][ T5840] team0: Port device team_slave_1 added
[   96.763208][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.801493][ T5839] hsr_slave_0: entered promiscuous mode
[   96.809168][ T5839] hsr_slave_1: entered promiscuous mode
[   96.818560][   T55] Bluetooth: hci1: command tx timeout
[   96.880755][ T5838] team0: Port device team_slave_0 added
[   96.887329][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.894731][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.898190][   T55] Bluetooth: hci3: command tx timeout
[   96.925146][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.926605][ T5846] Bluetooth: hci0: command tx timeout
[   96.936746][ T5853] Bluetooth: hci2: command tx timeout
[   96.945837][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.954927][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.981124][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.021255][ T5838] team0: Port device team_slave_1 added
[   97.050016][ T5841] hsr_slave_0: entered promiscuous mode
[   97.056387][ T5841] hsr_slave_1: entered promiscuous mode
[   97.063092][  T928] cfg80211: failed to load regulatory.db
[   97.064512][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.076956][ T5841] Cannot create hsr debugfs directory
[   97.153839][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.161266][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.187395][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.203209][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.210339][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.236443][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.325960][ T5840] hsr_slave_0: entered promiscuous mode
[   97.332481][ T5840] hsr_slave_1: entered promiscuous mode
[   97.338949][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.346532][ T5840] Cannot create hsr debugfs directory
[   97.495754][ T5838] hsr_slave_0: entered promiscuous mode
[   97.502364][ T5838] hsr_slave_1: entered promiscuous mode
[   97.509310][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.517166][ T5838] Cannot create hsr debugfs directory
[   97.789292][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.816389][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.851705][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.890718][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.960802][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.973935][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.993251][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.021420][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.084756][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.104011][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.117322][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.158291][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.243185][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.262231][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.275451][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.296223][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.462923][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.490814][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.521721][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.562473][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   98.573516][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   98.593554][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.600911][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.633014][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.640267][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.659715][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.666906][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.678818][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.685961][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.703331][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   98.720828][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.728030][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.760767][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.767949][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.852178][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.898042][ T5853] Bluetooth: hci1: command tx timeout
[   98.945437][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   98.977889][   T55] Bluetooth: hci2: command tx timeout
[   98.985056][ T5846] Bluetooth: hci3: command tx timeout
[   98.991543][ T5853] Bluetooth: hci0: command tx timeout
[   99.006894][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.014162][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.107466][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.114680][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.293621][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.424346][ T5839] veth0_vlan: entered promiscuous mode
[   99.450239][ T5839] veth1_vlan: entered promiscuous mode
[   99.481429][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.578555][ T5839] veth0_macvtap: entered promiscuous mode
[   99.594956][ T5839] veth1_macvtap: entered promiscuous mode
[   99.660020][ T5840] veth0_vlan: entered promiscuous mode
[   99.681471][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.696540][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.714157][ T5840] veth1_vlan: entered promiscuous mode
[   99.736589][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.750120][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.759586][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.768996][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.782849][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.853548][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.929977][ T5840] veth0_macvtap: entered promiscuous mode
[   99.955571][ T5841] veth0_vlan: entered promiscuous mode
[   99.982275][ T5841] veth1_vlan: entered promiscuous mode
[   99.991858][ T5840] veth1_macvtap: entered promiscuous mode
[  100.062365][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.072524][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.109748][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.124823][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.137223][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.155421][ T5838] veth0_vlan: entered promiscuous mode
[  100.180398][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.191263][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.202548][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.233053][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.242549][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.251794][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.261830][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.276822][ T5841] veth0_macvtap: entered promiscuous mode
[  100.294386][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.295492][ T5841] veth1_macvtap: entered promiscuous mode
[  100.307681][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.316498][ T5838] veth1_vlan: entered promiscuous mode
[  100.386687][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.399042][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.409425][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.422077][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.436093][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.515534][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.529756][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.539995][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.550778][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.564594][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.584559][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.627250][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.662803][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.684354][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.694040][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.716274][ T5838] veth0_macvtap: entered promiscuous mode
[  100.744845][ T5838] veth1_macvtap: entered promiscuous mode
[  100.765444][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.783071][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.864973][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.876639][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.889719][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.907417][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.918502][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.929416][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.944197][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.963111][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.978186][ T5846] Bluetooth: hci1: command tx timeout
[  100.984496][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.002396][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.013317][ T5902] Zero length message leads to an empty skb
[  101.023570][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.033943][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.045868][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.055787][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.066540][ T5846] Bluetooth: hci3: command tx timeout
[  101.072082][ T5846] Bluetooth: hci0: command tx timeout
[  101.077793][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.079538][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.089139][ T5846] Bluetooth: hci2: command tx timeout
[  101.119209][ T5903] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.161338][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.176485][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.187006][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.197067][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.230808][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.243292][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.383289][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.405657][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.415753][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.434027][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.524643][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.557692][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.826943][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.910309][ T5917] Invalid ELF header magic: != ELF
[  102.858624][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'.
[  103.057943][ T5846] Bluetooth: hci1: command tx timeout
[  103.138276][ T5846] Bluetooth: hci2: command tx timeout
[  103.143770][   T55] Bluetooth: hci0: command tx timeout
[  103.143785][ T5853] Bluetooth: hci3: command tx timeout
[  104.368204][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.377204][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.170504][ T5973] sctp: [Deprecated]: syz.2.15 (pid 5973) Use of int in maxseg socket option.
[  105.170504][ T5973] Use struct sctp_assoc_value instead
[  108.566617][ T6017] Invalid ELF header magic: != ELF
[  108.919881][ T6004] kexec: Could not allocate control_code_buffer
[  109.525216][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'.
[  109.669083][ T6028] netlink: 338 bytes leftover after parsing attributes in process `syz.3.26'.
[  109.768769][ T6031] team_slave_0: entered allmulticast mode
[  109.970192][ T6035] Invalid ELF header magic: != ELF
[  116.515105][ T6107] Invalid ELF header magic: != ELF
[  116.567932][ T6109] scsi_strcpy_devinfo: vendor string '��/&c��~n]	�|
[  116.567932][ T6109] M�' is too long
[  116.567984][ T6109] scsi_strcpy_devinfo: model string '�Dd5��K�2b�
[  116.567984][ T6109] ���W����� ��' is too long
[  116.759419][ T6109] HfR: entered promiscuous mode
[  116.898573][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'.
[  116.898699][ T6109] HfR: left promiscuous mode
[  117.558108][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.40'.
[  118.339338][ T6119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.345366][ T6130] process 'syz.1.44' launched './file0' with NULL argv: empty string added
[  120.949301][ T6154] Invalid ELF header magic: != ELF
[  122.163392][ T6155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.47'.
[  122.211510][ T6148] syz.2.46 (6148) used greatest stack depth: 20552 bytes left
[  122.707886][ T6174] Invalid ELF header magic: != ELF
[  123.904806][ T6195] FAULT_INJECTION: forcing a failure.
[  123.904806][ T6195] name failslab, interval 1, probability 0, space 0, times 1
[  123.927547][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.0.56 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  123.927591][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  123.927617][ T6195] Call Trace:
[  123.927626][ T6195]  <TASK>
[  123.927643][ T6195]  dump_stack_lvl+0x16c/0x1f0
[  123.927698][ T6195]  should_fail_ex+0x512/0x640
[  123.927735][ T6195]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  123.927792][ T6195]  should_failslab+0xc2/0x120
[  123.927823][ T6195]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  123.927872][ T6195]  ? __proc_create+0xc3/0x8c0
[  123.927906][ T6195]  ? __proc_create+0x2ce/0x8c0
[  123.927945][ T6195]  __proc_create+0x2ce/0x8c0
[  123.927982][ T6195]  ? __pfx___proc_create+0x10/0x10
[  123.928025][ T6195]  ? _raw_write_unlock+0x28/0x50
[  123.928073][ T6195]  proc_create_reg+0x7d/0x180
[  123.928114][ T6195]  proc_create_net_data+0x8e/0x1b0
[  123.928153][ T6195]  ? __pfx_proc_create_net_data+0x10/0x10
[  123.928193][ T6195]  ? __pfx_uevent_net_rcv+0x10/0x10
[  123.928229][ T6195]  ? __pfx_dev_proc_net_init+0x10/0x10
[  123.928263][ T6195]  wext_proc_init+0x53/0x70
[  123.928311][ T6195]  dev_proc_net_init+0x10b/0x220
[  123.928344][ T6195]  ops_init+0x1df/0x5f0
[  123.928393][ T6195]  setup_net+0x21e/0x850
[  123.928443][ T6195]  ? __pfx_setup_net+0x10/0x10
[  123.928487][ T6195]  ? lockdep_init_map_type+0x5c/0x280
[  123.928519][ T6195]  ? __pfx_down_read_killable+0x10/0x10
[  123.928554][ T6195]  ? debug_mutex_init+0x37/0x70
[  123.928605][ T6195]  copy_net_ns+0x2a6/0x5f0
[  123.928661][ T6195]  create_new_namespaces+0x3ea/0xad0
[  123.928719][ T6195]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  123.928770][ T6195]  ksys_unshare+0x45b/0xa40
[  123.928821][ T6195]  ? __pfx_ksys_unshare+0x10/0x10
[  123.928866][ T6195]  ? xfd_validate_state+0x5d/0x180
[  123.928904][ T6195]  ? rcu_is_watching+0x12/0xc0
[  123.928954][ T6195]  __x64_sys_unshare+0x31/0x40
[  123.929004][ T6195]  do_syscall_64+0xcd/0x260
[  123.929054][ T6195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.929085][ T6195] RIP: 0033:0x7fc5a8f8d169
[  123.929111][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.929141][ T6195] RSP: 002b:00007fc5a9d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  123.929171][ T6195] RAX: ffffffffffffffda RBX: 00007fc5a91a5fa0 RCX: 00007fc5a8f8d169
[  123.929191][ T6195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  123.929209][ T6195] RBP: 00007fc5a900e2a0 R08: 0000000000000000 R09: 0000000000000000
[  123.929227][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.929244][ T6195] R13: 0000000000000000 R14: 00007fc5a91a5fa0 R15: 00007ffcecc38668
[  123.929285][ T6195]  </TASK>
[  124.849687][ T6175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.51'.
[  126.744907][ T6218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.854876][ T6220] Invalid ELF header magic: != ELF
[  127.429212][ T6225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.61'.
[  127.780166][ T5985] syz.2.15 (5985) used greatest stack depth: 20072 bytes left
[  131.735736][ T5977] syz.2.15 (5977) used greatest stack depth: 17592 bytes left
[  133.185527][ T6297] FAULT_INJECTION: forcing a failure.
[  133.185527][ T6297] name failslab, interval 1, probability 0, space 0, times 0
[  133.232303][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.2.71 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  133.232345][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  133.232363][ T6297] Call Trace:
[  133.232371][ T6297]  <TASK>
[  133.232382][ T6297]  dump_stack_lvl+0x16c/0x1f0
[  133.232428][ T6297]  should_fail_ex+0x512/0x640
[  133.232458][ T6297]  ? __kvmalloc_node_noprof+0x122/0x600
[  133.232502][ T6297]  should_failslab+0xc2/0x120
[  133.232527][ T6297]  __kvmalloc_node_noprof+0x135/0x600
[  133.232566][ T6297]  ? io_alloc_cache_init+0x33/0x170
[  133.232609][ T6297]  ? io_alloc_cache_init+0x33/0x170
[  133.232647][ T6297]  io_alloc_cache_init+0x33/0x170
[  133.232684][ T6297]  io_uring_setup+0x680/0x2090
[  133.232714][ T6297]  ? __pfx_io_uring_setup+0x10/0x10
[  133.232739][ T6297]  ? do_futex+0x122/0x350
[  133.232779][ T6297]  ? __pfx_do_futex+0x10/0x10
[  133.232818][ T6297]  ? __pfx___might_resched+0x10/0x10
[  133.232877][ T6297]  ? rcu_is_watching+0x12/0xc0
[  133.232918][ T6297]  __x64_sys_io_uring_setup+0xc2/0x170
[  133.232948][ T6297]  do_syscall_64+0xcd/0x260
[  133.232988][ T6297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.233015][ T6297] RIP: 0033:0x7f1f5ed8d169
[  133.233036][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.233062][ T6297] RSP: 002b:00007f1f5fc6a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  133.233087][ T6297] RAX: ffffffffffffffda RBX: 00007f1f5efa5fa0 RCX: 00007f1f5ed8d169
[  133.233106][ T6297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  133.233121][ T6297] RBP: 00007f1f5ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  133.233136][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.233151][ T6297] R13: 0000000000000000 R14: 00007f1f5efa5fa0 R15: 00007ffd4aa66778
[  133.233184][ T6297]  </TASK>
[  133.579894][ T6300] syz.0.72 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  135.574967][   T55] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18
[  136.234193][ T6332] FAULT_INJECTION: forcing a failure.
[  136.234193][ T6332] name failslab, interval 1, probability 0, space 0, times 0
[  136.273501][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.3.76 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  136.273576][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  136.273597][ T6332] Call Trace:
[  136.273608][ T6332]  <TASK>
[  136.273620][ T6332]  dump_stack_lvl+0x16c/0x1f0
[  136.273674][ T6332]  should_fail_ex+0x512/0x640
[  136.273711][ T6332]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  136.273764][ T6332]  should_failslab+0xc2/0x120
[  136.273794][ T6332]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  136.273844][ T6332]  ? security_file_alloc+0x34/0x2b0
[  136.273893][ T6332]  security_file_alloc+0x34/0x2b0
[  136.273935][ T6332]  init_file+0x93/0x4c0
[  136.273968][ T6332]  alloc_empty_file+0x73/0x1e0
[  136.274004][ T6332]  alloc_file_pseudo+0x13a/0x230
[  136.274040][ T6332]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  136.274076][ T6332]  ? alloc_fd+0x471/0x7d0
[  136.274128][ T6332]  sock_alloc_file+0x50/0x210
[  136.274174][ T6332]  __sys_socket+0x1c0/0x260
[  136.274206][ T6332]  ? __pfx___sys_socket+0x10/0x10
[  136.274239][ T6332]  ? rcu_is_watching+0x12/0xc0
[  136.274287][ T6332]  __x64_sys_socket+0x72/0xb0
[  136.274317][ T6332]  ? lockdep_hardirqs_on+0x7c/0x110
[  136.274367][ T6332]  do_syscall_64+0xcd/0x260
[  136.274416][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.274449][ T6332] RIP: 0033:0x7f29a7f8d169
[  136.274475][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.274505][ T6332] RSP: 002b:00007f29a8dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  136.274536][ T6332] RAX: ffffffffffffffda RBX: 00007f29a81a6160 RCX: 00007f29a7f8d169
[  136.274556][ T6332] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010
[  136.274574][ T6332] RBP: 00007f29a800e2a0 R08: 0000000000000000 R09: 0000000000000000
[  136.274594][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.274612][ T6332] R13: 0000000000000000 R14: 00007f29a81a6160 R15: 00007ffc0813b1e8
[  136.274651][ T6332]  </TASK>
[  137.204243][ T6336] netlink: 'syz.3.77': attribute type 10 has an invalid length.
[  137.212588][ T6336] netlink: 230 bytes leftover after parsing attributes in process `syz.3.77'.
[  137.503073][ T6336] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  137.757863][ T6340] cougar: G6 mapped to space
[  138.023146][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.037586][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  139.464213][ T6365] Invalid ELF header magic: != ELF
[  140.075347][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.84'.
[  141.415327][ T6397] Invalid ELF header magic: != ELF
[  147.247829][ T6469] netlink: 330 bytes leftover after parsing attributes in process `syz.1.99'.
[  147.428074][ T6471] Invalid ELF header magic: != ELF
[  147.624773][ T6457] Invalid ELF header magic: != ELF
[  147.763388][ T6475] Invalid ELF header magic: != ELF
[  148.143636][ T6472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.100'.
[  148.760807][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.98'.
[  148.929855][ T6476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.101'.
[  149.698120][ T6497] Invalid ELF header magic: != ELF
[  150.530806][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.104'.
[  151.296004][ T6512] mmap: syz.0.106 (6512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  153.914015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  155.298483][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  155.555100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  156.310438][ T6562] Invalid ELF header magic: != ELF
[  166.810905][ T6645] Invalid ELF header magic: != ELF
[  167.464892][ T6646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.130'.
[  173.305957][ T6704] FAULT_INJECTION: forcing a failure.
[  173.305957][ T6704] name failslab, interval 1, probability 0, space 0, times 0
[  173.337642][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.0.139 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  173.337688][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  173.337708][ T6704] Call Trace:
[  173.337719][ T6704]  <TASK>
[  173.337730][ T6704]  dump_stack_lvl+0x16c/0x1f0
[  173.337781][ T6704]  should_fail_ex+0x512/0x640
[  173.337818][ T6704]  ? __kvmalloc_node_noprof+0x122/0x600
[  173.337869][ T6704]  should_failslab+0xc2/0x120
[  173.337901][ T6704]  __kvmalloc_node_noprof+0x135/0x600
[  173.337949][ T6704]  ? nf_hook_entries_grow+0x22b/0x860
[  173.337993][ T6704]  ? nf_hook_entries_grow+0x22b/0x860
[  173.338027][ T6704]  nf_hook_entries_grow+0x22b/0x860
[  173.338078][ T6704]  __nf_register_net_hook+0x1cd/0x730
[  173.338123][ T6704]  nf_register_net_hook+0x109/0x160
[  173.338162][ T6704]  nf_register_net_hooks+0x5d/0xd0
[  173.338203][ T6704]  ? __pfx_apparmor_nf_register+0x10/0x10
[  173.338264][ T6704]  ops_init+0x1df/0x5f0
[  173.338313][ T6704]  setup_net+0x21e/0x850
[  173.338360][ T6704]  ? __pfx_setup_net+0x10/0x10
[  173.338402][ T6704]  ? lockdep_init_map_type+0x5c/0x280
[  173.338434][ T6704]  ? __pfx_down_read_killable+0x10/0x10
[  173.338469][ T6704]  ? debug_mutex_init+0x37/0x70
[  173.338512][ T6704]  copy_net_ns+0x2a6/0x5f0
[  173.338562][ T6704]  create_new_namespaces+0x3ea/0xad0
[  173.338623][ T6704]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  173.338674][ T6704]  ksys_unshare+0x45b/0xa40
[  173.338724][ T6704]  ? __pfx_ksys_unshare+0x10/0x10
[  173.338772][ T6704]  ? xfd_validate_state+0x5d/0x180
[  173.338811][ T6704]  ? rcu_is_watching+0x12/0xc0
[  173.338861][ T6704]  __x64_sys_unshare+0x31/0x40
[  173.338910][ T6704]  do_syscall_64+0xcd/0x260
[  173.338959][ T6704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.338992][ T6704] RIP: 0033:0x7fc5a8f8d169
[  173.339017][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.339048][ T6704] RSP: 002b:00007fc5a9d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  173.339077][ T6704] RAX: ffffffffffffffda RBX: 00007fc5a91a5fa0 RCX: 00007fc5a8f8d169
[  173.339099][ T6704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  173.339117][ T6704] RBP: 00007fc5a900e2a0 R08: 0000000000000000 R09: 0000000000000000
[  173.339135][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.339153][ T6704] R13: 0000000000000000 R14: 00007fc5a91a5fa0 R15: 00007ffcecc38668
[  173.339193][ T6704]  </TASK>
[  175.430297][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  175.669487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  175.827607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  175.835985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  176.039507][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  177.498354][ T6743] Invalid ELF header magic: != ELF
[  180.446410][ T6792] Invalid ELF header magic: != ELF
[  182.068047][ T6817] FAULT_INJECTION: forcing a failure.
[  182.068047][ T6817] name failslab, interval 1, probability 0, space 0, times 0
[  182.137611][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.3.155 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  182.137655][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  182.137673][ T6817] Call Trace:
[  182.137682][ T6817]  <TASK>
[  182.137693][ T6817]  dump_stack_lvl+0x16c/0x1f0
[  182.137750][ T6817]  should_fail_ex+0x512/0x640
[  182.137785][ T6817]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  182.137836][ T6817]  should_failslab+0xc2/0x120
[  182.137866][ T6817]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  182.137911][ T6817]  ? __proc_create+0xc3/0x8c0
[  182.137943][ T6817]  ? __proc_create+0x2ce/0x8c0
[  182.137981][ T6817]  __proc_create+0x2ce/0x8c0
[  182.138017][ T6817]  ? __pfx___proc_create+0x10/0x10
[  182.138067][ T6817]  proc_create_reg+0x7d/0x180
[  182.138106][ T6817]  proc_create_data+0x86/0x110
[  182.138141][ T6817]  ? __pfx_proc_create_data+0x10/0x10
[  182.138182][ T6817]  ? net_generic+0xf4/0x2a0
[  182.138216][ T6817]  nfsd_net_init+0x11b/0x3d0
[  182.138267][ T6817]  ? __pfx_nfsd_net_init+0x10/0x10
[  182.138314][ T6817]  ops_init+0x1df/0x5f0
[  182.138370][ T6817]  setup_net+0x21e/0x850
[  182.138419][ T6817]  ? __pfx_setup_net+0x10/0x10
[  182.138460][ T6817]  ? lockdep_init_map_type+0x5c/0x280
[  182.138490][ T6817]  ? __pfx_down_read_killable+0x10/0x10
[  182.138525][ T6817]  ? debug_mutex_init+0x37/0x70
[  182.138568][ T6817]  copy_net_ns+0x2a6/0x5f0
[  182.138628][ T6817]  create_new_namespaces+0x3ea/0xad0
[  182.138682][ T6817]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  182.138735][ T6817]  ksys_unshare+0x45b/0xa40
[  182.138783][ T6817]  ? __pfx_ksys_unshare+0x10/0x10
[  182.138829][ T6817]  ? xfd_validate_state+0x5d/0x180
[  182.138867][ T6817]  ? rcu_is_watching+0x12/0xc0
[  182.138916][ T6817]  __x64_sys_unshare+0x31/0x40
[  182.138966][ T6817]  do_syscall_64+0xcd/0x260
[  182.139016][ T6817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.139048][ T6817] RIP: 0033:0x7f29a7f8d169
[  182.139075][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.139105][ T6817] RSP: 002b:00007f29a8e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  182.139135][ T6817] RAX: ffffffffffffffda RBX: 00007f29a81a5fa0 RCX: 00007f29a7f8d169
[  182.139155][ T6817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  182.139174][ T6817] RBP: 00007f29a800e2a0 R08: 0000000000000000 R09: 0000000000000000
[  182.139192][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.139210][ T6817] R13: 0000000000000000 R14: 00007f29a81a5fa0 R15: 00007ffc0813b1e8
[  182.139250][ T6817]  </TASK>
[  183.561067][ T6856] Invalid ELF header magic: != ELF
[  184.275747][ T6860] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'.
[  184.573604][ T6865] netlink: 338 bytes leftover after parsing attributes in process `syz.0.159'.
[  186.057736][ T6886] Invalid ELF header magic: != ELF
[  189.810984][ T6939] Invalid ELF header magic: != ELF
[  193.222094][ T6971] kexec: Could not allocate control_code_buffer
[  194.625178][ T7005] netlink: 338 bytes leftover after parsing attributes in process `syz.2.188'.
[  196.199041][   T30] audit: type=1800 audit(6039188396.021:2): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.192" name="SYSV00004004" dev="tmpfs" ino=0 res=0 errno=0
[  199.463188][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.469874][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  201.285753][ T5906] Process accounting resumed
[  205.268417][ T7151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  205.283672][ T7151] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  206.067439][   T30] audit: type=1800 audit(6039188405.891:3): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.224" name="SYSV00004004" dev="tmpfs" ino=0 res=0 errno=0
[  206.517510][ T7166] zswap: zpool  not available
[  208.605684][ T7189] netlink: 338 bytes leftover after parsing attributes in process `syz.0.229'.
[  209.222463][ T7202] netlink: 544 bytes leftover after parsing attributes in process `syz.1.232'.
[  209.688469][    T9] Process accounting resumed
[  210.913209][ T7237] Invalid ELF header magic: != ELF
[  212.568760][ T7262] netlink: 338 bytes leftover after parsing attributes in process `syz.3.241'.
[  213.947931][ T7286] netlink: 544 bytes leftover after parsing attributes in process `syz.3.245'.
[  216.902728][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  221.990988][ T7381] netlink: 338 bytes leftover after parsing attributes in process `syz.1.260'.
[  222.040981][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  222.047797][ T5154] Bluetooth: hci3: command 0x0406 tx timeout
[  222.053867][ T5154] Bluetooth: hci0: command 0x0406 tx timeout
[  226.108073][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.153494][ T7429] netlink: 338 bytes leftover after parsing attributes in process `syz.2.271'.
[  226.169303][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.356343][ T7449] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  227.356343][ T7449] The task syz.2.277 (7449) triggered the difference, watch for misbehavior.
[  229.857888][ T7478] netlink: 338 bytes leftover after parsing attributes in process `syz.1.283'.
[  233.378471][ T7498] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  233.428651][ T7498] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  233.597641][ T7498] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  233.667529][ T7498] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  233.878493][ T7498] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  233.903723][ T7498] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  234.180819][ T7498] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  234.308802][ T7498] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  235.377456][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  235.627579][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  235.940319][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  236.257604][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  237.457490][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  237.697619][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  238.028286][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  238.337771][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  238.562443][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'.
[  238.651646][ T7565] netlink: 93 bytes leftover after parsing attributes in process `syz.0.299'.
[  243.175210][ T7588] Invalid ELF header magic: != ELF
[  245.543934][ T7599] netlink: 326 bytes leftover after parsing attributes in process `syz.2.307'.
[  245.601449][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.609882][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.015434][ T7603] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xcc pfn:0x7fe08
[  246.068450][ T7603] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  246.145232][ T7603] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  246.302450][ T7603] raw: 00000000000000cc 0000000000000000 00000001ffffffff 0000000000000000
[  246.302527][ T7603] page dumped because: unmovable page
[  246.302558][ T7603] page_owner tracks the page as allocated
[  246.302605][ T7603] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 7374, tgid 7373 (syz.3.259), ts 221200576168, free_ts 220652001325
[  246.302656][ T7603]  post_alloc_hook+0x181/0x1b0
[  246.302703][ T7603]  get_page_from_freelist+0x1193/0x39b0
[  246.302750][ T7603]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  246.302799][ T7603]  alloc_pages_mpol+0x1fb/0x550
[  246.302827][ T7603]  alloc_pages_noprof+0x131/0x390
[  246.302854][ T7603]  get_free_pages_noprof+0xc/0x40
[  246.302887][ T7603]  kasan_populate_vmalloc_pte+0x2d/0x160
[  246.302932][ T7603]  __apply_to_page_range+0x5f9/0xd30
[  246.302972][ T7603]  alloc_vmap_area+0x919/0x2970
[  246.303007][ T7603]  __get_vm_area_node+0x1a7/0x300
[  246.303044][ T7603]  __vmalloc_node_range_noprof+0x277/0x1540
[  246.303087][ T7603]  vmalloc_noprof+0x6b/0x90
[  246.303125][ T7603]  __snd_dma_alloc_pages+0x50/0x90
[  246.303174][ T7603]  snd_dma_alloc_dir_pages+0x151/0x240
[  246.303212][ T7603]  do_alloc_pages+0x115/0x280
[  246.303245][ T7603]  snd_pcm_lib_malloc_pages+0x3df/0x980
[  246.303282][ T7603] page last free pid 7331 tgid 7331 stack trace:
[  246.303300][ T7603]  __free_frozen_pages+0x69d/0xff0
[  246.303340][ T7603]  vfree+0x176/0x960
[  246.303376][ T7603]  snd_dma_free_pages+0x51/0x70
[  246.303412][ T7603]  snd_pcm_lib_free_pages+0x172/0x390
[  246.303448][ T7603]  snd_pcm_release_substream.part.0+0x2a8/0x340
[  246.303486][ T7603]  snd_pcm_release_substream+0x5b/0x70
[  246.303521][ T7603]  snd_pcm_oss_release+0x135/0x310
[  246.303552][ T7603]  __fput+0x3ff/0xb70
[  246.303581][ T7603]  task_work_run+0x14d/0x240
[  246.303617][ T7603]  syscall_exit_to_user_mode+0x27b/0x2a0
[  246.303665][ T7603]  do_syscall_64+0xda/0x260
[  246.303710][ T7603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.405811][ T7604] could not allocate digest TFM handle 
[  247.325007][ T7607] tty tty45: ldisc open failed (-12), clearing slot 44
[  248.507710][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  248.528696][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  248.541895][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.581354][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.608735][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.617533][ T7617] netlink: 338 bytes leftover after parsing attributes in process `syz.0.312'.
[  250.001803][ T7618] chnl_net:caif_netlink_parms(): no params data found
[  250.658205][ T5853] Bluetooth: hci4: command tx timeout
[  250.920146][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.920308][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.927786][ T7618] bridge_slave_0: entered allmulticast mode
[  250.929891][ T7618] bridge_slave_0: entered promiscuous mode
[  250.949138][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.949262][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.949424][ T7618] bridge_slave_1: entered allmulticast mode
[  250.951445][ T7618] bridge_slave_1: entered promiscuous mode
[  251.357660][ T7635] tty tty17: ldisc open failed (-12), clearing slot 16
[  251.408053][ T7642] pty pty51: ldisc open failed (-12), clearing slot 51
[  251.445512][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.502028][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.906241][ T7618] team0: Port device team_slave_0 added
[  251.963724][ T7618] team0: Port device team_slave_1 added
[  252.176490][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.187807][ T7651] syz.2.318 uses obsolete (PF_INET,SOCK_PACKET)
[  252.207832][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.297417][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.561313][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.731466][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.849501][ T5853] Bluetooth: hci4: command tx timeout
[  253.004095][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.590893][ T7618] hsr_slave_0: entered promiscuous mode
[  253.678344][ T7618] hsr_slave_1: entered promiscuous mode
[  253.684534][ T7618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.766912][ T7618] Cannot create hsr debugfs directory
[  254.338285][ T7662] FAULT_INJECTION: forcing a failure.
[  254.338285][ T7662] name failslab, interval 1, probability 0, space 0, times 0
[  254.380662][ T7662] CPU: 1 UID: 0 PID: 7662 Comm: syz.2.321 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  254.380705][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  254.380724][ T7662] Call Trace:
[  254.380734][ T7662]  <TASK>
[  254.380751][ T7662]  dump_stack_lvl+0x16c/0x1f0
[  254.380800][ T7662]  should_fail_ex+0x512/0x640
[  254.380836][ T7662]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  254.380891][ T7662]  should_failslab+0xc2/0x120
[  254.380922][ T7662]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  254.380971][ T7662]  ? mas_alloc_nodes+0x18b/0x8b0
[  254.381018][ T7662]  mas_alloc_nodes+0x18b/0x8b0
[  254.381068][ T7662]  mas_node_count_gfp+0x105/0x130
[  254.381112][ T7662]  mas_preallocate+0x53e/0xcd0
[  254.381149][ T7662]  ? __pfx_mas_preallocate+0x10/0x10
[  254.381191][ T7662]  ? vm_area_alloc+0x1f/0x160
[  254.381259][ T7662]  ? lockdep_init_map_type+0x5c/0x280
[  254.381297][ T7662]  __mmap_region+0x139b/0x27c0
[  254.381351][ T7662]  ? __pfx___mmap_region+0x10/0x10
[  254.381400][ T7662]  ? finish_task_switch.isra.0+0x221/0xc10
[  254.381453][ T7662]  ? __schedule+0x1186/0x5de0
[  254.381490][ T7662]  ? kvm_sched_clock_read+0x11/0x20
[  254.381532][ T7662]  ? sched_clock+0x38/0x60
[  254.381630][ T7662]  ? trace_cap_capable+0x18d/0x200
[  254.381666][ T7662]  ? cap_capable+0xb3/0x250
[  254.381705][ T7662]  mmap_region+0x1ab/0x3f0
[  254.381764][ T7662]  do_mmap+0xd8e/0x11b0
[  254.381812][ T7662]  ? __pfx_do_mmap+0x10/0x10
[  254.381854][ T7662]  ? __pfx_down_write_killable+0x10/0x10
[  254.381914][ T7662]  vm_mmap_pgoff+0x281/0x450
[  254.381960][ T7662]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  254.382007][ T7662]  ? __x64_sys_futex+0x1e0/0x4c0
[  254.382051][ T7662]  ? __x64_sys_futex+0x1e9/0x4c0
[  254.382102][ T7662]  ksys_mmap_pgoff+0x7d/0x5c0
[  254.382140][ T7662]  ? rcu_is_watching+0x12/0xc0
[  254.382184][ T7662]  __x64_sys_mmap+0x125/0x190
[  254.382227][ T7662]  do_syscall_64+0xcd/0x260
[  254.382285][ T7662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.382319][ T7662] RIP: 0033:0x7f1f5ed8d169
[  254.382345][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.382376][ T7662] RSP: 002b:00007f1f5fc6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  254.382406][ T7662] RAX: ffffffffffffffda RBX: 00007f1f5efa5fa0 RCX: 00007f1f5ed8d169
[  254.382426][ T7662] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  254.382444][ T7662] RBP: 00007f1f5ee0e2a0 R08: 0000000000000007 R09: 0000000000028000
[  254.382463][ T7662] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  254.382481][ T7662] R13: 0000000000000000 R14: 00007f1f5efa5fa0 R15: 00007ffd4aa66778
[  254.382522][ T7662]  </TASK>
[  254.907954][ T5853] Bluetooth: hci4: command tx timeout
[  255.485641][ T7618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  255.582431][ T7618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  255.707065][ T7618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  255.781931][ T7618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  256.311290][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.402763][ T7618] 8021q: adding VLAN 0 to HW filter on device team0
[  256.428426][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.435561][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.493037][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.500205][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.750482][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.978110][ T5853] Bluetooth: hci4: command tx timeout
[  257.539453][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.847575][ T7618] veth0_vlan: entered promiscuous mode
[  258.900205][ T7618] veth1_vlan: entered promiscuous mode
[  259.039964][ T7618] veth0_macvtap: entered promiscuous mode
[  259.075188][ T7618] veth1_macvtap: entered promiscuous mode
[  259.168489][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.224394][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.266753][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.307650][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.347785][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.397667][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.428017][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.487440][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.518253][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.560250][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.601454][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.637635][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.677588][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.717438][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.767456][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.790505][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.833916][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.879112][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.948260][ T7618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.957037][ T7618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.029493][ T7618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.077901][ T7618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.345311][ T7695] Invalid ELF header magic: != ELF
[  260.586760][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.626978][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.740132][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.774661][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.904551][ T7709] Invalid ELF header magic: != ELF
[  260.913134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  260.920064][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  263.648898][ T7735] queue_state_write: unsupported operation ''
[  263.656040][ T7735] queue_state_write: use 'run', 'start' or 'kick'
[  267.531111][ T1094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.125944][ T1094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.810114][ T1094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.281454][ T1094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.451243][ T1094] bridge_slave_1: left allmulticast mode
[  270.457211][ T1094] bridge_slave_1: left promiscuous mode
[  270.487017][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.550591][ T1094] bridge_slave_0: left allmulticast mode
[  270.556298][ T1094] bridge_slave_0: left promiscuous mode
[  270.628554][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.341631][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  271.350676][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  271.364325][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  271.382618][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.393635][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.687601][ T7797] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  273.307051][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.422595][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.457573][ T5846] Bluetooth: hci0: command tx timeout
[  273.483914][ T1094] bond0 (unregistering): Released all slaves
[  275.538468][ T5846] Bluetooth: hci0: command tx timeout
[  276.204080][ T7792] chnl_net:caif_netlink_parms(): no params data found
[  276.509526][ T1094] hsr_slave_0: left promiscuous mode
[  276.541937][ T1094] hsr_slave_1: left promiscuous mode
[  276.564340][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.596236][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.627006][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.643862][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.780110][ T1094] veth1_macvtap: left promiscuous mode
[  276.806041][ T1094] veth0_macvtap: left promiscuous mode
[  276.838762][ T1094] veth1_vlan: left promiscuous mode
[  276.864529][ T1094] veth0_vlan: left promiscuous mode
[  277.617505][ T5846] Bluetooth: hci0: command tx timeout
[  278.556382][ T1094] team0 (unregistering): Port device team_slave_1 removed
[  278.662486][ T1094] team0 (unregistering): Port device team_slave_0 removed
[  279.697701][ T5846] Bluetooth: hci0: command tx timeout
[  280.137104][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.158280][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.191686][ T7792] bridge_slave_0: entered allmulticast mode
[  280.217779][ T7792] bridge_slave_0: entered promiscuous mode
[  280.251019][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.268870][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.276666][ T7792] bridge_slave_1: entered allmulticast mode
[  280.304470][ T7792] bridge_slave_1: entered promiscuous mode
[  280.453563][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.503702][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.731389][ T7792] team0: Port device team_slave_0 added
[  280.752018][ T7792] team0: Port device team_slave_1 added
[  280.986398][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.995100][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.085352][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.127639][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.149494][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.205038][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.553162][ T7792] hsr_slave_0: entered promiscuous mode
[  281.589292][ T7792] hsr_slave_1: entered promiscuous mode
[  281.595798][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.642760][ T7792] Cannot create hsr debugfs directory
[  282.816487][ T7792] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  283.026813][ T7792] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  283.072921][ T7792] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  283.194084][ T7792] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  283.498327][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.551705][ T7792] 8021q: adding VLAN 0 to HW filter on device team0
[  283.589327][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.596573][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.668192][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.675429][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.296050][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.592197][   T30] audit: type=1800 audit(6039188484.431:4): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.358" name="dummy_udc" dev="gadgetfs" ino=5686 res=0 errno=0
[  285.328994][ T7945] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input6
[  285.955869][ T7792] veth0_vlan: entered promiscuous mode
[  286.114996][ T7792] veth1_vlan: entered promiscuous mode
[  286.329193][ T7792] veth0_macvtap: entered promiscuous mode
[  286.381341][ T7792] veth1_macvtap: entered promiscuous mode
[  286.486759][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.523691][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.537445][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.567438][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.603935][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.634999][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.688187][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.702349][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.724697][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.814833][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.814864][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.814880][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.814902][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.814918][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.814939][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.814957][ T7792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.814979][ T7792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.816525][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.851781][ T7792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.851873][ T7792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.851916][ T7792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.851958][ T7792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.389685][ T5846] Bluetooth: hci4: Unable to find connection for big 0xd2
[  287.801964][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.801994][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.384262][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.384288][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.337309][   T30] audit: type=1800 audit(6039188491.171:5): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.374" name="members" dev="configfs" ino=17284 res=0 errno=0
[  292.509382][ T8092] netlink: 544 bytes leftover after parsing attributes in process `syz.5.378'.
[  292.643871][ T8083] FAULT_INJECTION: forcing a failure.
[  292.643871][ T8083] name failslab, interval 1, probability 0, space 0, times 0
[  292.697766][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.4.376 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  292.697812][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  292.697832][ T8083] Call Trace:
[  292.697842][ T8083]  <TASK>
[  292.697854][ T8083]  dump_stack_lvl+0x16c/0x1f0
[  292.697905][ T8083]  should_fail_ex+0x512/0x640
[  292.697942][ T8083]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  292.698015][ T8083]  should_failslab+0xc2/0x120
[  292.698046][ T8083]  __kmalloc_cache_noprof+0x6a/0x3e0
[  292.698090][ T8083]  ? smc_stats_init+0x4e/0x160
[  292.698136][ T8083]  ? __pfx_smc_net_stat_init+0x10/0x10
[  292.698168][ T8083]  smc_stats_init+0x4e/0x160
[  292.698208][ T8083]  ? smc_net_init+0x39/0x50
[  292.698236][ T8083]  ops_init+0x1df/0x5f0
[  292.698287][ T8083]  setup_net+0x21e/0x850
[  292.698335][ T8083]  ? __pfx_setup_net+0x10/0x10
[  292.698378][ T8083]  ? lockdep_init_map_type+0x5c/0x280
[  292.698411][ T8083]  ? __pfx_down_read_killable+0x10/0x10
[  292.698446][ T8083]  ? debug_mutex_init+0x37/0x70
[  292.698491][ T8083]  copy_net_ns+0x2a6/0x5f0
[  292.698544][ T8083]  create_new_namespaces+0x3ea/0xad0
[  292.698600][ T8083]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  292.698651][ T8083]  ksys_unshare+0x45b/0xa40
[  292.698701][ T8083]  ? __pfx_ksys_unshare+0x10/0x10
[  292.698772][ T8083]  __x64_sys_unshare+0x31/0x40
[  292.698820][ T8083]  do_syscall_64+0xcd/0x260
[  292.698872][ T8083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.698903][ T8083] RIP: 0033:0x7f89b1d8d169
[  292.698927][ T8083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.698958][ T8083] RSP: 002b:00007f89b2c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  292.698996][ T8083] RAX: ffffffffffffffda RBX: 00007f89b1fa5fa0 RCX: 00007f89b1d8d169
[  292.699017][ T8083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  292.699035][ T8083] RBP: 00007f89b1e0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  292.699054][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.699072][ T8083] R13: 0000000000000000 R14: 00007f89b1fa5fa0 R15: 00007fffc8d83718
[  292.699113][ T8083]  </TASK>
[  293.014370][ T8096] capability: warning: `syz.5.380' uses 32-bit capabilities (legacy support in use)
[  293.763749][ T8117] FAULT_INJECTION: forcing a failure.
[  293.763749][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  293.854811][ T8117] CPU: 0 UID: 0 PID: 8117 Comm: syz.4.384 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  293.854855][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  293.854872][ T8117] Call Trace:
[  293.854882][ T8117]  <TASK>
[  293.854893][ T8117]  dump_stack_lvl+0x16c/0x1f0
[  293.854951][ T8117]  should_fail_ex+0x512/0x640
[  293.854994][ T8117]  _copy_to_user+0x32/0xd0
[  293.855037][ T8117]  simple_read_from_buffer+0xcb/0x170
[  293.855084][ T8117]  proc_fail_nth_read+0x197/0x270
[  293.855128][ T8117]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.855175][ T8117]  ? rw_verify_area+0xcf/0x680
[  293.855212][ T8117]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.855256][ T8117]  vfs_read+0x1de/0xc70
[  293.855304][ T8117]  ? __pfx___mutex_lock+0x10/0x10
[  293.855349][ T8117]  ? __pfx_vfs_read+0x10/0x10
[  293.855403][ T8117]  ? __fget_files+0x20e/0x3c0
[  293.855460][ T8117]  ksys_read+0x12a/0x240
[  293.855503][ T8117]  ? __pfx_ksys_read+0x10/0x10
[  293.855559][ T8117]  do_syscall_64+0xcd/0x260
[  293.855608][ T8117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.855640][ T8117] RIP: 0033:0x7f89b1d8bb7c
[  293.855664][ T8117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  293.855693][ T8117] RSP: 002b:00007f89b2c9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  293.855721][ T8117] RAX: ffffffffffffffda RBX: 00007f89b1fa5fa0 RCX: 00007f89b1d8bb7c
[  293.855741][ T8117] RDX: 000000000000000f RSI: 00007f89b2c9f0a0 RDI: 0000000000000003
[  293.855758][ T8117] RBP: 00007f89b2c9f090 R08: 0000000000000000 R09: 0000000000000000
[  293.855775][ T8117] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  293.855793][ T8117] R13: 0000000000000001 R14: 00007f89b1fa5fa0 R15: 00007fffc8d83718
[  293.855833][ T8117]  </TASK>
[  294.529936][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'.
[  294.616831][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.933215][ T8108] bridge_slave_1 (unregistering): left allmulticast mode
[  294.969994][ T8108] bridge_slave_1 (unregistering): left promiscuous mode
[  295.032913][ T8131] FAULT_INJECTION: forcing a failure.
[  295.032913][ T8131] name failslab, interval 1, probability 0, space 0, times 0
[  295.057668][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.132928][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.0.388 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  295.132976][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  295.132994][ T8131] Call Trace:
[  295.133004][ T8131]  <TASK>
[  295.133016][ T8131]  dump_stack_lvl+0x16c/0x1f0
[  295.133067][ T8131]  should_fail_ex+0x512/0x640
[  295.133102][ T8131]  ? fs_reclaim_acquire+0xae/0x150
[  295.133146][ T8131]  ? tomoyo_encode2+0x100/0x3e0
[  295.133188][ T8131]  should_failslab+0xc2/0x120
[  295.133219][ T8131]  __kmalloc_noprof+0xd2/0x510
[  295.133268][ T8131]  ? d_absolute_path+0x136/0x1a0
[  295.133311][ T8131]  tomoyo_encode2+0x100/0x3e0
[  295.133362][ T8131]  tomoyo_encode+0x29/0x50
[  295.133405][ T8131]  tomoyo_realpath_from_path+0x18f/0x6e0
[  295.133463][ T8131]  tomoyo_path_number_perm+0x245/0x580
[  295.133501][ T8131]  ? tomoyo_path_number_perm+0x237/0x580
[  295.133542][ T8131]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  295.133622][ T8131]  ? d_alloc_parallel+0x979/0x12e0
[  295.133666][ T8131]  ? current_check_access_path+0x33c/0x460
[  295.133709][ T8131]  ? __pfx_current_check_access_path+0x10/0x10
[  295.133764][ T8131]  tomoyo_path_mknod+0x10c/0x190
[  295.133825][ T8131]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  295.133880][ T8131]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  295.133922][ T8131]  security_path_mknod+0x161/0x310
[  295.133964][ T8131]  lookup_open.isra.0+0xc17/0x1580
[  295.134014][ T8131]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  295.134079][ T8131]  ? __pfx_down_write+0x10/0x10
[  295.134127][ T8131]  ? mnt_get_write_access+0x20c/0x300
[  295.134171][ T8131]  path_openat+0x905/0x2d40
[  295.134235][ T8131]  ? __pfx_path_openat+0x10/0x10
[  295.134295][ T8131]  do_filp_open+0x20b/0x470
[  295.134341][ T8131]  ? __pfx_do_filp_open+0x10/0x10
[  295.134417][ T8131]  ? _raw_spin_unlock+0x28/0x50
[  295.134452][ T8131]  ? alloc_fd+0x471/0x7d0
[  295.134512][ T8131]  do_sys_openat2+0x11b/0x1d0
[  295.134544][ T8131]  ? __pfx_do_sys_openat2+0x10/0x10
[  295.134596][ T8131]  __x64_sys_open+0x153/0x1e0
[  295.134630][ T8131]  ? __pfx___x64_sys_open+0x10/0x10
[  295.134675][ T8131]  ? rcu_is_watching+0x12/0xc0
[  295.134719][ T8131]  do_syscall_64+0xcd/0x260
[  295.134769][ T8131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.134811][ T8131] RIP: 0033:0x7fc5a8f8d169
[  295.134837][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.134868][ T8131] RSP: 002b:00007fc5a9d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  295.134899][ T8131] RAX: ffffffffffffffda RBX: 00007fc5a91a5fa0 RCX: 00007fc5a8f8d169
[  295.134919][ T8131] RDX: e1d2b27bdc14abfd RSI: 0000000000004242 RDI: 0000000000000000
[  295.134937][ T8131] RBP: 00007fc5a900e2a0 R08: 0000000000000000 R09: 0000000000000000
[  295.134956][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.134974][ T8131] R13: 0000000000000000 R14: 00007fc5a91a5fa0 R15: 00007ffcecc38668
[  295.135015][ T8131]  </TASK>
[  295.444191][ T8131] ERROR: Out of memory at tomoyo_realpath_from_path.
[  297.691007][ T8182] netlink: 146 bytes leftover after parsing attributes in process `syz.0.399'.
[  299.949588][   T30] audit: type=1800 audit(6039188499.741:6): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.409" name="version" dev="configfs" ino=18789 res=0 errno=0
[  303.461477][ T8276] FAULT_INJECTION: forcing a failure.
[  303.461477][ T8276] name failslab, interval 1, probability 0, space 0, times 0
[  303.537894][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.4.421 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  303.537937][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  303.537964][ T8276] Call Trace:
[  303.537974][ T8276]  <TASK>
[  303.537985][ T8276]  dump_stack_lvl+0x16c/0x1f0
[  303.538033][ T8276]  should_fail_ex+0x512/0x640
[  303.538066][ T8276]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  303.538115][ T8276]  should_failslab+0xc2/0x120
[  303.538143][ T8276]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  303.538189][ T8276]  ? prepare_creds+0x2c/0x7d0
[  303.538227][ T8276]  prepare_creds+0x2c/0x7d0
[  303.538262][ T8276]  lookup_user_key+0x399/0x1300
[  303.538309][ T8276]  ? __pfx_lookup_user_key+0x10/0x10
[  303.538349][ T8276]  ? find_held_lock+0x2b/0x80
[  303.538390][ T8276]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  303.538441][ T8276]  keyctl_chown_key+0x1c9/0xfb0
[  303.538480][ T8276]  ? __pfx_keyctl_chown_key+0x10/0x10
[  303.538509][ T8276]  ? ksys_write+0x1b9/0x240
[  303.538550][ T8276]  ? __pfx_ksys_write+0x10/0x10
[  303.538590][ T8276]  ? rcu_is_watching+0x12/0xc0
[  303.538633][ T8276]  __do_sys_keyctl+0x283/0x590
[  303.538668][ T8276]  do_syscall_64+0xcd/0x260
[  303.538717][ T8276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.538748][ T8276] RIP: 0033:0x7f89b1d8d169
[  303.538772][ T8276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.538801][ T8276] RSP: 002b:00007f89b2c9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  303.538829][ T8276] RAX: ffffffffffffffda RBX: 00007f89b1fa5fa0 RCX: 00007f89b1d8d169
[  303.538848][ T8276] RDX: 0000000000000000 RSI: fffff7ffffffffff RDI: 0000000000000004
[  303.538866][ T8276] RBP: 00007f89b2c9f090 R08: 0000000000000008 R09: 0000000000000000
[  303.538883][ T8276] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  303.538901][ T8276] R13: 0000000000000000 R14: 00007f89b1fa5fa0 R15: 00007fffc8d83718
[  303.538941][ T8276]  </TASK>
[  304.626961][ T8295] FAULT_INJECTION: forcing a failure.
[  304.626961][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.667109][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.0.427 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  304.667152][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  304.667169][ T8295] Call Trace:
[  304.667178][ T8295]  <TASK>
[  304.667189][ T8295]  dump_stack_lvl+0x16c/0x1f0
[  304.667244][ T8295]  should_fail_ex+0x512/0x640
[  304.667285][ T8295]  _copy_from_user+0x2e/0xd0
[  304.667323][ T8295]  ____sys_sendmsg+0x607/0xc70
[  304.667379][ T8295]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.667433][ T8295]  ? __pfx__kstrtoull+0x10/0x10
[  304.667485][ T8295]  ___sys_sendmsg+0x134/0x1d0
[  304.667524][ T8295]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.667576][ T8295]  ? find_held_lock+0x2b/0x80
[  304.667633][ T8295]  __sys_sendmmsg+0x200/0x420
[  304.667675][ T8295]  ? __pfx___sys_sendmmsg+0x10/0x10
[  304.667721][ T8295]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  304.667771][ T8295]  ? fput+0x70/0xf0
[  304.667794][ T8295]  ? ksys_write+0x1b9/0x240
[  304.667828][ T8295]  ? __pfx_ksys_write+0x10/0x10
[  304.667860][ T8295]  ? rcu_is_watching+0x12/0xc0
[  304.667896][ T8295]  __x64_sys_sendmmsg+0x9c/0x100
[  304.667928][ T8295]  ? lockdep_hardirqs_on+0x7c/0x110
[  304.667962][ T8295]  do_syscall_64+0xcd/0x260
[  304.668000][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.668025][ T8295] RIP: 0033:0x7fc5a8f8d169
[  304.668044][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.668067][ T8295] RSP: 002b:00007fc5a9d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  304.668090][ T8295] RAX: ffffffffffffffda RBX: 00007fc5a91a5fa0 RCX: 00007fc5a8f8d169
[  304.668105][ T8295] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003
[  304.668120][ T8295] RBP: 00007fc5a9d63090 R08: 0000000000000000 R09: 0000000000000000
[  304.668134][ T8295] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000001
[  304.668148][ T8295] R13: 0000000000000000 R14: 00007fc5a91a5fa0 R15: 00007ffcecc38668
[  304.668179][ T8295]  </TASK>
[  306.025101][ T8318] .SR: entered promiscuous mode
[  306.363803][ T8321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00
[  306.444011][ T8325] Invalid ELF header magic: != ELF
[  306.483392][ T8321] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  306.626570][ T8321] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  306.836967][ T8321] page_type: f5(slab)
[  306.922714][ T8321] raw: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001
[  306.980116][ T8321] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  307.017618][ T8321] head: 00fff00000000040 ffff88801b441dc0 0000000000000000 dead000000000001
[  307.026499][ T8321] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  307.035564][ T8321] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff
[  307.044492][ T8321] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  307.057753][ T8321] page dumped because: unmovable page
[  307.063200][ T8321] page_owner tracks the page as allocated
[  307.070100][ T8321] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6114, tgid 6113 (syz.3.41), ts 118371529969, free_ts 117788008356
[  307.091999][ T8321]  post_alloc_hook+0x181/0x1b0
[  307.096882][ T8321]  get_page_from_freelist+0x1193/0x39b0
[  307.102632][ T8321]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  307.137640][ T8321]  alloc_pages_mpol+0x1fb/0x550
[  307.142594][ T8321]  new_slab+0x23c/0x330
[  307.312489][ T8321]  ___slab_alloc+0xd9c/0x1940
[  307.327641][ T8321]  __slab_alloc.constprop.0+0x56/0xb0
[  307.377493][ T8321]  __kmalloc_noprof+0x2f2/0x510
[  307.382476][ T8321]  __alloc_workqueue+0xd5c/0x1810
[  307.429541][ T8321]  alloc_workqueue+0xd2/0x200
[  307.485515][ T8321]  tipc_crypto_start+0x66b/0x9e0
[  307.523223][ T8321]  tipc_init_net+0x2dd/0x430
[  307.570834][ T8321]  ops_init+0x1df/0x5f0
[  307.620560][ T8321]  setup_net+0x21e/0x850
[  307.624917][ T8321]  copy_net_ns+0x2a6/0x5f0
[  307.687636][ T8321]  create_new_namespaces+0x3ea/0xad0
[  307.720490][ T8321] page last free pid 6108 tgid 6106 stack trace:
[  307.726896][ T8321]  __free_frozen_pages+0x69d/0xff0
[  307.871907][ T8321]  __put_partials+0x16d/0x1c0
[  307.876647][ T8321]  qlist_free_all+0x4e/0x120
[  307.961733][ T8321]  kasan_quarantine_reduce+0x195/0x1e0
[  308.008487][ T8321]  __kasan_slab_alloc+0x69/0x90
[  308.030921][ T8321]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  308.062215][ T8321]  __alloc_skb+0x2b2/0x380
[  308.066735][ T8321]  netlink_ack+0x15d/0xb80
[  308.084374][ T8321]  netlink_rcv_skb+0x347/0x440
[  308.103148][ T8321]  genl_rcv+0x28/0x40
[  308.123260][ T8321]  netlink_unicast+0x53a/0x7f0
[  308.142597][ T8321]  netlink_sendmsg+0x8d1/0xdd0
[  308.160765][ T8321]  ____sys_sendmsg+0xa95/0xc70
[  308.175952][ T8321]  ___sys_sendmsg+0x134/0x1d0
[  308.201518][ T8321]  __sys_sendmsg+0x16d/0x220
[  308.226895][ T8321]  do_syscall_64+0xcd/0x260
[  309.863821][ T8348] netlink: 334 bytes leftover after parsing attributes in process `syz.4.435'.
[  316.594869][ T8463] FAULT_INJECTION: forcing a failure.
[  316.594869][ T8463] name failslab, interval 1, probability 0, space 0, times 0
[  316.767618][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.0.446 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  316.767662][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  316.767679][ T8463] Call Trace:
[  316.767689][ T8463]  <TASK>
[  316.767700][ T8463]  dump_stack_lvl+0x16c/0x1f0
[  316.767750][ T8463]  should_fail_ex+0x512/0x640
[  316.767785][ T8463]  ? fs_reclaim_acquire+0xae/0x150
[  316.767826][ T8463]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  316.767871][ T8463]  should_failslab+0xc2/0x120
[  316.767900][ T8463]  __kmalloc_noprof+0xd2/0x510
[  316.767966][ T8463]  tomoyo_realpath_from_path+0xc2/0x6e0
[  316.768015][ T8463]  ? tomoyo_profile+0x47/0x60
[  316.768067][ T8463]  tomoyo_path_number_perm+0x245/0x580
[  316.768102][ T8463]  ? tomoyo_path_number_perm+0x237/0x580
[  316.768143][ T8463]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  316.768183][ T8463]  ? find_held_lock+0x2b/0x80
[  316.768260][ T8463]  ? find_held_lock+0x2b/0x80
[  316.768298][ T8463]  ? hook_file_ioctl_common+0x145/0x410
[  316.768342][ T8463]  ? __fget_files+0x20e/0x3c0
[  316.768395][ T8463]  security_file_ioctl+0x9b/0x240
[  316.768435][ T8463]  __x64_sys_ioctl+0xb7/0x200
[  316.768477][ T8463]  do_syscall_64+0xcd/0x260
[  316.768525][ T8463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.768556][ T8463] RIP: 0033:0x7fc5a8f8d169
[  316.768579][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.768608][ T8463] RSP: 002b:00007fc5a9d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  316.768636][ T8463] RAX: ffffffffffffffda RBX: 00007fc5a91a5fa0 RCX: 00007fc5a8f8d169
[  316.768656][ T8463] RDX: 0000000000000000 RSI: 0000000000001277 RDI: 0000000000000003
[  316.768673][ T8463] RBP: 00007fc5a9d63090 R08: 0000000000000000 R09: 0000000000000000
[  316.768691][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.768709][ T8463] R13: 0000000000000000 R14: 00007fc5a91a5fa0 R15: 00007ffcecc38668
[  316.768749][ T8463]  </TASK>
[  316.768760][ T8463] ERROR: Out of memory at tomoyo_realpath_from_path.
[  321.540686][ T8523] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000
[  321.627622][ T8523] netlink: 'syz.0.457': attribute type 1 has an invalid length.
[  321.978461][ T8530] busy
[  322.348066][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.354473][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  323.278473][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  323.288456][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  323.297124][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  323.306771][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  323.314689][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  324.271949][ T8542] FAULT_INJECTION: forcing a failure.
[  324.271949][ T8542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.366539][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.5.462 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  324.366571][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  324.366584][ T8542] Call Trace:
[  324.366591][ T8542]  <TASK>
[  324.366600][ T8542]  dump_stack_lvl+0x16c/0x1f0
[  324.366636][ T8542]  should_fail_ex+0x512/0x640
[  324.366666][ T8542]  _copy_from_user+0x2e/0xd0
[  324.366695][ T8542]  blkdev_common_ioctl+0x17ec/0x2250
[  324.366731][ T8542]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  324.366758][ T8542]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  324.366785][ T8542]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  324.366822][ T8542]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  324.366868][ T8542]  ? find_held_lock+0x2b/0x80
[  324.366903][ T8542]  blkdev_ioctl+0x1cb/0x6d0
[  324.366938][ T8542]  ? __pfx_blkdev_ioctl+0x10/0x10
[  324.366977][ T8542]  ? __pfx_blkdev_ioctl+0x10/0x10
[  324.367013][ T8542]  __x64_sys_ioctl+0x190/0x200
[  324.367043][ T8542]  do_syscall_64+0xcd/0x260
[  324.367078][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.367102][ T8542] RIP: 0033:0x7fd70998d169
[  324.367119][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.367140][ T8542] RSP: 002b:00007fd70a768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.367161][ T8542] RAX: ffffffffffffffda RBX: 00007fd709ba6080 RCX: 00007fd70998d169
[  324.367175][ T8542] RDX: 0000000000000000 RSI: 0000000000001277 RDI: 0000000000000003
[  324.367189][ T8542] RBP: 00007fd70a768090 R08: 0000000000000000 R09: 0000000000000000
[  324.367202][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.367215][ T8542] R13: 0000000000000000 R14: 00007fd709ba6080 R15: 00007ffcd1535008
[  324.367242][ T8542]  </TASK>
[  325.045479][ T8535] chnl_net:caif_netlink_parms(): no params data found
[  325.377803][ T5846] Bluetooth: hci3: command tx timeout
[  325.861739][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.927532][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.937947][ T8535] bridge_slave_0: entered allmulticast mode
[  325.945870][ T8535] bridge_slave_0: entered promiscuous mode
[  326.014342][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.040267][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.060133][ T8535] bridge_slave_1: entered allmulticast mode
[  326.126455][ T8535] bridge_slave_1: entered promiscuous mode
[  326.490775][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.522607][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.021676][ T8535] team0: Port device team_slave_0 added
[  327.241912][ T8535] team0: Port device team_slave_1 added
[  327.458658][ T5846] Bluetooth: hci3: command tx timeout
[  327.491649][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.510932][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.627238][ T8535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.783205][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.810009][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.883771][ T8535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.215319][ T8535] hsr_slave_0: entered promiscuous mode
[  328.223485][ T8535] hsr_slave_1: entered promiscuous mode
[  328.243915][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.277579][ T8535] Cannot create hsr debugfs directory
[  328.394603][ T8579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.470'.
[  328.832079][ T8535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  329.031024][ T8535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  329.099580][ T8535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  329.185444][ T8535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  329.537509][ T5846] Bluetooth: hci3: command tx timeout
[  329.681961][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.744902][ T8535] 8021q: adding VLAN 0 to HW filter on device team0
[  329.820256][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.827492][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.883768][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.891010][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.161146][ T8535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.224830][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.417628][ T8609] usb usb15: usbfs: process 8609 (syz.0.478) did not claim interface 1 before use
[  331.619059][ T5846] Bluetooth: hci3: command tx timeout
[  331.882673][   T30] audit: type=1800 audit(6039188531.721:7): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.481" name="features" dev="configfs" ino=19613 res=0 errno=0
[  332.218194][ T8535] veth0_vlan: entered promiscuous mode
[  332.332826][ T8631] mkiss: ax0: crc mode is auto.
[  332.335635][ T8535] veth1_vlan: entered promiscuous mode
[  332.516261][ T8535] veth0_macvtap: entered promiscuous mode
[  333.310436][ T8535] veth1_macvtap: entered promiscuous mode
[  333.476427][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.567485][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.613271][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.667688][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.727443][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.768655][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.787523][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.827460][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.852067][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.865029][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.947594][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.020622][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.077452][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.107543][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.127452][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.147428][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.161816][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.197610][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.216284][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.252391][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.297484][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.342261][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.410872][ T8535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.457446][ T8535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.466234][ T8535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.547605][ T8535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.028292][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.065593][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.611260][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.639209][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.170362][   T30] audit: type=1800 audit(6039188536.991:8): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.493" name="members" dev="configfs" ino=19927 res=0 errno=0
[  337.374858][   T30] audit: type=1800 audit(6039188537.211:9): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.494" name="members" dev="configfs" ino=20655 res=0 errno=0
[  338.124298][ T8688] Invalid ELF header magic: != ELF
[  338.907885][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'.
[  341.027984][   T30] audit: type=1800 audit(6039188540.861:10): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.504" name="members" dev="configfs" ino=20701 res=0 errno=0
[  341.999862][ T8743] netlink: 338 bytes leftover after parsing attributes in process `syz.6.506'.
[  344.699344][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.6.511'.
[  347.098405][ T5846] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18
[  347.216983][   T30] audit: type=1800 audit(6039192282.036:11): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.515" name="dbroot" dev="configfs" ino=20205 res=0 errno=0
[  351.188322][ T8816] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[  352.910762][ T8841] HfR: entered promiscuous mode
[  354.310153][ T8871] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  354.380118][ T8873] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  354.938360][ T8878] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  355.732960][ T8894] FAULT_INJECTION: forcing a failure.
[  355.732960][ T8894] name failslab, interval 1, probability 0, space 0, times 0
[  355.789497][ T8895] netlink: 338 bytes leftover after parsing attributes in process `syz.5.536'.
[  355.807021][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.6.539 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  355.807064][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  355.807082][ T8894] Call Trace:
[  355.807092][ T8894]  <TASK>
[  355.807104][ T8894]  dump_stack_lvl+0x16c/0x1f0
[  355.807157][ T8894]  should_fail_ex+0x512/0x640
[  355.807193][ T8894]  ? fs_reclaim_acquire+0xae/0x150
[  355.807236][ T8894]  should_failslab+0xc2/0x120
[  355.807267][ T8894]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  355.807318][ T8894]  ? security_inode_alloc+0x3b/0x2b0
[  355.807360][ T8894]  security_inode_alloc+0x3b/0x2b0
[  355.807396][ T8894]  inode_init_always_gfp+0xce4/0x1030
[  355.807456][ T8894]  alloc_inode+0x86/0x240
[  355.807492][ T8894]  new_inode+0x22/0x1c0
[  355.807533][ T8894]  __rpc_create_common+0x57/0x2f0
[  355.807591][ T8894]  rpc_populate.constprop.0+0x153/0x5d0
[  355.807664][ T8894]  rpc_fill_super+0x345/0x840
[  355.807714][ T8894]  ? sget_fc+0x808/0xc20
[  355.807763][ T8894]  ? __pfx_rpc_fill_super+0x10/0x10
[  355.807812][ T8894]  get_tree_keyed+0x10b/0x1d0
[  355.807857][ T8894]  vfs_get_tree+0x8b/0x340
[  355.807896][ T8894]  vfs_cmd_create+0xd7/0x2a0
[  355.807932][ T8894]  __do_sys_fsconfig+0x7b8/0xbe0
[  355.807970][ T8894]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  355.808005][ T8894]  ? xfd_validate_state+0x5d/0x180
[  355.808043][ T8894]  ? rcu_is_watching+0x12/0xc0
[  355.808095][ T8894]  do_syscall_64+0xcd/0x260
[  355.808144][ T8894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.808176][ T8894] RIP: 0033:0x7f7a0958d169
[  355.808200][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.808230][ T8894] RSP: 002b:00007f7a0a351038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  355.808260][ T8894] RAX: ffffffffffffffda RBX: 00007f7a097a6080 RCX: 00007f7a0958d169
[  355.808279][ T8894] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006
[  355.808296][ T8894] RBP: 00007f7a0960e2a0 R08: 0000000000000000 R09: 0000000000000000
[  355.808313][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.808330][ T8894] R13: 0000000000000000 R14: 00007f7a097a6080 R15: 00007fff0be539d8
[  355.808368][ T8894]  </TASK>
[  356.117802][ T8894] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry clntXX
[  356.128564][ T8894] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd
[  357.320085][ T8913] KVM: debugfs: duplicate directory 8913-3
[  358.052175][ T8931] ptrace attach of "./syz-executor exec"[8535] was attempted by "./syz-executor exec"[8931]
[  358.865076][ T8954] zram: Added device: zram1
[  361.387846][ T8985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.562'.
[  361.508834][ T8985] caif0: entered promiscuous mode
[  361.806420][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'.
[  361.911988][ T8989] netlink: 354 bytes leftover after parsing attributes in process `syz.3.560'.
[  364.154170][ T9014] netlink: 'syz.5.568': attribute type 1 has an invalid length.
[  365.722418][ T9034] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  365.722418][ T9034]    program syz.6.572 not setting count and/or reply_len properly
[  365.844940][   T30] audit: type=1800 audit(6039192300.686:12): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.573" name="members" dev="configfs" ino=21856 res=0 errno=0
[  365.908883][    T9] BUG: sleeping function called from invalid context at ./include/linux/pagemap.h:1135
[  365.918860][    T9] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0
[  365.927711][    T9] preempt_count: 1, expected: 0
[  365.932559][    T9] RCU nest depth: 0, expected: 0
[  365.937515][    T9] 3 locks held by kworker/0:0/9:
[  365.942453][    T9]  #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  365.952931][    T9]  #1: ffffc900000e7d18 ((work_completion)(&sfp->ew.work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  365.964294][    T9]  #2: ffff888067edc080 (&sfp->rq_list_lock){..-.}-{3:3}, at: sg_remove_sfp_usercontext+0x81/0x590
[  365.975077][    T9] irq event stamp: 337752
[  365.979412][    T9] hardirqs last  enabled at (337751): [<ffffffff8b728bb3>] _raw_spin_unlock_irq+0x23/0x50
[  365.989330][    T9] hardirqs last disabled at (337752): [<ffffffff8b729052>] _raw_write_lock_irqsave+0x52/0x60
[  365.999770][    T9] softirqs last  enabled at (337720): [<ffffffff817ccdee>] handle_softirqs+0x5be/0x8e0
[  366.009435][    T9] softirqs last disabled at (337695): [<ffffffff817cd712>] do_softirq+0xb2/0xf0
[  366.018486][    T9] Preemption disabled at:
[  366.018497][    T9] [<0000000000000000>] 0x0
[  366.027244][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  366.027274][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  366.027291][    T9] Workqueue: events sg_remove_sfp_usercontext
[  366.027320][    T9] Call Trace:
[  366.027328][    T9]  <TASK>
[  366.027337][    T9]  dump_stack_lvl+0x116/0x1f0
[  366.027373][    T9]  __might_resched+0x3c0/0x5e0
[  366.027410][    T9]  ? __pfx___might_resched+0x10/0x10
[  366.027445][    T9]  ? bio_first_folio+0x3de/0x640
[  366.027481][    T9]  __bio_release_pages+0x312/0x3b0
[  366.027517][    T9]  ? __pfx___bio_release_pages+0x10/0x10
[  366.027548][    T9]  ? __lock_acquire+0xaa4/0x1ba0
[  366.027585][    T9]  blk_rq_unmap_user+0x3be/0x980
[  366.027627][    T9]  ? __lock_acquire+0xaa4/0x1ba0
[  366.027653][    T9]  ? __pfx_blk_rq_unmap_user+0x10/0x10
[  366.027698][    T9]  ? do_raw_write_lock+0x11c/0x3a0
[  366.027727][    T9]  ? __pfx_do_raw_write_lock+0x10/0x10
[  366.027760][    T9]  sg_finish_rem_req+0xde/0x590
[  366.027790][    T9]  sg_remove_sfp_usercontext+0x103/0x590
[  366.027828][    T9]  process_one_work+0x9cc/0x1b70
[  366.027869][    T9]  ? __pfx_process_one_work+0x10/0x10
[  366.027925][    T9]  ? assign_work+0x1a0/0x250
[  366.027954][    T9]  worker_thread+0x6c8/0xf10
[  366.028009][    T9]  ? __pfx_worker_thread+0x10/0x10
[  366.028042][    T9]  kthread+0x3c2/0x780
[  366.028068][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028090][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028113][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028136][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028159][    T9]  ? rcu_is_watching+0x12/0xc0
[  366.028190][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028216][    T9]  ret_from_fork+0x45/0x80
[  366.028240][    T9]  ? __pfx_kthread+0x10/0x10
[  366.028265][    T9]  ret_from_fork_asm+0x1a/0x30
[  366.028338][    T9]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)