last executing test programs:

51.499385191s ago: executing program 0 (id=448):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, r1, 0x59e638bc4fbb3f7d, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880)
remap_file_pages$auto(0xf94, 0x4000001000, 0x0, 0x7, 0x6)

51.33960047s ago: executing program 0 (id=442):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0)
ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1)
r1 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pread64$auto(r1, &(0x7f00000001c0)='@\'&\x00', 0x5, 0x5)
socket(0x2, 0x2, 0x73)
socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
socket(0x10, 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
mmap$auto(0xd36e, 0x1, 0xdf, 0x9b72, 0x2, 0x8000)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0xffffffff, 0x5, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x7, 0x100000000000000, 0xb, 0xf]}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
read$auto_aoe_fops_aoechr(0xffffffffffffffff, &(0x7f0000000480)=""/244, 0xf4)
write$auto_evm_key_ops_evm_secfs(r0, &(0x7f00000000c0)="050a6ef1757b667f9b4bb4bd01627b108851a985e4ab1c1002f78849c2d9d7ec2d81ce439e870de06a12a79a366a89d863062cefde17da37d5624aeb6e54e1c91abcc07927668a508f4d5a071f6b1b1df1fac538dec63ccd8816d3162548edb65537f78c26e726675e072135c0a6a85f9708fc80", 0x74)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0x88282, 0x0)

50.348819364s ago: executing program 0 (id=449):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0x0, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @raw=0xddef, @raw=0xe}) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
ioctl$auto(r1, 0x540a, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async)
madvise$auto(0x2, 0x5c61fa2c, 0xf) (async)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r3, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)

48.758857764s ago: executing program 0 (id=459):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xaf0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
unlink$auto(&(0x7f0000000380)='./file0\x00')
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
mmap$auto(0x0, 0x400008, 0xe3, 0x410, r0, 0x8000)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c45265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x3, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x2, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x2, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x79c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0xd2be, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e1620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b966e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x4, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0xe1a, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xfff7, 0x1c}}, {"dc686bcc288ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b799ff6a1d72bfa5ee4ccf556ba4da52", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1ff, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x71, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x776}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0x7, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x634, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"42117995d92c73c282342edb8b4a678a", 0x0, {0x1}, {0x9, 0x1, 0x8b8}}, {"9e3cfef39aff6d70acf0b72a76cb0f88", 0x40000000, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x5}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x8}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0x80f7, 0x8}}, {"60d20d7375238ec3df77ce23d4e2b3a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xf, 0x8}}]})
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x5, 0x84)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40242, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x800)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
fsopen$auto(0x0, 0x1)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0)
read$auto(0x3, 0x0, 0x80)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="8d014000ce53170c05d4c974949cf25b5c542b65531269a18b5a6d2eba29d72ed6e4ec0f17b093f892bd5e4ff92c06e36221c79e8c4e4dfeb1c46a6a7b9d326458f25da0f09427f97bfe79b6387f927b6cf46fef021732754efe7f6b29e40fb4a73334f9c32f", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000008000300000000000800010005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)

48.273055905s ago: executing program 0 (id=463):
setxattr$auto(0x0, &(0x7f0000000200)='*\x00', 0x0, 0x800000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd5/queue/write_zeroes_max_bytes\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x309c01, 0x0)
ioctl$auto(r1, 0x92106411, 0xffffffffffffffff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x80000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x8, 0x47d1, 0xfffffffffffffffa, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800)
madvise$auto(0x200000000000000, 0xffffffff7fff0008, 0x19)
madvise$auto(0x10003, 0x2003f2, 0x5)
madvise$auto(0xffffffffffffffff, 0x200005, 0x17)
r4 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r4, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0)
syslog$auto(0x3, 0x0, 0x5)
poll$auto(0x0, 0x7f, 0x8)
socket(0x25, 0x5, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x1000000)
setsockopt$auto_SO_OOBINLINE(r5, 0x80000001, 0xa, &(0x7f0000000080)='Z\v\xa4J\xd9\xbf[\'+\x04\xdbS[\xa3Z\xa0\xde\xa4G\xe5\x8a\n\x89q\xbbI\x00'/37, 0x4)
r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0)
pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
poll$auto(&(0x7f0000000380)={r6, 0x4, 0xff01}, 0xe0b, 0x7ff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd11/events_async\x00', 0x182b02, 0x0)
openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000300), 0x72483, 0x0)

47.213263136s ago: executing program 0 (id=468):
writev$auto(0x3, 0x0, 0x8009)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x188, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x174, 0x2, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @u32=0x6}, @nested={0x15f, 0xaa, 0x0, 0x1, [@generic="ad719c15e529ce58d445c4f51ea00a9ae65deb70d3f0099b1e7cf4a800ebc58e43207232817c71b86b15af0aea375f5b2a07b349c6df2888a636", @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x151}]}, @generic="75a2bc1a29609adf", @generic="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", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}]}, @typed={0x8, 0x12a, 0x0, 0x0, @uid}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x800000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
mmap$auto(0x3, 0x6, 0x2000006, 0xeb1, 0x401, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9)
read$auto(0x3, 0x0, 0xf34)
socket(0x1b, 0x3, 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff)

31.822705865s ago: executing program 32 (id=468):
writev$auto(0x3, 0x0, 0x8009)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x188, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x174, 0x2, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @u32=0x6}, @nested={0x15f, 0xaa, 0x0, 0x1, [@generic="ad719c15e529ce58d445c4f51ea00a9ae65deb70d3f0099b1e7cf4a800ebc58e43207232817c71b86b15af0aea375f5b2a07b349c6df2888a636", @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x151}]}, @generic="75a2bc1a29609adf", @generic="cc0d951478c157d38796677b0fa07fa1e2dc0fa60e1d6b73049afc4a0dcb3a2776ef4e482af6d4ed347ccbffc025694489bcfde685590a8a8fff86ad2349022e0dcac218a8f37b543bd4b9f0330526b18ac2967b6ceeed71c832c67f354fea231c45477134d0da26cbf248543e1958b7f59ee665fbfd0808421137c975a0d4d99663d0c959bb7ee30c4d4e679d9fe4fe4ccb751f2950c500dd2a4a9f7e1f09842f62f52861a333882735a3a6b4fc05df59ce0c96e3a73ab20aa7f57da02d8d170c8c57052378912e9b811ba510b9e1061777a9c0c8405df57d0d89965b606b1a8eef9857ac6e6bf3338eac9c270f831791ad237c5592ab294f23024ba5", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}]}, @typed={0x8, 0x12a, 0x0, 0x0, @uid}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x800000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
mmap$auto(0x3, 0x6, 0x2000006, 0xeb1, 0x401, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0)
pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9)
read$auto(0x3, 0x0, 0xf34)
socket(0x1b, 0x3, 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff)

6.193192437s ago: executing program 4 (id=614):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440))
ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=<r2=>r0)
r3 = open_by_handle_at$auto(r0, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d)
setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd)
mmap$auto(0x3, 0x8, 0x9, 0x9b72, r3, 0x8000)
geteuid()
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0)
mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000000200000000000000010009000000000001000400000000000200070000000005980006000000000014010f000021000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f300003601"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140)
sendmsg$auto_NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51)

6.083283746s ago: executing program 3 (id=615):
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x20840, 0x0)
readv$auto(0x3, 0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3f, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, [0x0, 0x0, 0x68, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xd) (async)
socket(0x10, 0x2, 0x0) (async)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async)
ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8)

5.980257822s ago: executing program 3 (id=616):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
shutdown$auto(0x5, 0x0)
poll$auto(0x0, 0x1, 0x45ff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vivid.0/cec21/uevent\x00', 0x40, 0x0)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x1}, 0x9, 0x3, 0x5, 0x3)
mremap$auto(0x110c230000, 0x4, 0x4, 0x7, 0x100000000)
io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000040)="4730793ff669618b8b096458e8e1d1ad92d570121713bf809e4b044cd06e62d37d8954c9cd01", 0xbfe0)

5.887916411s ago: executing program 3 (id=617):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
shmctl$auto(0x0, 0xd, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff)
r3 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}})
io_uring_register$auto(r3, 0x12, 0x0, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000002300)={0x0, 0xffffffffffffff6d, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4)
syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1)

5.412986708s ago: executing program 2 (id=619):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
r0 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async)
setsockopt$auto(r0, 0x0, 0x80000001, 0x0, 0x0) (async)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) (async)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f0000000340)='./cgroup/file0\x00', 0x101840, 0x100) (async)
execve$auto(0x0, 0x0, 0x0) (async)
rename$auto(&(0x7f0000000040)='./file0\x00', 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) (async)
clone3$auto(0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x2, 0x88) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) (async)
get_robust_list$auto(0x0, 0x0, 0x0) (async)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)

5.194890619s ago: executing program 2 (id=621):
writev$auto(0x3, 0x0, 0x8009)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
getrandom$auto(0x0, 0x6000000, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x8)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x8001, 0x2, 0x5, 0x9b72, 0xffffffffffffffff, 0x28028)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB="4eafb342745fbb4842342591997c31f157dbb7b3a07392ff541f55e8e0a66a5e6eae1f9ff18e91d486bc43e1320a373dd00fac41d509969d869c26578ff04a73d553fe0fad342de568325a940694436f1223e252f32d7634eaf03f7eab8a158aa502cc133f8a6422ca560633dfad654fe6bc38fc0a6a4097d2839927a37fd2c20b9bcc984345262478b777445fd94372cba5b4ef", @ANYBLOB="0100000001000000000001806308a4d7e527b5ec6c32dedbeaebefe8517a26ec899eb937912b8e9945ef64a2acaa600ad98ea63e3d165763a57c07e4a659427bfbcb41ab99fa96fff26bbe9c57951a096c53b4bf3df7e94e9a239a6c90777f1e2a83908fadf6b9cad396551852f0b8ac"], 0x18}}, 0x800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)

4.963634017s ago: executing program 4 (id=622):
r0 = socket(0x1a, 0x4, 0x7a)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async)
r2 = semctl$auto(0x8001, 0x9, 0x4, 0xad)
sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3c8, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_CSA_IES={0x356, 0xb9, 0x0, 0x1, [@generic="39e18853b2629d20512ab44954c3bdcbef8d7e8d3b34b0a7c7e3ff57b30fdcf10fb89675cdcb4ec4388c29100d3e444f6a495e2acdf48e9ca8088b5822fef0320bf3346be269456b0812b2a217f276ffc5a5fae8ad16993d6af70ab7ea9947cc73016a0e893e7618f900171b102dbd6dd2940134de309dd065893b83fa80976afececbf80850f1f308616e55227abac37f7ee6f7f5ac7ebe07e903f4dae43187d9a4392190bdca5973910039f321e4fc6dff50e8167df735b9864ce115f95b6c9c32a11eefce168351f74cc06276feef5d677967bee109d28d6a6f384c00ecd1460a246d4c8ee146ca3dffb5925ecbb4c26ecf9fb49b40", @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@remote}, @generic="c9cc4bcb2385e0f4a732fad7f189c095797a23988faa3cc20609ea4798ec7cf2c0e2196ae8adfdec4b6af5de29c959b013cfe3b567be91da49f82538641b30347da3584091e41b515904d1fc8832951b730baae539be464c7e904e0da0b6314a21a50a166e3ff4e96701d58922f3e36bb8df996a370fa4ce45503c42285faab7d2981173af224dab0dc89ed82460d3179aba7eea8fd0e3cf165000aab71e2dea2a81d4faed4b6b59e46e1fea5dfaef0bf48f2173a95a69f4a931e2c4ac284053c37903dab726717da75010756b097b464db79f0a62407d7f067df072f71ec2fc7553aed2197e4f8898e5ccd38f3572fd49c9811d40319f55dc0b4cd0bd4229", @nested={0x151, 0x13d, 0x0, 0x1, [@nested={0x4, 0x8a}, @typed={0x8, 0x12d, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0x4e23eb91}, @generic="52ad2a60cc1f7b9176644b56ffe532a9dc3ef02ee6ba8b6831f53fb91057034993e55a4f3a95323cc5355e2f8e8103176e1ecc9adceae1f2e988096e224fd1db76ba6bffefbf312ff16bc27b444ee91eb0999b6cf65439537aa09ccbd1213ddd18bbd34407c91982a3cc318da6c359cfdcf5fa936534c6279579deb2d8e5b326576f89f8e7386624ee90398fb98827627bc5e4f88b58de2329023f5db2a709e7a61fdb6e735a6d3a55180d6084bb384386fcd769edca40ba7c3db1c6f362800f728a06f41ff23c57bd5a815633528451490a9cb9d4c0213e8c", @nested={0x4, 0xd4}, @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r2}, @generic="891f428954cdc4e68458b4fc19c59a05fe35446ad6e410d00eac5f5dc5096c50880c02b6b6b917ceaac40b5370b76c0e9a3cd055e435599fd30113a6d3810c1f97e143e8feb69d2bd2dcabba"]}]}, @NL80211_ATTR_REG_ALPHA2={0x48, 0x21, "05d9223d252c8906efd3f342ea1de996b0c4af566c31abe81ea6c24cb4fce1917ddc52f145bd58c7483388cd779fbeee44a3422a76349cb261aa5db4d1867f443b428af5"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x5}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4004804}, 0x40050) (async)
r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000540), r0)
sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x4e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c4}, 0xc000) (async)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xf}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x1}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r6 = fcntl$auto_F_DUPFD(r0, 0x0, r0)
read$auto_i2cdev_fops_i2c_dev(r6, &(0x7f0000000800)=""/118, 0x76)
shmget$auto(0x400, 0xb6b, 0x1ff)
read$auto_binder_features_fops_(r6, &(0x7f0000000880)=""/197, 0xc5)
mmap$auto(0x6, 0x5, 0xfffffffffffffff7, 0x812, r0, 0x80000001)
pidfd_open$auto(r2, 0x2) (async)
shmget$auto(0x3, 0x8001, 0x7ff) (async)
bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000980)=@bpf_attr_11={0x924, 0xfffffffffffffff7, 0xacfd, 0xd8b7, 0x5, 0x12, 0xfe, <r7=>r6}, 0xf7d) (async, rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/ptyeb\x00', 0x600400, 0x0) (async, rerun: 64)
tkill$auto(r2, 0x1) (async)
getpgid(r2) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000ac0), r0) (rerun: 32)
shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000001c00)={{0xaa0, <r9=>0xee01, 0xee01, 0x5, 0x2, 0x80000001, 0x8}, 0x8001, 0xfffffffffffffffa, 0x8, 0x5, @inferred=r2, @raw=0x7c6bc50e, 0x3, 0x0, &(0x7f0000000b00)="57681ff4a11e1e7cf663f1a46e8b2ed38d2b3a140b50f54751f9a8cd46dcc6da8f4b774d95902b1a868a2f6bc0be6c512ef94763f409d76172743ea30d408d01309110edaf6f63614ef4861cec6750b1d265564b26da287fb6adce6f5f1c1b869af6e944cdb29e3187e8d663348a089611edfba61ebddedc70c6c53ad1f0df235ae67f0a03f69efe1052f8c4af4b20f219198502fcc68c3981a6e241cd84b47e7092fc40f4bf630a18f3c7b47204fbd92df7c4a5e79e15defefa153d209cdc29b5a7a16e200d08147ea4ce461b3c04dcbc0a5f976187a7961a03e3b9cbc48e103e3e0065a702fd06d2f998f2b67d37ea9909b07e63287b7e5a8cb52078d015401ad2cb8a84a20330981ca4fafd4a1dda7e76587d009f942057c25972ed6e76dfe2d5025ac6844ee4bca0a3618ca7fd5bff75465a5afc4ecfb4c7d1991954245fd74702fcd10d5c749a93854e3997c58ee25cbf0fd7157f55295e5f3f5e4cb1a3017a63803608ac871b25f04fa98117f527dcda718564c68dba506aa0946bae9566d71d95159ead150d92f15548ff14da17a018dd333a60faa896994843f89a04612972d1d2b83233abe26e097285cf09ca91b130a0612d21837d9e154fe01105f0607722ca6e40a159e9f6a96b83395ec236321df418db3c34f7a77de54aa479e776cafeb86a317b79e358c6f74067d26163f50501d08d3b417a75bae1acc5f73f49c6940aac6860cce37cb858ca2d2d1b3509c22273ce28ea816f788741aeffa1869198c9462e65aa3dbfc2511f61b3979dca1b04ddff47ff197ecaae117602587632cf13142d5fc1c1726ad4bf555e3f9c48f6993bdc6065a9e5dfc32e1d1cf70251612df69175b81b03cdca8c1f3fce3b8f6fd12b4ffd81c4f2372c705ba6419f2a7001b17e4d18e9bb2b5e00bcdc8eae3a129fed0020894c35ff96d601446b278ec74d969baeee2fb286b093aa6d6ab87499abfb37e9e17a51ce258e0c6900b4d57fe33e93b40a59e1d2a0587723f3eb0695e0a84bb1671f24c7994aa69444414036149216ec8e2cbb56c9063cbe936c79c7c544a4b2225b24254bacbed7645ea3eac564dba62f092fe7bedd86f2ef03efad32208b665ae2209d5534f4e3d4bda42acf2a884cccb9c78bb58c1e6b0a011ef31f70dd48698ef68a87df30a0f19802721d01e4d140970c3447e5fb100c08f596f88e9288ec77e2eb3aeaff6f310a26cc999d6b757d0aa4e22ae1099c934f805100c216e937118df03b416c0214d19655f3200f0c9d25257ede29cb5b1c87f9856c50813315e983d57f8360932490aa0c1ffc619ab30e9a6f965b65e3a12b3665dcccecc50c4d6e11d26137abe7cd39aaa25783530ed1cafb4f3c833345db255be3aacc4e0574fa763d4eedddfa11811b348ebd594359746dc7ad24bd355c1f7471748cbf822875fe4e630a9ee7063d4b7ff8784f95916497ab1ab68968168f434bf2865f24cd1f7fc8d0e276526626b91c73c2e450508b8b208f92b61907db9842aa67bd437336add55a0505e1d400d65e51eb562cc154eecbeeb29103e79e0342aa3d264cb552eee10cdd3b5ad29cff4260ee5f6b69303ab568181ba53bcc494067c556f7ec832c23d8e0ab2324e849982f27c026f7d4de109df4049fdfec9a33f2670e261cf0d38f552c23d24e560d9999af42f487535894d4e29f306d874447fb5cc74498ee5e9db3775ce6f28c645c6e42a4e10f1b399ef2a005e7773c0ad5f15504170108f66babe3c5d3704b260c62f7e438c0a05977f92b7c8c3423200834ae47a679580a43c8f290e5c3246c0a0d227bee35ae2592f9d174565c9fe946b7e159cae75f8a25b783b63d3e967281dfa691b805a0bfd83ff3d66158fc066268242904751824d6c723d7f85a3eef2b5996f6e9ffc9ffb3121899715b9bc61b02040eb150e6a09a8ac517f0a6d163681e506d2f7b9d11cb67ffcc3e4980ce1fcdc749418b07856ea94becd949659b73c9b3910fbe7738b84144eaac411808b97677914e1d825bbe413de69ca2510a9c17c3a8a6325137b98b65382bc7e54e9b2c229cb9d6728e42934413a9573920e1b371d9d1e97b183fa6500aac66448c2672587ab66f00567a0af5b5d67ecc302ae5fdf32a3d7fe71f3707ff4ccdf5b8778d950ccebb961fdcd78d4f0d3640431c6acf615541e8ee66a8ac93bb1c290039f7d32fc95d478187c9a5b84190064141c90bef2b94e2afc7a9ebc9926399791c4e2eab06b27cde0dc51cede7e37430941fc1678379e2dfd2fa84593318ceaf63b818191e5ffe1863beb0009fafa61bbe9352999f16e791ba50142e2e7fea1d55ee7d743a4ffb65e1aedd523265039d41e1b2179acd162714015f65f4b4e2a846da86f605456c4d92be4726bfac187659a4cca452a30b4d4971d241ce3aa594b4d93e105ef821324496c6bf0bc8c628af8a8b8d05e91027f65aafea4f75a17a88a70968c654159ef12052732f94afddbb4e337e718a4d11f36f0e9494c319002292f3240f1a110f3c4b5ad94ea3da8f5227d08a9422142af4be77bebc957b883f793114fa449f85a2dd0492854780856f7c9bb43fe497e57327cf8c307e9adc3396ce23f0338a4e5baa6ebe39dd8aa6dc1433666ca60bf3d73942a8220a037d65426667e1db8325a8c58b6a1c5784d9bd8533074fcd8490123432075c3f99ecd29fec1c80fea00d493d07516cc4f16cfdfc80367adb0ed3a4d5843faa2f6b6505660bb68db3f2edef38d858c033a30d01dcd170f5ce45205fab57b8815a7233795eb37ef43943a6d80f88c3e8a09d0eb205466e8bfb09ec99446305088b96e5f576d3cd180c6f7fd141478833b51114433b3918273e8dcde0350bfeb5489c685333df829cf4e60c523155ab37e6cdb518e63a9a566052cb9ba18485a034f275bc74c38a6007b057be38d22116f6b65d3bb05303fd755cde2cf3e8b0f8cad4a7f8c7f651233f3b11f068dda60bfcaec5c13189f860701baa8562aabb8c2f9501347121012203c6e8cb65884fdf634e1fe834a4bca8c9caeace545846864658bed090b5fd65964f0b5ab7ed74976380dbb6de8e17b063ae68b7340699b5063e0eba2ba886e9f6b91c99c1c36b221f5fff84c7ce8e2f6f92c4e874910c708ee307c51af6f0cff3e7a9de10acf768277530c6cbf75294dccbfef7ec3db742d2bef2fd307a81bd8761eb9b7796966a0b29d8c6a88e6e9a2f34848131a73c3c165d57efca323e5e938b208c275bcaabcdbff60d20d73226a841307e257224e5dd7a828f56f698927793966162618f4e665ca1004701c974712ea6b26d222196b7713e044518195812134eff7e661845a7a78ff62c4668dc71512e81fffd726924fcd157b5559913728057f5df3bf95f66bfe82804fbb523362dbaa6422445e45bec8d9919499e01484e6dc7d2e6de8e07cbc83a6c45f4e1fc7bc2332a441df3323fb47184017f4b3bb1091226f340773fac1a22ed92152df5ea9155db6ae576269cc542eb2faf6ab3953a8973deae64f568a08cf92245be5384f9de11180836021448d0b3e8785135ea143bff3eaa7b343ebcef7d66f55ccc5a06c020b741c5d6712f3fd15f1b218c1c24bc5a89676fdf235f34c13a270da4b3ebcbe4e0dc241d013855c09ecc6b694e1a3f06e85ac482eb2d87d6c582949c642ddac5686a1be54c5217d4151ad6e3f100e8f9f556d6a8ccb5793d5e3f58e5e0f4830a7d1c60e210fac3d6aee25cc37ea360d6aa345836d915b7924facfa653d1cf97965db2e51dc7b5cec8f5cbcd38decf278633a3c9ab8283dec1d46135d277b60b083dfa863aec48f31be68331d0e6c2a10d04f1aa1f800e6fb7d62ef66e5376bbde17f700d40e18c43efb418f3ddb5f6de2a4a49c44684fae6a8d878349e638fe2ba64f4bdb3393141f788db0d5fdfb1cc86b06bb7ddca275ecb99dcff9da1494298f3b0b942f9e897044feb15e8f3c8838cda6025d6f5f60d608f8bb45104984e67faf652e6e97a2bb1091bf54d92fc77db49049a4ec8044d1233a8366746067dbe2a2c8375e85d02578209f68700a4715bd37644bd12faa642b04a0b6773318f35326c34ffbc7fab7cbcd3e3056c1bded428ea20d81d1a9b08d48b9ef3fcc9d2fa8f12d3b9696bae2be2248dfc9e7e5a09b3428af3dcc25eb503cdeb7a3f5a1599faf2aed8bd6d5605755826ab26fac7c9c8874ff3a5f0d69a9ada844c8f6b28833974177250b53b9590d470bedb16a7b741e62ff569e687f912ea46ad84f71b240fa53552df9e4384a920c7a1653676c1496bc085eea57635d98557cf9209f5ea79e2aa6c4e4f28de17d48d08b0c73d8310325dd465e77aac3145d6a63ece32690200fdea18e126bcca4321efda7876fcccef5ef273e39c706f5da0ee2ca41480124b18e31e7becc56369934ba3454527395f6b3f6566c3f7b44f64fc48205bb220a9e773fde45ac1643d672f24cdbbf7a5129093347dbad3896186cfd150fcbbf946ec582dddb967743edab93303b12cbf12fe00413f3031bf7e89bad764e7c524988edc0bb0d8788be7bfeb6239506b70a3bf6352fbcb955d5b391b2f3077e329aa974ab67b9eb9f75d5828ac66155ddb704e2c2ae204e88ff5118cb8547c83e593c2aa515575e3b6e67832a0fc5b5660a95e5d8fcbbc89970747420216ba5569ac1a84152063de69f694c3faa3da45041adbab524acc8acd7ebac4746ea9bdf31d733e60a9d62fc524228b9d1cf97db2c74682e4ff89fe34ffe1857ebd32daf089a39823b5da254c7cbc7fa0f82ac4ecca28e30a7d4785a163063495e6de38d8f3a16427fc6a13e3ca3857c4cbac3512467fdd6a0a45e94d188e6cc77235b5edf7f97a0e5f2ec4ef7eae19cb492c45bf9495b45d7bf0ec10aaa620c0b0c1dc594288e65d4397b33ab606895f48bfba3b6956a1d7b1f388c2974f321cf26f82d8a4a27be3fe7788684160a5360e05a0ce4983b56451847344965154f17e61a56fae29b798d90de60c1df1b00a125d30c570869f6daf0a78b1a160b88cb59656480e821bcbe6d131e2beb36e3cc9df82dcb99fbf74ebbafeb9ee42232e222614b91c8d2b618edf5c5f3d3c95db1b26eaa32212dc24e7a3e81a0bd2a683b8410822e81926212784331ffca047bbf47e7b46b00e923e99ebb3aaa44b4f8995e2a3a797367732335b5e5a2f6cb7fcd269ee6b35c7074ba1a99b58b9707626f735af36103098be90c60f2c6e0769e43e6e01a54cea6d5dabd09d218f6ddbbddfca3e91d877b43049405455a3f6496605d8fa3bc482ed4d213b4b039fb24eaabafae06322dc5386317357c52ac67300d7e914946938d7f89dd100e9ef1132f633c9fee7baa2b1921eb9f8b11e4f8457a2aa21b76dae6af6c90acd6595d7c814f1d882c9544d925045289660718dc3f1dc2106f90772d516977c2f8c1bd9e29eb4ad092d7404563b13a4b25b1117ee8a447f02840749b80e66766f5170c9f4ea589f0b7d66cc643199cb59cf923e72a3de0ea1b28146a9f1ddb11c3a663ea25d7549e828603524b2a17855a93e6746f264dbe7be824289c2febe29dc14f4e026a5905c0bdf7328b022d16fc07b450e932074e7777d921598488efb0e0df4852617195f8a49e40d2338d01c1ade0f0dd3e7a4b609b9bb813177cfe2b75cd88b2f443eb0eedd29a9eab7351e153bf7771a57f00d26e3ff475ecb1bc17054968ee6358dd60c8de346362661c07f9809dc7c227889927c6eff2c830ac9a3573f0f35197f04633f540cae8e7d45836c1f3710d4ac13eb", &(0x7f0000001b00)="244444ceeb2dafa3aab5605ff9ab9c8255d38e20e570edc010f0a3557b53b02969a8c086e948ad66086debe9efb0aebee1911b4d828c4321d4074889647c040539143c127dfa2f4acb27393557b0359c1290c20f93daedd57b6c3df826a1c720a90f6da03244ec629669197894034cada317a25b1d6719aad0fc4c8f347e1ebb9810530beb7b9222c8c7d42997d091a3b33d1c7badf7af54b07aa5935f1099db22a70feb7ac0662d99a3b58b4b4d3f31eeb58dd62a112313d45e9833aae6b6e4754b94538ed886b11d6f4f06271d567cbed725da473077bd7acc55373223f6fb41f106c48350ec73c7bc46610a610a309e496dd760"})
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r6, &(0x7f0000001d80)={&(0x7f0000000a80), 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x50, 0x2, 0x0, 0x1, [@generic="87a28b7aeafc932d629d8198808b7b86f7cd341f7902ae9f2e67750ab9bf9f2008aad4e2", @typed={0x8, 0xe6, 0x0, 0x0, @uid=r9}, @generic="bbc8e52da12de9da80e436bbc9f20bb40f35c873", @typed={0xc, 0x19, 0x0, 0x0, @u64=0x8}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x41, 0x3, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x9}, @generic="beab170da15c5f19b5aa9be9b218640b35c6dfca52b8c996567f3cd373ee88f23ba748402e5f220ab3a90cf19caeb4d073"]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c014}, 0x90) (async)
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r7, &(0x7f00000020c0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000001e00)={0x260, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x24c, 0x3, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @uid=r9}, @nested={0x23f, 0x115, 0x0, 0x1, [@generic="041e79c123de61", @generic="af60fc6ac41d8b6216184f8ebc4625d0ea53bf0298f18f18596308efbbdbaed520e218daf3350fd24672790ce8ab820ad90f7681814629a9a254650ea2de5e9cdabc4335b9a5f5", @generic="2b5b8f47a767d72a1c70e0b16bc74428e16d1f379b1c0a73f2b672adeedb9a4d2800239232a89c0742ebcae277dd41c9f1628a6fc5c11785959ad6c40fc51c439e68a9aa6347d8c4d8ccab5a2e96d757109df0af0615dcb200d412a084972a4459a709c8842cffdc2d2611b529ca57a08113a4e9b2bef01eeb2f83e0efcdfb6452a8811bbf153a7512a0967b33e0954890", @nested={0x4, 0xf6}, @generic="077ea72ce65c19677b080f4763a93082141899aad478892544c45b572aab2d653ce3458ff89dfd3aac4aaaf50c41f0ec4361b2d01a84691efda5b97d67daacadf1e1766df91d25270a36316ff3e7f721b9a984a6264f5f104299777c881bb067d7b6fa16a51be33bc7a53fea443ffc17f299f531edbc75ebe5e4560e5299b11ea8c5a3da018d28be82287ee629459236e13ef54636b44711faa4cf3e5d6a82d0d4c6", @generic="097bbac2cc9038809627d47ca600da680f5fe565342bc410d931c10a2902fce5ccf5a704b89e", @nested={0x4, 0x80}, @generic="491b69d2d7493c30c8755de2d8374486d5a13cad821b6096035c089afe5572afed9a373e6da7f61f4fdb7dff9cde16bdbfe03324ca977c8538abf18d329042941f49dcf5976839284feb5dfa3c17e0040a19e5eecc92faf50cf1b0f51b9a847ada73e9f9b4a79f8267b60a93735e5d87ff9713fef7b0c1fbff0bb237025da5aee69d83fa4d180b0fce818ab8"]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4c000}, 0x40050) (async)
getpid() (async)
inotify_add_watch$auto(r7, &(0x7f0000002100)='./file0\x00', 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000002140), 0x1, 0x0)
ioctl$auto_TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000002180)=0x1000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/self/oom_adj\x00', 0x40001, 0x0)

4.712883635s ago: executing program 4 (id=623):
mmap$auto(0x0, 0x400008, 0x19, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
acct$auto(0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x801, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop2/queue/nomerges\x00', 0xa001, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0)
uname$auto(0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/crash_elfcorehdr_size\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/116, 0x74)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x87, 0x7, 0x6, 0x4, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x9, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x200d)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x2, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)

4.461866409s ago: executing program 1 (id=624):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x7, &(0x7f0000000340)=0x1, 0x8000000000000001)
unshare$auto(0x40000080)
mmap$auto(0x33, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/admmidi2\x00', 0x1, 0x0)
msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, <r1=>0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf})
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x8)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto_VHOST_SET_VRING_NUM2(r2, 0x4008af10, &(0x7f0000000180)={0x1, 0x5})
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r3 = socketcall$auto(0x8000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', <r4=>0x0})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="41da9f37fcaf7a715a28000000", @ANYRESDEC=r1, @ANYBLOB="01002cbd7000fbdbdf25120000000c00018008000100", @ANYRES32=r4, @ANYRESHEX], 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c72f}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r6, r6, 0x0, 0x3)
ioctl$auto(0x3, 0xae41, r3)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
sendfile$auto(r8, r8, 0x0, 0x200)
ioctl$auto(r7, 0x540a, 0x0)
close_range$auto(0x2, 0x8, 0xcea8)
msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)

4.347377839s ago: executing program 2 (id=625):
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x80002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
timerfd_create$auto(0x9, 0x0)
timerfd_settime$auto(r0, 0x3, &(0x7f0000000000)={{0x6, 0x7}, {0x0, 0xa2b}}, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x0, 0x0)
ioctl$auto(r2, 0x2284, r1)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
readahead$auto(r0, 0x5, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x800000000000007, 0x100000011, 0x401, 0x8000)
unshare$auto(0x40000080)
rseq$auto(0x0, 0x8000, 0x0, 0x6)

4.281155021s ago: executing program 3 (id=626):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x80000000040005, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
mmap$auto(0x0, 0xa, 0x8000000000de, 0x9b72, 0x5, 0xbd)
get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x4)
recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
bind$auto(0x3, 0xfffffffffffffffd, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0)
read$auto(0x3, 0x0, 0x80)
prctl$auto(0xd, 0x3, 0x0, 0x7, 0x1)
open(&(0x7f0000000100)='./bus\x00', 0x10d47e, 0x72)
socket(0x6, 0x2, 0x2)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0xcb, 0x3)

3.596914897s ago: executing program 1 (id=627):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
io_setup$auto(0x7ffe, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0x2d, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
read$auto_safesetid_gid_file_fops_securityfs(r1, &(0x7f0000000080)=""/88, 0x58)
ioctl$auto(0x3, 0x89e0, 0x91)
ioctl$auto(0x3, 0x89e1, 0x91)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

3.179676185s ago: executing program 3 (id=628):
r0 = socket(0x2, 0x1, 0x106)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
shmctl$auto(0x8, 0x8, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
pselect6$auto(0xce9e, 0x0, 0x0, 0x0, 0x0, 0x0)
futex_requeue$auto(0x0, 0x0, 0xf, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b)
ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x100000000000029, 0x0)
pwrite64$auto(r1, 0x0, 0x8, 0x200000000000003)
setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0x7, 0x50, &(0x7f00000000c0)='%\x19@+-/%.\x00', 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYBLOB="3aea32749f7ee3d60e25fe"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

2.912895019s ago: executing program 1 (id=629):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0xca, &(0x7f0000000180)='\x04>2\v\x04\x00\tO\xfdf\xb4\xad\x95\x03\xd66\xca\x96\x18a\x80\xea\xf4\xffo', 0x7e)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
socketcall$auto_SYS_SETSOCKOPT(0xe, 0x0)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5)

2.661306276s ago: executing program 2 (id=630):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440))
ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=<r2=>r0)
r3 = open_by_handle_at$auto(r0, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d)
setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd)
mmap$auto(0x3, 0x8, 0x9, 0x9b72, r3, 0x8000)
geteuid()
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0)
mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140)
sendmsg$auto_NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51)

2.366640953s ago: executing program 4 (id=631):
r0 = socket(0xa, 0x801, 0x106)
getsockopt$auto(r0, 0x6, 0x7, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x240040, 0x0) (async)
socket(0x1e, 0x1, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x80002, 0x0) (async)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) (async)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x6, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0x101, 0x1, 0x5, 0x7, 0x8, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, [0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10085) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) (async)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async)
socketpair$auto(0x2, 0x5, 0xb, 0x0)
futex$auto(&(0x7f0000000240)=0x5, 0x8, 0x8, &(0x7f0000000280)={0x2, 0x14}, &(0x7f00000002c0)=0x9, 0xfffffffb) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x2a) (async)
socket(0x2, 0x80802, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)

2.195605878s ago: executing program 3 (id=632):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/midi2\x00', 0x620100, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x8000000eb1, 0x401, 0x7ffc)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
mkdir$auto(&(0x7f00000000c0)='.\x00', 0x2)
bind$auto(r2, 0x0, 0x8)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000000002e}, 0x8000040000000001)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0)
shmctl$auto(0x6, 0x101, 0x0)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media9\x00', 0x183000, 0x0)
write$auto(r3, &(0x7f0000000240)='/tev/\x00\xfc\xd3\x10[\x8f\x1f#\x81x\x89\xb0\xfcj\xd1Y\xc3\x0e1\x7f\xb8\v\tl\xfe\xa0\x17}\x16p\r\x84\xce\xa7\xc8\x05gR\xcdUj\xd9\xdeJN\xe2\x85\xe6\xd7\xc4\x89S\x8eC[EZy\x15^AS]\xb9-\xf9\xbc\x16gm\xa8j\xabM\xac1!f\xd8\x1cD\xdd\xbe;\xb1\x1cV\x1b3\x84\xb1\x1e\xdc\x05\x88.\xf2i\xf8\xff\x1au\xbf\xd6\x9d\x1e\x7fK\x9d\x91>f\bGQ\x11\x86\xfec\n\xce\x1c\x91\xd5\t\x97\x99\xb9\xa1\xb3t\xe2\x0e\x02TQ\xcf\xfd\xe3o0+\xf7\xc0\xae\xa1\t\xd8\xefb', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@nested={0x20, 0x3, 0x0, 0x1, [@nested={0x1c, 0x5, 0x0, 0x1, [@typed={0x17, 0x11, 0x0, 0x0, @str='/dev/snd/controlC0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x50}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)

1.474652582s ago: executing program 1 (id=633):
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0)

1.397083909s ago: executing program 4 (id=634):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
pidfd_open$auto(0x1, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = io_uring_setup$auto(0x4, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f0000000080)="a2") (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mseal$auto(0x0, 0x7dda, 0x0)
mseal$auto(0x0, 0x7dda, 0x0) (async)
mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0)
readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
read$auto(0x3, 0x0, 0xf3c) (async)
ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)=0x7) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000007ffd) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0)

1.190209766s ago: executing program 2 (id=635):
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket(0x1e, 0x1, 0x7988)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r1, 0x4018620d, 0x9)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
ioctl$auto(r2, 0x4018620d, 0x9)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
setrlimit$auto(0xb, 0x0)
r3 = getpid()
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = gettid()
rt_tgsigqueueinfo$auto(r3, r4, 0x21, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0B00:00/hid\x00', 0x58002, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r5, 0x0, 0xb4d3)
r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0xfffffffffffffc00, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x52b301a, 0x0, 0x20000000000002, 0x0, 0xbc86})
write$auto(0x3, 0x0, 0xffd8)
socket(0x10, 0x3, 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

1.129750177s ago: executing program 1 (id=636):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mq_open$auto(0x0, 0xc87c, 0xfffd, 0x0)
r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = socket(0x10, 0x2, 0x0)
setitimer$auto(0x94e, &(0x7f00000001c0)={{0xffffffffffffffe7, 0xa4}, {0x7, 0x4}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008)
ioctl$auto(0xffffffffffffffff, 0x80085520, 0xed)

481.221529ms ago: executing program 1 (id=637):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x8, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/threaded\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xfbP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x921\a2\xa2X`\a\xf1y\xb3\"=', 0x40)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/yenta_socket/parameters/o2_speedup\x00', 0xc2902, 0x0)
sysfs$auto(0x2, 0xd, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r2, 0x40000000029, 0x20, 0xfffffffffffffffe, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
rename$auto(&(0x7f00000000c0)=':,\x00', &(0x7f0000000100)=':,\x00')
ioctl$auto(r5, 0x4004556e, 0x1f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010026bd7020f8dbdf2501000000080002", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="0800070000010000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
mmap$auto(0x7, 0x2020009, 0x3, 0x2eb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x12, 0x0)
fsopen$auto(0x0, 0x54f8)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
madvise$auto(0x2000, 0x20499d, 0x9)
socket(0x1d, 0x1, 0x7fff)

229.163407ms ago: executing program 4 (id=638):
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x8, 0x6, 0x6, 0x1000009, 0x5f, 0x3, 0x3}, 0x6f1)
sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3)
io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r0, 0x40045702, &(0x7f00000000c0)=0x5)
sendfile$auto(r3, r4, 0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8008000)
bpf$auto(0x4, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=<r5=>0x0, 0x7f, 0x0, 0x8, <r6=>0x1, @relative_fd, 0xd}, 0x92)
r7 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x88400, 0x0)
r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
write$auto(r8, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587)
socket(0x2, 0x801, 0x106)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "008000e186524da9d206fb000100", r5, r7, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@bpf_attr_4={0x3, r6, 0x9}, 0x92)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0)

0s ago: executing program 2 (id=639):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x3e, 0x8, 0x0, 0xfffffffffffffff7, 0xa)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x20, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cmdline\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(0x3, 0x0, 0xfdef)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48c8622d000000", @ANYRES16=r2, @ANYBLOB="02002abd7000fddbdf25880000003100ac00de54660d7a66288f74cc712da3403e7475abbcd6711be38555ff086644dde18a3ba473b768306ed916fbab4ef2000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040080)

kernel console output (not intermixed with test programs):

30] debugfs: 'hsr0' already exists in 'hsr'
[   80.445571][ T5830] Cannot create hsr debugfs directory
[   80.451708][ T5823] Bluetooth: hci0: command tx timeout
[   80.456402][ T5823] Bluetooth: hci1: command tx timeout
[   80.463372][ T5821] hsr_slave_0: entered promiscuous mode
[   80.469766][ T5821] hsr_slave_1: entered promiscuous mode
[   80.476046][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   80.481777][ T5821] Cannot create hsr debugfs directory
[   80.489958][ T5832] team0: Port device team_slave_1 added
[   80.523376][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.530436][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.556515][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.569249][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.576343][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.602517][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.613335][ T5823] Bluetooth: hci3: command tx timeout
[   80.618948][   T52] Bluetooth: hci2: command tx timeout
[   80.773828][ T5832] hsr_slave_0: entered promiscuous mode
[   80.780535][ T5832] hsr_slave_1: entered promiscuous mode
[   80.786779][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   80.792508][ T5832] Cannot create hsr debugfs directory
[   81.118191][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.130176][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.141201][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.152252][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.227831][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.239399][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.251978][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.262486][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.358886][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.370861][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.394100][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.413383][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.472926][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.492076][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.514693][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.527943][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.542833][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.631270][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   81.658186][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.665471][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.689546][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.696697][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.707336][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.745513][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   81.778817][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.786027][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.830911][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.838173][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.862037][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.940720][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   81.960288][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.001266][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.008495][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.029776][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   82.042709][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.049930][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.092070][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.099284][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.130750][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.138068][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.193430][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.370657][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.444645][ T5830] veth0_vlan: entered promiscuous mode
[   82.520124][ T5821] veth0_vlan: entered promiscuous mode
[   82.527250][ T5823] Bluetooth: hci1: command tx timeout
[   82.527273][   T52] Bluetooth: hci0: command tx timeout
[   82.545457][ T5830] veth1_vlan: entered promiscuous mode
[   82.572537][ T5821] veth1_vlan: entered promiscuous mode
[   82.617111][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.677676][ T5830] veth0_macvtap: entered promiscuous mode
[   82.689234][   T52] Bluetooth: hci3: command tx timeout
[   82.689243][ T5823] Bluetooth: hci2: command tx timeout
[   82.697316][ T5821] veth0_macvtap: entered promiscuous mode
[   82.710587][ T5821] veth1_macvtap: entered promiscuous mode
[   82.727853][ T5830] veth1_macvtap: entered promiscuous mode
[   82.757705][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.781209][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.799795][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.825660][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.835587][ T5825] veth0_vlan: entered promiscuous mode
[   82.852828][ T5825] veth1_vlan: entered promiscuous mode
[   82.861847][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.893647][ T3502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.902829][ T3502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.928689][ T3502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.938095][ T3502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.957197][ T3502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.966375][ T3502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.988170][ T3502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.013793][ T3502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.040773][ T5825] veth0_macvtap: entered promiscuous mode
[   83.095283][ T5825] veth1_macvtap: entered promiscuous mode
[   83.139306][ T5832] veth0_vlan: entered promiscuous mode
[   83.140000][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.155461][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.164918][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.178054][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.193872][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.222613][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.252463][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.259416][ T5832] veth1_vlan: entered promiscuous mode
[   83.261382][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.268694][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.284351][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.307496][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.318721][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.351176][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.362476][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.430861][ T5832] veth0_macvtap: entered promiscuous mode
[   83.443314][ T5832] veth1_macvtap: entered promiscuous mode
[   83.468668][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   83.486830][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.494674][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.541957][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.556623][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.562967][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.612391][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.680421][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.710192][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.758491][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.769738][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.887984][ T5914] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1'.
[   83.916977][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.930782][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.060407][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.071388][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.233484][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   84.589747][ T5937] random: crng reseeded on system resumption
[   84.607833][   T52] Bluetooth: hci0: command tx timeout
[   84.607902][ T5823] Bluetooth: hci1: command tx timeout
[   84.630946][ T5937] Restarting kernel threads ...
[   84.637719][ T5937] Done restarting kernel threads.
[   84.662476][ T5937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   84.771172][ T5823] Bluetooth: hci3: command tx timeout
[   84.771182][   T52] Bluetooth: hci2: command tx timeout
[   84.786113][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.795998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   84.831644][   T10] cfg80211: failed to load regulatory.db
[   84.850655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.167074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.216416][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.226581][   T30] audit: type=1804 audit(1760044217.594:2): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0
[   85.262169][   T30] audit: type=1804 audit(1760044217.634:3): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0
[   85.552109][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.666134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   85.674449][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   86.076358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[   86.086729][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.691796][ T5823] Bluetooth: hci1: command tx timeout
[   86.692340][   T52] Bluetooth: hci0: command tx timeout
[   86.846833][   T52] Bluetooth: hci2: command tx timeout
[   86.855826][   T52] Bluetooth: hci3: command tx timeout
[   87.597106][ T5995] netlink: 268 bytes leftover after parsing attributes in process `syz.3.18'.
[   88.484699][ T5995] syz.3.18 (5995) used greatest stack depth: 17016 bytes left
[   89.125745][ T6011] syz.3.19: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   89.190009][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) 
[   89.190032][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   89.190044][ T6011] Call Trace:
[   89.190050][ T6011]  <TASK>
[   89.190056][ T6011]  dump_stack_lvl+0x16c/0x1f0
[   89.190080][ T6011]  warn_alloc+0x248/0x3a0
[   89.190097][ T6011]  ? __pfx_warn_alloc+0x10/0x10
[   89.190111][ T6011]  ? alloc_pages_mpol+0x25a/0x550
[   89.190133][ T6011]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   89.190149][ T6011]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[   89.190172][ T6011]  ? __kmalloc_node_noprof+0x364/0x8a0
[   89.190187][ T6011]  ? __get_vm_area_node+0x208/0x330
[   89.190208][ T6011]  __vmalloc_node_range_noprof+0x119b/0x1480
[   89.190234][ T6011]  ? kernel_clone+0xfc/0x930
[   89.190256][ T6011]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   89.190279][ T6011]  ? rcu_is_watching+0x12/0xc0
[   89.190296][ T6011]  ? kernel_clone+0xfc/0x930
[   89.190311][ T6011]  __vmalloc_node_noprof+0xad/0xf0
[   89.190329][ T6011]  ? kernel_clone+0xfc/0x930
[   89.190347][ T6011]  copy_process+0x2c77/0x76a0
[   89.190380][ T6011]  ? __pfx_copy_process+0x10/0x10
[   89.190398][ T6011]  ? futex_private_hash_put+0x176/0x300
[   89.190419][ T6011]  ? futex_private_hash_put+0x18a/0x300
[   89.190440][ T6011]  kernel_clone+0xfc/0x930
[   89.190457][ T6011]  ? __pfx_futex_wake+0x10/0x10
[   89.190478][ T6011]  ? __pfx_kernel_clone+0x10/0x10
[   89.190505][ T6011]  __do_sys_clone+0xce/0x120
[   89.190522][ T6011]  ? __pfx___do_sys_clone+0x10/0x10
[   89.190547][ T6011]  ? xfd_validate_state+0x61/0x180
[   89.190573][ T6011]  do_syscall_64+0xcd/0xfa0
[   89.190589][ T6011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.190603][ T6011] RIP: 0033:0x7f100918eec9
[   89.190619][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.190632][ T6011] RSP: 002b:00007f100a01b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   89.190646][ T6011] RAX: ffffffffffffffda RBX: 00007f10093e6090 RCX: 00007f100918eec9
[   89.190655][ T6011] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   89.190663][ T6011] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[   89.190671][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.190679][ T6011] R13: 00007f10093e6128 R14: 00007f10093e6090 R15: 00007ffca7e988a8
[   89.190699][ T6011]  </TASK>
[   89.190704][ T6011] Mem-Info:
[   89.446540][ T6011] active_anon:17345 inactive_anon:0 isolated_anon:25
[   89.446540][ T6011]  active_file:11422 inactive_file:40388 isolated_file:0
[   89.446540][ T6011]  unevictable:768 dirty:1817 writeback:0
[   89.446540][ T6011]  slab_reclaimable:10223 slab_unreclaimable:90809
[   89.446540][ T6011]  mapped:36434 shmem:10689 pagetables:1078
[   89.446540][ T6011]  sec_pagetables:0 bounce:0
[   89.446540][ T6011]  kernel_misc_reclaimable:0
[   89.446540][ T6011]  free:1332770 free_pcp:13015 free_cma:0
[   89.744948][ T6011] Node 0 active_anon:71180kB inactive_anon:0kB active_file:48788kB inactive_file:159352kB unevictable:1536kB isolated(anon):100kB isolated(file):0kB mapped:144236kB dirty:7248kB writeback:0kB shmem:45020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11256kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.865673][ T6011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.942517][ T6011] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   90.026267][ T6011] lowmem_reserve[]: 0 2484 2485 2485 2485
[   90.032110][ T6011] Node 0 DMA32 free:1422028kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72728kB inactive_anon:0kB active_file:50320kB inactive_file:159304kB unevictable:1536kB writepending:7260kB zspages:0kB present:3129332kB managed:2543668kB mlocked:0kB bounce:0kB free_pcp:34608kB local_pcp:14676kB free_cma:0kB
[   90.111871][ T6011] lowmem_reserve[]: 0 0 1 1 1
[   90.135608][ T6011] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   90.258987][ T6011] lowmem_reserve[]: 0 0 0 0 0
[   90.266075][ T6011] Node 1 Normal free:3884864kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22256kB local_pcp:15872kB free_cma:0kB
[   90.345833][ T6011] lowmem_reserve[]: 0 0 0 0 0
[   90.361663][ T6011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   90.416033][ T6011] Node 0 DMA32: 6*4kB (UE) 3*8kB (UME) 1*16kB (E) 0*32kB 3*64kB (UME) 1*128kB (E) 2*256kB (UM) 2*512kB (UE) 1*1024kB (M) 3*2048kB (UME) 341*4096kB (M) = 1405824kB
[   90.453572][ T6011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   90.486409][ T6011] Node 1 Normal: 92*4kB (UE) 6*8kB (UE) 22*16kB (UME) 61*32kB (UE) 19*64kB (UE) 8*128kB (UME) 2*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3884896kB
[   90.564139][ T6011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.595277][ T6011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.672780][ T6011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.683121][ T6011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.696222][ T6011] 70144 total pagecache pages
[   90.705816][ T6011] 0 pages in swap cache
[   90.710182][ T6011] Free swap  = 124996kB
[   90.714355][ T6011] Total swap = 124996kB
[   90.719112][ T6011] 2097051 pages RAM
[   90.723127][ T6011] 0 pages HighMem/MovableOnly
[   90.733623][ T6011] 429044 pages reserved
[   90.740392][ T6011] 0 pages cma reserved
[   91.721389][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   92.076214][ T6080] mmap: syz.2.32 (6080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   92.124788][ T6074] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[   92.145920][ T6074] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[   92.154720][ T6074] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[   92.166680][ T6074] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   92.176573][ T6074] page dumped because: unmovable page
[   92.319597][ T6074] page_owner info is not present (never set?)
[   93.340099][ T6099] usbip-vudc usbip-vudc.0: gadget not bound
[   94.599617][ T6129] netlink: 268 bytes leftover after parsing attributes in process `syz.0.41'.
[   95.397741][ T6135] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   95.684836][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'.
[   95.814799][ T6138] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[   95.824800][ T6138] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[   95.845051][ T6138] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[   95.909992][ T6138] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   95.919048][ T6138] page dumped because: unmovable page
[   95.969789][ T6138] page_owner info is not present (never set?)
[   96.321946][ T6145] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed.
[   96.354836][ T6145] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   97.077545][ T6156] FAULT_INJECTION: forcing a failure.
[   97.077545][ T6156] name failslab, interval 1, probability 0, space 0, times 1
[   97.114123][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) 
[   97.114160][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   97.114175][ T6156] Call Trace:
[   97.114183][ T6156]  <TASK>
[   97.114192][ T6156]  dump_stack_lvl+0x16c/0x1f0
[   97.114225][ T6156]  should_fail_ex+0x512/0x640
[   97.114253][ T6156]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[   97.114279][ T6156]  should_failslab+0xc2/0x120
[   97.114310][ T6156]  kmem_cache_alloc_noprof+0x75/0x6e0
[   97.114337][ T6156]  ? copy_process+0x247b/0x76a0
[   97.114376][ T6156]  ? copy_process+0x247b/0x76a0
[   97.114406][ T6156]  copy_process+0x247b/0x76a0
[   97.114437][ T6156]  ? __pfx___futex_wait+0x10/0x10
[   97.114501][ T6156]  ? __pfx_copy_process+0x10/0x10
[   97.114534][ T6156]  ? futex_private_hash_put+0x176/0x300
[   97.114571][ T6156]  ? futex_private_hash_put+0x18a/0x300
[   97.114611][ T6156]  kernel_clone+0xfc/0x930
[   97.114645][ T6156]  ? __pfx_kernel_clone+0x10/0x10
[   97.114697][ T6156]  __do_sys_clone+0xce/0x120
[   97.114728][ T6156]  ? __pfx___do_sys_clone+0x10/0x10
[   97.114776][ T6156]  ? xfd_validate_state+0x61/0x180
[   97.114824][ T6156]  do_syscall_64+0xcd/0xfa0
[   97.114854][ T6156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.114880][ T6156] RIP: 0033:0x7fc71cd8eec9
[   97.114899][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.114923][ T6156] RSP: 002b:00007fc71dc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   97.114946][ T6156] RAX: ffffffffffffffda RBX: 00007fc71cfe5fa0 RCX: 00007fc71cd8eec9
[   97.114962][ T6156] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   97.114976][ T6156] RBP: 00007fc71ce11f91 R08: 0000000000000000 R09: 0000000000000000
[   97.114991][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.115006][ T6156] R13: 00007fc71cfe6038 R14: 00007fc71cfe5fa0 R15: 00007ffc502cc538
[   97.115042][ T6156]  </TASK>

getty: ttyS0: read error: Resource temporarily unavailable
[   99.172882][ T6168] kexec: Could not allocate control_code_buffer
[  100.008307][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'.
[  100.352232][ T6192] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  100.425852][ T6192] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  100.485919][ T6192] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  100.529755][ T6192] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  100.546231][ T6192] page dumped because: unmovable page
[  100.563834][ T6192] page_owner info is not present (never set?)
[  100.634568][ T6205] FAULT_INJECTION: forcing a failure.
[  100.634568][ T6205] name fail_futex, interval 1, probability 0, space 0, times 1
[  100.665381][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) 
[  100.665423][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  100.665438][ T6205] Call Trace:
[  100.665447][ T6205]  <TASK>
[  100.665457][ T6205]  dump_stack_lvl+0x16c/0x1f0
[  100.665493][ T6205]  should_fail_ex+0x512/0x640
[  100.665530][ T6205]  get_futex_key+0x1d0/0x1560
[  100.665568][ T6205]  ? __pfx_get_futex_key+0x10/0x10
[  100.665614][ T6205]  futex_wake+0xea/0x530
[  100.665654][ T6205]  ? rcu_is_watching+0x12/0xc0
[  100.665682][ T6205]  ? __pfx_futex_wake+0x10/0x10
[  100.665723][ T6205]  ? kmem_cache_free+0x2d4/0x6c0
[  100.665745][ T6205]  ? putname+0x154/0x1a0
[  100.665780][ T6205]  do_futex+0x1e3/0x350
[  100.665808][ T6205]  ? __pfx_do_futex+0x10/0x10
[  100.665846][ T6205]  __x64_sys_futex+0x1e0/0x4c0
[  100.665878][ T6205]  ? __x64_sys_openat+0x174/0x210
[  100.665910][ T6205]  ? __pfx___x64_sys_futex+0x10/0x10
[  100.665949][ T6205]  do_syscall_64+0xcd/0xfa0
[  100.665976][ T6205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.666000][ T6205] RIP: 0033:0x7f748c58eec9
[  100.666020][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.666042][ T6205] RSP: 002b:00007f748a7d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  100.666064][ T6205] RAX: ffffffffffffffda RBX: 00007f748c7e6098 RCX: 00007f748c58eec9
[  100.666078][ T6205] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f748c7e609c
[  100.666093][ T6205] RBP: 00007f748c7e6090 R08: 00007f748d339000 R09: 0000000000000000
[  100.666107][ T6205] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  100.666120][ T6205] R13: 00007f748c7e6128 R14: 00007ffd2c42f7c0 R15: 00007ffd2c42f8a8
[  100.666151][ T6205]  </TASK>
[  103.626239][ T6258] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  104.132796][ T6268] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET)
[  104.157987][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.129982][ T6297] netlink: 268 bytes leftover after parsing attributes in process `syz.0.77'.
[  107.029620][   T30] audit: type=1800 audit(1760044239.414:4): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.80" name="lu_gp_id" dev="configfs" ino=10251 res=0 errno=0
[  107.069043][ T6312] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input5
[  107.160605][ T6305] misc userio: The device must be registered before sending interrupts
[  108.350423][ T5886] Process accounting resumed

syzkaller
syzkaller login: [  109.449793][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'.
[  109.481578][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'.
[  110.301010][ T6358] netlink: 268 bytes leftover after parsing attributes in process `syz.0.91'.
[  110.618158][ T6378] syz.1.97: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  110.634003][ T6378] CPU: 1 UID: 0 PID: 6378 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) 
[  110.634033][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  110.634047][ T6378] Call Trace:
[  110.634055][ T6378]  <TASK>
[  110.634065][ T6378]  dump_stack_lvl+0x16c/0x1f0
[  110.634096][ T6378]  warn_alloc+0x248/0x3a0
[  110.634124][ T6378]  ? __pfx_warn_alloc+0x10/0x10
[  110.634153][ T6378]  ? alloc_pages_mpol+0x25a/0x550
[  110.634189][ T6378]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  110.634217][ T6378]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[  110.634247][ T6378]  ? __kmalloc_node_noprof+0x364/0x8a0
[  110.634272][ T6378]  ? __get_vm_area_node+0x208/0x330
[  110.634306][ T6378]  __vmalloc_node_range_noprof+0x119b/0x1480
[  110.634362][ T6378]  ? kernel_clone+0xfc/0x930
[  110.634404][ T6378]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.634444][ T6378]  ? rcu_is_watching+0x12/0xc0
[  110.634475][ T6378]  ? kernel_clone+0xfc/0x930
[  110.634503][ T6378]  __vmalloc_node_noprof+0xad/0xf0
[  110.634537][ T6378]  ? kernel_clone+0xfc/0x930
[  110.634571][ T6378]  copy_process+0x2c77/0x76a0
[  110.634615][ T6378]  ? __pfx_copy_process+0x10/0x10
[  110.634646][ T6378]  ? futex_private_hash_put+0x176/0x300
[  110.634683][ T6378]  ? futex_private_hash_put+0x18a/0x300
[  110.634722][ T6378]  kernel_clone+0xfc/0x930
[  110.634753][ T6378]  ? __pfx_futex_wake+0x10/0x10
[  110.634790][ T6378]  ? __pfx_kernel_clone+0x10/0x10
[  110.634818][ T6378]  ? __pfx_vfs_writev+0x10/0x10
[  110.634862][ T6378]  __do_sys_clone+0xce/0x120
[  110.634893][ T6378]  ? __pfx___do_sys_clone+0x10/0x10
[  110.634936][ T6378]  ? xfd_validate_state+0x61/0x180
[  110.634980][ T6378]  do_syscall_64+0xcd/0xfa0
[  110.635005][ T6378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.635043][ T6378] RIP: 0033:0x7f748c58eec9
[  110.635065][ T6378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.635089][ T6378] RSP: 002b:00007f748a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  110.635112][ T6378] RAX: ffffffffffffffda RBX: 00007f748c7e5fa0 RCX: 00007f748c58eec9
[  110.635130][ T6378] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  110.635144][ T6378] RBP: 00007f748c611f91 R08: 0000000000020010 R09: 0000000000000000
[  110.635159][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.635174][ T6378] R13: 00007f748c7e6038 R14: 00007f748c7e5fa0 R15: 00007ffd2c42f8a8
[  110.635211][ T6378]  </TASK>
[  110.635221][ T6378] Mem-Info:
[  110.904603][ T6378] active_anon:39886 inactive_anon:0 isolated_anon:0
[  110.904603][ T6378]  active_file:18649 inactive_file:50297 isolated_file:0
[  110.904603][ T6378]  unevictable:768 dirty:63 writeback:23
[  110.904603][ T6378]  slab_reclaimable:10758 slab_unreclaimable:91831
[  110.904603][ T6378]  mapped:37818 shmem:28311 pagetables:1182
[  110.904603][ T6378]  sec_pagetables:0 bounce:0
[  110.904603][ T6378]  kernel_misc_reclaimable:0
[  110.904603][ T6378]  free:1283914 free_pcp:18852 free_cma:0
[  110.990511][ T6378] Node 0 active_anon:161972kB inactive_anon:0kB active_file:74560kB inactive_file:200996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151224kB dirty:236kB writeback:0kB shmem:114216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:11728kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.065868][ T6378] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.101875][ T6378] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.134200][ T6378] lowmem_reserve[]: 0 2484 2485 2485 2485
[  111.140972][ T6378] Node 0 DMA32 free:1231268kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172844kB inactive_anon:0kB active_file:76060kB inactive_file:200996kB unevictable:1536kB writepending:236kB zspages:32kB present:3129332kB managed:2543668kB mlocked:0kB bounce:0kB free_pcp:41856kB local_pcp:5684kB free_cma:0kB
[  111.178186][ T6378] lowmem_reserve[]: 0 0 1 1 1
[  111.183105][ T6378] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.236212][ T6378] lowmem_reserve[]: 0 0 0 0 0
[  111.241039][ T6378] Node 1 Normal free:3884340kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23248kB local_pcp:6744kB free_cma:0kB
[  111.282227][ T6378] lowmem_reserve[]: 0 0 0 0 0
[  111.289031][ T6378] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.301893][ T6378] Node 0 DMA32: 9248*4kB (ME) 968*8kB (UME) 527*16kB (UM) 409*32kB (ME) 296*64kB (UM) 176*128kB (UME) 90*256kB (UME) 46*512kB (UME) 17*1024kB (UME) 6*2048kB (UE) 255*4096kB (UM) = 1228496kB
[  111.320800][ T6378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  111.333846][ T6378] Node 1 Normal: 134*4kB (UE) 8*8kB (UE) 23*16kB (UME) 39*32kB (UE) 19*64kB (UE) 8*128kB (UME) 2*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3884392kB
[  111.352367][ T6378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.363159][ T6378] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.376425][ T6378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.424823][ T6378] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.487988][ T6378] 101402 total pagecache pages
[  111.492800][ T6378] 4 pages in swap cache
[  111.510498][ T6378] Free swap  = 124996kB
[  111.514691][ T6378] Total swap = 124996kB
[  111.533143][ T6378] 2097051 pages RAM
[  111.565965][ T6378] 0 pages HighMem/MovableOnly
[  111.570681][ T6378] 429044 pages reserved
[  111.580786][ T6378] 0 pages cma reserved

getty: ttyS0: read error: Resource temporarily unavailable
[  111.936780][ T6401] random: crng reseeded on system resumption
[  114.989107][ T6452] Zero length message leads to an empty skb
[  116.081886][ T6475] netlink: 268 bytes leftover after parsing attributes in process `syz.3.116'.
[  116.910164][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'.
[  116.951399][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.969167][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.120517][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.146805][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.708326][ T6503] zswap: compressor 000 not available
[  118.983776][ T6515] bond0: option all_slaves_active: invalid value ()
[  120.289248][    T9] Process accounting resumed
[  122.358431][ T6575] netlink: 268 bytes leftover after parsing attributes in process `syz.1.136'.
[  122.423747][ T6582] FAULT_INJECTION: forcing a failure.
[  122.423747][ T6582] name failslab, interval 1, probability 0, space 0, times 0
[  122.576621][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) 
[  122.576644][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  122.576652][ T6582] Call Trace:
[  122.576658][ T6582]  <TASK>
[  122.576664][ T6582]  dump_stack_lvl+0x16c/0x1f0
[  122.576686][ T6582]  should_fail_ex+0x512/0x640
[  122.576703][ T6582]  ? __kmalloc_noprof+0xca/0x880
[  122.576727][ T6582]  should_failslab+0xc2/0x120
[  122.576746][ T6582]  __kmalloc_noprof+0xdd/0x880
[  122.576765][ T6582]  ? lockdep_init_map_type+0x5c/0x280
[  122.576785][ T6582]  ? xfrm_hash_alloc+0xd1/0x100
[  122.576809][ T6582]  ? xfrm_hash_alloc+0xd1/0x100
[  122.576829][ T6582]  xfrm_hash_alloc+0xd1/0x100
[  122.576850][ T6582]  xfrm_net_init+0x35f/0xcc0
[  122.576873][ T6582]  ? __pfx_xfrm_net_init+0x10/0x10
[  122.576886][ T6582]  ops_init+0x1df/0x5f0
[  122.576906][ T6582]  setup_net+0x100/0x390
[  122.576923][ T6582]  ? __pfx_setup_net+0x10/0x10
[  122.576941][ T6582]  ? debug_mutex_init+0x37/0x70
[  122.576958][ T6582]  copy_net_ns+0x2f8/0x690
[  122.576978][ T6582]  create_new_namespaces+0x3ea/0xa90
[  122.577000][ T6582]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  122.577017][ T6582]  ksys_unshare+0x45b/0xa40
[  122.577036][ T6582]  ? __pfx_ksys_unshare+0x10/0x10
[  122.577054][ T6582]  ? xfd_validate_state+0x61/0x180
[  122.577079][ T6582]  __x64_sys_unshare+0x31/0x40
[  122.577096][ T6582]  do_syscall_64+0xcd/0xfa0
[  122.577113][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.577126][ T6582] RIP: 0033:0x7f100918eec9
[  122.577138][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.577151][ T6582] RSP: 002b:00007f1009ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  122.577165][ T6582] RAX: ffffffffffffffda RBX: 00007f10093e6180 RCX: 00007f100918eec9
[  122.577175][ T6582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  122.577183][ T6582] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[  122.577191][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.577199][ T6582] R13: 00007f10093e6218 R14: 00007f10093e6180 R15: 00007ffca7e988a8
[  122.577219][ T6582]  </TASK>

syzkaller
syzkaller login: [  123.319915][ T6598] bridge0: port 3(gretap0) entered blocking state
[  123.320027][ T6598] bridge0: port 3(gretap0) entered disabled state
[  123.320142][ T6598] gretap0: entered allmulticast mode
[  123.321177][ T6598] gretap0: entered promiscuous mode
[  123.321646][ T6598] bridge0: port 3(gretap0) entered blocking state
[  123.321737][ T6598] bridge0: port 3(gretap0) entered forwarding state
[  123.519053][ T6600] FAULT_INJECTION: forcing a failure.
[  123.519053][ T6600] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  123.532491][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) 
[  123.532524][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  123.532539][ T6600] Call Trace:
[  123.532547][ T6600]  <TASK>
[  123.532556][ T6600]  dump_stack_lvl+0x16c/0x1f0
[  123.532588][ T6600]  should_fail_ex+0x512/0x640
[  123.532622][ T6600]  should_fail_alloc_page+0xe7/0x130
[  123.532655][ T6600]  prepare_alloc_pages+0x3c2/0x610
[  123.532684][ T6600]  ? __lock_acquire+0x62e/0x1ce0
[  123.532721][ T6600]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  123.532748][ T6600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.532788][ T6600]  ? __lock_acquire+0x62e/0x1ce0
[  123.532824][ T6600]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  123.532851][ T6600]  ? __lock_acquire+0x62e/0x1ce0
[  123.532893][ T6600]  ? __lock_acquire+0x62e/0x1ce0
[  123.532932][ T6600]  ? local_lock_release+0x99/0x140
[  123.532966][ T6600]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  123.533008][ T6600]  ? policy_nodemask+0xea/0x4e0
[  123.533043][ T6600]  alloc_pages_mpol+0x1fb/0x550
[  123.533077][ T6600]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  123.533113][ T6600]  ? __memcg_slab_post_alloc_hook+0x47c/0x940
[  123.533150][ T6600]  alloc_pages_noprof+0x131/0x390
[  123.533183][ T6600]  pgd_alloc+0x4b/0x600
[  123.533216][ T6600]  mm_init+0x726/0x1380
[  123.533249][ T6600]  copy_process+0x3eee/0x76a0
[  123.533296][ T6600]  ? __pfx_copy_process+0x10/0x10
[  123.533325][ T6600]  ? futex_private_hash_put+0x176/0x300
[  123.533363][ T6600]  ? futex_private_hash_put+0x18a/0x300
[  123.533401][ T6600]  kernel_clone+0xfc/0x930
[  123.533432][ T6600]  ? __pfx_futex_wake+0x10/0x10
[  123.533468][ T6600]  ? __pfx_kernel_clone+0x10/0x10
[  123.533503][ T6600]  ? __pfx_vfs_writev+0x10/0x10
[  123.533546][ T6600]  __do_sys_clone+0xce/0x120
[  123.533576][ T6600]  ? __pfx___do_sys_clone+0x10/0x10
[  123.533629][ T6600]  ? xfd_validate_state+0x61/0x180
[  123.533676][ T6600]  do_syscall_64+0xcd/0xfa0
[  123.533706][ T6600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.533731][ T6600] RIP: 0033:0x7fc71cd8eec9
[  123.533753][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.533776][ T6600] RSP: 002b:00007fc71dc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  123.533801][ T6600] RAX: ffffffffffffffda RBX: 00007fc71cfe5fa0 RCX: 00007fc71cd8eec9
[  123.533819][ T6600] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  123.533834][ T6600] RBP: 00007fc71ce11f91 R08: 0000000000401000 R09: 0000000000000000
[  123.533850][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.533866][ T6600] R13: 00007fc71cfe6038 R14: 00007fc71cfe5fa0 R15: 00007ffc502cc538
[  123.533903][ T6600]  </TASK>
[  125.008078][ T6626] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  125.121020][ T6629] syz.1.149: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  125.217388][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) 
[  125.217432][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  125.217446][ T6629] Call Trace:
[  125.217455][ T6629]  <TASK>
[  125.217464][ T6629]  dump_stack_lvl+0x16c/0x1f0
[  125.217499][ T6629]  warn_alloc+0x248/0x3a0
[  125.217528][ T6629]  ? __pfx_warn_alloc+0x10/0x10
[  125.217554][ T6629]  ? alloc_pages_mpol+0x25a/0x550
[  125.217584][ T6629]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  125.217610][ T6629]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[  125.217645][ T6629]  ? __kmalloc_node_noprof+0x364/0x8a0
[  125.217672][ T6629]  ? __get_vm_area_node+0x208/0x330
[  125.217710][ T6629]  __vmalloc_node_range_noprof+0x119b/0x1480
[  125.217754][ T6629]  ? kernel_clone+0xfc/0x930
[  125.217790][ T6629]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  125.217833][ T6629]  ? rcu_is_watching+0x12/0xc0
[  125.217860][ T6629]  ? kernel_clone+0xfc/0x930
[  125.217887][ T6629]  __vmalloc_node_noprof+0xad/0xf0
[  125.217920][ T6629]  ? kernel_clone+0xfc/0x930
[  125.217953][ T6629]  copy_process+0x2c77/0x76a0
[  125.217997][ T6629]  ? __pfx_copy_process+0x10/0x10
[  125.218025][ T6629]  ? futex_private_hash_put+0x176/0x300
[  125.218058][ T6629]  ? futex_private_hash_put+0x18a/0x300
[  125.218096][ T6629]  kernel_clone+0xfc/0x930
[  125.218125][ T6629]  ? __pfx_futex_wake+0x10/0x10
[  125.218160][ T6629]  ? __pfx_kernel_clone+0x10/0x10
[  125.218187][ T6629]  ? __pfx_vfs_writev+0x10/0x10
[  125.218230][ T6629]  __do_sys_clone+0xce/0x120
[  125.218261][ T6629]  ? __pfx___do_sys_clone+0x10/0x10
[  125.218309][ T6629]  ? xfd_validate_state+0x61/0x180
[  125.218362][ T6629]  do_syscall_64+0xcd/0xfa0
[  125.218394][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.218426][ T6629] RIP: 0033:0x7f748c58eec9
[  125.218448][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.218473][ T6629] RSP: 002b:00007f748a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  125.218498][ T6629] RAX: ffffffffffffffda RBX: 00007f748c7e5fa0 RCX: 00007f748c58eec9
[  125.218516][ T6629] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  125.218531][ T6629] RBP: 00007f748c611f91 R08: 0000000000004000 R09: 0000000000000000
[  125.218547][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.218562][ T6629] R13: 00007f748c7e6038 R14: 00007f748c7e5fa0 R15: 00007ffd2c42f8a8
[  125.218594][ T6629]  </TASK>
[  125.219903][ T6629] Mem-Info:
[  125.495443][ T6629] active_anon:11412 inactive_anon:1 isolated_anon:0
[  125.495443][ T6629]  active_file:17501 inactive_file:55179 isolated_file:0
[  125.495443][ T6629]  unevictable:768 dirty:1111 writeback:1024
[  125.495443][ T6629]  slab_reclaimable:11243 slab_unreclaimable:90865
[  125.495443][ T6629]  mapped:24601 shmem:1362 pagetables:1157
[  125.495443][ T6629]  sec_pagetables:0 bounce:0
[  125.495443][ T6629]  kernel_misc_reclaimable:0
[  125.495443][ T6629]  free:1301278 free_pcp:25469 free_cma:0
[  125.611633][ T6629] Node 0 active_anon:45760kB inactive_anon:4kB active_file:70004kB inactive_file:220516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98404kB dirty:4444kB writeback:2048kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:11664kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.753644][ T6629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.795832][ T6629] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.825881][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.881588][ T6629] lowmem_reserve[]: 0 2484 2485 2485 2485
[  125.891126][ T6629] Node 0 DMA32 free:1306596kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47804kB inactive_anon:4kB active_file:70004kB inactive_file:220516kB unevictable:1536kB writepending:4460kB zspages:4kB present:3129332kB managed:2543668kB mlocked:0kB bounce:0kB free_pcp:74656kB local_pcp:31064kB free_cma:0kB
[  125.924568][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.932225][ T6629] lowmem_reserve[]: 0 0 1 1 1
[  125.941901][ T6629] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.971531][    C1] vkms_vblank_simulate: vblank timer overrun
[  126.057520][ T6629] lowmem_reserve[]: 0 0 0 0 0
[  126.062262][ T6629] Node 1 Normal free:3881296kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26500kB local_pcp:18048kB free_cma:0kB
[  126.162349][ T6650] FAULT_INJECTION: forcing a failure.
[  126.162349][ T6650] name failslab, interval 1, probability 0, space 0, times 0
[  126.175425][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) 
[  126.175457][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  126.175472][ T6650] Call Trace:
[  126.175481][ T6650]  <TASK>
[  126.175491][ T6650]  dump_stack_lvl+0x16c/0x1f0
[  126.175524][ T6650]  should_fail_ex+0x512/0x640
[  126.175554][ T6650]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  126.175583][ T6650]  should_failslab+0xc2/0x120
[  126.175614][ T6650]  kmem_cache_alloc_noprof+0x75/0x6e0
[  126.175638][ T6650]  ? mas_dup_build+0x6f9/0x1e80
[  126.175668][ T6650]  ? mas_dup_build+0x6f9/0x1e80
[  126.175696][ T6650]  mas_dup_build+0x6f9/0x1e80
[  126.175730][ T6650]  ? __lock_acquire+0xb97/0x1ce0
[  126.175767][ T6650]  __mt_dup+0xeb/0x1f0
[  126.175792][ T6650]  ? __pfx___mt_dup+0x10/0x10
[  126.175856][ T6650]  dup_mmap+0x36c/0x2280
[  126.175904][ T6650]  ? __pfx_dup_mmap+0x10/0x10
[  126.175963][ T6650]  copy_process+0x3f0c/0x76a0
[  126.176012][ T6650]  ? __pfx_copy_process+0x10/0x10
[  126.176042][ T6650]  ? futex_private_hash_put+0x176/0x300
[  126.176076][ T6650]  ? futex_private_hash_put+0x18a/0x300
[  126.176113][ T6650]  kernel_clone+0xfc/0x930
[  126.176144][ T6650]  ? __pfx_futex_wake+0x10/0x10
[  126.176178][ T6650]  ? __pfx_kernel_clone+0x10/0x10
[  126.176205][ T6650]  ? __pfx_vfs_writev+0x10/0x10
[  126.176260][ T6650]  __do_sys_clone+0xce/0x120
[  126.176291][ T6650]  ? __pfx___do_sys_clone+0x10/0x10
[  126.176342][ T6650]  ? xfd_validate_state+0x61/0x180
[  126.176391][ T6650]  do_syscall_64+0xcd/0xfa0
[  126.176422][ T6650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.176448][ T6650] RIP: 0033:0x7fc71cd8eec9
[  126.176467][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.176490][ T6650] RSP: 002b:00007fc71dc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  126.176508][ T6650] RAX: ffffffffffffffda RBX: 00007fc71cfe5fa0 RCX: 00007fc71cd8eec9
[  126.176522][ T6650] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  126.176537][ T6650] RBP: 00007fc71ce11f91 R08: 0000000010000200 R09: 0000000000000000
[  126.176554][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.176569][ T6650] R13: 00007fc71cfe6038 R14: 00007fc71cfe5fa0 R15: 00007ffc502cc538
[  126.176608][ T6650]  </TASK>
[  126.403897][    C1] vkms_vblank_simulate: vblank timer overrun
[  126.412470][ T6629] lowmem_reserve[]: 0 0 0 0 0
[  126.465289][ T6629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  126.478122][ T6629] Node 0 DMA32: 5303*4kB (ME) 1181*8kB (ME) 893*16kB (UM) 683*32kB (UME) 605*64kB (UME) 363*128kB (UM) 191*256kB (UM) 82*512kB (UM) 29*1024kB (ME) 6*2048kB (UME) 251*4096kB (UM) = 1312948kB
[  126.497045][ T6629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  126.508740][ T6629] Node 1 Normal: 173*4kB (UE) 7*8kB (UME) 23*16kB (UME) 64*32kB (UE) 19*64kB (UE) 7*128kB (UE) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3881372kB
[  126.528367][ T6629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  126.538353][ T6629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.547756][ T6629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  126.551445][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[  126.557366][ T6629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.557391][ T6629] 74051 total pagecache pages
[  126.557399][ T6629] 0 pages in swap cache
[  126.557408][ T6629] Free swap  = 124992kB
[  126.557417][ T6629] Total swap = 124996kB
[  126.557429][ T6629] 2097051 pages RAM
[  126.596544][ T6629] 0 pages HighMem/MovableOnly
[  126.601214][ T6629] 429044 pages reserved
[  126.605343][ T6629] 0 pages cma reserved
[  126.930498][ T6656] team0: Port device team_slave_0 removed
[  127.231952][ T6668] Console: switching to colour VGA+ 80x25
[  128.925929][ T6708] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list

getty: ttyS0: read error: Resource temporarily unavailable
[  132.850346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.862563][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  134.545648][ T6890] netlink: 268 bytes leftover after parsing attributes in process `syz.0.185'.
[  134.704034][ T6899] process 'syz.1.188' launched ':,' with NULL argv: empty string added
[  134.728973][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'.
[  134.799143][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'.
[  134.810287][ T6899] ERROR: Out of memory at tomoyo_memory_ok.
[  138.466279][ T6966] netlink: 268 bytes leftover after parsing attributes in process `syz.2.202'.
[  140.121418][ T6994] FAULT_INJECTION: forcing a failure.
[  140.121418][ T6994] name failslab, interval 1, probability 0, space 0, times 0
[  140.135524][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) 
[  140.135560][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  140.135575][ T6994] Call Trace:
[  140.135584][ T6994]  <TASK>
[  140.135594][ T6994]  dump_stack_lvl+0x16c/0x1f0
[  140.135629][ T6994]  should_fail_ex+0x512/0x640
[  140.135659][ T6994]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  140.135695][ T6994]  should_failslab+0xc2/0x120
[  140.135730][ T6994]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  140.135751][ T6994]  ? do_raw_spin_unlock+0x172/0x230
[  140.135786][ T6994]  ? alloc_inode+0xc3/0x240
[  140.135819][ T6994]  ? alloc_inode+0xc3/0x240
[  140.135844][ T6994]  ? __pfx_d_alloc_name+0x10/0x10
[  140.135878][ T6994]  alloc_inode+0xc3/0x240
[  140.135910][ T6994]  new_inode+0x22/0x1c0
[  140.135945][ T6994]  simple_fill_super+0x306/0x720
[  140.135975][ T6994]  ? __pfx_nfsd_fill_super+0x10/0x10
[  140.136012][ T6994]  nfsd_fill_super+0x90/0x5a0
[  140.136047][ T6994]  ? __pfx_set_anon_super_fc+0x10/0x10
[  140.136086][ T6994]  ? __pfx_nfsd_fill_super+0x10/0x10
[  140.136121][ T6994]  get_tree_keyed+0x10e/0x1d0
[  140.136149][ T6994]  vfs_get_tree+0x8e/0x340
[  140.136184][ T6994]  path_mount+0x7b9/0x23a0
[  140.136219][ T6994]  ? __pfx_path_mount+0x10/0x10
[  140.136250][ T6994]  ? kmem_cache_free+0x2d4/0x6c0
[  140.136275][ T6994]  ? putname+0x154/0x1a0
[  140.136311][ T6994]  ? putname+0x154/0x1a0
[  140.136338][ T6994]  ? putname+0x154/0x1a0
[  140.136372][ T6994]  ? __x64_sys_mount+0x293/0x310
[  140.136398][ T6994]  __x64_sys_mount+0x293/0x310
[  140.136428][ T6994]  ? __pfx___x64_sys_mount+0x10/0x10
[  140.136468][ T6994]  do_syscall_64+0xcd/0xfa0
[  140.136499][ T6994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.136525][ T6994] RIP: 0033:0x7f100918eec9
[  140.136545][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.136570][ T6994] RSP: 002b:00007f100a01b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  140.136594][ T6994] RAX: ffffffffffffffda RBX: 00007f10093e6090 RCX: 00007f100918eec9
[  140.136611][ T6994] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000
[  140.136627][ T6994] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[  140.136643][ T6994] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000
[  140.136658][ T6994] R13: 00007f10093e6128 R14: 00007f10093e6090 R15: 00007ffca7e988a8
[  140.136695][ T6994]  </TASK>
[  142.125989][ T7008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.790385][ T7027] netlink: 268 bytes leftover after parsing attributes in process `syz.1.215'.
[  142.917785][ T7031] FAULT_INJECTION: forcing a failure.
[  142.917785][ T7031] name failslab, interval 1, probability 0, space 0, times 0
[  142.930913][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.217 Not tainted syzkaller #0 PREEMPT(full) 
[  142.930933][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  142.930941][ T7031] Call Trace:
[  142.930946][ T7031]  <TASK>
[  142.930951][ T7031]  dump_stack_lvl+0x16c/0x1f0
[  142.930974][ T7031]  should_fail_ex+0x512/0x640
[  142.930999][ T7031]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  142.931024][ T7031]  should_failslab+0xc2/0x120
[  142.931053][ T7031]  kmem_cache_alloc_noprof+0x75/0x6e0
[  142.931076][ T7031]  ? taskstats_exit+0x654/0xbe0
[  142.931101][ T7031]  ? taskstats_exit+0x654/0xbe0
[  142.931120][ T7031]  ? acct_update_integrals+0x2ce/0x4a0
[  142.931131][ T7031]  taskstats_exit+0x654/0xbe0
[  142.931153][ T7031]  ? __pfx_taskstats_exit+0x10/0x10
[  142.931176][ T7031]  ? exit_signals+0x38e/0xb40
[  142.931194][ T7031]  do_exit+0x5dc/0x2bf0
[  142.931216][ T7031]  ? __pfx_do_exit+0x10/0x10
[  142.931234][ T7031]  ? do_raw_spin_lock+0x12c/0x2b0
[  142.931255][ T7031]  ? find_held_lock+0x2b/0x80
[  142.931271][ T7031]  do_group_exit+0xd3/0x2a0
[  142.931291][ T7031]  get_signal+0x2671/0x26d0
[  142.931313][ T7031]  ? __pfx_get_signal+0x10/0x10
[  142.931328][ T7031]  ? do_futex+0x122/0x350
[  142.931346][ T7031]  ? __pfx_do_futex+0x10/0x10
[  142.931366][ T7031]  arch_do_signal_or_restart+0x8f/0x790
[  142.931384][ T7031]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  142.931406][ T7031]  ? xfd_validate_state+0x61/0x180
[  142.931424][ T7031]  ? __sys_setsockopt+0x140/0x1a0
[  142.931442][ T7031]  exit_to_user_mode_loop+0x85/0x130
[  142.931463][ T7031]  do_syscall_64+0x426/0xfa0
[  142.931480][ T7031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.931494][ T7031] RIP: 0033:0x7fc71cd8eec9
[  142.931506][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.931518][ T7031] RSP: 002b:00007fc71dc380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  142.931532][ T7031] RAX: fffffffffffffe00 RBX: 00007fc71cfe5fa8 RCX: 00007fc71cd8eec9
[  142.931541][ T7031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc71cfe5fa8
[  142.931549][ T7031] RBP: 00007fc71cfe5fa0 R08: 0000000000000000 R09: 0000000000000000
[  142.931556][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.931564][ T7031] R13: 00007fc71cfe6038 R14: 00007ffc502cc450 R15: 00007ffc502cc538
[  142.931583][ T7031]  </TASK>

syzkaller
syzkaller login: 
getty: ttyS0: read error: Resource temporarily unavailable
[  144.437172][ T7051] random: crng reseeded on system resumption
[  144.460471][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'.
[  144.490759][ T7050] FAULT_INJECTION: forcing a failure.
[  144.490759][ T7050] name failslab, interval 1, probability 0, space 0, times 0
[  144.524539][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) 
[  144.524575][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  144.524591][ T7050] Call Trace:
[  144.524600][ T7050]  <TASK>
[  144.524610][ T7050]  dump_stack_lvl+0x16c/0x1f0
[  144.524646][ T7050]  should_fail_ex+0x512/0x640
[  144.524678][ T7050]  ? fs_reclaim_acquire+0xae/0x150
[  144.524713][ T7050]  should_failslab+0xc2/0x120
[  144.524747][ T7050]  __kmalloc_cache_noprof+0x72/0x780
[  144.524787][ T7050]  ? tomoyo_init_log+0x197/0x2140
[  144.524813][ T7050]  ? format_decode+0x1ad/0xd40
[  144.524850][ T7050]  ? tomoyo_init_log+0x197/0x2140
[  144.524873][ T7050]  tomoyo_init_log+0x197/0x2140
[  144.524898][ T7050]  ? __kasan_slab_free+0x5f/0x80
[  144.524930][ T7050]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  144.524986][ T7050]  ? __pfx_tomoyo_init_log+0x10/0x10
[  144.525011][ T7050]  ? tomoyo_profile+0x47/0x60
[  144.525040][ T7050]  ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0
[  144.525087][ T7050]  tomoyo_supervisor+0x302/0x13b0
[  144.525125][ T7050]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  144.525154][ T7050]  ? __pfx_vsnprintf+0x10/0x10
[  144.525205][ T7050]  ? tomoyo_check_path_number_acl+0xa6/0x2f0
[  144.525255][ T7050]  tomoyo_path_number_perm+0x448/0x580
[  144.525296][ T7050]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  144.525335][ T7050]  ? find_held_lock+0x2b/0x80
[  144.525368][ T7050]  ? do_raw_spin_unlock+0x172/0x230
[  144.525430][ T7050]  ? current_check_access_path+0x33c/0x460
[  144.525479][ T7050]  ? lookup_one_qstr_excl+0xb3/0x250
[  144.525520][ T7050]  tomoyo_path_mkdir+0x9b/0xe0
[  144.525551][ T7050]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  144.525592][ T7050]  security_path_mkdir+0x154/0x2f0
[  144.525631][ T7050]  do_mkdirat+0x175/0x3e0
[  144.525660][ T7050]  ? __pfx_do_mkdirat+0x10/0x10
[  144.525690][ T7050]  ? getname_flags.part.0+0x1c5/0x550
[  144.525723][ T7050]  __x64_sys_mkdir+0xef/0x140
[  144.525750][ T7050]  do_syscall_64+0xcd/0xfa0
[  144.525779][ T7050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.525806][ T7050] RIP: 0033:0x7f3d4178eec9
[  144.525827][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.525850][ T7050] RSP: 002b:00007f3d3f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  144.525875][ T7050] RAX: ffffffffffffffda RBX: 00007f3d419e5fa0 RCX: 00007f3d4178eec9
[  144.525890][ T7050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280
[  144.525905][ T7050] RBP: 00007f3d41811f91 R08: 0000000000000000 R09: 0000000000000000
[  144.525917][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.525928][ T7050] R13: 00007f3d419e6038 R14: 00007f3d419e5fa0 R15: 00007ffe959af628
[  144.525962][ T7050]  </TASK>
[  146.400062][   T30] audit: type=1806 audit(4294967314.190:5): xattr="15" res=-22
[  146.609181][   T30] audit: type=1806 audit(4294967314.400:6): xattr="." res=0
[  147.052079][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'.
[  148.140000][ T7117] cgroup: fork rejected by pids controller in /syz2
[  148.384391][ T7142] block nbd9: NBD_DISCONNECT
[  148.966725][ T7152] FAULT_INJECTION: forcing a failure.
[  148.966725][ T7152] name failslab, interval 1, probability 0, space 0, times 0
[  149.065821][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(full) 
[  149.065843][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  149.065852][ T7152] Call Trace:
[  149.065857][ T7152]  <TASK>
[  149.065864][ T7152]  dump_stack_lvl+0x16c/0x1f0
[  149.065885][ T7152]  should_fail_ex+0x512/0x640
[  149.065902][ T7152]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  149.065919][ T7152]  should_failslab+0xc2/0x120
[  149.065938][ T7152]  kmem_cache_alloc_noprof+0x75/0x6e0
[  149.065952][ T7152]  ? __anon_vma_prepare+0xae/0x5e0
[  149.065977][ T7152]  ? __anon_vma_prepare+0xae/0x5e0
[  149.065996][ T7152]  __anon_vma_prepare+0xae/0x5e0
[  149.066016][ T7152]  ? __filemap_get_folio+0x32b/0xc30
[  149.066032][ T7152]  __vmf_anon_prepare+0x11c/0x240
[  149.066051][ T7152]  hugetlb_fault+0x1ba4/0x2f40
[  149.066069][ T7152]  ? __pfx_hugetlb_fault+0x10/0x10
[  149.066090][ T7152]  ? find_vma+0xbf/0x140
[  149.066105][ T7152]  ? __pfx_find_vma+0x10/0x10
[  149.066122][ T7152]  handle_mm_fault+0xbfa/0xd10
[  149.066143][ T7152]  ? __pkru_allows_pkey+0x11/0xb0
[  149.066167][ T7152]  do_user_addr_fault+0x7a6/0x1370
[  149.066179][ T7152]  ? rcu_read_unlock+0x17/0x60
[  149.066198][ T7152]  ? rcu_is_watching+0x12/0xc0
[  149.066216][ T7152]  exc_page_fault+0x64/0xc0
[  149.066231][ T7152]  asm_exc_page_fault+0x26/0x30
[  149.066253][ T7152] RIP: 0010:copy_iovec_from_user+0x84/0x170
[  149.066272][ T7152] Code: e8 11 12 16 fd 4d 85 ff 0f 85 e5 00 00 00 e8 53 17 16 fd 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 3e 17 16 fd 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 6c 12 16 fd 85 db 0f 85 aa 00
[  149.066285][ T7152] RSP: 0018:ffffc90017f17c38 EFLAGS: 00050246
[  149.066298][ T7152] RAX: 00000000000000bf RBX: 0000000000000000 RCX: ffffc9000d6cf000
[  149.066307][ T7152] RDX: 0000000000080000 RSI: ffffffff84a5bd22 RDI: 0000000000000006
[  149.066316][ T7152] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000
[  149.066324][ T7152] R10: 0000000000002e50 R11: 0000000000000000 R12: ffff888052ba0000
[  149.066332][ T7152] R13: 00000000000002e5 R14: 00007ffffffff000 R15: dffffc0000000000
[  149.066347][ T7152]  ? copy_iovec_from_user+0x82/0x170
[  149.066367][ T7152]  ? copy_iovec_from_user+0x82/0x170
[  149.066386][ T7152]  iovec_from_user+0xa2/0x140
[  149.066406][ T7152]  __import_iovec+0x88/0x650
[  149.066428][ T7152]  import_iovec+0x86/0xb0
[  149.066447][ T7152]  __do_sys_process_madvise+0x121/0x3c0
[  149.066468][ T7152]  ? __pfx___do_sys_process_madvise+0x10/0x10
[  149.066488][ T7152]  ? __pfx_do_futex+0x10/0x10
[  149.066526][ T7152]  do_syscall_64+0xcd/0xfa0
[  149.066543][ T7152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.066556][ T7152] RIP: 0033:0x7f100918eec9
[  149.066567][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.066579][ T7152] RSP: 002b:00007f100a01b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8
[  149.066591][ T7152] RAX: ffffffffffffffda RBX: 00007f10093e6090 RCX: 00007f100918eec9
[  149.066600][ T7152] RDX: 80000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff
[  149.066608][ T7152] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[  149.066616][ T7152] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  149.066624][ T7152] R13: 00007f10093e6128 R14: 00007f10093e6090 R15: 00007ffca7e988a8
[  149.066644][ T7152]  </TASK>
[  154.390629][ T7345] FAULT_INJECTION: forcing a failure.
[  154.390629][ T7345] name failslab, interval 1, probability 0, space 0, times 0
[  154.417336][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) 
[  154.417366][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  154.417374][ T7345] Call Trace:
[  154.417380][ T7345]  <TASK>
[  154.417385][ T7345]  dump_stack_lvl+0x16c/0x1f0
[  154.417407][ T7345]  should_fail_ex+0x512/0x640
[  154.417424][ T7345]  ? fs_reclaim_acquire+0xae/0x150
[  154.417445][ T7345]  should_failslab+0xc2/0x120
[  154.417464][ T7345]  kmem_cache_alloc_noprof+0x75/0x6e0
[  154.417478][ T7345]  ? __pfx_map_id_range_down+0x10/0x10
[  154.417499][ T7345]  ? security_inode_alloc+0x3b/0x2b0
[  154.417522][ T7345]  ? security_inode_alloc+0x3b/0x2b0
[  154.417539][ T7345]  security_inode_alloc+0x3b/0x2b0
[  154.417559][ T7345]  inode_init_always_gfp+0xce4/0x1030
[  154.417576][ T7345]  alloc_inode+0x86/0x240
[  154.417594][ T7345]  new_inode+0x22/0x1c0
[  154.417609][ T7345]  ? trace_cap_capable+0x18d/0x200
[  154.417629][ T7345]  shmem_get_inode+0x19a/0xfb0
[  154.417648][ T7345]  ? __vm_enough_memory+0x184/0x3f0
[  154.417667][ T7345]  __shmem_file_setup+0x279/0x330
[  154.417689][ T7345]  shmem_zero_setup+0x93/0x1a0
[  154.417705][ T7345]  __mmap_region+0x2076/0x27a0
[  154.417721][ T7345]  ? __pfx___mmap_region+0x10/0x10
[  154.417733][ T7345]  ? finish_task_switch.isra.0+0x21c/0xc10
[  154.417749][ T7345]  ? rcu_is_watching+0x12/0xc0
[  154.417763][ T7345]  ? finish_task_switch.isra.0+0x221/0xc10
[  154.417777][ T7345]  ? lockdep_hardirqs_on+0x7c/0x110
[  154.417792][ T7345]  ? finish_task_switch.isra.0+0x221/0xc10
[  154.417823][ T7345]  ? __pfx___schedule+0x10/0x10
[  154.417858][ T7345]  ? trace_cap_capable+0x18d/0x200
[  154.417889][ T7345]  mmap_region+0x1ab/0x3f0
[  154.417903][ T7345]  ? __get_unmapped_area+0x267/0x440
[  154.417923][ T7345]  do_mmap+0xa3e/0x1210
[  154.417944][ T7345]  ? __pfx_do_mmap+0x10/0x10
[  154.417961][ T7345]  ? __pfx_down_write_killable+0x10/0x10
[  154.417983][ T7345]  vm_mmap_pgoff+0x29e/0x470
[  154.418003][ T7345]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  154.418024][ T7345]  ? __x64_sys_futex+0x1e0/0x4c0
[  154.418041][ T7345]  ? __x64_sys_futex+0x1e9/0x4c0
[  154.418062][ T7345]  ksys_mmap_pgoff+0x7d/0x5c0
[  154.418079][ T7345]  ? syscall_user_dispatch+0x78/0x140
[  154.418102][ T7345]  __x64_sys_mmap+0x125/0x190
[  154.418125][ T7345]  do_syscall_64+0xcd/0xfa0
[  154.418148][ T7345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.418163][ T7345] RIP: 0033:0x7f100918eec9
[  154.418176][ T7345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.418189][ T7345] RSP: 002b:00007f100a03c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  154.418203][ T7345] RAX: ffffffffffffffda RBX: 00007f10093e5fa0 RCX: 00007f100918eec9
[  154.418212][ T7345] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000
[  154.418221][ T7345] RBP: 00007f1009211f91 R08: 0000000000000403 R09: 0000000000000000
[  154.418230][ T7345] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  154.418238][ T7345] R13: 00007f10093e6038 R14: 00007f10093e5fa0 R15: 00007ffca7e988a8
[  154.418258][ T7345]  </TASK>

syzkaller
syzkaller login: 
getty: ttyS0: read error: Resource temporarily unavailable
[  159.149558][ T7445] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5)
[  159.391709][ T7454] netlink: 64 bytes leftover after parsing attributes in process `syz.0.264'.
[  160.751226][ T6066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.858996][ T6066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.923680][ T7477] CIFS: VFS: Unsupported security flags: 0x130
[  161.050337][ T6066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.254747][ T6066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.319402][ T7486] random: crng reseeded on system resumption
[  161.504076][ T7486] FAULT_INJECTION: forcing a failure.
[  161.504076][ T7486] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  161.655130][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) 
[  161.655166][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  161.655191][ T7486] Call Trace:
[  161.655201][ T7486]  <TASK>
[  161.655211][ T7486]  dump_stack_lvl+0x16c/0x1f0
[  161.655246][ T7486]  should_fail_ex+0x512/0x640
[  161.655283][ T7486]  should_fail_alloc_page+0xe7/0x130
[  161.655321][ T7486]  prepare_alloc_pages+0x3c2/0x610
[  161.655354][ T7486]  ? rcu_is_watching+0x12/0xc0
[  161.655385][ T7486]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  161.655418][ T7486]  ? finish_task_switch.isra.0+0x221/0xc10
[  161.655453][ T7486]  ? rcu_is_watching+0x12/0xc0
[  161.655480][ T7486]  ? trace_sched_exit_tp+0xd1/0x120
[  161.655519][ T7486]  ? __schedule+0x11a3/0x5de0
[  161.655542][ T7486]  ? __lock_acquire+0x62e/0x1ce0
[  161.655582][ T7486]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  161.655622][ T7486]  ? __pfx___schedule+0x10/0x10
[  161.655656][ T7486]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  161.655699][ T7486]  ? policy_nodemask+0xea/0x4e0
[  161.655730][ T7486]  alloc_pages_mpol+0x1fb/0x550
[  161.655762][ T7486]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  161.655803][ T7486]  alloc_pages_noprof+0x131/0x390
[  161.655837][ T7486]  relay_open_buf.part.0+0x262/0xc40
[  161.655884][ T7486]  relay_open+0x653/0xad0
[  161.655920][ T7486]  ? debugfs_create_file_full+0x41/0x60
[  161.655962][ T7486]  do_blk_trace_setup+0x4c5/0xb00
[  161.655999][ T7486]  blk_trace_setup+0xed/0x1b0
[  161.656032][ T7486]  ? __pfx_blk_trace_setup+0x10/0x10
[  161.656062][ T7486]  ? __pfx_snprintf+0x10/0x10
[  161.656097][ T7486]  ? do_vfs_ioctl+0x128/0x14f0
[  161.656137][ T7486]  blk_trace_ioctl+0x146/0x280
[  161.656169][ T7486]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  161.656215][ T7486]  ? find_held_lock+0x2b/0x80
[  161.656242][ T7486]  ? hook_file_ioctl_common+0x145/0x410
[  161.656288][ T7486]  blkdev_ioctl+0x108/0x6d0
[  161.656314][ T7486]  ? __pfx_blkdev_ioctl+0x10/0x10
[  161.656344][ T7486]  ? __pfx_blkdev_ioctl+0x10/0x10
[  161.656370][ T7486]  __x64_sys_ioctl+0x18b/0x210
[  161.656409][ T7486]  do_syscall_64+0xcd/0xfa0
[  161.656439][ T7486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.656466][ T7486] RIP: 0033:0x7fc71cd8eec9
[  161.656486][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.656509][ T7486] RSP: 002b:00007fc71dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.656534][ T7486] RAX: ffffffffffffffda RBX: 00007fc71cfe6180 RCX: 00007fc71cd8eec9
[  161.656551][ T7486] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 000000000000000f
[  161.656566][ T7486] RBP: 00007fc71ce11f91 R08: 0000000000000000 R09: 0000000000000000
[  161.656583][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.656598][ T7486] R13: 00007fc71cfe6218 R14: 00007fc71cfe6180 R15: 00007ffc502cc538
[  161.656635][ T7486]  </TASK>
[  161.938885][    C1] vkms_vblank_simulate: vblank timer overrun
[  162.133281][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.142602][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.151148][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.164345][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.173513][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.186473][ T6066] bridge_slave_1: left allmulticast mode
[  162.192377][ T6066] bridge_slave_1: left promiscuous mode
[  162.266752][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.456927][ T6066] bridge_slave_0: left allmulticast mode
[  162.462617][ T6066] bridge_slave_0: left promiscuous mode
[  162.471142][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.339982][ T7512] netlink: 268 bytes leftover after parsing attributes in process `syz.0.278'.
[  163.453093][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.464961][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.475256][ T6066] bond0 (unregistering): Released all slaves
[  163.963793][ T7494] chnl_net:caif_netlink_parms(): no params data found
[  164.173495][ T7535] CIFS: VFS: Unsupported security flags: 0x130
[  164.291154][   T52] Bluetooth: hci2: command tx timeout
[  164.503594][ T6066] hsr_slave_0: left promiscuous mode
[  164.515417][ T6066] hsr_slave_1: left promiscuous mode
[  164.522487][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.532941][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.541540][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.549369][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.570451][ T6066] veth1_macvtap: left promiscuous mode
[  164.576408][ T6066] veth0_macvtap: left promiscuous mode
[  164.582173][ T6066] veth1_vlan: left promiscuous mode
[  164.587757][ T6066] veth0_vlan: left promiscuous mode
[  165.097680][ T6066] team0 (unregistering): Port device team_slave_1 removed
[  165.479738][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.503802][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.542089][ T7494] bridge_slave_0: entered allmulticast mode
[  165.597219][ T7494] bridge_slave_0: entered promiscuous mode
[  165.637876][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.659547][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.687806][ T7494] bridge_slave_1: entered allmulticast mode
[  165.707977][ T7494] bridge_slave_1: entered promiscuous mode
[  165.822509][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.836916][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.953816][ T7494] team0: Port device team_slave_0 added
[  165.981586][ T7494] team0: Port device team_slave_1 added
[  166.064135][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.073677][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.099609][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.106999][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.139967][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.147229][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.174710][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.365914][   T52] Bluetooth: hci2: command tx timeout
[  166.417510][ T7494] hsr_slave_0: entered promiscuous mode
[  166.437373][ T7494] hsr_slave_1: entered promiscuous mode
[  166.463078][ T7494] debugfs: 'hsr0' already exists in 'hsr'
[  166.479153][ T7494] Cannot create hsr debugfs directory
[  166.629160][ T7590] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  166.672027][ T7591] netlink: 268 bytes leftover after parsing attributes in process `syz.0.293'.
[  167.542940][ T7610] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  167.605206][ T7610] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  167.718373][ T7610] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  167.811918][ T7610] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  167.857133][ T7610] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  167.958439][ T7610] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  168.203311][ T7610] Bluetooth: hci3: Opcode 0x0c1a failed: -4

syzkaller
syzkaller login: [  168.319767][ T7610] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  168.383865][ T7610] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  168.446648][   T52] Bluetooth: hci2: command tx timeout
[  168.496437][ T7610] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  168.528034][ T7610] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  168.561573][ T7610] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  168.603791][ T7494] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  168.696275][ T7494] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  168.747403][ T7494] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  168.778718][ T7494] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  168.943860][ T7661] netlink: 342 bytes leftover after parsing attributes in process `syz.1.302'.
[  169.014638][ T7661] IPv6: NLM_F_CREATE should be specified when creating new route
[  169.056606][ T7661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.064216][ T7661] IPv6: NLM_F_CREATE should be set when creating new route
[  169.071508][ T7661] IPv6: NLM_F_CREATE should be set when creating new route
[  169.198791][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.298919][ T7494] 8021q: adding VLAN 0 to HW filter on device team0
[  169.336214][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.343435][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.394057][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.401287][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.563380][ T7681] usb usb27: usbfs: process 7681 (syz.1.305) did not claim interface 0 before use
[  169.579078][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.895794][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.205925][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  170.525855][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  170.583191][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.677972][ T7494] veth0_vlan: entered promiscuous mode
[  170.709139][ T7494] veth1_vlan: entered promiscuous mode
[  170.901209][ T7713] svc: failed to register nfsdv3 RPC service (errno 111).
[  170.928712][ T7713] svc: failed to register nfsaclv3 RPC service (errno 111).
[  170.956367][ T7494] veth0_macvtap: entered promiscuous mode
[  171.002477][ T7494] veth1_macvtap: entered promiscuous mode
[  171.041381][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.058440][ T7726] netlink: 266 bytes leftover after parsing attributes in process `syz.0.312'.
[  171.085191][ T7726] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.094506][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.148726][ T6069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.178817][ T6069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.205427][ T6069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.273829][ T6069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.458159][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.501788][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.636463][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.646737][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.658092][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.965858][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.075107][ T7751] random: crng reseeded on system resumption
[  172.297085][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  172.607762][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  173.033841][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.318'.
[  173.729495][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  174.046257][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  174.239348][ T7793] ovs_: entered promiscuous mode
[  174.366466][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  174.514514][ T7815] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  174.686974][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  174.885570][ T7829] program syz.0.331 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  176.480071][ T7869] FAULT_INJECTION: forcing a failure.
[  176.480071][ T7869] name failslab, interval 1, probability 0, space 0, times 0
[  176.492917][ T7869] CPU: 0 UID: 0 PID: 7869 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) 
[  176.492942][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  176.492954][ T7869] Call Trace:
[  176.492960][ T7869]  <TASK>
[  176.492967][ T7869]  dump_stack_lvl+0x116/0x1f0
[  176.492993][ T7869]  should_fail_ex+0x512/0x640
[  176.493019][ T7869]  should_failslab+0xc2/0x120
[  176.493044][ T7869]  kmem_cache_alloc_noprof+0x75/0x6e0
[  176.493063][ T7869]  ? __send_signal_locked+0x159/0x12c0
[  176.493097][ T7869]  ? __send_signal_locked+0x159/0x12c0
[  176.493124][ T7869]  __send_signal_locked+0x159/0x12c0
[  176.493159][ T7869]  do_notify_parent+0xd84/0xfa0
[  176.493178][ T7869]  ? __pfx_do_notify_parent+0x10/0x10
[  176.493195][ T7869]  ? do_raw_spin_lock+0x12c/0x2b0
[  176.493232][ T7869]  ? release_task+0xcff/0x1ca0
[  176.493255][ T7869]  ? do_exit+0x12c1/0x2bf0
[  176.493283][ T7869]  release_task+0x16bb/0x1ca0
[  176.493317][ T7869]  ? __pfx_release_task+0x10/0x10
[  176.493341][ T7869]  ? find_held_lock+0x2b/0x80
[  176.493360][ T7869]  ? __wake_up+0x3f/0x60
[  176.493384][ T7869]  ? rcu_is_watching+0x12/0xc0
[  176.493408][ T7869]  do_exit+0x12c1/0x2bf0
[  176.493437][ T7869]  ? __pfx_do_exit+0x10/0x10
[  176.493462][ T7869]  ? find_held_lock+0x2b/0x80
[  176.493485][ T7869]  do_group_exit+0xd3/0x2a0
[  176.493511][ T7869]  get_signal+0x2671/0x26d0
[  176.493542][ T7869]  ? __pfx_get_signal+0x10/0x10
[  176.493562][ T7869]  ? do_futex+0x122/0x350
[  176.493588][ T7869]  ? __pfx_do_futex+0x10/0x10
[  176.493614][ T7869]  arch_do_signal_or_restart+0x8f/0x790
[  176.493638][ T7869]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  176.493668][ T7869]  ? xfd_validate_state+0x61/0x180
[  176.493734][ T7869]  exit_to_user_mode_loop+0x85/0x130
[  176.493762][ T7869]  do_syscall_64+0x426/0xfa0
[  176.493784][ T7869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.493803][ T7869] RIP: 0033:0x7fc50998eec9
[  176.493817][ T7869] Code: Unable to access opcode bytes at 0x7fc50998ee9f.
[  176.493825][ T7869] RSP: 002b:00007fc50a7980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  176.493842][ T7869] RAX: fffffffffffffe00 RBX: 00007fc509be5fa8 RCX: 00007fc50998eec9
[  176.493854][ T7869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc509be5fa8
[  176.493865][ T7869] RBP: 00007fc509be5fa0 R08: 0000000000000000 R09: 0000000000000000
[  176.493876][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.493887][ T7869] R13: 00007fc509be6038 R14: 00007ffe1a68c690 R15: 00007ffe1a68c778
[  176.493913][ T7869]  </TASK>
[  177.418034][ T7882] netlink: 268 bytes leftover after parsing attributes in process `syz.3.342'.
[  179.068112][ T7922] netlink: 86 bytes leftover after parsing attributes in process `syz.1.351'.
[  179.079192][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'.
[  179.298464][ T7925] warn_alloc: 3 callbacks suppressed
[  179.298477][ T7925] syz.0.352: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  179.380816][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.0.352 Not tainted syzkaller #0 PREEMPT(full) 
[  179.380851][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  179.380867][ T7925] Call Trace:
[  179.380876][ T7925]  <TASK>
[  179.380885][ T7925]  dump_stack_lvl+0x16c/0x1f0
[  179.380918][ T7925]  warn_alloc+0x248/0x3a0
[  179.380944][ T7925]  ? __pfx_warn_alloc+0x10/0x10
[  179.380970][ T7925]  ? alloc_pages_mpol+0x25a/0x550
[  179.381002][ T7925]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  179.381030][ T7925]  ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10
[  179.381068][ T7925]  ? __kmalloc_node_noprof+0x364/0x8a0
[  179.381093][ T7925]  ? __get_vm_area_node+0x208/0x330
[  179.381132][ T7925]  __vmalloc_node_range_noprof+0x119b/0x1480
[  179.381183][ T7925]  ? kernel_clone+0xfc/0x930
[  179.381223][ T7925]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  179.381268][ T7925]  ? rcu_is_watching+0x12/0xc0
[  179.381299][ T7925]  ? kernel_clone+0xfc/0x930
[  179.381329][ T7925]  __vmalloc_node_noprof+0xad/0xf0
[  179.381364][ T7925]  ? kernel_clone+0xfc/0x930
[  179.381417][ T7925]  copy_process+0x2c77/0x76a0
[  179.381473][ T7925]  ? __pfx_copy_process+0x10/0x10
[  179.381506][ T7925]  ? futex_private_hash_put+0x176/0x300
[  179.381545][ T7925]  ? futex_private_hash_put+0x18a/0x300
[  179.381584][ T7925]  kernel_clone+0xfc/0x930
[  179.381615][ T7925]  ? __pfx_futex_wake+0x10/0x10
[  179.381652][ T7925]  ? __pfx_kernel_clone+0x10/0x10
[  179.381703][ T7925]  __do_sys_clone+0xce/0x120
[  179.381735][ T7925]  ? __pfx___do_sys_clone+0x10/0x10
[  179.381783][ T7925]  ? xfd_validate_state+0x61/0x180
[  179.381830][ T7925]  do_syscall_64+0xcd/0xfa0
[  179.381862][ T7925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.381888][ T7925] RIP: 0033:0x7fc71cd8eec9
[  179.381908][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.381931][ T7925] RSP: 002b:00007fc71dc38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  179.381956][ T7925] RAX: ffffffffffffffda RBX: 00007fc71cfe5fa0 RCX: 00007fc71cd8eec9
[  179.381973][ T7925] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  179.381988][ T7925] RBP: 00007fc71ce11f91 R08: 0000000000000000 R09: 0000000000000000
[  179.382002][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.382017][ T7925] R13: 00007fc71cfe6038 R14: 00007fc71cfe5fa0 R15: 00007ffc502cc538
[  179.382053][ T7925]  </TASK>
[  179.538362][ T7925] Mem-Info:
[  179.628649][ T7925] active_anon:21570 inactive_anon:2 isolated_anon:0
[  179.628649][ T7925]  active_file:18459 inactive_file:41411 isolated_file:0
[  179.628649][ T7925]  unevictable:768 dirty:621 writeback:0
[  179.628649][ T7925]  slab_reclaimable:11210 slab_unreclaimable:94863
[  179.628649][ T7925]  mapped:27475 shmem:1693 pagetables:1096
[  179.628649][ T7925]  sec_pagetables:0 bounce:0
[  179.628649][ T7925]  kernel_misc_reclaimable:0
[  179.628649][ T7925]  free:1301381 free_pcp:24454 free_cma:0
[  179.729762][ T7925] Node 0 active_anon:84232kB inactive_anon:8kB active_file:73836kB inactive_file:165512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105600kB dirty:2484kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:11672kB pagetables:4244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  179.763675][ T7925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  179.805763][ T7925] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  179.839447][ T7925] lowmem_reserve[]: 0 2484 2485 2485 2485
[  179.885443][ T7925] Node 0 DMA32 free:1310852kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84036kB inactive_anon:8kB active_file:73836kB inactive_file:165512kB unevictable:1536kB writepending:2504kB zspages:0kB present:3129332kB managed:2543668kB mlocked:0kB bounce:0kB free_pcp:75620kB local_pcp:39208kB free_cma:0kB
[  179.941796][ T7925] lowmem_reserve[]: 0 0 1 1 1
[  179.951898][ T7925] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  180.005176][ T7925] lowmem_reserve[]: 0 0 0 0 0
[  180.011216][ T7925] Node 1 Normal free:3884096kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24128kB local_pcp:9088kB free_cma:0kB
[  180.136297][ T7925] lowmem_reserve[]: 0 0 0 0 0
[  180.141150][ T7925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  180.196007][ T7925] Node 0 DMA32: 4334*4kB (UME) 1297*8kB (UME) 906*16kB (UME) 790*32kB (UME) 356*64kB (UME) 419*128kB (UME) 220*256kB (UM) 124*512kB (UME) 58*1024kB (UM) 8*2048kB (UM) 237*4096kB (UM) = 1310240kB
[  180.245533][ T7925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  180.277378][ T7925] Node 1 Normal: 186*4kB (UME) 39*8kB (UME) 34*16kB (UME) 101*32kB (UME) 32*64kB (UME) 11*128kB (UME) 2*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884128kB
[  180.334745][ T7925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  180.365879][ T7925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  180.375399][ T7925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  180.385074][ T7925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  180.411544][ T7925] 62601 total pagecache pages
[  180.424262][ T7925] 6 pages in swap cache
[  180.463873][ T7925] Free swap  = 116612kB
[  180.469652][ T7925] Total swap = 124996kB
[  180.473927][ T7925] 2097051 pages RAM
[  180.478529][ T7925] 0 pages HighMem/MovableOnly
[  180.483396][ T7925] 429044 pages reserved
[  180.487889][ T7925] 0 pages cma reserved

getty: ttyS0: read error: Resource temporarily unavailable
[  183.027999][ T7975] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_tx_wq": -EINTR
[  183.638959][ T8034] syz.0.369 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  183.666451][ T8034] netlink: 'syz.0.369': attribute type 1 has an invalid length.
[  184.289106][ T8046] FAULT_INJECTION: forcing a failure.
[  184.289106][ T8046] name failslab, interval 1, probability 0, space 0, times 0
[  184.335832][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.3.372 Not tainted syzkaller #0 PREEMPT(full) 
[  184.335870][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  184.335889][ T8046] Call Trace:
[  184.335899][ T8046]  <TASK>
[  184.335909][ T8046]  dump_stack_lvl+0x16c/0x1f0
[  184.335945][ T8046]  should_fail_ex+0x512/0x640
[  184.335975][ T8046]  ? fs_reclaim_acquire+0xae/0x150
[  184.336011][ T8046]  should_failslab+0xc2/0x120
[  184.336052][ T8046]  kmem_cache_alloc_noprof+0x75/0x6e0
[  184.336074][ T8046]  ? __pfx_map_id_range_down+0x10/0x10
[  184.336110][ T8046]  ? security_inode_alloc+0x3b/0x2b0
[  184.336150][ T8046]  ? security_inode_alloc+0x3b/0x2b0
[  184.336180][ T8046]  security_inode_alloc+0x3b/0x2b0
[  184.336215][ T8046]  inode_init_always_gfp+0xce4/0x1030
[  184.336245][ T8046]  alloc_inode+0x86/0x240
[  184.336277][ T8046]  new_inode+0x22/0x1c0
[  184.336313][ T8046]  shmem_get_inode+0x19a/0xfb0
[  184.336355][ T8046]  shmem_mknod+0x1a8/0x450
[  184.336393][ T8046]  ? __pfx_shmem_create+0x10/0x10
[  184.336424][ T8046]  lookup_open.isra.0+0x11d0/0x1580
[  184.336471][ T8046]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  184.336517][ T8046]  ? find_held_lock+0x2b/0x80
[  184.336553][ T8046]  ? __pfx_down_write+0x10/0x10
[  184.336595][ T8046]  path_openat+0x893/0x2cb0
[  184.336635][ T8046]  ? __pfx_path_openat+0x10/0x10
[  184.336665][ T8046]  ? __lock_acquire+0xb97/0x1ce0
[  184.336703][ T8046]  do_filp_open+0x20b/0x470
[  184.336731][ T8046]  ? __pfx_do_filp_open+0x10/0x10
[  184.336787][ T8046]  ? _raw_spin_unlock+0x28/0x50
[  184.336814][ T8046]  ? alloc_fd+0x471/0x7d0
[  184.336850][ T8046]  do_sys_openat2+0x11b/0x1d0
[  184.336885][ T8046]  ? __pfx_do_sys_openat2+0x10/0x10
[  184.336937][ T8046]  __x64_sys_open+0x153/0x1e0
[  184.336974][ T8046]  ? __pfx___x64_sys_open+0x10/0x10
[  184.337016][ T8046]  ? rcu_is_watching+0x12/0xc0
[  184.337054][ T8046]  do_syscall_64+0xcd/0xfa0
[  184.337086][ T8046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.337111][ T8046] RIP: 0033:0x7f100918eec9
[  184.337132][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.337155][ T8046] RSP: 002b:00007f100a03c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  184.337180][ T8046] RAX: ffffffffffffffda RBX: 00007f10093e5fa0 RCX: 00007f100918eec9
[  184.337197][ T8046] RDX: 0000000000000000 RSI: 0000000000149443 RDI: 0000200000000040
[  184.337213][ T8046] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[  184.337228][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.337243][ T8046] R13: 00007f10093e6038 R14: 00007f10093e5fa0 R15: 00007ffca7e988a8
[  184.337280][ T8046]  </TASK>
[  184.418229][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'.
[  184.772962][ T8048] netlink: 93 bytes leftover after parsing attributes in process `syz.1.373'.
[  186.648525][ T8089] netlink: 268 bytes leftover after parsing attributes in process `syz.2.382'.
[  186.905833][ T8103] vivid-000: =================  START STATUS  =================
[  186.932665][ T8103] vivid-000: ==================  END STATUS  ==================
[  188.069175][ T8126] netlink: 206 bytes leftover after parsing attributes in process `syz.1.389'.
[  189.136595][ T8133] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  189.191255][ T8133] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  189.208459][ T8133] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  189.251528][ T8133] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  189.296067][ T8133] page dumped because: unmovable page
[  189.301579][ T8133] page_owner info is not present (never set?)
[  190.061188][ T8150] program syz.3.393 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.526409][ T8163] __vm_enough_memory: pid: 8163, comm: syz.3.397, bytes: 4398046511104 not enough memory for the allocation
[  190.919291][ T8171] capability: warning: `syz.0.400' uses deprecated v2 capabilities in a way that may be insecure
[  191.052937][ T8165] zswap: compressor  not available
[  191.534688][ T8189] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[  192.659839][ T8218] FAULT_INJECTION: forcing a failure.
[  192.659839][ T8218] name failslab, interval 1, probability 0, space 0, times 0
[  192.766411][ T8218] CPU: 0 UID: 0 PID: 8218 Comm: syz.1.409 Not tainted syzkaller #0 PREEMPT(full) 
[  192.766442][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  192.766455][ T8218] Call Trace:
[  192.766463][ T8218]  <TASK>
[  192.766472][ T8218]  dump_stack_lvl+0x16c/0x1f0
[  192.766500][ T8218]  should_fail_ex+0x512/0x640
[  192.766533][ T8218]  ? fs_reclaim_acquire+0xae/0x150
[  192.766564][ T8218]  should_failslab+0xc2/0x120
[  192.766593][ T8218]  kmem_cache_alloc_noprof+0x75/0x6e0
[  192.766617][ T8218]  ? __pfx_map_id_range_down+0x10/0x10
[  192.766651][ T8218]  ? security_inode_alloc+0x3b/0x2b0
[  192.766689][ T8218]  ? security_inode_alloc+0x3b/0x2b0
[  192.766719][ T8218]  security_inode_alloc+0x3b/0x2b0
[  192.766750][ T8218]  inode_init_always_gfp+0xce4/0x1030
[  192.766780][ T8218]  alloc_inode+0x86/0x240
[  192.766808][ T8218]  new_inode+0x22/0x1c0
[  192.766828][ T8218]  ? trace_cap_capable+0x18d/0x200
[  192.766855][ T8218]  shmem_get_inode+0x19a/0xfb0
[  192.766883][ T8218]  ? __vm_enough_memory+0x184/0x3f0
[  192.766914][ T8218]  __shmem_file_setup+0x279/0x330
[  192.766949][ T8218]  shmem_zero_setup+0x93/0x1a0
[  192.766974][ T8218]  __mmap_region+0x2076/0x27a0
[  192.767000][ T8218]  ? __pfx___mmap_region+0x10/0x10
[  192.767020][ T8218]  ? lock_acquire+0x179/0x350
[  192.767049][ T8218]  ? find_held_lock+0x2b/0x80
[  192.767072][ T8218]  ? finish_task_switch.isra.0+0x21c/0xc10
[  192.767097][ T8218]  ? rcu_is_watching+0x12/0xc0
[  192.767120][ T8218]  ? finish_task_switch.isra.0+0x221/0xc10
[  192.767154][ T8218]  ? trace_sched_exit_tp+0xd1/0x120
[  192.767188][ T8218]  ? __schedule+0x11a3/0x5de0
[  192.767273][ T8218]  ? trace_cap_capable+0x18d/0x200
[  192.767316][ T8218]  mmap_region+0x1ab/0x3f0
[  192.767340][ T8218]  ? __get_unmapped_area+0x267/0x440
[  192.767373][ T8218]  do_mmap+0xa3e/0x1210
[  192.767409][ T8218]  ? __pfx_do_mmap+0x10/0x10
[  192.767437][ T8218]  ? __pfx_down_write_killable+0x10/0x10
[  192.767475][ T8218]  vm_mmap_pgoff+0x29e/0x470
[  192.767518][ T8218]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  192.767556][ T8218]  ? __x64_sys_futex+0x1e0/0x4c0
[  192.767586][ T8218]  ? __x64_sys_futex+0x1e9/0x4c0
[  192.767622][ T8218]  ksys_mmap_pgoff+0x7d/0x5c0
[  192.767650][ T8218]  ? xfd_validate_state+0x61/0x180
[  192.767689][ T8218]  __x64_sys_mmap+0x125/0x190
[  192.767728][ T8218]  do_syscall_64+0xcd/0xfa0
[  192.767757][ T8218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.767781][ T8218] RIP: 0033:0x7f748c58eec9
[  192.767800][ T8218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.767822][ T8218] RSP: 002b:00007f748a7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  192.767844][ T8218] RAX: ffffffffffffffda RBX: 00007f748c7e6090 RCX: 00007f748c58eec9
[  192.767857][ T8218] RDX: 000000000000000a RSI: 0000000002020409 RDI: 0000000000000000
[  192.767871][ T8218] RBP: 00007f748c611f91 R08: ffffffffffffffff R09: 0000000000008000
[  192.767886][ T8218] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  192.767900][ T8218] R13: 00007f748c7e6128 R14: 00007f748c7e6090 R15: 00007ffd2c42f8a8
[  192.767936][ T8218]  </TASK>
[  193.967489][ T8239] nbd: illegal input index 65536
[  194.119299][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'.
[  194.316746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.323289][ T1301] ieee802154 phy1 wpan1: encryption failed: -22

syzkaller
syzkaller login: [  194.918996][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'.
[  195.078895][ T8259] ipvlan0: entered promiscuous mode
[  195.084191][ T8259] ipvlan0: entered allmulticast mode
[  195.090695][ T8259] veth0_vlan: entered allmulticast mode
[  195.254591][ T8269] binder: 8267:8269 ioctl 541b 10000000000402 returned -22
[  195.274975][ T8268] binder: 8267:8268 ioctl c0306201 0 returned -14

getty: ttyS0: read error: Resource temporarily unavailable
[  196.832318][ T8296] zswap: compressor  not available
[  198.429918][ T8337] Invalid ELF header magic: != ELF
[  199.168360][ T8356] netlink: 338 bytes leftover after parsing attributes in process `syz.2.444'.
[  199.226696][ T8356] netlink: 338 bytes leftover after parsing attributes in process `syz.2.444'.
[  199.292861][ T8356] netlink: 290 bytes leftover after parsing attributes in process `syz.2.444'.
[  199.302886][ T8356] veth0_macvtap: left promiscuous mode
[  199.329363][ T8356] netlink: 290 bytes leftover after parsing attributes in process `syz.2.444'.
[  199.347138][ T8356] veth0_macvtap: entered promiscuous mode
[  199.809939][ T8370] random: crng reseeded on system resumption
[  200.794820][ T8414] netlink: 268 bytes leftover after parsing attributes in process `syz.1.456'.
[  201.071595][   T30] audit: type=1804 audit(4294975168.857:7): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.458" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  201.502459][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[  202.822498][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.467'.
[  203.201804][ T8490] bond0: option all_slaves_active: invalid value ()
[  204.506691][ T8512] netlink: 268 bytes leftover after parsing attributes in process `syz.2.471'.

syzkaller
syzkaller login: [  207.191777][ T8546] FAULT_INJECTION: forcing a failure.
[  207.191777][ T8546] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  207.225731][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) 
[  207.225764][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  207.225779][ T8546] Call Trace:
[  207.225786][ T8546]  <TASK>
[  207.225795][ T8546]  dump_stack_lvl+0x16c/0x1f0
[  207.225825][ T8546]  should_fail_ex+0x512/0x640
[  207.225857][ T8546]  should_fail_alloc_page+0xe7/0x130
[  207.225889][ T8546]  prepare_alloc_pages+0x3c2/0x610
[  207.225917][ T8546]  ? rcu_is_watching+0x12/0xc0
[  207.225945][ T8546]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  207.225973][ T8546]  ? rcu_is_watching+0x12/0xc0
[  207.226000][ T8546]  ? trace_mm_page_alloc+0x11f/0x1a0
[  207.226031][ T8546]  ? __alloc_frozen_pages_noprof+0x292/0x2470
[  207.226054][ T8546]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  207.226089][ T8546]  ? lockdep_hardirqs_on+0x7c/0x110
[  207.226116][ T8546]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  207.226140][ T8546]  ? stack_depot_save_flags+0x3de/0x9c0
[  207.226178][ T8546]  ? alloc_vmap_area+0x648/0x29e0
[  207.226207][ T8546]  ? __vmalloc_node_range_noprof+0x271/0x1480
[  207.226240][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.226271][ T8546]  ? do_syscall_64+0xcd/0xfa0
[  207.226290][ T8546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.226330][ T8546]  alloc_pages_bulk_noprof+0x71c/0x1410
[  207.226354][ T8546]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  207.226393][ T8546]  ? policy_nodemask+0xea/0x4e0
[  207.226423][ T8546]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  207.226446][ T8546]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  207.226486][ T8546]  kasan_populate_vmalloc+0x112/0x2d0
[  207.226511][ T8546]  ? alloc_vmap_area+0x8b5/0x29e0
[  207.226546][ T8546]  alloc_vmap_area+0x960/0x29e0
[  207.226589][ T8546]  ? __pfx_alloc_vmap_area+0x10/0x10
[  207.226628][ T8546]  __get_vm_area_node+0x1ca/0x330
[  207.226668][ T8546]  __vmalloc_node_range_noprof+0x271/0x1480
[  207.226704][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.226739][ T8546]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  207.226776][ T8546]  ? policy_nodemask+0xea/0x4e0
[  207.226806][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.226846][ T8546]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  207.226883][ T8546]  ? ___kmalloc_large_node+0xed/0x160
[  207.226922][ T8546]  __kvmalloc_node_noprof+0x431/0x9c0
[  207.226951][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.226984][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.227018][ T8546]  ? _copy_from_user+0x59/0xd0
[  207.227049][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.227092][ T8546]  __do_sys_listmount+0x280/0xeb0
[  207.227137][ T8546]  ? __pfx___do_sys_listmount+0x10/0x10
[  207.227194][ T8546]  do_syscall_64+0xcd/0xfa0
[  207.227220][ T8546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.227242][ T8546] RIP: 0033:0x7fc50998eec9
[  207.227260][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.227282][ T8546] RSP: 002b:00007fc50a798038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  207.227304][ T8546] RAX: ffffffffffffffda RBX: 00007fc509be5fa0 RCX: 00007fc50998eec9
[  207.227320][ T8546] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  207.227334][ T8546] RBP: 00007fc509a11f91 R08: 0000000000000000 R09: 0000000000000000
[  207.227346][ T8546] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  207.227359][ T8546] R13: 00007fc509be6038 R14: 00007fc509be5fa0 R15: 00007ffe1a68c778
[  207.227391][ T8546]  </TASK>
[  207.602452][ T8546] syz.2.480: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  207.621659][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) 
[  207.621678][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  207.621686][ T8546] Call Trace:
[  207.621692][ T8546]  <TASK>
[  207.621698][ T8546]  dump_stack_lvl+0x16c/0x1f0
[  207.621724][ T8546]  warn_alloc+0x248/0x3a0
[  207.621747][ T8546]  ? __pfx_warn_alloc+0x10/0x10
[  207.621772][ T8546]  ? kfree+0x2b8/0x6d0
[  207.621802][ T8546]  ? __get_vm_area_node+0x2cd/0x330
[  207.621836][ T8546]  ? __get_vm_area_node+0x2cd/0x330
[  207.621860][ T8546]  ? __get_vm_area_node+0x208/0x330
[  207.621901][ T8546]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  207.621937][ T8546]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  207.621962][ T8546]  ? policy_nodemask+0xea/0x4e0
[  207.621981][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.622014][ T8546]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  207.622037][ T8546]  ? ___kmalloc_large_node+0xed/0x160
[  207.622059][ T8546]  __kvmalloc_node_noprof+0x431/0x9c0
[  207.622076][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.622098][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.622118][ T8546]  ? _copy_from_user+0x59/0xd0
[  207.622138][ T8546]  ? __do_sys_listmount+0x280/0xeb0
[  207.622157][ T8546]  __do_sys_listmount+0x280/0xeb0
[  207.622183][ T8546]  ? __pfx___do_sys_listmount+0x10/0x10
[  207.622215][ T8546]  do_syscall_64+0xcd/0xfa0
[  207.622232][ T8546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.622246][ T8546] RIP: 0033:0x7fc50998eec9
[  207.622259][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.622273][ T8546] RSP: 002b:00007fc50a798038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  207.622287][ T8546] RAX: ffffffffffffffda RBX: 00007fc509be5fa0 RCX: 00007fc50998eec9
[  207.622297][ T8546] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  207.622305][ T8546] RBP: 00007fc509a11f91 R08: 0000000000000000 R09: 0000000000000000
[  207.622314][ T8546] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  207.622322][ T8546] R13: 00007fc509be6038 R14: 00007fc509be5fa0 R15: 00007ffe1a68c778
[  207.622341][ T8546]  </TASK>
[  207.622347][ T8546] Mem-Info:
[  207.842746][ T8546] active_anon:23268 inactive_anon:3 isolated_anon:0
[  207.842746][ T8546]  active_file:14613 inactive_file:48533 isolated_file:0
[  207.842746][ T8546]  unevictable:768 dirty:3212 writeback:0
[  207.842746][ T8546]  slab_reclaimable:11604 slab_unreclaimable:93743
[  207.842746][ T8546]  mapped:29448 shmem:2821 pagetables:1133
[  207.842746][ T8546]  sec_pagetables:0 bounce:0
[  207.842746][ T8546]  kernel_misc_reclaimable:0
[  207.842746][ T8546]  free:1300191 free_pcp:18543 free_cma:0
[  207.888673][ T8546] Node 0 active_anon:93052kB inactive_anon:12kB active_file:58452kB inactive_file:194000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117752kB dirty:12848kB writeback:0kB shmem:9708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:11632kB pagetables:4360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  207.921050][ T8546] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  207.961411][ T8546] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  208.006256][ T8546] lowmem_reserve[]: 0 2484 2485 2485 2485
[  208.015727][ T8546] Node 0 DMA32 free:1301476kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89196kB inactive_anon:12kB active_file:58452kB inactive_file:194000kB unevictable:1536kB writepending:12848kB zspages:0kB present:3129332kB managed:2543668kB mlocked:0kB bounce:0kB free_pcp:56164kB local_pcp:20412kB free_cma:0kB
[  208.115735][ T8546] lowmem_reserve[]: 0 0 1 1 1
[  208.120503][ T8546] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  208.235787][ T8546] lowmem_reserve[]: 0 0 0 0 0
[  208.241426][ T8546] Node 1 Normal free:3883908kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22056kB local_pcp:14496kB free_cma:0kB
[  208.405713][ T8546] lowmem_reserve[]: 0 0 0 0 0
[  208.425780][ T8546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  208.475693][ T8546] Node 0 DMA32: 2891*4kB (UM) 603*8kB (UM) 714*16kB (UME) 410*32kB (UM) 600*64kB (UME) 492*128kB (UME) 264*256kB (UME) 150*512kB (UME) 63*1024kB (UM) 4*2048kB (M) 231*4096kB (UM) = 1305572kB
[  208.551735][ T8546] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  208.591975][ T8546] Node 1 Normal: 161*4kB (UME) 40*8kB (UME) 22*16kB (UME) 113*32kB (UME) 37*64kB (UME) 10*128kB (UME) 2*256kB (UM) 2*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3883908kB
[  208.700292][ T8546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  208.745694][ T8546] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  208.815710][ T8546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  208.825771][ T8546] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  208.837035][ T8557] syz.1.483 (8557): attempted to duplicate a private mapping with mremap.  This is not supported.
[  208.851950][ T8546] 61431 total pagecache pages
[  208.858369][ T8546] 0 pages in swap cache
[  208.862606][ T8546] Free swap  = 124996kB
[  208.868591][ T8546] Total swap = 124996kB
[  208.872794][ T8546] 2097051 pages RAM
[  208.876810][ T8546] 0 pages HighMem/MovableOnly
[  208.883750][ T8546] 429044 pages reserved
[  208.910837][ T8546] 0 pages cma reserved
[  209.042812][ T8562] netlink: 268 bytes leftover after parsing attributes in process `syz.3.484'.
[  209.717574][ T8581] ptrace attach of "./syz-executor exec"[7494] was attempted by ""[8581]
[  213.163617][ T8665] netlink: 268 bytes leftover after parsing attributes in process `syz.1.501'.
[  215.330757][ T8713] FAULT_INJECTION: forcing a failure.
[  215.330757][ T8713] name failslab, interval 1, probability 0, space 0, times 0
[  215.347268][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT(full) 
[  215.347303][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  215.347320][ T8713] Call Trace:
[  215.347328][ T8713]  <TASK>
[  215.347338][ T8713]  dump_stack_lvl+0x16c/0x1f0
[  215.347374][ T8713]  should_fail_ex+0x512/0x640
[  215.347406][ T8713]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  215.347440][ T8713]  should_failslab+0xc2/0x120
[  215.347472][ T8713]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  215.347498][ T8713]  ? __d_alloc+0x32/0xae0
[  215.347528][ T8713]  ? __d_alloc+0x32/0xae0
[  215.347553][ T8713]  __d_alloc+0x32/0xae0
[  215.347593][ T8713]  d_alloc_pseudo+0x1c/0xc0
[  215.347625][ T8713]  alloc_file_pseudo+0xcf/0x230
[  215.347662][ T8713]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  215.347697][ T8713]  ? alloc_fd+0x471/0x7d0
[  215.347728][ T8713]  sock_alloc_file+0x50/0x210
[  215.347760][ T8713]  __sys_socket+0x1c0/0x260
[  215.347794][ T8713]  ? __pfx___sys_socket+0x10/0x10
[  215.347825][ T8713]  ? xfd_validate_state+0x61/0x180
[  215.347868][ T8713]  __x64_sys_socket+0x72/0xb0
[  215.347902][ T8713]  ? lockdep_hardirqs_on+0x7c/0x110
[  215.347927][ T8713]  do_syscall_64+0xcd/0xfa0
[  215.347956][ T8713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.347980][ T8713] RIP: 0033:0x7f100918eec9
[  215.348001][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.348024][ T8713] RSP: 002b:00007f100a03c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  215.348047][ T8713] RAX: ffffffffffffffda RBX: 00007f10093e5fa0 RCX: 00007f100918eec9
[  215.348064][ T8713] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  215.348078][ T8713] RBP: 00007f1009211f91 R08: 0000000000000000 R09: 0000000000000000
[  215.348092][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.348107][ T8713] R13: 00007f10093e6038 R14: 00007f10093e5fa0 R15: 00007ffca7e988a8
[  215.348142][ T8713]  </TASK>
[  215.908101][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  215.955456][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  215.980185][ T8734] netlink: 268 bytes leftover after parsing attributes in process `syz.3.512'.
[  216.816820][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[  218.971925][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  218.987610][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  218.996879][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  219.005002][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  219.013960][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  219.632253][ T8819] random: crng reseeded on system resumption
[  219.686826][ T8809] chnl_net:caif_netlink_parms(): no params data found
[  220.061770][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.159100][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.178271][ T8809] bridge_slave_0: entered allmulticast mode
[  220.195818][ T8809] bridge_slave_0: entered promiscuous mode
[  220.221389][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.250307][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.275297][ T8809] bridge_slave_1: entered allmulticast mode
[  220.294064][ T8809] bridge_slave_1: entered promiscuous mode
[  220.532857][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.607959][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.801582][ T8837] netlink: 268 bytes leftover after parsing attributes in process `syz.1.535'.
[  220.818429][ T8809] team0: Port device team_slave_0 added
[  220.857632][ T8809] team0: Port device team_slave_1 added
[  220.942200][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.955045][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'.
[  220.969658][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.038468][ T8809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.068979][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.086414][   T52] Bluetooth: hci4: command tx timeout
[  221.092903][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.182313][ T8809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.308542][ T8809] hsr_slave_0: entered promiscuous mode
[  221.314817][ T8809] hsr_slave_1: entered promiscuous mode
[  221.332774][ T8809] debugfs: 'hsr0' already exists in 'hsr'
[  221.347061][ T8809] Cannot create hsr debugfs directory
[  221.629378][ T8845] capability: warning: `syz.1.529' uses 32-bit capabilities (legacy support in use)
[  222.031437][ T8809] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  222.047255][ T8809] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  222.059104][ T8809] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  222.070169][ T8809] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  222.265563][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.339417][ T8809] 8021q: adding VLAN 0 to HW filter on device team0
[  222.382254][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.389398][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.424455][ T8725] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.431600][ T8725] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.175765][   T52] Bluetooth: hci4: command tx timeout
[  223.286415][ T8885] netlink: 268 bytes leftover after parsing attributes in process `syz.1.538'.
[  223.309870][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.053861][ T8809] veth0_vlan: entered promiscuous mode
[  224.082562][ T8809] veth1_vlan: entered promiscuous mode
[  224.229519][ T8809] veth0_macvtap: entered promiscuous mode
[  224.303450][ T8809] veth1_macvtap: entered promiscuous mode
[  224.382316][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.434780][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.482707][ T6075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.563116][ T6075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.591714][ T6075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.643545][ T6075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.887521][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.898644][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.949590][ T6068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.995556][ T6068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.172146][   T52] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260
[  225.246980][   T52] Bluetooth: hci4: command tx timeout
[  225.802470][ T8948] __vm_enough_memory: pid: 8948, comm: syz.3.547, bytes: 4398046511104 not enough memory for the allocation
[  227.326003][   T52] Bluetooth: hci4: command tx timeout
[  228.543657][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'.
[  229.800337][ T9013] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  231.743663][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'.
[  235.208733][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'.
[  235.228389][ T9101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  235.276649][   T52] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  237.385428][ T9134] netlink: 268 bytes leftover after parsing attributes in process `syz.1.587'.
[  238.085003][ T9147] FAULT_INJECTION: forcing a failure.
[  238.085003][ T9147] name failslab, interval 1, probability 0, space 0, times 0
[  238.129868][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.2.590 Not tainted syzkaller #0 PREEMPT(full) 
[  238.129890][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.129899][ T9147] Call Trace:
[  238.129903][ T9147]  <TASK>
[  238.129909][ T9147]  dump_stack_lvl+0x16c/0x1f0
[  238.129929][ T9147]  should_fail_ex+0x512/0x640
[  238.129946][ T9147]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  238.129963][ T9147]  should_failslab+0xc2/0x120
[  238.129981][ T9147]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  238.129996][ T9147]  ? __d_alloc+0x32/0xae0
[  238.130015][ T9147]  ? __d_alloc+0x32/0xae0
[  238.130028][ T9147]  __d_alloc+0x32/0xae0
[  238.130046][ T9147]  d_alloc_pseudo+0x1c/0xc0
[  238.130070][ T9147]  alloc_file_pseudo+0xcf/0x230
[  238.130090][ T9147]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  238.130109][ T9147]  ? alloc_fd+0x471/0x7d0
[  238.130125][ T9147]  sock_alloc_file+0x50/0x210
[  238.130143][ T9147]  __sys_socket+0x1c0/0x260
[  238.130164][ T9147]  ? __pfx___sys_socket+0x10/0x10
[  238.130187][ T9147]  ? xfd_validate_state+0x61/0x180
[  238.130208][ T9147]  ? __pfx_ksys_write+0x10/0x10
[  238.130226][ T9147]  __x64_sys_socket+0x72/0xb0
[  238.130245][ T9147]  ? lockdep_hardirqs_on+0x7c/0x110
[  238.130260][ T9147]  do_syscall_64+0xcd/0xfa0
[  238.130277][ T9147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.130291][ T9147] RIP: 0033:0x7fc50998eec9
[  238.130302][ T9147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.130316][ T9147] RSP: 002b:00007fc50a756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  238.130329][ T9147] RAX: ffffffffffffffda RBX: 00007fc509be6180 RCX: 00007fc50998eec9
[  238.130338][ T9147] RDX: 000000000000000f RSI: 0000000000000002 RDI: 0000000000000010
[  238.130346][ T9147] RBP: 00007fc509a11f91 R08: 0000000000000000 R09: 0000000000000000
[  238.130355][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.130363][ T9147] R13: 00007fc509be6218 R14: 00007fc509be6180 R15: 00007ffe1a68c778
[  238.130385][ T9147]  </TASK>
[  238.641234][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'.
[  239.754761][ T9162] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  239.801790][ T9162] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  239.841107][ T9162] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  239.860464][ T9162] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  239.911490][ T9162] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  239.954499][ T9162] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  239.992352][ T9162] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  240.761160][ T9191] netlink: 268 bytes leftover after parsing attributes in process `syz.4.600'.
[  241.246014][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  241.770546][ T9204] bridge0: port 3(ipvlan1) entered blocking state
[  241.778666][ T9204] bridge0: port 3(ipvlan1) entered disabled state
[  241.806210][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  241.808930][ T9204] ipvlan1: entered allmulticast mode
[  241.823383][ T9204] veth0_vlan: entered allmulticast mode
[  241.833217][ T9204] ipvlan1: left allmulticast mode
[  241.840891][ T9204] veth0_vlan: left allmulticast mode
[  241.886331][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  241.886429][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  241.976406][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  242.129244][ T9211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  242.818844][ T9206] bridge0: port 3(hsr0) entered blocking state
[  242.846032][ T9206] bridge0: port 3(hsr0) entered disabled state
[  242.853376][ T9206] hsr0: entered allmulticast mode
[  242.859082][ T9206] hsr_slave_0: entered allmulticast mode
[  242.865259][ T9206] hsr_slave_1: entered allmulticast mode
[  242.875352][ T9206] hsr0: entered promiscuous mode
[  242.881474][ T9206] bridge0: port 3(hsr0) entered blocking state
[  242.887996][ T9206] bridge0: port 3(hsr0) entered forwarding state
[  243.943899][ T9252] netlink: 268 bytes leftover after parsing attributes in process `syz.4.614'.
[  244.045717][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  245.092566][ T9277] tipc: Started in network mode
[  245.097912][ T9277] tipc: Node identity ee00, cluster identity 4711
[  245.105347][ T9277] tipc: Node number set to 60928
[  246.125840][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  247.120348][ T5823] Bluetooth: hci3: unknown advertising packet type: 0xea
[  247.456776][ T9320] netlink: 268 bytes leftover after parsing attributes in process `syz.2.630'.
[  247.723412][   T30] audit: type=1804 audit(4294975216.515:8): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.631" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  247.772547][   T30] audit: type=1804 audit(4294975216.565:9): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.631" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  249.452646][ T9358] binder: BINDER_SET_CONTEXT_MGR already set
[  249.460374][ T9358] binder: 9347:9358 ioctl 4018620d 9 returned -16
[  250.105428][ T9368] ==================================================================
[  250.105448][ T9368] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70
[  250.105487][ T9368] Read of size 256 at addr ffff8880252d23c0 by task syz.4.638/9368
[  250.105509][ T9368] 
[  250.105521][ T9368] CPU: 1 UID: 0 PID: 9368 Comm: syz.4.638 Not tainted syzkaller #0 PREEMPT(full) 
[  250.105552][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.105567][ T9368] Call Trace:
[  250.105576][ T9368]  <TASK>
[  250.105586][ T9368]  dump_stack_lvl+0x116/0x1f0
[  250.105619][ T9368]  print_report+0xcd/0x630
[  250.105660][ T9368]  ? __virt_addr_valid+0x81/0x610
[  250.105692][ T9368]  ? __phys_addr+0xe8/0x180
[  250.105723][ T9368]  ? fbcon_prepare_logo+0xa03/0xc70
[  250.105751][ T9368]  kasan_report+0xe0/0x110
[  250.105782][ T9368]  ? fbcon_prepare_logo+0xa03/0xc70
[  250.105815][ T9368]  kasan_check_range+0x100/0x1b0
[  250.105851][ T9368]  __asan_memcpy+0x23/0x60
[  250.105876][ T9368]  fbcon_prepare_logo+0xa03/0xc70
[  250.105937][ T9368]  fbcon_init+0xd77/0x1900
[  250.105967][ T9368]  ? __pfx_drm_fb_helper_set_par+0x10/0x10
[  250.106000][ T9368]  visual_init+0x320/0x620
[  250.106031][ T9368]  do_bind_con_driver.isra.0+0x57a/0xbf0
[  250.106071][ T9368]  store_bind+0x61d/0x760
[  250.106107][ T9368]  ? sysfs_file_kobj+0xe4/0x290
[  250.106134][ T9368]  ? __pfx_store_bind+0x10/0x10
[  250.106165][ T9368]  dev_attr_store+0x58/0x80
[  250.106194][ T9368]  ? __pfx_dev_attr_store+0x10/0x10
[  250.106221][ T9368]  sysfs_kf_write+0xf2/0x150
[  250.106249][ T9368]  kernfs_fop_write_iter+0x3af/0x570
[  250.106286][ T9368]  ? __pfx_sysfs_kf_write+0x10/0x10
[  250.106314][ T9368]  iter_file_splice_write+0xa21/0x12e0
[  250.106351][ T9368]  ? __pfx_iter_file_splice_write+0x10/0x10
[  250.106380][ T9368]  ? __pfx_copy_splice_read+0x10/0x10
[  250.106423][ T9368]  ? __pfx_iter_file_splice_write+0x10/0x10
[  250.106451][ T9368]  direct_splice_actor+0x18f/0x6c0
[  250.106478][ T9368]  splice_direct_to_actor+0x342/0xa30
[  250.106520][ T9368]  ? __pfx_direct_splice_actor+0x10/0x10
[  250.106548][ T9368]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  250.106593][ T9368]  do_splice_direct+0x174/0x240
[  250.106631][ T9368]  ? __pfx_do_splice_direct+0x10/0x10
[  250.106678][ T9368]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  250.106720][ T9368]  ? rw_verify_area+0xcf/0x6c0
[  250.106760][ T9368]  do_sendfile+0xb06/0xe50
[  250.106789][ T9368]  ? __pfx_do_sendfile+0x10/0x10
[  250.106817][ T9368]  ? __x64_sys_futex+0x1e0/0x4c0
[  250.106849][ T9368]  ? __x64_sys_futex+0x1e9/0x4c0
[  250.106884][ T9368]  __x64_sys_sendfile64+0x1d8/0x220
[  250.106917][ T9368]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  250.106954][ T9368]  do_syscall_64+0xcd/0xfa0
[  250.106984][ T9368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.107010][ T9368] RIP: 0033:0x7fd18fd8eec9
[  250.107032][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.107056][ T9368] RSP: 002b:00007fd190bb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  250.107082][ T9368] RAX: ffffffffffffffda RBX: 00007fd18ffe6180 RCX: 00007fd18fd8eec9
[  250.107101][ T9368] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[  250.107117][ T9368] RBP: 00007fd18fe11f91 R08: 0000000000000000 R09: 0000000000000000
[  250.107133][ T9368] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  250.107149][ T9368] R13: 00007fd18ffe6218 R14: 00007fd18ffe6180 R15: 00007ffee9735b28
[  250.107176][ T9368]  </TASK>
[  250.107184][ T9368] 
[  250.107191][ T9368] Allocated by task 66:
[  250.107203][ T9368]  kasan_save_stack+0x33/0x60
[  250.107231][ T9368]  kasan_save_track+0x14/0x30
[  250.107258][ T9368]  __kasan_kmalloc+0xaa/0xb0
[  250.107283][ T9368]  __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  250.107314][ T9368]  kmalloc_reserve+0xef/0x2c0
[  250.107346][ T9368]  __alloc_skb+0x166/0x380
[  250.107369][ T9368]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  250.107399][ T9368]  process_one_work+0x9cf/0x1b70
[  250.107436][ T9368]  worker_thread+0x6c8/0xf10
[  250.107472][ T9368]  kthread+0x3c2/0x780
[  250.107504][ T9368]  ret_from_fork+0x675/0x7d0
[  250.107536][ T9368]  ret_from_fork_asm+0x1a/0x30
[  250.107560][ T9368] 
[  250.107566][ T9368] Freed by task 66:
[  250.107577][ T9368]  kasan_save_stack+0x33/0x60
[  250.107603][ T9368]  kasan_save_track+0x14/0x30
[  250.107628][ T9368]  __kasan_save_free_info+0x3b/0x60
[  250.107671][ T9368]  __kasan_slab_free+0x5f/0x80
[  250.107700][ T9368]  kfree+0x2b8/0x6d0
[  250.107735][ T9368]  skb_free_head+0x114/0x210
[  250.107757][ T9368]  skb_release_data+0x795/0x9e0
[  250.107782][ T9368]  consume_skb+0xbf/0x100
[  250.107809][ T9368]  nsim_dev_trap_report_work+0x8bd/0xcf0
[  250.107838][ T9368]  process_one_work+0x9cf/0x1b70
[  250.107874][ T9368]  worker_thread+0x6c8/0xf10
[  250.107909][ T9368]  kthread+0x3c2/0x780
[  250.107941][ T9368]  ret_from_fork+0x675/0x7d0
[  250.107973][ T9368]  ret_from_fork_asm+0x1a/0x30
[  250.107998][ T9368] 
[  250.108004][ T9368] The buggy address belongs to the object at ffff8880252d2000
[  250.108004][ T9368]  which belongs to the cache kmalloc-4k of size 4096
[  250.108025][ T9368] The buggy address is located 960 bytes inside of
[  250.108025][ T9368]  freed 4096-byte region [ffff8880252d2000, ffff8880252d3000)
[  250.108051][ T9368] 
[  250.108057][ T9368] The buggy address belongs to the physical page:
[  250.108080][ T9368] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x252d0
[  250.108104][ T9368] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  250.108126][ T9368] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  250.108148][ T9368] page_type: f5(slab)
[  250.108171][ T9368] raw: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122
[  250.108195][ T9368] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  250.108221][ T9368] head: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122
[  250.108244][ T9368] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  250.108268][ T9368] head: 00fff00000000003 ffffea000094b401 00000000ffffffff 00000000ffffffff
[  250.108291][ T9368] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  250.108305][ T9368] page dumped because: kasan: bad access detected
[  250.108318][ T9368] page_owner tracks the page as allocated
[  250.108326][ T9368] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5196, tgid 5196 (udevd), ts 36435159083, free_ts 36350599024
[  250.108370][ T9368]  post_alloc_hook+0x1c0/0x230
[  250.108403][ T9368]  get_page_from_freelist+0x10a3/0x3a30
[  250.108440][ T9368]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  250.108464][ T9368]  alloc_pages_mpol+0x1fb/0x550
[  250.108493][ T9368]  new_slab+0x24a/0x360
[  250.108525][ T9368]  ___slab_alloc+0xdc4/0x1ae0
[  250.108558][ T9368]  __slab_alloc.constprop.0+0x63/0x110
[  250.108594][ T9368]  __kmalloc_noprof+0x501/0x880
[  250.108627][ T9368]  tomoyo_realpath_from_path+0xc2/0x6e0
[  250.108660][ T9368]  tomoyo_check_open_permission+0x2ab/0x3c0
[  250.108697][ T9368]  tomoyo_file_open+0x6b/0x90
[  250.108725][ T9368]  security_file_open+0x84/0x1e0
[  250.108748][ T9368]  do_dentry_open+0x596/0x1530
[  250.108774][ T9368]  vfs_open+0x82/0x3f0
[  250.108803][ T9368]  path_openat+0x1de4/0x2cb0
[  250.108826][ T9368]  do_filp_open+0x20b/0x470
[  250.108849][ T9368] page last free pid 5202 tgid 5202 stack trace:
[  250.108863][ T9368]  __free_frozen_pages+0x7df/0x1160
[  250.108895][ T9368]  __put_partials+0x130/0x170
[  250.108930][ T9368]  qlist_free_all+0x4d/0x120
[  250.108953][ T9368]  kasan_quarantine_reduce+0x195/0x1e0
[  250.108980][ T9368]  __kasan_slab_alloc+0x69/0x90
[  250.109007][ T9368]  kmem_cache_alloc_noprof+0x250/0x6e0
[  250.109029][ T9368]  ep_ptable_queue_proc+0x5b/0x280
[  250.109065][ T9368]  pipe_poll+0x303/0x660
[  250.109088][ T9368]  ep_item_poll+0x141/0x1f0
[  250.109109][ T9368]  do_epoll_ctl+0x1fae/0x3790
[  250.109132][ T9368]  __x64_sys_epoll_ctl+0x15c/0x1e0
[  250.109156][ T9368]  do_syscall_64+0xcd/0xfa0
[  250.109181][ T9368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.109206][ T9368] 
[  250.109212][ T9368] Memory state around the buggy address:
[  250.109225][ T9368]  ffff8880252d2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.109245][ T9368]  ffff8880252d2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.109262][ T9368] >ffff8880252d2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.109276][ T9368]                                            ^
[  250.109289][ T9368]  ffff8880252d2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.109306][ T9368]  ffff8880252d2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.109319][ T9368] ==================================================================
[  250.121817][ T9368] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  250.121832][ T9368] CPU: 1 UID: 0 PID: 9368 Comm: syz.4.638 Not tainted syzkaller #0 PREEMPT(full) 
[  250.121850][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.121859][ T9368] Call Trace:
[  250.121864][ T9368]  <TASK>
[  250.121873][ T9368]  dump_stack_lvl+0x3d/0x1f0
[  250.121892][ T9368]  vpanic+0x640/0x6f0
[  250.121913][ T9368]  panic+0xca/0xd0
[  250.121930][ T9368]  ? __pfx_panic+0x10/0x10
[  250.121949][ T9368]  ? fbcon_prepare_logo+0xa03/0xc70
[  250.121965][ T9368]  ? preempt_schedule_common+0x44/0xc0
[  250.121980][ T9368]  ? preempt_schedule_thunk+0x16/0x30
[  250.121998][ T9368]  check_panic_on_warn+0xab/0xb0
[  250.122018][ T9368]  end_report+0x107/0x170
[  250.122035][ T9368]  kasan_report+0xee/0x110
[  250.122052][ T9368]  ? fbcon_prepare_logo+0xa03/0xc70
[  250.122069][ T9368]  kasan_check_range+0x100/0x1b0
[  250.122089][ T9368]  __asan_memcpy+0x23/0x60
[  250.122102][ T9368]  fbcon_prepare_logo+0xa03/0xc70
[  250.122120][ T9368]  fbcon_init+0xd77/0x1900
[  250.122136][ T9368]  ? __pfx_drm_fb_helper_set_par+0x10/0x10
[  250.122153][ T9368]  visual_init+0x320/0x620
[  250.122170][ T9368]  do_bind_con_driver.isra.0+0x57a/0xbf0
[  250.122191][ T9368]  store_bind+0x61d/0x760
[  250.122210][ T9368]  ? sysfs_file_kobj+0xe4/0x290
[  250.122225][ T9368]  ? __pfx_store_bind+0x10/0x10
[  250.122242][ T9368]  dev_attr_store+0x58/0x80
[  250.122258][ T9368]  ? __pfx_dev_attr_store+0x10/0x10
[  250.122272][ T9368]  sysfs_kf_write+0xf2/0x150
[  250.122287][ T9368]  kernfs_fop_write_iter+0x3af/0x570
[  250.122307][ T9368]  ? __pfx_sysfs_kf_write+0x10/0x10
[  250.122322][ T9368]  iter_file_splice_write+0xa21/0x12e0
[  250.122342][ T9368]  ? __pfx_iter_file_splice_write+0x10/0x10
[  250.122357][ T9368]  ? __pfx_copy_splice_read+0x10/0x10
[  250.122382][ T9368]  ? __pfx_iter_file_splice_write+0x10/0x10
[  250.122399][ T9368]  direct_splice_actor+0x18f/0x6c0
[  250.122413][ T9368]  splice_direct_to_actor+0x342/0xa30
[  250.122435][ T9368]  ? __pfx_direct_splice_actor+0x10/0x10
[  250.122449][ T9368]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  250.122473][ T9368]  do_splice_direct+0x174/0x240
[  250.122494][ T9368]  ? __pfx_do_splice_direct+0x10/0x10
[  250.122515][ T9368]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  250.122537][ T9368]  ? rw_verify_area+0xcf/0x6c0
[  250.122559][ T9368]  do_sendfile+0xb06/0xe50
[  250.122574][ T9368]  ? __pfx_do_sendfile+0x10/0x10
[  250.122589][ T9368]  ? __x64_sys_futex+0x1e0/0x4c0
[  250.122606][ T9368]  ? __x64_sys_futex+0x1e9/0x4c0
[  250.122625][ T9368]  __x64_sys_sendfile64+0x1d8/0x220
[  250.122648][ T9368]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  250.122667][ T9368]  do_syscall_64+0xcd/0xfa0
[  250.122683][ T9368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.122697][ T9368] RIP: 0033:0x7fd18fd8eec9
[  250.122708][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.122721][ T9368] RSP: 002b:00007fd190bb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  250.122736][ T9368] RAX: ffffffffffffffda RBX: 00007fd18ffe6180 RCX: 00007fd18fd8eec9
[  250.122746][ T9368] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[  250.122754][ T9368] RBP: 00007fd18fe11f91 R08: 0000000000000000 R09: 0000000000000000
[  250.122763][ T9368] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  250.122771][ T9368] R13: 00007fd18ffe6218 R14: 00007fd18ffe6180 R15: 00007ffee9735b28
[  250.122785][ T9368]  </TASK>
[  250.123076][ T9368] Kernel Offset: disabled