last executing test programs:

1m12.621485223s ago: executing program 1 (id=92):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000180)='./G\xe8\x1cS\x7f\x03q\x98B[\xad\xfb`\xa9\xf7\xf4\xd8E`\x05\xf3\v\xbb\x11\xc2/\xf4<D\v>\xc7\xc1_^2\xfb\x01\x1e\x15\xba\x14\\8M\xc7\xfc\x1eU\xe2\xe0\x92D\xa2\x9e\x9e\x86b\xf1E\xf8\xd2\xa9DR\xbf\xec]\xf8\xd4,)\xbd5\xb39k\x19\x06\xc1\xcc\x8e\xd2\xfe\x827\x8cl\xd5\x1d\xba`\xc1\xa7\xd0=\x95\xe1y\x13\xef\x05,\xe6\xa7I\xbb\xa6o\x91]\xa7\xe5\x05~~\xa1\xa5E\xd6o\x80\xff!l)f\xb1\xbe\x9di\xd3\xea|\x81x\xe1\xdddt\x7f\xe7\x8f5y\xb7\x97\xa1\xe0\x85Zk\x92\xff0l\x01\xb5e~\x9e\x9a5\xd5D\xb6s\xc5e\xf5%\xd2\x92\xd4\x17\x9c\xf1\xf0\xa0\x9fZ\x98\xcfj\xe4\xc6\xf1\x18f\xf7L\x95m^\x9c\x95Vq\xcd\xc9#\xbe#\x9a\xd5\xeb1\xbd\b\xday\xb1\xa3P\xad)G\x9bwq\xd3ie', 0x80000002)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_ctl_device_fops_user(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
write$auto(0x3, 0x0, 0x70)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3da7)
r1 = socket(0x2, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x81, 0x0, 0x5)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x20000001, 0x2, 0x3, 0x0)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
sysfs$auto(0x2, 0x44, 0x0)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0x1000000000003, 0x0, 0x0)
read$auto_vga_arb_device_fops_vgaarb(0xffffffffffffffff, &(0x7f0000000080)=""/127, 0x7f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x10000, 0x1)
read$auto(0xffffffffffffffff, 0x0, 0x7)

1m10.188702589s ago: executing program 1 (id=101):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
recvmmsg$auto(0x3, 0x0, 0x4, 0x200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x7, 0x100000000000037, 0x2000000000000)
lsm_list_modules$auto(&(0x7f0000000000)=0x10001, &(0x7f0000000040)=0x5, 0x9)
r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)

1m9.800787565s ago: executing program 1 (id=103):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0)
write$auto(r1, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1)
setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0x6)
keyctl$auto_KEYCTL_SETPERM(0x5, 0xfffffffffffffffb, 0x200, 0x1, 0x100)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x4800)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x8)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4202c3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
r3 = io_uring_setup$auto(0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r5 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0xc4, 0x0, 0xa, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdfffffe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000080}, 0x4000000)
bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_5={@target_fd=r4, r6, 0x4, 0x401, r5, @relative_fd=r6, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@enable_stats={0x6}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0)

1m8.817894766s ago: executing program 1 (id=108):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

1m8.318688053s ago: executing program 1 (id=110):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_intel/parameters/allow_smaller_maxphyaddr\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c928"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x50}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x40000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m7.536978481s ago: executing program 1 (id=114):
mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0x54a}, 0x3)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
socket(0x2, 0x1, 0x84)
pipe$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x560f, r4)
write$auto(0x3, 0x0, 0xfdf3)
shmat$auto(0x200, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x4)
unshare$auto(0x40000080)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xdcfaeb3549df84fd, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
setsockopt$auto(r0, 0x86, 0x73, 0x0, 0xfffffffd)
mmap$auto(0x4000, 0xe983, 0xdf, 0xeb4, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)

52.446395769s ago: executing program 32 (id=114):
mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0x54a}, 0x3)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
socket(0x2, 0x1, 0x84)
pipe$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x560f, r4)
write$auto(0x3, 0x0, 0xfdf3)
shmat$auto(0x200, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x4)
unshare$auto(0x40000080)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xdcfaeb3549df84fd, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
setsockopt$auto(r0, 0x86, 0x73, 0x0, 0xfffffffd)
mmap$auto(0x4000, 0xe983, 0xdf, 0xeb4, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)

27.648960155s ago: executing program 0 (id=269):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
socket(0x2, 0x3, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
eventfd$auto(0x8e)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r1, 0x4020ae76, r2)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = getsockopt$auto(0x3, 0x200000000001, 0x27, 0xfffffffffffffffe, 0x0)
r5 = socketcall$auto(0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r4, 0x7ffe)
r6 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0)
getsockopt$auto_SO_INCOMING_NAPI_ID(r6, 0x5, 0x38, &(0x7f0000000100)=']\x00', &(0x7f0000000140)=0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r7 = io_uring_setup$auto(0x6, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0)
r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0)
getsockopt$auto_SO_PRIORITY(r7, 0x2, 0xc, &(0x7f0000000040)='/dev/kvm\x00', &(0x7f0000000080)=0x2)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_CREATE_VM(r3, 0xc040aed5, 0x0)

27.261031881s ago: executing program 0 (id=270):
sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x8083)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0x1}}})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x100000000000027, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xa, 0x3, 0x81, 0xffffffff, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x52, 0xffffffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x7, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0xffffffff, 0x0)
r0 = socket(0x11, 0x3, 0x9)
pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100)

26.730208423s ago: executing program 0 (id=272):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x709d29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0x88, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800)
r2 = setfsuid$auto(0xee00)
setresuid$auto(0xffffffffffffffff, r2, 0xffffffffffffffff)
msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f00000001c0)={{0xc0f, 0x0, <r3=>0xee00, 0xff, 0x6, 0x7, 0x4}, &(0x7f0000000100)=0xc, &(0x7f0000000140)=0x81, 0x0, 0x8, 0x6679e079, 0x4, 0x1, 0xa24b, 0x101, 0x6b, @inferred, @raw=0x12})
lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x9, 0x7, 0x6b, 0x6, r2, r3, 0x0, 0xeb, 0x1, 0x6, 0x3eb, 0xf, 0x100, 0x0, 0x9, 0x8000000000000001, 0x4})

26.434597992s ago: executing program 0 (id=273):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x10, 0x2, 0xc)
socket(0x2000000000000021, 0x2, 0x10000000000002)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd700001dcdf2503000000040006000c00018008001000040005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd700001dcdf2503000000040006000c00018008001000040005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, 0x0, 0xd, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

26.102798768s ago: executing program 0 (id=274):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400)
prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'})
sendmsg$auto_BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)
r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$auto_IMDELTIMER(r2, 0x80044941, 0x0)
adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9})
sendmmsg$auto(r2, &(0x7f0000000240)={{&(0x7f0000000000)="41a01a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba070da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf3368e739", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0x5, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(r2, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401)
mlock$auto(0xfbe8, 0x4)
syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0)

24.264349904s ago: executing program 0 (id=280):
sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x8083)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0x1}}})
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0)
kexec_load$auto(0x9, 0x1, 0x0, 0x5)
read$auto(0xffffffffffffffff, 0x0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r2, 0xc0104d03, r2)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14881, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x4)
write$auto(0x3, 0x0, 0xfdf3)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83)

13.12934294s ago: executing program 2 (id=312):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1$auto(0x8000000000000000)
epoll_wait$auto(0x5, 0x0, 0x2, 0x100000000)
socket(0x2, 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'})
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x385e82, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
r2 = socket(0xa, 0x5, 0x84)
sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
setns(0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msync$auto(0xe73f, 0x6, 0x1000)

9.516808734s ago: executing program 2 (id=317):
setresgid$auto(0xa05, 0x0, 0x0)
keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/midiC2D2\x00', 0x305302, 0x0)
socket(0x2, 0x3, 0x100)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0xfffffffffffffffd, 0x5, 0x3, 0x2000000000230006, 0x2, 0x7, 0x5, 0x2, 0x7, 0x7, 0x9, 0x2, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff4111]}, 0x1fe, 0x81)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x400001, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xa6\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r\x19\xa6!B\x80Sh\x8f\xd4\xf4\x13-F\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa7\x89\xb9\xfe@m\xfc\xcc0\xf7\xc3\xcc\xdfY\xe2\xf2L\xb1\t\xf6J)g\x9a\x83^.\xe8\xd6\xb6\x95\xd5\x82\xed\x0f\xbfp\"/\x89\x8aRCZL\xc0@\xf9\xd4A\xe9\xd8O\xeeW\xfc\x13\x8c\x9d\x9a\x98Ht\x8f\n\xce\xceb\xce\xf0\x87\xf7\x10\xdc\x00r\x1e\x00\xdc\xa0\xc3-K\xa2\xcaQ\f\xc7a:\xae\xa4p@\x1f\t+uMe\xff\xfbX\xce\xe4\xf6\xb0m\x83\x1a\x89c\xdc\xf5\xe5T\t\\\x90\xbe\x00}\x1eV{\x1c=\xbe', 0x100000e3dc)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4002, 0x0)
mmap$auto(0x0, 0x810004, 0x5, 0x8000000008011, r2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000b40), 0xffffffffffffffff)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
sendmsg$auto_SMC_PNETID_GET(r3, 0x0, 0x200008d4)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x104000000000010e, 0x8, 0x0, 0x20003fe)
pivot_root$auto(0x0, 0x0)

8.565788552s ago: executing program 33 (id=280):
sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x8083)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0x1}}})
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0)
kexec_load$auto(0x9, 0x1, 0x0, 0x5)
read$auto(0xffffffffffffffff, 0x0, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r2, 0xc0104d03, r2)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14881, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x4)
write$auto(0x3, 0x0, 0xfdf3)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83)

8.51425506s ago: executing program 2 (id=326):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000004c0)=""/45, 0x2d)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
lseek$auto(r3, 0x7fd, 0x1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0)
sendfile$auto(0x1, r4, 0x0, 0x400007ffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=<r5=>0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
getcpu$auto(&(0x7f0000001140), 0x0, 0x0)
getsockopt$auto(r1, 0x4, 0x4, &(0x7f0000000040)='/sys/devices/pci0000:00/waiting_for_supplier\x00', &(0x7f0000000180)=0x20000009)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
r6 = ioctl$auto_TUNSETNOCSUM(r5, 0x400454c8, &(0x7f00000001c0)=0x8)
bpf$auto(0x101, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, r6}, 0xf)
socket(0x2, 0x802, 0x1)

8.339654196s ago: executing program 3 (id=320):
mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x141083, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xffffffffffffffff, 0x9, 0x3}, 0x6f4)
init_module$auto(&(0x7f0000000000), 0xfffff, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0xc0305616, 0x38)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0)
ioctl$auto(r0, 0x921064a1, 0x8)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x9, 0x1, @relative_fd=0x2, 0x80}, 0x94)
futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r1)
prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0xfffffffffffffff8, 0x3ff, 0x2, 0x64)
sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ppoll$auto(&(0x7f0000000000)={r1, 0xfffe, 0x8}, 0x4, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x10001}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0)
sendfile$auto(r3, r3, 0x0, 0x200)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r4, 0x6a, 0x4, 0x0, 0x0)

7.829382134s ago: executing program 3 (id=321):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
recvmmsg$auto(0x3, 0x0, 0x4, 0x200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x7, 0x100000000000037, 0x2000000000000)
lsm_list_modules$auto(&(0x7f0000000000)=0x10001, &(0x7f0000000040)=0x5, 0x9)
r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)

6.969392038s ago: executing program 3 (id=323):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/010/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x476, 0x0})
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x6)
socket(0x11, 0x80003, 0x300)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000000)="ca829743eedc3204e707f4ea9c26e70d9f0fe6f065fb0dd46362a2ac11b2dbe0610f5c3550b44de0946b113b4ca8f9757f7301b6d3258e83f319b7d376a38ac243473fb4f83c34024418ca5d26efe2918f277225ce84cf11b64fd32533ffff2322c380945f932805be45927e71ca6f513e1397588751b0120af3f00f41a9d39f49c328e665715f48684c44a8a9ac98c2195866ea8c810f92923cfb6d61e18b66358dbd95ad3bcb5569155f6f7819c4")
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
bind$auto(r1, 0x0, 0x6f)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1938f4e799cc0e09beb23791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)

6.784472576s ago: executing program 2 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff)
recvmmsg$auto(0x3, 0x0, 0x7, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r3 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x54d203, 0x0)
recvfrom$auto(r3, &(0x7f0000000300)="d41109de06cfef0fa6d9b68240deaa809d1f11e5b057d9beddce727cc5289293827b19b492cd85298e9621ac4829e386259747810b5570c2f12b1c96de8963046dc9bbd81fe3a2bf0816d8365c6602710a04c25e92bbf975478f77eda8ede4ab8ac944f757fa989249952fbafb95a5897333e20ffd9b2b5eb48fff14671a6eae4ff0dd0424ae1229c657e43f407797de7a547e07305c0a1d33df1b9d46e568d9f249ed592192622ac1854e3399d81f36bc88371d9253efc7a2fc694df223690eb152", 0x10, 0x5, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, &(0x7f0000000140))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r4, 0x0, 0xc3)

6.090162963s ago: executing program 2 (id=327):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
gettid()
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = clone$auto(0x6, 0x8000000000000001, 0x0, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r1, 0x800, 0x5)
socket(0x2, 0x1, 0x106)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
setresuid$auto(0x60, 0x1000, 0x607)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
bpf$auto(0x5, 0x0, 0x171)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb)
statmount$auto(&(0x7f0000000040)={0xffff, @raw=0x2, 0x6, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9501, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x0, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x7, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x800, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8237735f9d60e3cb50f6712c580dab3d8d1876a632fbe3c7bc8983b2033f3e94ce"}, 0x6, 0x7)
select$auto(0x11, 0x0, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

5.914129425s ago: executing program 3 (id=328):
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone3(&(0x7f0000000440)={0x4840000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x2}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x71, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828848"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
readahead$auto(0xffffffffffffffff, 0x7, 0x0)
mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000900)=""/4096, 0x1000)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae47, 0x10000000000402)
getdents$auto(r4, 0x0, 0x400018)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000e097ed828f3f1228bc6cdf3143bf3217daca275777802d2d9ae4d0c6a99452f9dc2237fb0dbb1a8bf576a181cc61e242581cbfd8df00551fae34ea52bb50f3d8f8ca213a75dafb2228f126", @ANYRES16=r6, @ANYBLOB="00082cbd7000fedbdf252b000000d100fa009738b9c61c5ee2de4f310e7507fd21a2d738ca70ce7146c79c5b96a5a8120d30a8c516d74be4a1c937b043d4d393b325e08cd25115734329959f77301773be4f5d8753d612217438ddaa6452eeb3926665600e3afee7e63343f6c637439f3fd7c870a6c2df4017420db3c9c378ef6bfc21afeb48a376a2423fe4d75a363ed1092a17138856d3f5a816bf271c480dd793087bb836acc8b997b70ba4e6ebfa78210e92883ba8fe7de343b88639ba489a27c85e7a2d17700d351d9534c28b576d9f4459edd96aae2b455ec3d1964a0000000800c3000200000006006d00a8000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8080}, 0xc000010)

5.241332626s ago: executing program 4 (id=329):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
ioctl$auto_FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000080)="d786d318e2f67356a6bd48591c932386d5e8cdb0c7c62c479631cf644777a36a05e2dbcffb909b66cb918c2a30703fa6e9ecceedf37c4a2294f4ec72bb492753ad3494ea98ed13be78e35813c1d49158f6f059a098c54e1c2f064862bed9371fa0a566db5b99c57c5a53f9efbb1dabcba33455268e4ba9be49d6dd8ff5434f8f9b83624ab2fd47caad8170c89448ea0af74c13fafa74bff9667a95fd1f47d098318c6a638b050036f749c57bd0a510b8976e5da62eb4601fb7771a66056eff8c93006df62522f771430d669bd73260a96b2c4a105d388bbdb695f375cf3da39843")
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x6f7250c4)
r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x2800, 0x0)
ioctl$auto_TIOCGDEV2(r3, 0x5429, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)

4.350164s ago: executing program 3 (id=330):
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/duplex\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
socket(0x18, 0xa, 0x1)
socket(0x2, 0x3, 0xa)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
statmount$auto(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x26, 0x10004, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x5, 0x5, 0x4, 0x0, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0xbba, 0x0, 0x80000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff]}, 0x6, 0x1000000)
bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000004c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xb0r\x93\x8d\x9b&C\xa7R\xe1\"\xdb \x19\x02\x11c\xdbWS\x01\xb6\xd8\xba\xeasp\xeaL\xde\xfb`\xc4\x1dDm5\xeeYEq+\x17ZEW\xfb\x8fdJ\aQ\xcc1M\x13k\xd6P\xd27\xf2\xc6E\xad1i\xf7\xab\xc3\'\x1ahq\xb1`E\xe7\xe4[\x00[\xf7gx\xe4\x9bK\xa8\xd7\x8a\x7f\x8a$E\xad5%?\xce~\x01E\x9a\x0f\xa1e]\xc9D\xc5p\xf6L\xef\xd6]\xbb\xc8\x1d\xeb\xef,\xab\x1dHk\x87\x95$\xc1\"\x98I!\x81\b\x9a6\xfa\xda\xf5\xe5l\xd9\x10\f:\x99\x0f\xea\xc4\x03h\xc6y\x1f\xb5f,\xa6*\xa2\"7i\xd0+mr\xd1\'\x9b\xd1\b\xef\xa6\xaa\xa3o\xa0', 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
socket(0xa, 0x2, 0x88)
write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0)
fanotify_init$auto(0x1f53, 0x2000000000002)
open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited\x00', 0xa000, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/vbi17/dev\x00', 0x208183, 0x0)
r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x18a801, 0x0)
ioctl$auto(0x3, 0xc0585609, r3)

4.349403078s ago: executing program 2 (id=331):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
seccomp$auto(0x2, 0x0, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x109442, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x1d)
pwrite64$auto(0xc8, 0x0, 0xfded, 0x6)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)

4.196816854s ago: executing program 4 (id=332):
mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x141083, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xffffffffffffffff, 0x9, 0x3}, 0x6f4)
init_module$auto(&(0x7f0000000000), 0xfffff, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0)
ioctl$auto(0x3, 0xc0305616, 0x38)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0)
ioctl$auto(r0, 0x921064a1, 0x8)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x9, 0x1, @relative_fd=0x2, 0x80}, 0x94)
futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r1)
prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0xfffffffffffffff8, 0x3ff, 0x2, 0x64)
sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ppoll$auto(&(0x7f0000000000)={r1, 0xfffe, 0x8}, 0x4, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x10001}, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0)
sendfile$auto(r3, r3, 0x0, 0x200)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r4, 0x6a, 0x4, 0x0, 0x0)

3.776125783s ago: executing program 4 (id=333):
sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48840}, 0x8083)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0x1}}})
r0 = socket(0x11, 0x3, 0x9)
pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100)

3.067389157s ago: executing program 4 (id=334):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000004c0)=""/45, 0x2d)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
lseek$auto(r3, 0x7fd, 0x1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0)
sendfile$auto(0x1, r4, 0x0, 0x400007ffff000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=<r5=>0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
getcpu$auto(&(0x7f0000001140), 0x0, 0x0)
getsockopt$auto(r1, 0x4, 0x4, &(0x7f0000000040)='/sys/devices/pci0000:00/waiting_for_supplier\x00', &(0x7f0000000180)=0x20000009)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
r6 = ioctl$auto_TUNSETNOCSUM(r5, 0x400454c8, &(0x7f00000001c0)=0x8)
bpf$auto(0x101, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, r6}, 0xf)
socket(0x2, 0x802, 0x1)

1.521744648s ago: executing program 4 (id=335):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x3, 0xffffff2c, 0x10001, 0x0, 0xffffff98}, 0x6, 0x8001, "7558773f8cab0038cec94a366679d5e614d8fa9131d880b065ef33b4eddd5aca37afdda6b3942c1b05a4a746bddaa3c3e9416ff0768df32d020cadf60009e0bb", "f43abe13bd78888829019ad764acf6afa95e59d326d57e6c23c991a60f3d48fd32dbb998b40accadd0101b1617ab98639d7023f36c921c06f88f8ae8c03079ea55f4bd2067c7d292a2e01b6efb274267", 0x7, 0xc, 0x6, 0xbe, 0x1, "2e6f75b7431f004435205e6044494fd9be3657ce398e7ce58a7da9e7f2161bc1"})
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="f9ffffff", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/ext4/sda1/mb_structs_summary\x00', 0x40080, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4138ae84, &(0x7f0000000080)={0xfc})
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x06\b\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2)
r2 = socket$auto(0xc, 0x40008, 0x200)
mmap$auto(0x8000, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0x208400, 0x0)
futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100)
io_uring_setup$auto(0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x2000007)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x3864, r3, 0x4, 0x7ff)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r3, 0x80000000, 0x2)

1.521564436s ago: executing program 3 (id=336):
kcmp$auto_KCMP_FILE(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/194, 0xc2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4000000080}, 0x3)
getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x5, 0x4b, 0x0, 0x0)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000200)={@_si_pad}, 0x9, &(0x7f0000000540)={{0xd, 0x3ff}, {0x8000000000000001}, 0xfffffffffffffffe, 0x81, 0x1840000000000000, 0xa201, 0x6, 0x5, 0x9, 0x2, 0x6, 0x4, 0x2, 0xfff, 0x3, 0x3ff})
prctl$auto(0x39, 0x1ff, r1, 0x404, 0x9)
madvise$auto(0x0, 0x5, 0x19)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioperm$auto(0x3, 0x5, 0x149)
socket(0x1a, 0x4, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
gettid()
rt_sigsuspend$auto(0x0, 0x8)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0)
r2 = socket(0x29, 0x2, 0x0)
select$auto(0x7fff, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x3, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x481, 0x5, 0x7fff, 0x5, 0xfff]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0x9889]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7})
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'})
socket(0x2, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0)
write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)

428.286272ms ago: executing program 5 (id=318):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = io_uring_setup$auto(0x5, 0x0)
close_range$auto(0x2, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x24, 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x71)
getsockopt$auto_SO_TIMESTAMPING_NEW(r1, 0x0, 0x41, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x3)
listen$auto(r2, 0x4)
r3 = accept$auto(0x3, 0x0, 0x0)
mmap$auto(0xf, 0x2, 0xdf, 0x1ff, 0xffffffffffffffff, 0x80000000)
r4 = socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
bind$auto(0x3, 0x0, 0x6a)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r4)
ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x268, r8, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x24c, 0x2, 0x0, 0x1, [@nested={0x248, 0x141, 0x0, 0x1, [@typed={0xf7, 0x2f, 0x0, 0x0, @binary="74552931a765668c2209d9560149a542b824c0a56f5492ef2170f0aef2ad196cee780fa3d2fed60d2bd7c6408fe83a7739ae1383b841e84794a968914d7e21db6cb2e376bffcc6fada0563b5f4ef3f1b3b10ac3c39134bfe1c98234a0159524d9c9ebf014d536e45f9c8e2535dd3ea749a7f764e9e146ff822f41ef0d56780bebe73c1f5ea59efedc58eafbf1d555424735fae4cb4457e0b784f0a36ed3cc7313f75b1e4bb2680e841c4440531670b0f788955d0bd6504d2a65b80c57ae9fdf8a78fb77d62494a263f39a5aa890243cf83394ab5fe2a2d5d37d43f8d646809cbb76f092a02ad95bb9788c4b28b5b033a4161d0"}, @generic="237f8c6db30d46117e3ecde8fa167c41496c086b19af138116d7db2ae5d23d4531d29ecd91c3875aa1c7f4241a0b426cf2e2a31052b21d82d5933038e7ea00022bdae6bd7afe18cd6a12cf21404b8d8f6b4b6424e9d6549fdcd798b8c5b81dd0", @nested={0xa6, 0xe9, 0x0, 0x1, [@nested={0x4, 0x3d}, @typed={0x4, 0x96}, @generic="4b48b710dc0b2519706ee1d5a828f97d55c5459f3fc61cc3510b260ce77c6bcc99b5ad2ff2027f79be0f932ab79e122aaf2198868d60fbbecfa6f7fc50fbab902dfbb63fc0b4ff21d2501b4ac91fdc5482f242eb9903d7022c608f58466156a3ddc471082006058da1632b28f698cf5755d95ff563ed", @nested={0x4, 0x9a}, @nested={0x4, 0xbd}, @typed={0x8, 0xe2, 0x0, 0x0, @u32}, @nested={0x4, 0x13e}, @nested={0x4, 0x66}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x29}]}, @generic="16c3184eb34edd4baac90e7efd1e52da26aa0bf01748e6fa576f39e7f602b1962d398d10f4aef693912954ba796bbfa5", @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@private0}]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x268}}, 0x48010)
newfstatat$auto(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x5, 0x4, 0x7, 0xa7, <r9=>0x0, 0xffffffffffffffff, 0x0, 0x8, 0x7, 0x2, 0x4, 0x1, 0x10, 0x7f, 0x10, 0x6}, 0x3)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002780)={&(0x7f0000000340)={0x93c, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, '/dev/adsp1\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x8fa, 0x4, 0x0, 0x1, [@nested={0xc6, 0x144, 0x0, 0x1, [@typed={0x4, 0x75}, @nested={0x4, 0x68}, @generic="d1506bbd2b1ebe4d19b0d1c0ab9c296454e83f6f917ac6b0097c35d5df5abbc18838f7a7f3b46966c809d12efc3a7a069afe67a71d5567097f060e60e752058afe2f21dd8e61df70ef93aeeebfdb2433f6f4fc2a08eaf6e20011cc4749ac9c02feb7059988773029c0283338878bcccdc09ee6318737f2af18d42604ad6bba937d6dd2f5a7d9c92e8f08d40b3f052e083a9bb7bf59ad99a2501b8622414a", @typed={0xc, 0x40, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x57}, @typed={0xc, 0x1104, 0x0, 0x0, @u64=0x7}]}, @nested={0xff, 0xab, 0x0, 0x1, [@nested={0x4, 0x12}, @nested={0x4, 0x23}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc5, 0x5f, 0x0, 0x1, [@nested={0xc, 0xd5, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x4, 0x62}, @nested={0x89, 0x7a, 0x0, 0x1, [@generic="f02623264019761def91eb2c5fe83476c00dece9a1df1608ffc013974cd7da35b5a3e803e6712eb20aef6047b6c9cb7ef665553be2b99d81f5a06fd8f2bceb0bf754581b66d57a8857422ce900470d09c01b651ecd6c465f36a4b46229d30089d6c136077283bb9895fa9f565dc23d7e828d1f54ee3cbfd2fc7d80028aeab3da8cd9332c25"]}, @typed={0x4, 0x134, 0x0, 0x0, @binary}, @generic="2d7ac27adb90a50856ce1a9f2192ff32136acaca0452f8e1b7", @typed={0x8, 0x102, 0x0, 0x0, @pid}]}, @typed={0x8, 0xd0, 0x0, 0x0, @fd}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0xf}, @nested={0x4, 0x90}, @generic="79d31828245d1d", @nested={0x4, 0x54}]}, @nested={0x6bc, 0x3c, 0x0, 0x1, [@nested={0x6a0, 0x136, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x4, 0xcc}, @typed={0x8, 0x133, 0x0, 0x0, @uid=r9}]}, @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xbd, 0xe6, 0x0, 0x1, [@generic="b38499543bec3dea8b12b80f3077f9f22bc61942792b418759ed670a60e7e900ecb2425328252f72a236b41fad6a700f20490bb4697a40a0d166fa10e78e233c0ee97f4be5c2b8256034009d9e7b887174e4637bc72bea63f27905d6c03e953e03dfefe046af77d88164c6b0da59880026a21f3b1cfb8447796ae3019ff104046750463954ad0be007d53760dbe93248bf31fbcba35782ec79b469dd911f8ada98c92592df894c4302cd8ca28f970470a656137b139044ee39"]}, @nested={0x28, 0x39, 0x0, 0x1, [@nested={0x24, 0x134, 0x0, 0x1, [@nested={0x20, 0x3f, 0x0, 0x1, [@typed={0x14, 0x146, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}]}]}]}, @nested={0x4, 0x39}, @generic="5348880f3ab56a294e3e9fa3015867003f1040a26e841c32639a2374206d32b1a14267cde61a818f798ee9d1af5f07dbf8a2e3c7362b72027bd61eb92b048ea00fdf5e39aaf9da94eada774bec69438c20fc5e86ce08e55efc34c89c74e3b60614b92d17192c6236c88dd3885c7352df313beb496c7258140e99596c171647e4c96062c57568ece28b7454cd15e68a77897f148f86c5bd476ec21fb93dc31d720f62de77480079530225de1b5eb5a988862d2f7b67c1414f46f285b52e47fe39d311296b746c1298f41d12c71a5c43e96937ecf50649040a62dc417ea9de3d4f9b971aa193bb350121dcd12c", @nested={0x5c, 0x2b, 0x0, 0x1, [@nested={0x56, 0x180, 0x0, 0x1, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x6a}, @generic="a7181e9a9a8e9d6f3c316fb63ea9fabbe21891bc36a3cac8ccc7467f5f06c88f111439506d8eb9b5e15c2cca4008426b2004afe90c703557bafd"]}]}, @nested={0x444, 0x130, 0x0, 0x1, [@nested={0x41d, 0x11a, 0x0, 0x1, [@typed={0x7, 0x28, 0x0, 0x0, @str='$:\x00'}, @nested={0x18e, 0x32, 0x0, 0x1, [@nested={0x4, 0x5a}, @generic="c57c008ee0fe586480addd97673dfbdced8a88c1bac7fd0a439c7e91fca7d21c8d2d149b68c48c6d241adfbcd85738b27839dcfbcaed62341cdc2257e1a6c9fd46aed216fed7bb8330505f76811622d34e09932c446bd4710d84b8211bdc71d5dde4cb7dc29440f5feda16e4ecb5cbc8bd8544f2d7e6b11ff34623b5d4bc4d334b56b0f06018067d125ef2a3289526688bbba096dea7bebc79eebe77ec574ec4232c360a954d51bae5fd9574c27cfc67e81ac6296a13fa46f6f2c13923654629c00feccfb95d01b6e6069f370d61", @generic="e2ac41f7c92a2425c15f28381e1885abbb898c17c47c0316ebe2aae3938701142e2e0c48df5a64fd939a97118c56d809d0c9b1b389b262dabdca1ac2adcebfec17562738ecef", @generic="a73506a124f2df9f20b5fb47d8f1b83a2f10bb51624c884cd396f847aa26c5129fd6876ded85c0d93ff44531e30a50759e9b81f7a58de104dae2a0c0b3272d182524d0ed42379ec6e43ce2b924ccd685d07879a3b7243fe1ad3a5612420f8b03a29111791494", @typed={0x9, 0x10, 0x0, 0x0, @str='+,\'&\x00'}]}, @generic="ec24d553cc3c8b935301830d88c67563e9a9f2794fdfbbfed514aa8a8a8a19af5bbfa7e4bcaeb3be7769dce4847fae71782117bd74e0cc81e418271457705e8bf0b1995d68e5eac40a3db8528958a4c03cb60d9a98c28b452cc9b4805a5c77bb062c1b1c2b5b5c0c92a4d719fc36129d2dd9", @typed={0x8, 0x42, 0x0, 0x0, @uid=r9}, @nested={0xc, 0x123, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="f33de409c036cd8de12223c31e5bc9af58f3bdc489c06e3dea43c56a09e193bbe1f82533d50baf8d61cbca30c126889e03dfc368695517cc1f4cc04452537d15ffe280662a6ac07be84a2b8dce13d245778f47a114a05e692f82b48659cd524778ebfaad0e8750312de650b87b80511abfa1ae98180b239feaf99b5347b426b50d8fd4bad8ebf996405653d735a0b27ecb6ecea7059a1eb1a0d1b2f9c8291177d67b5ede", @generic="4faa7ed9e9469147770527a163b2c9b4a5a9d81dc7ed73c1a2e7ea7d7142c23e76fd57c360d5cd55852f26a152fe54defb7e435fd2ac19a8c6a03536f3216473298d0d1b2d153c8aa72b4ba6e932a9a6e0626cefaae27dafd46d42dbfc267a30972cbd17f333de0057844ea1e19d5acddf1938fb2d94e80d7c380a55978153da30eab903b2826008cca7d067d29a7d41b62e86bea9d0e2dc84e6dcd17ca29966d21e8298489126ea765da9094578c94148e9d5cfec660d0817765b", @typed={0x99, 0x10e, 0x0, 0x0, @binary="8a33b0f3072b1328c633ab201f701eef7f60bc33d3e46d851ee8839c43a11eda35f4ef7dc74f9f60be7b7c0b0f55eb8aaeb029df9150a74bad8d24d667e07cad3510ca41ef523986b88fed7fcd15f0c50d1ce513b490bbf56536d73d6b1f3b0671e0ec1081a3e95285ec4dc90117071f207db21234e3e419bbdb38627a2cb4d8f3c3d71da76db71a0b4879cb9aec980bdeae99f28c"}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x3ff}]}, @typed={0x8, 0x37, 0x0, 0x0, @uid}]}, @typed={0x7, 0x78, 0x0, 0x0, @str='}+\x00'}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r5}]}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0xb}, @generic="78679f385b787ae7d70adc", @typed={0xf, 0x141, 0x0, 0x0, @str='/dev/adsp1\x00'}, @generic="34dbb4a18fb580bda46a26cb741baeb66648b73e16593e6280ab1f493bdceced1b1cb8e704a055f6ba30c848e10359186bdac20f914fc3e87ed1e9d944940d1af2861a7aa210570710731e24a2b60c"]}, @OVS_VPORT_ATTR_UPCALL_STATS={0x4, 0xa, 0x0, 0x1, [@generic]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xa}, @OVS_VPORT_ATTR_NETNSID={0x8}]}, 0x93c}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0)
connect$auto(0x3, 0x0, 0x55)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x29, 0x5, 0x0)

0s ago: executing program 4 (id=337):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x30, 0x2, 0x4)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x29, 0x5, 0x0)
r1 = open(&(0x7f0000000080)='./cgroup\x00', 0x0, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6)
sendfile$auto(r0, r0, 0x0, 0x2)
socket(0x2, 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyt1\x00', 0x129203, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x2, 0x3, 0x0, 0x0, 0x4)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_clone3(&(0x7f0000000640)={0x80000000, 0x0, 0x0, 0x0, {0x4000015}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x81}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})

kernel console output (not intermixed with test programs):

aving as an active interface with an up link
[   87.940627][ T5839] team0: Port device team_slave_0 added
[   87.957300][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.977220][ T5839] team0: Port device team_slave_1 added
[   87.995273][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.025313][ T5837] team0: Port device team_slave_0 added
[   88.044420][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.051723][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.059119][ T5836] bridge_slave_0: entered allmulticast mode
[   88.066103][ T5836] bridge_slave_0: entered promiscuous mode
[   88.093419][ T5837] team0: Port device team_slave_1 added
[   88.110934][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.118235][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.125377][ T5836] bridge_slave_1: entered allmulticast mode
[   88.133642][ T5836] bridge_slave_1: entered promiscuous mode
[   88.141309][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.148309][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.174580][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.196879][ T5835] team0: Port device team_slave_0 added
[   88.213424][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.220417][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.246630][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.276950][ T5835] team0: Port device team_slave_1 added
[   88.296129][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.306891][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.314164][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.340465][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.364283][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.374251][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.381451][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.407527][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.458905][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.465866][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.491917][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.526115][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.533497][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.559866][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.577749][ T5839] hsr_slave_0: entered promiscuous mode
[   88.584347][ T5839] hsr_slave_1: entered promiscuous mode
[   88.592922][ T5836] team0: Port device team_slave_0 added
[   88.610586][ T5836] team0: Port device team_slave_1 added
[   88.648945][ T5842] Bluetooth: hci3: command tx timeout
[   88.679158][ T5837] hsr_slave_0: entered promiscuous mode
[   88.685402][ T5837] hsr_slave_1: entered promiscuous mode
[   88.691907][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   88.697696][ T5837] Cannot create hsr debugfs directory
[   88.728370][ T5841] Bluetooth: hci1: command tx timeout
[   88.728774][ T5853] Bluetooth: hci0: command tx timeout
[   88.740448][ T5842] Bluetooth: hci2: command tx timeout
[   88.752629][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.759629][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.785832][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.812398][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.819441][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.845449][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.861460][ T5835] hsr_slave_0: entered promiscuous mode
[   88.867826][ T5835] hsr_slave_1: entered promiscuous mode
[   88.874777][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   88.880629][ T5835] Cannot create hsr debugfs directory
[   89.027686][ T5836] hsr_slave_0: entered promiscuous mode
[   89.034146][ T5836] hsr_slave_1: entered promiscuous mode
[   89.040491][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   89.046218][ T5836] Cannot create hsr debugfs directory
[   89.355118][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.383181][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.411905][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.429711][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.480738][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.494990][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.522386][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.544771][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.606568][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.624189][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.640850][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.664049][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.760274][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.780193][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.791921][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.806681][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.862570][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.912154][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   89.946357][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.953709][ T3882] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.975720][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.998089][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.005203][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.056316][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   90.094247][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.101398][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.126727][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.141995][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.149132][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.191137][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.234465][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   90.264122][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   90.294024][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.301209][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.330111][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.337311][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.365813][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.373392][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.402731][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.409870][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.481215][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.682995][ T5839] veth0_vlan: entered promiscuous mode
[   90.721306][ T5839] veth1_vlan: entered promiscuous mode
[   90.732243][ T5853] Bluetooth: hci3: command tx timeout
[   90.808750][ T5842] Bluetooth: hci0: command tx timeout
[   90.809540][ T5841] Bluetooth: hci2: command tx timeout
[   90.814243][ T5853] Bluetooth: hci1: command tx timeout
[   90.847537][ T5839] veth0_macvtap: entered promiscuous mode
[   90.881088][ T5839] veth1_macvtap: entered promiscuous mode
[   90.930572][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.949650][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.996105][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.022092][ T4392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.042714][ T4392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.060372][ T4392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.072127][ T4392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.134532][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.163229][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.179486][ T5837] veth0_vlan: entered promiscuous mode
[   91.243831][ T5837] veth1_vlan: entered promiscuous mode
[   91.259308][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.267287][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.277684][ T5837] veth0_macvtap: entered promiscuous mode
[   91.334128][ T5837] veth1_macvtap: entered promiscuous mode
[   91.349871][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.359038][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.376044][ T5836] veth0_vlan: entered promiscuous mode
[   91.404361][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.430452][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.440582][ T5836] veth1_vlan: entered promiscuous mode
[   91.453611][ T5835] veth0_vlan: entered promiscuous mode
[   91.466194][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.483020][ T4392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.495319][ T4392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.517936][ T4392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.535985][ T4392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.563165][ T5835] veth1_vlan: entered promiscuous mode
[   91.651762][ T5836] veth0_macvtap: entered promiscuous mode
[   91.705805][ T5836] veth1_macvtap: entered promiscuous mode
[   91.743700][ T5835] veth0_macvtap: entered promiscuous mode
[   91.790034][ T5835] veth1_macvtap: entered promiscuous mode
[   91.802400][ T3921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.816873][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.821024][ T3921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.872570][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.884426][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.896046][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.937878][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.950200][   T50] cfg80211: failed to load regulatory.db
[   91.963422][ T3464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.963440][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.994710][ T3464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.011024][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.020099][ T3464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.039092][ T3464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.081647][ T3464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.092421][ T3464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.106695][ T3464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.133526][ T3464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.230177][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.258109][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.360812][ T5939] hub 1-0:1.0: USB hub found
[   92.387341][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.396187][ T5939] hub 1-0:1.0: 1 port detected
[   92.416611][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.452112][ T5936] hub 1-0:1.0: USB hub found
[   92.457550][ T5936] hub 1-0:1.0: 1 port detected
[   92.466809][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.481905][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.562966][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.584251][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.812120][ T5853] Bluetooth: hci3: command tx timeout
[   92.888456][ T5853] Bluetooth: hci2: command tx timeout
[   92.888491][ T5841] Bluetooth: hci1: command tx timeout
[   92.893906][ T5842] Bluetooth: hci0: command tx timeout
[   92.924637][ T5946] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[   93.268723][ T5956] mmap: syz.0.7 (5956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   93.458888][ T5964] =======================================================
[   93.458888][ T5964] WARNING: The mand mount option has been deprecated and
[   93.458888][ T5964]          and is ignored by this kernel. Remove the mand
[   93.458888][ T5964]          option from the mount to silence this warning.
[   93.458888][ T5964] =======================================================
[   93.708714][ T5960] zswap: compressor  not available
[   93.942583][ T5960] FAULT_INJECTION: forcing a failure.
[   93.942583][ T5960] name failslab, interval 1, probability 0, space 0, times 1
[   93.986494][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) 
[   93.986530][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   93.986553][ T5960] Call Trace:
[   93.986562][ T5960]  <TASK>
[   93.986572][ T5960]  dump_stack_lvl+0x16c/0x1f0
[   93.986617][ T5960]  should_fail_ex+0x512/0x640
[   93.986652][ T5960]  ? fs_reclaim_acquire+0xae/0x150
[   93.986680][ T5960]  should_failslab+0xc2/0x120
[   93.986707][ T5960]  kmem_cache_alloc_noprof+0x75/0x760
[   93.986738][ T5960]  ? __pfx_map_id_range_down+0x10/0x10
[   93.986774][ T5960]  ? security_inode_alloc+0x3b/0x2b0
[   93.986815][ T5960]  ? security_inode_alloc+0x3b/0x2b0
[   93.986848][ T5960]  security_inode_alloc+0x3b/0x2b0
[   93.986883][ T5960]  inode_init_always_gfp+0xced/0x1040
[   93.986928][ T5960]  alloc_inode+0x86/0x240
[   93.986960][ T5960]  new_inode+0x22/0x1c0
[   93.986994][ T5960]  debugfs_create_symlink+0xd3/0x320
[   93.987034][ T5960]  ref_tracker_dir_symlink+0x255/0x360
[   93.987073][ T5960]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[   93.987110][ T5960]  ? __lock_acquire+0x433/0x22f0
[   93.987171][ T5960]  ? __lock_acquire+0x433/0x22f0
[   93.987197][ T5960]  ? crng_make_state+0x48e/0x6c0
[   93.987237][ T5960]  ? __pfx_net_ns_net_init+0x10/0x10
[   93.987264][ T5960]  net_ns_net_init+0xd2/0x120
[   93.987289][ T5960]  ops_init+0x1e2/0x5f0
[   93.987315][ T5960]  setup_net+0x11d/0x3a0
[   93.987341][ T5960]  ? __pfx_setup_net+0x10/0x10
[   93.987364][ T5960]  ? lockdep_init_map_type+0x5c/0x270
[   93.987392][ T5960]  ? mutex_init_lockep+0x110/0x150
[   93.987423][ T5960]  copy_net_ns+0x351/0x5d0
[   93.987452][ T5960]  create_new_namespaces+0x3ea/0xab0
[   93.987495][ T5960]  unshare_nsproxy_namespaces+0xc0/0x1f0
[   93.987535][ T5960]  ksys_unshare+0x45b/0xa40
[   93.987557][ T5960]  ? __pfx_ksys_unshare+0x10/0x10
[   93.987579][ T5960]  ? xfd_validate_state+0x61/0x180
[   93.987620][ T5960]  __x64_sys_unshare+0x31/0x40
[   93.987642][ T5960]  do_syscall_64+0xcd/0xf80
[   93.987677][ T5960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.987701][ T5960] RIP: 0033:0x7f2bfd58f7c9
[   93.987730][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.987755][ T5960] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   93.987779][ T5960] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[   93.987797][ T5960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[   93.987812][ T5960] RBP: 00007f2bfd613f91 R08: 0000000000000000 R09: 0000000000000000
[   93.987828][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.987843][ T5960] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[   93.987880][ T5960]  </TASK>
[   93.987943][ T5960] debugfs: out of free dentries, can not create symlink 'netns-25-4026533711-notrefcnt'
[   94.725029][ T5984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   94.735899][ T5986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   94.888437][ T5841] Bluetooth: hci3: command tx timeout
[   94.969542][ T5841] Bluetooth: hci1: command tx timeout
[   94.975016][ T5842] Bluetooth: hci0: command tx timeout
[   94.980551][ T5853] Bluetooth: hci2: command tx timeout
[   95.432244][ T6001] input: f¬
 as /devices/virtual/input/input6
[   95.568521][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.575616][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.096513][ T6009] Zero length message leads to an empty skb
[   96.736242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.869711][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.889019][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.961146][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.972861][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   96.982833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.212763][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.388827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.590532][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.823945][ T6053] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET)
[   98.388570][ T6069] random: crng reseeded on system resumption
[   99.358562][ T6084] zswap: compressor  not available
[   99.383654][ T6086] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead.
[   99.856268][ T6104] Invalid ELF header magic: != ELF
[  100.489589][ T5842] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  102.886883][ T6163] process 'syz.3.52' launched ':,' with NULL argv: empty string added
[  102.955552][ T6170] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  103.016837][ T6164] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  105.068560][ T6217] FAULT_INJECTION: forcing a failure.
[  105.068560][ T6217] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  105.128187][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) 
[  105.128230][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  105.128244][ T6217] Call Trace:
[  105.128252][ T6217]  <TASK>
[  105.128262][ T6217]  dump_stack_lvl+0x16c/0x1f0
[  105.128303][ T6217]  should_fail_ex+0x512/0x640
[  105.128342][ T6217]  should_fail_alloc_page+0xe7/0x130
[  105.128369][ T6217]  prepare_alloc_pages+0x3c2/0x610
[  105.128401][ T6217]  __alloc_frozen_pages_noprof+0x18b/0x2440
[  105.128432][ T6217]  ? mark_held_locks+0x49/0x80
[  105.128457][ T6217]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  105.128490][ T6217]  ? lockdep_hardirqs_on+0x7c/0x110
[  105.128524][ T6217]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  105.128554][ T6217]  ? stack_depot_save_flags+0x3de/0x9b0
[  105.128596][ T6217]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  105.128625][ T6217]  ? __kasan_kmalloc+0xaa/0xb0
[  105.128659][ T6217]  ? write_ldt+0x852/0xd20
[  105.128684][ T6217]  ? do_syscall_64+0xcd/0xf80
[  105.128715][ T6217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.128761][ T6217]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  105.128803][ T6217]  ? policy_nodemask+0xea/0x4e0
[  105.128829][ T6217]  alloc_pages_mpol+0x1fb/0x550
[  105.128855][ T6217]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  105.128890][ T6217]  alloc_pages_noprof+0x12d/0x180
[  105.128915][ T6217]  get_zeroed_page_noprof+0x18/0xb0
[  105.128953][ T6217]  alloc_ldt_struct+0x9f/0x1a0
[  105.128980][ T6217]  write_ldt+0x852/0xd20
[  105.129015][ T6217]  ? __pfx_write_ldt+0x10/0x10
[  105.129050][ T6217]  ? __pfx___do_sys_prctl+0x10/0x10
[  105.129087][ T6217]  __x64_sys_modify_ldt+0xb1/0x170
[  105.129115][ T6217]  do_syscall_64+0xcd/0xf80
[  105.129149][ T6217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.129173][ T6217] RIP: 0033:0x7faa0df8f7c9
[  105.129195][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.129224][ T6217] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  105.129246][ T6217] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  105.129262][ T6217] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001
[  105.129276][ T6217] RBP: 00007faa0e013f91 R08: 0000000000000000 R09: 0000000000000000
[  105.129289][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.129302][ T6217] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  105.129338][ T6217]  </TASK>
[  105.753236][ T6217] nbd: illegal input index -560326505
[  106.928462][ T6241] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  108.328897][ T6274] misc userio: No port type given on /dev/userio
[  108.376142][ T6274] misc userio: No port type given on /dev/userio
[  108.435633][ T6274] misc userio: No port type given on /dev/userio
[  108.502666][ T6274] misc userio: No port type given on /dev/userio
[  108.539383][ T6282] FAULT_INJECTION: forcing a failure.
[  108.539383][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  108.579044][ T6274] misc userio: No port type given on /dev/userio
[  108.597954][ T6274] misc userio: No port type given on /dev/userio
[  108.624389][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) 
[  108.624421][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  108.624434][ T6282] Call Trace:
[  108.624441][ T6282]  <TASK>
[  108.624450][ T6282]  dump_stack_lvl+0x16c/0x1f0
[  108.624486][ T6282]  should_fail_ex+0x512/0x640
[  108.624525][ T6282]  _copy_from_user+0x2e/0xd0
[  108.624558][ T6282]  copy_msghdr_from_user+0x98/0x160
[  108.624596][ T6282]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  108.624637][ T6282]  ? __pfx__kstrtoull+0x10/0x10
[  108.624666][ T6282]  ___sys_sendmsg+0xfe/0x1d0
[  108.624704][ T6282]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.624757][ T6282]  ? find_held_lock+0x2b/0x80
[  108.624812][ T6282]  __sys_sendmmsg+0x200/0x420
[  108.624840][ T6282]  ? __pfx___sys_sendmmsg+0x10/0x10
[  108.624875][ T6282]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  108.624927][ T6282]  ? fput+0x70/0xf0
[  108.624952][ T6282]  ? ksys_write+0x1ac/0x250
[  108.624986][ T6282]  ? __pfx_ksys_write+0x10/0x10
[  108.625026][ T6282]  __x64_sys_sendmmsg+0x9c/0x100
[  108.625047][ T6282]  ? lockdep_hardirqs_on+0x7c/0x110
[  108.625075][ T6282]  do_syscall_64+0xcd/0xf80
[  108.625106][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.625127][ T6282] RIP: 0033:0x7faa0df8f7c9
[  108.625151][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.625171][ T6282] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  108.625194][ T6282] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  108.625210][ T6282] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  108.625225][ T6282] RBP: 00007faa0ee40090 R08: 0000000000000000 R09: 0000000000000000
[  108.625239][ T6282] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  108.625253][ T6282] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  108.625288][ T6282]  </TASK>
[  108.626310][ T6274] misc userio: No port type given on /dev/userio
[  108.982605][ T6289] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  109.389547][ T6300] FAULT_INJECTION: forcing a failure.
[  109.389547][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.404669][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) 
[  109.404700][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  109.404714][ T6300] Call Trace:
[  109.404721][ T6300]  <TASK>
[  109.404731][ T6300]  dump_stack_lvl+0x16c/0x1f0
[  109.404766][ T6300]  should_fail_ex+0x512/0x640
[  109.404804][ T6300]  _copy_from_iter+0x43b/0x16c0
[  109.404845][ T6300]  ? __pfx__copy_from_iter+0x10/0x10
[  109.404880][ T6300]  ? find_held_lock+0x2b/0x80
[  109.404914][ T6300]  ? is_bpf_text_address+0x8a/0x1a0
[  109.404945][ T6300]  ? bpf_ksym_find+0x124/0x1c0
[  109.404974][ T6300]  tun_get_user+0x3c7/0x3cc0
[  109.405014][ T6300]  ? __pfx_tun_get_user+0x10/0x10
[  109.405039][ T6300]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  109.405085][ T6300]  ? find_held_lock+0x2b/0x80
[  109.405125][ T6300]  ? tun_get+0x191/0x370
[  109.405168][ T6300]  tun_chr_write_iter+0xdc/0x210
[  109.405194][ T6300]  do_iter_readv_writev+0x662/0x9e0
[  109.405231][ T6300]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  109.405263][ T6300]  ? common_file_perm+0x1b1/0x500
[  109.405302][ T6300]  ? bpf_lsm_file_permission+0x9/0x10
[  109.405329][ T6300]  ? security_file_permission+0x71/0x210
[  109.405353][ T6300]  ? rw_verify_area+0xcf/0x6c0
[  109.405388][ T6300]  vfs_writev+0x35f/0xde0
[  109.405420][ T6300]  ? proc_fail_nth_write+0x9f/0x220
[  109.405459][ T6300]  ? __pfx_vfs_writev+0x10/0x10
[  109.405517][ T6300]  ? __fget_files+0x20e/0x3c0
[  109.405548][ T6300]  ? __fget_files+0x140/0x3c0
[  109.405595][ T6300]  ? do_writev+0x132/0x340
[  109.405624][ T6300]  do_writev+0x132/0x340
[  109.405664][ T6300]  ? __pfx_do_writev+0x10/0x10
[  109.405707][ T6300]  do_syscall_64+0xcd/0xf80
[  109.405741][ T6300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.405765][ T6300] RIP: 0033:0x7f0fda98f7c9
[  109.405784][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.405805][ T6300] RSP: 002b:00007f0fdb89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  109.405833][ T6300] RAX: ffffffffffffffda RBX: 00007f0fdabe5fa0 RCX: 00007f0fda98f7c9
[  109.405849][ T6300] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  109.405863][ T6300] RBP: 00007f0fdb89c090 R08: 0000000000000000 R09: 0000000000000000
[  109.405877][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.405891][ T6300] R13: 00007f0fdabe6038 R14: 00007f0fdabe5fa0 R15: 00007ffedfc12b88
[  109.405926][ T6300]  </TASK>
[  109.951858][ T6306] bond0: invalid ARP target specified
[  110.811083][ T6331] FAULT_INJECTION: forcing a failure.
[  110.811083][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.824613][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(full) 
[  110.824645][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  110.824666][ T6331] Call Trace:
[  110.824674][ T6331]  <TASK>
[  110.824683][ T6331]  dump_stack_lvl+0x16c/0x1f0
[  110.824719][ T6331]  should_fail_ex+0x512/0x640
[  110.824755][ T6331]  _copy_from_user+0x2e/0xd0
[  110.824789][ T6331]  move_addr_to_kernel+0x65/0x170
[  110.824820][ T6331]  __copy_msghdr+0x386/0x470
[  110.824853][ T6331]  copy_msghdr_from_user+0xc1/0x160
[  110.824886][ T6331]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  110.824929][ T6331]  ? __pfx__kstrtoull+0x10/0x10
[  110.824958][ T6331]  ___sys_sendmsg+0xfe/0x1d0
[  110.824990][ T6331]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.825036][ T6331]  ? find_held_lock+0x2b/0x80
[  110.825087][ T6331]  __sys_sendmmsg+0x200/0x420
[  110.825112][ T6331]  ? __pfx___sys_sendmmsg+0x10/0x10
[  110.825143][ T6331]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  110.825190][ T6331]  ? fput+0x70/0xf0
[  110.825213][ T6331]  ? ksys_write+0x1ac/0x250
[  110.825246][ T6331]  ? __pfx_ksys_write+0x10/0x10
[  110.825285][ T6331]  __x64_sys_sendmmsg+0x9c/0x100
[  110.825307][ T6331]  ? lockdep_hardirqs_on+0x7c/0x110
[  110.825336][ T6331]  do_syscall_64+0xcd/0xf80
[  110.825369][ T6331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.825390][ T6331] RIP: 0033:0x7f482e58f7c9
[  110.825408][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.825427][ T6331] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  110.825449][ T6331] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  110.825465][ T6331] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  110.825479][ T6331] RBP: 00007f482f4cd090 R08: 0000000000000000 R09: 0000000000000000
[  110.825493][ T6331] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  110.825506][ T6331] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  110.825542][ T6331]  </TASK>
[  111.865236][ T6345] FAULT_INJECTION: forcing a failure.
[  111.865236][ T6345] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  111.886939][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) 
[  111.886972][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.886985][ T6345] Call Trace:
[  111.886994][ T6345]  <TASK>
[  111.887003][ T6345]  dump_stack_lvl+0x16c/0x1f0
[  111.887041][ T6345]  should_fail_ex+0x512/0x640
[  111.887077][ T6345]  should_fail_alloc_page+0xe7/0x130
[  111.887102][ T6345]  prepare_alloc_pages+0x3c2/0x610
[  111.887131][ T6345]  __alloc_frozen_pages_noprof+0x18b/0x2440
[  111.887167][ T6345]  ? __lock_acquire+0x433/0x22f0
[  111.887202][ T6345]  ? __lock_acquire+0x433/0x22f0
[  111.887228][ T6345]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  111.887271][ T6345]  ? find_held_lock+0x2b/0x80
[  111.887305][ T6345]  ? is_bpf_text_address+0x8a/0x1a0
[  111.887344][ T6345]  ? bpf_ksym_find+0x124/0x1c0
[  111.887368][ T6345]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  111.887407][ T6345]  ? policy_nodemask+0xea/0x4e0
[  111.887433][ T6345]  alloc_pages_mpol+0x1fb/0x550
[  111.887458][ T6345]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  111.887491][ T6345]  alloc_pages_noprof+0x12d/0x180
[  111.887516][ T6345]  __pmd_alloc+0x3b/0x8b0
[  111.887556][ T6345]  __handle_mm_fault+0xa77/0x2ad0
[  111.887591][ T6345]  ? __pfx___handle_mm_fault+0x10/0x10
[  111.887638][ T6345]  ? find_vma+0xbf/0x140
[  111.887669][ T6345]  ? __pfx_find_vma+0x10/0x10
[  111.887709][ T6345]  handle_mm_fault+0x3fe/0xad0
[  111.887742][ T6345]  do_user_addr_fault+0x2e4/0xda0
[  111.887772][ T6345]  ? rcu_is_watching+0x12/0xc0
[  111.887811][ T6345]  exc_page_fault+0x64/0xc0
[  111.887843][ T6345]  asm_exc_page_fault+0x26/0x30
[  111.887866][ T6345] RIP: 0010:rep_movs_alternative+0x30/0x90
[  111.887891][ T6345] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  111.887912][ T6345] RSP: 0018:ffffc90003fff7e8 EFLAGS: 00050202
[  111.887932][ T6345] RAX: 0000000000000001 RBX: 000000000000000a RCX: 000000000000000a
[  111.887946][ T6345] RDX: fffff520007fff4d RSI: 0000000000000000 RDI: ffffc90003fffa58
[  111.887961][ T6345] RBP: 000000000000000a R08: 0000000000000001 R09: fffff520007fff4c
[  111.887975][ T6345] R10: ffffc90003fffa61 R11: 00000000ffffffff R12: ffffc90003fffd70
[  111.887990][ T6345] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90003fffd78
[  111.888019][ T6345]  _copy_from_iter+0x495/0x16c0
[  111.888059][ T6345]  ? __pfx__copy_from_iter+0x10/0x10
[  111.888094][ T6345]  ? find_held_lock+0x2b/0x80
[  111.888127][ T6345]  ? is_bpf_text_address+0x8a/0x1a0
[  111.888155][ T6345]  ? bpf_ksym_find+0x124/0x1c0
[  111.888183][ T6345]  tun_get_user+0x3c7/0x3cc0
[  111.888224][ T6345]  ? __pfx_tun_get_user+0x10/0x10
[  111.888248][ T6345]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  111.888293][ T6345]  ? find_held_lock+0x2b/0x80
[  111.888332][ T6345]  ? tun_get+0x191/0x370
[  111.888373][ T6345]  tun_chr_write_iter+0xdc/0x210
[  111.888400][ T6345]  do_iter_readv_writev+0x662/0x9e0
[  111.888437][ T6345]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  111.888470][ T6345]  ? common_file_perm+0x1b1/0x500
[  111.888509][ T6345]  ? bpf_lsm_file_permission+0x9/0x10
[  111.888537][ T6345]  ? security_file_permission+0x71/0x210
[  111.888562][ T6345]  ? rw_verify_area+0xcf/0x6c0
[  111.888596][ T6345]  vfs_writev+0x35f/0xde0
[  111.888629][ T6345]  ? proc_fail_nth_write+0x9f/0x220
[  111.888664][ T6345]  ? __pfx_vfs_writev+0x10/0x10
[  111.888723][ T6345]  ? __fget_files+0x20e/0x3c0
[  111.888755][ T6345]  ? __fget_files+0x140/0x3c0
[  111.888798][ T6345]  ? do_writev+0x132/0x340
[  111.888828][ T6345]  do_writev+0x132/0x340
[  111.888861][ T6345]  ? __pfx_do_writev+0x10/0x10
[  111.888905][ T6345]  do_syscall_64+0xcd/0xf80
[  111.888939][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.888962][ T6345] RIP: 0033:0x7f2bfd58f7c9
[  111.888981][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.889002][ T6345] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  111.889023][ T6345] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[  111.889039][ T6345] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  111.889053][ T6345] RBP: 00007f2bfb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  111.889068][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.889082][ T6345] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[  111.889118][ T6345]  </TASK>
[  113.415016][ T6361] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  113.608590][ T6370] FAULT_INJECTION: forcing a failure.
[  113.608590][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.686900][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) 
[  113.686934][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.686948][ T6370] Call Trace:
[  113.686956][ T6370]  <TASK>
[  113.686966][ T6370]  dump_stack_lvl+0x16c/0x1f0
[  113.687003][ T6370]  should_fail_ex+0x512/0x640
[  113.687042][ T6370]  _copy_from_user+0x2e/0xd0
[  113.687076][ T6370]  ____sys_sendmsg+0x607/0xc30
[  113.687109][ T6370]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.687144][ T6370]  ? __pfx__kstrtoull+0x10/0x10
[  113.687176][ T6370]  ___sys_sendmsg+0x134/0x1d0
[  113.687216][ T6370]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.687269][ T6370]  ? find_held_lock+0x2b/0x80
[  113.687325][ T6370]  __sys_sendmmsg+0x200/0x420
[  113.687361][ T6370]  ? __pfx___sys_sendmmsg+0x10/0x10
[  113.687396][ T6370]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  113.687444][ T6370]  ? fput+0x70/0xf0
[  113.687471][ T6370]  ? ksys_write+0x1ac/0x250
[  113.687505][ T6370]  ? __pfx_ksys_write+0x10/0x10
[  113.687546][ T6370]  __x64_sys_sendmmsg+0x9c/0x100
[  113.687569][ T6370]  ? lockdep_hardirqs_on+0x7c/0x110
[  113.687601][ T6370]  do_syscall_64+0xcd/0xf80
[  113.687635][ T6370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.687659][ T6370] RIP: 0033:0x7f2bfd58f7c9
[  113.687679][ T6370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.687700][ T6370] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  113.687723][ T6370] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[  113.687739][ T6370] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  113.687753][ T6370] RBP: 00007f2bfb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  113.687768][ T6370] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  113.687782][ T6370] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[  113.687817][ T6370]  </TASK>
[  113.881545][    C1] vkms_vblank_simulate: vblank timer overrun
[  114.258981][ T6376] vhci_hcd: invalid port number 16
[  114.345266][ T6376] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  115.091333][ T6400] FAULT_INJECTION: forcing a failure.
[  115.091333][ T6400] name failslab, interval 1, probability 0, space 0, times 0
[  115.168147][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) 
[  115.168180][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.168193][ T6400] Call Trace:
[  115.168200][ T6400]  <TASK>
[  115.168211][ T6400]  dump_stack_lvl+0x16c/0x1f0
[  115.168248][ T6400]  should_fail_ex+0x512/0x640
[  115.168280][ T6400]  ? kmem_cache_alloc_noprof+0x62/0x760
[  115.168313][ T6400]  should_failslab+0xc2/0x120
[  115.168338][ T6400]  kmem_cache_alloc_noprof+0x75/0x760
[  115.168367][ T6400]  ? __pmd_alloc+0xbf/0x8b0
[  115.168409][ T6400]  ? __pmd_alloc+0xbf/0x8b0
[  115.168440][ T6400]  __pmd_alloc+0xbf/0x8b0
[  115.168479][ T6400]  __handle_mm_fault+0xa77/0x2ad0
[  115.168515][ T6400]  ? __pfx___handle_mm_fault+0x10/0x10
[  115.168559][ T6400]  ? find_vma+0xbf/0x140
[  115.168590][ T6400]  ? __pfx_find_vma+0x10/0x10
[  115.168625][ T6400]  handle_mm_fault+0x3fe/0xad0
[  115.168658][ T6400]  do_user_addr_fault+0x2e4/0xda0
[  115.168688][ T6400]  ? rcu_is_watching+0x12/0xc0
[  115.168727][ T6400]  exc_page_fault+0x64/0xc0
[  115.168759][ T6400]  asm_exc_page_fault+0x26/0x30
[  115.168782][ T6400] RIP: 0010:rep_movs_alternative+0x30/0x90
[  115.168807][ T6400] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  115.168828][ T6400] RSP: 0018:ffffc90003f8f7e8 EFLAGS: 00050202
[  115.168848][ T6400] RAX: 0000000000000001 RBX: 000000000000000a RCX: 000000000000000a
[  115.168862][ T6400] RDX: fffff520007f1f4d RSI: 0000000000000000 RDI: ffffc90003f8fa58
[  115.168878][ T6400] RBP: 000000000000000a R08: 0000000000000001 R09: fffff520007f1f4c
[  115.168892][ T6400] R10: ffffc90003f8fa61 R11: 00000000ffffffff R12: ffffc90003f8fd70
[  115.168907][ T6400] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90003f8fd78
[  115.168950][ T6400]  _copy_from_iter+0x495/0x16c0
[  115.168993][ T6400]  ? __pfx__copy_from_iter+0x10/0x10
[  115.169030][ T6400]  ? find_held_lock+0x2b/0x80
[  115.169064][ T6400]  ? is_bpf_text_address+0x8a/0x1a0
[  115.169095][ T6400]  ? bpf_ksym_find+0x124/0x1c0
[  115.169124][ T6400]  tun_get_user+0x3c7/0x3cc0
[  115.169169][ T6400]  ? __pfx_tun_get_user+0x10/0x10
[  115.169194][ T6400]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  115.169240][ T6400]  ? find_held_lock+0x2b/0x80
[  115.169274][ T6400]  ? tun_get+0x191/0x370
[  115.169316][ T6400]  tun_chr_write_iter+0xdc/0x210
[  115.169343][ T6400]  do_iter_readv_writev+0x662/0x9e0
[  115.169380][ T6400]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  115.169413][ T6400]  ? common_file_perm+0x1b1/0x500
[  115.169452][ T6400]  ? bpf_lsm_file_permission+0x9/0x10
[  115.169479][ T6400]  ? security_file_permission+0x71/0x210
[  115.169504][ T6400]  ? rw_verify_area+0xcf/0x6c0
[  115.169537][ T6400]  vfs_writev+0x35f/0xde0
[  115.169570][ T6400]  ? proc_fail_nth_write+0x9f/0x220
[  115.169605][ T6400]  ? __pfx_vfs_writev+0x10/0x10
[  115.169665][ T6400]  ? __fget_files+0x20e/0x3c0
[  115.169697][ T6400]  ? __fget_files+0x140/0x3c0
[  115.169741][ T6400]  ? do_writev+0x132/0x340
[  115.169772][ T6400]  do_writev+0x132/0x340
[  115.169805][ T6400]  ? __pfx_do_writev+0x10/0x10
[  115.169849][ T6400]  do_syscall_64+0xcd/0xf80
[  115.169883][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.169906][ T6400] RIP: 0033:0x7faa0df8f7c9
[  115.169925][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.169953][ T6400] RSP: 002b:00007faa0ee1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  115.169974][ T6400] RAX: ffffffffffffffda RBX: 00007faa0e1e6090 RCX: 00007faa0df8f7c9
[  115.169990][ T6400] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  115.170004][ T6400] RBP: 00007faa0ee1f090 R08: 0000000000000000 R09: 0000000000000000
[  115.170018][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.170031][ T6400] R13: 00007faa0e1e6128 R14: 00007faa0e1e6090 R15: 00007ffd4b400fe8
[  115.170067][ T6400]  </TASK>
[  115.563874][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.052553][ T6414] FAULT_INJECTION: forcing a failure.
[  116.052553][ T6414] name failslab, interval 1, probability 0, space 0, times 0
[  116.071356][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT(full) 
[  116.071390][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.071406][ T6414] Call Trace:
[  116.071414][ T6414]  <TASK>
[  116.071425][ T6414]  dump_stack_lvl+0x16c/0x1f0
[  116.071464][ T6414]  should_fail_ex+0x512/0x640
[  116.071498][ T6414]  ? kmem_cache_alloc_noprof+0x62/0x760
[  116.071535][ T6414]  should_failslab+0xc2/0x120
[  116.071561][ T6414]  kmem_cache_alloc_noprof+0x75/0x760
[  116.071593][ T6414]  ? seq_open+0x55/0x170
[  116.071629][ T6414]  ? __pfx_timens_offsets_show+0x10/0x10
[  116.071653][ T6414]  ? seq_open+0x55/0x170
[  116.071680][ T6414]  seq_open+0x55/0x170
[  116.071710][ T6414]  ? __pfx_timens_offsets_show+0x10/0x10
[  116.071736][ T6414]  single_open+0xfc/0x1f0
[  116.071768][ T6414]  do_dentry_open+0x748/0x1590
[  116.071790][ T6414]  ? __pfx_timens_offsets_open+0x10/0x10
[  116.071837][ T6414]  vfs_open+0x82/0x3f0
[  116.071872][ T6414]  path_openat+0x2078/0x3140
[  116.071908][ T6414]  ? __pfx_path_openat+0x10/0x10
[  116.071946][ T6414]  do_filp_open+0x20b/0x470
[  116.071972][ T6414]  ? __pfx_do_filp_open+0x10/0x10
[  116.072009][ T6414]  ? __pfx_kfree_link+0x10/0x10
[  116.072053][ T6414]  ? alloc_fd+0x471/0x7d0
[  116.072086][ T6414]  do_sys_openat2+0x11f/0x280
[  116.072117][ T6414]  ? __pfx_do_sys_openat2+0x10/0x10
[  116.072155][ T6414]  ? find_held_lock+0x2b/0x80
[  116.072201][ T6414]  __x64_sys_openat+0x174/0x210
[  116.072234][ T6414]  ? __pfx___x64_sys_openat+0x10/0x10
[  116.072281][ T6414]  do_syscall_64+0xcd/0xf80
[  116.072317][ T6414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.072342][ T6414] RIP: 0033:0x7f0fda98f7c9
[  116.072366][ T6414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.072390][ T6414] RSP: 002b:00007f0fdb89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  116.072415][ T6414] RAX: ffffffffffffffda RBX: 00007f0fdabe5fa0 RCX: 00007f0fda98f7c9
[  116.072432][ T6414] RDX: 0000000000000080 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  116.072449][ T6414] RBP: 00007f0fdaa13f91 R08: 0000000000000000 R09: 0000000000000000
[  116.072464][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.072479][ T6414] R13: 00007f0fdabe6038 R14: 00007f0fdabe5fa0 R15: 00007ffedfc12b88
[  116.072515][ T6414]  </TASK>
[  116.315218][ T6425] FAULT_INJECTION: forcing a failure.
[  116.315218][ T6425] name failslab, interval 1, probability 0, space 0, times 0
[  116.315254][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) 
[  116.315281][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.315294][ T6425] Call Trace:
[  116.315302][ T6425]  <TASK>
[  116.315311][ T6425]  dump_stack_lvl+0x16c/0x1f0
[  116.315345][ T6425]  should_fail_ex+0x512/0x640
[  116.315377][ T6425]  ? kmem_cache_alloc_node_noprof+0x65/0x7f0
[  116.315412][ T6425]  should_failslab+0xc2/0x120
[  116.315436][ T6425]  kmem_cache_alloc_node_noprof+0x78/0x7f0
[  116.315465][ T6425]  ? __alloc_skb+0x156/0x410
[  116.315504][ T6425]  ? __alloc_skb+0x156/0x410
[  116.315535][ T6425]  __alloc_skb+0x156/0x410
[  116.315568][ T6425]  ? __alloc_skb+0x35d/0x410
[  116.315599][ T6425]  ? __pfx___alloc_skb+0x10/0x10
[  116.315629][ T6425]  ? __lock_acquire+0x433/0x22f0
[  116.315667][ T6425]  alloc_skb_with_frags+0xe0/0x860
[  116.315696][ T6425]  ? __pfx___might_resched+0x10/0x10
[  116.315735][ T6425]  sock_alloc_send_pskb+0x7f9/0x980
[  116.315767][ T6425]  ? process_measurement+0x4a6/0x22d0
[  116.315798][ T6425]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  116.315848][ T6425]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  116.315882][ T6425]  ? find_held_lock+0x2b/0x80
[  116.315915][ T6425]  ? dev_get_by_index+0x17c/0x380
[  116.315936][ T6425]  ? sock_cmsg_send+0x1a0/0x280
[  116.315976][ T6425]  packet_sendmsg+0x1fe4/0x54a0
[  116.316026][ T6425]  ? aa_sk_perm+0x2f2/0xae0
[  116.316065][ T6425]  ? __pfx_packet_sendmsg+0x10/0x10
[  116.316085][ T6425]  ? __pfx_aa_sk_perm+0x10/0x10
[  116.316129][ T6425]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  116.316166][ T6425]  ____sys_sendmsg+0xa5d/0xc30
[  116.316198][ T6425]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.316232][ T6425]  ? __pfx__kstrtoull+0x10/0x10
[  116.316264][ T6425]  ___sys_sendmsg+0x134/0x1d0
[  116.316301][ T6425]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.316354][ T6425]  ? find_held_lock+0x2b/0x80
[  116.316406][ T6425]  __sys_sendmmsg+0x200/0x420
[  116.316431][ T6425]  ? __pfx___sys_sendmmsg+0x10/0x10
[  116.316461][ T6425]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  116.316511][ T6425]  ? fput+0x70/0xf0
[  116.316534][ T6425]  ? ksys_write+0x1ac/0x250
[  116.316566][ T6425]  ? __pfx_ksys_write+0x10/0x10
[  116.316601][ T6425]  __x64_sys_sendmmsg+0x9c/0x100
[  116.316619][ T6425]  ? lockdep_hardirqs_on+0x7c/0x110
[  116.316649][ T6425]  do_syscall_64+0xcd/0xf80
[  116.316680][ T6425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.316703][ T6425] RIP: 0033:0x7faa0df8f7c9
[  116.316722][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.316742][ T6425] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  116.316764][ T6425] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  116.316780][ T6425] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  116.316794][ T6425] RBP: 00007faa0ee40090 R08: 0000000000000000 R09: 0000000000000000
[  116.316808][ T6425] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  116.316822][ T6425] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  116.316863][ T6425]  </TASK>
[  117.303102][ T6414] tty tty12: ldisc open failed (-12), clearing slot 11
[  117.312037][ T6423] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  117.715675][ T6448] FAULT_INJECTION: forcing a failure.
[  117.715675][ T6448] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  117.763094][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) 
[  117.763126][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.763139][ T6448] Call Trace:
[  117.763147][ T6448]  <TASK>
[  117.763156][ T6448]  dump_stack_lvl+0x16c/0x1f0
[  117.763193][ T6448]  should_fail_ex+0x512/0x640
[  117.763231][ T6448]  should_fail_alloc_page+0xe7/0x130
[  117.763259][ T6448]  prepare_alloc_pages+0x3c2/0x610
[  117.763289][ T6448]  __alloc_frozen_pages_noprof+0x18b/0x2440
[  117.763322][ T6448]  ? stack_trace_save+0x8e/0xc0
[  117.763347][ T6448]  ? __pfx_stack_trace_save+0x10/0x10
[  117.763370][ T6448]  ? rcu_is_watching+0x12/0xc0
[  117.763405][ T6448]  ? stack_depot_save_flags+0x29/0x9b0
[  117.763446][ T6448]  ? kasan_save_stack+0x42/0x60
[  117.763479][ T6448]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  117.763507][ T6448]  ? kmem_cache_alloc_noprof+0x250/0x760
[  117.763536][ T6448]  ? __handle_mm_fault+0xa77/0x2ad0
[  117.763560][ T6448]  ? do_user_addr_fault+0x2e4/0xda0
[  117.763587][ T6448]  ? exc_page_fault+0x64/0xc0
[  117.763614][ T6448]  ? asm_exc_page_fault+0x26/0x30
[  117.763636][ T6448]  ? rep_movs_alternative+0x30/0x90
[  117.763658][ T6448]  ? _copy_from_iter+0x495/0x16c0
[  117.763688][ T6448]  ? tun_get_user+0x3c7/0x3cc0
[  117.763705][ T6448]  ? tun_chr_write_iter+0xdc/0x210
[  117.763747][ T6448]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  117.763787][ T6448]  ? policy_nodemask+0xea/0x4e0
[  117.763813][ T6448]  alloc_pages_mpol+0x1fb/0x550
[  117.763838][ T6448]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  117.763871][ T6448]  alloc_pages_noprof+0x12d/0x180
[  117.763896][ T6448]  pte_alloc_one+0x1e/0x350
[  117.763929][ T6448]  do_pte_missing+0x1b47/0x4000
[  117.763960][ T6448]  ? __pmd_alloc+0x64f/0x8b0
[  117.763999][ T6448]  __handle_mm_fault+0x154b/0x2ad0
[  117.764035][ T6448]  ? __pfx___handle_mm_fault+0x10/0x10
[  117.764081][ T6448]  ? find_vma+0xbf/0x140
[  117.764112][ T6448]  ? __pfx_find_vma+0x10/0x10
[  117.764151][ T6448]  handle_mm_fault+0x3fe/0xad0
[  117.764183][ T6448]  do_user_addr_fault+0x2e4/0xda0
[  117.764213][ T6448]  ? rcu_is_watching+0x12/0xc0
[  117.764252][ T6448]  exc_page_fault+0x64/0xc0
[  117.764283][ T6448]  asm_exc_page_fault+0x26/0x30
[  117.764305][ T6448] RIP: 0010:rep_movs_alternative+0x30/0x90
[  117.764330][ T6448] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  117.764351][ T6448] RSP: 0018:ffffc900031e77e8 EFLAGS: 00050202
[  117.764371][ T6448] RAX: 0000000000000001 RBX: 000000000000000a RCX: 000000000000000a
[  117.764384][ T6448] RDX: fffff5200063cf4d RSI: 0000000000000000 RDI: ffffc900031e7a58
[  117.764400][ T6448] RBP: 000000000000000a R08: 0000000000000001 R09: fffff5200063cf4c
[  117.764413][ T6448] R10: ffffc900031e7a61 R11: 00000000ffffffff R12: ffffc900031e7d70
[  117.764428][ T6448] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900031e7d78
[  117.764460][ T6448]  _copy_from_iter+0x495/0x16c0
[  117.764490][ T6448]  ? __pfx__copy_from_iter+0x10/0x10
[  117.764510][ T6448]  ? find_held_lock+0x2b/0x80
[  117.764529][ T6448]  ? is_bpf_text_address+0x8a/0x1a0
[  117.764547][ T6448]  ? bpf_ksym_find+0x124/0x1c0
[  117.764563][ T6448]  tun_get_user+0x3c7/0x3cc0
[  117.764584][ T6448]  ? __pfx_tun_get_user+0x10/0x10
[  117.764598][ T6448]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  117.764624][ T6448]  ? find_held_lock+0x2b/0x80
[  117.764643][ T6448]  ? tun_get+0x191/0x370
[  117.764667][ T6448]  tun_chr_write_iter+0xdc/0x210
[  117.764681][ T6448]  do_iter_readv_writev+0x662/0x9e0
[  117.764703][ T6448]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  117.764721][ T6448]  ? common_file_perm+0x1b1/0x500
[  117.764750][ T6448]  ? bpf_lsm_file_permission+0x9/0x10
[  117.764767][ T6448]  ? security_file_permission+0x71/0x210
[  117.764780][ T6448]  ? rw_verify_area+0xcf/0x6c0
[  117.764800][ T6448]  vfs_writev+0x35f/0xde0
[  117.764819][ T6448]  ? proc_fail_nth_write+0x9f/0x220
[  117.764838][ T6448]  ? __pfx_vfs_writev+0x10/0x10
[  117.764870][ T6448]  ? __fget_files+0x20e/0x3c0
[  117.764889][ T6448]  ? __fget_files+0x140/0x3c0
[  117.764912][ T6448]  ? do_writev+0x132/0x340
[  117.764929][ T6448]  do_writev+0x132/0x340
[  117.764948][ T6448]  ? __pfx_do_writev+0x10/0x10
[  117.764972][ T6448]  do_syscall_64+0xcd/0xf80
[  117.764990][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.765003][ T6448] RIP: 0033:0x7f2bfd58f7c9
[  117.765015][ T6448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.765027][ T6448] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  117.765040][ T6448] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[  117.765048][ T6448] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  117.765056][ T6448] RBP: 00007f2bfb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  117.765064][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.765072][ T6448] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[  117.765090][ T6448]  </TASK>
[  118.575556][ T6458] FAULT_INJECTION: forcing a failure.
[  118.575556][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.637774][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.126 Not tainted syzkaller #0 PREEMPT(full) 
[  118.637809][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.637822][ T6458] Call Trace:
[  118.637830][ T6458]  <TASK>
[  118.637840][ T6458]  dump_stack_lvl+0x16c/0x1f0
[  118.637886][ T6458]  should_fail_ex+0x512/0x640
[  118.637930][ T6458]  _copy_from_iter+0x43b/0x16c0
[  118.637972][ T6458]  ? __pfx__copy_from_iter+0x10/0x10
[  118.638004][ T6458]  ? process_measurement+0x4a6/0x22d0
[  118.638029][ T6458]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  118.638070][ T6458]  skb_copy_datagram_from_iter+0x124/0x740
[  118.638105][ T6458]  ? dev_get_by_index+0x17c/0x380
[  118.638126][ T6458]  ? sock_cmsg_send+0x1a0/0x280
[  118.638167][ T6458]  packet_sendmsg+0x2221/0x54a0
[  118.638219][ T6458]  ? aa_sk_perm+0x2f2/0xae0
[  118.638257][ T6458]  ? __pfx_packet_sendmsg+0x10/0x10
[  118.638278][ T6458]  ? __pfx_aa_sk_perm+0x10/0x10
[  118.638322][ T6458]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  118.638360][ T6458]  ____sys_sendmsg+0xa5d/0xc30
[  118.638393][ T6458]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.638427][ T6458]  ? __pfx__kstrtoull+0x10/0x10
[  118.638458][ T6458]  ___sys_sendmsg+0x134/0x1d0
[  118.638497][ T6458]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.638550][ T6458]  ? find_held_lock+0x2b/0x80
[  118.638607][ T6458]  __sys_sendmmsg+0x200/0x420
[  118.638633][ T6458]  ? __pfx___sys_sendmmsg+0x10/0x10
[  118.638668][ T6458]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  118.638717][ T6458]  ? fput+0x70/0xf0
[  118.638744][ T6458]  ? ksys_write+0x1ac/0x250
[  118.638778][ T6458]  ? __pfx_ksys_write+0x10/0x10
[  118.638819][ T6458]  __x64_sys_sendmmsg+0x9c/0x100
[  118.638841][ T6458]  ? lockdep_hardirqs_on+0x7c/0x110
[  118.638879][ T6458]  do_syscall_64+0xcd/0xf80
[  118.638909][ T6458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.638932][ T6458] RIP: 0033:0x7f482e58f7c9
[  118.638952][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.638974][ T6458] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  118.638997][ T6458] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  118.639014][ T6458] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  118.639028][ T6458] RBP: 00007f482f4cd090 R08: 0000000000000000 R09: 0000000000000000
[  118.639043][ T6458] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  118.639057][ T6458] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  118.639093][ T6458]  </TASK>
[  118.973366][ T6463] FAULT_INJECTION: forcing a failure.
[  118.973366][ T6463] name failslab, interval 1, probability 0, space 0, times 0
[  118.986188][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) 
[  118.986220][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.986234][ T6463] Call Trace:
[  118.986242][ T6463]  <TASK>
[  118.986251][ T6463]  dump_stack_lvl+0x16c/0x1f0
[  118.986290][ T6463]  should_fail_ex+0x512/0x640
[  118.986323][ T6463]  ? kmem_cache_alloc_noprof+0x62/0x760
[  118.986363][ T6463]  should_failslab+0xc2/0x120
[  118.986388][ T6463]  kmem_cache_alloc_noprof+0x75/0x760
[  118.986418][ T6463]  ? sk_prot_alloc+0x60/0x2a0
[  118.986453][ T6463]  ? sk_prot_alloc+0x60/0x2a0
[  118.986479][ T6463]  sk_prot_alloc+0x60/0x2a0
[  118.986509][ T6463]  sk_alloc+0x36/0xc20
[  118.986547][ T6463]  pn_socket_create+0x22d/0x560
[  118.986578][ T6463]  __sock_create+0x339/0x8a0
[  118.986683][ T6463]  __sys_socket+0x153/0x2d0
[  118.986719][ T6463]  ? __pfx___sys_socket+0x10/0x10
[  118.986757][ T6463]  ? xfd_validate_state+0x61/0x180
[  118.986809][ T6463]  __x64_sys_socket+0x72/0xb0
[  118.986842][ T6463]  ? lockdep_hardirqs_on+0x7c/0x110
[  118.986880][ T6463]  do_syscall_64+0xcd/0xf80
[  118.986917][ T6463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.986942][ T6463] RIP: 0033:0x7faa0df8f7c9
[  118.986964][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.986987][ T6463] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  118.987012][ T6463] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  118.987029][ T6463] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023
[  118.987045][ T6463] RBP: 00007faa0e013f91 R08: 0000000000000000 R09: 0000000000000000
[  118.987061][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.987076][ T6463] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  118.987113][ T6463]  </TASK>
[  119.501358][ T6469] FAULT_INJECTION: forcing a failure.
[  119.501358][ T6469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.548474][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) 
[  119.548511][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.548525][ T6469] Call Trace:
[  119.548533][ T6469]  <TASK>
[  119.548555][ T6469]  dump_stack_lvl+0x16c/0x1f0
[  119.548594][ T6469]  should_fail_ex+0x512/0x640
[  119.548636][ T6469]  _copy_to_user+0x32/0xd0
[  119.548672][ T6469]  poll_select_finish+0x339/0x6b0
[  119.548709][ T6469]  ? __pfx_poll_select_finish+0x10/0x10
[  119.548749][ T6469]  ? read_tsc+0x9/0x20
[  119.548779][ T6469]  ? ktime_get_ts64+0x256/0x400
[  119.548816][ T6469]  kern_select+0x16e/0x1e0
[  119.548851][ T6469]  ? __pfx_kern_select+0x10/0x10
[  119.548891][ T6469]  ? xfd_validate_state+0x61/0x180
[  119.548926][ T6469]  ? __pfx_ksys_write+0x10/0x10
[  119.548969][ T6469]  __x64_sys_select+0xbd/0x160
[  119.549001][ T6469]  ? do_syscall_64+0x91/0xf80
[  119.549032][ T6469]  ? lockdep_hardirqs_on+0x7c/0x110
[  119.549064][ T6469]  do_syscall_64+0xcd/0xf80
[  119.549099][ T6469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.549124][ T6469] RIP: 0033:0x7f482e58f7c9
[  119.549144][ T6469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.549167][ T6469] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  119.549191][ T6469] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  119.549209][ T6469] RDX: 0000200000000240 RSI: 00002000000001c0 RDI: 0000000000000009
[  119.549225][ T6469] RBP: 00007f482e613f91 R08: 0000200000000080 R09: 0000000000000000
[  119.549241][ T6469] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000
[  119.549257][ T6469] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  119.549292][ T6469]  </TASK>
[  120.880078][ T6491] FAULT_INJECTION: forcing a failure.
[  120.880078][ T6491] name failslab, interval 1, probability 0, space 0, times 0
[  120.908171][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT(full) 
[  120.908204][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  120.908217][ T6491] Call Trace:
[  120.908225][ T6491]  <TASK>
[  120.908234][ T6491]  dump_stack_lvl+0x16c/0x1f0
[  120.908271][ T6491]  should_fail_ex+0x512/0x640
[  120.908302][ T6491]  ? kmem_cache_alloc_noprof+0x62/0x760
[  120.908335][ T6491]  should_failslab+0xc2/0x120
[  120.908359][ T6491]  kmem_cache_alloc_noprof+0x75/0x760
[  120.908387][ T6491]  ? ptlock_alloc+0x1f/0x70
[  120.908415][ T6491]  ? ptlock_alloc+0x1f/0x70
[  120.908435][ T6491]  ptlock_alloc+0x1f/0x70
[  120.908457][ T6491]  pte_alloc_one+0x84/0x350
[  120.908489][ T6491]  do_pte_missing+0x1b47/0x4000
[  120.908520][ T6491]  ? __pmd_alloc+0x64f/0x8b0
[  120.908558][ T6491]  __handle_mm_fault+0x154b/0x2ad0
[  120.908593][ T6491]  ? __pfx___handle_mm_fault+0x10/0x10
[  120.908639][ T6491]  ? find_vma+0xbf/0x140
[  120.908668][ T6491]  ? __pfx_find_vma+0x10/0x10
[  120.908711][ T6491]  handle_mm_fault+0x3fe/0xad0
[  120.908743][ T6491]  do_user_addr_fault+0x2e4/0xda0
[  120.908772][ T6491]  ? rcu_is_watching+0x12/0xc0
[  120.908822][ T6491]  exc_page_fault+0x64/0xc0
[  120.908854][ T6491]  asm_exc_page_fault+0x26/0x30
[  120.908881][ T6491] RIP: 0010:rep_movs_alternative+0x30/0x90
[  120.908906][ T6491] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  120.908926][ T6491] RSP: 0018:ffffc90003b9f7e8 EFLAGS: 00050202
[  120.908946][ T6491] RAX: 0000000000000001 RBX: 000000000000000a RCX: 000000000000000a
[  120.908959][ T6491] RDX: fffff52000773f4d RSI: 0000000000000000 RDI: ffffc90003b9fa58
[  120.908974][ T6491] RBP: 000000000000000a R08: 0000000000000001 R09: fffff52000773f4c
[  120.908988][ T6491] R10: ffffc90003b9fa61 R11: 00000000ffffffff R12: ffffc90003b9fd70
[  120.909003][ T6491] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90003b9fd78
[  120.909037][ T6491]  _copy_from_iter+0x495/0x16c0
[  120.909083][ T6491]  ? __pfx__copy_from_iter+0x10/0x10
[  120.909118][ T6491]  ? find_held_lock+0x2b/0x80
[  120.909152][ T6491]  ? is_bpf_text_address+0x8a/0x1a0
[  120.909182][ T6491]  ? bpf_ksym_find+0x124/0x1c0
[  120.909211][ T6491]  tun_get_user+0x3c7/0x3cc0
[  120.909252][ T6491]  ? __pfx_tun_get_user+0x10/0x10
[  120.909276][ T6491]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  120.909322][ T6491]  ? find_held_lock+0x2b/0x80
[  120.909355][ T6491]  ? tun_get+0x191/0x370
[  120.909398][ T6491]  tun_chr_write_iter+0xdc/0x210
[  120.909423][ T6491]  do_iter_readv_writev+0x662/0x9e0
[  120.909460][ T6491]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  120.909492][ T6491]  ? common_file_perm+0x1b1/0x500
[  120.909531][ T6491]  ? bpf_lsm_file_permission+0x9/0x10
[  120.909558][ T6491]  ? security_file_permission+0x71/0x210
[  120.909582][ T6491]  ? rw_verify_area+0xcf/0x6c0
[  120.909616][ T6491]  vfs_writev+0x35f/0xde0
[  120.909648][ T6491]  ? proc_fail_nth_write+0x9f/0x220
[  120.909682][ T6491]  ? __pfx_vfs_writev+0x10/0x10
[  120.909747][ T6491]  ? __fget_files+0x20e/0x3c0
[  120.909778][ T6491]  ? __fget_files+0x140/0x3c0
[  120.909821][ T6491]  ? do_writev+0x132/0x340
[  120.909850][ T6491]  do_writev+0x132/0x340
[  120.909882][ T6491]  ? __pfx_do_writev+0x10/0x10
[  120.909925][ T6491]  do_syscall_64+0xcd/0xf80
[  120.909958][ T6491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.909981][ T6491] RIP: 0033:0x7f482e58f7c9
[  120.910001][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.910021][ T6491] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  120.910042][ T6491] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  120.910058][ T6491] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  120.910072][ T6491] RBP: 00007f482f4cd090 R08: 0000000000000000 R09: 0000000000000000
[  120.910086][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.910100][ T6491] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  120.910135][ T6491]  </TASK>
[  121.953966][ T6507] FAULT_INJECTION: forcing a failure.
[  121.953966][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.019738][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT(full) 
[  122.019772][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  122.019786][ T6507] Call Trace:
[  122.019794][ T6507]  <TASK>
[  122.019803][ T6507]  dump_stack_lvl+0x16c/0x1f0
[  122.019839][ T6507]  should_fail_ex+0x512/0x640
[  122.019877][ T6507]  _copy_from_iter+0x43b/0x16c0
[  122.019918][ T6507]  ? __pfx__copy_from_iter+0x10/0x10
[  122.019949][ T6507]  ? process_measurement+0x4a6/0x22d0
[  122.019980][ T6507]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  122.020028][ T6507]  skb_copy_datagram_from_iter+0x124/0x740
[  122.020068][ T6507]  ? dev_get_by_index+0x17c/0x380
[  122.020089][ T6507]  ? sock_cmsg_send+0x1a0/0x280
[  122.020131][ T6507]  packet_sendmsg+0x2221/0x54a0
[  122.020182][ T6507]  ? aa_sk_perm+0x2f2/0xae0
[  122.020220][ T6507]  ? __pfx_packet_sendmsg+0x10/0x10
[  122.020241][ T6507]  ? __pfx_aa_sk_perm+0x10/0x10
[  122.020285][ T6507]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  122.020333][ T6507]  ____sys_sendmsg+0xa5d/0xc30
[  122.020365][ T6507]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.020399][ T6507]  ? __pfx__kstrtoull+0x10/0x10
[  122.020431][ T6507]  ___sys_sendmsg+0x134/0x1d0
[  122.020470][ T6507]  ? __pfx____sys_sendmsg+0x10/0x10
[  122.020524][ T6507]  ? find_held_lock+0x2b/0x80
[  122.020580][ T6507]  __sys_sendmmsg+0x200/0x420
[  122.020608][ T6507]  ? __pfx___sys_sendmmsg+0x10/0x10
[  122.020642][ T6507]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  122.020689][ T6507]  ? fput+0x70/0xf0
[  122.020715][ T6507]  ? ksys_write+0x1ac/0x250
[  122.020749][ T6507]  ? __pfx_ksys_write+0x10/0x10
[  122.020794][ T6507]  __x64_sys_sendmmsg+0x9c/0x100
[  122.020816][ T6507]  ? lockdep_hardirqs_on+0x7c/0x110
[  122.020847][ T6507]  do_syscall_64+0xcd/0xf80
[  122.020880][ T6507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.020905][ T6507] RIP: 0033:0x7f482e58f7c9
[  122.020924][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.020946][ T6507] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  122.020969][ T6507] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  122.020985][ T6507] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  122.020999][ T6507] RBP: 00007f482f4cd090 R08: 0000000000000000 R09: 0000000000000000
[  122.021014][ T6507] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  122.021028][ T6507] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  122.021063][ T6507]  </TASK>
[  123.068100][ T6517] FAULT_INJECTION: forcing a failure.
[  123.068100][ T6517] name failslab, interval 1, probability 0, space 0, times 0
[  123.126764][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) 
[  123.126797][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.126811][ T6517] Call Trace:
[  123.126819][ T6517]  <TASK>
[  123.126828][ T6517]  dump_stack_lvl+0x16c/0x1f0
[  123.126865][ T6517]  should_fail_ex+0x512/0x640
[  123.126897][ T6517]  ? fs_reclaim_acquire+0xae/0x150
[  123.126924][ T6517]  should_failslab+0xc2/0x120
[  123.126948][ T6517]  kmem_cache_alloc_noprof+0x75/0x760
[  123.126978][ T6517]  ? jbd2__journal_start+0x193/0x6a0
[  123.127009][ T6517]  ? jbd2__journal_start+0x193/0x6a0
[  123.127031][ T6517]  jbd2__journal_start+0x193/0x6a0
[  123.127060][ T6517]  __ext4_journal_start_sb+0x195/0x640
[  123.127091][ T6517]  ? ext4_dirty_inode+0xa1/0x130
[  123.127127][ T6517]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  123.127160][ T6517]  ext4_dirty_inode+0xa1/0x130
[  123.127192][ T6517]  ? rcu_is_watching+0x12/0xc0
[  123.127227][ T6517]  __mark_inode_dirty+0x1f7/0x1670
[  123.127264][ T6517]  generic_update_time+0xcf/0xf0
[  123.127293][ T6517]  file_update_time_flags+0x410/0x520
[  123.127326][ T6517]  ext4_page_mkwrite+0x33d/0x1880
[  123.127370][ T6517]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  123.127401][ T6517]  ? inode_to_bdi+0x9e/0x160
[  123.127442][ T6517]  do_page_mkwrite+0x174/0x380
[  123.127475][ T6517]  do_pte_missing+0x29c/0x4000
[  123.127513][ T6517]  ? __handle_mm_fault+0x151e/0x2ad0
[  123.127544][ T6517]  __handle_mm_fault+0x154b/0x2ad0
[  123.127577][ T6517]  ? reacquire_held_locks+0xcd/0x1f0
[  123.127604][ T6517]  ? __pfx___handle_mm_fault+0x10/0x10
[  123.127635][ T6517]  ? lock_vma_under_rcu+0x176/0x580
[  123.127674][ T6517]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  123.127717][ T6517]  handle_mm_fault+0x3fe/0xad0
[  123.127749][ T6517]  do_user_addr_fault+0x423/0xda0
[  123.127783][ T6517]  ? rcu_is_watching+0x12/0xc0
[  123.127821][ T6517]  exc_page_fault+0x64/0xc0
[  123.127854][ T6517]  asm_exc_page_fault+0x26/0x30
[  123.127877][ T6517] RIP: 0033:0x7f2bfd46f17a
[  123.127897][ T6517] Code: 01 4c 89 44 24 10 4c 89 54 24 08 e8 40 9d fe ff 48 8b 43 38 4c 8b 44 24 10 83 43 28 08 4c 8b 54 24 08 48 8d 48 f8 48 89 4b 38 <48> 89 68 f8 45 3b 78 04 0f 82 5e fe ff ff e9 ed fe ff ff 0f 1f 00
[  123.127917][ T6517] RSP: 002b:00007ffcc0187d80 EFLAGS: 00010202
[  123.127936][ T6517] RAX: 0000001b319f2000 RBX: 00007f2bfe315720 RCX: 0000001b319f1ff8
[  123.127952][ T6517] RDX: 0000001b31624220 RSI: 0000000000000008 RDI: 00007f2bfe315720
[  123.127966][ T6517] RBP: ffffffff81618598 R08: 00007f2bfd7e6128 R09: 00007f2bfd7d2000
[  123.127982][ T6517] R10: 00007f2bfcbfd008 R11: 0000000000000018 R12: 0000000000000018
[  123.127995][ T6517] R13: 0000000000000411 R14: ffffffff81618035 R15: 0000000000004ef0
[  123.128008][ T6517]  ? restore_fpregs_from_fpstate+0x15/0x120
[  123.128036][ T6517]  ? fpu_alloc_guest_fpstate+0xd8/0x430
[  123.128071][ T6517]  </TASK>
[  124.404299][ T6538] bond0: Unable to set up delay as MII monitoring is disabled
[  125.179065][ T6553] FAULT_INJECTION: forcing a failure.
[  125.179065][ T6553] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  125.199104][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) 
[  125.199130][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  125.199140][ T6553] Call Trace:
[  125.199147][ T6553]  <TASK>
[  125.199154][ T6553]  dump_stack_lvl+0x16c/0x1f0
[  125.199184][ T6553]  should_fail_ex+0x512/0x640
[  125.199213][ T6553]  should_fail_alloc_page+0xe7/0x130
[  125.199236][ T6553]  prepare_alloc_pages+0x3c2/0x610
[  125.199263][ T6553]  __alloc_frozen_pages_noprof+0x18b/0x2440
[  125.199292][ T6553]  ? __lock_acquire+0x433/0x22f0
[  125.199322][ T6553]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  125.199354][ T6553]  ? find_held_lock+0x2b/0x80
[  125.199392][ T6553]  ? is_bpf_text_address+0x8a/0x1a0
[  125.199416][ T6553]  ? bpf_ksym_find+0x124/0x1c0
[  125.199431][ T6553]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  125.199463][ T6553]  ? policy_nodemask+0xea/0x4e0
[  125.199485][ T6553]  alloc_pages_mpol+0x1fb/0x550
[  125.199509][ T6553]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  125.199539][ T6553]  folio_alloc_mpol_noprof+0x36/0xe0
[  125.199566][ T6553]  shmem_alloc_folio+0x135/0x160
[  125.199590][ T6553]  shmem_alloc_and_add_folio+0x494/0xc20
[  125.199625][ T6553]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  125.199652][ T6553]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[  125.199684][ T6553]  shmem_get_folio_gfp+0x67f/0x1610
[  125.199715][ T6553]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  125.199743][ T6553]  ? filemap_map_pages+0x12dd/0x1e00
[  125.199774][ T6553]  shmem_fault+0x1fe/0xa00
[  125.199804][ T6553]  ? __pfx_shmem_fault+0x10/0x10
[  125.199833][ T6553]  ? rcu_is_watching+0x12/0xc0
[  125.199869][ T6553]  ? __pfx_filemap_map_pages+0x10/0x10
[  125.199907][ T6553]  __do_fault+0x10d/0x490
[  125.199940][ T6553]  do_pte_missing+0xfb2/0x4000
[  125.199969][ T6553]  ? __pmd_alloc+0x64f/0x8b0
[  125.200014][ T6553]  __handle_mm_fault+0x154b/0x2ad0
[  125.200050][ T6553]  ? __pfx___handle_mm_fault+0x10/0x10
[  125.200096][ T6553]  ? find_vma+0xbf/0x140
[  125.200124][ T6553]  ? __pfx_find_vma+0x10/0x10
[  125.200156][ T6553]  handle_mm_fault+0x3fe/0xad0
[  125.200186][ T6553]  do_user_addr_fault+0x2e4/0xda0
[  125.200213][ T6553]  ? rcu_is_watching+0x12/0xc0
[  125.200251][ T6553]  exc_page_fault+0x64/0xc0
[  125.200283][ T6553]  asm_exc_page_fault+0x26/0x30
[  125.200306][ T6553] RIP: 0010:rep_movs_alternative+0x30/0x90
[  125.200331][ T6553] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  125.200352][ T6553] RSP: 0018:ffffc90004d777e8 EFLAGS: 00050202
[  125.200371][ T6553] RAX: 0000000000000001 RBX: 000000000000000a RCX: 000000000000000a
[  125.200385][ T6553] RDX: fffff520009aef4d RSI: 0000000000000000 RDI: ffffc90004d77a58
[  125.200400][ T6553] RBP: 000000000000000a R08: 0000000000000001 R09: fffff520009aef4c
[  125.200414][ T6553] R10: ffffc90004d77a61 R11: 00000000ffffffff R12: ffffc90004d77d70
[  125.200429][ T6553] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90004d77d78
[  125.200463][ T6553]  _copy_from_iter+0x495/0x16c0
[  125.200506][ T6553]  ? __pfx__copy_from_iter+0x10/0x10
[  125.200542][ T6553]  ? find_held_lock+0x2b/0x80
[  125.200574][ T6553]  ? is_bpf_text_address+0x8a/0x1a0
[  125.200605][ T6553]  ? bpf_ksym_find+0x124/0x1c0
[  125.200633][ T6553]  tun_get_user+0x3c7/0x3cc0
[  125.200674][ T6553]  ? __pfx_tun_get_user+0x10/0x10
[  125.200699][ T6553]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  125.200745][ T6553]  ? find_held_lock+0x2b/0x80
[  125.200778][ T6553]  ? tun_get+0x191/0x370
[  125.200820][ T6553]  tun_chr_write_iter+0xdc/0x210
[  125.200846][ T6553]  do_iter_readv_writev+0x662/0x9e0
[  125.200883][ T6553]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  125.200915][ T6553]  ? common_file_perm+0x1b1/0x500
[  125.200954][ T6553]  ? bpf_lsm_file_permission+0x9/0x10
[  125.200986][ T6553]  ? security_file_permission+0x71/0x210
[  125.201010][ T6553]  ? rw_verify_area+0xcf/0x6c0
[  125.201045][ T6553]  vfs_writev+0x35f/0xde0
[  125.201078][ T6553]  ? proc_fail_nth_write+0x9f/0x220
[  125.201113][ T6553]  ? __pfx_vfs_writev+0x10/0x10
[  125.201171][ T6553]  ? __fget_files+0x20e/0x3c0
[  125.201203][ T6553]  ? __fget_files+0x140/0x3c0
[  125.201246][ T6553]  ? do_writev+0x132/0x340
[  125.201274][ T6553]  do_writev+0x132/0x340
[  125.201307][ T6553]  ? __pfx_do_writev+0x10/0x10
[  125.201349][ T6553]  do_syscall_64+0xcd/0xf80
[  125.201381][ T6553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.201403][ T6553] RIP: 0033:0x7f2bfd58f7c9
[  125.201421][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.201441][ T6553] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  125.201463][ T6553] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[  125.201478][ T6553] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[  125.201491][ T6553] RBP: 00007f2bfb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  125.201503][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.201514][ T6553] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[  125.201544][ T6553]  </TASK>
[  125.790592][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[  126.033161][ T5842] Bluetooth: hci3: unknown advertising packet type: 0xea
[  126.449960][ T6567] FAULT_INJECTION: forcing a failure.
[  126.449960][ T6567] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.498638][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) 
[  126.498672][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  126.498685][ T6567] Call Trace:
[  126.498693][ T6567]  <TASK>
[  126.498703][ T6567]  dump_stack_lvl+0x16c/0x1f0
[  126.498738][ T6567]  should_fail_ex+0x512/0x640
[  126.498777][ T6567]  _copy_from_iter+0x43b/0x16c0
[  126.498829][ T6567]  ? __pfx__copy_from_iter+0x10/0x10
[  126.498860][ T6567]  ? process_measurement+0x4a6/0x22d0
[  126.498890][ T6567]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  126.498939][ T6567]  skb_copy_datagram_from_iter+0x124/0x740
[  126.498973][ T6567]  ? dev_get_by_index+0x17c/0x380
[  126.498993][ T6567]  ? sock_cmsg_send+0x1a0/0x280
[  126.499034][ T6567]  packet_sendmsg+0x2221/0x54a0
[  126.499083][ T6567]  ? aa_sk_perm+0x2f2/0xae0
[  126.499122][ T6567]  ? __pfx_packet_sendmsg+0x10/0x10
[  126.499142][ T6567]  ? __pfx_aa_sk_perm+0x10/0x10
[  126.499185][ T6567]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  126.499219][ T6567]  ____sys_sendmsg+0xa5d/0xc30
[  126.499250][ T6567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.499285][ T6567]  ? __pfx__kstrtoull+0x10/0x10
[  126.499316][ T6567]  ___sys_sendmsg+0x134/0x1d0
[  126.499355][ T6567]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.499408][ T6567]  ? find_held_lock+0x2b/0x80
[  126.499463][ T6567]  __sys_sendmmsg+0x200/0x420
[  126.499490][ T6567]  ? __pfx___sys_sendmmsg+0x10/0x10
[  126.499528][ T6567]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  126.499576][ T6567]  ? fput+0x70/0xf0
[  126.499603][ T6567]  ? ksys_write+0x1ac/0x250
[  126.499637][ T6567]  ? __pfx_ksys_write+0x10/0x10
[  126.499678][ T6567]  __x64_sys_sendmmsg+0x9c/0x100
[  126.499700][ T6567]  ? lockdep_hardirqs_on+0x7c/0x110
[  126.499732][ T6567]  do_syscall_64+0xcd/0xf80
[  126.499766][ T6567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.499790][ T6567] RIP: 0033:0x7faa0df8f7c9
[  126.499810][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.499838][ T6567] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  126.499860][ T6567] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  126.499876][ T6567] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  126.499890][ T6567] RBP: 00007faa0ee40090 R08: 0000000000000000 R09: 0000000000000000
[  126.499904][ T6567] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  126.499916][ T6567] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  126.499948][ T6567]  </TASK>
[  127.278221][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'.
[  128.198661][ T6582] [U] 
[  128.201671][ T6582] [U] 
[  128.204386][ T6582] [U] 
[  128.207093][ T6582] [U] 
[  128.260799][ T6582] [U] 
[  128.263565][ T6582] [U] 
[  128.266276][ T6582] [U] 
[  128.268978][ T6582] [U] 
[  128.304376][ T6582] [U] 
[  128.307130][ T6582] [U] 
[  128.309829][ T6582] [U] 
[  128.312521][ T6582] [U] 
[  128.332287][ T6581] [U] 
[  128.555969][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'.
[  128.600658][ T6600] hsr_slave_0 (unregistering): left promiscuous mode
[  128.724906][ T6600] capability: warning: `syz.0.158' uses 32-bit capabilities (legacy support in use)
[  128.964459][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[  128.981033][ T6610] ovs_ÿþ: entered promiscuous mode
[  129.078571][ T6615] FAULT_INJECTION: forcing a failure.
[  129.078571][ T6615] name failslab, interval 1, probability 0, space 0, times 0
[  129.097040][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) 
[  129.097077][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  129.097091][ T6615] Call Trace:
[  129.097100][ T6615]  <TASK>
[  129.097110][ T6615]  dump_stack_lvl+0x16c/0x1f0
[  129.097151][ T6615]  should_fail_ex+0x512/0x640
[  129.097187][ T6615]  ? __kmalloc_cache_noprof+0x5f/0x800
[  129.097222][ T6615]  should_failslab+0xc2/0x120
[  129.097248][ T6615]  __kmalloc_cache_noprof+0x72/0x800
[  129.097279][ T6615]  ? slip_open+0x846/0x1150
[  129.097320][ T6615]  ? slip_open+0x846/0x1150
[  129.097353][ T6615]  slip_open+0x846/0x1150
[  129.097390][ T6615]  ? __pfx_n_tty_close+0x10/0x10
[  129.097421][ T6615]  ? find_held_lock+0x2b/0x80
[  129.097456][ T6615]  ? __pfx_slip_open+0x10/0x10
[  129.097491][ T6615]  ? down_write+0x14d/0x200
[  129.097530][ T6615]  ? __pfx_slip_open+0x10/0x10
[  129.097566][ T6615]  tty_ldisc_open+0x9f/0x120
[  129.097603][ T6615]  tty_set_ldisc+0x32b/0x780
[  129.097646][ T6615]  tty_ioctl+0xc2d/0x1650
[  129.097674][ T6615]  ? __pfx_tty_ioctl+0x10/0x10
[  129.097712][ T6615]  ? find_held_lock+0x2b/0x80
[  129.097746][ T6615]  ? hook_file_ioctl_common+0x144/0x410
[  129.097793][ T6615]  ? __fget_files+0x20e/0x3c0
[  129.097844][ T6615]  ? __pfx_tty_ioctl+0x10/0x10
[  129.097872][ T6615]  __x64_sys_ioctl+0x18e/0x210
[  129.097910][ T6615]  do_syscall_64+0xcd/0xf80
[  129.097946][ T6615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.097972][ T6615] RIP: 0033:0x7faa0df8f7c9
[  129.097996][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.098017][ T6615] RSP: 002b:00007faa0ee40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.098039][ T6615] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8f7c9
[  129.098054][ T6615] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008
[  129.098067][ T6615] RBP: 00007faa0e013f91 R08: 0000000000000000 R09: 0000000000000000
[  129.098080][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.098093][ T6615] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  129.098129][ T6615]  </TASK>
[  129.312900][    C1] vkms_vblank_simulate: vblank timer overrun
[  129.400806][ T6622] FAULT_INJECTION: forcing a failure.
[  129.400806][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.438201][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.2.162 Not tainted syzkaller #0 PREEMPT(full) 
[  129.438236][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  129.438249][ T6622] Call Trace:
[  129.438257][ T6622]  <TASK>
[  129.438267][ T6622]  dump_stack_lvl+0x16c/0x1f0
[  129.438303][ T6622]  should_fail_ex+0x512/0x640
[  129.438342][ T6622]  _copy_from_user+0x2e/0xd0
[  129.438375][ T6622]  ____sys_sendmsg+0x607/0xc30
[  129.438408][ T6622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.438442][ T6622]  ? __pfx__kstrtoull+0x10/0x10
[  129.438474][ T6622]  ___sys_sendmsg+0x134/0x1d0
[  129.438513][ T6622]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.438590][ T6622]  ? __pfx___might_resched+0x10/0x10
[  129.438634][ T6622]  __sys_sendmmsg+0x200/0x420
[  129.438661][ T6622]  ? __pfx___sys_sendmmsg+0x10/0x10
[  129.438696][ T6622]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  129.438744][ T6622]  ? fput+0x70/0xf0
[  129.438769][ T6622]  ? ksys_write+0x1ac/0x250
[  129.438803][ T6622]  ? __pfx_ksys_write+0x10/0x10
[  129.438844][ T6622]  __x64_sys_sendmmsg+0x9c/0x100
[  129.438867][ T6622]  ? lockdep_hardirqs_on+0x7c/0x110
[  129.438898][ T6622]  do_syscall_64+0xcd/0xf80
[  129.438931][ T6622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.438955][ T6622] RIP: 0033:0x7f482e58f7c9
[  129.438974][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.438994][ T6622] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  129.439017][ T6622] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  129.439033][ T6622] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  129.439048][ T6622] RBP: 00007f482f4cd090 R08: 0000000000000000 R09: 0000000000000000
[  129.439062][ T6622] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  129.439076][ T6622] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  129.439111][ T6622]  </TASK>
[  130.278424][ T6635] FAULT_INJECTION: forcing a failure.
[  130.278424][ T6635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.350152][ T6635] CPU: 0 UID: 0 PID: 6635 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) 
[  130.350179][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.350189][ T6635] Call Trace:
[  130.350195][ T6635]  <TASK>
[  130.350203][ T6635]  dump_stack_lvl+0x16c/0x1f0
[  130.350231][ T6635]  should_fail_ex+0x512/0x640
[  130.350258][ T6635]  _copy_from_user+0x2e/0xd0
[  130.350283][ T6635]  copy_msghdr_from_user+0x98/0x160
[  130.350312][ T6635]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  130.350344][ T6635]  ? find_held_lock+0x2b/0x80
[  130.350376][ T6635]  ___sys_sendmsg+0xfe/0x1d0
[  130.350406][ T6635]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.350459][ T6635]  ? __pfx___might_resched+0x10/0x10
[  130.350494][ T6635]  __sys_sendmmsg+0x200/0x420
[  130.350516][ T6635]  ? __pfx___sys_sendmmsg+0x10/0x10
[  130.350541][ T6635]  ? __pfx_do_futex+0x10/0x10
[  130.350563][ T6635]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  130.350600][ T6635]  ? fput+0x70/0xf0
[  130.350620][ T6635]  ? xfd_validate_state+0x61/0x180
[  130.350648][ T6635]  ? __pfx_do_writev+0x10/0x10
[  130.350679][ T6635]  __x64_sys_sendmmsg+0x9c/0x100
[  130.350699][ T6635]  ? lockdep_hardirqs_on+0x7c/0x110
[  130.350737][ T6635]  do_syscall_64+0xcd/0xf80
[  130.350767][ T6635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.350789][ T6635] RIP: 0033:0x7f482e58f7c9
[  130.350808][ T6635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.350827][ T6635] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  130.350848][ T6635] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  130.350862][ T6635] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004
[  130.350875][ T6635] RBP: 00007f482e613f91 R08: 0000000000000000 R09: 0000000000000000
[  130.350888][ T6635] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  130.350899][ T6635] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  130.350931][ T6635]  </TASK>
[  131.136605][ T6658] FAULT_INJECTION: forcing a failure.
[  131.136605][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.191803][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) 
[  131.191837][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.191851][ T6658] Call Trace:
[  131.191859][ T6658]  <TASK>
[  131.191868][ T6658]  dump_stack_lvl+0x16c/0x1f0
[  131.191906][ T6658]  should_fail_ex+0x512/0x640
[  131.191945][ T6658]  _copy_from_user+0x2e/0xd0
[  131.191979][ T6658]  ____sys_sendmsg+0x607/0xc30
[  131.192011][ T6658]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.192045][ T6658]  ? __pfx__kstrtoull+0x10/0x10
[  131.192077][ T6658]  ___sys_sendmsg+0x134/0x1d0
[  131.192116][ T6658]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.192186][ T6658]  ? __pfx___might_resched+0x10/0x10
[  131.192236][ T6658]  __sys_sendmmsg+0x200/0x420
[  131.192264][ T6658]  ? __pfx___sys_sendmmsg+0x10/0x10
[  131.192298][ T6658]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  131.192347][ T6658]  ? fput+0x70/0xf0
[  131.192373][ T6658]  ? ksys_write+0x1ac/0x250
[  131.192409][ T6658]  ? __pfx_ksys_write+0x10/0x10
[  131.192450][ T6658]  __x64_sys_sendmmsg+0x9c/0x100
[  131.192473][ T6658]  ? lockdep_hardirqs_on+0x7c/0x110
[  131.192504][ T6658]  do_syscall_64+0xcd/0xf80
[  131.192540][ T6658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.192563][ T6658] RIP: 0033:0x7f2bfd58f7c9
[  131.192591][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.192612][ T6658] RSP: 002b:00007f2bfb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  131.192635][ T6658] RAX: ffffffffffffffda RBX: 00007f2bfd7e5fa0 RCX: 00007f2bfd58f7c9
[  131.192651][ T6658] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  131.192666][ T6658] RBP: 00007f2bfb7f6090 R08: 0000000000000000 R09: 0000000000000000
[  131.192680][ T6658] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  131.192694][ T6658] R13: 00007f2bfd7e6038 R14: 00007f2bfd7e5fa0 R15: 00007ffcc0187d48
[  131.192729][ T6658]  </TASK>
[  131.722064][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.735795][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.744335][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.752357][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.760205][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  132.587749][ T6695] FAULT_INJECTION: forcing a failure.
[  132.587749][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.608175][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) 
[  132.608206][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.608218][ T6695] Call Trace:
[  132.608226][ T6695]  <TASK>
[  132.608235][ T6695]  dump_stack_lvl+0x16c/0x1f0
[  132.608271][ T6695]  should_fail_ex+0x512/0x640
[  132.608306][ T6695]  _copy_to_user+0x32/0xd0
[  132.608339][ T6695]  simple_read_from_buffer+0xcb/0x170
[  132.608377][ T6695]  proc_fail_nth_read+0x197/0x240
[  132.608405][ T6695]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  132.608434][ T6695]  ? rw_verify_area+0xcf/0x6c0
[  132.608466][ T6695]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  132.608494][ T6695]  vfs_read+0x1e4/0xcf0
[  132.608537][ T6695]  ? __pfx___mutex_lock+0x10/0x10
[  132.608573][ T6695]  ? __pfx_vfs_read+0x10/0x10
[  132.608618][ T6695]  ? __fget_files+0x20e/0x3c0
[  132.608661][ T6695]  ksys_read+0x12a/0x250
[  132.608693][ T6695]  ? __pfx_ksys_read+0x10/0x10
[  132.608737][ T6695]  do_syscall_64+0xcd/0xf80
[  132.608771][ T6695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.608796][ T6695] RIP: 0033:0x7faa0df8e1dc
[  132.608817][ T6695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  132.608838][ T6695] RSP: 002b:00007faa0ee40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  132.608860][ T6695] RAX: ffffffffffffffda RBX: 00007faa0e1e5fa0 RCX: 00007faa0df8e1dc
[  132.608877][ T6695] RDX: 000000000000000f RSI: 00007faa0ee400a0 RDI: 0000000000000004
[  132.608891][ T6695] RBP: 00007faa0ee40090 R08: 0000000000000000 R09: 0000000000000000
[  132.608905][ T6695] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002
[  132.608919][ T6695] R13: 00007faa0e1e6038 R14: 00007faa0e1e5fa0 R15: 00007ffd4b400fe8
[  132.608955][ T6695]  </TASK>
[  133.009600][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  133.069855][ T6701] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  133.098897][ T6701] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  133.124376][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  133.147549][ T6660] chnl_net:caif_netlink_parms(): no params data found
[  133.557645][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.599905][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.644580][ T6660] bridge_slave_0: entered allmulticast mode
[  133.659445][ T6660] bridge_slave_0: entered promiscuous mode
[  133.679312][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.711869][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.768486][ T6660] bridge_slave_1: entered allmulticast mode
[  133.802079][ T6660] bridge_slave_1: entered promiscuous mode
[  133.848996][ T5841] Bluetooth: hci4: command tx timeout
[  134.041812][ T4392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.223840][ T6740] FAULT_INJECTION: forcing a failure.
[  134.223840][ T6740] name fail_futex, interval 1, probability 0, space 0, times 1
[  134.237864][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) 
[  134.237900][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.237914][ T6740] Call Trace:
[  134.237923][ T6740]  <TASK>
[  134.237932][ T6740]  dump_stack_lvl+0x16c/0x1f0
[  134.237971][ T6740]  should_fail_ex+0x512/0x640
[  134.238010][ T6740]  ? __pfx___might_resched+0x10/0x10
[  134.238051][ T6740]  get_futex_key+0x1d0/0x15f0
[  134.238083][ T6740]  ? __pfx_get_futex_key+0x10/0x10
[  134.238115][ T6740]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.238150][ T6740]  futex_wait_setup+0x9d/0x570
[  134.238194][ T6740]  __futex_wait+0x193/0x2f0
[  134.238231][ T6740]  ? __pfx___futex_wait+0x10/0x10
[  134.238265][ T6740]  ? rcu_is_watching+0x12/0xc0
[  134.238318][ T6740]  ? __pfx_futex_wake_mark+0x10/0x10
[  134.238360][ T6740]  ? futex_hash+0x2c5/0x380
[  134.238395][ T6740]  ? futex_private_hash_put+0x160/0x1b0
[  134.238428][ T6740]  futex_wait+0xe8/0x380
[  134.238465][ T6740]  ? __pfx_futex_wait+0x10/0x10
[  134.238521][ T6740]  do_futex+0x229/0x350
[  134.238551][ T6740]  ? __pfx_do_futex+0x10/0x10
[  134.238581][ T6740]  ? fput+0x70/0xf0
[  134.238608][ T6740]  ? __sys_sendmsg+0x18c/0x220
[  134.238635][ T6740]  __x64_sys_futex+0x1e0/0x4c0
[  134.238671][ T6740]  ? __pfx___x64_sys_futex+0x10/0x10
[  134.238703][ T6740]  ? xfd_validate_state+0x61/0x180
[  134.238753][ T6740]  do_syscall_64+0xcd/0xf80
[  134.238788][ T6740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.238813][ T6740] RIP: 0033:0x7f482e58f7c9
[  134.238834][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.238858][ T6740] RSP: 002b:00007f482f4ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  134.238882][ T6740] RAX: ffffffffffffffda RBX: 00007f482e7e6098 RCX: 00007f482e58f7c9
[  134.238897][ T6740] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f482e7e6098
[  134.238912][ T6740] RBP: 00007f482e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  134.238926][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.238940][ T6740] R13: 00007f482e7e6128 R14: 00007ffd90f18440 R15: 00007ffd90f18528
[  134.238976][ T6740]  </TASK>
[  134.454996][    C1] vkms_vblank_simulate: vblank timer overrun
[  134.685967][ T4392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.759828][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.790451][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.940537][ T4392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.104743][ T5841] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6
[  135.114513][ T4392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.146139][ T6660] team0: Port device team_slave_0 added
[  135.179461][ T6660] team0: Port device team_slave_1 added
[  135.227568][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.237773][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.277025][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.313588][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.333802][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.366880][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.573655][ T6660] hsr_slave_0: entered promiscuous mode
[  135.581304][ T6660] hsr_slave_1: entered promiscuous mode
[  135.594569][ T6660] debugfs: 'hsr0' already exists in 'hsr'
[  135.604492][ T6660] Cannot create hsr debugfs directory
[  135.643597][ T4392] bridge_slave_1: left allmulticast mode
[  135.662882][ T4392] bridge_slave_1: left promiscuous mode
[  135.683930][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.786613][ T4392] bridge_slave_0: left allmulticast mode
[  135.820071][ T4392] bridge_slave_0: left promiscuous mode
[  135.825926][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.928376][ T5841] Bluetooth: hci4: command tx timeout
[  136.211205][ T6778] netlink: 'syz.3.194': attribute type 2 has an invalid length.
[  136.530507][ T4392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.549731][ T4392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.562431][ T4392] bond0 (unregistering): Released all slaves
[  137.345958][ T4392] hsr_slave_0: left promiscuous mode
[  137.366540][ T4392] hsr_slave_1: left promiscuous mode
[  137.404407][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.444693][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.481040][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.516434][ T4392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.678843][ T4392] veth1_macvtap: left promiscuous mode
[  137.696824][ T4392] veth0_macvtap: left promiscuous mode
[  137.703244][ T4392] veth1_vlan: left promiscuous mode
[  137.720721][ T4392] veth0_vlan: left promiscuous mode
[  138.015587][ T5841] Bluetooth: hci4: command tx timeout
[  138.022000][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.028768][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  138.427396][ T4392] team0 (unregistering): Port device team_slave_1 removed
[  138.461981][ T4392] team0 (unregistering): Port device team_slave_0 removed
[  138.854371][ T6660] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  138.916307][ T6660] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.009458][ T6660] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.047294][ T6660] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.594401][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.714096][ T6660] 8021q: adding VLAN 0 to HW filter on device team0
[  139.872368][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.879620][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.943582][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.950820][ T4613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.088708][ T5841] Bluetooth: hci4: command tx timeout
[  140.330817][ T6870] snd_virmidi snd_virmidi.0: control 61678:131081:3:yªƒ>oÆ[k<÷:1597170177 is already present
[  140.754227][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.550525][ T6660] veth0_vlan: entered promiscuous mode
[  141.586122][ T6660] veth1_vlan: entered promiscuous mode
[  141.681021][ T6660] veth0_macvtap: entered promiscuous mode
[  141.710417][ T6660] veth1_macvtap: entered promiscuous mode
[  141.801127][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.890138][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.934550][ T4613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.004394][ T4613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.128930][ T4613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.181494][ T4613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.758225][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.772359][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.919692][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.927546][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.275735][ T6986] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.218: iget: checksum invalid
[  144.671733][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'.
[  144.778287][ T6986] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  144.815495][ T6986] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.218: iget: checksum invalid
[  144.861277][ T6986] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  144.926536][ T6986] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.218: iget: checksum invalid
[  145.304914][ T6986] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  145.353176][ T6986] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.218: iget: checksum invalid
[  145.386221][ T6986] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  145.414352][ T6986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  145.438095][ T6986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.868438][ T7082] syz.4.236 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  149.318353][ T7113] bond0: option all_slaves_active: invalid value ()
[  149.359295][ T7115] bond0: option all_slaves_active: invalid value ()
[  150.366554][ T7112] netlink: 571 bytes leftover after parsing attributes in process `syz.4.243'.
[  152.045582][ T7147] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  152.060511][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  152.128309][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  152.184570][ T7147] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  152.195828][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  152.230362][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  152.255481][ T7147] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  152.283932][ T7147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  152.313062][ T7147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  152.357147][ T7147] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  152.367222][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  152.450165][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  152.658504][ T7167] hub 1-0:1.0: USB hub found
[  152.664186][ T7167] hub 1-0:1.0: 1 port detected
[  152.686373][   T30] audit: type=1800 audit(4294967351.279:2): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="dbroot" dev="configfs" ino=14106 res=0 errno=0
[  153.360537][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'.
[  153.463988][ T7177] program syz.4.254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.609239][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  154.171268][ T7206] openvswitch: netlink: Message has 20 unknown bytes.
[  154.258744][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  154.303861][ T7206] svc: failed to register nfsdv3 RPC service (errno 111).
[  154.305102][ T7206] svc: failed to register nfsaclv3 RPC service (errno 111).
[  154.328540][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  154.413097][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  154.989304][   T30] audit: type=1804 audit(4294967353.579:3): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.263" name="/newroot/71/file0" dev="tmpfs" ino=393 res=1 errno=0
[  155.688317][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  156.328118][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.338893][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'.
[  156.408143][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  156.488116][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  157.192124][ T7291] openvswitch: netlink: IP tunnel dst address not specified
[  157.768334][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.405941][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  158.501289][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  158.565016][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  160.164458][ T7358] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  161.163792][ T7369] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  161.266461][ T7369] CIFS mount error: No usable UNC path provided in device string!
[  161.266461][ T7369] 
[  161.277518][ T7369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  162.634363][ T7399] netlink: 186 bytes leftover after parsing attributes in process `syz.3.289'.
[  162.762158][ T7396] FAULT_INJECTION: forcing a failure.
[  162.762158][ T7396] name failslab, interval 1, probability 0, space 0, times 0
[  162.832761][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) 
[  162.832791][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  162.832805][ T7396] Call Trace:
[  162.832812][ T7396]  <TASK>
[  162.832821][ T7396]  dump_stack_lvl+0x16c/0x1f0
[  162.832864][ T7396]  should_fail_ex+0x512/0x640
[  162.832897][ T7396]  ? fs_reclaim_acquire+0xae/0x150
[  162.832923][ T7396]  should_failslab+0xc2/0x120
[  162.832953][ T7396]  __kmalloc_noprof+0xdd/0x8f0
[  162.832978][ T7396]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  162.833008][ T7396]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  162.833028][ T7396]  tomoyo_realpath_from_path+0xc2/0x6e0
[  162.833059][ T7396]  tomoyo_check_open_permission+0x2ab/0x3c0
[  162.833096][ T7396]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  162.833169][ T7396]  ? do_raw_spin_lock+0x12c/0x2b0
[  162.833209][ T7396]  tomoyo_file_open+0x6b/0x90
[  162.833240][ T7396]  security_file_open+0x84/0x1e0
[  162.833265][ T7396]  do_dentry_open+0x597/0x1590
[  162.833291][ T7396]  ? security_inode_permission+0xbf/0x260
[  162.833332][ T7396]  vfs_open+0x82/0x3f0
[  162.833365][ T7396]  path_openat+0x2078/0x3140
[  162.833401][ T7396]  ? __pfx_path_openat+0x10/0x10
[  162.833448][ T7396]  do_filp_open+0x20b/0x470
[  162.833473][ T7396]  ? __pfx_do_filp_open+0x10/0x10
[  162.833523][ T7396]  ? alloc_fd+0x471/0x7d0
[  162.833556][ T7396]  do_sys_openat2+0x11f/0x280
[  162.833584][ T7396]  ? __pfx_do_sys_openat2+0x10/0x10
[  162.833626][ T7396]  __x64_sys_openat+0x174/0x210
[  162.833656][ T7396]  ? __pfx___x64_sys_openat+0x10/0x10
[  162.833700][ T7396]  do_syscall_64+0xcd/0xf80
[  162.833735][ T7396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.833759][ T7396] RIP: 0033:0x7f482e58f7c9
[  162.833779][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.833801][ T7396] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  162.833823][ T7396] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  162.833839][ T7396] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  162.833855][ T7396] RBP: 00007f482e613f91 R08: 0000000000000000 R09: 0000000000000000
[  162.833869][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.833883][ T7396] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  162.833919][ T7396]  </TASK>
[  162.836071][ T7396] ERROR: Out of memory at tomoyo_realpath_from_path.
[  163.305242][ T7401] binder: BINDER_SET_CONTEXT_MGR already set
[  163.329685][ T7401] binder: 7394:7401 ioctl 4018620d 9 returned -16
[  165.632254][   T30] audit: type=1800 audit(4294969412.270:4): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.301" name="dbroot" dev="configfs" ino=15145 res=0 errno=0
[  166.261668][ T7440] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  166.315035][ T7435] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  166.325720][ T7435] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  166.332461][ T7435] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  166.396584][ T7435] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  166.559646][ T7446] FAULT_INJECTION: forcing a failure.
[  166.559646][ T7446] name failslab, interval 1, probability 0, space 0, times 0
[  166.613158][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(full) 
[  166.613180][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  166.613188][ T7446] Call Trace:
[  166.613194][ T7446]  <TASK>
[  166.613201][ T7446]  dump_stack_lvl+0x16c/0x1f0
[  166.613226][ T7446]  should_fail_ex+0x512/0x640
[  166.613246][ T7446]  ? kmem_cache_alloc_noprof+0x62/0x760
[  166.613266][ T7446]  should_failslab+0xc2/0x120
[  166.613280][ T7446]  kmem_cache_alloc_noprof+0x75/0x760
[  166.613297][ T7446]  ? sk_prot_alloc+0x60/0x2a0
[  166.613315][ T7446]  ? sk_prot_alloc+0x60/0x2a0
[  166.613338][ T7446]  ? find_held_lock+0x2b/0x80
[  166.613357][ T7446]  sk_prot_alloc+0x60/0x2a0
[  166.613374][ T7446]  sk_alloc+0x36/0xc20
[  166.613394][ T7446]  inet_create+0x3a1/0x1040
[  166.613407][ T7446]  ? inet_create+0x93/0x1040
[  166.613421][ T7446]  __sock_create+0x339/0x8a0
[  166.613440][ T7446]  __sys_socket+0x153/0x2d0
[  166.613457][ T7446]  ? __pfx___sys_socket+0x10/0x10
[  166.613473][ T7446]  ? xfd_validate_state+0x61/0x180
[  166.613492][ T7446]  ? __task_pid_nr_ns+0x1f5/0x500
[  166.613509][ T7446]  __x64_sys_socket+0x72/0xb0
[  166.613524][ T7446]  ? lockdep_hardirqs_on+0x7c/0x110
[  166.613541][ T7446]  do_syscall_64+0xcd/0xf80
[  166.613560][ T7446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.613574][ T7446] RIP: 0033:0x7f482e58f7c9
[  166.613586][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.613598][ T7446] RSP: 002b:00007f482f4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  166.613612][ T7446] RAX: ffffffffffffffda RBX: 00007f482e7e5fa0 RCX: 00007f482e58f7c9
[  166.613621][ T7446] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  166.613630][ T7446] RBP: 00007f482e613f91 R08: 0000000000000000 R09: 0000000000000000
[  166.613638][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.613646][ T7446] R13: 00007f482e7e6038 R14: 00007f482e7e5fa0 R15: 00007ffd90f18528
[  166.613664][ T7446]  </TASK>
[  167.258638][ T7452] binder: 7450:7452 ioctl 4020565a 38 returned -22
[  167.797216][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.360062][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  168.360089][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout
[  168.366157][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.962561][ T5842] Bluetooth: hci4: unexpected event 0x35 length: 13 > 6
[  171.377639][ T7498] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.309: iget: checksum invalid
[  171.608544][ T7498] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  171.665050][ T7498] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.309: iget: checksum invalid
[  171.747157][ T7498] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  171.796369][ T7498] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.309: iget: checksum invalid
[  171.841683][ T7502] bond0: option all_slaves_active: invalid value ()
[  171.870680][ T7498] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  171.958977][ T7498] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.309: iget: checksum invalid
[  172.085076][ T7498] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  172.096523][ T7498] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  172.153488][ T7498] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.870647][ T7508] FAULT_INJECTION: forcing a failure.
[  172.870647][ T7508] name failslab, interval 1, probability 0, space 0, times 0
[  172.980147][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) 
[  172.980179][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  172.980193][ T7508] Call Trace:
[  172.980201][ T7508]  <TASK>
[  172.980211][ T7508]  dump_stack_lvl+0x16c/0x1f0
[  172.980250][ T7508]  should_fail_ex+0x512/0x640
[  172.980285][ T7508]  ? __kmalloc_cache_noprof+0x5f/0x800
[  172.980316][ T7508]  should_failslab+0xc2/0x120
[  172.980340][ T7508]  __kmalloc_cache_noprof+0x72/0x800
[  172.980367][ T7508]  ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x5a0
[  172.980401][ T7508]  ? nl80211_dump_wiphy_parse.constprop.0+0x97/0x5a0
[  172.980428][ T7508]  nl80211_dump_wiphy_parse.constprop.0+0x97/0x5a0
[  172.980459][ T7508]  ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10
[  172.980503][ T7508]  nl80211_dump_wiphy+0x457/0x800
[  172.980530][ T7508]  ? __pfx___alloc_skb+0x10/0x10
[  172.980569][ T7508]  genl_dumpit+0x125/0x230
[  172.980604][ T7508]  netlink_dump+0x539/0xd30
[  172.980630][ T7508]  ? __pfx_netlink_dump+0x10/0x10
[  172.980671][ T7508]  ? __asan_memset+0x23/0x50
[  172.980703][ T7508]  ? genl_start+0x67f/0x980
[  172.980739][ T7508]  __netlink_dump_start+0x6d6/0x990
[  172.980770][ T7508]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  172.980804][ T7508]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  172.980834][ T7508]  ? consume_skb+0xcc/0x100
[  172.980864][ T7508]  ? __pfx_genl_get_cmd+0x10/0x10
[  172.980892][ T7508]  ? __pfx_genl_start+0x10/0x10
[  172.980921][ T7508]  ? __pfx_genl_dumpit+0x10/0x10
[  172.980948][ T7508]  ? __pfx_genl_done+0x10/0x10
[  172.980982][ T7508]  ? __radix_tree_lookup+0x21f/0x2c0
[  172.981018][ T7508]  genl_rcv_msg+0x46e/0x800
[  172.981051][ T7508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.981079][ T7508]  ? __pfx_nl80211_dump_wiphy+0x10/0x10
[  172.981105][ T7508]  ? __pfx_nl80211_dump_wiphy_done+0x10/0x10
[  172.981146][ T7508]  netlink_rcv_skb+0x158/0x420
[  172.981175][ T7508]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.981206][ T7508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.981248][ T7508]  ? netlink_deliver_tap+0x1ae/0xd30
[  172.981280][ T7508]  genl_rcv+0x28/0x40
[  172.981307][ T7508]  netlink_unicast+0x5aa/0x870
[  172.981343][ T7508]  ? __pfx_netlink_unicast+0x10/0x10
[  172.981370][ T7508]  ? __pfx___might_resched+0x10/0x10
[  172.981419][ T7508]  netlink_sendmsg+0x8c8/0xdd0
[  172.981454][ T7508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.981487][ T7508]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  172.981545][ T7508]  ____sys_sendmsg+0xa5d/0xc30
[  172.981577][ T7508]  ? copy_msghdr_from_user+0x10a/0x160
[  172.981613][ T7508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.981651][ T7508]  ? __pfx_futex_wake_mark+0x10/0x10
[  172.981693][ T7508]  ___sys_sendmsg+0x134/0x1d0
[  172.981732][ T7508]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.981766][ T7508]  ? __lock_acquire+0x433/0x22f0
[  172.981838][ T7508]  __sys_sendmsg+0x16d/0x220
[  172.981861][ T7508]  ? __pfx___sys_sendmsg+0x10/0x10
[  172.981880][ T7508]  ? __x64_sys_futex+0x1e0/0x4c0
[  172.981932][ T7508]  do_syscall_64+0xcd/0xf80
[  172.981967][ T7508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.981992][ T7508] RIP: 0033:0x7fb1bf98f7c9
[  172.982012][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.982035][ T7508] RSP: 002b:00007fb1c0753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.982060][ T7508] RAX: ffffffffffffffda RBX: 00007fb1bfbe6090 RCX: 00007fb1bf98f7c9
[  172.982077][ T7508] RDX: 0000000000004000 RSI: 0000200000000700 RDI: 0000000000000005
[  172.982092][ T7508] RBP: 00007fb1bfa13f91 R08: 0000000000000000 R09: 0000000000000000
[  172.982107][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.982121][ T7508] R13: 00007fb1bfbe6128 R14: 00007fb1bfbe6090 R15: 00007ffe2b93bdb8
[  172.982159][ T7508]  </TASK>
[  174.916523][ T7521] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  174.934252][ T7521] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  174.960402][ T7521] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  175.370988][ T7530] Invalid ELF header magic: != ELF
[  175.807979][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.818550][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.827043][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.839477][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.847595][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.260047][ T7540] hub 1-0:1.0: USB hub found
[  176.306838][ T7540] hub 1-0:1.0: 1 port detected
[  176.374132][ T7543] hub 1-0:1.0: USB hub found
[  176.436952][ T7543] hub 1-0:1.0: 1 port detected
[  176.637933][ T7535] chnl_net:caif_netlink_parms(): no params data found
[  176.669025][ T7547] usb usb10: usbfs: process 7547 (syz.3.323) did not claim interface 0 before use
[  176.854345][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.861751][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.872555][ T7535] bridge_slave_0: entered allmulticast mode
[  176.881397][ T7535] bridge_slave_0: entered promiscuous mode
[  176.918649][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.934838][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.949221][ T7535] bridge_slave_1: entered allmulticast mode
[  176.980179][ T7535] bridge_slave_1: entered promiscuous mode
[  177.052187][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.071419][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.164415][ T7535] team0: Port device team_slave_0 added
[  177.219095][ T7535] team0: Port device team_slave_1 added
[  177.298596][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.314510][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.345451][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.360013][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.367380][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.395029][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.485864][ T7535] hsr_slave_0: entered promiscuous mode
[  177.505114][ T7535] hsr_slave_1: entered promiscuous mode
[  177.514171][ T7535] debugfs: 'hsr0' already exists in 'hsr'
[  177.521228][ T7535] Cannot create hsr debugfs directory
[  177.904510][ T5842] Bluetooth: hci0: command tx timeout
[  178.219175][ T7535] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  178.281112][ T7535] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  178.347969][ T7535] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  178.404080][ T7535] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  178.820026][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.913008][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  178.961774][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.968993][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.992840][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.000103][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.297825][ T7578] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000
[  179.324944][ T7578] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  179.345625][ T7578] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  179.368574][ T7578] raw: ffff888078000000 0000000000000000 00000001ffffffff 0000000000000000
[  179.427534][ T7584] Invalid ELF header magic: != ELF
[  179.457837][ T7578] page dumped because: unmovable page
[  179.508215][ T7578] page_owner tracks the page as allocated
[  179.554946][ T7578] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6654, tgid 6654 (syz-executor), ts 131532247950, free_ts 130948770279
[  179.584834][ T7578]  post_alloc_hook+0x1af/0x220
[  179.590060][ T7578]  get_page_from_freelist+0xd0b/0x31a0
[  179.695497][ T7578]  __alloc_frozen_pages_noprof+0x25f/0x2440
[  179.762779][ T7578]  alloc_pages_mpol+0x1fb/0x550
[  179.781301][ T7578]  alloc_pages_noprof+0x12d/0x180
[  179.797444][ T7578]  __vmalloc_node_range_noprof+0x6f8/0x1480
[  179.806737][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.829148][ T7578]  vmalloc_user_noprof+0x9e/0xe0
[  179.864360][ T7578]  kcov_ioctl+0x4c/0x6e0
[  179.874472][ T7578]  __x64_sys_ioctl+0x18e/0x210
[  179.914052][ T7578]  do_syscall_64+0xcd/0xf80
[  179.950939][ T7578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.971378][ T7578] page last free pid 23 tgid 23 stack trace:
[  179.974424][ T5842] Bluetooth: hci0: command tx timeout
[  180.028252][ T7578]  __free_frozen_pages+0x7df/0x1160
[  180.033907][ T7578]  __folio_put+0x329/0x450
[  180.039136][ T7578]  put_page+0x209/0x270
[  180.045263][ T7578]  skb_release_data+0x459/0x7a0
[  180.051909][ T7578]  __kfree_skb+0x4f/0x70
[  180.058719][ T7578]  tcp_write_queue_purge+0x18d/0xd50
[  180.065857][ T7578]  tcp_done_with_error+0x4f/0xc0
[  180.084559][ T7578]  tcp_reset+0x140/0x2e0
[  180.107510][ T7578]  tcp_rcv_state_process+0x240d/0x6490
[  180.123204][ T7578]  tcp_v4_do_rcv+0x68e/0x10a0
[  180.172742][ T7578]  tcp_v4_rcv+0x3077/0x4db0
[  180.192642][ T7578]  ip_protocol_deliver_rcu+0xba/0x4c0
[  180.205439][ T7578]  ip_local_deliver_finish+0x3f2/0x720
[  180.230071][ T7578]  ip_local_deliver+0x18e/0x1f0
[  180.247755][ T7578]  ip_rcv+0x2e0/0x600
[  180.272197][ T7578]  __netif_receive_skb_one_core+0x197/0x1e0
[  180.647153][ T7535] veth0_vlan: entered promiscuous mode
[  180.660687][ T7535] veth1_vlan: entered promiscuous mode
[  180.773862][ T7535] veth0_macvtap: entered promiscuous mode
[  180.784917][ T7535] veth1_macvtap: entered promiscuous mode
[  180.913462][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.232030][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.326999][ T3921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.386457][ T3921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.555273][ T3921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.625092][ T3921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.043047][ T5842] Bluetooth: hci0: command tx timeout
[  182.215505][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.265239][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.368018][ T3921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.437642][ T3921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.112504][ T5842] Bluetooth: hci0: command tx timeout
[  184.541786][    C0] ------------[ cut here ]------------
[  184.547726][    C0] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#0: swapper/0/0
[  184.557769][    C0] Modules linked in:
[  184.561969][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  184.570997][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  184.581106][    C0] RIP: 0010:subflow_data_ready+0x40b/0x790
[  184.586925][    C0] Code: 89 ee e8 78 6b 73 f6 40 84 ed 75 21 e8 1e 71 73 f6 44 89 fe bf 07 00 00 00 e8 c1 6b 73 f6 41 83 ff 07 74 09 e8 06 71 73 f6 90 <0f> 0b 90 e8 fd 70 73 f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6
[  184.606570][    C0] RSP: 0000:ffffc90000007550 EFLAGS: 00010246
[  184.612688][    C0] RAX: 0000000000000000 RBX: ffff888056c20cc0 RCX: ffffffff8b4a05bf
[  184.620675][    C0] RDX: ffffffff8e097a80 RSI: ffffffff8b4a05ca RDI: 0000000000000005
[  184.628638][    C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007
[  184.636635][    C0] R10: 0000000000000004 R11: 00000000ce2e859b R12: ffff888056c1b000
[  184.644639][    C0] R13: 1ffff92000000eaa R14: ffff888067a8b800 R15: 0000000000000004
[  184.652625][    C0] FS:  0000000000000000(0000) GS:ffff888124993000(0000) knlGS:0000000000000000
[  184.661575][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.668148][    C0] CR2: 0000001b34fc1ff8 CR3: 0000000075804000 CR4: 00000000003526f0
[  184.676151][    C0] Call Trace:
[  184.679470][    C0]  <IRQ>
[  184.682332][    C0]  ? __pfx_subflow_data_ready+0x10/0x10
[  184.687887][    C0]  ? tcp_data_ecn_check+0x54/0x740
[  184.693034][    C0]  tcp_data_ready+0x110/0x5a0
[  184.697730][    C0]  tcp_data_queue+0x1aa6/0x5000
[  184.702608][    C0]  ? tcp_urg+0x10f/0xb80
[  184.706848][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  184.712124][    C0]  ? tcp_parse_options+0x1200/0x1250
[  184.717411][    C0]  tcp_rcv_state_process+0xfb6/0x6490
[  184.722826][    C0]  ? lock_acquire+0x179/0x330
[  184.727531][    C0]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  184.733387][    C0]  ? sk_filter_trim_cap+0x11a/0xde0
[  184.738590][    C0]  ? lock_acquire+0x179/0x330
[  184.743281][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  184.748308][    C0]  ? tcp_v4_do_rcv+0x68e/0x10a0
[  184.753186][    C0]  tcp_v4_do_rcv+0x68e/0x10a0
[  184.757885][    C0]  tcp_v4_rcv+0x3077/0x4db0
[  184.762421][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  184.767272][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  184.772754][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  184.777598][    C0]  ip_protocol_deliver_rcu+0xba/0x4c0
[  184.782988][    C0]  ip_local_deliver_finish+0x3f2/0x720
[  184.788442][    C0]  ip_local_deliver+0x18e/0x1f0
[  184.793312][    C0]  ip_rcv+0x2e0/0x600
[  184.797284][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  184.801789][    C0]  __netif_receive_skb_one_core+0x197/0x1e0
[  184.807679][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  184.814134][    C0]  ? lock_acquire+0x179/0x330
[  184.818851][    C0]  ? process_backlog+0x450/0x1650
[  184.823891][    C0]  __netif_receive_skb+0x1d/0x160
[  184.828951][    C0]  process_backlog+0x4a2/0x1650
[  184.833818][    C0]  __napi_poll.constprop.0+0xb3/0x540
[  184.839229][    C0]  net_rx_action+0x9f9/0xfa0
[  184.843844][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  184.849052][    C0]  ? rcu_is_watching+0x12/0xc0
[  184.853846][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  184.859087][    C0]  ? tmigr_handle_remote+0x132/0x380
[  184.864480][    C0]  ? run_timer_base+0x121/0x190
[  184.869366][    C0]  handle_softirqs+0x219/0x8b0
[  184.874142][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  184.879456][    C0]  __irq_exit_rcu+0x109/0x170
[  184.884141][    C0]  irq_exit_rcu+0x9/0x30
[  184.888398][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  184.894041][    C0]  </IRQ>
[  184.896958][    C0]  <TASK>
[  184.899896][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  184.905953][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  184.911616][    C0] Code: 86 76 02 e9 93 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f1 2b 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  184.931251][    C0] RSP: 0000:ffffffff8e007df8 EFLAGS: 000002c2
[  184.937320][    C0] RAX: 0000000000100977 RBX: 0000000000000000 RCX: ffffffff8b5e66f9
[  184.945340][    C0] RDX: 0000000000000000 RSI: ffffffff8daa5989 RDI: ffffffff8bf1d600
[  184.953358][    C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed101708671d
[  184.961387][    C0] R10: ffff8880b84338eb R11: 00000000ffffffff R12: 0000000000000000
[  184.969391][    C0] R13: ffffffff8e097a80 R14: ffffffff908632d0 R15: 0000000000000000
[  184.977369][    C0]  ? ct_kernel_exit+0x139/0x190
[  184.982259][    C0]  default_idle+0x13/0x20
[  184.986595][    C0]  default_idle_call+0x6c/0xb0
[  184.991392][    C0]  do_idle+0x38d/0x510
[  184.995473][    C0]  ? __pfx_do_idle+0x10/0x10
[  185.000123][    C0]  cpu_startup_entry+0x4f/0x60
[  185.004896][    C0]  rest_init+0x16b/0x2b0
[  185.009157][    C0]  ? acpi_subsystem_init+0x133/0x180
[  185.014465][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  185.020039][    C0]  start_kernel+0x3f6/0x4d0
[  185.024758][    C0]  x86_64_start_reservations+0x18/0x30
[  185.030270][    C0]  x86_64_start_kernel+0x130/0x190
[  185.035396][    C0]  common_startup_64+0x13e/0x148
[  185.040387][    C0]  </TASK>
[  185.043398][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  185.050666][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  185.059589][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.069631][    C0] Call Trace:
[  185.072894][    C0]  <IRQ>
[  185.075721][    C0]  dump_stack_lvl+0x3d/0x1f0
[  185.080307][    C0]  vpanic+0x640/0x6f0
[  185.084287][    C0]  ? subflow_data_ready+0x40b/0x790
[  185.089478][    C0]  panic+0xca/0xd0
[  185.093200][    C0]  ? __pfx_panic+0x10/0x10
[  185.097632][    C0]  ? check_panic_on_warn+0x1f/0xb0
[  185.102749][    C0]  check_panic_on_warn+0xab/0xb0
[  185.107690][    C0]  __warn+0x108/0x3c0
[  185.111683][    C0]  __report_bug+0x2a0/0x520
[  185.116190][    C0]  ? subflow_data_ready+0x40b/0x790
[  185.121409][    C0]  ? __pfx___report_bug+0x10/0x10
[  185.126441][    C0]  ? netif_rx_internal+0x10a/0x5d0
[  185.131549][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  185.137448][    C0]  ? mptcp_get_options+0x19c/0x2af0
[  185.142650][    C0]  ? subflow_data_ready+0x40b/0x790
[  185.147845][    C0]  report_bug+0xb2/0x220
[  185.152084][    C0]  ? subflow_data_ready+0x40b/0x790
[  185.157279][    C0]  handle_bug+0x127/0x260
[  185.161603][    C0]  exc_invalid_op+0x17/0x50
[  185.166101][    C0]  asm_exc_invalid_op+0x1a/0x20
[  185.170941][    C0] RIP: 0010:subflow_data_ready+0x40b/0x790
[  185.176741][    C0] Code: 89 ee e8 78 6b 73 f6 40 84 ed 75 21 e8 1e 71 73 f6 44 89 fe bf 07 00 00 00 e8 c1 6b 73 f6 41 83 ff 07 74 09 e8 06 71 73 f6 90 <0f> 0b 90 e8 fd 70 73 f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6
[  185.196438][    C0] RSP: 0000:ffffc90000007550 EFLAGS: 00010246
[  185.202517][    C0] RAX: 0000000000000000 RBX: ffff888056c20cc0 RCX: ffffffff8b4a05bf
[  185.210478][    C0] RDX: ffffffff8e097a80 RSI: ffffffff8b4a05ca RDI: 0000000000000005
[  185.218439][    C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007
[  185.226400][    C0] R10: 0000000000000004 R11: 00000000ce2e859b R12: ffff888056c1b000
[  185.234360][    C0] R13: 1ffff92000000eaa R14: ffff888067a8b800 R15: 0000000000000004
[  185.242763][    C0]  ? subflow_data_ready+0x3ff/0x790
[  185.247967][    C0]  ? subflow_data_ready+0x40a/0x790
[  185.253173][    C0]  ? __pfx_subflow_data_ready+0x10/0x10
[  185.258718][    C0]  ? tcp_data_ecn_check+0x54/0x740
[  185.263823][    C0]  tcp_data_ready+0x110/0x5a0
[  185.268498][    C0]  tcp_data_queue+0x1aa6/0x5000
[  185.273360][    C0]  ? tcp_urg+0x10f/0xb80
[  185.277594][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  185.282786][    C0]  ? tcp_parse_options+0x1200/0x1250
[  185.288068][    C0]  tcp_rcv_state_process+0xfb6/0x6490
[  185.293439][    C0]  ? lock_acquire+0x179/0x330
[  185.298108][    C0]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  185.303912][    C0]  ? sk_filter_trim_cap+0x11a/0xde0
[  185.309106][    C0]  ? lock_acquire+0x179/0x330
[  185.313771][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  185.318793][    C0]  ? tcp_v4_do_rcv+0x68e/0x10a0
[  185.323649][    C0]  tcp_v4_do_rcv+0x68e/0x10a0
[  185.328349][    C0]  tcp_v4_rcv+0x3077/0x4db0
[  185.332851][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  185.337708][    C0]  ? __pfx_raw_local_deliver+0x10/0x10
[  185.343161][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  185.348007][    C0]  ip_protocol_deliver_rcu+0xba/0x4c0
[  185.353373][    C0]  ip_local_deliver_finish+0x3f2/0x720
[  185.358825][    C0]  ip_local_deliver+0x18e/0x1f0
[  185.363666][    C0]  ip_rcv+0x2e0/0x600
[  185.367637][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  185.372127][    C0]  __netif_receive_skb_one_core+0x197/0x1e0
[  185.378017][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  185.384451][    C0]  ? lock_acquire+0x179/0x330
[  185.389124][    C0]  ? process_backlog+0x450/0x1650
[  185.394145][    C0]  __netif_receive_skb+0x1d/0x160
[  185.399167][    C0]  process_backlog+0x4a2/0x1650
[  185.404021][    C0]  __napi_poll.constprop.0+0xb3/0x540
[  185.409391][    C0]  net_rx_action+0x9f9/0xfa0
[  185.413983][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  185.419110][    C0]  ? rcu_is_watching+0x12/0xc0
[  185.423904][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  185.429103][    C0]  ? tmigr_handle_remote+0x132/0x380
[  185.434391][    C0]  ? run_timer_base+0x121/0x190
[  185.439235][    C0]  handle_softirqs+0x219/0x8b0
[  185.444004][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  185.449292][    C0]  __irq_exit_rcu+0x109/0x170
[  185.453966][    C0]  irq_exit_rcu+0x9/0x30
[  185.458206][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  185.463832][    C0]  </IRQ>
[  185.466749][    C0]  <TASK>
[  185.469689][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  185.475681][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  185.481309][    C0] Code: 86 76 02 e9 93 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 f1 2b 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  185.500919][    C0] RSP: 0000:ffffffff8e007df8 EFLAGS: 000002c2
[  185.506983][    C0] RAX: 0000000000100977 RBX: 0000000000000000 RCX: ffffffff8b5e66f9
[  185.514945][    C0] RDX: 0000000000000000 RSI: ffffffff8daa5989 RDI: ffffffff8bf1d600
[  185.522910][    C0] RBP: fffffbfff1c12f50 R08: 0000000000000001 R09: ffffed101708671d
[  185.530882][    C0] R10: ffff8880b84338eb R11: 00000000ffffffff R12: 0000000000000000
[  185.538847][    C0] R13: ffffffff8e097a80 R14: ffffffff908632d0 R15: 0000000000000000
[  185.546827][    C0]  ? ct_kernel_exit+0x139/0x190
[  185.551700][    C0]  default_idle+0x13/0x20
[  185.556036][    C0]  default_idle_call+0x6c/0xb0
[  185.560790][    C0]  do_idle+0x38d/0x510
[  185.564856][    C0]  ? __pfx_do_idle+0x10/0x10
[  185.569442][    C0]  cpu_startup_entry+0x4f/0x60
[  185.574197][    C0]  rest_init+0x16b/0x2b0
[  185.578427][    C0]  ? acpi_subsystem_init+0x133/0x180
[  185.583706][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  185.589243][    C0]  start_kernel+0x3f6/0x4d0
[  185.593754][    C0]  x86_64_start_reservations+0x18/0x30
[  185.599215][    C0]  x86_64_start_kernel+0x130/0x190
[  185.604328][    C0]  common_startup_64+0x13e/0x148
[  185.609268][    C0]  </TASK>
[  185.612651][    C0] Kernel Offset: disabled
[  185.616982][    C0] Rebooting in 86400 seconds..