last executing test programs:

16.885657679s ago: executing program 1 (id=102):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
capget$auto(0x0, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0xf53, 0xffffffffffff0008, 0x17)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x6, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff)

15.238674754s ago: executing program 3 (id=106):
socket(0xa, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pwrite64$auto(0xc8, &(0x7f00000002c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\x03\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0xfffffffffffffffc)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0x1d, 0x3000, 0x9, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7e, 0x0, 0x6, 0x4}, {0x100, 0x3, 0x7, 0x85, 0x3, 0x1a7b870b, 0xee93, 0x8, 0x100000000}})
socket(0xa, 0x1, 0x7)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000)
socket(0x15, 0x5, 0x0)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
write$auto_sg_fops_sg(r0, &(0x7f0000000080)="4a0200000000000000899edb615550fd8c7c924d87f0030047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed642", 0x2f)
setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0)
close_range$auto(0x2, 0x8000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3)
open(0x0, 0x22040, 0x75)
socket(0x10, 0x2, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28)

13.253499355s ago: executing program 1 (id=108):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
r0 = socket(0x22, 0x2, 0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0xa, 0x7)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
fstat$auto(r0, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000000)="a0581d0a66df1c53ccd58e01343c2158318dc595dda45ec0edd5e654c9e1c79515778324226f11d67130a226aba7ccf40f188108b2dcc5bf5e632b1467d07a604ffa17778c84dff466fe67fc506ad8d94be95e982a7d3e2431f1630bb66dba122b1805dcf35fd35056154fff612970da0dc721164ef5a1cf231450f58e35ed36850900ada241ca3ae529cbf2196c0901a76e4a2139cf53ea5db19472afc621925aeb6938f64cb47921a52600dcfb5f389d0bbf979f09981c3e1b73d91abf3606da6521584622b3e4db5c9d81586e42ef1e8d2a69b229d4ecdf63429795")

12.68106101s ago: executing program 3 (id=110):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0)
ioctl$auto_EVIOCSMASK(r0, 0x40104593, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)

12.110402859s ago: executing program 3 (id=111):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0)
sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @binary="f541"}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x810)
close_range$auto(0x2, 0xa, 0x0)
r2 = socket(0xa, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0xff)
connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r2, 0x6)
r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x0], 0x1}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
shmget$auto(0x8, 0x10563, 0x568d1af2)
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0)

12.088237208s ago: executing program 1 (id=112):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r0, 0x40000000029, 0x20, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
madvise$auto_MADV_HUGEPAGE(0x0, 0x2, 0xe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
r3 = waitid$auto(0x42, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x7, 0x7d2, 0xd5ae, @_sigfault={&(0x7f00000000c0)="4ba6a403b94fd1f75aa81163a7af0e349a8b2abe5e6c7fbf7c5082a67f38520dbdc7692997aa45e63b6b16e806371967f4d563fcf251b4a49080e02c5463c66752df", @_addr_lsb=0x8}}}, 0x2, &(0x7f00000002c0)={{0x0, 0xffffffffffffffff}, {0x4e, 0x7}, 0x7f, 0x9, 0x6, 0x3fffffff80000000, 0x800, 0x7, 0x7, 0x7, 0x9, 0x3, 0x10001, 0x9577, 0x9, 0x9})
r4 = geteuid()
fstat$auto(0xffffffffffffffff, &(0x7f0000001200)={0x1, 0x8000000000000001, 0xfffffffffffffb52, 0x3ff, <r5=>r4, 0x0, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x6, 0x8000000000000000, 0x5, 0x7f, 0x100000001})
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000380)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r3, r4}}}, 0x0)
r6 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001500)={'vlan0\x00', <r7=>0x0})
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000003180)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003140)={&(0x7f0000001540)={0x1be0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x18b, 0x3, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @fd=r6}, @nested={0x68, 0x128, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x13b, 0x0, 0x0, @uid=r5}, @typed={0x56, 0x64, 0x0, 0x0, @binary="d539f52b764a086b9834562c64e87c11a66fcd961a43aa1a2df1d226c6fe381b5f8711ca5d7f7e32ecda22fa347ff003960183020de33804ce26af556cbdc80de21c11a064c12f5f4cfb73b10812f3f03470"}]}, @typed={0xee, 0xc7, 0x0, 0x0, @binary="ae117192e97c50096d9331e4e07d0e495a9c63189cb9312f8300fe7ed62b335a10d7d81a44fffded4a4d0980388f4b3505a3b486848ad1dd0990a7426438321703afef3857e4b2c1ebeaf37846d0d011b549549de35bc9ce4f9077b42361a09d1266255b69514c77206f887d5312658e7a0f44608ca6e71cd8ebf45ec7b934b7602a34bba4d9cd937c506d9419303b8ee9db05c7fc83c125065c7f9f92f56275decf7da88215a980963e2b16a383b7ed31287d243832fea2286c36cb88270f106b1c9d2fcd9d24da2c56c0e3bc332bc94ea98f52f76826858bf9c8b00c64e6a7d97c6a7881a9aebb8c15"}, @generic="01231bea86a95dfc873df8c3de79d50ca82ae7a048a14157818a77697f8564a56cf7707eb5d208"]}, @MACSEC_ATTR_RXSC_CONFIG={0x107, 0x2, 0x0, 0x1, [@nested={0xc, 0xea, 0x0, 0x1, [@nested={0x4, 0x103}, @nested={0x4, 0x94}]}, @generic="bc5db4087ac7b0b6a3ca1c2b4b065cd5b32d9998eccac634ac41b4932e9a1fa9392a30344fe5ad07fc46f18dd5d12e5ae32c886a025cc117f55d92444559458806cdbfee0d4cdb723f676cd34fcc7d36248dfc2c9499d8e485b88c95048e68ad2177294193d10b9c655b5055a41ec68c6d29b86f294d787a83f76b4f0f3aab1ff28732a3de0a72b480a12e621e5051aee0545ea8627c9b1216d6160a4be4922359199d070692c58bbd1a7b0ad897f1be86a8720cd5097c7ce166673caf7506d972098fb41eddd6c2e5044f9e32ab10f050534414921ac80856baa6d6f0914fc125ea2a5d59d8cc3c2dd62c77d741ebeff8d4d02af81d14"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_RXSC_CONFIG={0x537, 0x2, 0x0, 0x1, [@generic="e4623bf63ff10be624bf82153cd434c8dd2695113ce47a459c42cdee81143108fbc4c7b8082b3f31bc46cc6900490c64ffddcbd4918e4a2cba544478de29e502e6aad10b82e3", @typed={0xd2, 0x150, 0x0, 0x0, @binary="7830d266d59f1df775140d9c5ca05b2ddd0f73b644bcd8f3928522c076c599ea0c74be6175c9262f36e7bf4ac6264b9f7400f51c5308b1d814100281300f1763846b303a87737bfe5ee09a8bc8b7cce73cb90eff3a0dcf8e0351f4227e8912ba0d7d0bbf66633701ef2ec8e61d7ffe2e1ccfd7c641bc7b0ced8211b2b6f5f55e169d62091c5a9d6bb43d21c57f5e5836f58739dcbde8c46c634d51d3a6d9a17191d8cdc8d9ae82955ee195ccaf175d8cde0d72442fe467e4e6df6862b7659aa0be4ee2c05be45d0257a275551dea"}, @generic="f3518046a16fb08cddefae6f125539a8c68af2ef0813eef0afd4a0b0fae8a06c6b894ba8e0c3cf0b2995ccaf1e12f6d8685796ae7fadb21ed77c0706820c5e6d857ed84727aa64f34a649ca11e6ae544e49f9f057cfc877e828dbaf67d51ba18a7fdcff4ee25f50b263865b20c474fc299892c3fd541a49b5a1495d0ef", @nested={0x295, 0x8, 0x0, 0x1, [@nested={0x4, 0xaa}, @generic="429bf90d09255d8c466b8656bf34930dd359d2009f5c7eee2817f09cd06a95e48e4dc90bcb7520e8479b40b3b709bb43b38b0a1b73b10060d0cd7c6e6dde70235a5022bb07d9ce8743ceb2208b2513ff73a372fc61db7d3f1d541f35ba28fa71822ac0bb5446943f73101d09472cb5fb4e215a18918a218a2568", @typed={0x8, 0xf8, 0x0, 0x0, @fd=r2}, @generic="2b6508c5febaeb44c442782b258889c8a139dc253edcb112590835c9733ebb6e02c2eef20c44e52d171d9b51ffc4758af499e6087b6c9866e623ee7024d05c4c486688c88ef2b9d449254ca7f22a8948329ed4340b3a4c5ddd53d1a5196f40042952ecf61ee20d00c27f465ec02b0a07363cd10cf292fb37ab48a3e89eba0c7d6833f00734e4197ee4bf020f92b58da7f3ded3f9a472759f529a4130c8c9b1e06c17159e652c8f37a55b70ba173f1297a3460c6b57f2582dc0009add9c0a72bed392a2e462ddc884e48eeea606b410baedf91df2a1a01831b34381d9d02c223c3aac27781f1fd1f2a99e5bceae88be844e7a7bad7a900e19c4fe480d2d4fad", @nested={0x4, 0x32}, @nested={0x4, 0xe1}, @generic="b608725d92096f693003f041bfde9afff41a64192676965de357e0d9ad6aee98119511ecd24565e43a8176d5b6eb7feda08eea786213d86f3a39155c693feca274b590d5f29b0b4d173ec76901bb585e53b5bb293cc7efeeb7472a68fe25651a5f3005c5370853b56b298735a993b0661cf02d4288a4360905e7b57ec22b616b38fc66ffde86a3b29dfe050b5f577ebdef1433cb5d079ef28508712933351ca9a864fea44f0a67b20c10dd71897f29ea8becc662589550e539162e9bf26c0225112af974fdc6e8a4c7c153eff341fd971fdc5a7275a097b821c9faf183eb94f2dbf03a9b81659179c8010586c9ed420e7994cbc47c9a2e1d", @nested={0x4, 0x55}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="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", @typed={0x7, 0x111, 0x0, 0x0, @str=',}\x00'}]}, @MACSEC_ATTR_SA_CONFIG={0x148, 0x3, 0x0, 0x1, [@generic="f0c5d5dff3ca0058b80e6b452b43e4cac4d05aaf655b9db131475fcf64ef7015a8fbea63219faf4c3ab9574b73bfcde694b0773523e5e0b2c1cbcba2a5a4fd551948917fe7a19c7b631249e7544aef92cdc9c527e8ee202f99267383c264eb542bb886ea19835c1f755f215a96f435b5e61519db33cb9e0b0811cbebf714298cc30e6fdafcb5715b960f2eb4fac7230f7dc77612c663b5ebd3c560705e09536e18a0cea8e08ee17623e34b131813cd3c0bd987a61a4fe025d164642b6a2ad919050c41609a953abccb9e4beffa5c42450a469e47f6dca20ca5efd577cafc20d49317de0499be1050df9203d47163f443b9a18a", @typed={0x14, 0xb4, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @generic="0fd24dd930c1c671019187bf8a", @nested={0x20, 0x49, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @fd}, @typed={0x5, 0x2d, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x11d}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r6}]}, @typed={0x8, 0xf9, 0x0, 0x0, @fd=r1}]}, @MACSEC_ATTR_RXSC_CONFIG={0x1098, 0x2, 0x0, 0x1, [@typed={0x6d, 0x147, 0x0, 0x0, @binary="48a687df07ee939191323da75a6b5dcff879b4085d4c75de25b18343fad3dfa65012185d8e8c07a887a43d80e2a48e7c0c98ecc6043c35931fb1660937a05e770ad16cdbcb1ae5ba610abf546ee134e7626e4b7b937740d4c53a94300fd9ecbd354084a5a8f735f2cc"}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xc, 0x8f, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @str='/%#\x00'}]}, @generic="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", @typed={0x8, 0xde, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@loopback}]}, @MACSEC_ATTR_SA_CONFIG={0x216, 0x3, 0x0, 0x1, [@nested={0x28, 0x83, 0x0, 0x1, [@nested={0x4, 0xdd}, @typed={0x8, 0xee, 0x0, 0x0, @u32=0x2}, @typed={0xf, 0xbe, 0x0, 0x0, @str='-#@)-\xff{\\\x10&\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @ipv4=@local}]}, @generic="ede0cc0344b23338cd1a", @typed={0xc, 0x121, 0x0, 0x0, @u64=0x1}, @generic="877dd10d8427b0e5ba8e0d1dd0aed1f497c2726bd9372064d112245d620a122272db2e3091ce74b623a91d7f4ff6a23c6551c9685bae2381d03f5ee27576ff525265c8ffa59e1b058eb167ba9309365780d48cdbc50956b97e5a0a6183ba67f4171abaf9f51fcdf4fa7fe853e4ecea88cee665f7", @nested={0x160, 0x62, 0x0, 0x1, [@generic="76afd5be2a81fba4bd37866edee8cca50c92d6ba256e43556c4a9f20a7c5930308f9ecb0fcb305b313bac316724b805f4c139d1d7f90daf2cef2aceb8a1e62e545af148803bc0296aed39916adcbd9c65465c1b26552561a1837c1b3d89c7c9b1e989ac882", @nested={0x4, 0x49}, @generic="68488c1b39122f23e8eba4ef3df45e30e49b74f3f089b9fd07ce5ae79968f57690db5f769e9a7dd494f8903b78230e8f727aa39fa3563981455f5f9b48ed9b75a6d33905b21013406b576b7266f5b4576d8d9efc55da507bb735773b87c0ed66df79da79d3827e7dbd8198c83a596e81f14dd50689f29dfe334ab85e53730ff419137a46586cf0880d284e3b9946cf0581da06d7580eb0734c78080050a09a814cf3dab7b6d6a67329f9eefc01fc682a5410a4e34d6aa57feb036fd94665172b83d22c18a1e3fa7b5f2c3cd826dd03f3c5fdc2e6a40144388596f5694746fe66b8b73db5edf3b64af3bc9e744f4980ede27ee0"]}]}]}, 0x1be0}, 0x1, 0x0, 0x0, 0x100}, 0x40080)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/module/kvm/parameters/pi_inject_timer\x00', 0x10b142, 0x0)
sendfile$auto(r8, r8, 0x0, 0x200)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f00000000c0)=0x6)
shmctl$auto_SHM_INFO(0xe, 0xe, &(0x7f0000000240)={{0x7, 0xee01, 0xee01, 0x5, 0x400, 0x8, 0x100}, 0x2, 0x6, 0x5, 0x9, @raw=0x8, @inferred=0xffffffffffffffff, 0xc8, 0x0, &(0x7f0000000100)="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", &(0x7f0000000200)="5bbce36193a026aa"})
syz_clone(0x40200800, &(0x7f00000002c0)="cad5371af42e2c716e32837b9c6b7300482954033cbba121b0b011494aec234d250fa49aa5f1c2e6f65ed2fd0328d2c176c5aaba6743496f8bc898a3af41ee5ad3ba364dee13a20c511c1e5de3128c45747b5d52c6dc06dd7a19a43644ad252ccf6c33270ab16fc2580aa7f5b6cf7c4d444f206a319d3860a817c5af747f5be7afb47dbfd0f21c97bb7ed9c7faebbc0248f9f8aca296a8c359d88acea8e59f34177590ab0652080ecec02783edb0e35e3dc022e26a782dd90647686006b51d97337ef423b201cff4fabea804dd", 0xcd, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="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")
ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000001440)=0x80000000)
r9 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28)
sendmmsg$auto(r9, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x9, 0x0, 0x5, 0x1000}, 0x80000005}, 0x2, 0x100)
setsockopt$auto_SO_LOCK_FILTER(r2, 0x100, 0x2c, &(0x7f0000001480)='/proc/sys/fs/binfmt_misc/register\x00', 0x9)

11.34394679s ago: executing program 1 (id=115):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000)
timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x40000, 0x0)
read$auto(r0, 0x0, 0x809e2f)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x9, 0xff, &(0x7f00000002c0)='SE6\x00\x00', 0xeec)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, <r2=>0x5f, 0x0, 0x3}, 0x6f3)
getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0)
gettid()
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x0, 0xfffffffffffffa08, &(0x7f0000000200)=&(0x7f00000001c0), &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x8, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e0, 0x40eb2, 0xffffffffffffffff, 0x5)
unshare$auto(0x40000080)
write$auto(0x3, 0x0, 0xfdef)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
read$auto_evdev_fops_evdev(r4, 0x0, 0x0)
ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x0)
write$auto(0x3, 0x0, 0x100082)

8.858113967s ago: executing program 2 (id=117):
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
pipe$auto(0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x22082, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r3, 0x4010ae68, r4)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x6, 0xfff, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x25, 0x1, 0x106)
unshare$auto(0x20000)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r5, 0x0)
socket(0x2, 0x1, 0x84)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)

7.110680537s ago: executing program 0 (id=119):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0)
ioctl$auto_EVIOCSMASK(r0, 0x40104593, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)

6.447978964s ago: executing program 1 (id=120):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000)
clone$auto(0x2, 0x81, 0x0, 0x0, 0x3)
ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, 0x0)
mmap$auto(0x6, 0x8000000000000000, 0x40, 0x14, 0xffffffffffffffff, 0x5)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
madvise$auto(0x0, 0x20499d, 0x9)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
socket(0x10, 0x2, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0)
mmap$auto(0x2, 0x6, 0xb, 0x19, r0, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r2)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd700000dcdf2512000000180001801400020076657468305f746f5f627269646765000800090000000000e3709954414043719e70ce2954bfed3bd7793039db05cbc4ddb68e222b81e8b8eaf00fac2cc5b371ade5c82012c6ee7d444ea2829d5754376b3aff7ffc0c221213903f14d98b8e7943847ae721961e3e6d6bf4e2fc1390c42fde438ec4813205a8ab7aaa60cfd2b9c0b01fb7d1413f6e9565824cf47b8fc56e94cc4d339faad1edcf1ea5a49fc63e2029e562d28306b9f793d45254182d04d776b079b15b04cbc66432e54ec2e1c105b36bcb55090057a17c73560ee74a54c864940dc2d0574436dc009aefa1fb53"], 0x34}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
timer_create$auto(0x0, 0x0, 0x0)
timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0)
timer_gettime$auto(0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/slabs_cpu_partial\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x20)
ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000100))
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800)

6.250521133s ago: executing program 0 (id=121):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$auto(r0, &(0x7f0000000040)='@}\x00', 0xa)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e24, @loopback}, 0x200000)
memfd_secret$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x5, 0x15, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0)
write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
r2 = socket(0xa, 0x3, 0xff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7fffffe)

6.026622033s ago: executing program 3 (id=122):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r0)
sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x3a401f830d8a7339, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0xa6}}, 0x14}}, 0x4008040)

4.786865013s ago: executing program 0 (id=123):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x60883, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(r1, 0x0, 0x5)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(r0, 0x4000ae41, r3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000000)="65c476dd783642edce05aea451354153ca43e8de7e618a97fd64f5936c2c46446d9bc42d")
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
lsm_list_modules$auto(0x0, 0x0, 0xfffffffd)
lsm_list_modules$auto(0x0, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
userfaultfd$auto(0x4)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x1, 0x1)
timerfd_create$auto(0x0, 0x0)

4.727962947s ago: executing program 3 (id=124):
socket(0x2, 0x3, 0xa) (async)
connect$auto(0x3, &(0x7f0000000040)=@ethernet={0x306, @broadcast}, 0x6)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000380)="a1a1d138c4c4b7ba26eb4ac17f230f58f3ff36ca208cd70775ddf2ca72ee086c67bff2ea6e3646c074eb784b532c33990bc22f18b013e28ded")
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x261c2, 0x184) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0)
readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_clone(0x26900080, 0x0, 0xffffffa1, 0x0, 0x0, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000300), 0x450c00, 0x0) (async)
move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) (async)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x6, 0x102)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0)
read$auto(r3, 0x0, 0x80)
write$auto(0xffffffffffffffff, 0x0, 0x2000000005) (async)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)

4.492306699s ago: executing program 2 (id=125):
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x8000000, &(0x7f0000000040)="9de2a46f6a0f9b0900a4b4bd147827483493187fea7acfaf943880ee4a2e2e19d5d99f64a1795b18dfe1d1121e6055c267dfe9cb9188b288a3a705784b34871ecb44b50019", 0x45, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="78c78cf7fa43dd617d43e84ed41f30031cf52551e54fff2d48da4c78378dc0b0ee62862e714a29c58522ee757e448c9e3eb149faa63f6873b9d27f59a480a78f3012b358c0658bdfa757ec05fe")
socket(0x1d, 0x2, 0x6)
sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='!\x00&'], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r0 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
r1 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)

4.239250756s ago: executing program 0 (id=126):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) (fail_nth: 7)

3.980071997s ago: executing program 2 (id=127):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2a540, 0x0)
r0 = io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/uevent\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000040)=' ', 0x4)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r2, 0x0, @_sigev_thread={0x0, 0x0}})
ioctl$auto_BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x7, 0x7f})
read$auto_proc_page_owner_operations_page_owner(r2, 0x0, 0x0)
read$auto_proc_oom_score_adj_operations_base(r2, &(0x7f0000000080)=""/164, 0xa4)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x80400, 0x0)

2.44386223s ago: executing program 0 (id=128):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
mmap$auto(0x400000000000003, 0x5, 0x800000000000e2, 0x50, r0, 0x4)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0)
io_uring_setup$auto(0x2, 0x0)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c)
open(0x0, 0x22240, 0x154)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xe000000, 0x1, 0x0, 0x0, 0x1, 0x3691, 0xd6b, {0x100000000, 0xfffc}, 0x5, 0x6, 0xfffffffffffffff9, 0x1007bfe, 0x0, 0x9, 0x1000, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x8})
r3 = getsid$auto(0xffffffffffffffff)
prctl$auto(0xbbb, 0xfffffffffffffff7, r3, 0xffff0000000, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0)
socket(0x3, 0x5, 0x5)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
read$auto(r5, 0x0, 0x20)
r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0)
sendfile$auto(r6, r6, 0x0, 0x10000800000003)
clone$auto(0xd6, 0x9, 0x0, 0x0, 0x2)
r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r8, 0x0, 0x39b8)

1.8837525s ago: executing program 3 (id=129):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/if_inet6\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x20499d, 0x9)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r10=>0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r10}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
r11 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r12=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r12, 0xfd}, 0x6a)
r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r15=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r15], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'veth0_to_batadv\x00', <r16=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'macsec0\x00', <r17=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GET2(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r10}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r12}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r15}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r16}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0xc080)

1.871734617s ago: executing program 2 (id=130):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0)
ioctl$auto_EVIOCSMASK(r0, 0x40104593, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)

1.165981072s ago: executing program 2 (id=131):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video53\x00', 0x1c1400, 0x0)
ioctl$auto(0x3, 0x4020565a, 0x38)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0)
socket(0xa, 0x1, 0x100)
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
socket(0x21, 0x3, 0x9)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT, @ANYBLOB="eba499f0b6d5133876e009c9fac21f9c38032675478c68a2407b5b45a75e35c2a3cfedfa4521c2d8d190730e1e57fe7c9505e942610827b51686a8f03d1ddb408288a7ea7e69555c0ac550b8c8004faeb63b610f7ff9260c34194a826bf58ba8e4b32d89165b24d5cb8d771851bddbb0d6333462c68f5bab07c33d483fefd88d2d1dbe4535610e", @ANYRES8=r1], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)
mmap$auto(0x0, 0x1000, 0xa000000000, 0x10, 0x404, 0x10008000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0)
r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, 0x0, 0xbc102, 0x0)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, r2, 0x8001)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
listmount$auto(&(0x7f0000000240)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

1.065265066s ago: executing program 0 (id=132):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shmctl$auto_SHM_INFO(0x51, 0xe, &(0x7f0000000280)={{0x3000, <r0=>0xffffffffffffffff, <r1=>0xee01, 0x10, 0x6, 0x266e, 0x97a}, 0x1, 0xfffffffffffffff8, 0xfffffffffffffc01, 0x9, @raw=0x7, @raw=0x8, 0xb, 0x0, &(0x7f00000001c0)="c09cf01bbf6e868d8196078731839d1f6ce0737c0acc137050b88b8ab42112674c4184b584545825c32fce38c18b550824fef2a630f3d5673c71ff538ae527626fc13460b51f80ae4fa0774fd68e4c596ddb942793975b7705a8259d02135c64ca5eb89a6fbac1a0f94b01f0d5344e73d257152ccf26227586c81ea1440d5f6d1a79", &(0x7f0000000040)="dffc27c540001f17f4f3079b"})
r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x3, &(0x7f0000000440)={{0xd00, 0x2}, {0x2, 0x101}, 0x6, 0x2, 0x35e, 0xffffffff, 0xc812, 0x8, 0xe3, 0x1, 0x4, 0x6, 0x5, 0x4, 0x2})
r3 = syz_clone(0x6080200, &(0x7f0000000500)="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", 0xfb, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="6092691c3e97a57a470541714fcea3")
msgctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000700)={{0xffff, r0, r1, 0xe, 0xf08, 0x1b, 0x4}, &(0x7f0000000300)=0x8f, &(0x7f0000000340)=0x2, 0x2, 0x7fffffffffffffff, 0x6, 0x5, 0xd5f, 0x4f08, 0x197d, 0x2, @inferred=r2, @inferred=r3})
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140))
unshare$auto(0x40000080)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x2aa00b6e)
futex$auto(0xfffffffffffffffd, 0xc, 0xe72, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x8, 0x5, 0x3, 0x0, 0x2000000000005, 0xfffff602)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r6, 0x0, 0xfffffe13)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40c01, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x38100, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r7)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r9=>0x0})
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB='6S\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf254100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0)
read$auto(r10, 0x0, 0x20)
write$auto(r5, 0x0, 0x8ed)

967.369601ms ago: executing program 1 (id=133):
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd)
socket(0xf, 0x3, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
pipe$auto(0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x22082, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r3, 0x4010ae68, r4)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x6, 0xfff, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec)
mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x25, 0x1, 0x106)
unshare$auto(0x20000)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r5, 0x0)
socket(0x2, 0x1, 0x84)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)

0s ago: executing program 2 (id=134):
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4008af23, r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd97, 0x2}, 0x0, 0x7ffffffff000, 0x0)
io_uring_setup$auto(0x1, 0x0)
bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)=@info={<r2=>0xffffffffffffffff, 0x3}, 0x1)
ioctl$auto_BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000180)={@raw=0x8, "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"})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f00000000c0), 0x9}, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts.
[   89.113897][ T5837] cgroup: Unknown subsys name 'net'
[   89.225543][ T5837] cgroup: Unknown subsys name 'cpuset'
[   89.234917][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   91.238747][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   93.541851][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.549873][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.559255][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.567131][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.575714][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.583698][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.584773][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.593036][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.607703][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.615589][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.623753][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.632878][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.644385][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.644544][ T5170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.652527][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.659087][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.667249][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.681926][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.696585][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.705395][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.223361][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   94.330377][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   94.435793][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   94.552614][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.559848][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.569472][ T5846] bridge_slave_0: entered allmulticast mode
[   94.577036][ T5846] bridge_slave_0: entered promiscuous mode
[   94.586996][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.594317][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.601874][ T5846] bridge_slave_1: entered allmulticast mode
[   94.609095][ T5846] bridge_slave_1: entered promiscuous mode
[   94.616517][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   94.718686][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.726723][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.735594][ T5847] bridge_slave_0: entered allmulticast mode
[   94.745044][ T5847] bridge_slave_0: entered promiscuous mode
[   94.757919][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.786740][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.794860][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.802160][ T5847] bridge_slave_1: entered allmulticast mode
[   94.809256][ T5847] bridge_slave_1: entered promiscuous mode
[   94.819078][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.902998][ T5846] team0: Port device team_slave_0 added
[   94.943783][ T5846] team0: Port device team_slave_1 added
[   94.985450][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.992983][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.000420][ T5849] bridge_slave_0: entered allmulticast mode
[   95.008190][ T5849] bridge_slave_0: entered promiscuous mode
[   95.018412][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.039734][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.046975][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.054393][ T5848] bridge_slave_0: entered allmulticast mode
[   95.061785][ T5848] bridge_slave_0: entered promiscuous mode
[   95.069328][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.076908][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.084440][ T5849] bridge_slave_1: entered allmulticast mode
[   95.092677][ T5849] bridge_slave_1: entered promiscuous mode
[   95.102561][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.128128][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.135173][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.161136][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.174012][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.181228][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.188705][ T5848] bridge_slave_1: entered allmulticast mode
[   95.196201][ T5848] bridge_slave_1: entered promiscuous mode
[   95.232490][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.239500][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.265951][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.311411][ T5847] team0: Port device team_slave_0 added
[   95.336998][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.349633][ T5847] team0: Port device team_slave_1 added
[   95.384216][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.396088][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.448802][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.473171][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.480625][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.507090][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.523664][ T5846] hsr_slave_0: entered promiscuous mode
[   95.530034][ T5846] hsr_slave_1: entered promiscuous mode
[   95.553625][ T5849] team0: Port device team_slave_0 added
[   95.573831][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.580928][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.607526][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.629374][ T5849] team0: Port device team_slave_1 added
[   95.638563][ T5848] team0: Port device team_slave_0 added
[   95.682703][ T5848] team0: Port device team_slave_1 added
[   95.752523][   T51] Bluetooth: hci2: command tx timeout
[   95.758288][   T51] Bluetooth: hci3: command tx timeout
[   95.764887][ T5859] Bluetooth: hci0: command tx timeout
[   95.770689][ T5859] Bluetooth: hci1: command tx timeout
[   95.791238][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.798480][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.824486][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.860679][ T5847] hsr_slave_0: entered promiscuous mode
[   95.867900][ T5847] hsr_slave_1: entered promiscuous mode
[   95.875004][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.883004][ T5847] Cannot create hsr debugfs directory
[   95.889603][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.897036][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.923101][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.941771][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.948923][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.974939][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.024938][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.032073][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.058687][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.213023][ T5849] hsr_slave_0: entered promiscuous mode
[   96.219493][ T5849] hsr_slave_1: entered promiscuous mode
[   96.226059][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.234064][ T5849] Cannot create hsr debugfs directory
[   96.246603][ T5848] hsr_slave_0: entered promiscuous mode
[   96.253393][ T5848] hsr_slave_1: entered promiscuous mode
[   96.259674][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.268048][ T5848] Cannot create hsr debugfs directory
[   96.472641][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.505194][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.515954][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.563917][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.773135][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.785589][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.800299][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.812725][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.911356][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.928890][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.940275][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.967703][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.082446][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.103297][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.114584][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.114876][ T1225] cfg80211: failed to load regulatory.db
[   97.136631][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.246255][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.266993][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.327267][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   97.363960][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.371191][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.390914][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   97.414809][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.426202][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.433383][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.467606][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.475364][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.501651][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.508852][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.539631][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   97.560736][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.567920][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.579226][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.586652][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.670858][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.717715][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.825967][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   97.836774][ T5859] Bluetooth: hci1: command tx timeout
[   97.842426][   T51] Bluetooth: hci3: command tx timeout
[   97.847902][   T51] Bluetooth: hci2: command tx timeout
[   97.847983][ T5170] Bluetooth: hci0: command tx timeout
[   97.886326][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.893732][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.969125][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.976408][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.370476][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.490237][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.554701][ T5847] veth0_vlan: entered promiscuous mode
[   98.609619][ T5847] veth1_vlan: entered promiscuous mode
[   98.679552][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.713227][ T5846] veth0_vlan: entered promiscuous mode
[   98.740627][ T5846] veth1_vlan: entered promiscuous mode
[   98.779269][ T5847] veth0_macvtap: entered promiscuous mode
[   98.810367][ T5847] veth1_macvtap: entered promiscuous mode
[   98.837512][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.879955][ T5849] veth0_vlan: entered promiscuous mode
[   98.901117][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.918368][ T5846] veth0_macvtap: entered promiscuous mode
[   98.930830][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.950531][ T5846] veth1_macvtap: entered promiscuous mode
[   98.960061][ T5849] veth1_vlan: entered promiscuous mode
[   98.991128][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.003726][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.013446][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.023804][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.034747][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.070885][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.109354][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.119132][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.128105][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.139098][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.216724][ T5848] veth0_vlan: entered promiscuous mode
[   99.255319][ T5849] veth0_macvtap: entered promiscuous mode
[   99.291200][ T5848] veth1_vlan: entered promiscuous mode
[   99.307051][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.317948][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.324036][ T5849] veth1_macvtap: entered promiscuous mode
[   99.430769][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.435279][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.446986][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.459675][ T5848] veth0_macvtap: entered promiscuous mode
[   99.471008][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.485365][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.499095][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.533617][ T5848] veth1_macvtap: entered promiscuous mode
[   99.537405][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.545481][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.557727][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.566693][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.577385][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.587882][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.649475][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.699938][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.735346][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.776896][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.822182][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.830992][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.867631][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.915024][ T5170] Bluetooth: hci0: command tx timeout
[   99.920625][ T5852] Bluetooth: hci2: command tx timeout
[   99.920662][ T5859] Bluetooth: hci3: command tx timeout
[   99.933122][   T51] Bluetooth: hci1: command tx timeout
[   99.971185][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  100.091334][ T3588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.132016][ T3588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.220693][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.247776][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.286853][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.295044][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.372262][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.468889][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.499616][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.542287][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.752621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.761703][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  101.505800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.700136][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  101.993541][ T5859] Bluetooth: hci3: command tx timeout
[  101.999632][ T5859] Bluetooth: hci1: command tx timeout
[  102.005193][   T51] Bluetooth: hci0: command tx timeout
[  102.008298][ T5170] Bluetooth: hci2: command tx timeout
[  102.142236][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.304329][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.321948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.336678][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.358049][ T5977] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7'.
[  103.369990][ T5976] ima: policy update failed
[  103.379639][   T30] audit: type=1802 audit(1752201978.704:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7" res=0 errno=0
[  103.670180][ T5990] random: crng reseeded on system resumption
[  104.173444][ T5997] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  104.274682][ T5998] openvswitch: netlink: Message has 27 unknown bytes.
[  104.364142][ T5998] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  106.058873][ T6010] Zero length message leads to an empty skb
[  106.068466][ T6010] nfs4: Unknown parameter '�
'
[  107.145593][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'.
[  108.587855][ T6039] random: crng reseeded on system resumption
[  109.447256][ T6049] process 'syz.2.20' launched ':,' with NULL argv: empty string added
[  110.122485][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'.
[  110.134965][ T6052] nfs4: Unknown parameter '�
'
[  115.842819][ T6116] mmap: syz.3.34 (6116): VmData 46071808 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  116.356409][ T6118] FAULT_INJECTION: forcing a failure.
[  116.356409][ T6118] name fail_futex, interval 1, probability 0, space 0, times 1
[  116.402517][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.3.36 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  116.402562][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.402579][ T6118] Call Trace:
[  116.402589][ T6118]  <TASK>
[  116.402601][ T6118]  dump_stack_lvl+0x16c/0x1f0
[  116.402650][ T6118]  should_fail_ex+0x512/0x640
[  116.402699][ T6118]  get_futex_key+0x1d0/0x1540
[  116.402740][ T6118]  ? __pfx_get_futex_key+0x10/0x10
[  116.402774][ T6118]  ? css_rstat_updated+0x9d/0xd30
[  116.402818][ T6118]  futex_wait_setup+0x84/0x510
[  116.402874][ T6118]  __futex_wait+0x194/0x2f0
[  116.402920][ T6118]  ? __pfx___futex_wait+0x10/0x10
[  116.402961][ T6118]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  116.403007][ T6118]  ? __pfx_futex_wake_mark+0x10/0x10
[  116.403056][ T6118]  ? plist_check_head+0xa3/0x150
[  116.403087][ T6118]  ? find_held_lock+0x2b/0x80
[  116.403130][ T6118]  futex_wait+0xe8/0x380
[  116.403173][ T6118]  ? __pfx_futex_wait+0x10/0x10
[  116.403238][ T6118]  do_futex+0x229/0x350
[  116.403275][ T6118]  ? __pfx_do_futex+0x10/0x10
[  116.403317][ T6118]  ? kasan_quarantine_put+0x10a/0x240
[  116.403361][ T6118]  ? lockdep_hardirqs_on+0x7c/0x110
[  116.403412][ T6118]  __x64_sys_futex+0x1e0/0x4c0
[  116.403457][ T6118]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.403495][ T6118]  ? __pfx___x64_sys_mount+0x10/0x10
[  116.403554][ T6118]  do_syscall_64+0xcd/0x490
[  116.403600][ T6118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.403631][ T6118] RIP: 0033:0x7f9e4238e929
[  116.403655][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.403683][ T6118] RSP: 002b:00007f9e401f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.403713][ T6118] RAX: ffffffffffffffda RBX: 00007f9e425b5fa8 RCX: 00007f9e4238e929
[  116.403732][ T6118] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e425b5fa8
[  116.403750][ T6118] RBP: 00007f9e425b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  116.403767][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e425b5fac
[  116.403784][ T6118] R13: 0000000000000000 R14: 00007ffffa155100 R15: 00007ffffa1551e8
[  116.403822][ T6118]  </TASK>
[  118.271653][ T6106] random: crng reseeded on system resumption
[  119.150564][ T6147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  120.247781][ T6133] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  121.592350][ T6161] random: crng reseeded on system resumption
[  130.513998][ T6248] FAULT_INJECTION: forcing a failure.
[  130.513998][ T6248] name failslab, interval 1, probability 0, space 0, times 0
[  130.551654][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.2.58 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  130.551699][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  130.551716][ T6248] Call Trace:
[  130.551726][ T6248]  <TASK>
[  130.551738][ T6248]  dump_stack_lvl+0x16c/0x1f0
[  130.551788][ T6248]  should_fail_ex+0x512/0x640
[  130.551832][ T6248]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  130.551877][ T6248]  should_failslab+0xc2/0x120
[  130.551906][ T6248]  __kmalloc_cache_noprof+0x6a/0x3e0
[  130.551947][ T6248]  ? alloc_fs_context+0x57/0x9c0
[  130.551996][ T6248]  alloc_fs_context+0x57/0x9c0
[  130.552047][ T6248]  path_mount+0xaf8/0x2020
[  130.552093][ T6248]  ? kmem_cache_free+0x2d1/0x4d0
[  130.552135][ T6248]  ? __pfx_path_mount+0x10/0x10
[  130.552187][ T6248]  ? putname+0x154/0x1a0
[  130.552220][ T6248]  __x64_sys_mount+0x28d/0x310
[  130.552268][ T6248]  ? __pfx___x64_sys_mount+0x10/0x10
[  130.552335][ T6248]  do_syscall_64+0xcd/0x490
[  130.552384][ T6248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.552414][ T6248] RIP: 0033:0x7f1a3b78e929
[  130.552438][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.552466][ T6248] RSP: 002b:00007f1a3c676038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  130.552495][ T6248] RAX: ffffffffffffffda RBX: 00007f1a3b9b5fa0 RCX: 00007f1a3b78e929
[  130.552514][ T6248] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000
[  130.552532][ T6248] RBP: 00007f1a3b810b39 R08: 0000000000000000 R09: 0000000000000000
[  130.552549][ T6248] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000
[  130.552566][ T6248] R13: 0000000000000000 R14: 00007f1a3b9b5fa0 R15: 00007ffd99b61aa8
[  130.552603][ T6248]  </TASK>
[  132.205757][ T6258] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  134.800743][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'.
[  138.077947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.143986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  138.973678][ T6308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.67'.
[  139.072022][ T6308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.67'.
[  139.105531][ T6308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.67'.
[  139.162048][ T6308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.67'.
[  139.322170][ T6308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.67'.
[  139.884721][ T6308] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  140.624695][ T6330] binder: 6329:6330 ioctl 80087601 0 returned -22
[  142.071798][ T6335] netlink: 338 bytes leftover after parsing attributes in process `syz.0.70'.
[  143.251047][ T6347] Invalid ELF header magic: != ELF
[  143.603437][ T6342] batman_adv: Routing algorithm '' is not supported
[  144.544586][ T5170] Bluetooth: hci0: Unable to find connection for big 0xd2
[  144.976276][ T6350] random: crng reseeded on system resumption
[  145.129904][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'.
[  146.369765][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'.
[  147.520606][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[  151.411095][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'.
[  151.617288][ T6429] random: crng reseeded on system resumption
[  151.647667][ T6406] veth1_macvtap: left promiscuous mode
[  154.340674][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'.
[  154.731156][ T5170] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11
[  154.800835][ T6459] hub 8-0:1.0: USB hub found
[  154.941968][ T6459] hub 8-0:1.0: 1 port detected
[  155.000227][ T6466] FAULT_INJECTION: forcing a failure.
[  155.000227][ T6466] name failslab, interval 1, probability 0, space 0, times 0
[  155.104995][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.2.98 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  155.105037][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  155.105054][ T6466] Call Trace:
[  155.105064][ T6466]  <TASK>
[  155.105076][ T6466]  dump_stack_lvl+0x16c/0x1f0
[  155.105126][ T6466]  should_fail_ex+0x512/0x640
[  155.105175][ T6466]  should_failslab+0xc2/0x120
[  155.105205][ T6466]  __kmalloc_cache_noprof+0x6a/0x3e0
[  155.105245][ T6466]  ? once_disable_jump+0x46/0x200
[  155.105297][ T6466]  once_disable_jump+0x46/0x200
[  155.105342][ T6466]  inet6_ehashfn+0x3f0/0x4f0
[  155.105372][ T6466]  ? __pfx_inet6_ehashfn+0x10/0x10
[  155.105403][ T6466]  ? stack_trace_save+0x8e/0xc0
[  155.105444][ T6466]  __inet6_lookup_established+0xb7/0xc20
[  155.105480][ T6466]  ? kasan_save_stack+0x42/0x60
[  155.105521][ T6466]  ? kasan_save_stack+0x33/0x60
[  155.105561][ T6466]  ? kasan_save_track+0x14/0x30
[  155.105601][ T6466]  ? kasan_save_free_info+0x3b/0x60
[  155.105634][ T6466]  ? __kasan_slab_free+0x51/0x70
[  155.105675][ T6466]  ? kmem_cache_free+0x2d1/0x4d0
[  155.105712][ T6466]  ? kfree_skbmem+0x1a4/0x1f0
[  155.105742][ T6466]  ? consume_skb+0xcc/0x100
[  155.105766][ T6466]  ? nlmon_xmit+0xa5/0xe0
[  155.105800][ T6466]  ? dev_hard_start_xmit+0x97/0x740
[  155.105834][ T6466]  ? __dev_queue_xmit+0x7eb/0x43e0
[  155.105872][ T6466]  ? __pfx___inet6_lookup_established+0x10/0x10
[  155.105904][ T6466]  ? __lock_acquire+0x622/0x1c90
[  155.105952][ T6466]  inet6_lookup+0xc8/0x2a0
[  155.105998][ T6466]  ? __pfx_inet6_lookup+0x10/0x10
[  155.106039][ T6466]  inet_diag_find_one_icsk+0x2cf/0xb30
[  155.106080][ T6466]  ? __pfx_inet_diag_find_one_icsk+0x10/0x10
[  155.106116][ T6466]  ? inet_diag_lock_handler+0x15e/0x350
[  155.106156][ T6466]  tcp_diag_destroy+0x8c/0x110
[  155.106193][ T6466]  ? __pfx_tcp_diag_destroy+0x10/0x10
[  155.106223][ T6466]  inet_diag_cmd_exact+0x2e0/0x330
[  155.106255][ T6466]  ? __pfx_inet_diag_cmd_exact+0x10/0x10
[  155.106284][ T6466]  ? kfree_skbmem+0x1a4/0x1f0
[  155.106323][ T6466]  ? find_held_lock+0x2b/0x80
[  155.106354][ T6466]  ? __dev_queue_xmit+0x896/0x43e0
[  155.106391][ T6466]  ? __local_bh_enable_ip+0xa4/0x120
[  155.106425][ T6466]  ? lockdep_hardirqs_on+0x7c/0x110
[  155.106470][ T6466]  ? __lock_acquire+0x622/0x1c90
[  155.106547][ T6466]  inet_diag_handler_cmd+0x1b8/0x2e0
[  155.106581][ T6466]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[  155.106618][ T6466]  ? find_held_lock+0x2b/0x80
[  155.106650][ T6466]  ? sock_diag_lock_handler+0x10f/0x2e0
[  155.106696][ T6466]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[  155.106729][ T6466]  sock_diag_rcv_msg+0x3d3/0x790
[  155.106774][ T6466]  netlink_rcv_skb+0x155/0x420
[  155.106805][ T6466]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  155.106847][ T6466]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.106894][ T6466]  ? netlink_deliver_tap+0x1ae/0xd30
[  155.106948][ T6466]  netlink_unicast+0x58d/0x850
[  155.106997][ T6466]  ? __pfx_netlink_unicast+0x10/0x10
[  155.107043][ T6466]  netlink_sendmsg+0x8d1/0xdd0
[  155.107082][ T6466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.107130][ T6466]  ____sys_sendmsg+0xa95/0xc70
[  155.107165][ T6466]  ? copy_msghdr_from_user+0x10a/0x160
[  155.107207][ T6466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.107260][ T6466]  ___sys_sendmsg+0x134/0x1d0
[  155.107306][ T6466]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.107346][ T6466]  ? __lock_acquire+0x622/0x1c90
[  155.107437][ T6466]  __sys_sendmsg+0x16d/0x220
[  155.107482][ T6466]  ? __pfx___sys_sendmsg+0x10/0x10
[  155.107553][ T6466]  do_syscall_64+0xcd/0x490
[  155.107601][ T6466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.107631][ T6466] RIP: 0033:0x7f1a3b78e929
[  155.107656][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.107684][ T6466] RSP: 002b:00007f1a3c676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.107712][ T6466] RAX: ffffffffffffffda RBX: 00007f1a3b9b5fa0 RCX: 00007f1a3b78e929
[  155.107731][ T6466] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000003
[  155.107748][ T6466] RBP: 00007f1a3c676090 R08: 0000000000000000 R09: 0000000000000000
[  155.107765][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.107782][ T6466] R13: 0000000000000000 R14: 00007f1a3b9b5fa0 R15: 00007ffd99b61aa8
[  155.107821][ T6466]  </TASK>
[  155.529994][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.218701][ T6468] usb usb2: usbfs: process 6468 (syz.1.99) did not claim interface 1 before use
[  156.626014][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'.
[  157.101042][ T6472] veth0_macvtap: left promiscuous mode
[  163.515298][ T6527] openvswitch: netlink: IP tunnel dst address not specified
[  169.572027][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'.
[  169.844130][ T6595] FAULT_INJECTION: forcing a failure.
[  169.844130][ T6595] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  169.924022][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.0.126 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  169.924062][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  169.924079][ T6595] Call Trace:
[  169.924088][ T6595]  <TASK>
[  169.924099][ T6595]  dump_stack_lvl+0x16c/0x1f0
[  169.924146][ T6595]  should_fail_ex+0x512/0x640
[  169.924193][ T6595]  should_fail_alloc_page+0xe7/0x130
[  169.924224][ T6595]  prepare_alloc_pages+0x3c2/0x610
[  169.924265][ T6595]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  169.924325][ T6595]  ? stack_trace_save+0x8e/0xc0
[  169.924358][ T6595]  ? __pfx_stack_trace_save+0x10/0x10
[  169.924391][ T6595]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  169.924438][ T6595]  ? check_path.constprop.0+0x24/0x50
[  169.924489][ T6595]  ? lockdep_unlock+0x64/0xe0
[  169.924516][ T6595]  ? __lock_acquire+0x1053/0x1c90
[  169.924556][ T6595]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  169.924602][ T6595]  ? policy_nodemask+0xea/0x4e0
[  169.924633][ T6595]  alloc_pages_mpol+0x1fb/0x550
[  169.924663][ T6595]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  169.924694][ T6595]  ? __thp_vma_allowable_orders+0x1c5/0xb10
[  169.924733][ T6595]  alloc_pages_noprof+0x131/0x390
[  169.924762][ T6595]  pte_alloc_one+0x1c/0x3a0
[  169.924797][ T6595]  __handle_mm_fault+0x3a68/0x5490
[  169.924848][ T6595]  ? __pfx___handle_mm_fault+0x10/0x10
[  169.924883][ T6595]  ? __pfx_mt_find+0x10/0x10
[  169.924933][ T6595]  ? find_vma+0xbf/0x140
[  169.924958][ T6595]  ? __pfx_find_vma+0x10/0x10
[  169.924979][ T6595]  handle_mm_fault+0x589/0xd10
[  169.925004][ T6595]  ? __pkru_allows_pkey+0x51/0xb0
[  169.925030][ T6595]  do_user_addr_fault+0x7a6/0x1370
[  169.925063][ T6595]  ? rcu_is_watching+0x12/0xc0
[  169.925086][ T6595]  exc_page_fault+0x5c/0xb0
[  169.925111][ T6595]  asm_exc_page_fault+0x26/0x30
[  169.925128][ T6595] RIP: 0010:rep_movs_alternative+0x30/0x90
[  169.925150][ T6595] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  169.925167][ T6595] RSP: 0018:ffffc90018fb7938 EFLAGS: 00050202
[  169.925182][ T6595] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c
[  169.925193][ T6595] RDX: fffff520031f6f3a RSI: 0000000000000000 RDI: ffffc90018fb79c8
[  169.925203][ T6595] RBP: 000000000000000c R08: 0000000000000001 R09: fffff520031f6f3a
[  169.925213][ T6595] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000
[  169.925223][ T6595] R13: ffffc90018fb79c8 R14: ffff888056bd0008 R15: 00000000000089b0
[  169.925247][ T6595]  _copy_from_user+0x98/0xd0
[  169.925276][ T6595]  dev_set_hwtstamp+0x14b/0x800
[  169.925305][ T6595]  ? __pfx_dev_set_hwtstamp+0x10/0x10
[  169.925329][ T6595]  ? tomoyo_path_number_perm+0x470/0x580
[  169.925370][ T6595]  ? netdev_name_node_lookup+0x127/0x180
[  169.925398][ T6595]  dev_ifsioc+0x9da/0x1ee0
[  169.925424][ T6595]  ? __pfx_dev_ifsioc+0x10/0x10
[  169.925450][ T6595]  ? __pfx___mutex_lock+0x10/0x10
[  169.925484][ T6595]  ? dev_load+0x8e/0x240
[  169.925512][ T6595]  dev_ioctl+0x223/0x1060
[  169.925542][ T6595]  sock_do_ioctl+0x19d/0x280
[  169.925560][ T6595]  ? __pfx_sock_do_ioctl+0x10/0x10
[  169.925592][ T6595]  sock_ioctl+0x227/0x6b0
[  169.925613][ T6595]  ? __pfx_sock_ioctl+0x10/0x10
[  169.925631][ T6595]  ? hook_file_ioctl_common+0x145/0x410
[  169.925656][ T6595]  ? __fget_files+0x20e/0x3c0
[  169.925684][ T6595]  ? __pfx_sock_ioctl+0x10/0x10
[  169.925705][ T6595]  __x64_sys_ioctl+0x18e/0x210
[  169.925728][ T6595]  do_syscall_64+0xcd/0x490
[  169.925757][ T6595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.925781][ T6595] RIP: 0033:0x7fbc4d78e929
[  169.925795][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.925811][ T6595] RSP: 002b:00007fbc4e6b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.925827][ T6595] RAX: ffffffffffffffda RBX: 00007fbc4d9b5fa0 RCX: 00007fbc4d78e929
[  169.925838][ T6595] RDX: 0000200000000140 RSI: 00000000000089b0 RDI: 0000000000000003
[  169.925848][ T6595] RBP: 00007fbc4e6b9090 R08: 0000000000000000 R09: 0000000000000000
[  169.925858][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.925868][ T6595] R13: 0000000000000000 R14: 00007fbc4d9b5fa0 R15: 00007ffd9fbd6b98
[  169.925890][ T6595]  </TASK>
[  170.927611][ T6602] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string
[  171.229696][ T6602]  ep_00: uevent: failed to send synthetic uevent: -22
[  174.054922][ T6629] ==================================================================
[  174.063062][ T6629] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0
[  174.071770][ T6629] Read of size 1 at addr ffff8880788f84ca by task syz.2.134/6629
[  174.079514][ T6629] 
[  174.081852][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.2.134 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  174.081882][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.081896][ T6629] Call Trace:
[  174.081905][ T6629]  <TASK>
[  174.081915][ T6629]  dump_stack_lvl+0x116/0x1f0
[  174.081952][ T6629]  print_report+0xcd/0x680
[  174.081973][ T6629]  ? __virt_addr_valid+0x81/0x610
[  174.081999][ T6629]  ? __phys_addr+0xe8/0x180
[  174.082026][ T6629]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  174.082052][ T6629]  kasan_report+0xe0/0x110
[  174.082074][ T6629]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  174.082105][ T6629]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  174.082129][ T6629]  ? __lock_acquire+0xb8a/0x1c90
[  174.082166][ T6629]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  174.082195][ T6629]  ? find_held_lock+0x2b/0x80
[  174.082218][ T6629]  ? __might_fault+0xe3/0x190
[  174.082252][ T6629]  ? __might_fault+0xe3/0x190
[  174.082284][ T6629]  ? __might_fault+0x13b/0x190
[  174.082322][ T6629]  ? proc_simple_write+0x117/0x1b0
[  174.082344][ T6629]  proc_simple_write+0x117/0x1b0
[  174.082366][ T6629]  ? __pfx_proc_simple_write+0x10/0x10
[  174.082390][ T6629]  proc_reg_write+0x23d/0x330
[  174.082425][ T6629]  ? __pfx_proc_reg_write+0x10/0x10
[  174.082457][ T6629]  vfs_writev+0x5df/0xde0
[  174.082486][ T6629]  ? __pfx___mutex_trylock_common+0x10/0x10
[  174.082523][ T6629]  ? __pfx_vfs_writev+0x10/0x10
[  174.082553][ T6629]  ? __mutex_lock+0x1ca/0xb90
[  174.082586][ T6629]  ? kmem_cache_free+0x2d1/0x4d0
[  174.082621][ T6629]  ? __pfx___mutex_lock+0x10/0x10
[  174.082667][ T6629]  ? __fget_files+0x20e/0x3c0
[  174.082701][ T6629]  ? do_writev+0x132/0x340
[  174.082729][ T6629]  do_writev+0x132/0x340
[  174.082758][ T6629]  ? __pfx_do_writev+0x10/0x10
[  174.082789][ T6629]  ? fdget+0x187/0x210
[  174.082820][ T6629]  do_syscall_64+0xcd/0x490
[  174.082855][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.082879][ T6629] RIP: 0033:0x7f1a3b78e929
[  174.082898][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.082922][ T6629] RSP: 002b:00007f1a3c676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  174.082945][ T6629] RAX: ffffffffffffffda RBX: 00007f1a3b9b5fa0 RCX: 00007f1a3b78e929
[  174.082961][ T6629] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006
[  174.082975][ T6629] RBP: 00007f1a3b810b39 R08: 0000000000000000 R09: 0000000000000000
[  174.082990][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.083004][ T6629] R13: 0000000000000000 R14: 00007f1a3b9b5fa0 R15: 00007ffd99b61aa8
[  174.083026][ T6629]  </TASK>
[  174.083034][ T6629] 
[  174.347130][ T6629] Allocated by task 6629:
[  174.351480][ T6629]  kasan_save_stack+0x33/0x60
[  174.356202][ T6629]  kasan_save_track+0x14/0x30
[  174.360929][ T6629]  __kasan_kmalloc+0xaa/0xb0
[  174.365545][ T6629]  __kmalloc_node_track_caller_noprof+0x221/0x510
[  174.372085][ T6629]  memdup_user_nul+0x2b/0x120
[  174.376791][ T6629]  proc_simple_write+0xc7/0x1b0
[  174.381664][ T6629]  proc_reg_write+0x23d/0x330
[  174.386457][ T6629]  vfs_writev+0x5df/0xde0
[  174.390815][ T6629]  do_writev+0x132/0x340
[  174.395086][ T6629]  do_syscall_64+0xcd/0x490
[  174.399620][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.405537][ T6629] 
[  174.407878][ T6629] The buggy address belongs to the object at ffff8880788f84c0
[  174.407878][ T6629]  which belongs to the cache kmalloc-16 of size 16
[  174.421777][ T6629] The buggy address is located 0 bytes to the right of
[  174.421777][ T6629]  allocated 10-byte region [ffff8880788f84c0, ffff8880788f84ca)
[  174.436204][ T6629] 
[  174.438542][ T6629] The buggy address belongs to the physical page:
[  174.444960][ T6629] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x788f8
[  174.453737][ T6629] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  174.461296][ T6629] page_type: f5(slab)
[  174.465387][ T6629] raw: 00fff00000000000 ffff88801b841640 0000000000000000 dead000000000001
[  174.474081][ T6629] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[  174.482703][ T6629] page dumped because: kasan: bad access detected
[  174.489122][ T6629] page_owner tracks the page as allocated
[  174.494843][ T6629] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5847, tgid 5847 (syz-executor), ts 114140848005, free_ts 114140751037
[  174.514752][ T6629]  post_alloc_hook+0x1c0/0x230
[  174.519547][ T6629]  get_page_from_freelist+0x1321/0x3890
[  174.525128][ T6629]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  174.531312][ T6629]  new_slab+0x94/0x330
[  174.535411][ T6629]  ___slab_alloc+0xd9c/0x1940
[  174.540112][ T6629]  __slab_alloc.constprop.0+0x56/0xb0
[  174.545508][ T6629]  __kvmalloc_node_noprof+0x3b1/0x620
[  174.550907][ T6629]  xt_replace_table+0x1e3/0x950
[  174.555789][ T6629]  __do_replace+0x1cf/0x9f0
[  174.560412][ T6629]  do_ip6t_set_ctl+0x806/0xa70
[  174.565199][ T6629]  nf_setsockopt+0x8d/0xf0
[  174.569634][ T6629]  ipv6_setsockopt+0x135/0x170
[  174.574429][ T6629]  tcp_setsockopt+0xa7/0x100
[  174.579053][ T6629]  do_sock_setsockopt+0x221/0x470
[  174.584465][ T6629]  __sys_setsockopt+0x120/0x1a0
[  174.589349][ T6629]  __x64_sys_setsockopt+0xbd/0x160
[  174.594494][ T6629] page last free pid 5847 tgid 5847 stack trace:
[  174.600832][ T6629]  __free_frozen_pages+0x7fe/0x1180
[  174.606055][ T6629]  kasan_populate_vmalloc+0x18c/0x1f0
[  174.611463][ T6629]  alloc_vmap_area+0x959/0x29c0
[  174.616341][ T6629]  __get_vm_area_node+0x1ca/0x330
[  174.621404][ T6629]  __vmalloc_node_range_noprof+0x271/0x14b0
[  174.627338][ T6629]  __vmalloc_node_noprof+0xad/0xf0
[  174.632476][ T6629]  xt_counters_alloc+0x4c/0x70
[  174.637260][ T6629]  __do_replace+0x97/0x9f0
[  174.641699][ T6629]  do_ip6t_set_ctl+0x806/0xa70
[  174.646485][ T6629]  nf_setsockopt+0x8d/0xf0
[  174.650917][ T6629]  ipv6_setsockopt+0x135/0x170
[  174.655721][ T6629]  tcp_setsockopt+0xa7/0x100
[  174.660367][ T6629]  do_sock_setsockopt+0x221/0x470
[  174.665425][ T6629]  __sys_setsockopt+0x120/0x1a0
[  174.670301][ T6629]  __x64_sys_setsockopt+0xbd/0x160
[  174.675449][ T6629]  do_syscall_64+0xcd/0x490
[  174.679987][ T6629] 
[  174.682320][ T6629] Memory state around the buggy address:
[  174.687962][ T6629]  ffff8880788f8380: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc
[  174.696037][ T6629]  ffff8880788f8400: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc
[  174.704115][ T6629] >ffff8880788f8480: fa fb fc fc fa fb fc fc 00 02 fc fc fa fb fc fc
[  174.712190][ T6629]                                               ^
[  174.718619][ T6629]  ffff8880788f8500: fa fb fc fc fa fb fc fc 00 00 fc fc fa fb fc fc
[  174.726706][ T6629]  ffff8880788f8580: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc
[  174.734786][ T6629] ==================================================================
[  174.986908][ T6629] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  174.994147][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.2.134 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[  175.006040][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  175.016115][ T6629] Call Trace:
[  175.019413][ T6629]  <TASK>
[  175.022356][ T6629]  dump_stack_lvl+0x3d/0x1f0
[  175.027007][ T6629]  panic+0x71c/0x800
[  175.030924][ T6629]  ? __pfx_panic+0x10/0x10
[  175.035375][ T6629]  ? mark_held_locks+0x49/0x80
[  175.040172][ T6629]  ? preempt_schedule_thunk+0x16/0x30
[  175.045573][ T6629]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  175.051574][ T6629]  ? preempt_schedule_common+0x44/0xc0
[  175.057050][ T6629]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  175.063053][ T6629]  check_panic_on_warn+0xab/0xb0
[  175.068007][ T6629]  end_report+0x107/0x170
[  175.072343][ T6629]  kasan_report+0xee/0x110
[  175.076771][ T6629]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  175.082760][ T6629]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  175.088570][ T6629]  ? __lock_acquire+0xb8a/0x1c90
[  175.093525][ T6629]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  175.099689][ T6629]  ? find_held_lock+0x2b/0x80
[  175.104376][ T6629]  ? __might_fault+0xe3/0x190
[  175.109067][ T6629]  ? __might_fault+0xe3/0x190
[  175.113755][ T6629]  ? __might_fault+0x13b/0x190
[  175.118541][ T6629]  ? proc_simple_write+0x117/0x1b0
[  175.123659][ T6629]  proc_simple_write+0x117/0x1b0
[  175.128604][ T6629]  ? __pfx_proc_simple_write+0x10/0x10
[  175.134071][ T6629]  proc_reg_write+0x23d/0x330
[  175.138764][ T6629]  ? __pfx_proc_reg_write+0x10/0x10
[  175.143978][ T6629]  vfs_writev+0x5df/0xde0
[  175.148317][ T6629]  ? __pfx___mutex_trylock_common+0x10/0x10
[  175.154232][ T6629]  ? __pfx_vfs_writev+0x10/0x10
[  175.159092][ T6629]  ? __mutex_lock+0x1ca/0xb90
[  175.163800][ T6629]  ? kmem_cache_free+0x2d1/0x4d0
[  175.168752][ T6629]  ? __pfx___mutex_lock+0x10/0x10
[  175.173809][ T6629]  ? __fget_files+0x20e/0x3c0
[  175.178501][ T6629]  ? do_writev+0x132/0x340
[  175.182923][ T6629]  do_writev+0x132/0x340
[  175.187175][ T6629]  ? __pfx_do_writev+0x10/0x10
[  175.191952][ T6629]  ? fdget+0x187/0x210
[  175.196032][ T6629]  do_syscall_64+0xcd/0x490
[  175.200548][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.206450][ T6629] RIP: 0033:0x7f1a3b78e929
[  175.210867][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.230481][ T6629] RSP: 002b:00007f1a3c676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  175.238899][ T6629] RAX: ffffffffffffffda RBX: 00007f1a3b9b5fa0 RCX: 00007f1a3b78e929
[  175.246879][ T6629] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006
[  175.254855][ T6629] RBP: 00007f1a3b810b39 R08: 0000000000000000 R09: 0000000000000000
[  175.262826][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.270797][ T6629] R13: 0000000000000000 R14: 00007f1a3b9b5fa0 R15: 00007ffd99b61aa8
[  175.278775][ T6629]  </TASK>
[  175.282054][ T6629] Kernel Offset: disabled
[  175.286385][ T6629] Rebooting in 86400 seconds..