last executing test programs:

1m5.884690104s ago: executing program 0 (id=112):
mlockall$auto(0x7) (async)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x100000000000030, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64)
r0 = fanotify_init$auto(0x5, 0x2000000000002)
getsockopt$auto_SO_PEERNAME(r0, 0x18, 0x1c, &(0x7f0000000080)='/proc/thread-self/schedstat\x00', &(0x7f00000000c0)=0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket(0x26, 0x80805, 0x0) (rerun: 64)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/schedstat\x00', 0x80080, 0x0) (async)
memfd_create$auto(&(0x7f0000000040)='(%}@/\x00', 0xf0) (async)
clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) (async, rerun: 64)
geteuid() (async, rerun: 64)
ioctl$auto(0x3, 0xff04, 0x0)

1m4.464291027s ago: executing program 0 (id=115):
r0 = socket(0x2, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
sendmmsg$auto(r0, 0x0, 0x5, 0x311)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0x10df80, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1) (async)
r4 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES16=r7, @ANYRES16=r3, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r7, @ANYRES64, @ANYRES16=r6, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRESHEX=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084)
setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1c/sub1/xrun_injection\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/99, 0x63) (async)
read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000040)=""/99, 0x63)
socket(0xa, 0x2, 0x0) (async)
socket(0xa, 0x2, 0x0)
r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$auto_KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0xfffffffe, 0x0, [{0x48d, 0x400, 0xfffffffffffffc00}]})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) (async)
r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
write$auto(r10, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)

53.600958148s ago: executing program 0 (id=147):
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = fanotify_init$auto(0x5, 0x2000000000002)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/servers\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/88, 0x58)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r3 = getpid()
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.2/usb3/power/runtime_suspended_time\x00', 0x60000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/98, 0x62)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00'})
process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x20000000fff}, 0xa, &(0x7f0000000100)={&(0x7f0000000240)="0556", 0x200000000}, 0x3, 0x0)
socketpair$auto(0x2, 0x3, 0x6, &(0x7f00000001c0))
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd2/sched/write2_fifo_list\x00', 0x2aa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="b4110000", @ANYRES64=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080032800400ba800800388004004200040006000400060008000a000800000004000600b00001806c004a00746554fb96bfba3bc813b6cd46f7ef72543db7294c685be4749005a973145082d80355ad336e91f2a581dd869052530ab1227bd3750cde655daba9911f102422b3cb5070d7a145f86a140ff257522a9f9f00045834e22a4d4dd53f48c22fe256d6e2c098852a0da41c0094801400d400fc01000000000000000000000000000004007980240059800800b40004000000040002800400588008008300", @ANYRES32=r3, @ANYRES32], 0x11b4}, 0x1, 0x0, 0x0, 0x1}, 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_last_time_ms\x00', 0x2240, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/94, 0x5e)

49.390180377s ago: executing program 0 (id=157):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/config.gz\x00', 0x0, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140))
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100)
r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x402, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x2aa00b6e)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b80)={0x300, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x8}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_MAC_ADDRS={0x2b8, 0xa6, 0x0, 0x1, [@generic="702f6a5f4dd849ffb07ced64eb60961676355d082f288ea86b4cfe99e8f5e7a47e5847bfe6695146bf90d703c69bf1c44b6f15c2245f5d83884223cccef04b46c663b804fe8535aa9a1f09d2a89f63c5e9e410b0194755062f7823ad8766655929b33520a3fdc72a7e2c7a8f94dc8389b9968c55b0870136ab4c03faf5c453a3e818592f948262624e430e69456555ca92f0b3df6ad57d6d8a8170ec483f9e6994ac43546f5e4f97b2cf03cfa42e513eaff98a120e1ea7604657fa008465fe", @nested={0x10c, 0x13c, 0x0, 0x1, [@generic="ffa495ab95daf1dd47bfeb0dca3ee4c8516b1a7efff87ae2306ce9ede36e17bd3a6d8864183148e30ac3de02d186637a7300e03c852e05d4054c4d31ef9a2431f0292e5f2bdee7c1d4834e37fe9208ed814d317fb49616e45075e965ff04416f869ffc450ec68f48c126049ea83cd877015f644ad92ccb", @nested={0x4, 0xc5}, @generic="ebe4ed6981a79a299c1472d81fa9d0ca21e8cd30c51f1782a31608d9fda978da9c710fb1a3b18d7df53695621511f354ed300ec4930b1490a9b29fc6d1fc42a999f9349bd4069edb1b0d248018703e26b2e9e0e9bbc0ac110f56f15612dbe9f386e1e3b573e1e29f99f5adc645fa5839be3f73dba491ba0b57bf3471cffd314a5156e7c4ffbe4e2a1cb4ddcbee"]}, @generic="ea4bc89af95925c579217e9aae2e635ba562b9f33320c9f212d989b75a45d117a5fb302f8dd28a3c51e748c2b96658006d443dab14c48a01b4fdcc327caa5e9734608e0d6a94dab9429dfe89a9f1972c5fa6c850891ab9364666530abc72230caf", @generic="363e3d2f588dc015926b9088b7a402b5cef38575bcb0e4e5b65e1238fef84a8f45e81468a7bda372c3574901e87ca4d10634434352dec57e24213e147cd3c7935fc569527f727120aecb79c7cd5bc2b5f3a7aeb27a11fe42392401faf2b23f272138eeb6781de9c8b67e280b78f31736ab76d0d3cb7963fba95258694ed78105393b15f6eee8be59"]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x80}, 0x40045)
poll$auto(&(0x7f0000003640)={0xffffffffffffffff, 0x4, 0xffff}, 0x4, 0x100000)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x200, 0x311)
r4 = socket(0x10, 0x80002, 0x0)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="99012dd77000ffdbdf252c4e1fa505e8c05500eee4"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0)

39.393912234s ago: executing program 0 (id=180):
r0 = socket(0x0, 0x4, 0x2)
write$auto(r0, 0x0, 0x1ff)
mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r2, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$auto(0xffffffffffffffff, 0x80000541b, 0x38)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x5)
msgrcv$auto(0x0, 0x0, 0x9, 0x10001, 0xda4e)
ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
readv$auto(0xffffffffffffffff, 0x0, 0x4000000000000000)
mmap$auto(0x0, 0x8004008, 0x200000032c, 0x2000000010011, r1, 0x8004)
mprotect$auto(0x0, 0x5, 0x8)

32.936444397s ago: executing program 0 (id=199):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
fchown$auto(0xffffffffffffffff, 0x0, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x40000000000, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
write$auto(0x800000000000c8, 0x0, 0x1a)
shutdown$auto(0x200000003, 0x2)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
ioctl$auto_TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
r1 = epoll_create$auto(0x3e)
socket(0xa, 0x2, 0x3a)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x4, 0x2020006, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r2, 0x8, 0x1)
fcntl$auto(r2, 0x10, 0x2)

16.903515827s ago: executing program 32 (id=199):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
fchown$auto(0xffffffffffffffff, 0x0, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x40000000000, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
write$auto(0x800000000000c8, 0x0, 0x1a)
shutdown$auto(0x200000003, 0x2)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
ioctl$auto_TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
r1 = epoll_create$auto(0x3e)
socket(0xa, 0x2, 0x3a)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x4, 0x2020006, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r2, 0x8, 0x1)
fcntl$auto(r2, 0x10, 0x2)

9.504558216s ago: executing program 3 (id=244):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x3a)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/8/spurious\x00', 0x88000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x4, 0x1, @relative_id=0x9, 0xd}, 0x96)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6)
bpf$auto(0x3, 0x0, 0xc)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566)

8.395664319s ago: executing program 3 (id=245):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgrcv$auto(0x0, 0x0, 0x9, 0x10001, 0xda4e)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, 0x0)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0)
prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4)
read$auto(0x3, 0x0, 0x80)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x6}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x100}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x810)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
r2 = socket(0x11, 0x2, 0x9)
ioctl$auto(r2, 0x8910, 0x24)

7.024254945s ago: executing program 3 (id=250):
setuid$auto(0xe)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x206, 0x1)
fanotify_mark$auto(0x0, 0x31, 0x9, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r0, 0x0, 0x1)
setsockopt$auto(r0, 0x1, 0xcea7, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1e)
ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000080)={0x2, 0x9, 0x4, 0x3, 0x6, <r1=>0xffffffffffffffff})
futimesat$auto(r0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0x0, 0x8})
unshare$auto(0x20000)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r2, 0x0)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
prctl$auto_PR_SET_MM_START_STACK(0x403, 0x5, r1, 0x2, 0xff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
open(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xac)

6.600436961s ago: executing program 2 (id=252):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x3a)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/8/spurious\x00', 0x88000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x4, 0x1, @relative_id=0x9, 0xd}, 0x96)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566)

6.535903818s ago: executing program 2 (id=253):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
mmap$auto(0xdffffffffffffffd, 0x40000a, 0xdf, 0x9b75, 0xffffffffffffffff, 0x8000)
mount_setattr$auto(0x5, 0x0, 0x8000, 0x0, 0x283)
mmap$auto(0x2, 0x800000007b50, 0x1ff, 0x19b75, 0xffffffffffffffff, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3ff, 0x8)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880)
mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000)
socket(0x2, 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x19bbaf48b3b308d8, 0x0)
eventfd$auto(0x2)
seccomp$auto(0x2, 0x10, 0x0)
unshare$auto(0x40000080)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$auto_TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)

6.436219078s ago: executing program 3 (id=254):
socket(0xa, 0x2, 0x3a)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
io_uring_setup$auto(0x52, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
socket(0x23, 0x80805, 0x0)
inotify_init1$auto(0x3000000000000)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x3, r0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a)
ioctl$auto(0x3, 0x89e0, 0x38)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80081, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f00000002c0)="f618deadf7e888b1ff8bff71c49054428f819e30236ce79200d01532f2ed0d000000008d5d8e9dea0337f5095b82a54456f845800adbfbd11b66630e687bbca2612c912a6f57eb9f9944281954e2c5da22daf73acc711a3d9b6758b7a6e74bae890345225264da35ac3be11d2f555b8d08cef68f4a3aa938391dfbc0841813c93c41ee53b7e310c21563c1d8cbcde6549675fbe14b917c5b0a23069452100c3110990884271e91b8f6497e89091dc41c4cdd1769725f5f6d78aaac636711", 0xbe)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(r3, 0x8, 0x0)

3.753459508s ago: executing program 1 (id=259):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x8, 0xf, 0x0, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x480, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x420, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1, 0x0)
r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r4, r4, 0x0)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video47\x00', 0x402580, 0x0)
ioctl$auto(r5, 0xc0585611, r5)
mmap$auto(0x800000, 0x200000009, 0xb, 0x9b72, r2, 0x200008000)
close_range$auto(0xffffffffffffffff, r0, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x11, 0x80003, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = fanotify_init$auto(0x4, 0x8000000)
fanotify_mark$auto(r1, 0x3, 0x8, r7, 0x0)
readv$auto(0x3, 0x0, 0x8)
ioctl$auto(r2, 0x2, r6)
r8 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/kvm/req_event\x00', 0x3c5243, 0x0)
read$auto_def_blk_fops_fs(r8, 0x0, 0x0)
setsockopt$auto(0x3, 0x9, 0x87, 0x0, 0x2)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r0)

2.72577225s ago: executing program 1 (id=260):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x3a)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/8/spurious\x00', 0x88000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x4, 0x1, @relative_id=0x9, 0xd}, 0x96)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566)

2.496577765s ago: executing program 1 (id=261):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8000000000000000, 0x8000) (async)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010228bd7000ffdbdf250100000008c567275078b8f8f129efa28007c450ad7a891dced7302e6003661abcf7ae9ff5addba4709c2049ae28efb0f34a4152892cee", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) (async)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0)
sendfile$auto(r4, r5, 0x0, 0x1)

1.938893187s ago: executing program 1 (id=262):
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch0\x00', 0x8a240, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';')
ioctl$auto(0x3, 0x40086203, 0x38)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b)
getsockopt$auto_SO_REUSEADDR(r0, 0x5, 0x2, &(0x7f00000000c0)='!\xb7\x00', &(0x7f0000000100)=0x3)
io_uring_setup$auto(0xe, &(0x7f0000000000)={0xa, 0x0, 0x8, 0x864, 0x224, 0x13c261c2, r0, [0x1, 0x101, 0x6], {0x6, 0x10, 0xa00, 0x1, 0x219b923c, 0x7, 0x5, 0xc, 0x8}, {0x1, 0xc, 0xd, 0x2, 0x400, 0x9, 0x4, 0x10, 0x1}})
close_range$auto(0x2, 0x8, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch0\x00', 0x8a240, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async)
ioctl$auto(0x3, 0x40086203, 0x38) (async)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) (async)
getsockopt$auto_SO_REUSEADDR(r0, 0x5, 0x2, &(0x7f00000000c0)='!\xb7\x00', &(0x7f0000000100)=0x3) (async)
io_uring_setup$auto(0xe, &(0x7f0000000000)={0xa, 0x0, 0x8, 0x864, 0x224, 0x13c261c2, r0, [0x1, 0x101, 0x6], {0x6, 0x10, 0xa00, 0x1, 0x219b923c, 0x7, 0x5, 0xc, 0x8}, {0x1, 0xc, 0xd, 0x2, 0x400, 0x9, 0x4, 0x10, 0x1}}) (async)
close_range$auto(0x2, 0x8, 0x0) (async)

1.78720681s ago: executing program 2 (id=263):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0xb, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
statfs$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x8, 0x6, 0x6, 0xfffffffffffffffa, 0x7, 0x8, 0x4, {[0x4, 0x6ac2c44b]}, 0xc, 0x7, 0x1, [0x90, 0xffff, 0x9, 0x6]}) (async)
statfs$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x8, 0x6, 0x6, 0xfffffffffffffffa, 0x7, 0x8, 0x4, {[0x4, 0x6ac2c44b]}, 0xc, 0x7, 0x1, [0x90, 0xffff, 0x9, 0x6]})
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x4d)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) (async)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00010000000000000000004bd8bbe2d0a6526c665ce3ceb429ef1342dd3e876ae3680aa83b661af0c75c522399e45e26b8c5a72b9feeaad15b32f3e58278deb97fa701c1b8fb7916c36a8fc265f1f947c6990c5f259d55f27574a4e4d468e2fc6d5804a71a1cc189ca65ec03abcf8c63"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
gettid() (async)
r3 = gettid()
process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0)

1.464463478s ago: executing program 1 (id=264):
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = fanotify_init$auto(0x5, 0x2000000000002)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/servers\x00', 0x100, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/88, 0x58)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r3 = getpid()
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.2/usb3/power/runtime_suspended_time\x00', 0x60000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001080)=""/98, 0x62)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_bond\x00'})
process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x20000000fff}, 0xa, &(0x7f0000000100)={&(0x7f0000000240)="0556", 0x200000000}, 0x3, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd2/sched/write2_fifo_list\x00', 0x2aa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x2, 0x81})
sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="b4110000", @ANYRES64=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080032800400ba800800388004004200040006000400060008000a000800000004000600b00001806c004a00746554fb96bfba3bc813b6cd46f7ef72543db7294c685be4749005a973145082d80355ad336e91f2a581dd869052530ab1227bd3750cde655daba9911f102422b3cb5070d7a145f86a140ff257522a9f9f00045834e22a4d4dd53f48c22fe256d6e2c098852a0da41c0094801400d400fc01000000000000000000000000000004007980240059800800b40004000000040002800400588008008300", @ANYRES32=r3, @ANYRES32], 0x11b4}, 0x1, 0x0, 0x0, 0x1}, 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_last_time_ms\x00', 0x2240, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/94, 0x5e)

1.203495721s ago: executing program 3 (id=265):
r0 = socket(0x2c, 0x3, 0x80)
ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000180)={<r1=>0xffffffffffffffff, 0x1})
mmap$auto(0x1001, 0x202000b, 0x3, 0x14, r1, 0x8001)
r2 = pipe$auto(0x0)
open(0x0, 0x22240, 0x55)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyub\x00', 0x4503, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x4b4d, r4)
statx$auto(r4, 0x0, 0x1003, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000200df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES32=0x0], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000300)="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", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x4, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44091}, 0x4000800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x3, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
fsopen$auto(0x0, 0x1)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mbind$auto(0x74b090fe, 0x10000, 0x100000000, 0x0, 0x4, 0x33e6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2a, 0x1, 0x3)
exit$auto(0x3789)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x24400, 0x0)
r6 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioctl$auto(r6, 0x8140, r2)

1.131144146s ago: executing program 2 (id=266):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x800, 0x0, 0x110)
mmap$auto(0x0, 0x2, 0xd, 0x20000000000eb1, 0xffffffffffffffff, 0x40000000000000)
sysfs$auto(0x2, 0x1, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
write$auto(r0, &(0x7f0000000240)='.G+*@zy\x06\x00', 0xd)
fsopen$auto(0x0, 0x1)
mmap$auto(0x40, 0xffff, 0xe0, 0xb18, 0xffffffffffffffff, 0x7ffc)
mmap$auto(0x7, 0x4000a, 0x0, 0x9b72, 0x7, 0x28000)
socket(0x1d, 0x8, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x1d, 0x2, 0x6)
r2 = socket(0x2, 0x1, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x6, 0xffffffffffff0e2e, 0x1000fff, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5ba, 0xfffffffffffffffd, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x4, 0x40000081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
kcmp$auto_KCMP_FILE(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r3, 0xf72, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', <r4=>0x0})
r5 = gettid()
tkill$auto(r5, 0x7)
r6 = getuid()
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00', <r7=>0x0})
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f00000018c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="d4030000", @ANYRES16=0x0, @ANYBLOB="0002dbdf25030000a3ac0617680e000000000000000000000000008f3b53cd1225f152653aaa63b6fbe9f9c1d1a55839ee4e63068f044df2428507deb002a5fc8bf88a3ca1996da701fac51c2f", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="f0000980380081800400d0801400fb00fc01000000000000000000000000000004001d800400108008005e00", @ANYRES32=r5, @ANYBLOB="080001000100000004000880ca2fe5e7781e2068ea37e03ba17aea2025a647d44461a6d7b9d37c79647809dc79a7253ae02fd22e6de36565acbee1bb578093c0643d7e116e905613b93e0fd807c91b907bcf33ccc11dc2cf3561bd6ffbbb08d4795f92b8fa2858ef92081013e9c36dad79086ad166815eaa85d1cc45443e901b76c466a41d4919dcca30bde6a861a81c4183b3e3b1406832c144dc40ba16b51b0a242f1d84116d28445ee4709b13c431b31ee6737fceaefc08001900", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="b7020980575f6ae330c8aa36658c5ca9c56037a7f2b99bab9a00f7355e6971fa45aff77357bb0bc5b98abacc85fda9ecf627a9cc5df45aa797b694bdc17031c805e20a46f51a6b18cdb169c15e3922c32f823e78f4d05979527779d903705b74e0e08b5accaa43d9d30daba6b093ddc8d15fdf07dc9530a5e4d667bdc62bbe7b4767af52053f6203006b2c3675d81dcfb2e93e7dcae98495864e6509af3c1b07ad1bdd32f59c544016cfcaccc70e6f6afd2aca64d757986789259b0f7f5102b7397dcf34002600a8889e9db12e704f7f791e2d9341574d9b8b5e6b3d33e58a0240ecefccc07ab6c062b268a2830f7ead610de2aebe0cc61977c5fd7fa2d2d94b0f409dfcd0dfb31a40bc1f5fa4505a880110afa769727175db6b17589c7411bb24bcc6aed27ea579a07258ef6f8e4366305980e1c8d158b69390a45b90241e1cb1f76dda691b870b0e110194830397fb53acf0d339ae897b131dbc1e5eae8a204020f63d226684cbc2ae71a5d8e99c4a033edd5d1f686a594cc572f5ee612fe0ce736d2999f9be0da62096fdc316872da024a1a3571200b2de128cb5c22de8fc0d04230800e38004006e80f89ec93dfe8756a0a443a6722b8e02087aa2761c254968644b6e3264df9db76df1dfc9e7b8b65747842a80e83e3f1c647ffb817e4e3f3b9477f85b74d53615f193eee3703f5d220d3d07f878252dba7369810ea6e8842e76186e65462a5003e4af02ab3b31ba8b7aaf266216bee7ff6bec4b8b83170e6cd73e1cfefdf06d8c1677714ad42e59aa204bc97215603a695bf26bc6afb4c43932bd56fe4a3590929cee90998bcdd3ffb8d4b9486621dfac5c5b8b54e38cd559247b0a521b88cfa8cfd037934df92d2b3d567d7bf6a381d59271ac0a3b527a0f020fb166202934c2d9b9624405128cbf0f87f436e5d9b6b0de9c9674b18b522a57ec90261ea1c9dc995ff0b57c7e212c1c8b4a374fdec40c004f80040000800400e0800800470000010000000000000040b31e4d596d31d61a32f1b5e2fc7c933f656286b1e8ac84a4eced4075f318ecb77cda2c2fb3237ecc11209dc0a40af7cee12d63a1b2d644fe2c9f6fe7764b3eb03fe1e9d3d68256394841d09ec26434d499e20348fb32f71559712017fbcc34cf1250906b07c65086b7c32d0a5c3786dd5a8514961bdeaf00a3ba38613b4698e1871d9bf9444552832c1d62032bb7b13fe3542ff75cde8aa700f7ae25ea091e7c6fc9d5a3fd"], 0x3d4}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40810}, 0x8044)
close_range$auto(0x2, 0xa, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x809, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4)

885.570918ms ago: executing program 1 (id=267):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
prctl$auto(0x20000115, 0x1, 0x4, 0x5, 0x42)
madvise$auto(0xfffffffffffff7fe, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
r0 = timerfd_create$auto(0x9, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x28300, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x319)
memfd_create$auto(0x0, 0xe)
socket(0xa, 0x1, 0x0)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, &(0x7f0000000000)={0x8000008, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x9, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xffffbffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc14, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x7f69, 0x100000001, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"})
mmap$auto(0xfffffffffffffffe, 0x800000000000200, 0xfffffffffffff19e, 0x11, r1, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x0)
mmap$auto(0x1, 0x81, 0x4000000000df, 0xeb1, 0x401, 0x7ffc)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
ioctl$auto_EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
close_range$auto(0x0, 0x5, 0x0)

208.54879ms ago: executing program 2 (id=268):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x3, 0x3a)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/8/spurious\x00', 0x88000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x99, 0x4, 0x1, @relative_id=0x9, 0xd}, 0x96)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566)

159.786493ms ago: executing program 3 (id=269):
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0xfffffffffffffffb)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0)
gettid()
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x9, 0x5, 0x40000006, 0x883, 0x8, 0x1a1, 0x0, 0x101, 0x8, 0x0, 0x2, 0x20})
writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000700)="f37d0f450e68083661c86d3821f81bdf1e8032c59f072adc8796a8509d0ab160a03bd7a3e24722fdfc1c9251b6cc98899236b0a88b073470ec5ecdb15c94aa8c3c2da55bb02656b9a25fbef4cd862b528b2841c465117136a42623c6f8b07e71f9fdec140808ab5eeaaf6e62e1d0783ecca62ff6931f6d945d9c81b2cd48957858caf4d53513ba6550a9dd3bf72edcd8352bbd2cce71f7112eddb2ca52eaab30dc9949892db9dc12f0c871ae470bc68f7f9acb0175a8262653271c4c46951b37", 0x6}, 0x3)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x57, r0)
r2 = open(&(0x7f0000000440)='./file0\x00', 0x3432c0, 0x8c)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0xa, 0x0, 0x3)
ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000004c0)={0x1, 0x80})
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20302, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000180)={{r3, &(0x7f0000000840)="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", 0x10000000, &(0x7f00000002c0)="be88f02b80da5260287c59548f9e98a285afc5b48936bdd7a56d6f80b0a29eb353768e81a4004129b2af6ed2c8898e8f9b20ebd0a43f0d3ecb35eee5a2a7d20daeab18a1305fbb24214715fedf6697f0229854edbf5bca3aeddcd2f9922ce3e6ea449d122a5f5d3377233305b133f76c801f567a8040ae3ea39d8af6066d23742bb18769e3c54531c5aa996474c337d85f77a2e3cd67da244f674390f062911334aee5926b227f209340c25f46e73729129798c9675ae70386153ac1fc6379df6129cad3b37c", 0x4, &(0x7f0000000500)="370836de8582102f9dc2984f82386a9797e893629be1dd64a27b4b0604ef35833b6e5eac38dd421fa03f8730cb1c8dcd0cd047c6fe211aadf95a53d42eae97814edb1a36b47f46e4900ed39197c99b2fe8aed80326f583cf5cdaf8625d3b73dc9e13b43ef5e7694409df45f62864952560148b3a0868b84370c2e724f28177d6747af9c4967475913f490b4f4a9365e501bcf6861e7432d596f633d30827898e3e6e0c522682b6fcb29858744c3d8ee925bc369f67bc6da5692dda9691f0083a172e6af573116ae813ea766795ea181124dc0c2eb3688c9af09f29a7304b", &(0x7f0000000000)=0xffffffff}, {[0x9, 0x6, 0x1, 0x1]}, 0x7, 0xfffffffc, &(0x7f0000000600)="9e2cc5278fd7a35fdc0687d23beaffb20d07368f6998abc07a90f50f5399eb319173ef3c7f5698d83ce923fa388d8ff6811fd7bc0b81e7eb1723ddbb9c2f1107f44b2067a6cc04718150cb12e1d5ee9c621f4e1ecddfc72696e596912a77c4329fc7aafd6f40f7a5b2726dddf38997bbec3ceebe0725524ee2773bf880c49f8331cc5cf833cb452608aebfa92a65fa3b3881b4c2f550e4a07188a89f22037ea442a54cd2fe69926d9ba04388d82b2cf2c182e0a727b73ddc4b08e21e061878b557568b3861acb2a8f80f857692af0c24dc160d1541caa4380bbd7c94c97ea915ffa482a128e7652a8d06792a"})
fsopen$auto(0x0, 0x1)
mmap$auto(0x0, 0x800001, 0x7fffffff, 0x40ebd, 0xffffffffffffffff, 0x2ffffffffffc)
r4 = getpid()
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x2, 0x0)
process_vm_readv$auto(r4, 0x0, 0x4000000000001, &(0x7f0000000280)={0x0, 0xfffffffc}, 0x7, 0xfffffffffffff001)
close_range$auto(0x2, 0xa, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
mmap$auto(0x4a1, 0x5, 0x7, 0x14, 0xffffffffffffffff, 0x10008004)

0s ago: executing program 2 (id=270):
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
ioctl$auto_I2C_RDWR(r0, 0x707, 0x0) (async)
ioctl$auto_I2C_RDWR(r0, 0x707, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1)
sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) (async)
sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0) (async)
socket(0x2, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts.
[  100.083717][ T5819] cgroup: Unknown subsys name 'net'
[  100.291107][ T5819] cgroup: Unknown subsys name 'cpuset'
[  100.301253][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  102.185949][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  102.239726][  T116] cfg80211: failed to load regulatory.db
[  104.448512][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.472118][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.480332][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.497333][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.505842][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.603286][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.611993][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.633366][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.656637][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  104.677205][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  104.687234][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  104.695976][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  104.704404][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  104.712177][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.722725][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.761175][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  104.773144][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  104.782573][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  104.791129][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  104.800044][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.137454][ T5832] chnl_net:caif_netlink_parms(): no params data found
[  105.349710][ T5836] chnl_net:caif_netlink_parms(): no params data found
[  105.470801][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.478169][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.485682][ T5832] bridge_slave_0: entered allmulticast mode
[  105.493741][ T5832] bridge_slave_0: entered promiscuous mode
[  105.519563][ T5837] chnl_net:caif_netlink_parms(): no params data found
[  105.549908][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.557162][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.564353][ T5832] bridge_slave_1: entered allmulticast mode
[  105.572863][ T5832] bridge_slave_1: entered promiscuous mode
[  105.723939][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.733075][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.740596][ T5836] bridge_slave_0: entered allmulticast mode
[  105.748771][ T5836] bridge_slave_0: entered promiscuous mode
[  105.762214][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.769718][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.777031][ T5836] bridge_slave_1: entered allmulticast mode
[  105.784436][ T5836] bridge_slave_1: entered promiscuous mode
[  105.794929][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.836479][ T5842] chnl_net:caif_netlink_parms(): no params data found
[  105.881442][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.930716][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.943161][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.967439][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.974706][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.982540][ T5837] bridge_slave_0: entered allmulticast mode
[  105.990311][ T5837] bridge_slave_0: entered promiscuous mode
[  106.000891][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.008394][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.015652][ T5837] bridge_slave_1: entered allmulticast mode
[  106.023671][ T5837] bridge_slave_1: entered promiscuous mode
[  106.058095][ T5832] team0: Port device team_slave_0 added
[  106.133562][ T5832] team0: Port device team_slave_1 added
[  106.155768][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.171002][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.189514][ T5836] team0: Port device team_slave_0 added
[  106.233607][ T5836] team0: Port device team_slave_1 added
[  106.251259][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.258332][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.285240][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.358028][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.365040][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.391563][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.406153][ T5837] team0: Port device team_slave_0 added
[  106.416631][ T5837] team0: Port device team_slave_1 added
[  106.423372][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.431007][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.457425][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.490793][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.498212][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.505520][ T5842] bridge_slave_0: entered allmulticast mode
[  106.513157][ T5842] bridge_slave_0: entered promiscuous mode
[  106.536680][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.543710][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.572061][ T5149] Bluetooth: hci0: command tx timeout
[  106.572225][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.614092][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.621831][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.629504][ T5842] bridge_slave_1: entered allmulticast mode
[  106.637800][ T5842] bridge_slave_1: entered promiscuous mode
[  106.661909][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.669105][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.695308][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.717175][ T5149] Bluetooth: hci2: command tx timeout
[  106.756102][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.763779][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.790305][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.801100][ T5149] Bluetooth: hci1: command tx timeout
[  106.813328][ T5832] hsr_slave_0: entered promiscuous mode
[  106.821277][ T5832] hsr_slave_1: entered promiscuous mode
[  106.845529][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.858761][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.877006][ T5149] Bluetooth: hci3: command tx timeout
[  106.928373][ T5842] team0: Port device team_slave_0 added
[  106.955677][ T5836] hsr_slave_0: entered promiscuous mode
[  106.965290][ T5836] hsr_slave_1: entered promiscuous mode
[  106.971850][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.982252][ T5836] Cannot create hsr debugfs directory
[  107.022950][ T5842] team0: Port device team_slave_1 added
[  107.121004][ T5837] hsr_slave_0: entered promiscuous mode
[  107.128316][ T5837] hsr_slave_1: entered promiscuous mode
[  107.134566][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.142839][ T5837] Cannot create hsr debugfs directory
[  107.204521][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.214719][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.242549][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.276347][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.284212][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.310506][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.542065][ T5842] hsr_slave_0: entered promiscuous mode
[  107.551046][ T5842] hsr_slave_1: entered promiscuous mode
[  107.557691][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.565354][ T5842] Cannot create hsr debugfs directory
[  107.806170][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.828360][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.862942][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.894805][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.947244][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.977283][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.010591][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.024348][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.104544][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  108.120268][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  108.162007][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  108.190986][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  108.261742][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.275120][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.296196][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.316048][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.343329][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.449542][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[  108.465177][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.472565][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.519921][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.527184][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.555780][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.615550][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.637886][ T5149] Bluetooth: hci0: command tx timeout
[  108.671003][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  108.709818][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[  108.721064][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.728417][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.767913][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.775126][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.797984][ T5149] Bluetooth: hci2: command tx timeout
[  108.843211][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.850496][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.877229][ T5149] Bluetooth: hci1: command tx timeout
[  108.894440][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.911319][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.918710][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.957280][ T5149] Bluetooth: hci3: command tx timeout
[  109.017936][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[  109.053124][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.060435][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.081008][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.088306][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.299997][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.530513][ T5832] veth0_vlan: entered promiscuous mode
[  109.572555][ T5832] veth1_vlan: entered promiscuous mode
[  109.681306][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.721483][ T5832] veth0_macvtap: entered promiscuous mode
[  109.754446][ T5832] veth1_macvtap: entered promiscuous mode
[  109.782937][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.830537][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.862405][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.895094][ T5837] veth0_vlan: entered promiscuous mode
[  109.903927][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.913792][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.924469][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.933787][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.963786][ T5837] veth1_vlan: entered promiscuous mode
[  110.007971][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.075062][ T5836] veth0_vlan: entered promiscuous mode
[  110.148631][ T5836] veth1_vlan: entered promiscuous mode
[  110.169123][ T5837] veth0_macvtap: entered promiscuous mode
[  110.195469][ T5837] veth1_macvtap: entered promiscuous mode
[  110.204937][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.217142][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.277769][ T5842] veth0_vlan: entered promiscuous mode
[  110.308016][ T5836] veth0_macvtap: entered promiscuous mode
[  110.320123][ T5836] veth1_macvtap: entered promiscuous mode
[  110.331448][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.341280][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.355260][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.374284][ T5842] veth1_vlan: entered promiscuous mode
[  110.412404][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.424520][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.439214][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.449064][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.458163][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.483513][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.523738][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.550060][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  110.585686][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.599494][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.613194][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.622422][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.684250][ T5842] veth0_macvtap: entered promiscuous mode
[  110.719605][ T5149] Bluetooth: hci0: command tx timeout
[  110.757790][ T5842] veth1_macvtap: entered promiscuous mode
[  110.777298][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.788436][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.878407][ T5149] Bluetooth: hci2: command tx timeout
[  110.928963][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.957569][ T5149] Bluetooth: hci1: command tx timeout
[  110.972868][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.987649][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.017193][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.031498][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.041598][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.049021][ T5149] Bluetooth: hci3: command tx timeout
[  111.051008][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.065752][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.134840][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.146905][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.547482][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.576893][   T30] audit: type=1800 audit(1751246613.510:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6" name="lu_gp_id" dev="configfs" ino=6342 res=0 errno=0
[  111.604905][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.778086][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.792362][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.901384][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.944040][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.807505][ T5149] Bluetooth: hci0: command tx timeout
[  112.957179][ T5149] Bluetooth: hci2: command tx timeout
[  113.037060][ T5149] Bluetooth: hci1: command tx timeout
[  113.116882][ T5149] Bluetooth: hci3: command tx timeout
[  113.547149][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.757117][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  115.132396][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.144105][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  115.389132][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.467036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.804779][ T5988] gretap0: entered allmulticast mode
[  116.078486][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  116.380529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.495306][ T6005] Zero length message leads to an empty skb
[  117.358275][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  117.468663][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[  119.385295][ T6051] Invalid ELF header magic: != ELF
[  119.547170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  119.707063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.291718][ T6055] netlink: 'syz.0.29': attribute type 11 has an invalid length.
[  121.045587][ T6067] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input5
[  121.558726][ T6084] gretap0: entered allmulticast mode
[  123.067770][ T6101] mmap: syz.0.38 (6101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  124.957224][ T6109] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  125.445123][ T6111] netlink: 'syz.1.40': attribute type 11 has an invalid length.
[  125.538107][ T6124] gretap0: entered allmulticast mode
[  126.777319][ T6135] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET)
[  132.639923][ T6198] FAULT_INJECTION: forcing a failure.
[  132.639923][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  132.836870][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.0.62 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  132.836914][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.836935][ T6198] Call Trace:
[  132.836945][ T6198]  <TASK>
[  132.836960][ T6198]  dump_stack_lvl+0x16c/0x1f0
[  132.837030][ T6198]  should_fail_ex+0x512/0x640
[  132.837081][ T6198]  _copy_from_user+0x2e/0xd0
[  132.837133][ T6198]  copy_msghdr_from_user+0x98/0x160
[  132.837185][ T6198]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  132.837257][ T6198]  ___sys_sendmsg+0xfe/0x1d0
[  132.837308][ T6198]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.837355][ T6198]  ? __lock_acquire+0x622/0x1c90
[  132.837449][ T6198]  __sys_sendmsg+0x16d/0x220
[  132.837500][ T6198]  ? __pfx___sys_sendmsg+0x10/0x10
[  132.837586][ T6198]  do_syscall_64+0xcd/0x490
[  132.837641][ T6198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.837675][ T6198] RIP: 0033:0x7f05d718e929
[  132.837708][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.837737][ T6198] RSP: 002b:00007f05d80db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.837771][ T6198] RAX: ffffffffffffffda RBX: 00007f05d73b5fa0 RCX: 00007f05d718e929
[  132.837791][ T6198] RDX: 0000000020008010 RSI: 0000200000001440 RDI: 0000000000000003
[  132.837809][ T6198] RBP: 00007f05d80db090 R08: 0000000000000000 R09: 0000000000000000
[  132.837826][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.837843][ T6198] R13: 0000000000000000 R14: 00007f05d73b5fa0 R15: 00007ffc34669398
[  132.837882][ T6198]  </TASK>
[  133.590278][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'.
[  133.831795][ T6217] FAULT_INJECTION: forcing a failure.
[  133.831795][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.906684][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.1.67 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  133.906727][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  133.906744][ T6217] Call Trace:
[  133.906752][ T6217]  <TASK>
[  133.906763][ T6217]  dump_stack_lvl+0x16c/0x1f0
[  133.906813][ T6217]  should_fail_ex+0x512/0x640
[  133.906853][ T6217]  _copy_from_iter+0x29f/0x16f0
[  133.906901][ T6217]  ? __alloc_skb+0x200/0x380
[  133.906937][ T6217]  ? __pfx__copy_from_iter+0x10/0x10
[  133.906979][ T6217]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  133.907016][ T6217]  netlink_sendmsg+0x829/0xdd0
[  133.907050][ T6217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.907090][ T6217]  ____sys_sendmsg+0xa98/0xc70
[  133.907120][ T6217]  ? copy_msghdr_from_user+0x10a/0x160
[  133.907161][ T6217]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.907204][ T6217]  ___sys_sendmsg+0x134/0x1d0
[  133.907248][ T6217]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.907288][ T6217]  ? __lock_acquire+0x622/0x1c90
[  133.907361][ T6217]  __sys_sendmsg+0x16d/0x220
[  133.907417][ T6217]  ? __pfx___sys_sendmsg+0x10/0x10
[  133.907486][ T6217]  do_syscall_64+0xcd/0x490
[  133.907540][ T6217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.907573][ T6217] RIP: 0033:0x7fa639f8e929
[  133.907597][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.907627][ T6217] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.907653][ T6217] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  133.907675][ T6217] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003
[  133.907695][ T6217] RBP: 00007fa63ad3b090 R08: 0000000000000000 R09: 0000000000000000
[  133.907714][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.907732][ T6217] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  133.907773][ T6217]  </TASK>
[  134.320555][ T6208] syz.3.65 (6208) used greatest stack depth: 19800 bytes left
[  134.436220][ T6215] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  134.455224][ T6215] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  134.733652][ T6225] nbd: socks must be embedded in a SOCK_ITEM attr
[  134.747329][ T6225] block nbd0: shutting down sockets
[  134.761715][ T6215] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  134.864547][ T6215] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  134.916939][ T6215] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.055641][ T6215] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.252358][ T6215] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  135.298376][ T6215] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  135.511176][ T6215] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  135.660414][ T6215] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  135.819880][ T6215] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  135.954297][ T6215] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  136.480097][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout
[  136.876687][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.276715][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout
[  137.676930][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout
[  138.563669][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.957565][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout
[  139.365521][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout
[  139.756694][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.257426][ T6291] smc: net device syz_tun applied user defined pnetid ETHTOOL
[  140.508994][ T6296] FAULT_INJECTION: forcing a failure.
[  140.508994][ T6296] name failslab, interval 1, probability 0, space 0, times 0
[  140.533995][ T6290] could not allocate digest TFM handle 
[  140.576660][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.1.81 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  140.576719][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.576738][ T6296] Call Trace:
[  140.576748][ T6296]  <TASK>
[  140.576759][ T6296]  dump_stack_lvl+0x16c/0x1f0
[  140.576811][ T6296]  should_fail_ex+0x512/0x640
[  140.576863][ T6296]  should_failslab+0xc2/0x120
[  140.576892][ T6296]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  140.576943][ T6296]  ? skb_clone+0x190/0x3f0
[  140.576999][ T6296]  skb_clone+0x190/0x3f0
[  140.577052][ T6296]  netlink_deliver_tap+0xabd/0xd30
[  140.577094][ T6296]  netlink_unicast+0x5df/0x7f0
[  140.577134][ T6296]  ? __pfx_netlink_unicast+0x10/0x10
[  140.577181][ T6296]  netlink_sendmsg+0x8d1/0xdd0
[  140.577223][ T6296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.577274][ T6296]  ____sys_sendmsg+0xa98/0xc70
[  140.577313][ T6296]  ? copy_msghdr_from_user+0x10a/0x160
[  140.577363][ T6296]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.577421][ T6296]  ___sys_sendmsg+0x134/0x1d0
[  140.577473][ T6296]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.577524][ T6296]  ? __lock_acquire+0x622/0x1c90
[  140.577618][ T6296]  __sys_sendmsg+0x16d/0x220
[  140.577669][ T6296]  ? __pfx___sys_sendmsg+0x10/0x10
[  140.577754][ T6296]  do_syscall_64+0xcd/0x490
[  140.577808][ T6296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.577841][ T6296] RIP: 0033:0x7fa639f8e929
[  140.577866][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.577895][ T6296] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.577925][ T6296] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  140.577945][ T6296] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003
[  140.577964][ T6296] RBP: 00007fa63ad3b090 R08: 0000000000000000 R09: 0000000000000000
[  140.577983][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.578002][ T6296] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  140.578044][ T6296]  </TASK>
[  140.886011][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.039436][ T6299] gretap0: entered allmulticast mode
[  141.054874][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  141.436647][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  141.836810][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  143.242059][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  143.249266][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  145.123103][ T6356] FAULT_INJECTION: forcing a failure.
[  145.123103][ T6356] name failslab, interval 1, probability 0, space 0, times 0
[  145.166647][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.1.96 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  145.166691][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  145.166709][ T6356] Call Trace:
[  145.166719][ T6356]  <TASK>
[  145.166731][ T6356]  dump_stack_lvl+0x16c/0x1f0
[  145.166785][ T6356]  should_fail_ex+0x512/0x640
[  145.166830][ T6356]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  145.166878][ T6356]  should_failslab+0xc2/0x120
[  145.166909][ T6356]  __kmalloc_cache_noprof+0x6a/0x3e0
[  145.166951][ T6356]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  145.166996][ T6356]  ? genl_start+0x1e8/0x980
[  145.167039][ T6356]  genl_start+0x1e8/0x980
[  145.167084][ T6356]  __netlink_dump_start+0x60e/0x990
[  145.167124][ T6356]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  145.167169][ T6356]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  145.167212][ T6356]  ? find_held_lock+0x2b/0x80
[  145.167251][ T6356]  ? __pfx_genl_get_cmd+0x10/0x10
[  145.167285][ T6356]  ? __pfx_genl_start+0x10/0x10
[  145.167320][ T6356]  ? __pfx_genl_dumpit+0x10/0x10
[  145.167357][ T6356]  ? __pfx_genl_done+0x10/0x10
[  145.167401][ T6356]  ? __radix_tree_lookup+0x21f/0x2c0
[  145.167460][ T6356]  genl_rcv_msg+0x46e/0x800
[  145.167505][ T6356]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.167546][ T6356]  ? __pfx_devlink_nl_selftests_get_dumpit+0x10/0x10
[  145.167602][ T6356]  netlink_rcv_skb+0x158/0x420
[  145.167638][ T6356]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.167685][ T6356]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.167744][ T6356]  ? netlink_deliver_tap+0x1ae/0xd30
[  145.167788][ T6356]  genl_rcv+0x28/0x40
[  145.167824][ T6356]  netlink_unicast+0x53d/0x7f0
[  145.167869][ T6356]  ? __pfx_netlink_unicast+0x10/0x10
[  145.167922][ T6356]  netlink_sendmsg+0x8d1/0xdd0
[  145.167966][ T6356]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.168024][ T6356]  ____sys_sendmsg+0xa98/0xc70
[  145.168064][ T6356]  ? copy_msghdr_from_user+0x10a/0x160
[  145.168119][ T6356]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.168182][ T6356]  ___sys_sendmsg+0x134/0x1d0
[  145.168236][ T6356]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.168288][ T6356]  ? __lock_acquire+0x622/0x1c90
[  145.168388][ T6356]  __sys_sendmsg+0x16d/0x220
[  145.168452][ T6356]  ? __pfx___sys_sendmsg+0x10/0x10
[  145.168536][ T6356]  do_syscall_64+0xcd/0x490
[  145.168592][ T6356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.168629][ T6356] RIP: 0033:0x7fa639f8e929
[  145.168654][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.168684][ T6356] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.168713][ T6356] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  145.168734][ T6356] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003
[  145.168751][ T6356] RBP: 00007fa63ad3b090 R08: 0000000000000000 R09: 0000000000000000
[  145.168769][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.168785][ T6356] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  145.168829][ T6356]  </TASK>
[  146.349718][ T6360] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[  147.101042][ T6364] hub 8-0:1.0: USB hub found
[  147.109644][ T6364] hub 8-0:1.0: 1 port detected
[  147.332021][ T6370] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  152.215157][ T6437] hub 8-0:1.0: USB hub found
[  152.232116][ T6424] cgroup: fork rejected by pids controller in /syz0
[  152.249662][ T6437] hub 8-0:1.0: 1 port detected
[  152.266600][ T6424] 
[  153.979828][ T6474] FAULT_INJECTION: forcing a failure.
[  153.979828][ T6474] name failslab, interval 1, probability 0, space 0, times 0
[  154.034923][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.2.117 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  154.034974][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  154.034993][ T6474] Call Trace:
[  154.035004][ T6474]  <TASK>
[  154.035017][ T6474]  dump_stack_lvl+0x16c/0x1f0
[  154.035075][ T6474]  should_fail_ex+0x512/0x640
[  154.035124][ T6474]  ? __kmalloc_noprof+0xbf/0x510
[  154.035194][ T6474]  ? lsm_blob_alloc+0x68/0x90
[  154.035244][ T6474]  should_failslab+0xc2/0x120
[  154.035277][ T6474]  __kmalloc_noprof+0xd2/0x510
[  154.035338][ T6474]  lsm_blob_alloc+0x68/0x90
[  154.035391][ T6474]  security_sk_alloc+0x30/0x270
[  154.035429][ T6474]  sk_prot_alloc+0x1c7/0x2a0
[  154.035469][ T6474]  sk_alloc+0x36/0xc20
[  154.035529][ T6474]  packet_create+0x127/0x8e0
[  154.035578][ T6474]  __sock_create+0x338/0x8d0
[  154.035626][ T6474]  __sys_socket+0x14d/0x260
[  154.035666][ T6474]  ? __x64_sys_openat+0x174/0x210
[  154.035705][ T6474]  ? __pfx___sys_socket+0x10/0x10
[  154.035745][ T6474]  ? xfd_validate_state+0x61/0x180
[  154.035797][ T6474]  __x64_sys_socket+0x72/0xb0
[  154.035835][ T6474]  ? lockdep_hardirqs_on+0x7c/0x110
[  154.035884][ T6474]  do_syscall_64+0xcd/0x490
[  154.035945][ T6474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.035980][ T6474] RIP: 0033:0x7f0b1db8e929
[  154.036007][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.036039][ T6474] RSP: 002b:00007f0b1e9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  154.036071][ T6474] RAX: ffffffffffffffda RBX: 00007f0b1ddb5fa0 RCX: 00007f0b1db8e929
[  154.036092][ T6474] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011
[  154.036113][ T6474] RBP: 00007f0b1dc10b39 R08: 0000000000000000 R09: 0000000000000000
[  154.036133][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.036153][ T6474] R13: 0000000000000000 R14: 00007f0b1ddb5fa0 R15: 00007ffe30d525d8
[  154.036195][ T6474]  </TASK>
[  154.870602][ T6483] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  157.034469][ T6483] input: failed to attach handler evdev to device input7, error: -4
[  157.628803][ T6580] FAULT_INJECTION: forcing a failure.
[  157.628803][ T6580] name failslab, interval 1, probability 0, space 0, times 0
[  157.666670][ T6580] CPU: 1 UID: 0 PID: 6580 Comm: syz.3.134 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  157.666714][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  157.666732][ T6580] Call Trace:
[  157.666742][ T6580]  <TASK>
[  157.666753][ T6580]  dump_stack_lvl+0x16c/0x1f0
[  157.666806][ T6580]  should_fail_ex+0x512/0x640
[  157.666859][ T6580]  should_failslab+0xc2/0x120
[  157.666891][ T6580]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  157.666942][ T6580]  ? skb_clone+0x190/0x3f0
[  157.667000][ T6580]  skb_clone+0x190/0x3f0
[  157.667053][ T6580]  netlink_deliver_tap+0xabd/0xd30
[  157.667096][ T6580]  netlink_dump+0xb4d/0xce0
[  157.667142][ T6580]  ? __pfx_netlink_dump+0x10/0x10
[  157.667189][ T6580]  ? __asan_memset+0x23/0x50
[  157.667233][ T6580]  ? genl_start+0x67f/0x980
[  157.667278][ T6580]  __netlink_dump_start+0x6d6/0x990
[  157.667320][ T6580]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  157.667366][ T6580]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  157.667411][ T6580]  ? find_held_lock+0x2b/0x80
[  157.667450][ T6580]  ? __pfx_genl_get_cmd+0x10/0x10
[  157.667485][ T6580]  ? __pfx_genl_start+0x10/0x10
[  157.667521][ T6580]  ? __pfx_genl_dumpit+0x10/0x10
[  157.667558][ T6580]  ? __pfx_genl_done+0x10/0x10
[  157.667604][ T6580]  ? __radix_tree_lookup+0x21f/0x2c0
[  157.667657][ T6580]  genl_rcv_msg+0x46e/0x800
[  157.667705][ T6580]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.667747][ T6580]  ? __pfx_devlink_nl_selftests_get_dumpit+0x10/0x10
[  157.667799][ T6580]  netlink_rcv_skb+0x158/0x420
[  157.667834][ T6580]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.667877][ T6580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.667931][ T6580]  ? netlink_deliver_tap+0x1ae/0xd30
[  157.667969][ T6580]  genl_rcv+0x28/0x40
[  157.668004][ T6580]  netlink_unicast+0x53d/0x7f0
[  157.668044][ T6580]  ? __pfx_netlink_unicast+0x10/0x10
[  157.668092][ T6580]  netlink_sendmsg+0x8d1/0xdd0
[  157.668144][ T6580]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.668197][ T6580]  ____sys_sendmsg+0xa98/0xc70
[  157.668237][ T6580]  ? copy_msghdr_from_user+0x10a/0x160
[  157.668287][ T6580]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.668346][ T6580]  ___sys_sendmsg+0x134/0x1d0
[  157.668400][ T6580]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.668447][ T6580]  ? __lock_acquire+0x622/0x1c90
[  157.668544][ T6580]  __sys_sendmsg+0x16d/0x220
[  157.668597][ T6580]  ? __pfx___sys_sendmsg+0x10/0x10
[  157.668677][ T6580]  do_syscall_64+0xcd/0x490
[  157.668733][ T6580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.668766][ T6580] RIP: 0033:0x7f4909f8e929
[  157.668789][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.668817][ T6580] RSP: 002b:00007f490ad50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.668846][ T6580] RAX: ffffffffffffffda RBX: 00007f490a1b5fa0 RCX: 00007f4909f8e929
[  157.668867][ T6580] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003
[  157.668886][ T6580] RBP: 00007f490ad50090 R08: 0000000000000000 R09: 0000000000000000
[  157.668906][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.668923][ T6580] R13: 0000000000000000 R14: 00007f490a1b5fa0 R15: 00007ffd1f40eb18
[  157.668964][ T6580]  </TASK>
[  160.130141][ T6606] FAULT_INJECTION: forcing a failure.
[  160.130141][ T6606] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  160.143705][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.1.139 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  160.143752][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.143772][ T6606] Call Trace:
[  160.143783][ T6606]  <TASK>
[  160.143795][ T6606]  dump_stack_lvl+0x16c/0x1f0
[  160.143853][ T6606]  should_fail_ex+0x512/0x640
[  160.143909][ T6606]  should_fail_alloc_page+0xe7/0x130
[  160.143945][ T6606]  prepare_alloc_pages+0x3c2/0x610
[  160.143985][ T6606]  ? rcu_is_watching+0x12/0xc0
[  160.144024][ T6606]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  160.144081][ T6606]  ? rcu_is_watching+0x12/0xc0
[  160.144113][ T6606]  ? trace_mm_page_alloc+0x11f/0x1a0
[  160.144152][ T6606]  ? __alloc_frozen_pages_noprof+0x294/0x23f0
[  160.144202][ T6606]  ? lockdep_hardirqs_on+0x7c/0x110
[  160.144253][ T6606]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  160.144304][ T6606]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  160.144369][ T6606]  ? alloc_vmap_area+0xdc8/0x29c0
[  160.144404][ T6606]  ? __vmalloc_node_range_noprof+0x271/0x14b0
[  160.144447][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.144487][ T6606]  ? do_syscall_64+0xcd/0x490
[  160.144538][ T6606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.144601][ T6606]  alloc_pages_bulk_noprof+0x71c/0x1410
[  160.144654][ T6606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.144709][ T6606]  ? policy_nodemask+0xea/0x4e0
[  160.144769][ T6606]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  160.144823][ T6606]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  160.144873][ T6606]  kasan_populate_vmalloc+0xf1/0x1f0
[  160.144930][ T6606]  alloc_vmap_area+0x959/0x29c0
[  160.144984][ T6606]  ? __pfx_alloc_vmap_area+0x10/0x10
[  160.145033][ T6606]  __get_vm_area_node+0x1ca/0x330
[  160.145081][ T6606]  __vmalloc_node_range_noprof+0x271/0x14b0
[  160.145126][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.145179][ T6606]  ? __lock_acquire+0xb8a/0x1c90
[  160.145223][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.145276][ T6606]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.145322][ T6606]  ? __alloc_pages_noprof+0xb/0x1b0
[  160.145371][ T6606]  ? ___kmalloc_large_node+0x84/0x1e0
[  160.145408][ T6606]  ? find_held_lock+0x2b/0x80
[  160.145449][ T6606]  __kvmalloc_node_noprof+0x30a/0x620
[  160.145498][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.145542][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.145603][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.145645][ T6606]  __do_sys_listmount+0x1c2/0xec0
[  160.145697][ T6606]  ? __x64_sys_futex+0x1e0/0x4c0
[  160.145737][ T6606]  ? __x64_sys_futex+0x1e9/0x4c0
[  160.145780][ T6606]  ? __pfx___do_sys_listmount+0x10/0x10
[  160.145843][ T6606]  do_syscall_64+0xcd/0x490
[  160.145901][ T6606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.145935][ T6606] RIP: 0033:0x7fa639f8e929
[  160.145962][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.145994][ T6606] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  160.146025][ T6606] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  160.146053][ T6606] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  160.146074][ T6606] RBP: 00007fa63a010b39 R08: 0000000000000000 R09: 0000000000000000
[  160.146094][ T6606] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  160.146113][ T6606] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  160.146155][ T6606]  </TASK>
[  160.542095][ T6606] syz.1.139: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  160.618417][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.1.139 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  160.618462][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.618481][ T6606] Call Trace:
[  160.618491][ T6606]  <TASK>
[  160.618526][ T6606]  dump_stack_lvl+0x16c/0x1f0
[  160.618580][ T6606]  warn_alloc+0x248/0x3a0
[  160.618631][ T6606]  ? __pfx_warn_alloc+0x10/0x10
[  160.618682][ T6606]  ? kfree+0x2b4/0x4d0
[  160.618732][ T6606]  ? __get_vm_area_node+0x208/0x330
[  160.618780][ T6606]  __vmalloc_node_range_noprof+0xb2d/0x14b0
[  160.618840][ T6606]  ? __lock_acquire+0xb8a/0x1c90
[  160.618884][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.618936][ T6606]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.618981][ T6606]  ? __alloc_pages_noprof+0xb/0x1b0
[  160.619028][ T6606]  ? ___kmalloc_large_node+0x84/0x1e0
[  160.619064][ T6606]  ? find_held_lock+0x2b/0x80
[  160.619103][ T6606]  __kvmalloc_node_noprof+0x30a/0x620
[  160.619152][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.619197][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.619248][ T6606]  ? __do_sys_listmount+0x1c2/0xec0
[  160.619289][ T6606]  __do_sys_listmount+0x1c2/0xec0
[  160.619340][ T6606]  ? __x64_sys_futex+0x1e0/0x4c0
[  160.619381][ T6606]  ? __x64_sys_futex+0x1e9/0x4c0
[  160.619424][ T6606]  ? __pfx___do_sys_listmount+0x10/0x10
[  160.619488][ T6606]  do_syscall_64+0xcd/0x490
[  160.619545][ T6606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.619580][ T6606] RIP: 0033:0x7fa639f8e929
[  160.619606][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.619639][ T6606] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  160.619670][ T6606] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  160.619693][ T6606] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  160.619714][ T6606] RBP: 00007fa63a010b39 R08: 0000000000000000 R09: 0000000000000000
[  160.619734][ T6606] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  160.619753][ T6606] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  160.619795][ T6606]  </TASK>
[  160.619807][ T6606] Mem-Info:
[  160.899111][ T6606] active_anon:75145 inactive_anon:0 isolated_anon:0
[  160.899111][ T6606]  active_file:4334 inactive_file:41220 isolated_file:0
[  160.899111][ T6606]  unevictable:8954 dirty:344 writeback:0
[  160.899111][ T6606]  slab_reclaimable:10251 slab_unreclaimable:94486
[  160.899111][ T6606]  mapped:41577 shmem:70463 pagetables:1265
[  160.899111][ T6606]  sec_pagetables:0 bounce:0
[  160.899111][ T6606]  kernel_misc_reclaimable:0
[  160.899111][ T6606]  free:1262728 free_pcp:15867 free_cma:0
[  160.946773][ T6606] Node 0 active_anon:301280kB inactive_anon:0kB active_file:17336kB inactive_file:164680kB unevictable:34276kB isolated(anon):0kB isolated(file):0kB mapped:166304kB dirty:1372kB writeback:0kB shmem:280916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.990357][ T6606] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.023435][ T6606] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.052446][ T6606] lowmem_reserve[]: 0 2481 2482 2482 2482
[  161.076575][ T6606] Node 0 DMA32 free:1131960kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:303416kB inactive_anon:0kB active_file:17336kB inactive_file:163224kB unevictable:34420kB writepending:1352kB present:3129332kB managed:2540848kB mlocked:33000kB bounce:0kB free_pcp:44024kB local_pcp:26212kB free_cma:0kB
[  161.186722][ T6606] lowmem_reserve[]: 0 0 1 1 1
[  161.191574][ T6606] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  161.360610][ T6606] lowmem_reserve[]: 0 0 0 0 0
[  161.365494][ T6606] Node 1 Normal free:3900732kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1540kB writepending:4kB present:4194300kB managed:4111164kB mlocked:4kB bounce:0kB free_pcp:19520kB local_pcp:10208kB free_cma:0kB
[  161.608938][ T6606] lowmem_reserve[]: 0 0 0 0 0
[  161.624994][ T6606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  161.716531][ T6606] Node 0 DMA32: 2*4kB (UE) 14*8kB (UME) 43*16kB (UME) 127*32kB (U) 30*64kB (UME) 12*128kB (UE) 8*256kB (UM) 3*512kB (U) 4*1024kB (U) 1*2048kB (E) 268*4096kB (UM) = 1115784kB
[  161.798801][ T6606] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  161.852082][ T6606] Node 1 Normal: 187*4kB (UM) 48*8kB (UE) 41*16kB (UME) 98*32kB (UME) 34*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900732kB
[  161.924108][ T6606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.966752][ T6606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.976193][ T6606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  162.006404][ T6606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  162.036635][ T6606] 132171 total pagecache pages
[  162.041546][ T6606] 1 pages in swap cache
[  162.057152][ T6606] Free swap  = 122952kB
[  162.066813][ T6606] Total swap = 124996kB
[  162.071166][ T6606] 2097051 pages RAM
[  162.085327][ T6606] 0 pages HighMem/MovableOnly
[  162.105668][ T6606] 429861 pages reserved
[  162.115816][ T6606] 0 pages cma reserved
[  162.484512][ T6630] FAULT_INJECTION: forcing a failure.
[  162.484512][ T6630] name failslab, interval 1, probability 0, space 0, times 0
[  162.507004][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.3.144 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  162.507047][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  162.507064][ T6630] Call Trace:
[  162.507074][ T6630]  <TASK>
[  162.507086][ T6630]  dump_stack_lvl+0x16c/0x1f0
[  162.507140][ T6630]  should_fail_ex+0x512/0x640
[  162.507185][ T6630]  ? __kvmalloc_node_noprof+0x124/0x620
[  162.507235][ T6630]  should_failslab+0xc2/0x120
[  162.507265][ T6630]  __kvmalloc_node_noprof+0x137/0x620
[  162.507312][ T6630]  ? alloc_netdev_mqs+0xfbe/0x1570
[  162.507371][ T6630]  ? alloc_netdev_mqs+0xfbe/0x1570
[  162.507420][ T6630]  alloc_netdev_mqs+0xfbe/0x1570
[  162.507480][ T6630]  ppp_ioctl+0x1761/0x2660
[  162.507521][ T6630]  ? find_held_lock+0x2b/0x80
[  162.507552][ T6630]  ? __pfx_ppp_ioctl+0x10/0x10
[  162.507607][ T6630]  ? __fget_files+0x20e/0x3c0
[  162.507657][ T6630]  ? __pfx_ppp_ioctl+0x10/0x10
[  162.507696][ T6630]  __x64_sys_ioctl+0x18b/0x210
[  162.507736][ T6630]  do_syscall_64+0xcd/0x490
[  162.507789][ T6630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.507822][ T6630] RIP: 0033:0x7f4909f8e929
[  162.507846][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.507875][ T6630] RSP: 002b:00007f490ad2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  162.507905][ T6630] RAX: ffffffffffffffda RBX: 00007f490a1b6080 RCX: 00007f4909f8e929
[  162.507926][ T6630] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007
[  162.507944][ T6630] RBP: 00007f490a010b39 R08: 0000000000000000 R09: 0000000000000000
[  162.507964][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.507983][ T6630] R13: 0000000000000000 R14: 00007f490a1b6080 R15: 00007ffd1f40eb18
[  162.508024][ T6630]  </TASK>
[  162.857484][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'.
[  163.002901][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.954565][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.343786][ T6717] FAULT_INJECTION: forcing a failure.
[  170.343786][ T6717] name failslab, interval 1, probability 0, space 0, times 0
[  170.372674][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.3.163 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  170.372724][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  170.372744][ T6717] Call Trace:
[  170.372756][ T6717]  <TASK>
[  170.372768][ T6717]  dump_stack_lvl+0x16c/0x1f0
[  170.372828][ T6717]  should_fail_ex+0x512/0x640
[  170.372876][ T6717]  ? __kmalloc_noprof+0xbf/0x510
[  170.372930][ T6717]  ? xfrm_hash_alloc+0xd1/0x100
[  170.372973][ T6717]  should_failslab+0xc2/0x120
[  170.373004][ T6717]  __kmalloc_noprof+0xd2/0x510
[  170.373052][ T6717]  ? xfrm_state_init+0x377/0x630
[  170.373094][ T6717]  ? xfrm_state_init+0x331/0x630
[  170.373145][ T6717]  xfrm_hash_alloc+0xd1/0x100
[  170.373192][ T6717]  xfrm_net_init+0x35f/0xcc0
[  170.373250][ T6717]  ? __pfx_xfrm_net_init+0x10/0x10
[  170.373298][ T6717]  ops_init+0x1df/0x5f0
[  170.373334][ T6717]  setup_net+0x1ff/0x510
[  170.373363][ T6717]  ? lockdep_init_map_type+0x5c/0x280
[  170.373409][ T6717]  ? __pfx_setup_net+0x10/0x10
[  170.373443][ T6717]  ? debug_mutex_init+0x37/0x70
[  170.373491][ T6717]  copy_net_ns+0x2a6/0x5f0
[  170.373530][ T6717]  create_new_namespaces+0x3ea/0xa90
[  170.373577][ T6717]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  170.373618][ T6717]  ksys_unshare+0x45b/0xa40
[  170.373664][ T6717]  ? __pfx_ksys_unshare+0x10/0x10
[  170.373712][ T6717]  ? syscall_user_dispatch+0x78/0x140
[  170.373776][ T6717]  __x64_sys_unshare+0x31/0x40
[  170.373819][ T6717]  do_syscall_64+0xcd/0x490
[  170.373875][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.373910][ T6717] RIP: 0033:0x7f4909f8e929
[  170.373936][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.373968][ T6717] RSP: 002b:00007f490ad50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  170.373999][ T6717] RAX: ffffffffffffffda RBX: 00007f490a1b5fa0 RCX: 00007f4909f8e929
[  170.374021][ T6717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  170.374042][ T6717] RBP: 00007f490a010b39 R08: 0000000000000000 R09: 0000000000000000
[  170.374062][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.374082][ T6717] R13: 0000000000000000 R14: 00007f490a1b5fa0 R15: 00007ffd1f40eb18
[  170.374125][ T6717]  </TASK>
[  171.920849][ T6736] FAULT_INJECTION: forcing a failure.
[  171.920849][ T6736] name failslab, interval 1, probability 0, space 0, times 0
[  171.934867][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.1.169 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  171.934914][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  171.934933][ T6736] Call Trace:
[  171.934948][ T6736]  <TASK>
[  171.934960][ T6736]  dump_stack_lvl+0x16c/0x1f0
[  171.935019][ T6736]  should_fail_ex+0x512/0x640
[  171.935069][ T6736]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  171.935141][ T6736]  should_failslab+0xc2/0x120
[  171.935173][ T6736]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  171.935230][ T6736]  ? arch_stack_walk+0xa6/0x100
[  171.935282][ T6736]  ? getname_kernel+0x52/0x370
[  171.935324][ T6736]  getname_kernel+0x52/0x370
[  171.935357][ T6736]  do_file_open_root+0x19d/0x610
[  171.935411][ T6736]  ? __pfx_do_file_open_root+0x10/0x10
[  171.935462][ T6736]  ? stack_depot_save_flags+0x28/0xa40
[  171.935557][ T6736]  ? vsnprintf+0x318/0x1160
[  171.935632][ T6736]  file_open_root+0x2a7/0x450
[  171.935690][ T6736]  ? __pfx_file_open_root+0x10/0x10
[  171.935739][ T6736]  ? find_held_lock+0x2b/0x80
[  171.935778][ T6736]  ? kernel_read_file_from_path_initns+0x17a/0x260
[  171.935825][ T6736]  kernel_read_file_from_path_initns+0x189/0x260
[  171.935865][ T6736]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  171.935920][ T6736]  _request_firmware+0x744/0x1470
[  171.935982][ T6736]  ? __pfx__request_firmware+0x10/0x10
[  171.936030][ T6736]  ? __pfx_netdev_run_todo+0x10/0x10
[  171.936062][ T6736]  ? __pfx___mutex_lock+0x10/0x10
[  171.936132][ T6736]  request_firmware+0x35/0x50
[  171.936183][ T6736]  reg_reload_regdb+0x89/0x460
[  171.936227][ T6736]  ? __pfx_reg_reload_regdb+0x10/0x10
[  171.936275][ T6736]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  171.936325][ T6736]  ? nl80211_pre_doit+0x1b0/0xb10
[  171.936385][ T6736]  genl_family_rcv_msg_doit+0x209/0x2f0
[  171.936437][ T6736]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.936484][ T6736]  ? rcu_is_watching+0x12/0xc0
[  171.936528][ T6736]  ? bpf_lsm_capable+0x9/0x10
[  171.936565][ T6736]  ? security_capable+0x7e/0x260
[  171.936637][ T6736]  genl_rcv_msg+0x55c/0x800
[  171.936689][ T6736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.936731][ T6736]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  171.936777][ T6736]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  171.936811][ T6736]  ? __pfx_nl80211_post_doit+0x10/0x10
[  171.936873][ T6736]  netlink_rcv_skb+0x158/0x420
[  171.936908][ T6736]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.936954][ T6736]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.937007][ T6736]  ? netlink_deliver_tap+0x1ae/0xd30
[  171.937046][ T6736]  genl_rcv+0x28/0x40
[  171.937081][ T6736]  netlink_unicast+0x53d/0x7f0
[  171.937120][ T6736]  ? __pfx_netlink_unicast+0x10/0x10
[  171.937167][ T6736]  netlink_sendmsg+0x8d1/0xdd0
[  171.937209][ T6736]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.937261][ T6736]  ____sys_sendmsg+0xa98/0xc70
[  171.937318][ T6736]  ? copy_msghdr_from_user+0x10a/0x160
[  171.937370][ T6736]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.937420][ T6736]  ? __pfx_futex_wake_mark+0x10/0x10
[  171.937475][ T6736]  ___sys_sendmsg+0x134/0x1d0
[  171.937529][ T6736]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.937576][ T6736]  ? __lock_acquire+0x622/0x1c90
[  171.937676][ T6736]  __sys_sendmsg+0x16d/0x220
[  171.937727][ T6736]  ? __pfx___sys_sendmsg+0x10/0x10
[  171.937780][ T6736]  ? __x64_sys_futex+0x1e0/0x4c0
[  171.937848][ T6736]  do_syscall_64+0xcd/0x490
[  171.937908][ T6736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.937943][ T6736] RIP: 0033:0x7fa639f8e929
[  171.937974][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.938006][ T6736] RSP: 002b:00007fa63ad3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.938037][ T6736] RAX: ffffffffffffffda RBX: 00007fa63a1b5fa0 RCX: 00007fa639f8e929
[  171.938064][ T6736] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009
[  171.938085][ T6736] RBP: 00007fa63a010b39 R08: 0000000000000000 R09: 0000000000000000
[  171.938105][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.938125][ T6736] R13: 0000000000000000 R14: 00007fa63a1b5fa0 R15: 00007ffeaf9fd768
[  171.938172][ T6736]  </TASK>
[  172.416662][ T6736] platform regulatory.0: loading /lib/firmware/updates/6.16.0-rc3-syzkaller-00346-gafa9a6f4f574/regulatory.db failed with error -12
[  173.368895][ T6731] nbd: socks must be embedded in a SOCK_ITEM attr
[  173.427020][ T6731] block nbd0: shutting down sockets
[  178.314836][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[  178.480103][ T6783] bridge_slave_1: left allmulticast mode
[  178.486079][ T6783] bridge_slave_1: left promiscuous mode
[  178.496378][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.558140][ T6783] bridge_slave_0: left allmulticast mode
[  178.570399][ T6783] bridge_slave_0: left promiscuous mode
[  178.590168][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.498293][ T6825] ICMPv6: process `syz.1.186' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  185.215405][   T30] audit: type=1804 audit(1751246687.150:3): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.200" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1070 res=1 errno=0
[  185.289591][   T30] audit: type=1804 audit(1751246687.180:4): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.200" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=1070 res=1 errno=0
[  186.185092][ T6874] netlink: 330 bytes leftover after parsing attributes in process `syz.3.204'.
[  197.202892][ T6946] IPVS: length: 256 != 24
[  199.448293][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'.
[  199.806806][ T6439] syz.0.112 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  199.836897][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.0.112 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  199.836931][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  199.836948][ T6439] Call Trace:
[  199.836955][ T6439]  <TASK>
[  199.836966][ T6439]  dump_stack_lvl+0x16c/0x1f0
[  199.837007][ T6439]  dump_header+0x101/0x930
[  199.837047][ T6439]  oom_kill_process+0x270/0xa60
[  199.837085][ T6439]  out_of_memory+0x350/0x1700
[  199.837127][ T6439]  ? __pfx_out_of_memory+0x10/0x10
[  199.837171][ T6439]  mem_cgroup_out_of_memory+0x118/0x130
[  199.837200][ T6439]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  199.837236][ T6439]  ? do_raw_spin_unlock+0x172/0x230
[  199.837277][ T6439]  try_charge_memcg+0x72b/0xd50
[  199.837319][ T6439]  ? __pfx_try_charge_memcg+0x10/0x10
[  199.837357][ T6439]  ? __print_lock_name+0x60/0xe0
[  199.837380][ T6439]  ? rcu_read_unlock+0x17/0x60
[  199.837410][ T6439]  charge_memcg+0x8a/0x230
[  199.837432][ T6439]  __mem_cgroup_charge+0x2b/0x1e0
[  199.837459][ T6439]  shmem_alloc_and_add_folio+0x514/0xc20
[  199.837499][ T6439]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  199.837535][ T6439]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[  199.837581][ T6439]  shmem_get_folio_gfp+0x67f/0x1600
[  199.837621][ T6439]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  199.837655][ T6439]  ? timestamp_truncate+0x21e/0x2d0
[  199.837695][ T6439]  shmem_write_begin+0x160/0x300
[  199.837731][ T6439]  ? __pfx_shmem_write_begin+0x10/0x10
[  199.837766][ T6439]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[  199.837800][ T6439]  generic_perform_write+0x3d0/0x930
[  199.837843][ T6439]  ? __pfx_generic_perform_write+0x10/0x10
[  199.837879][ T6439]  ? generic_update_time+0xcf/0xf0
[  199.837914][ T6439]  ? mnt_put_write_access_file+0x45/0xf0
[  199.837949][ T6439]  shmem_file_write_iter+0x10e/0x140
[  199.837972][ T6439]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  199.837993][ T6439]  __kernel_write_iter+0x317/0xa90
[  199.838029][ T6439]  ? __pfx___kernel_write_iter+0x10/0x10
[  199.838061][ T6439]  ? __up_read+0x1f8/0x750
[  199.838099][ T6439]  ? dump_user_range+0x745/0xb60
[  199.838130][ T6439]  dump_user_range+0x41f/0xb60
[  199.838163][ T6439]  ? __pfx_dump_user_range+0x10/0x10
[  199.838190][ T6439]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[  199.838229][ T6439]  ? __pfx_writenote+0x10/0x10
[  199.838264][ T6439]  elf_core_dump+0x288a/0x3a90
[  199.838308][ T6439]  ? __pfx_elf_core_dump+0x10/0x10
[  199.838335][ T6439]  ? kasan_save_stack+0x42/0x60
[  199.838368][ T6439]  ? kasan_save_stack+0x33/0x60
[  199.838399][ T6439]  ? kasan_save_track+0x14/0x30
[  199.838430][ T6439]  ? __kasan_kmalloc+0xaa/0xb0
[  199.838461][ T6439]  ? do_coredump+0x1c9a/0x4f10
[  199.838484][ T6439]  ? get_signal+0x22e3/0x26d0
[  199.838507][ T6439]  ? arch_do_signal_or_restart+0x8f/0x790
[  199.838538][ T6439]  ? 0xffffffffff600000
[  199.838611][ T6439]  ? do_coredump+0x399f/0x4f10
[  199.838634][ T6439]  do_coredump+0x399f/0x4f10
[  199.838670][ T6439]  ? __pfx_do_coredump+0x10/0x10
[  199.838695][ T6439]  ? find_held_lock+0x2b/0x80
[  199.838718][ T6439]  ? is_bpf_text_address+0x8a/0x1a0
[  199.838752][ T6439]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  199.838779][ T6439]  ? is_bpf_text_address+0x94/0x1a0
[  199.838810][ T6439]  ? kernel_text_address+0x8d/0x100
[  199.838845][ T6439]  ? __kernel_text_address+0xd/0x40
[  199.838880][ T6439]  ? unwind_get_return_address+0x59/0xa0
[  199.838933][ T6439]  ? stack_depot_save_flags+0x28/0xa40
[  199.838969][ T6439]  ? __lock_acquire+0xb8a/0x1c90
[  199.839002][ T6439]  ? kasan_save_stack+0x42/0x60
[  199.839033][ T6439]  ? kasan_save_stack+0x33/0x60
[  199.839064][ T6439]  ? kasan_save_track+0x14/0x30
[  199.839095][ T6439]  ? kasan_save_free_info+0x3b/0x60
[  199.839121][ T6439]  ? __kasan_slab_free+0x51/0x70
[  199.839154][ T6439]  ? kmem_cache_free+0x2d1/0x4d0
[  199.839184][ T6439]  ? __sigqueue_free+0xba/0x2a0
[  199.839213][ T6439]  ? get_signal+0xcba/0x26d0
[  199.839235][ T6439]  ? arch_do_signal_or_restart+0x8f/0x790
[  199.839300][ T6439]  ? proc_coredump_connector+0x2d1/0x4f0
[  199.839329][ T6439]  ? __pfx_proc_coredump_connector+0x10/0x10
[  199.839363][ T6439]  ? rcu_is_watching+0x12/0xc0
[  199.839390][ T6439]  get_signal+0x22e3/0x26d0
[  199.839422][ T6439]  ? force_sig_fault+0xc4/0x100
[  199.839447][ T6439]  ? __pfx_get_signal+0x10/0x10
[  199.839480][ T6439]  arch_do_signal_or_restart+0x8f/0x790
[  199.839505][ T6439]  ? trace_irq_disable.constprop.0+0xd4/0x120
[  199.839541][ T6439]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  199.839589][ T6439]  irqentry_exit_to_user_mode+0x12a/0x270
[  199.839628][ T6439]  asm_exc_page_fault+0x26/0x30
[  199.839650][ T6439] RIP: 0033:0x7f05d72d
[  199.839673][ T6439] Code: Unable to access opcode bytes at 0x7f05d703.
[  199.839683][ T6439] RSP: 002b:000000000000000f EFLAGS: 00010202
[  199.839701][ T6439] RAX: 000000002900007f RBX: 00007f05d73b6140 RCX: 00000000fff7ddf0
[  199.839715][ T6439] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020003b46
[  199.839729][ T6439] RBP: 00007f05d7210b39 R08: 0000000000000002 R09: 0000000000000000
[  199.839742][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.839756][ T6439] R13: 0000000000000000 R14: 00007f05d73b6240 R15: 00007ffc34669398
[  199.839784][ T6439]  </TASK>
[  199.839793][ T6439] memory: usage 307200kB, limit 307200kB, failcnt 16545
[  200.733574][   T32] oom_reaper: reaped process 6890 (syz.0.199), now anon-rss:0kB, file-rss:25636kB, shmem-rss:0kB
[  200.841680][ T6439] memory+swap: usage 431868kB, limit 9007199254740988kB, failcnt 0
[  201.082147][ T6439] kmem: usage 2992kB, limit 9007199254740988kB, failcnt 0
[  201.826307][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  201.848025][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  201.857106][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  201.865413][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  201.873481][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.990673][ T6439] Memory cgroup stats for /syz0:
[  201.991282][ T6439] cache 308719616
[  202.263086][ T6439] rss 143360
[  202.373807][ T6439] rss_huge 0
[  202.539739][ T6439] shmem 308457472
[  202.587192][ T6439] mapped_file 262144
[  202.591142][ T6439] dirty 4096
[  203.069579][ T7019] netlink: 334 bytes leftover after parsing attributes in process `syz.1.235'.
[  203.117146][ T7019] netlink: 334 bytes leftover after parsing attributes in process `syz.1.235'.
[  203.467992][ T6439] writeback 0
[  203.471404][ T6439] workingset_refault_anon 147
[  203.476122][ T6439] workingset_refault_file 105
[  203.916685][ T5149] Bluetooth: hci4: command tx timeout
[  204.000351][ T6439] swap 122216448
[  204.075787][ T6439] swapcached 45056
[  204.227378][ T6439] pgpgin 147809
[  204.291363][ T6439] pgpgout 72423
[  204.304007][ T6439] pgfault 63700
[  204.314549][ T6439] pgmajfault 78
[  204.325879][ T6439] inactive_anon 244998144
[  204.341749][ T6439] active_anon 63434752
[  204.397382][ T6439] inactive_file 0
[  204.401190][ T6439] active_file 0
[  204.404793][ T6439] unevictable 405504
[  204.661510][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  204.669970][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  204.719687][ T6439] hierarchical_memory_limit 314572800
[  205.177268][ T6439] hierarchical_memsw_limit 9223372036854771712
[  205.184080][ T6439] total_cache 308719616
[  205.340096][ T6439] total_rss 143360
[  205.343919][ T6439] total_rss_huge 0
[  205.508248][ T6439] total_shmem 308457472
[  205.512503][ T6439] total_mapped_file 262144
[  205.548152][ T6439] total_dirty 4096
[  205.552073][ T6439] total_writeback 0
[  205.555938][ T6439] total_workingset_refault_anon 147
[  205.576592][ T6439] total_workingset_refault_file 105
[  205.581880][ T6439] total_swap 122216448
[  205.596269][ T6439] total_swapcached 45056
[  205.616627][ T6439] total_pgpgin 147809
[  205.620702][ T6439] total_pgpgout 72423
[  205.624737][ T6439] total_pgfault 63700
[  205.636227][ T6439] total_pgmajfault 78
[  205.646547][ T6439] total_inactive_anon 244998144
[  205.654493][ T6439] total_active_anon 63434752
[  205.892723][ T6442] syz.0.112 (6442) used greatest stack depth: 19320 bytes left
[  205.946640][ T6439] total_inactive_file 0
[  205.950852][ T6439] total_active_file 0
[  205.987431][ T6459] syz.0.112 (6459) used greatest stack depth: 19016 bytes left
[  205.996622][ T5149] Bluetooth: hci4: command tx timeout
[  206.081585][ T7005] chnl_net:caif_netlink_parms(): no params data found
[  206.384246][ T6439] total_unevictable 405504
[  206.421244][ T6439] anon_cost 0
[  206.424618][ T6439] file_cost 0
[  206.529536][ T6439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.112,pid=6459,uid=0
[  206.656404][ T6439] Memory cgroup out of memory: OOM victim 6459 (syz.0.112) is already exiting. Skip killing the task
[  206.908200][ T6444] syz.0.112 (6444) used greatest stack depth: 19000 bytes left
[  207.577087][ T7054] vhci_hcd: default hub control req: 2300 v0017 i0001 l2044
[  207.638770][ T7055] vhci_hcd: default hub control req: 2300 v0017 i0001 l2044
[  207.850246][ T6441] syz.0.112 (6441) used greatest stack depth: 18984 bytes left
[  208.078107][ T5149] Bluetooth: hci4: command tx timeout
[  208.452065][ T6439] syz.0.112 (6439) used greatest stack depth: 18008 bytes left
[  208.947161][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.966826][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.974157][ T7005] bridge_slave_0: entered allmulticast mode
[  209.002801][ T7005] bridge_slave_0: entered promiscuous mode
[  209.096686][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.107073][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.114406][ T7005] bridge_slave_1: entered allmulticast mode
[  209.124874][ T7005] bridge_slave_1: entered promiscuous mode
[  209.266573][   T30] audit: type=1326 audit(1751246711.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.3.245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4909f8e929 code=0x0
[  209.314194][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.383868][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.830299][ T7005] team0: Port device team_slave_0 added
[  209.881290][ T7005] team0: Port device team_slave_1 added
[  210.156604][ T5149] Bluetooth: hci4: command tx timeout
[  210.259505][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.277340][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.346063][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.603754][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.620972][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.666557][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.453871][ T4884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.561467][ T7005] hsr_slave_0: entered promiscuous mode
[  211.737822][ T7005] hsr_slave_1: entered promiscuous mode
[  211.744424][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.766582][ T7005] Cannot create hsr debugfs directory
[  211.868979][ T4884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.018910][ T4884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.392989][ T4884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.441834][ T7111] netlink: 252 bytes leftover after parsing attributes in process `syz.1.258'.
[  213.469841][ T4884] bridge_slave_1: left allmulticast mode
[  213.475787][ T4884] bridge_slave_1: left promiscuous mode
[  213.484507][ T7110] netlink: 252 bytes leftover after parsing attributes in process `syz.1.258'.
[  213.495781][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.508188][ T7111] netlink: 252 bytes leftover after parsing attributes in process `syz.1.258'.
[  213.525247][ T4884] bridge_slave_0: left allmulticast mode
[  213.536823][ T4884] bridge_slave_0: left promiscuous mode
[  213.552945][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.045548][ T4884] gretap0 (unregistering): left allmulticast mode
[  214.469514][ T4884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.496049][ T4884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.527979][ T4884] bond0 (unregistering): Released all slaves
[  215.013382][ T7005] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  215.016194][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[  215.087322][ T7005] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  215.212691][ T7005] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  215.321979][ T7005] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  216.315695][ T7155] netlink: 342 bytes leftover after parsing attributes in process `syz.3.265'.
[  216.522219][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'.
[  216.856846][ T4884] hsr_slave_0: left promiscuous mode
[  216.877095][ T4884] hsr_slave_1: left promiscuous mode
[  216.895653][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.931119][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.979201][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.009607][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.169784][ T4884] veth1_macvtap: left promiscuous mode
[  217.175768][ T4884] veth0_macvtap: left promiscuous mode
[  217.184902][ T4884] veth1_vlan: left promiscuous mode
[  217.195698][ T4884] veth0_vlan: left promiscuous mode
[  217.493189][ T7172] ==================================================================
[  217.501343][ T7172] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0
[  217.510093][ T7172] Read of size 1 at addr ffff88807665f9c7 by task syz.3.269/7172
[  217.517862][ T7172] 
[  217.520233][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.3.269 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  217.520278][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  217.520298][ T7172] Call Trace:
[  217.520309][ T7172]  <TASK>
[  217.520321][ T7172]  dump_stack_lvl+0x116/0x1f0
[  217.520377][ T7172]  print_report+0xcd/0x680
[  217.520431][ T7172]  ? __virt_addr_valid+0x81/0x610
[  217.520474][ T7172]  ? __phys_addr+0xe8/0x180
[  217.520510][ T7172]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  217.520546][ T7172]  kasan_report+0xe0/0x110
[  217.520579][ T7172]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  217.520622][ T7172]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  217.520658][ T7172]  ? __lock_acquire+0xb8a/0x1c90
[  217.520709][ T7172]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  217.520750][ T7172]  ? find_held_lock+0x2b/0x80
[  217.520780][ T7172]  ? __might_fault+0xe3/0x190
[  217.520829][ T7172]  ? __might_fault+0xe3/0x190
[  217.520876][ T7172]  ? __might_fault+0x13b/0x190
[  217.520935][ T7172]  ? proc_simple_write+0x117/0x1b0
[  217.520969][ T7172]  proc_simple_write+0x117/0x1b0
[  217.521002][ T7172]  ? __pfx_proc_simple_write+0x10/0x10
[  217.521037][ T7172]  proc_reg_write+0x23d/0x330
[  217.521088][ T7172]  ? __pfx_proc_reg_write+0x10/0x10
[  217.521135][ T7172]  vfs_writev+0x5dc/0xde0
[  217.521178][ T7172]  ? __pfx___mutex_trylock_common+0x10/0x10
[  217.521231][ T7172]  ? __pfx_vfs_writev+0x10/0x10
[  217.521276][ T7172]  ? __mutex_lock+0x1ca/0xb90
[  217.521334][ T7172]  ? __pfx___mutex_lock+0x10/0x10
[  217.521394][ T7172]  ? __fget_files+0x20e/0x3c0
[  217.521446][ T7172]  ? do_writev+0x132/0x340
[  217.521497][ T7172]  do_writev+0x132/0x340
[  217.521540][ T7172]  ? __pfx_do_writev+0x10/0x10
[  217.521592][ T7172]  do_syscall_64+0xcd/0x490
[  217.521647][ T7172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.521682][ T7172] RIP: 0033:0x7f4909f8e929
[  217.521709][ T7172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.521741][ T7172] RSP: 002b:00007f490ad50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  217.521774][ T7172] RAX: ffffffffffffffda RBX: 00007f490a1b5fa0 RCX: 00007f4909f8e929
[  217.521797][ T7172] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000005
[  217.521818][ T7172] RBP: 00007f490a010b39 R08: 0000000000000000 R09: 0000000000000000
[  217.521839][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.521859][ T7172] R13: 0000000000000000 R14: 00007f490a1b5fa0 R15: 00007ffd1f40eb18
[  217.521892][ T7172]  </TASK>
[  217.521904][ T7172] 
[  217.777400][ T7172] Allocated by task 7172:
[  217.781783][ T7172]  kasan_save_stack+0x33/0x60
[  217.786511][ T7172]  kasan_save_track+0x14/0x30
[  217.791237][ T7172]  __kasan_kmalloc+0xaa/0xb0
[  217.795872][ T7172]  __kmalloc_node_track_caller_noprof+0x221/0x510
[  217.802334][ T7172]  memdup_user_nul+0x2b/0x120
[  217.807039][ T7172]  proc_simple_write+0xc7/0x1b0
[  217.811920][ T7172]  proc_reg_write+0x23d/0x330
[  217.816643][ T7172]  vfs_writev+0x5dc/0xde0
[  217.821014][ T7172]  do_writev+0x132/0x340
[  217.825291][ T7172]  do_syscall_64+0xcd/0x490
[  217.829840][ T7172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.835771][ T7172] 
[  217.838118][ T7172] The buggy address belongs to the object at ffff88807665f9c0
[  217.838118][ T7172]  which belongs to the cache kmalloc-8 of size 8
[  217.851857][ T7172] The buggy address is located 0 bytes to the right of
[  217.851857][ T7172]  allocated 7-byte region [ffff88807665f9c0, ffff88807665f9c7)
[  217.866219][ T7172] 
[  217.868571][ T7172] The buggy address belongs to the physical page:
[  217.875014][ T7172] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807665f620 pfn:0x7665f
[  217.885110][ T7172] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  217.892252][ T7172] page_type: f5(slab)
[  217.896268][ T7172] raw: 00fff00000000000 ffff88801b841500 dead000000000100 dead000000000122
[  217.904889][ T7172] raw: ffff88807665f620 000000008080007d 00000000f5000000 0000000000000000
[  217.913497][ T7172] page dumped because: kasan: bad access detected
[  217.919940][ T7172] page_owner tracks the page as allocated
[  217.925679][ T7172] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5987, tgid 5985 (syz.2.15), ts 116074456466, free_ts 115607815089
[  217.944842][ T7172]  post_alloc_hook+0x1c0/0x230
[  217.949662][ T7172]  get_page_from_freelist+0x1321/0x3890
[  217.955252][ T7172]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  217.961196][ T7172]  alloc_pages_mpol+0x1fb/0x550
[  217.966087][ T7172]  new_slab+0x23b/0x330
[  217.970278][ T7172]  ___slab_alloc+0xd9c/0x1940
[  217.974992][ T7172]  __slab_alloc.constprop.0+0x56/0xb0
[  217.980463][ T7172]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  217.986930][ T7172]  kvasprintf+0xbc/0x160
[  217.991204][ T7172]  kvasprintf_const+0x66/0x1a0
[  217.995992][ T7172]  kobject_set_name_vargs+0x5a/0x140
[  218.001412][ T7172]  kobject_init_and_add+0xe7/0x190
[  218.006575][ T7172]  net_rx_queue_update_kobjects+0x380/0x770
[  218.012612][ T7172]  netdev_register_kobject+0x269/0x3a0
[  218.018119][ T7172]  register_netdevice+0x13dc/0x2270
[  218.023369][ T7172]  __ip_tunnel_create+0x540/0x6e0
[  218.028444][ T7172] page last free pid 1110 tgid 1110 stack trace:
[  218.034798][ T7172]  __free_frozen_pages+0x7fe/0x1180
[  218.040045][ T7172]  rcu_core+0x799/0x14e0
[  218.044333][ T7172]  handle_softirqs+0x219/0x8e0
[  218.049136][ T7172]  do_softirq+0xb2/0xf0
[  218.053324][ T7172]  __local_bh_enable_ip+0x100/0x120
[  218.058573][ T7172]  batadv_nc_purge_paths+0x1d4/0x3a0
[  218.063965][ T7172]  batadv_nc_worker+0x921/0x1030
[  218.068955][ T7172]  process_one_work+0x9cf/0x1b70
[  218.073949][ T7172]  worker_thread+0x6c8/0xf10
[  218.078591][ T7172]  kthread+0x3c5/0x780
[  218.082714][ T7172]  ret_from_fork+0x5d4/0x6f0
[  218.087345][ T7172]  ret_from_fork_asm+0x1a/0x30
[  218.092145][ T7172] 
[  218.094488][ T7172] Memory state around the buggy address:
[  218.100137][ T7172]  ffff88807665f880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[  218.108230][ T7172]  ffff88807665f900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[  218.116336][ T7172] >ffff88807665f980: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc
[  218.124418][ T7172]                                            ^
[  218.130591][ T7172]  ffff88807665fa00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[  218.138680][ T7172]  ffff88807665fa80: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc
[  218.146759][ T7172] ==================================================================
[  218.376988][ T7172] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  218.384281][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.3.269 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) 
[  218.396214][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  218.406298][ T7172] Call Trace:
[  218.409606][ T7172]  <TASK>
[  218.412566][ T7172]  dump_stack_lvl+0x3d/0x1f0
[  218.417217][ T7172]  panic+0x71c/0x800
[  218.421159][ T7172]  ? __pfx_panic+0x10/0x10
[  218.425620][ T7172]  ? mark_held_locks+0x49/0x80
[  218.430433][ T7172]  ? preempt_schedule_thunk+0x16/0x30
[  218.435872][ T7172]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  218.441896][ T7172]  ? preempt_schedule_common+0x44/0xc0
[  218.447406][ T7172]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  218.453422][ T7172]  check_panic_on_warn+0xab/0xb0
[  218.458408][ T7172]  end_report+0x107/0x170
[  218.462783][ T7172]  kasan_report+0xee/0x110
[  218.467234][ T7172]  ? afs_proc_addr_prefs_write+0x13a9/0x15f0
[  218.473351][ T7172]  afs_proc_addr_prefs_write+0x13a9/0x15f0
[  218.479201][ T7172]  ? __lock_acquire+0xb8a/0x1c90
[  218.484188][ T7172]  ? __pfx_afs_proc_addr_prefs_write+0x10/0x10
[  218.490381][ T7172]  ? find_held_lock+0x2b/0x80
[  218.495090][ T7172]  ? __might_fault+0xe3/0x190
[  218.499815][ T7172]  ? __might_fault+0xe3/0x190
[  218.504538][ T7172]  ? __might_fault+0x13b/0x190
[  218.509355][ T7172]  ? proc_simple_write+0x117/0x1b0
[  218.514504][ T7172]  proc_simple_write+0x117/0x1b0
[  218.519474][ T7172]  ? __pfx_proc_simple_write+0x10/0x10
[  218.524969][ T7172]  proc_reg_write+0x23d/0x330
[  218.529693][ T7172]  ? __pfx_proc_reg_write+0x10/0x10
[  218.534936][ T7172]  vfs_writev+0x5dc/0xde0
[  218.539308][ T7172]  ? __pfx___mutex_trylock_common+0x10/0x10
[  218.545252][ T7172]  ? __pfx_vfs_writev+0x10/0x10
[  218.550144][ T7172]  ? __mutex_lock+0x1ca/0xb90
[  218.554873][ T7172]  ? __pfx___mutex_lock+0x10/0x10
[  218.559952][ T7172]  ? __fget_files+0x20e/0x3c0
[  218.564680][ T7172]  ? do_writev+0x132/0x340
[  218.569137][ T7172]  do_writev+0x132/0x340
[  218.573423][ T7172]  ? __pfx_do_writev+0x10/0x10
[  218.578237][ T7172]  do_syscall_64+0xcd/0x490
[  218.582795][ T7172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.588723][ T7172] RIP: 0033:0x7f4909f8e929
[  218.593169][ T7172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.612813][ T7172] RSP: 002b:00007f490ad50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  218.621272][ T7172] RAX: ffffffffffffffda RBX: 00007f490a1b5fa0 RCX: 00007f4909f8e929
[  218.629275][ T7172] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000005
[  218.637279][ T7172] RBP: 00007f490a010b39 R08: 0000000000000000 R09: 0000000000000000
[  218.645284][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.653283][ T7172] R13: 0000000000000000 R14: 00007f490a1b5fa0 R15: 00007ffd1f40eb18
[  218.661294][ T7172]  </TASK>
[  218.664649][ T7172] Kernel Offset: disabled
[  218.668995][ T7172] Rebooting in 86400 seconds..