last executing test programs:

1m25.690081664s ago: executing program 1 (id=1321):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffffa}, @ETHTOOL_A_COALESCE_RX_PROFILE={0x44, 0x1d, 0x0, 0x1, [@ETHTOOL_A_PROFILE_IRQ_MODERATION={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xec}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xd}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0x9}, @ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x4}, @ETHTOOL_A_IRQ_MODERATION_COMPS={0x8, 0x3, 0xcab}, @ETHTOOL_A_IRQ_MODERATION_PKTS={0x8, 0x2, 0xb}]}, @ETHTOOL_A_PROFILE_IRQ_MODERATION={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_IRQ_MODERATION_USEC={0x8, 0x1, 0x9}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008045}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m24.951441808s ago: executing program 1 (id=1325):
close_range$auto(0x2, 0x8000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
io_uring_enter$auto(r0, 0x0, 0x820e, 0x9, 0x0, 0x18)

1m24.284289791s ago: executing program 1 (id=1329):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x11, 0x80003, 0x300)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4)
r1 = socket(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', <r2=>0x0})
sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x4, r2, 0x10}, 0x22)

1m23.150885109s ago: executing program 1 (id=1334):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)

1m21.781569161s ago: executing program 1 (id=1343):
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m17.4752891s ago: executing program 1 (id=1359):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x218000, 0x0)
mmap$auto(0xf000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m16.657532257s ago: executing program 32 (id=1359):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x218000, 0x0)
mmap$auto(0xf000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

5.595370622s ago: executing program 2 (id=1739):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/kcore\x00', 0x101000, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000080)=""/4107, 0xfdef)

5.341693133s ago: executing program 3 (id=1740):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
r2 = socket(0xa, 0x1, 0x0)
recvmmsg$auto(r2, &(0x7f0000000280)={{0x0, 0x1ff, &(0x7f0000000040)={0x0, 0xd}, 0x9, 0x0, 0x80000001, 0x2}, 0x1}, 0x80000000, 0x7956, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040)
read$auto(r0, 0x0, 0x1)

4.276228118s ago: executing program 2 (id=1745):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6)
read$auto(0x3, 0x0, 0x80)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
write$auto(0x3, 0x0, 0x8100)

4.185965934s ago: executing program 4 (id=1746):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200001008000300030000000800010013"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.898148318s ago: executing program 2 (id=1747):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x1d, 0x2, 0x6)
r0 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a)

3.856451761s ago: executing program 3 (id=1748):
pipe2$auto(&(0x7f00000000c0), 0x0)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003)
getsockopt$auto(0xffffffffffffffff, 0x24, 0xfffffffd, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000004)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket(0x18, 0xa, 0x1)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

3.727475203s ago: executing program 4 (id=1749):
mmap$auto(0x0, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x40000008000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r1, 0x4144, 0x0)

3.380488473s ago: executing program 3 (id=1750):
read$auto(0xffffffffffffffff, 0x0, 0x20)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socketpair$auto(0xfff, 0x5, 0x10, 0x0)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
fsopen$auto(0x0, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = clone$auto(0x6db, 0x1, 0x0, 0x0, 0x7)
migrate_pages$auto(r0, 0x4, 0x0, &(0x7f0000000180)=0x2)

3.334703446s ago: executing program 4 (id=1751):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x5)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x6, 0x6, 0x0, 0x10000, 0x7fffffff, 0xe7e6, {0x2100000000, 0x10000}, 0x3, 0x6, 0x3, 0x1008000, 0x0, 0x100000000, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)

3.17414257s ago: executing program 0 (id=1752):
r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8000008, 0x7, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x7ff, 0x200000100103})
ioctl$auto(r0, 0x856b, r0)
r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
readv$auto(r1, 0x0, 0xc9)
r2 = socket(0xa, 0x6, 0x0)
ioperm$auto(0x7, 0x6, 0xe)
listen$auto(r2, 0x26da)
readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3)

3.09924028s ago: executing program 2 (id=1753):
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x3, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x1)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
getcwd$auto(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)

2.469360504s ago: executing program 0 (id=1754):
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
semctl$auto(0x1ff, 0x100000001, 0x13, 0x9)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x700203, 0x0)
pipe$auto(0x0)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
r1 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x80044943, 0x0)
ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0)

2.468038101s ago: executing program 4 (id=1755):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socket(0x11, 0x2, 0xfffffffd)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ec700, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x81, 0x0)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x24000041)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
socket(0xa, 0x3, 0xff)
madvise$auto(0x0, 0x454, 0x9)

2.465062084s ago: executing program 2 (id=1756):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)

2.140515959s ago: executing program 0 (id=1757):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x1)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xc018aec0, r0)

1.989717766s ago: executing program 3 (id=1758):
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f00"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.871840182s ago: executing program 4 (id=1759):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x48040)
mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0)
ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0)
read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0)
setgroups$auto(0xe32, 0x0)

1.796792192s ago: executing program 2 (id=1760):
process_vm_readv$auto(0x0, 0x0, 0x23, 0x0, 0x40, 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/pid_for_children\x00')

1.743452162s ago: executing program 0 (id=1761):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6})
ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0)

1.463975282s ago: executing program 0 (id=1762):
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
getresgid$auto(0x0, &(0x7f0000000a40), 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0)

1.449535212s ago: executing program 3 (id=1763):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
select$auto(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000280)={0x42, 0xffffffffffffffff, 0x2, 0x2})
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)

1.438916004s ago: executing program 4 (id=1764):
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff6, 0x8)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(0x0, 0x400000, 0x1cc)
ioprio_set$auto(0x2, 0x0, 0x208)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
write$auto(r0, 0x0, 0x7fffffff)

178.898092ms ago: executing program 3 (id=1765):
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='U'], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0)

0s ago: executing program 0 (id=1766):
ioperm$auto(0x7, 0x6, 0x1)
epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0)
read$auto(r0, 0x0, 0x9e7)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x40246f4c, 0x38)

kernel console output (not intermixed with test programs):

192] FAULT_INJECTION: forcing a failure.
[  170.572400][ T7192] name failslab, interval 1, probability 0, space 0, times 0
[  170.656483][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.2.486 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  170.656515][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  170.656529][ T7192] Call Trace:
[  170.656536][ T7192]  <TASK>
[  170.656545][ T7192]  dump_stack_lvl+0x16c/0x1f0
[  170.656584][ T7192]  should_fail_ex+0x512/0x640
[  170.656611][ T7192]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  170.656650][ T7192]  should_failslab+0xc2/0x120
[  170.656671][ T7192]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  170.656705][ T7192]  ? current_cpuset_is_being_rebound+0xf6/0x370
[  170.656740][ T7192]  ? sp_alloc+0x27/0x160
[  170.656767][ T7192]  sp_alloc+0x27/0x160
[  170.656793][ T7192]  mpol_set_shared_policy+0xab/0x8c0
[  170.656826][ T7192]  ? __pfx_shmem_set_policy+0x10/0x10
[  170.656853][ T7192]  mbind_range+0x336/0x570
[  170.656881][ T7192]  do_mbind+0x848/0xf30
[  170.656920][ T7192]  ? __pfx_do_mbind+0x10/0x10
[  170.656963][ T7192]  ? __pfx_get_nodes+0x10/0x10
[  170.657006][ T7192]  kernel_mbind+0x1e3/0x1f0
[  170.657034][ T7192]  ? __pfx_kernel_mbind+0x10/0x10
[  170.657059][ T7192]  ? rcu_is_watching+0x12/0xc0
[  170.657096][ T7192]  do_syscall_64+0xcd/0x260
[  170.657133][ T7192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.657156][ T7192] RIP: 0033:0x7fa803f8d169
[  170.657174][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.657196][ T7192] RSP: 002b:00007fa803df7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  170.657217][ T7192] RAX: ffffffffffffffda RBX: 00007fa8041a5fa0 RCX: 00007fa803f8d169
[  170.657232][ T7192] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000002000
[  170.657246][ T7192] RBP: 00007fa80400e990 R08: 0000000000000006 R09: 0000000000000002
[  170.657260][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.657273][ T7192] R13: 0000000000000000 R14: 00007fa8041a5fa0 R15: 00007ffc19cc2018
[  170.657302][ T7192]  </TASK>
[  172.402931][ T7209] netlink: 330 bytes leftover after parsing attributes in process `syz.3.491'.
[  172.747468][ T7217] FAULT_INJECTION: forcing a failure.
[  172.747468][ T7217] name failslab, interval 1, probability 0, space 0, times 0
[  172.807075][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.3.495 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  172.807108][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  172.807122][ T7217] Call Trace:
[  172.807129][ T7217]  <TASK>
[  172.807138][ T7217]  dump_stack_lvl+0x16c/0x1f0
[  172.807179][ T7217]  should_fail_ex+0x512/0x640
[  172.807206][ T7217]  ? __kmalloc_noprof+0xbf/0x510
[  172.807242][ T7217]  ? lsm_blob_alloc+0x68/0x90
[  172.807275][ T7217]  should_failslab+0xc2/0x120
[  172.807297][ T7217]  __kmalloc_noprof+0xd2/0x510
[  172.807338][ T7217]  lsm_blob_alloc+0x68/0x90
[  172.807373][ T7217]  security_sk_alloc+0x30/0x270
[  172.807399][ T7217]  sk_prot_alloc+0x1c7/0x2a0
[  172.807438][ T7217]  sk_alloc+0x36/0xc20
[  172.807466][ T7217]  mctp_pf_create+0xe8/0x330
[  172.807501][ T7217]  __sock_create+0x335/0x8d0
[  172.807528][ T7217]  __sys_socket+0x14d/0x260
[  172.807550][ T7217]  ? __pfx___sys_socket+0x10/0x10
[  172.807574][ T7217]  ? rcu_is_watching+0x12/0xc0
[  172.807607][ T7217]  __x64_sys_socket+0x72/0xb0
[  172.807628][ T7217]  ? lockdep_hardirqs_on+0x7c/0x110
[  172.807661][ T7217]  do_syscall_64+0xcd/0x260
[  172.807696][ T7217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.807719][ T7217] RIP: 0033:0x7f4ebf58d169
[  172.807737][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.807766][ T7217] RSP: 002b:00007f4ec030a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  172.807788][ T7217] RAX: ffffffffffffffda RBX: 00007f4ebf7a5fa0 RCX: 00007f4ebf58d169
[  172.807803][ T7217] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d
[  172.807816][ T7217] RBP: 00007f4ebf60e990 R08: 0000000000000000 R09: 0000000000000000
[  172.807830][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.807843][ T7217] R13: 0000000000000000 R14: 00007f4ebf7a5fa0 R15: 00007fff45c7f928
[  172.807871][ T7217]  </TASK>
[  173.425283][ T7223] netlink: 'syz.1.499': attribute type 4 has an invalid length.
[  173.784050][ T7230] netlink: 342 bytes leftover after parsing attributes in process `syz.1.501'.
[  174.325768][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'.
[  177.873239][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'.
[  177.968784][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'.
[  178.024908][ T7306] netlink: 25 bytes leftover after parsing attributes in process `syz.1.533'.
[  179.098504][ T7326] netlink: 334 bytes leftover after parsing attributes in process `syz.1.540'.
[  181.082880][ T7367] netlink: 342 bytes leftover after parsing attributes in process `syz.0.559'.
[  181.328588][ T7375] netlink: 'syz.1.562': attribute type 27 has an invalid length.
[  181.368709][ T7375] netlink: 334 bytes leftover after parsing attributes in process `syz.1.562'.
[  181.671891][ T5849] Bluetooth: hci1: ISO packet too small
[  181.732091][ T7384] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  182.227431][ T7390] netlink: 342 bytes leftover after parsing attributes in process `syz.3.569'.
[  183.273818][ T7405] FAULT_INJECTION: forcing a failure.
[  183.273818][ T7405] name failslab, interval 1, probability 0, space 0, times 0
[  183.419089][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.2.575 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  183.419127][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.419141][ T7405] Call Trace:
[  183.419148][ T7405]  <TASK>
[  183.419157][ T7405]  dump_stack_lvl+0x16c/0x1f0
[  183.419195][ T7405]  should_fail_ex+0x512/0x640
[  183.419222][ T7405]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  183.419260][ T7405]  should_failslab+0xc2/0x120
[  183.419281][ T7405]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  183.419317][ T7405]  ? prepare_creds+0x2c/0x7d0
[  183.419345][ T7405]  prepare_creds+0x2c/0x7d0
[  183.419371][ T7405]  cap_task_prctl+0x648/0xa80
[  183.419397][ T7405]  security_task_prctl+0xbf/0x160
[  183.419436][ T7405]  __do_sys_prctl+0xaa/0x24a0
[  183.419464][ T7405]  ? __pfx___do_sys_prctl+0x10/0x10
[  183.419489][ T7405]  ? rcu_is_watching+0x12/0xc0
[  183.419524][ T7405]  do_syscall_64+0xcd/0x260
[  183.419560][ T7405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.419584][ T7405] RIP: 0033:0x7fa803f8d169
[  183.419602][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.419624][ T7405] RSP: 002b:00007fa803df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  183.419645][ T7405] RAX: ffffffffffffffda RBX: 00007fa8041a5fa0 RCX: 00007fa803f8d169
[  183.419660][ T7405] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000008
[  183.419674][ T7405] RBP: 00007fa80400e990 R08: 0000000000000005 R09: 0000000000000000
[  183.419687][ T7405] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  183.419701][ T7405] R13: 0000000000000000 R14: 00007fa8041a5fa0 R15: 00007ffc19cc2018
[  183.419728][ T7405]  </TASK>
[  183.650311][ T7410] block2mtd: error: cannot open device 
[  184.551766][ T7429] netlink: 330 bytes leftover after parsing attributes in process `syz.3.587'.
	

	
		
	
	

	
	
	

	
		
	

	
		
	

	
		
	

	
		

	
	

	
		
	

	
		
	

	
		
	

	
		


		
		

			
		
	

	
		
	
	

	
	
	

	
		
	

	
		
	




	
				
	


	

	
		
	

	
		
	

	
		
	
	




	
				
	

	
		


			

	

	
		
	

	
		
	
	
	
	
	
	
	
		
	
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
		
		
	

	
		
	

	
		

	
		

	


		

		
	
		
	
	



			








	
















	
	






	





	





	

	












	

	
		
			

	


			

	
		

	


	
	

		
	
		
	
	



			








	




	







		


		


		

	





	



		

		








	







	
		

	



	


	


		



		


		

	

	
	


	
	










	
	






	





	






		









	
		
		

	

	
		
	

	
		
	

	
		
	
	
	
	
	
	
	
	


	

	
		
	

	
		
	

	
		
	

	
		
	
	

	
	
	

	
		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	

	
	


	




		

		

			



	
	
	
	
		
	

	






	











	
	
	










	
	






	




	





	
	







	

	
		
	

	
		
	

	
		


	

	
		
	

	
		
	

	
		


	
	

	
	
	

	
		

	
				
	
	



				
	
	

	
		


		
	

	
		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	



	











		
	







	

		
	






	

		










	
	










	
	






	






	









		










	
	

	
	
	

	
		
	
		
	
	

	
		
	

	
		


		
	

	
		
	
	

	
	
	

	
		
			

	

	
		

	
		

	


	
	

		
	
		
	
	



			








	



	




	




	






	






	













	

	



	
	
	
	

	

	





	












	

	

	



	
		
	
	
	
	






	






	








		










	
		

	


	
	

		
	
		
	
	



			








	





	






















	












	


	
	








	






	








		











	
		

	


	
	

		
	
		
	
	



			








	




	








		



			

		

		


	



		






	

		










	
	










	
	






	






	








		











	
		

	


	

	

		
	
		
	
	



			








	

	














































	

		
	
	


























	





	

	




	








		










	
	










	
	






	





	






		







	

	
		
	

	
		
		
		


		
		


	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		






	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	
	

	
	
	

	
		
	

	
		
	
	

	

	
		

	
		

	


		

		
	
		
	
	



			








	


	
	
	
		

		









	


	

	
	






	





	







		











	
	

	
	
	
	

	
	
	

	
		
			
	

	
		
	
	

	
	
	

	
		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	



	




	



	








	













	













	

	



	
	
	
	

	

	





	












	

	

	



	
		
	
	
	
	






	






	








		












	




	

	
		
	
	

	
	
	
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	





	
	


	


	








		










	

		










	
	






	




	
	






	






	








		










	
	

	
	
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	













	

	




	

		










	
	











	
	






	





	






		









	

	
		
	
	
	
	
	
	
	
	

	

	

	
		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	













	

	




	

		










	
	











	
	






	






	








		










	

	
		
	

	
		
	

	
		
	

	
		


	
	
	

	
		
	

	
		
	
	

	
	


	




	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	








	



	



	


	







	
	
	






	





	






		







	

	
		
	

	
		
	

	
		



	

	
		
	

	
		
	

	
		
	

	
		
	

	
		

		

	

	

	
		
	
	

	
	

	
		
	

	



	

	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	





	





	






	



	

	
	






	
	


	






	






	








		









	
	

	
	
	

	
		
	

	
		
		
	

	

	
		
	
		
	
	

	
		
	

	
		
		


	

	
	

	
	

	
	

	
		
	
	

	
	
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	



	

	

	
		
	

	
		
	

	
		
	

	
		
	
	

	
	
	
	

	
	

	
		

	


	
	

		
	
	

	
		
		
	
	



			








	




	











	


	
	
	
	
	
	






	






	








		










	

	
		
	

	



	

	

	
		
	

	
		
	

	
		



		
	

	
		
	

	
		
	

	
		
	
	

	
	
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	




	

















	

		










	
	










	
	






	





	






		







	

	
		
						
	
						
	
						
	
						
	


		



		



	




	

	
		
	

	

	
	
		
		


	

	

	
	
		
		


	

	
		
			

	
	
	


		

	

	

		

			

	
	
	

	
	
	
	
	
			



	

	
		

	


	
	

		
	
		
	
	



			








	





	





	
	


	
	


			


			



	

	
	

	




	












	





	

	

	

	













	

	

	












	
	






	





	







		







		

	

	
	

	
		
	
	

	

	





	

	









		





		






	

	









		






	


	

	
	
	

	
	
	

	
		

				



				


	
	

		
	




		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	
	

	
		
	
	

	
	
	

	
		
	
	
	
	

	
	
	

	
		
	

	
		


	
	


		
	
	


	
	


		
	
	
		
		


		
		




	
	




			

			
	


	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	
	

	
		

	

	
		






	
	
	
			

			

			

			

	

	
		
	

	
		
	

	
		

	
		

	
		

		
		

		
	
	

		
		

		
	
	

	

	
		


		
		
	







	
		


	

	
		

	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




	

	
		
















	

	






		

	
	

















	

	






		

	
	

	

	
		
















	

	



	

	
		



		

	
	






	

	




			
	
			
	
			
	
			
	

	
		

	


	
	

		
	
		
	
	



			








	




	











	
	


	
	








	






	








		












				


				


			


			
	

	
		
	
	
	
	
	
			

		
	




		
		

		
		


	

	

	
	
	
	
	
	
	
	
		
		

		
		


	

	

	
	
	
	


	
	


		
	
	


	
	


		
	
	
	

	
		

	




	



	

	
		






		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	



	



	

	



		


		



	
	

	







	

	
	



	
	










	






	






	








		










	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		

	

	
	
	
		






	
	

	
		
						
	
						
	
						
	
	
	

	
		

	


	
	

		
	
		
	
	



			








	

	






		


		

		

	
	







	






	



	




		







	




	

	
		
	

	
		
						
	
	
	

	
	
	

	
		
	
	
			

			

			

			


	
		

	
		

		
		

		
	
	



	

		
		

		
	
	


	
		


	

	
		


	
	
	


	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

	
















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




			
	
			
	
			
	
			
	
	

	
		
	

	
		


				


			


				


			
	
	

	

	

		
		

	
		

	


	
	

		
	
		
	
	



			








	




	





	

	

	

	
	
	
	
	

	

	
	









	











	
	
	










	
	






	




	





	
	








	

		
		


	



	

			
	

	

		

	

	
	

	
		
	
	

	
	
	

	
		
	
		
	

	
		

	


	
	

		
	
		
	
	



			








	



	



	

		
	

		
	

		
		
		


	
	
	
		






	




	







		








	

	
		
	

	
		
	

	
		
	
	

	
		
	
	
	

	
		
	

	
		
	
	

	
	
	

	
		
	
	

	
		
	
	

	
	
	

	
		

	
		

	


	
	

		
	
		
	
	



			








	





	









	




	

	
	


	



	
	


	


	


	

	







	













	

	

	












	
	






	






	








		










	

	
		
	

	
		
	
	



	

	
		
		

	

	
		
	
	

	

	
		
	

	
		
	

	
		
	
	

	
	





	

	




	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	





		




	
	

	
	
	
	

	
	
	
	

	
	
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	
	
	

	

	
				
	
		


	
	

	
		
	

	
		
	
	

	
	
	
	

	
	
	
	

			


	




	

	
		

	
		

	


	
	

		
	
	
	

	
		
	
	



			








	





	









	


	
		



	







	
	






	




	
	






	





	






		








	
				
	
		


	
	
	

	
	
	

	
		


	
	

	
		
	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	

	

	
	

	
	

	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	
	

	
		
	

	
		







syzkaller
syzkaller login: [  374.316766][T10707] mkiss: ax0: crc mode is auto.
[  374.875680][T10718] zswap: compressor  not available
[  375.396630][T10733] validate_nla: 1 callbacks suppressed
[  375.396651][T10733] netlink: 'syz.4.1746': attribute type 4 has an invalid length.
[  375.489396][T10733] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1746'.
[  375.840056][ T5853] Bluetooth: hci2: SCO packet too small
[  376.266700][T10745] FAULT_INJECTION: forcing a failure.
[  376.266700][T10745] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.378164][T10745] CPU: 1 UID: 0 PID: 10745 Comm: syz.4.1751 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  376.378198][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  376.378212][T10745] Call Trace:
[  376.378220][T10745]  <TASK>
[  376.378228][T10745]  dump_stack_lvl+0x16c/0x1f0
[  376.378268][T10745]  should_fail_ex+0x512/0x640
[  376.378300][T10745]  _copy_from_user+0x2e/0xd0
[  376.378330][T10745]  snd_rawmidi_kernel_write1+0x50a/0x8a0
[  376.378367][T10745]  snd_rawmidi_write+0x26e/0xc10
[  376.378400][T10745]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  376.378427][T10745]  ? __pfx_default_wake_function+0x10/0x10
[  376.378459][T10745]  ? bpf_lsm_file_permission+0x9/0x10
[  376.378488][T10745]  ? security_file_permission+0x71/0x210
[  376.378519][T10745]  ? rw_verify_area+0xcf/0x680
[  376.378550][T10745]  vfs_write+0x25c/0x1180
[  376.378579][T10745]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  376.378610][T10745]  ? __pfx_vfs_write+0x10/0x10
[  376.378639][T10745]  ? find_held_lock+0x2b/0x80
[  376.378669][T10745]  ? __fget_files+0x204/0x3c0
[  376.378706][T10745]  ? __fget_files+0x20e/0x3c0
[  376.378746][T10745]  ksys_write+0x205/0x240
[  376.378777][T10745]  ? __pfx_ksys_write+0x10/0x10
[  376.378807][T10745]  ? rcu_is_watching+0x12/0xc0
[  376.378853][T10745]  do_syscall_64+0xcd/0x260
[  376.378889][T10745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.378913][T10745] RIP: 0033:0x7f76cc18d169
[  376.378931][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.378954][T10745] RSP: 002b:00007f76cd040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  376.378975][T10745] RAX: ffffffffffffffda RBX: 00007f76cc3a5fa0 RCX: 00007f76cc18d169
[  376.378991][T10745] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005
[  376.379005][T10745] RBP: 00007f76cc20e990 R08: 0000000000000000 R09: 0000000000000000
[  376.379019][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.379033][T10745] R13: 0000000000000000 R14: 00007f76cc3a5fa0 R15: 00007ffff2500538
[  376.379061][T10745]  </TASK>
[  379.456458][T10787] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1765'.
[  379.677952][T10790] ==================================================================
[  379.687661][T10790] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0
[  379.697042][T10790] Read of size 8 at addr ffff888141acc418 by task syz.0.1766/10790
[  379.706516][T10790] 
[  379.709294][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1766 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  379.709323][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  379.709338][T10790] Call Trace:
[  379.709347][T10790]  <TASK>
[  379.709356][T10790]  dump_stack_lvl+0x116/0x1f0
[  379.709394][T10790]  print_report+0xc3/0x670
[  379.709431][T10790]  ? __virt_addr_valid+0x5e/0x590
[  379.709465][T10790]  ? __phys_addr+0xc6/0x150
[  379.709504][T10790]  ? dvb_device_open+0x36a/0x3b0
[  379.709527][T10790]  kasan_report+0xe0/0x110
[  379.709548][T10790]  ? dvb_device_open+0x36a/0x3b0
[  379.709573][T10790]  ? __pfx_dvb_device_open+0x10/0x10
[  379.709595][T10790]  dvb_device_open+0x36a/0x3b0
[  379.709618][T10790]  ? __pfx_dvb_device_open+0x10/0x10
[  379.709641][T10790]  chrdev_open+0x231/0x6a0
[  379.709675][T10790]  ? __pfx_apparmor_file_open+0x10/0x10
[  379.709705][T10790]  ? __pfx_chrdev_open+0x10/0x10
[  379.709740][T10790]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  379.709777][T10790]  do_dentry_open+0x741/0x1c10
[  379.709809][T10790]  ? __pfx_chrdev_open+0x10/0x10
[  379.709847][T10790]  vfs_open+0x82/0x3f0
[  379.709870][T10790]  path_openat+0x1e5e/0x2d40
[  379.709909][T10790]  ? __pfx_path_openat+0x10/0x10
[  379.709945][T10790]  do_filp_open+0x20b/0x470
[  379.709978][T10790]  ? __pfx_do_filp_open+0x10/0x10
[  379.710022][T10790]  ? alloc_fd+0x471/0x7d0
[  379.710057][T10790]  do_sys_openat2+0x11b/0x1d0
[  379.710080][T10790]  ? __pfx_do_sys_openat2+0x10/0x10
[  379.710105][T10790]  ? __pfx___might_resched+0x10/0x10
[  379.710141][T10790]  __x64_sys_openat+0x174/0x210
[  379.710166][T10790]  ? __pfx___x64_sys_openat+0x10/0x10
[  379.710191][T10790]  ? rcu_is_watching+0x12/0xc0
[  379.710223][T10790]  do_syscall_64+0xcd/0x260
[  379.710258][T10790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.710282][T10790] RIP: 0033:0x7fa25538d169
[  379.710301][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.710324][T10790] RSP: 002b:00007fa256208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  379.710346][T10790] RAX: ffffffffffffffda RBX: 00007fa2555a6080 RCX: 00007fa25538d169
[  379.710362][T10790] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  379.710377][T10790] RBP: 00007fa25540e990 R08: 0000000000000000 R09: 0000000000000000
[  379.710392][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.710406][T10790] R13: 0000000000000000 R14: 00007fa2555a6080 R15: 00007ffef5a6cd78
[  379.710429][T10790]  </TASK>
[  379.710436][T10790] 
[  380.011237][T10790] Allocated by task 1:
[  380.016113][T10790]  kasan_save_stack+0x33/0x60
[  380.021732][T10790]  kasan_save_track+0x14/0x30
[  380.027344][T10790]  __kasan_kmalloc+0xaa/0xb0
[  380.032849][T10790]  dvb_register_device+0x1e4/0x2370
[  380.039076][T10790]  dvb_register_frontend+0x5a6/0x880
[  380.045424][T10790]  vidtv_bridge_probe+0x459/0xa90
[  380.051456][T10790]  platform_probe+0xff/0x1f0
[  380.056957][T10790]  really_probe+0x23e/0xa90
[  380.062374][T10790]  __driver_probe_device+0x1de/0x440
[  380.068730][T10790]  driver_probe_device+0x4c/0x1b0
[  380.074769][T10790]  __driver_attach+0x283/0x580
[  380.080498][T10790]  bus_for_each_dev+0x13b/0x1d0
[  380.086319][T10790]  bus_add_driver+0x2e9/0x690
[  380.091945][T10790]  driver_register+0x15c/0x4b0
[  380.097653][T10790]  vidtv_bridge_init+0x45/0x80
[  380.103361][T10790]  do_one_initcall+0x120/0x6e0
[  380.109095][T10790]  kernel_init_freeable+0x5c2/0x900
[  380.115348][T10790]  kernel_init+0x1c/0x2b0
[  380.120552][T10790]  ret_from_fork+0x45/0x80
[  380.125848][T10790]  ret_from_fork_asm+0x1a/0x30
[  380.131572][T10790] 
[  380.134347][T10790] Freed by task 10081:
[  380.139214][T10790]  kasan_save_stack+0x33/0x60
[  380.144833][T10790]  kasan_save_track+0x14/0x30
[  380.150448][T10790]  kasan_save_free_info+0x3b/0x60
[  380.156485][T10790]  __kasan_slab_free+0x51/0x70
[  380.162206][T10790]  kfree+0x2b6/0x4d0
[  380.166873][T10790]  dvb_device_put.part.0+0x60/0x90
[  380.172997][T10790]  dvb_device_open+0x2a4/0x3b0
[  380.178815][T10790]  chrdev_open+0x231/0x6a0
[  380.184116][T10790]  do_dentry_open+0x741/0x1c10
[  380.189833][T10790]  vfs_open+0x82/0x3f0
[  380.194710][T10790]  path_openat+0x1e5e/0x2d40
[  380.200231][T10790]  do_filp_open+0x20b/0x470
[  380.205635][T10790]  do_sys_openat2+0x11b/0x1d0
[  380.211238][T10790]  __x64_sys_openat+0x174/0x210
[  380.217051][T10790]  do_syscall_64+0xcd/0x260
[  380.222464][T10790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.229527][T10790] 
[  380.232302][T10790] The buggy address belongs to the object at ffff888141acc400
[  380.232302][T10790]  which belongs to the cache kmalloc-256 of size 256
[  380.249166][T10790] The buggy address is located 24 bytes inside of
[  380.249166][T10790]  freed 256-byte region [ffff888141acc400, ffff888141acc500)
[  380.265604][T10790] 
[  380.268376][T10790] The buggy address belongs to the physical page:
[  380.276068][T10790] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888141acc400 pfn:0x141acc
[  380.288237][T10790] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  380.298423][T10790] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  380.308718][T10790] page_type: f5(slab)
[  380.313490][T10790] raw: 057ff00000000240 ffff88801b441b40 ffffea00052f0010 ffffea000532be90
[  380.323777][T10790] raw: ffff888141acc400 000000000010000f 00000000f5000000 0000000000000000
[  380.334068][T10790] head: 057ff00000000240 ffff88801b441b40 ffffea00052f0010 ffffea000532be90
[  380.344469][T10790] head: ffff888141acc400 000000000010000f 00000000f5000000 0000000000000000
[  380.354865][T10790] head: 057ff00000000001 ffffea000506b301 00000000ffffffff 00000000ffffffff
[  380.365259][T10790] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  380.375751][T10790] page dumped because: kasan: bad access detected
[  380.383438][T10790] page_owner tracks the page as allocated
[  380.390279][T10790] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24854623589, free_ts 0
[  380.413940][T10790]  post_alloc_hook+0x181/0x1b0
[  380.419659][T10790]  get_page_from_freelist+0x1193/0x39b0
[  380.426313][T10790]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  380.433391][T10790]  alloc_pages_mpol+0x1fb/0x550
[  380.439211][T10790]  new_slab+0x23c/0x330
[  380.444198][T10790]  ___slab_alloc+0xd9c/0x1940
[  380.449806][T10790]  __slab_alloc.constprop.0+0x56/0xb0
[  380.456247][T10790]  __kmalloc_cache_noprof+0xfb/0x3e0
[  380.462586][T10790]  bus_add_driver+0x92/0x690
[  380.468091][T10790]  driver_register+0x15c/0x4b0
[  380.473811][T10790]  i2c_register_driver+0xd9/0x1c0
[  380.479846][T10790]  do_one_initcall+0x120/0x6e0
[  380.485576][T10790]  kernel_init_freeable+0x5c2/0x900
[  380.491818][T10790]  kernel_init+0x1c/0x2b0
[  380.497003][T10790]  ret_from_fork+0x45/0x80
[  380.502296][T10790]  ret_from_fork_asm+0x1a/0x30
[  380.508015][T10790] page_owner free stack trace missing
[  380.514438][T10790] 
[  380.517211][T10790] Memory state around the buggy address:
[  380.523949][T10790]  ffff888141acc300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  380.533611][T10790]  ffff888141acc380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  380.543283][T10790] >ffff888141acc400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  380.552941][T10790]                             ^
[  380.558767][T10790]  ffff888141acc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  380.568428][T10790]  ffff888141acc500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  380.578088][T10790] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  382.881920][T10790] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  382.890588][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1766 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) 
[  382.902973][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  382.915044][T10790] Call Trace:
[  382.918974][T10790]  <TASK>
[  382.922479][T10790]  dump_stack_lvl+0x3d/0x1f0
[  382.928002][T10790]  panic+0x71c/0x800
[  382.932663][T10790]  ? __pfx_panic+0x10/0x10
[  382.937947][T10790]  ? mark_held_locks+0x49/0x80
[  382.943674][T10790]  ? preempt_schedule_thunk+0x16/0x30
[  382.950123][T10790]  ? dvb_device_open+0x36a/0x3b0
[  382.956048][T10790]  ? preempt_schedule_common+0x44/0xc0
[  382.962612][T10790]  ? dvb_device_open+0x36a/0x3b0
[  382.968529][T10790]  check_panic_on_warn+0xab/0xb0
[  382.974448][T10790]  end_report+0x107/0x170
[  382.979649][T10790]  kasan_report+0xee/0x110
[  382.984940][T10790]  ? dvb_device_open+0x36a/0x3b0
[  382.990862][T10790]  ? __pfx_dvb_device_open+0x10/0x10
[  382.997208][T10790]  dvb_device_open+0x36a/0x3b0
[  383.002988][T10790]  ? __pfx_dvb_device_open+0x10/0x10
[  383.009338][T10790]  chrdev_open+0x231/0x6a0
[  383.014668][T10790]  ? __pfx_apparmor_file_open+0x10/0x10
[  383.021340][T10790]  ? __pfx_chrdev_open+0x10/0x10
[  383.027274][T10790]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  383.035391][T10790]  do_dentry_open+0x741/0x1c10
[  383.041111][T10790]  ? __pfx_chrdev_open+0x10/0x10
[  383.047043][T10790]  vfs_open+0x82/0x3f0
[  383.051920][T10790]  path_openat+0x1e5e/0x2d40
[  383.057436][T10790]  ? __pfx_path_openat+0x10/0x10
[  383.063370][T10790]  do_filp_open+0x20b/0x470
[  383.068780][T10790]  ? __pfx_do_filp_open+0x10/0x10
[  383.074834][T10790]  ? alloc_fd+0x471/0x7d0
[  383.080034][T10790]  do_sys_openat2+0x11b/0x1d0
[  383.085639][T10790]  ? __pfx_do_sys_openat2+0x10/0x10
[  383.091872][T10790]  ? __pfx___might_resched+0x10/0x10
[  383.098221][T10790]  __x64_sys_openat+0x174/0x210
[  383.104035][T10790]  ? __pfx___x64_sys_openat+0x10/0x10
[  383.110488][T10790]  ? rcu_is_watching+0x12/0xc0
[  383.116205][T10790]  do_syscall_64+0xcd/0x260
[  383.121614][T10790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.128679][T10790] RIP: 0033:0x7fa25538d169
[  383.133966][T10790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.157488][T10790] RSP: 002b:00007fa256208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  383.167576][T10790] RAX: ffffffffffffffda RBX: 00007fa2555a6080 RCX: 00007fa25538d169
[  383.177130][T10790] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  383.186696][T10790] RBP: 00007fa25540e990 R08: 0000000000000000 R09: 0000000000000000
[  383.196252][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.205811][T10790] R13: 0000000000000000 R14: 00007fa2555a6080 R15: 00007ffef5a6cd78
[  383.215388][T10790]  </TASK>
[  383.219067][T10790] Kernel Offset: disabled
[  383.224259][T10790] Rebooting in 86400 seconds..