last executing test programs:

20m17.702254109s ago: executing program 32 (id=431):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x800020009, 0x4000000000df, 0x40eb1, 0x401, 0x8000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0)
pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
inotify_rm_watch$auto(0xffffffffffffffff, 0x8001)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getpid()
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0)
fcntl$auto(r2, 0x1166, 0xa553)
process_mrelease$auto(0xffffffffffffffff, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

17m40.708096983s ago: executing program 2 (id=879):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0xa, 0x1, 0x100)
modify_ldt$auto(0x3, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0080, 0x0)
pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
socket(0x1e, 0x1, 0x0) (async)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64)
select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x100948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async)
socket(0xa, 0x5, 0x0) (async, rerun: 32)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4) (async, rerun: 32)
mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
io_uring_setup$auto(0x9, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x1b0) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73) (async)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff)

17m38.960321106s ago: executing program 2 (id=881):
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/reboot/force\x00', 0x143001, 0x0)
write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)
close_range$auto(0x2, 0x8, 0x8000)

17m34.852053229s ago: executing program 2 (id=883):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0xa, 0x2, 0x3a)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x3, 0x9, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0x2, 0xdeb1, 0x804})
syslog$auto(0x3, 0xfffffffffffffffd, 0x7ffffffd)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r2 = socket(0x15, 0x5, 0x0)
ustat$auto(0x801, 0x0)
sendmsg$auto(r2, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r3, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0))
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cb5700afbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r7 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r7, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_macsec(0x0, r5)
socket(0x2, 0x1, 0x0)
pread64$auto(r0, 0x0, 0x7, 0x8000)

17m30.473305175s ago: executing program 2 (id=886):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0)
socket(0xa, 0x3, 0x2f)
socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, 0x0, 0x7f5d, 0x200d)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "87fe7b014077e08701ee88c6923077b8542c55f8c30ccb575540f50c0a515ca3", @inferred=r0})
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x2bc, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_ACTIONS={0x264, 0x3, 0x0, 0x1, [@nested={0x1be, 0x2e, 0x0, 0x1, [@generic="1c2004e0aac9563c8aea34e55c5dd35dfcd4a8b373149250d3260755a65b42fa8cf9700ed55aff0414c5ebc30e916c1ef5e8033b059c43c3178b7c6a7580501e5793d4ab06134347bb503a039d612ffdbeebd10c6b00f7887cc69b3e4678b5eb232dc2e6c9c1e025107a0fbe", @generic="4ebc3aaa5162a38e8d496d39a8e574266dc9bb94bfdfcb4440300a3be31ace81dab73a77cbacb38653ef5de02eb751713874eccf6834c9fb5cc2d60fcf1e8ebe6907def36902dca13b4188fa4edff8fd024783fce3421399f3b2c44c629762cb427aa10205a30b76509c544c79e2db7e82a6ccb43708a895811e80983366d6e07c851b915a8486647e385df17338a5707ba074a458be51457e0e07de7e5f8edf2fc9d0ad8f71a68360fa642b5b62c15bc38d86ec89cda0eff8b718bfafae", @typed={0x1f, 0xa9, 0x0, 0x0, @binary="aa7dcf3537421624190de42f91a82c5f3bc49b0c798596df6d2fb4"}, @typed={0x6d, 0x133, 0x0, 0x0, @binary="145778fa21ad95e04a11685a96e6604130b746d9c21512f628d3fa0b55b09ccd421d8447583a0ecf8e988092928784c41a2885bd5a29b105282ecaaec471f10ed40be751a64c811d538fa6b609b5119d3e20bdf792c5310452ae527ba7fbe96b30d1ce8f4aad778db7"}]}, @nested={0x2c, 0xb1, 0x0, 0x1, [@typed={0xa, 0x109, 0x0, 0x0, @binary="13de2bf1d2f4"}, @typed={0x16, 0x7d, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x4, 0x93}]}, @nested={0x73, 0x129, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @pid}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@broadcast}, @generic="5f25e97ed7b7d5ac1410386339f5b823158133721ed8f6e5c7605c4c18f76bb5913f5de800fe00407781bebaca010278d7d2c092b244c251927772a65f53d9", @nested={0x4, 0x14}, @typed={0x8, 0xe4, 0x0, 0x0, @uid}, @typed={0x13, 0xac, 0x0, 0x0, @binary="26224ecce2d555b12119ce8f98c092"}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "904c474ed9f17226dd8c12683655"}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x3}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xffff}, @OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0xa5, 0x0, 0x1, [@typed={0xf, 0xf1, 0x0, 0x0, @str='/dev/ttyS3\x00'}, @nested={0x4, 0x110}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40004}, 0x20040)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0)

17m27.444631809s ago: executing program 2 (id=892):
socket(0x18, 0x5, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
select$auto(0x3, 0x0, 0x0, 0x0, 0x0)
syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf)
gettimeofday$auto(&(0x7f0000000140)={0x9, 0x6}, &(0x7f0000000180)={0x7, 0x10001})
shmget$auto(0x800400, 0x8, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000)
shmat$auto(0x5, &(0x7f00000001c0)='#\x00', 0x7)
shmdt$auto(0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0)
shmget$auto(0xe6, 0x51, 0xd)

17m22.196418402s ago: executing program 2 (id=901):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x6, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NCSI_CMD_PKG_INFO(r1, 0x0, 0x44088)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d05, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
unshare$auto(0x16d2363c)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000815)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
close_range$auto(0x2, 0x8, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0)
ioperm$auto(0x7, 0x86, 0x40006)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000002100)=""/15, 0xf)
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, 0x0, 0x9, 0xd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

17m6.70799349s ago: executing program 33 (id=901):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x6, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NCSI_CMD_PKG_INFO(r1, 0x0, 0x44088)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d05, 0x0)
madvise$auto(0x0, 0x53, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
unshare$auto(0x16d2363c)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000815)
mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
close_range$auto(0x2, 0x8, 0x0)
migrate_pages$auto(0x0, 0x8, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0)
ioperm$auto(0x7, 0x86, 0x40006)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000002100)=""/15, 0xf)
socket$nl_generic(0x10, 0x3, 0x10)
statmount$auto(0x0, 0x0, 0x9, 0xd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

8m4.44629857s ago: executing program 1 (id=2545):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0xa, 0x2, 0x3a)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x3, 0x9, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0x2, 0xdeb1, 0x804})
syslog$auto(0x3, 0xfffffffffffffffd, 0x7ffffffd)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r2 = socket(0x15, 0x5, 0x0)
ustat$auto(0x801, 0x0)
sendmsg$auto(r2, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r3, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0))
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cb5700afbdbdf250a00004a0600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r7 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r7, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_macsec(0x0, r5)
socket(0x2, 0x1, 0x0)
pread64$auto(r0, 0x0, 0x7, 0x8000)

8m3.342949278s ago: executing program 1 (id=2547):
r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mknodat$auto(r1, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8)
renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/description\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f)
renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x240000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a)
close_range$auto(0x2, 0x8000, 0x0)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000280), r4)
sendmsg$auto_GTP_CMD_GETPDP(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, r5, 0x313, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0xe8}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0xf6e1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
bind$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x2)
r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40c01, 0x0)
writev$auto(r6, &(0x7f0000000140)={0x0, 0xc}, 0x3)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(0x3, 0x0, 0x81)

8m2.803951188s ago: executing program 1 (id=2551):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
socket(0x2, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0xa, 0x2, 0x3a)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
adjtimex$auto(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xd4, 0x3, 0x9, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0x2, 0xdeb1, 0x804})
syslog$auto(0x3, 0xfffffffffffffffd, 0x7ffffffd)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = socket(0x15, 0x5, 0x0)
ustat$auto(0x801, 0x0)
sendmsg$auto(r1, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=r2, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0))
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r3, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032cb5700afbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
r6 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r6, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_macsec(0x0, r4)
socket(0x2, 0x1, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)

8m1.922948829s ago: executing program 1 (id=2553):
r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x3, 0x0)
setsockopt$auto_SO_PASSPIDFD(r0, 0x7fffffff, 0x4c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x5)

8m1.704325901s ago: executing program 1 (id=2555):
socket(0x21, 0x2, 0x2)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)
r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0)
read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250a00000004100280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sysfs$auto(0x2, 0x10000000000002b, 0x2)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0xffffffff)
socket(0x2, 0x80002, 0x73)
r3 = socket(0x18, 0x5, 0x2)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r3)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
bpf$auto(0x5, 0x0, 0x4a)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
connect$auto(0x3, &(0x7f00000000c0), 0x52)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
write$auto(0x3, 0x0, 0xfdeb)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x115, 0x3, 0xffffffffffffffff, 0x1)

8m0.246224376s ago: executing program 1 (id=2560):
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(0x3, 0x0, 0x81)

7m45.029298309s ago: executing program 34 (id=2560):
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2001, 0x0)
mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(0x3, 0x0, 0x81)

2m53.988074092s ago: executing program 4 (id=3661):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
inotify_init1$auto(0x3000000000000)
r0 = io_uring_setup$auto(0x4, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x0, 0x49d, 0x9, 0x0)
close_range$auto(0x2, r0, 0x0)
open(0x0, 0x22240, 0x55)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r1)

2m53.704513825s ago: executing program 4 (id=3655):
mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0x40000000000a5, 0x8000)
r0 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
kill$auto(r0, 0x11)
ioperm$auto(0x90d5, 0xc, 0x2)
syz_clone3(0x0, 0x2f)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
r2 = set_tid_address$auto(&(0x7f0000000000)=0x6c)
migrate_pages$auto(r2, 0xff, &(0x7f0000000040)=0x1000, &(0x7f00000000c0)=0x6)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
statx$auto(r1, 0x0, 0x1003, 0x4005, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17)

2m52.216168024s ago: executing program 4 (id=3663):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x5, 0x0) (async)
socket(0x2, 0x5, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x6)
mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x18, r0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRESDEC=0x0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRESDEC=0x0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
getsockopt$auto(0xffffffffffffffff, 0x3, 0x89, 0xfffffffffffffffe, 0x0) (async)
getsockopt$auto(0xffffffffffffffff, 0x3, 0x89, 0xfffffffffffffffe, 0x0)
timerfd_gettime$auto(0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(r2, 0x64c6, 0x1e2) (async)
ioctl$auto(r2, 0x64c6, 0x1e2)
gettid()
mmap$auto(0xab6, 0x2020009, 0x7d89, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff)

2m51.094620841s ago: executing program 4 (id=3667):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
mmap$auto(0x0, 0xfb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0xe, 0x0, 0x9, 0x0, 0xc, 0xb}, 0x800009}, 0x5, 0x20000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0)
socket(0xf, 0x3, 0x2)
mmap$auto(0x0, 0x8, 0x3, 0x17, r0, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
close_range$auto(0x2, 0x8, 0x0)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
close_range$auto(0x2, 0x8000, 0x0)
r2 = io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0xbb0c, 0x329, 0x10011, 0x2, 0x8000)
ioctl$auto_BLKRRPART2(r2, 0x125f, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m49.854491622s ago: executing program 4 (id=3672):
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
r0 = socket(0xb, 0x2, 0xa9)
socket(0x9, 0x6, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000)
mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000)
mmap$auto(0x0, 0x40000c, 0xdc, 0x9b70, 0x2, 0x8004)
sysfs$auto(0x2, 0x100000000000028, 0x0)
mmap$auto(0xffffffffffffffff, 0x20009, 0xe3, 0x100000eb1, r0, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
epoll_create$auto(0x0)
mq_open$auto(&(0x7f0000000000)='/dey/sequancer2\x00', 0xfffffffe, 0x2, &(0x7f0000000040)={0xe7a2, 0x0, 0x1, 0x4})
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1000000001ff, 0x7, 0xd, 0x1, 0x948b, 0x80000000003, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8, 0x2800000000000, 0xd, 0x9, 0x5, 0xfffffffffffffffa]}, 0x0)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0x163041, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x80002, 0x0)
read$auto(r1, 0x0, 0x6)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0)
shmctl$auto_SHM_STAT_ANY(0x4000009, 0xf, &(0x7f0000000500)={{0x9, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x702, 0x80000000, 0xfffffff8, 0x100}, 0x8bc, 0x0, 0x1, 0x81aa, @inferred, @inferred, 0x27, 0x0, &(0x7f00000003c0)="5c884edd1a21b665cbba8b67a43ed67fde0e57bc02", 0x0})
setreuid$auto(0x0, r2)
chroot$auto(0x0)
ioperm$auto(0x3, 0x38c, 0x9)

2m49.44595302s ago: executing program 4 (id=3675):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
socket(0x2, 0x800, 0x206)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto(0x3, 0x5408, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(r3, 0x0, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep$auto(0xfffffff2, 0x5, &(0x7f0000000000)={0x4, 0x4203195}, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xa}, @NFSD_A_SERVER_SCOPE={0x45, 0x4, '/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004891}, 0x4000)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='/\xa90t}\x80@1\x1b\xd6%/', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x4, 0x367, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)

2m34.041329184s ago: executing program 35 (id=3675):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
socket(0x2, 0x800, 0x206)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto(0x3, 0x5408, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(r3, 0x0, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep$auto(0xfffffff2, 0x5, &(0x7f0000000000)={0x4, 0x4203195}, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xa}, @NFSD_A_SERVER_SCOPE={0x45, 0x4, '/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004891}, 0x4000)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='/\xa90t}\x80@1\x1b\xd6%/', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x4, 0x367, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)

2m27.361592143s ago: executing program 3 (id=3746):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0)
read$auto(r3, 0x0, 0x1f40)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x731c, 0x1, 0x0, 0x10000, 0x3)
keyctl$auto(0xc, 0xfffffffd, 0x2, 0x0, 0x8)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)=<r6=>r1)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x10}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x54}}, 0x40000)
read$auto(r2, 0x0, 0x1f40)
write$auto(0x3, 0x0, 0xfdef)
r7 = getpid()
process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x7f}, 0x6, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) (async)
sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010) (async)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) (async)
read$auto(r3, 0x0, 0x1f40) (async)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x731c, 0x1, 0x0, 0x10000, 0x3) (async)
keyctl$auto(0xc, 0xfffffffd, 0x2, 0x0, 0x8) (async)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)=r1) (async)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x10}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x54}}, 0x40000) (async)
read$auto(r2, 0x0, 0x1f40) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
getpid() (async)
process_vm_readv$auto(r7, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={0x0, 0x7f}, 0x6, 0x0) (async)

2m27.094315037s ago: executing program 3 (id=3747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
fcntl$auto(r6, 0xfffffffd, 0x0)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

2m26.031463493s ago: executing program 3 (id=3751):
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x7ff, 0x4000000000df, 0x8011, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
r1 = clone3$auto(&(0x7f0000000180)={0xfffffffffffffc37, 0x2, 0x4, 0x9, 0x9, 0x2, 0x5, 0x7, 0x1ff, 0x8, 0x8}, 0x201)
ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000000c0)={0x2, 0x1, 0x7fffffff, 0x71, 0x6, r1})
r2 = semctl$auto_GETPID(0x3, 0x1ff, 0xb, 0x2)
prctl$auto(0x80000001, 0x7, r2, 0x0, 0x0) (async)
r3 = prctl$auto(0x80000001, 0x7, r2, 0x0, 0x0)
brk$auto(0x7fffffffafff)
brk$auto(0x7fffffffefff)
r4 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r4, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100)
socket(0x2, 0x80802, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0)
write$auto(r5, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) (async)
write$auto(r5, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13)
connect$auto(0x3, &(0x7f0000000140), 0x55)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000280), r0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0c02, 0x0) (async)
r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x4e0c02, 0x0)
sendmmsg$auto(r6, 0x0, 0x6, 0x90)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000200)=0x6) (async)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000200)=0x6)

2m25.484398524s ago: executing program 3 (id=3752):
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
readv$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
read$auto(r0, 0x0, 0x20)
openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x30, 0xffffffffffffffff, 0x7ffffffffffffffc)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xc44c1, 0x0)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x48041, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)="3bedd9", 0x3)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0)

2m24.812576495s ago: executing program 3 (id=3753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r6, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

2m23.46614024s ago: executing program 3 (id=3759):
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000040)={0x3, 0x0, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}, @NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/cuse\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xce9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
futex_wake$auto(&(0x7f0000000300)="194777f28f0f52354e1e", 0x1, 0x1, 0x200)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11e0}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

2m8.420207125s ago: executing program 36 (id=3759):
ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000040)={0x3, 0x0, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8}, @NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/cuse\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xce9}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
futex_wake$auto(&(0x7f0000000300)="194777f28f0f52354e1e", 0x1, 0x1, 0x200)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11e0}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

1m58.508488279s ago: executing program 7 (id=3829):
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x8a802, 0x0)
fcntl$auto_F_GETSIG(r0, 0xb, 0x6)
ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000140)={0x4, 0x1, 0x402, 0x8, 0x0, 0x5})

1m58.1004786s ago: executing program 7 (id=3830):
r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x200, 0x0)
fdatasync$auto(r0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r3=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r4=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macvlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pim6reg0\x00', <r6=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1\x00', <r8=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00', <r9=>0x0}) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00', <r10=>0x0})
sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PHY_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PHY_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PHY_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) (async, rerun: 64)
r11 = semctl$auto(0x3, 0x8, 0x3a, 0xff) (rerun: 64)
kill$auto(r11, 0x7) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r1) (rerun: 64)
sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7}, @NL80211_ATTR_MAC_MASK={0x71, 0xd7, "baa3cca7054a6a76916c9dd88570bec33c8a7cb3ed852cc8458edf76713a89084acbdc782f31ed261d9f89bfeb0475e66e6f10a1cbb2438c7fd79ada60f65c95aa933dc5606ce88e2d548f6472baeedf439da3f1095eeae078ace32331899966c78112e9cbed729ad69f68c1f3"}, @NL80211_ATTR_MLO_TTLM_DLINK={0x6, 0x148, "7181"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
sendto$auto(0xffffffffffffffff, &(0x7f0000000600)="e2d535d8b2ee49e10cb62be394b3f3ac8e5b6bc0b93709470a6b39b21fbc71b89512972e957e80b43e7fb78fee9f6cd59e9064f4858da8dda4862d9e662cb4d83fb3d0e4855df02c0d9dec1cd60fc44b9df0eb1a18b4", 0xd, 0x3, &(0x7f0000000680)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x9) (async)
r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r1)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r13, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x811) (async)
r14 = bpf$auto(0x8, &(0x7f0000000800)=@link_create={@prog_fd=<r15=>r1, @target_ifindex=r3, 0xc, 0x9, @netfilter={0x4, 0x4f5c, 0xffff7fff, 0x2}}, 0x7fff) (async)
stat$auto(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x8, 0x4, 0x7, 0x8001, <r16=>0xee00, 0xee00, 0x0, 0x7, 0xc, 0x4, 0x6, 0x4, 0x8, 0x3, 0x2, 0x3, 0x5})
shmctl$auto_SHM_LOCK(0x9, 0xb, &(0x7f0000000ac0)={{0x3, 0xee00, <r17=>0xee01, 0x0, 0x2, 0x955, 0x4}, 0x80, 0x6, 0x8, 0xffffffffffff6d2b, @inferred=r11, @raw=0xfffffffc, 0xf, 0x0, &(0x7f00000009c0)="6327cf6d2edea67b93bfe30cc0c4b17540d3507e818db89e7079115755ee91abfb8bd6f42f3693c034a2b8d8a16f3f5117a053e5796663f9ede9946fef9515dceed96ff32124d9b0ab60dc8a699d3da5788d8c0fe577", &(0x7f0000000a40)="405a41c193f845bb846f6da4d5b0f2035f0bea523887dd41b3dfbd60203725e97ce7534d54f14e7a8c911239a41d91b9e6e14db776e5a1dd9b503ce23cb857a5e313aaaaafda6937503638f8b33da17b643ccf053729f06d9cfb2c210b94f26db17b6a30ce29a59f1d3fd5099380"})
msgctl$auto_MSG_STAT_ANY(0xa5a, 0xd, &(0x7f0000000bc0)={{0x1ff, r16, r17, 0x0, 0x8, 0x7}, &(0x7f0000000b40)=0xb6, &(0x7f0000000b80)=0x6, 0x0, 0x2, 0x1, 0x6, 0x9, 0x6, 0x4, 0x9, @inferred=<r18=>0x0, @raw=0x7})
r19 = waitid$auto_P_PID(0x1, r11, &(0x7f0000000c80)={@siginfo_0_0={0x100, 0x0, 0x8, @_timer={r18, 0x48f7, @sival_ptr=&(0x7f0000000c40)="b06d1a8fba", 0x6}}}, 0xe21, &(0x7f0000000d00)={{0x2, 0x6}, {0x81, 0x7}, 0x5, 0x78, 0x5, 0x0, 0x8000000000000000, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000, 0x2, 0x4, 0x0, 0x14, 0xa4})
kill$auto_SIGCONT(r19, 0x12) (async)
io_setup$auto(0x6, &(0x7f0000000dc0)=0x2)
r20 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000e40), r15)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r14, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r20, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x28}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x5}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2534}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40) (async)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r15, 0x80811501, 0x6)

1m57.440411169s ago: executing program 7 (id=3834):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0xa, 0x2, 0xd3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_clone(0x85082711, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0)

1m57.041010724s ago: executing program 7 (id=3836):
mbind$auto(0xfffffffffffff000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12)
write$auto(0x3, 0x0, 0x100082) (async)
setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) (async)
unshare$auto(0x40000080) (async)
getitimer$auto(0x2, &(0x7f0000000280)={{0x3000, 0x90da}, {0x6, 0xae}}) (async)
shutdown$auto(0x200000003, 0x2)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0)
ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000140)={0x5, 0x8, 0x4, 0x6, 0x7}) (async)
sendfile$auto(r1, r1, 0x0, 0x7fff) (async)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async)
r2 = fcntl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff)
bpf$auto(0x10000, &(0x7f0000000080)=@token_create={0xed, r2}, 0xce7) (async)
socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) (async)
bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x10, 0x5, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x7, 0x7, 0x7, 0x6}, 0x10) (async)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x30d100, 0x0)
socket(0xa, 0x2, 0x3a)
r3 = socket(0x10, 0x2, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0xa821, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000500), 0x20042, 0x0)
sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd67, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x880)

1m56.100298743s ago: executing program 7 (id=3838):
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0)
socket(0x2, 0x1, 0x106)
r2 = pipe$auto(&(0x7f0000000500))
flock$auto(0xffffffffffffffff, 0x9)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = clone$auto(0x18, 0x200, &(0x7f0000000300)=0x5, &(0x7f0000000340)=0x3, 0x7)
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x1b0, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x19c, 0x2, 0x0, 0x1, [@generic="118da9009b736a841b4e667de77be6d141e9e1c8dfa12fb8a60323697ac55a145dd29d9c895a1ea468785b2a038a5e24288eb69bf2849a8f605c3651e921761bfd27e427cf38c0913dfb9a86684e74d2e19559f6425f13c0f450669c9a14675cc90884fe32f295bcae0811eff2a91676b5f227fbf25cf12ea8dda5ab638bf628654a29a44549c324ace0d3fcbcc40d23f2ea4d115fe4ca2192d5ce852b", @typed={0x8f, 0x13c, 0x0, 0x0, @binary="9be7aa1b5bc8ec1c4fa2e03f0c4ec6a658168e61c66e6cded9cf5a590eb7fe97e50d6353daf0bbd1716b2d5c83e900432be28d0742cd92f2b3e6b346db2294be3a11fb0b5c72c9a182a40a3269ed914f0e95e8f4d8466a7becff41b7de467bf1be07bd04162ea4d2a2b59ddb269e89ecde72765adba31a9f4e5dc2e1fd9166f6ccd9219aac0d111bf97b59"}, @nested={0x20, 0xaf, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x8, 0xb9, 0x0, 0x0, @uid}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x138, 0x0, 0x0, @pid=r3}]}, @generic="aa38104107618dab63c7382e7daf08fc7806b097added2913f8351f8b7aacea9593c7f1fcf246a92903c53de01d25bdb8726bf9b2398843aea668dc440b2f1eca866e608d67a663d80f9f4"]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

1m55.598089829s ago: executing program 8 (id=3841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r6, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
fcntl$auto(r5, 0xfffffffd, 0x0)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

1m54.995355262s ago: executing program 7 (id=3843):
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae78, 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
read$auto(r1, 0x0, 0x800) (async)
read$auto(r1, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef) (async)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x28, 0x1, 0x0) (async)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x1, 0x0) (async)
io_uring_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x3, 0x1) (async)
r3 = socket(0x1d, 0x3, 0x1)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0)
prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0xffffffffffffffff, 0x401, 0x4) (async)
r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0xffffffffffffffff, 0x401, 0x4)
ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000280)={0x3, &(0x7f00000001c0)={0x7, 0x6, 0xc8, @raw=0x80}})
ioctl$auto(r4, 0xc0045627, r4)
r6 = socket(0x10, 0x2, 0x0)
r7 = gettid()
syz_open_procfs$namespace(r7, &(0x7f0000000180)='ns/time\x00')
sendmsg$auto_IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc110600", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf25040000003401018028011680210196800500a20000000000946a52701565afb7fc2765ea6326fe0ff7f6bd06452e763badb547a569a4451dc00c65d85becc32eb4e2eb9044b70a99a099f8bf042e3dbc88521b6415b338547f0f28aef7cb24d5c7a36c6d78702c315f1bc3cf38149b90ac45153fb66fbb69eeb9049e23f77d3ecc016898cddaa8c2ada1963a6c5f44caeef41c0701cde1d838abfaf490440a931e6a2885fe9a1d3ca6ec89b58760ac57132ba30900e57828478d9120db81faed62a243aa152ba6d17e40ae4fbff7a132724c5974624d98f8b16b5d42a4c20469e330295f3ea66c663c7aaf9af52c7f532e0d7dac503c46019e3be3204078d2dbb312a0bf6727b338a298ff2aeb20734da27a9a8744b0374c7aa5a6450d7d073cb8e0d65b7504009a800400fd8000000008005c00", @ANYRES32=r6, @ANYBLOB="08000400090000008c1002808510da8004009f0005e969299377c515fba1ec068cf4bc524696ccfa31f0636e86e9ead7a57c5dbae9d25916617bca2061dd5109486efe289114244d0c6b80caaf44760684e204b8876de8a0be5b0e17915bb9319b3c9b0ea637785ac9c473387c78951f2e5681ea6de1c41585d4670ddf860bee32d836b7c722958b98d3c6ca547a8d2a99f065c895a7a693ce1c31ee96b46349a872953f95a123cdd6b248acb46bfdee74435ae6960a7f9110d0ea3cea56807ee682aa3818fef4060a827c6c620eab5f613a328e5b19470fa68d3e826521934812845d14a26c47162bcf977874cd87d5daf11c6ddff26a7c90d36a2d49505279443e865f2beec2a52ff4647a39e8a9095099451761676eeef529b758e77058e60eee85cc1a11b8173bdc6390f34fe4b2d2b6aa970a1f910e17f15b76f23cebd2db9a666baa88a0af389db9d878b62228aabdb38027a0099eb28639daf5bd097fcb651bd20c6285ef1132bcd652c10d1a82e509664187f88d18fb34fece5cd402d2d44de461c8e4e245904bd84a5b84536f98bc99656e175bc70d347c1ae0db88bb8f8a83dc6ad41337219bf9a455fd49d08fa9e1510fd2bc9aa21cc0d2f0a7da678b1131e84cbb17f4bae6a4e1275a923da597227894408b42621463854c2413378da3ac87ee8a3e062eb7b848d75e2f8b7829def9cb40535f8692e425829e9ac0897f2bc69101b37560cf143836552c50503f4935b0da024cff0eb4c078717e8333a12d535fa892b66b83fb53d54fc86f2f35ec87270380abe8c87cacf9b19aec7ea950bd374ecefa9c64c1d9e607a6fd71a4192aa1ab0e56d7cf158926d30423efc5d623475976b104306eef14bde160ce0921bb758c1967d648b8783fc7990e3f3850fd0d81297d7b69bbe8b9337a7e308e36b7bade455e0fb1adb59c65ccc16ec14eae89bb24c748d7e4c191e75f6bbf4712f0c40a926f46382c545d8798866b9e5019ca6a9c810eda98396710d530e9767e13ac6140eb5bc7c62aed158d6b745d5f450e1fd95e082c68de1376bd039d5638542e82595b381c4d6cac2006a120b7be7f1d991705a7334750227013dd1b6f163545231183609cba6bb9b53baffb8957472ab6e485c86c71c26bd8d2b8b5c2fc479a6e4f1ff5eee91ce71d624ccc44d758ce3d2f5043603d4933cf8b8b09eb894227b4dea165c9ad122b5f4ce583d1cf08ed47da02bb5108fe332f239e6906273d91354e9f695d18df47fbcbd0e59a2432748dc7f5ca673b085cf19a4fb9d642708e1c991bd8f25cf7d48c0e14e59b39be576916e317e72a64d8c40f8a75eee9efb7276dab0122cda1ca10b2c48692537475b41bc52c1c8bee6278097e8fd1dfd711578397b50ca9f50d6ae3a97eced747f78fa7d137331221af418526280ec2cd5c69e7e793854749b99b314c8e2132a32841ba7af631c0a26af6f1954b0209ce52d933ba21680638f7fcd89eee4c5862f15d17cb6a047ee1c64cf2e1461d01eb88b5f847992cf1bde67e105f5b624aebd2d9757dd6ad37c07b16a9db75ab3ea399219cb5e32785bfe8cd8f150b35b21b44db2a3f707a02e46858b09d24cc077fe2f093da116f11816fb1b2573f975986e624ecba2365b0ed2f0f6afb05d1214b36f539afbe471335b9f7de18f909937abe5c17357f9acb42ff7b8980b8ffc6da6a65c0edb22d715137dce8fe4f4b1230482ed972db6f11e15fac7080cea74ec9008f1cf20de595cab5fb8649b6e0cfed593bd4ff0170f5622888e91338b48592253cedb683e4e9ae867c03f3e776bc4b8981312fbe7846d8301906f194a011f7aebbb100b222861e29027c5c349b1bd338ee5b4294baa16e49cd2dc2146d5f05c431487293312f6cf653b7673ea562100b61140074020b0533a382adb694b6786d2b34ae9a241ae3e181b8c992342a5b3cb02744e92a78a730fbaaab85216af83e555f8adb2ae5bb99a307ac267b133236c7755b4682327c59426a681a3cdef4f53643e1a90d82980b925c3740dd29f08965457c10fb9147044583e704834cbb2e4e3c69d1e74442e5609040be9dfd7dff2cadf6a24b600c518807b32144687c3fba2ba5805b7b51057788a46697ce43d0f34f59dd2b7d561bf2dac257c884e75a48edf1bc4f4b401ff9505d0af256adf15d68c9ee379cceae7173dcfb3c1f059eae48c172960678e2d0667473f62d32518c1911e9e2dd8d83e81587acca80dd1d3e10e89633800c2e13732d2bbb86104e3eafafd82c77ab90ecb456956b037fa6a553dead7c79e0750172bf7af249a785bb4cc4a065f010cee838deb927a52ae05ac784d9d21703cc9b027d35706a48acef6370a4089a99f7dd845b555621ca8e590cab078b854dc927679be72e0e0f88383f19fb69a2c5ca6427b1cd6bb41a8fe0cdfdaeb46dd2e27e80c212261b29a495bb7914955a8e1cb69e909758dc6ef70110154f53e884d85908eaa3b51e79ec503c9b5733b2bbe95ffd6ec85352f1a881e17e68482682273d3d11b79078422f6e7ea6e99a684549b3730eb92128d648bca0684577b755ce744cdd42bc2ad13210ff7f9e5a9456c3f401aea24c6908a2636e78bd5a63ab34d1b21517c8bc8ec3b208c6e41c7c37ecfd00cc6900ba878144a0d837c13faf60157ed992822286638f53da5ab06f6156324cfb41ab21071fcb937ddea75684b0e0e0e69a6b28584d6778f087562f4b9ee86f3b6c90b2ff034e5eac3dd2cbae0657e3488d9ec9b4fbbec603ffbff3c4f32c3773fdfc2e8212933d73bd7d17585a80dc95dc021a4e3eaac4ae7e667e00070dd9bc73396a05541c3deb75bf3fe0b087aedde6f6e3b799ddbda9b956ff0f00ec8b3fb1191065fb1ecd95dec19bcdf7c853f2a40b34fbfe2a19ec10c47f6760512ec777fd0c883ec0b582ec6c826cc9956fa2abb79e2703f5b342b3a58409ded5286e22aa38698c5eb67fda19ac9acd4c99674570903afcf1bc4ba33ab07e9e0f9409de9bb017d7b0a4c515305c9c303c5b0abfc0aeace5ea0d8f0fd490ee21d4f27a15b287c135ac50c57061285131bda6bff26ede739439dc7d5fbb34da6dc6688cb11b4946965e500e2408625d5e12169bf6f2a1013db2fd36d9b47e5b9bbaad78b4911d6f594e9c737f789f69c565ebb26546a3b43e5e58ded9ad8ee641935f96bd822cfaa8052e9d80966a4a9c098a0f2dde8217f5b78ce2f30f5937bd34e3043307c07111a589c5353fa4c9366888736dc028989d3a37c8ff808765311f79215e5826c4dccc28c7a07e9761e5e01440ed9326b01ef93aca1746fa9f22672606fb88259628140b03969c2a5d63e7bfcc23402325b9c8f90db38dd595f9cbba61ba986239bbdd6f2593cabdd7bcdc214b9957dedf8555578d5f7d76a64fa34b142ce797f66885525307c7295e636db234373f83bad1342bef2005b7ec46336b490b5c7780d702b29ad7c36769ac1fdc7f546da90cf89f24342ba13f4f5b5fde7f9bb17a2345de8b35f71864df71199440fbd61881ffad29f724eed9f69b11612c5d874ec380d2db36852f323fc6217af901e5da7a6221f6b6f4afe109330b45f6a0dfde85655364cab4bebe5f8ea17c71a2fcbcbc2fd8a98884280397f56edb866f9c433b2cdaaef44616d9e2e60eb4562478a6646ea07aa62e1e7e9e6fbf9d877a58987bcc5ce4b08a5626aa27d1440cfcde40bf73e5bec45996ab2b49ee2671e533a51f43865ed8ce4e5acc5d4dbe5f6def946163d5ca80ea13321d28eaa39849a5df1c9f3bd843fae2ea3f3cbf45f7cccb0f9aec1cc805f98bd107348bdcd4df6fa8101888b40509cc9f8538df9bb1ba9c967371944e56d5874205794028ba1b058580bc9d643a65883d6f8bb66a9d3f495d5f0d536e9a09880785b36394aaf282984d2d507299594c400bb342d1549b3bfbe3fc5d4f3bf1ba0a9f052fad2b154b2b70d8b2301abe560d401b49a73be841e01c3862893d7f331a591a3c1a3102c06c160bcc4b28012491c9fce12040cd1350819a84b987a2d4fc1a7545a471d851734f6a9d3efb3c98691aa8f9cfca66fd6f8d32593ed8bfe38de4df0bd67814bd4f5265fcaaf304fd5fe293d26293310ecc435a7b4f5d5856b48cebd76f1cb893b4702d8c9d6afe817417fe3d2b912b6f55fe16da06ef8af4820ca663c5407ff26138aef71f5ea224e934eff457ff15039562d912956792de629950f34056491dd55151e1bae121935ffee29a8bc111fae40bd5142bc4b8db2e8d12d7cb9685d640c6e45fa6756233e66bf36598cbea763c6981593f929f1139873e1f8cdcb012bbd3e5aff727ff5924b6bfe1af0299be572410fce75bbbfda569a0f9c842ed636526fbc3988156e3128b73af7c15071a426bc334c46f17da1b2ddb5e0e7ec81bd6d15375ba3eb7d513c33bef3fa657b2cbd571605332aa1ea19c26edef6faa4583d4e19624f3977e431c865b7c7875d1797f2a0e852f1c079455516e58d2307449f91e0870957432389a9a9f2d93945ff82210a832cb897d20e3d79cc5a6e9c4ea225bfa8a9045b19fa9deeb6fc21ebfb1d51d6cbc79f44e4f332315653d33bb22d8e937ea64b6edaac0e60e53ae46de7e39271b61a4f453b188e98532d466f1178446ad5825a7a21b6b4c58ce976194712ce3ac659f01333b1af7cf39773b928755f1355e485f3f967266dad1477947852d673305cdae415f9df6e79cca071e3f14c274364de4f96c311f0a97088c4ac27279695ea1095d69c6ee07596f97a0676fbb35cd1dbc57e6cf70acb2a9bac3fed32ea3b1acf9c17519f3e81a54f18223a388a17b1189b85ebce5cd29d8b18b61bc376ad4a326b1d75d58a08d7e39e1e7844c75368654aed1913672af26e581f6e37dd78f126a714caddf3f1105e408af62c04fa36f64f397c8dda6662ba358521d7c99d34a73d3967eb4b46484806e1216d1c860c0765430e30585a9974b00fe7c54389543ba6a799697552b0b41fa4eacc5c4866026696bafc514165e44bcf02d5e4c9de21a29afc2ce12994e89c3cc2023030b07c4ea682a0e4fce4f7ad0f56067879df126c1d8e765a7301b644e99d70e211526600e40413782a8aec4eb291528ee38ee2813867f09eba11ddfcc11a6d120dec1d5efc95d2b87d243e6d409e9c8fbc86d2ef6df25effc8963bb7696e48225cab0051d7834fba2eab31349a733a070fd360f2e21ffb6ae10163b16b15d7fcfec2a86393d4a0dd4b595997b4daab910e54d616fdcadf044f07741bc524a59371547e77e35879d1fe668b8afde20c213814e8d0690bdb6cd161071262c33b4a08c6ac8b7ef1cda312dd955f9ee3c2557f87dc80ba982515e58d90b94f91c84c4ce0975f2041336c5e9c06a391d5f54f88f0fde464d434b8abaff232fdf4b28e9dde394bad38dad3ed4b80e3b98ea8de07c0056131d8c3f748c020a9da9de9852eb53dfd181bef6b95576f9e387c0f270c60a7a119729c66a570f9fdb6f70c38113df91447ed3d8d88202b151f9f45336c0dff5100ac02c65fe0dd66d2afb1e274328acc56845ffc04302aa41a3fe1887f279f265ba6f1b976cf2d2535d6aa7d6bde2307c6041094eb79c61fe882ac6de71f588efff2c5266444d3500eb09e0872ea2a5473f4c59a3eeaa3a408f80ed0ae40f095c97286fb774d7ebdb5366c23d250a06ecc3768bdfa5c79bd3e2649e8843b31ca01547bd67b066bb3c7e3ab25bdd4d2c999de0f400843d5a027876f314d7387bc1a0e45347cbcdc8199bddaef867f403750f2beab2b65e58764d5be5fb3451b62a39884212c3542720516ab3eda0f35487f62312e80b0400e78008004600", @ANYRES32, @ANYBLOB="3eddc99bcc9008cebd60632e0840064de571260c0c00390002000000000000001400bd00fc00000000000000000000000000000028eb79249bf6e1dd4d3062338ab3caec5aeb221c73fc49e208e7374b97a93ebc08468d25e478c6f9ac4cd1ae095cbfb7b0000000"], 0x11dc}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=0x0, @ANYRES32=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x40c0085) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=0x0, @ANYRES32=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x40c0085)
recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (async)
recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

1m53.613498895s ago: executing program 8 (id=3845):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$auto_SO_RXQ_OVFL(r3, 0x1, 0x28, 0x0, 0x7)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

1m52.686394862s ago: executing program 8 (id=3849):
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r0, 0x0, 0x39b8)

1m51.90420892s ago: executing program 8 (id=3850):
mmap$auto(0x0, 0x4, 0xdf, 0x9b73, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
sysinfo$auto(0x0) (async)
ioctl$auto(0x3, 0x1277, 0x38)

1m51.500170951s ago: executing program 8 (id=3851):
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0)
socket(0x2, 0x1, 0x106)
r2 = pipe$auto(&(0x7f0000000500))
flock$auto(0xffffffffffffffff, 0x9)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = clone$auto(0x18, 0x200, &(0x7f0000000300)=0x5, &(0x7f0000000340)=0x3, 0x7)
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x1b0, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x19c, 0x2, 0x0, 0x1, [@generic="118da9009b736a841b4e667de77be6d141e9e1c8dfa12fb8a60323697ac55a145dd29d9c895a1ea468785b2a038a5e24288eb69bf2849a8f605c3651e921761bfd27e427cf38c0913dfb9a86684e74d2e19559f6425f13c0f450669c9a14675cc90884fe32f295bcae0811eff2a91676b5f227fbf25cf12ea8dda5ab638bf628654a29a44549c324ace0d3fcbcc40d23f2ea4d115fe4ca2192d5ce852b", @typed={0x8f, 0x13c, 0x0, 0x0, @binary="9be7aa1b5bc8ec1c4fa2e03f0c4ec6a658168e61c66e6cded9cf5a590eb7fe97e50d6353daf0bbd1716b2d5c83e900432be28d0742cd92f2b3e6b346db2294be3a11fb0b5c72c9a182a40a3269ed914f0e95e8f4d8466a7becff41b7de467bf1be07bd04162ea4d2a2b59ddb269e89ecde72765adba31a9f4e5dc2e1fd9166f6ccd9219aac0d111bf97b59"}, @nested={0x20, 0xaf, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x8, 0xb9, 0x0, 0x0, @uid}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x138, 0x0, 0x0, @pid=r3}]}, @generic="aa38104107618dab63c7382e7daf08fc7806b097added2913f8351f8b7aacea9593c7f1fcf246a92903c53de01d25bdb8726bf9b2398843aea668dc440b2f1eca866e608d67a663d80f9f4"]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

1m49.921702906s ago: executing program 8 (id=3855):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff)
mlockall$auto(0x7)
memfd_create$auto(0x0, 0xb)
socket(0x22, 0x2, 0x4)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x468, 0xa, 0x0, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x46, 0x0, 0x3)
r1 = userfaultfd$auto(0x81)
connect$auto(r1, 0x0, 0x6f)
mlockall$auto(0x3)

1m39.51305862s ago: executing program 37 (id=3843):
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae78, 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
read$auto(r1, 0x0, 0x800) (async)
read$auto(r1, 0x0, 0x800)
write$auto(0x3, 0x0, 0xfffffdef) (async)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x28, 0x1, 0x0) (async)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x1, 0x0) (async)
io_uring_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x3, 0x1) (async)
r3 = socket(0x1d, 0x3, 0x1)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0)
prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0xffffffffffffffff, 0x401, 0x4) (async)
r5 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x4, 0x2, 0xffffffffffffffff, 0x401, 0x4)
ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000280)={0x3, &(0x7f00000001c0)={0x7, 0x6, 0xc8, @raw=0x80}})
ioctl$auto(r4, 0xc0045627, r4)
r6 = socket(0x10, 0x2, 0x0)
r7 = gettid()
syz_open_procfs$namespace(r7, &(0x7f0000000180)='ns/time\x00')
sendmsg$auto_IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc110600", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="3eddc99bcc9008cebd60632e0840064de571260c0c00390002000000000000001400bd00fc00000000000000000000000000000028eb79249bf6e1dd4d3062338ab3caec5aeb221c73fc49e208e7374b97a93ebc08468d25e478c6f9ac4cd1ae095cbfb7b0000000"], 0x11dc}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=0x0, @ANYRES32=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x40c0085) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES8=0x0, @ANYRES32=r6], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x40c0085)
recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (async)
recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)

1m34.398428265s ago: executing program 38 (id=3855):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff)
mlockall$auto(0x7)
memfd_create$auto(0x0, 0xb)
socket(0x22, 0x2, 0x4)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x468, 0xa, 0x0, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x46, 0x0, 0x3)
r1 = userfaultfd$auto(0x81)
connect$auto(r1, 0x0, 0x6f)
mlockall$auto(0x3)

8.232464849s ago: executing program 9 (id=4116):
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x4f64a1d2)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r1, 0x5646, r1)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28)
read$auto(r1, &(0x7f0000000000)='/proc/asound/card1/cable#1\x00', 0xffffffff)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="eb952eeae789f6d1de3622e8", 0xfc2}, 0x2, &(0x7f0000000280), 0x80000000, 0xa505}, 0xf454}, 0x7, 0x4008)

7.688924661s ago: executing program 9 (id=4118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0xd}]}]}, 0x3c}, 0x1, 0x0, 0x700000000000000, 0x4004040}, 0xc800)

7.426859879s ago: executing program 9 (id=4120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r7 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r7, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
fcntl$auto(r6, 0xfffffffd, 0x0)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

7.256964584s ago: executing program 6 (id=4121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r7 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r7, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
fcntl$auto(r6, 0xfffffffd, 0x0)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

7.002870369s ago: executing program 0 (id=4122):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8})

6.033176309s ago: executing program 6 (id=4124):
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0) (async)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0)
semop$auto(0x5, &(0x7f0000000040)={0x8, 0x5, 0xc0ce}, 0x4)
waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x7f, &(0x7f0000000140)={{0x8, 0x61be}, {0xc18, 0x816f}, 0x7, 0x6, 0x5, 0xfff, 0x9, 0x3000000, 0xbac7, 0x80, 0x2, 0x79, 0x0, 0x5, 0x1}) (async)
waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x7f, &(0x7f0000000140)={{0x8, 0x61be}, {0xc18, 0x816f}, 0x7, 0x6, 0x5, 0xfff, 0x9, 0x3000000, 0xbac7, 0x80, 0x2, 0x79, 0x0, 0x5, 0x1})
ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000200)={0x9, 0x8001, 0x6, 0x4386, 0x568, 0xffffffffffffffff})
getsid$auto(0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, 0x0, 0x7, 0x8) (async)
sendmmsg$auto(r0, 0x0, 0x7, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0xfe) (async)
socket(0x2, 0x1, 0xfe)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
socket(0x2, 0x6, 0x106)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0xa, 0xffb, 0x8000040008011, 0x3, 0xfffffffffffff000)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x20, 0x2000b}, 0x800009}, 0x5, 0x20000000) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x20, 0x2000b}, 0x800009}, 0x5, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid() (async)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async)
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto_BLKIOMIN(r3, 0x1278, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)

5.773809717s ago: executing program 9 (id=4125):
mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
open(0x0, 0x161342, 0x100)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={@inferred=r2, 0x9, 0x3, @unused, @devid=0xf})
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000)
prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6)
mmap$auto(0x0, 0x4020009, 0xdf, 0x19, 0xffffffffffffffff, 0x8000)
socket(0x11, 0x3, 0x6)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0)
pread64$auto(r4, 0x0, 0x8, 0xffff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0x10001, 0xc91)
madvise$auto(0x0, 0x200007, 0x19)

5.773035013s ago: executing program 0 (id=4126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "4821c0794c45efd5bfcc5766b15ddf7bc93f6bffa9525158845acc8577b67ed4", @raw=0xf4})
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x10141, 0x8a)
read$auto(r4, 0x0, 0xb4d3)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x40028)
write$auto(0x3, 0x0, 0xffd8)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

5.082088666s ago: executing program 5 (id=4128):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80044944, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb)
getpgrp(0x0)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
lsm_set_self_attr$auto(0xb, &(0x7f0000000200)={0x7, 0x7, 0xffffffffffff7fff}, 0x5, 0x1)
ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$auto_proc_single_file_operations_base(r2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x64, 0x0, 0xfff)
ioctl$auto(0x3, 0xae60, r3)
ioctl$auto(0x3, 0x4008ae48, 0x38)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x6000, 0x0)

4.915307264s ago: executing program 6 (id=4129):
socketpair$auto(0x1, 0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x1000}, 0x3)

4.29087354s ago: executing program 5 (id=4130):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

4.279177654s ago: executing program 0 (id=4131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket(0xa, 0x2, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r7 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r7, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
fcntl$auto(r6, 0xfffffffd, 0x0)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

3.700298744s ago: executing program 5 (id=4132):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/comm\x00', 0x2900, 0x0)
close_range$auto(r0, 0x8, 0x0)
adjtimex$auto(0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88c5)
mmap$auto(0xf729, 0x20009, 0x4000010000df, 0xeb1, 0x401, 0x8400)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0)
read$auto(0x3, 0x0, 0x80)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto(r2, 0x0, 0x9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0)
read$auto_proc_pid_maps_operations_internal(r3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r4, &(0x7f00000001c0)='\\\x00', 0x8000)

3.666782317s ago: executing program 6 (id=4133):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/comm\x00', 0x2900, 0x0)
close_range$auto(r0, 0x8, 0x0)
adjtimex$auto(0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88c5)
mmap$auto(0xf729, 0x20009, 0x4000010000df, 0xeb1, 0x401, 0x8400)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0)
read$auto(0x3, 0x0, 0x80)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto(r2, 0x0, 0x9)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0)
read$auto_proc_pid_maps_operations_internal(r3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r4, &(0x7f00000001c0)='\\\x00', 0x8000)

3.433573461s ago: executing program 9 (id=4134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r2, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc)
setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r7 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r7, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
fcntl$auto(r6, 0xfffffffd, 0x0)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)

2.629756583s ago: executing program 0 (id=4135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x2000a, 0x4008000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
ioctl$auto(r1, 0xc1205531, r2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10e45e78fd8e3d8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x10000080, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0)
ioctl$auto(0x3, 0x40104d00, r3)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={<r4=>0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x2, 0x0)
write$auto(r6, &(0x7f0000000080)='\'Vd1L\xff\x15~\x8f\xf8\xfe\xce\xda\xd3q^L\xd1\x8d\x96]\x0f;\xb6\xd0\\\xbft0=\xf8Q#\xc1&\'JM6\xad\xc6\x02\x7f>\x05j\x9dL\x95a\xb4\xc7\xfd/\xea', 0x8)
socketpair$auto(0xfffffff3, 0x5, 0x2, &(0x7f0000000380)=0xb)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r7, 0x10000000084, 0x3, 0x0, 0x1)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r2, 0x7a9, 0x0)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000001c0)={{@inferred=r4, 0x100110d, 0x10003, 0x6, "e946cbb766439daa1ee1aa00000002e18000000000000000001887e8650e070100f2ffffff00000000000400", @raw=0x7}, 0x6, 0x7, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b504d81592f6ab606c276852295e00af49e6f96e768034"})
ioctl$auto_IMADDTIMER(r2, 0x80044940, &(0x7f0000000300)=0x800)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r9, 0x4, 0x8)

1.996816291s ago: executing program 6 (id=4136):
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
io_uring_setup$auto(0x6, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x468, 0xa, 0x0, 0x0)
mlockall$auto(0x3)

1.578966362s ago: executing program 5 (id=4137):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi17\x00', 0x280, 0x0)
ioctl$auto(r0, 0xc0905664, 0x38)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x3, 0x0, 0x8009)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000200)={0x1a6800080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
kill$auto(0x0, 0x21)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @fd=r1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0xf, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r3 = socket(0xa, 0x801, 0x106)
ioctl$auto(r3, 0x890c, 0x9)

1.529110467s ago: executing program 0 (id=4138):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x2000, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffc)
prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
capset$auto(&(0x7f0000000340)={0x19980330}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x7, 0x0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010900000000ffdbdf250500dd008dcebdf4ac55bbd28e82e45ba0c92e76f0a526bf89"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80000)
mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804)
open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8)
socket(0xa, 0x5, 0x94)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

1.163857358s ago: executing program 9 (id=4139):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x300, 0x1, 0x101, 0x0, &(0x7f0000000040)})
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x10, 0x1, 0x3, 0x3, 0x15f4da0a, 0x0, 0x40000006, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x5, 0x53, 0x6d3e, 0x1, 0x10002, 0x3]}, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x800000000000005)
madvise$auto(0x2e, 0x200007, 0x5)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
socket(0xa, 0x80803, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/subpagesize\x00', 0x80000, 0x0)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x3, 0x9)

678.527554ms ago: executing program 5 (id=4140):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

281.25457ms ago: executing program 0 (id=4141):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

206.388725ms ago: executing program 6 (id=4142):
r0 = socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x6a)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55)
r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mouse0\x00', 0x131a00, 0x0)
sendmmsg$auto(r1, 0x0, 0x80009a4, 0x7)
setsockopt$auto(r0, 0x0, 0x13, 0x0, 0x8009)
socketpair$auto(0x1, 0x2, 0x1, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
socketpair$auto(0x8, 0x3, 0xac, &(0x7f0000000000)=0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0)
write$auto(r3, &(0x7f0000000040)='\xd5\x88X\xd9\x1c\x13\xf3\x98\x94\xf2\x8c,\x11\xf2\x8f\x94\xe3a\x7fz\xd5\xbeoC\x91)\xda\x98z\x94n\xc1\xdd\xb3\xe9\xd88{K\x88\xe3I^&gq\xce\x80Lx\x91\xfb[\x02\x84\a\xa3Rl\xa7\x89f\xef=\xf8\x9c\x01\x83\x0ek\x88\x1e\xee\x17\xb3\r\xfew\xfc\xeb\t\xf9E\xc4@l\x1a\x9a\xae\xe3\x9c\x89rjc\xe8\v\x19\x86\x13\x17\x8e\x0fGdl\xe6\xc1\xb9my\x96,\xdf`\x10{\x13\xd5\xe5\xd6\xc8\r\x82\xde&\r\x9c\x1fQH', 0x2)
writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3)

0s ago: executing program 5 (id=4143):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r0, 0x0, 0x24)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = memfd_create$auto(0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0007, 0x19)
mbind$auto(0x9, 0x2091d2, 0x3, 0x0, 0x6, 0x2)
madvise$auto(0x0, 0x8000000000000000, 0x15)
write$auto(0x3, 0x0, 0xfff5)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r3 = set_tid_address$auto(&(0x7f00000002c0)=0x5)
waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000300)={@siginfo_0_0={0x5, 0x5, 0xa, @_timer={0x0, 0x1, @sival_int=0x1, 0xde}}}, 0x3, &(0x7f0000000380)={{0x3bd, 0x10001}, {0x6, 0x3}, 0x0, 0xffffffffffffffff, 0x6, 0x100, 0x96b9, 0xc548, 0x8001, 0x7, 0x5, 0x3, 0xdd, 0x76, 0x8, 0x8000})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'wg0\x00', <r4=>0x0})
bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000018c0)=@query={@target_ifindex=r4, 0x6, 0x0, 0xc, 0xffffffffffffffff, @prog_cnt=0x2, 0x0, 0xd, 0x3, 0x5, 0xffffffff}, 0x6)
sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f0000001640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000003180)={0x23dc, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x23b5, 0x18, 0x0, 0x1, [@nested={0x1193, 0x27, 0x0, 0x1, [@nested={0x15b, 0x129, 0x0, 0x1, [@nested={0x4, 0xbf}, @generic="e0f6f032ebf7e9f50e514e7c5333efdfaae3e27e5615d1e99b751dc00f1fda3ac107ca694e156aa4cc55aaa2d2fadd8973786aefd277c2e483fa0904acd348e5ae0e4e9665da31273e0fd28a50b479f5339929d5d0a5320e34b2d46b13e07ce17200d1", @generic="f1d5095ff19301988ef4af07538484ffa7aa2fc61e993528c0f680ee24f98a42d8e1f7a921ca93ddab39abd0aaa677a064be57b1123405889031e3443557973682963c07f7aa8d991829fc9dbee81e5486348da018dfd91535d43c4de48504d1fdc2f0a44842476bc5e7ef16bfa275d96dd16aaba1b1ca90581be0de0b25e1ed9912dca2a35aacbb7694be3b7834c460e89ca4ff2e8150d8c4a4dc1083e7f0ab1fa256f815d702729e25d0492c910b0e5d58092dd8b6c1099240dd4eebdf0c9b3b89043640c127e6a89fdff8ee1d2337b567fae661fe3a859867bf3208d2b19caeaa49a6005c52450491112cf3216e01"]}, @generic="4141bdc5b9c6152b45749b2163cb7627c2e133d0e74937e0cc488c2deb81df7837ec1284daef862416fc97fa32b714", @nested={0x1004, 0x129, 0x0, 0x1, [@generic="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"]}]}, @typed={0x1f, 0x8a, 0x0, 0x0, @str='/proc/thread-self/fail-nth\x00'}, @nested={0x2f, 0xc5, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x8, 0x123, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xe3}, @typed={0x4, 0x9, 0x0, 0x0, @binary}, @generic="6a685b25970fae06574b45cf01007f", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r1}, @nested={0x136, 0xe5, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @uid=0xee00}, @generic="0edc68b5750086d6f9e150648042ecf1366e0c6bc1055265755ec8e31121dec4926b543282f28a883feb1c654a", @nested={0x4, 0x90}, @generic="655bd07595dca1693812ab18cc5e9cc54cd105c22f9b37b73a1d09943c31482b7de4d3d89b32865e9de65cb6", @generic="525306d7360fb1929b3b16788087a4ea79f5e6407ed09178985287874eab6b202681628de08d96efb5502005e374dc6e589c571b5828ae1b43a82118166c8ce5eec8e6b65fc35e4cb0e521388417b14777ffa5489a3b0117eb9a35329434a27f25d8bdbdba9e1ee9085d17b0e3168b49c375c1dc1e49e53055b9a5cb58c9d673adf7d1d386cb3a4ea370846e82899988ac0bc23de3d6442c35a199c68ac4ad00df13c345479216d4afcbaedd21abe8cce6f28c5078e364340321ef096485a4355707cd943d2d03209b66f9f81e"]}, @generic="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", @typed={0x4, 0x1f}, @generic="a67e95332d7af9218b9410a13e7d595ae76d530a17595e22f210c6ec5e9bfa76e40facc35be0ba7ff545fe3cf0a2a97b9699250592564041dd84c302f5504d727d8ebfec6a7f697d1f746bb6a3cb99b9a575c54b55a1af4876722153c0caafadc5b406231059dbcaf0de6dd738efa0961eebda136145a586c9294ccc836c6eb3c4921706b811301994"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x8}]}, 0x23dc}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r5 = eventfd$auto(0x3)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001780)=""/221, 0xdd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto_SO_SNDLOWAT(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000003140)=0x8)
mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000)
r6 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r1)
sendmsg$auto_NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0xe99}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}]}, 0x2c}}, 0x4000050)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r7, 0x0, 0x1f40)
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00')
write$auto(0x3, 0x0, 0xfdef)

kernel console output (not intermixed with test programs):

 snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1191.464587][T21820] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3344'.
[ 1191.496631][T21820] netlink: 294 bytes leftover after parsing attributes in process `syz.4.3344'.
[ 1191.953385][T21831] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3345'.
[ 1193.600226][ T5827] Bluetooth: hci1: unexpected event 0x07 length: 11 < 255
[ 1196.054376][T21890] ima: policy update failed
[ 1196.086261][   T30] audit: type=1802 audit(4294975645.491:43): pid=21890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3354" res=0 errno=0
[ 1196.693682][ T5827] Bluetooth: hci3: unexpected event 0x07 length: 11 < 255
[ 1196.770135][T21910] netlink: 86 bytes leftover after parsing attributes in process `syz.6.3357'.
[ 1197.090871][T21947] netlink: 'syz.5.3362': attribute type 3 has an invalid length.
[ 1197.099840][T21924] random: crng reseeded on system resumption
[ 1197.194516][T21951] netlink: 428 bytes leftover after parsing attributes in process `syz.5.3362'.
[ 1197.238113][T21947] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3362'.
[ 1197.459884][T21930] Process accounting paused
[ 1198.176776][T21974] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1199.492320][T21981] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1203.095010][T22034] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1204.382905][T22046] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1205.725323][T22057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3384'.
[ 1205.820643][T22057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1205.846518][T22057] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1206.023410][T22057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1206.054715][T22057] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1206.426671][T22081] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1206.532159][T22085] bond0: option all_slaves_active: invalid value (cover enable write trace failed, mode=0)
[ 1206.636559][T22085] bond0: option all_slaves_active: invalid value ( (errno 9))
[ 1206.835242][T22083] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1209.693322][T22146] sp0: Synchronizing with TNC
[ 1209.720818][T22158] openvswitch: netlink: IP tunnel TTL not specified.
[ 1210.404911][T22172] random: crng reseeded on system resumption
[ 1210.815965][T22180] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3411'.
[ 1212.190294][ T5873] Process accounting resumed
[ 1213.962052][T22253] vivid-009: =================  START STATUS  =================
[ 1213.972149][T22253] vivid-009: Enable Output Cropping: true
[ 1213.977977][T22253] vivid-009: Enable Output Composing: true
[ 1214.043033][T22253] vivid-009: Enable Output Scaler: true
[ 1214.048737][T22253] vivid-009: Tx RGB Quantization Range: Automatic
[ 1214.165188][T22253] vivid-009: Transmit Mode: HDMI
[ 1214.170246][T22253] vivid-009: Hotplug Present: 0x00000000
[ 1214.182305][T22253] vivid-009: RxSense Present: 0x00000000
[ 1214.188242][T22253] vivid-009: EDID Present: 0x00000000
[ 1214.215955][T22253] vivid-009: ==================  END STATUS  ==================
[ 1215.125049][T22267] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1216.844676][T22283] ima: policy update failed
[ 1216.849438][   T30] audit: type=1802 audit(4295106738.281:44): pid=22283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3430" res=0 errno=0
[ 1216.945509][T22281] can: request_module (can-proto-0) failed.
[ 1217.593889][T22295] ima: policy update failed
[ 1217.602311][ T5827] Bluetooth: hci2: unexpected event 0x07 length: 11 < 255
[ 1217.745439][   T30] audit: type=1802 audit(4295106739.181:45): pid=22295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3433" res=0 errno=0
[ 1218.773273][T22306] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3436'.
[ 1219.536356][    T9] Process accounting resumed
[ 1221.519896][T22340] openvswitch: netlink: IP tunnel dst address not specified
[ 1223.311799][T22347] FAULT_INJECTION: forcing a failure.
[ 1223.311799][T22347] name failslab, interval 1, probability 0, space 0, times 0
[ 1223.351926][T22347] CPU: 1 UID: 0 PID: 22347 Comm: syz.6.3443 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1223.351986][T22347] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1223.352000][T22347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1223.352020][T22347] Call Trace:
[ 1223.352031][T22347]  <TASK>
[ 1223.352044][T22347]  dump_stack_lvl+0x16c/0x1f0
[ 1223.352095][T22347]  should_fail_ex+0x512/0x640
[ 1223.352140][T22347]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1223.352184][T22347]  should_failslab+0xc2/0x120
[ 1223.352227][T22347]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1223.352269][T22347]  ? alloc_unbound_pwq+0x3ff/0xe10
[ 1223.352312][T22347]  alloc_unbound_pwq+0x3ff/0xe10
[ 1223.352371][T22347]  apply_wqattrs_prepare+0x3af/0xbd0
[ 1223.352423][T22347]  apply_workqueue_attrs_locked+0x64/0xe0
[ 1223.352462][T22347]  __alloc_workqueue+0xf41/0x1810
[ 1223.352512][T22347]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1223.352573][T22347]  alloc_workqueue+0xd2/0x200
[ 1223.352634][T22347]  ? __pfx_alloc_workqueue+0x10/0x10
[ 1223.352704][T22347]  ? __pfx___debug_object_init+0x10/0x10
[ 1223.352749][T22347]  nci_register_device+0x511/0xb80
[ 1223.352791][T22347]  ? __pfx_nci_register_device+0x10/0x10
[ 1223.352837][T22347]  ? lockdep_init_map_type+0x5c/0x280
[ 1223.352889][T22347]  virtual_ncidev_open+0x141/0x220
[ 1223.352939][T22347]  ? __pfx_virtual_ncidev_open+0x10/0x10
[ 1223.352983][T22347]  misc_open+0x35a/0x420
[ 1223.353031][T22347]  ? __pfx_misc_open+0x10/0x10
[ 1223.353078][T22347]  chrdev_open+0x231/0x6a0
[ 1223.353111][T22347]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1223.353153][T22347]  ? __pfx_chrdev_open+0x10/0x10
[ 1223.353191][T22347]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 1223.353248][T22347]  do_dentry_open+0x741/0x1c10
[ 1223.353282][T22347]  ? __pfx_chrdev_open+0x10/0x10
[ 1223.353325][T22347]  vfs_open+0x82/0x3f0
[ 1223.353371][T22347]  path_openat+0x1e5e/0x2d40
[ 1223.353419][T22347]  ? __pfx_path_openat+0x10/0x10
[ 1223.353462][T22347]  do_filp_open+0x20b/0x470
[ 1223.353494][T22347]  ? __pfx_do_filp_open+0x10/0x10
[ 1223.353563][T22347]  ? alloc_fd+0x471/0x7d0
[ 1223.353625][T22347]  do_sys_openat2+0x11b/0x1d0
[ 1223.353669][T22347]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1223.353730][T22347]  __x64_sys_openat+0x174/0x210
[ 1223.353795][T22347]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1223.353841][T22347]  ? rcu_is_watching+0x12/0xc0
[ 1223.353885][T22347]  do_syscall_64+0xcd/0x230
[ 1223.353934][T22347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1223.353968][T22347] RIP: 0033:0x7f19f5f8e969
[ 1223.353995][T22347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1223.354029][T22347] RSP: 002b:00007f19f3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1223.354060][T22347] RAX: ffffffffffffffda RBX: 00007f19f61b6080 RCX: 00007f19f5f8e969
[ 1223.354082][T22347] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1223.354104][T22347] RBP: 00007f19f6010ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1223.354125][T22347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1223.354145][T22347] R13: 0000000000000000 R14: 00007f19f61b6080 R15: 00007ffe0f0476a8
[ 1223.354189][T22347]  </TASK>
[ 1223.789928][T22350] ima: policy update failed
[ 1223.812276][   T30] audit: type=1802 audit(4295106745.231:46): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3444" res=0 errno=0
[ 1225.092458][T22372] ubi4: attaching mtd1
[ 1225.098115][T22372] ubi4: scanning is finished
[ 1225.115899][T22355] Process accounting resumed
[ 1225.141983][T22372] ubi4: empty MTD device detected
[ 1225.164250][T22372] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1225.229608][T22371] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1225.247448][T22378] openvswitch: netlink: Key type 261 is out of range max 32
[ 1225.255077][T22377] openvswitch: netlink: Key type 261 is out of range max 32
[ 1225.353566][T22372] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1226.145720][T22388] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1226.429228][T22391] FAULT_INJECTION: forcing a failure.
[ 1226.429228][T22391] name failslab, interval 1, probability 0, space 0, times 0
[ 1226.469229][T22391] CPU: 0 UID: 0 PID: 22391 Comm: syz.5.3457 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1226.469288][T22391] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1226.469302][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1226.469322][T22391] Call Trace:
[ 1226.469333][T22391]  <TASK>
[ 1226.469345][T22391]  dump_stack_lvl+0x16c/0x1f0
[ 1226.469397][T22391]  should_fail_ex+0x512/0x640
[ 1226.469442][T22391]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[ 1226.469489][T22391]  should_failslab+0xc2/0x120
[ 1226.469530][T22391]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[ 1226.469572][T22391]  ? kasprintf+0xc7/0x100
[ 1226.469628][T22391]  kvasprintf+0xbc/0x160
[ 1226.469679][T22391]  ? __pfx_kvasprintf+0x10/0x10
[ 1226.469744][T22391]  kasprintf+0xc7/0x100
[ 1226.469794][T22391]  ? __pfx_kasprintf+0x10/0x10
[ 1226.469846][T22391]  ? __is_module_percpu_address+0x1e0/0x440
[ 1226.469902][T22391]  alloc_workqueue+0x114/0x200
[ 1226.469945][T22391]  ? __pfx_alloc_workqueue+0x10/0x10
[ 1226.469996][T22391]  ? __pfx___debug_object_init+0x10/0x10
[ 1226.470040][T22391]  nci_register_device+0x511/0xb80
[ 1226.470083][T22391]  ? __pfx_nci_register_device+0x10/0x10
[ 1226.470128][T22391]  ? lockdep_init_map_type+0x5c/0x280
[ 1226.470188][T22391]  virtual_ncidev_open+0x141/0x220
[ 1226.470237][T22391]  ? __pfx_virtual_ncidev_open+0x10/0x10
[ 1226.470282][T22391]  misc_open+0x35a/0x420
[ 1226.470330][T22391]  ? __pfx_misc_open+0x10/0x10
[ 1226.470378][T22391]  chrdev_open+0x231/0x6a0
[ 1226.470410][T22391]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1226.470451][T22391]  ? __pfx_chrdev_open+0x10/0x10
[ 1226.470486][T22391]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[ 1226.470542][T22391]  do_dentry_open+0x741/0x1c10
[ 1226.470575][T22391]  ? __pfx_chrdev_open+0x10/0x10
[ 1226.470617][T22391]  vfs_open+0x82/0x3f0
[ 1226.470661][T22391]  path_openat+0x1e5e/0x2d40
[ 1226.470708][T22391]  ? __pfx_path_openat+0x10/0x10
[ 1226.470751][T22391]  do_filp_open+0x20b/0x470
[ 1226.470783][T22391]  ? __pfx_do_filp_open+0x10/0x10
[ 1226.470846][T22391]  ? alloc_fd+0x471/0x7d0
[ 1226.470908][T22391]  do_sys_openat2+0x11b/0x1d0
[ 1226.470951][T22391]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1226.471011][T22391]  __x64_sys_openat+0x174/0x210
[ 1226.471056][T22391]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1226.471103][T22391]  ? rcu_is_watching+0x12/0xc0
[ 1226.471145][T22391]  do_syscall_64+0xcd/0x230
[ 1226.471201][T22391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.471233][T22391] RIP: 0033:0x7f520e58e969
[ 1226.471258][T22391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1226.471290][T22391] RSP: 002b:00007f520f3db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1226.471322][T22391] RAX: ffffffffffffffda RBX: 00007f520e7b6080 RCX: 00007f520e58e969
[ 1226.471345][T22391] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1226.471378][T22391] RBP: 00007f520e610ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1226.471398][T22391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1226.471416][T22391] R13: 0000000000000000 R14: 00007f520e7b6080 R15: 00007ffce70bc518
[ 1226.471455][T22391]  </TASK>
[ 1226.896512][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'.
[ 1226.992268][T22398] netlink: 190 bytes leftover after parsing attributes in process `syz.4.3466'.
[ 1227.092304][   T30] audit: type=1326 audit(4295106748.531:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22397 comm="syz.4.3466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d9ab8e969 code=0x0
[ 1227.768877][T22400] could not allocate digest TFM handle 
[ 1228.431040][ T5827] Bluetooth: hci2: unexpected event 0x07 length: 11 < 255
[ 1228.431558][T22419] ima: policy update failed
[ 1228.476287][   T30] audit: type=1802 audit(4295106749.911:48): pid=22419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3463" res=0 errno=0
[ 1229.676430][T22438] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1229.727312][T22438] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1229.751325][T22438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1229.770491][T22438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1229.786416][T22438] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1230.020721][T22448] ubi4: attaching mtd1
[ 1230.063123][T22448] ubi4: scanning is finished
[ 1230.106657][T22448] ubi4: empty MTD device detected
[ 1230.135872][T22448] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1230.220398][T22448] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1231.261940][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1231.732288][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1231.812696][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1231.856048][T22492] ubi4: attaching mtd1
[ 1231.875030][T22492] ubi4: scanning is finished
[ 1231.886275][T22492] ubi4: empty MTD device detected
[ 1231.906808][T22492] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1231.997454][T22492] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1232.888826][T22515] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[ 1233.027039][T22518] ima: Unable to open file: /surit��R�y/integrity?iqa/policy (-2)
[ 1233.037141][T22517] ima: policy update failed
[ 1233.067998][   T30] audit: type=1802 audit(4295106754.501:49): pid=22517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3489" res=0 errno=0
[ 1233.109985][T22519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1233.202799][T22519] FAULT_INJECTION: forcing a failure.
[ 1233.202799][T22519] name failslab, interval 1, probability 0, space 0, times 0
[ 1233.301288][T22519] CPU: 0 UID: 0 PID: 22519 Comm: syz.3.3488 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1233.301368][T22519] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1233.301382][T22519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1233.301403][T22519] Call Trace:
[ 1233.301414][T22519]  <TASK>
[ 1233.301427][T22519]  dump_stack_lvl+0x16c/0x1f0
[ 1233.301479][T22519]  should_fail_ex+0x512/0x640
[ 1233.301538][T22519]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1233.301579][T22519]  should_failslab+0xc2/0x120
[ 1233.301621][T22519]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1233.301657][T22519]  ? find_held_lock+0x2b/0x80
[ 1233.301686][T22519]  ? __alloc_skb+0x2b2/0x380
[ 1233.301724][T22519]  __alloc_skb+0x2b2/0x380
[ 1233.301757][T22519]  ? __pfx___alloc_skb+0x10/0x10
[ 1233.301814][T22519]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1233.301865][T22519]  netlink_alloc_large_skb+0x69/0x130
[ 1233.301911][T22519]  netlink_sendmsg+0x6a1/0xdd0
[ 1233.301960][T22519]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1233.302014][T22519]  __sys_sendto+0x495/0x510
[ 1233.302048][T22519]  ? __pfx___sys_sendto+0x10/0x10
[ 1233.302095][T22519]  ? count_memcg_events_mm.constprop.0+0x138/0x340
[ 1233.302171][T22519]  __x64_sys_sendto+0xe0/0x1c0
[ 1233.302202][T22519]  ? do_syscall_64+0x91/0x230
[ 1233.302247][T22519]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1233.302309][T22519]  do_syscall_64+0xcd/0x230
[ 1233.302364][T22519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1233.302398][T22519] RIP: 0033:0x7fbd197907fc
[ 1233.302424][T22519] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[ 1233.302458][T22519] RSP: 002b:00007fbd1a589ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1233.302489][T22519] RAX: ffffffffffffffda RBX: 00007fbd1a589fc0 RCX: 00007fbd197907fc
[ 1233.302511][T22519] RDX: 0000000000000020 RSI: 00007fbd1a58a010 RDI: 0000000000000004
[ 1233.302531][T22519] RBP: 0000000000000000 R08: 00007fbd1a589f14 R09: 000000000000000c
[ 1233.302551][T22519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[ 1233.302571][T22519] R13: 00007fbd1a589f68 R14: 00007fbd1a58a010 R15: 0000000000000000
[ 1233.302612][T22519]  </TASK>
[ 1233.422775][ T5827] Bluetooth: hci2: unexpected event 0x3e length: 1020 > 260
[ 1233.522296][ T5827] Bluetooth: hci2: unexpected subevent 0x01 length: 1019 > 18
[ 1233.892171][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1233.957792][T22505] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1234.081633][T22535] random: crng reseeded on system resumption
[ 1234.155707][T22539] netlink: 190 bytes leftover after parsing attributes in process `syz.6.3492'.
[ 1234.200712][   T30] audit: type=1326 audit(4295106755.631:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22537 comm="syz.6.3492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19f5f8e969 code=0x0
[ 1234.480765][T22540] could not allocate digest TFM handle 
[ 1235.533433][T22576] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
	

	



		
		

syzkaller
syzkaller login: [ 1241.134219][T22686] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1242.395714][T22687] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1242.396992][T22687] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1242.398207][T22687] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1242.399394][T22687] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1242.561092][T22696] FAULT_INJECTION: forcing a failure.
[ 1242.561092][T22696] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1242.563535][T22696] CPU: 1 UID: 0 PID: 22696 Comm: syz.6.3526 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1242.563590][T22696] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1242.563604][T22696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1242.563624][T22696] Call Trace:
[ 1242.563635][T22696]  <TASK>
[ 1242.563647][T22696]  dump_stack_lvl+0x16c/0x1f0
[ 1242.563697][T22696]  should_fail_ex+0x512/0x640
[ 1242.563757][T22696]  get_futex_key+0x49e/0x1000
[ 1242.563797][T22696]  ? __pfx_get_futex_key+0x10/0x10
[ 1242.563830][T22696]  ? __pfx___schedule+0x10/0x10
[ 1242.563883][T22696]  futex_wait_setup+0x78/0x290
[ 1242.563935][T22696]  __futex_wait+0x266/0x3c0
[ 1242.563978][T22696]  ? __pfx___futex_wait+0x10/0x10
[ 1242.564032][T22696]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1242.564093][T22696]  futex_wait+0xe8/0x380
[ 1242.564137][T22696]  ? __pfx_futex_wait+0x10/0x10
[ 1242.564189][T22696]  ? fcntl_setlease+0x433/0x5a0
[ 1242.564238][T22696]  ? __pfx_fcntl_setlease+0x10/0x10
[ 1242.564291][T22696]  do_futex+0x229/0x350
[ 1242.564326][T22696]  ? __pfx_do_futex+0x10/0x10
[ 1242.564364][T22696]  ? do_fcntl+0x1eb/0x1590
[ 1242.564427][T22696]  __x64_sys_futex+0x1e0/0x4c0
[ 1242.564470][T22696]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1242.564506][T22696]  ? rcu_is_watching+0x12/0xc0
[ 1242.564548][T22696]  do_syscall_64+0xcd/0x230
[ 1242.564600][T22696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.564634][T22696] RIP: 0033:0x7f19f5f8e969
[ 1242.564659][T22696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1242.564693][T22696] RSP: 002b:00007f19f6d0e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1242.564731][T22696] RAX: ffffffffffffffda RBX: 00007f19f61b5fa8 RCX: 00007f19f5f8e969
[ 1242.564754][T22696] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19f61b5fa8
[ 1242.564775][T22696] RBP: 00007f19f61b5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1242.564798][T22696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f19f61b5fac
[ 1242.564819][T22696] R13: 0000000000000000 R14: 00007ffe0f0475c0 R15: 00007ffe0f0476a8
[ 1242.564861][T22696]  </TASK>
[ 1243.247693][T22711] FAULT_INJECTION: forcing a failure.
[ 1243.247693][T22711] name failslab, interval 1, probability 0, space 0, times 0
[ 1243.249587][T22711] CPU: 1 UID: 0 PID: 22711 Comm: syz.4.3529 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1243.249636][T22711] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1243.249648][T22711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1243.249668][T22711] Call Trace:
[ 1243.249679][T22711]  <TASK>
[ 1243.249690][T22711]  dump_stack_lvl+0x16c/0x1f0
[ 1243.249738][T22711]  should_fail_ex+0x512/0x640
[ 1243.249782][T22711]  ? __kvmalloc_node_noprof+0x122/0x600
[ 1243.249822][T22711]  should_failslab+0xc2/0x120
[ 1243.249859][T22711]  __kvmalloc_node_noprof+0x135/0x600
[ 1243.249893][T22711]  ? __pfx___mutex_lock+0x10/0x10
[ 1243.249936][T22711]  ? traverse.part.0.constprop.0+0x392/0x640
[ 1243.249991][T22711]  ? traverse.part.0.constprop.0+0x392/0x640
[ 1243.250038][T22711]  traverse.part.0.constprop.0+0x392/0x640
[ 1243.250101][T22711]  seq_read_iter+0x932/0x12c0
[ 1243.250165][T22711]  proc_reg_read_iter+0x21d/0x310
[ 1243.250202][T22711]  vfs_read+0x8c8/0xc70
[ 1243.250240][T22711]  ? __pfx_vfs_read+0x10/0x10
[ 1243.250267][T22711]  ? find_held_lock+0x2b/0x80
[ 1243.250323][T22711]  __x64_sys_pread64+0x1f4/0x250
[ 1243.250364][T22711]  ? __pfx___x64_sys_pread64+0x10/0x10
[ 1243.250395][T22711]  ? rcu_is_watching+0x12/0xc0
[ 1243.250437][T22711]  do_syscall_64+0xcd/0x230
[ 1243.250486][T22711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.250517][T22711] RIP: 0033:0x7f6d9ab8e969
[ 1243.250541][T22711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1243.250573][T22711] RSP: 002b:00007f6d9ba37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[ 1243.250605][T22711] RAX: ffffffffffffffda RBX: 00007f6d9adb5fa0 RCX: 00007f6d9ab8e969
[ 1243.250627][T22711] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000003
[ 1243.250647][T22711] RBP: 00007f6d9ba37090 R08: 0000000000000000 R09: 0000000000000000
[ 1243.250666][T22711] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[ 1243.250686][T22711] R13: 0000000000000000 R14: 00007f6d9adb5fa0 R15: 00007ffc557295e8
[ 1243.250729][T22711]  </TASK>
[ 1243.504007][T22715] ima: policy update failed
[ 1243.504980][   T30] audit: type=1802 audit(4295106764.941:51): pid=22715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3531" res=0 errno=0
[ 1243.583212][ T5827] Bluetooth: hci2: command 0x040f tx timeout
[ 1243.917050][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.918168][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.976950][T22718] Invalid ELF header magic: != ELF
[ 1244.166952][T22731] vivid-007: =================  START STATUS  =================
[ 1244.168078][T22731] vivid-007: Generate PTS: true
[ 1244.168793][T22731] vivid-007: Generate SCR: true
[ 1244.172776][T22731] tpg source WxH: 640x360 (Y'CbCr)
[ 1244.173613][T22731] tpg field: 1
[ 1244.175261][T22731] tpg crop: (0,0)/640x360
[ 1244.175924][T22731] tpg compose: (0,0)/640x360
[ 1244.176602][T22731] tpg colorspace: 8
[ 1244.177160][T22731] tpg transfer function: 0/0
[ 1244.177827][T22731] tpg Y'CbCr encoding: 0/0
[ 1244.214170][T22731] tpg quantization: 0/0
[ 1244.215386][T22731] tpg RGB range: 0/2
[ 1244.218926][T22731] vivid-007: ==================  END STATUS  ==================
[ 1244.452060][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1244.453091][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1244.454076][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1245.473588][T22741] random: crng reseeded on system resumption
[ 1246.277261][T22764] FAULT_INJECTION: forcing a failure.
[ 1246.277261][T22764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1246.279470][T22764] CPU: 0 UID: 0 PID: 22764 Comm: syz.3.3540 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1246.279522][T22764] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1246.279536][T22764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1246.279555][T22764] Call Trace:
[ 1246.279567][T22764]  <TASK>
[ 1246.279579][T22764]  dump_stack_lvl+0x16c/0x1f0
[ 1246.279626][T22764]  should_fail_ex+0x512/0x640
[ 1246.279677][T22764]  _copy_to_user+0x32/0xd0
[ 1246.279729][T22764]  simple_read_from_buffer+0xcb/0x170
[ 1246.279780][T22764]  proc_fail_nth_read+0x197/0x270
[ 1246.279827][T22764]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1246.279875][T22764]  ? rw_verify_area+0xcf/0x680
[ 1246.279921][T22764]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1246.279969][T22764]  vfs_read+0x1de/0xc70
[ 1246.280004][T22764]  ? __pfx___mutex_lock+0x10/0x10
[ 1246.280050][T22764]  ? __pfx_vfs_read+0x10/0x10
[ 1246.280091][T22764]  ? __fget_files+0x20e/0x3c0
[ 1246.280154][T22764]  ksys_read+0x12a/0x240
[ 1246.280184][T22764]  ? __pfx_ksys_read+0x10/0x10
[ 1246.280212][T22764]  ? rcu_is_watching+0x12/0xc0
[ 1246.280255][T22764]  do_syscall_64+0xcd/0x230
[ 1246.280303][T22764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1246.280335][T22764] RIP: 0033:0x7fbd1978d37c
[ 1246.280367][T22764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1246.280398][T22764] RSP: 002b:00007fbd1a5cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1246.280427][T22764] RAX: ffffffffffffffda RBX: 00007fbd199b5fa0 RCX: 00007fbd1978d37c
[ 1246.280449][T22764] RDX: 000000000000000f RSI: 00007fbd1a5cd0a0 RDI: 0000000000000004
[ 1246.280469][T22764] RBP: 00007fbd1a5cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1246.280489][T22764] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[ 1246.280509][T22764] R13: 0000000000000000 R14: 00007fbd199b5fa0 R15: 00007ffe499b91b8
[ 1246.280551][T22764]  </TASK>
[ 1246.359849][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'.
[ 1246.377008][T22768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1246.378521][T22768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1249.056568][T22802] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1250.713463][T22823] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1251.599919][T22843] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1251.627298][T22843] FAULT_INJECTION: forcing a failure.
[ 1251.627298][T22843] name failslab, interval 1, probability 0, space 0, times 0
[ 1251.660946][T22843] CPU: 1 UID: 0 PID: 22843 Comm: syz.5.3560 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1251.661007][T22843] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1251.661021][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1251.661041][T22843] Call Trace:
[ 1251.661052][T22843]  <TASK>
[ 1251.661065][T22843]  dump_stack_lvl+0x16c/0x1f0
[ 1251.661116][T22843]  should_fail_ex+0x512/0x640
[ 1251.661162][T22843]  ? __kvmalloc_node_noprof+0x122/0x600
[ 1251.661200][T22843]  should_failslab+0xc2/0x120
[ 1251.661238][T22843]  __kvmalloc_node_noprof+0x135/0x600
[ 1251.661273][T22843]  ? io_alloc_cache_init+0x33/0x170
[ 1251.661311][T22843]  ? io_alloc_cache_init+0x33/0x170
[ 1251.661340][T22843]  io_alloc_cache_init+0x33/0x170
[ 1251.661375][T22843]  io_uring_setup+0x5e1/0x1ff0
[ 1251.661421][T22843]  ? __pfx_io_uring_setup+0x10/0x10
[ 1251.661461][T22843]  ? do_futex+0x122/0x350
[ 1251.661499][T22843]  ? __pfx_do_futex+0x10/0x10
[ 1251.661539][T22843]  ? __pfx___might_resched+0x10/0x10
[ 1251.661593][T22843]  ? rcu_is_watching+0x12/0xc0
[ 1251.661631][T22843]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1251.661676][T22843]  do_syscall_64+0xcd/0x230
[ 1251.661723][T22843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.661769][T22843] RIP: 0033:0x7f520e58e969
[ 1251.661794][T22843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1251.661831][T22843] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 1251.661868][T22843] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1251.661891][T22843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 1251.661912][T22843] RBP: 00007f520e610ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1251.661932][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1251.661951][T22843] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1251.661991][T22843]  </TASK>
[ 1251.858490][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1253.130089][T22865] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1253.540830][T22876] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1253.623974][T22877] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3568'.
[ 1254.005214][T22889] FAULT_INJECTION: forcing a failure.
[ 1254.005214][T22889] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.021261][T22889] CPU: 1 UID: 0 PID: 22889 Comm: syz.3.3570 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1254.021313][T22889] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1254.021326][T22889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1254.021344][T22889] Call Trace:
[ 1254.021355][T22889]  <TASK>
[ 1254.021367][T22889]  dump_stack_lvl+0x16c/0x1f0
[ 1254.021415][T22889]  should_fail_ex+0x512/0x640
[ 1254.021457][T22889]  ? fs_reclaim_acquire+0xae/0x150
[ 1254.021504][T22889]  ? tomoyo_encode2+0x100/0x3e0
[ 1254.021544][T22889]  should_failslab+0xc2/0x120
[ 1254.021592][T22889]  __kmalloc_noprof+0xd2/0x510
[ 1254.021631][T22889]  ? d_absolute_path+0x136/0x1a0
[ 1254.021673][T22889]  tomoyo_encode2+0x100/0x3e0
[ 1254.021715][T22889]  tomoyo_encode+0x29/0x50
[ 1254.021755][T22889]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1254.021812][T22889]  tomoyo_path_number_perm+0x245/0x580
[ 1254.021869][T22889]  ? tomoyo_path_number_perm+0x237/0x580
[ 1254.021909][T22889]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1254.021961][T22889]  ? find_held_lock+0x2b/0x80
[ 1254.022024][T22889]  ? fd_install+0x244/0x750
[ 1254.022071][T22889]  ? hook_file_ioctl_common+0x145/0x410
[ 1254.022126][T22889]  security_file_ioctl+0x9b/0x240
[ 1254.022167][T22889]  __x64_sys_ioctl+0xb7/0x200
[ 1254.022213][T22889]  do_syscall_64+0xcd/0x230
[ 1254.022260][T22889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.022292][T22889] RIP: 0033:0x7fbd1978e969
[ 1254.022316][T22889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1254.022348][T22889] RSP: 002b:00007fbd1a5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1254.022379][T22889] RAX: ffffffffffffffda RBX: 00007fbd199b5fa0 RCX: 00007fbd1978e969
[ 1254.022399][T22889] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004
[ 1254.022418][T22889] RBP: 00007fbd1a5cd090 R08: 0000000000000000 R09: 0000000000000000
[ 1254.022437][T22889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1254.022456][T22889] R13: 0000000000000000 R14: 00007fbd199b5fa0 R15: 00007ffe499b91b8
[ 1254.022496][T22889]  </TASK>
[ 1254.234058][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1254.291508][T22889] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1254.760659][T22895] kernel read not supported for file /set_event_notrace_pid (pid: 22895 comm: syz.3.3571)
[ 1254.773595][   T30] audit: type=1800 audit(4295106776.201:52): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3571" name="set_event_notrace_pid" dev="tracefs" ino=27 res=0 errno=0
[ 1255.309613][T22901] Process accounting paused
[ 1255.505546][T22909] FAULT_INJECTION: forcing a failure.
[ 1255.505546][T22909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1255.521936][T22909] CPU: 1 UID: 0 PID: 22909 Comm: syz.3.3575 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1255.521990][T22909] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1255.522004][T22909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1255.522022][T22909] Call Trace:
[ 1255.522033][T22909]  <TASK>
[ 1255.522045][T22909]  dump_stack_lvl+0x16c/0x1f0
[ 1255.522091][T22909]  should_fail_ex+0x512/0x640
[ 1255.522141][T22909]  _copy_to_user+0x32/0xd0
[ 1255.522200][T22909]  simple_read_from_buffer+0xcb/0x170
[ 1255.522251][T22909]  proc_fail_nth_read+0x197/0x270
[ 1255.522295][T22909]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1255.522342][T22909]  ? rw_verify_area+0xcf/0x680
[ 1255.522386][T22909]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1255.522428][T22909]  vfs_read+0x1de/0xc70
[ 1255.522462][T22909]  ? __pfx___mutex_lock+0x10/0x10
[ 1255.522504][T22909]  ? __pfx_vfs_read+0x10/0x10
[ 1255.522544][T22909]  ? __fget_files+0x20e/0x3c0
[ 1255.522605][T22909]  ksys_read+0x12a/0x240
[ 1255.522634][T22909]  ? __pfx_ksys_read+0x10/0x10
[ 1255.522676][T22909]  do_syscall_64+0xcd/0x230
[ 1255.522724][T22909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.522756][T22909] RIP: 0033:0x7fbd1978d37c
[ 1255.522781][T22909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1255.522812][T22909] RSP: 002b:00007fbd1a5ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1255.522843][T22909] RAX: ffffffffffffffda RBX: 00007fbd199b6080 RCX: 00007fbd1978d37c
[ 1255.522863][T22909] RDX: 000000000000000f RSI: 00007fbd1a5ac0a0 RDI: 0000000000000004
[ 1255.522881][T22909] RBP: 00007fbd1a5ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1255.522901][T22909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1255.522919][T22909] R13: 0000000000000001 R14: 00007fbd199b6080 R15: 00007ffe499b91b8
[ 1255.522960][T22909]  </TASK>
[ 1255.721144][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1256.044669][T22898] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1256.052391][T22898] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1256.058634][T22898] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1256.082162][T22898] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1257.013471][ T5832] Bluetooth: hci2: command 0x040f tx timeout
[ 1257.883215][   T30] audit: type=1800 audit(4295106779.321:53): pid=22951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3586" name="version" dev="configfs" ino=88909 res=0 errno=0
[ 1257.900522][T22956] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1258.132042][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1258.132123][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1258.140873][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1259.391523][T22957] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1259.420345][T22957] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1259.442982][T22957] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1259.461673][T22957] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1259.734081][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3592'.
[ 1260.053800][T22968] Bluetooth: hci2: command 0x040f tx timeout
[ 1260.083136][T23003] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1260.693643][T23031] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1261.496659][T22968] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1261.496835][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1261.510801][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1261.593543][T23052] ubi4: attaching mtd1
[ 1261.639061][T23052] ubi4: scanning is finished
[ 1261.677580][T23052] ubi4: empty MTD device detected
[ 1261.692886][T23052] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1261.762346][T23052] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1261.922690][T23059] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1262.004871][T23056] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1262.021176][T23056] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1262.232491][T23066] FAULT_INJECTION: forcing a failure.
[ 1262.232491][T23066] name failslab, interval 1, probability 0, space 0, times 0
[ 1262.276614][T23066] CPU: 0 UID: 0 PID: 23066 Comm: syz.6.3607 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1262.276669][T23066] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1262.276682][T23066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1262.276701][T23066] Call Trace:
[ 1262.276712][T23066]  <TASK>
[ 1262.276725][T23066]  dump_stack_lvl+0x16c/0x1f0
[ 1262.276773][T23066]  should_fail_ex+0x512/0x640
[ 1262.276815][T23066]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1262.276869][T23066]  should_failslab+0xc2/0x120
[ 1262.276907][T23066]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1262.276959][T23066]  ? bpf_lsm_capable+0x9/0x10
[ 1262.276992][T23066]  ? pagemap_read+0x296/0x890
[ 1262.277042][T23066]  pagemap_read+0x296/0x890
[ 1262.277092][T23066]  ? __mutex_trylock_common+0xe9/0x250
[ 1262.277137][T23066]  ? __pfx_pagemap_read+0x10/0x10
[ 1262.277193][T23066]  ? rw_verify_area+0xcf/0x680
[ 1262.277236][T23066]  ? __pfx_pagemap_read+0x10/0x10
[ 1262.277285][T23066]  vfs_read+0x1de/0xc70
[ 1262.277321][T23066]  ? __pfx___mutex_lock+0x10/0x10
[ 1262.277364][T23066]  ? __pfx_vfs_read+0x10/0x10
[ 1262.277405][T23066]  ? __fget_files+0x20e/0x3c0
[ 1262.277466][T23066]  ksys_read+0x12a/0x240
[ 1262.277495][T23066]  ? __pfx_ksys_read+0x10/0x10
[ 1262.277521][T23066]  ? rcu_is_watching+0x12/0xc0
[ 1262.277574][T23066]  do_syscall_64+0xcd/0x230
[ 1262.277621][T23066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1262.277653][T23066] RIP: 0033:0x7f19f5f8e969
[ 1262.277678][T23066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1262.277709][T23066] RSP: 002b:00007f19f6d0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1262.277738][T23066] RAX: ffffffffffffffda RBX: 00007f19f61b5fa0 RCX: 00007f19f5f8e969
[ 1262.277759][T23066] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1262.277776][T23066] RBP: 00007f19f6d0e090 R08: 0000000000000000 R09: 0000000000000000
[ 1262.277795][T23066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1262.277813][T23066] R13: 0000000000000000 R14: 00007f19f61b5fa0 R15: 00007ffe0f0476a8
[ 1262.277873][T23066]  </TASK>
[ 1262.869106][T23068] random: crng reseeded on system resumption
[ 1263.768343][T23093] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1266.361001][T23130] CIFS mount error: No usable UNC path provided in device string!
[ 1266.361001][T23130] 
[ 1266.381944][T23130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1266.781622][T23122] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1267.973420][T23157] FAULT_INJECTION: forcing a failure.
[ 1267.973420][T23157] name failslab, interval 1, probability 0, space 0, times 0
[ 1267.988632][T23157] CPU: 0 UID: 0 PID: 23157 Comm: syz.5.3627 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1267.988684][T23157] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1267.988696][T23157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1267.988715][T23157] Call Trace:
[ 1267.988725][T23157]  <TASK>
[ 1267.988738][T23157]  dump_stack_lvl+0x16c/0x1f0
[ 1267.988787][T23157]  should_fail_ex+0x512/0x640
[ 1267.988830][T23157]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1267.988870][T23157]  should_failslab+0xc2/0x120
[ 1267.988910][T23157]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1267.988943][T23157]  ? __pfx___might_resched+0x10/0x10
[ 1267.988978][T23157]  ? __anon_vma_prepare+0xae/0x5e0
[ 1267.989016][T23157]  __anon_vma_prepare+0xae/0x5e0
[ 1267.989067][T23157]  __vmf_anon_prepare+0x11c/0x240
[ 1267.989115][T23157]  do_wp_page+0x11a6/0x58e0
[ 1267.989172][T23157]  ? __pfx_do_wp_page+0x10/0x10
[ 1267.989222][T23157]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1267.989269][T23157]  ? ___pte_offset_map+0x1bc/0x540
[ 1267.989323][T23157]  __handle_mm_fault+0x1ada/0x2a40
[ 1267.989369][T23157]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1267.989426][T23157]  ? find_vma+0xbf/0x140
[ 1267.989467][T23157]  ? __pfx_find_vma+0x10/0x10
[ 1267.989516][T23157]  handle_mm_fault+0x3fe/0xad0
[ 1267.989556][T23157]  do_user_addr_fault+0x7a6/0x1370
[ 1267.989593][T23157]  ? rcu_is_watching+0x12/0xc0
[ 1267.989627][T23157]  exc_page_fault+0x5c/0xc0
[ 1267.989670][T23157]  asm_exc_page_fault+0x26/0x30
[ 1267.989701][T23157] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1267.989733][T23157] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1267.989763][T23157] RSP: 0018:ffffc9000e177bf0 EFLAGS: 00050206
[ 1267.989787][T23157] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000
[ 1267.989805][T23157] RDX: 0000000000000000 RSI: ffff888079880000 RDI: 0000000000000000
[ 1267.989825][T23157] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100f3101ff
[ 1267.989844][T23157] R10: ffff888079880fff R11: 0000000000000000 R12: ffff888079880000
[ 1267.989865][T23157] R13: 0000000000001000 R14: 00007ffffffff000 R15: 0000000000000000
[ 1267.989905][T23157]  _copy_to_user+0xbb/0xd0
[ 1267.989957][T23157]  pagemap_read+0x52c/0x890
[ 1267.990011][T23157]  ? __pfx_pagemap_read+0x10/0x10
[ 1267.990080][T23157]  ? rw_verify_area+0xcf/0x680
[ 1267.990123][T23157]  ? __pfx_pagemap_read+0x10/0x10
[ 1267.990173][T23157]  vfs_read+0x1de/0xc70
[ 1267.990208][T23157]  ? __pfx___mutex_lock+0x10/0x10
[ 1267.990270][T23157]  ? __pfx_vfs_read+0x10/0x10
[ 1267.990312][T23157]  ? __fget_files+0x20e/0x3c0
[ 1267.990377][T23157]  ksys_read+0x12a/0x240
[ 1267.990407][T23157]  ? __pfx_ksys_read+0x10/0x10
[ 1267.990435][T23157]  ? rcu_is_watching+0x12/0xc0
[ 1267.990476][T23157]  do_syscall_64+0xcd/0x230
[ 1267.990525][T23157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.990558][T23157] RIP: 0033:0x7f520e58e969
[ 1267.990582][T23157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1267.990613][T23157] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1267.990640][T23157] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1267.990661][T23157] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1267.990681][T23157] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.990701][T23157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1267.990721][T23157] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1267.990764][T23157]  </TASK>
[ 1268.031348][T23158] netlink: zone id is out of range
[ 1268.424770][T23163] ima: policy update failed
[ 1268.471295][T23158] netlink: zone id is out of range
[ 1268.481152][T23158] netlink: zone id is out of range
[ 1268.481778][   T30] audit: type=1802 audit(4295106789.881:54): pid=23163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3638" res=0 errno=0
[ 1268.510254][T23158] netlink: zone id is out of range
[ 1268.544194][T23158] netlink: zone id is out of range
[ 1268.654478][T23158] netlink: zone id is out of range
[ 1268.659676][T23158] netlink: zone id is out of range
[ 1268.711407][T23158] netlink: zone id is out of range
[ 1268.768042][T23158] netlink: zone id is out of range
[ 1268.905693][T23158] netlink: zone id is out of range
[ 1269.261765][T23177] kernel read not supported for file /set_event_notrace_pid (pid: 23177 comm: syz.4.3632)
[ 1269.318422][   T30] audit: type=1800 audit(4295106790.751:55): pid=23177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3632" name="set_event_notrace_pid" dev="tracefs" ino=27 res=0 errno=0
[ 1269.801614][T23190] Invalid ELF header magic: != ELF
[ 1269.931241][T23189] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3634'.
[ 1272.122570][T23227] ubi4: attaching mtd1
[ 1272.187825][T23227] ubi4: scanning is finished
[ 1272.255426][T23226] netlink: 'syz.6.3646': attribute type 11 has an invalid length.
[ 1272.279508][T23227] ubi4: empty MTD device detected
[ 1272.284935][T23227] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1272.451035][T23227] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1273.789277][   T55] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18
[ 1274.290924][T23260] blktrace: Concurrent blktraces are not allowed on mtdblock0
[ 1274.651066][T23271] FAULT_INJECTION: forcing a failure.
[ 1274.651066][T23271] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1274.702058][T23271] CPU: 0 UID: 0 PID: 23271 Comm: syz.5.3656 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1274.702117][T23271] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1274.702131][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1274.702149][T23271] Call Trace:
[ 1274.702160][T23271]  <TASK>
[ 1274.702172][T23271]  dump_stack_lvl+0x16c/0x1f0
[ 1274.702222][T23271]  should_fail_ex+0x512/0x640
[ 1274.702273][T23271]  should_fail_alloc_page+0xe7/0x130
[ 1274.702316][T23271]  prepare_alloc_pages+0x3c2/0x610
[ 1274.702382][T23271]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[ 1274.702421][T23271]  ? arch_stack_walk+0xa6/0x100
[ 1274.702466][T23271]  ? __lock_acquire+0xaa4/0x1ba0
[ 1274.702512][T23271]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1274.702565][T23271]  ? __lock_acquire+0xaa4/0x1ba0
[ 1274.702613][T23271]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1274.702659][T23271]  ? policy_nodemask+0xea/0x4e0
[ 1274.702701][T23271]  alloc_pages_mpol+0x1fb/0x550
[ 1274.702748][T23271]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1274.702791][T23271]  ? __anon_vma_prepare+0x2db/0x5e0
[ 1274.702831][T23271]  folio_alloc_mpol_noprof+0x36/0x2f0
[ 1274.702878][T23271]  vma_alloc_folio_noprof+0xed/0x1e0
[ 1274.702921][T23271]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1274.702963][T23271]  ? __anon_vma_prepare+0x2e2/0x5e0
[ 1274.703006][T23271]  do_wp_page+0x1282/0x58e0
[ 1274.703064][T23271]  ? __pfx_do_wp_page+0x10/0x10
[ 1274.703115][T23271]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1274.703158][T23271]  ? ___pte_offset_map+0x1bc/0x540
[ 1274.703209][T23271]  __handle_mm_fault+0x1ada/0x2a40
[ 1274.703254][T23271]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1274.703309][T23271]  ? find_vma+0xbf/0x140
[ 1274.703351][T23271]  ? __pfx_find_vma+0x10/0x10
[ 1274.703400][T23271]  handle_mm_fault+0x3fe/0xad0
[ 1274.703440][T23271]  do_user_addr_fault+0x7a6/0x1370
[ 1274.703476][T23271]  ? rcu_is_watching+0x12/0xc0
[ 1274.703510][T23271]  exc_page_fault+0x5c/0xc0
[ 1274.703552][T23271]  asm_exc_page_fault+0x26/0x30
[ 1274.703583][T23271] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1274.703616][T23271] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1274.703645][T23271] RSP: 0018:ffffc9000f0e7bf0 EFLAGS: 00050206
[ 1274.703671][T23271] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000
[ 1274.703690][T23271] RDX: 0000000000000000 RSI: ffff888063ed4000 RDI: 0000000000000000
[ 1274.703716][T23271] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100c7da9ff
[ 1274.703735][T23271] R10: ffff888063ed4fff R11: 0000000000000000 R12: ffff888063ed4000
[ 1274.703755][T23271] R13: 0000000000001000 R14: 00007ffffffff000 R15: 0000000000000000
[ 1274.703796][T23271]  _copy_to_user+0xbb/0xd0
[ 1274.703847][T23271]  pagemap_read+0x52c/0x890
[ 1274.703902][T23271]  ? __pfx_pagemap_read+0x10/0x10
[ 1274.703959][T23271]  ? rw_verify_area+0xcf/0x680
[ 1274.704004][T23271]  ? __pfx_pagemap_read+0x10/0x10
[ 1274.704051][T23271]  vfs_read+0x1de/0xc70
[ 1274.704086][T23271]  ? __pfx___mutex_lock+0x10/0x10
[ 1274.704130][T23271]  ? __pfx_vfs_read+0x10/0x10
[ 1274.704170][T23271]  ? __fget_files+0x20e/0x3c0
[ 1274.704230][T23271]  ksys_read+0x12a/0x240
[ 1274.704258][T23271]  ? __pfx_ksys_read+0x10/0x10
[ 1274.704284][T23271]  ? rcu_is_watching+0x12/0xc0
[ 1274.704324][T23271]  do_syscall_64+0xcd/0x230
[ 1274.704369][T23271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1274.704399][T23271] RIP: 0033:0x7f520e58e969
[ 1274.704423][T23271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1274.704452][T23271] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1274.704480][T23271] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1274.704500][T23271] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1274.704519][T23271] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1274.704538][T23271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1274.704557][T23271] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1274.704598][T23271]  </TASK>
[ 1275.799549][T23272] kexec: Could not allocate control_code_buffer
[ 1276.375546][T23287] svc: failed to register nfsdv3 RPC service (errno 111).
[ 1276.410646][T23292] net_ratelimit: 78 callbacks suppressed
[ 1276.410670][T23292] netlink: zone id is out of range
[ 1276.427431][T23287] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 1276.441196][T23292] netlink: zone id is out of range
[ 1276.582444][T23292] netlink: zone id is out of range
[ 1276.603833][T23292] netlink: zone id is out of range
[ 1276.643550][T23292] netlink: zone id is out of range
[ 1276.703816][T23292] netlink: zone id is out of range
[ 1276.757410][T23292] netlink: zone id is out of range
[ 1276.848383][T23292] netlink: zone id is out of range
[ 1276.923335][T23292] netlink: zone id is out of range
[ 1276.945272][T23292] netlink: zone id is out of range
[ 1277.572120][T23317] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3667'.
[ 1277.931804][T23325] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input39
[ 1278.527484][ T5832] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1281.211210][T23379] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1281.493603][T23385] �: entered promiscuous mode
[ 1281.922199][T23393] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1282.047671][T23397] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1282.687100][T23405] FAULT_INJECTION: forcing a failure.
[ 1282.687100][T23405] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1282.714911][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.715029][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.726464][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.733848][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.741397][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.749174][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.759560][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.766954][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.774338][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.781773][ T5832] Bluetooth: hci2: unexpected event 0x3d length: 726 > 14
[ 1282.790897][T23405] CPU: 0 UID: 0 PID: 23405 Comm: syz.5.3688 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1282.790955][T23405] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1282.790969][T23405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1282.790988][T23405] Call Trace:
[ 1282.791000][T23405]  <TASK>
[ 1282.791012][T23405]  dump_stack_lvl+0x16c/0x1f0
[ 1282.791061][T23405]  should_fail_ex+0x512/0x640
[ 1282.791114][T23405]  should_fail_alloc_page+0xe7/0x130
[ 1282.791158][T23405]  prepare_alloc_pages+0x3c2/0x610
[ 1282.791207][T23405]  ? rcu_is_watching+0x12/0xc0
[ 1282.791242][T23405]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[ 1282.791279][T23405]  ? __pfx_native_flush_tlb_one_user+0x10/0x10
[ 1282.791334][T23405]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1282.791366][T23405]  ? __lock_acquire+0x5ca/0x1ba0
[ 1282.791409][T23405]  ? mtree_range_walk+0x718/0xc00
[ 1282.791441][T23405]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1282.791478][T23405]  ? policy_nodemask+0xea/0x4e0
[ 1282.791512][T23405]  alloc_pages_mpol+0x1fb/0x550
[ 1282.791551][T23405]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1282.791583][T23405]  ? __lock_acquire+0x5ca/0x1ba0
[ 1282.791620][T23405]  folio_alloc_mpol_noprof+0x36/0x2f0
[ 1282.791673][T23405]  vma_alloc_folio_noprof+0xed/0x1e0
[ 1282.791712][T23405]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1282.791764][T23405]  do_pte_missing+0x223d/0x3fb0
[ 1282.791802][T23405]  __handle_mm_fault+0x103d/0x2a40
[ 1282.791840][T23405]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1282.791892][T23405]  ? find_vma+0xbf/0x140
[ 1282.791931][T23405]  ? __pfx_find_vma+0x10/0x10
[ 1282.791976][T23405]  handle_mm_fault+0x3fe/0xad0
[ 1282.792015][T23405]  do_user_addr_fault+0x7a6/0x1370
[ 1282.792050][T23405]  ? rcu_is_watching+0x12/0xc0
[ 1282.792085][T23405]  exc_page_fault+0x5c/0xc0
[ 1282.792128][T23405]  asm_exc_page_fault+0x26/0x30
[ 1282.792159][T23405] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 1282.792195][T23405] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1282.792228][T23405] RSP: 0018:ffffc9000e26fbf0 EFLAGS: 00050206
[ 1282.792254][T23405] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000
[ 1282.792274][T23405] RDX: 0000000000000000 RSI: ffff88805f310000 RDI: 0000000000002000
[ 1282.792296][T23405] RBP: 0000000000002000 R08: 0000000000000000 R09: ffffed100be621ff
[ 1282.792316][T23405] R10: ffff88805f310fff R11: 0000000000000000 R12: ffff88805f310000
[ 1282.792338][T23405] R13: 0000000000003000 R14: 00007ffffffff000 R15: 0000000000000000
[ 1282.792381][T23405]  _copy_to_user+0xbb/0xd0
[ 1282.792435][T23405]  pagemap_read+0x52c/0x890
[ 1282.792491][T23405]  ? __pfx_pagemap_read+0x10/0x10
[ 1282.792547][T23405]  ? rw_verify_area+0xcf/0x680
[ 1282.792594][T23405]  ? __pfx_pagemap_read+0x10/0x10
[ 1282.792652][T23405]  vfs_read+0x1de/0xc70
[ 1282.792689][T23405]  ? __pfx___mutex_lock+0x10/0x10
[ 1282.792735][T23405]  ? __pfx_vfs_read+0x10/0x10
[ 1282.792777][T23405]  ? __fget_files+0x20e/0x3c0
[ 1282.792841][T23405]  ksys_read+0x12a/0x240
[ 1282.792872][T23405]  ? __pfx_ksys_read+0x10/0x10
[ 1282.792899][T23405]  ? rcu_is_watching+0x12/0xc0
[ 1282.792942][T23405]  do_syscall_64+0xcd/0x230
[ 1282.792992][T23405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1282.793023][T23405] RIP: 0033:0x7f520e58e969
[ 1282.793048][T23405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1282.793078][T23405] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1282.793106][T23405] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1282.793121][T23405] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1282.793136][T23405] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1282.793151][T23405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1282.793165][T23405] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1282.793195][T23405]  </TASK>
[ 1283.198964][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1284.153676][T23431] ubi4: attaching mtd1
[ 1284.199203][T23431] ubi4: scanning is finished
[ 1284.203850][T23431] ubi4: empty MTD device detected
[ 1284.231165][T23431] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1284.317921][T23431] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1284.550512][T23425] CIFS mount error: No usable UNC path provided in device string!
[ 1284.550512][T23425] 
[ 1284.561661][T23425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1287.356368][T23453] Process accounting resumed
[ 1289.184526][T23518] net_ratelimit: 166 callbacks suppressed
[ 1289.184553][T23518] openvswitch: netlink: Key type 261 is out of range max 32
[ 1290.262024][T23520] bond0: option all_slaves_active: invalid value ()
[ 1293.062070][T23567] ima: policy update failed
[ 1293.070269][   T30] audit: type=1802 audit(4294967307.643:56): pid=23567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3714" res=0 errno=0
[ 1294.693715][T23599] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1294.927101][T23603] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1295.144163][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1295.157339][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1295.180645][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1295.199524][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1295.210388][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1295.585932][T23620] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1296.676854][T23607] chnl_net:caif_netlink_parms(): no params data found
[ 1296.859611][T23642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3726'.
[ 1297.242260][ T5832] Bluetooth: hci4: command tx timeout
[ 1297.297454][T23607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1297.304956][T23607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.312708][T23607] bridge_slave_0: entered allmulticast mode
[ 1297.320859][T23607] bridge_slave_0: entered promiscuous mode
[ 1297.344552][T23607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1297.352962][T23607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1297.372480][T23607] bridge_slave_1: entered allmulticast mode
[ 1297.380589][T23607] bridge_slave_1: entered promiscuous mode
[ 1297.578438][T23607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1297.623733][T23607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1298.160678][T23607] team0: Port device team_slave_0 added
[ 1298.191233][T23607] team0: Port device team_slave_1 added
[ 1298.334778][T23607] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1298.378649][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1298.428194][T23607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1298.429935][T23680] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1298.726158][T23607] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1298.745754][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1298.791103][T23607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1299.322295][ T5832] Bluetooth: hci4: command tx timeout
[ 1299.329793][T23607] hsr_slave_0: entered promiscuous mode
[ 1299.367155][T23607] hsr_slave_1: entered promiscuous mode
[ 1299.374384][T23607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1299.385741][T23607] Cannot create hsr debugfs directory
[ 1300.030175][T23702] ubi4: attaching mtd1
[ 1300.055564][T23702] ubi4: scanning is finished
[ 1300.060283][T23702] ubi4: empty MTD device detected
[ 1300.117281][T23702] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1300.176806][T23702] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1300.553778][T23607] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1300.594616][T23607] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1300.622158][T23607] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1300.658189][T23607] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1301.400141][ T5832] Bluetooth: hci4: command tx timeout
[ 1301.624917][T23739] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1301.847044][T23607] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1301.976146][T23607] 8021q: adding VLAN 0 to HW filter on device team0
[ 1302.028612][T20605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1302.035865][T20605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1302.143941][T20976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1302.151207][T20976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1302.883055][T23755] FAULT_INJECTION: forcing a failure.
[ 1302.883055][T23755] name failslab, interval 1, probability 0, space 0, times 0
[ 1302.920664][T23755] CPU: 0 UID: 0 PID: 23755 Comm: syz.3.3752 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1302.920723][T23755] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1302.920738][T23755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1302.920759][T23755] Call Trace:
[ 1302.920771][T23755]  <TASK>
[ 1302.920784][T23755]  dump_stack_lvl+0x16c/0x1f0
[ 1302.920837][T23755]  should_fail_ex+0x512/0x640
[ 1302.920884][T23755]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1302.920944][T23755]  should_failslab+0xc2/0x120
[ 1302.920985][T23755]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1302.921051][T23755]  ? rand_initialize_disk+0x3f/0xc0
[ 1302.921110][T23755]  rand_initialize_disk+0x3f/0xc0
[ 1302.921163][T23755]  __alloc_disk_node+0x2c5/0x610
[ 1302.921218][T23755]  __blk_mq_alloc_disk+0x89/0x120
[ 1302.921266][T23755]  loop_add+0x496/0xb70
[ 1302.921310][T23755]  ? do_vfs_ioctl+0x512/0x1990
[ 1302.921355][T23755]  ? __pfx_loop_add+0x10/0x10
[ 1302.921394][T23755]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1302.921467][T23755]  ? find_held_lock+0x2b/0x80
[ 1302.921505][T23755]  loop_control_ioctl+0x13c/0x630
[ 1302.921552][T23755]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1302.921605][T23755]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1302.921654][T23755]  __x64_sys_ioctl+0x190/0x200
[ 1302.921704][T23755]  do_syscall_64+0xcd/0x230
[ 1302.921754][T23755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1302.921808][T23755] RIP: 0033:0x7fbd1978e969
[ 1302.921838][T23755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1302.921873][T23755] RSP: 002b:00007fbd1a5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1302.921906][T23755] RAX: ffffffffffffffda RBX: 00007fbd199b5fa0 RCX: 00007fbd1978e969
[ 1302.921929][T23755] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005
[ 1302.921950][T23755] RBP: 00007fbd19810ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1302.921972][T23755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1302.921993][T23755] R13: 0000000000000000 R14: 00007fbd199b5fa0 R15: 00007ffe499b91b8
[ 1302.922042][T23755]  </TASK>
[ 1303.486286][ T5832] Bluetooth: hci4: command tx timeout
[ 1303.867334][T23607] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1304.316391][T23760] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1304.734937][T23793] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1305.143737][T23607] veth0_vlan: entered promiscuous mode
[ 1305.162548][T23607] veth1_vlan: entered promiscuous mode
[ 1305.259446][T23607] veth0_macvtap: entered promiscuous mode
[ 1305.274182][T23607] veth1_macvtap: entered promiscuous mode
[ 1305.326132][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.332948][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.403551][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1305.415942][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.431816][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1305.443774][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.456285][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1305.469787][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.487575][T23607] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1305.514639][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1305.528474][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.541982][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1305.554283][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.579444][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1305.591292][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1305.605685][T23607] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1305.631145][T23607] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.661607][T23607] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.681404][T23607] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.692386][T23607] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.139269][T23813] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input40
[ 1306.187853][ T9008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1306.222107][ T9008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1306.415033][T13519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1306.454039][T13519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1306.762637][T23826] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3719'.
[ 1307.550182][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3766'.
[ 1308.312222][T23850] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1308.852155][T23865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3770'.
[ 1309.351963][T23865] team0: Port device team_slave_0 removed
[ 1309.430913][T23876] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1310.173790][T23891] FAULT_INJECTION: forcing a failure.
[ 1310.173790][T23891] name failslab, interval 1, probability 0, space 0, times 0
[ 1310.210686][T23891] CPU: 0 UID: 0 PID: 23891 Comm: syz.6.3777 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1310.210747][T23891] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1310.210763][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1310.210788][T23891] Call Trace:
[ 1310.210799][T23891]  <TASK>
[ 1310.210812][T23891]  dump_stack_lvl+0x16c/0x1f0
[ 1310.210864][T23891]  should_fail_ex+0x512/0x640
[ 1310.210910][T23891]  ? fs_reclaim_acquire+0xae/0x150
[ 1310.210966][T23891]  should_failslab+0xc2/0x120
[ 1310.211009][T23891]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1310.211049][T23891]  ? security_inode_alloc+0x3b/0x2b0
[ 1310.211111][T23891]  security_inode_alloc+0x3b/0x2b0
[ 1310.211149][T23891]  inode_init_always_gfp+0xce4/0x1030
[ 1310.211205][T23891]  alloc_inode+0x86/0x240
[ 1310.211265][T23891]  new_inode+0x22/0x1c0
[ 1310.211308][T23891]  bdev_alloc+0x2b/0x420
[ 1310.211356][T23891]  __alloc_disk_node+0x116/0x610
[ 1310.211409][T23891]  __blk_mq_alloc_disk+0x89/0x120
[ 1310.211460][T23891]  loop_add+0x496/0xb70
[ 1310.211504][T23891]  ? do_vfs_ioctl+0x512/0x1990
[ 1310.211548][T23891]  ? __pfx_loop_add+0x10/0x10
[ 1310.211589][T23891]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1310.211662][T23891]  ? find_held_lock+0x2b/0x80
[ 1310.211699][T23891]  loop_control_ioctl+0x13c/0x630
[ 1310.211748][T23891]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1310.211801][T23891]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1310.211849][T23891]  __x64_sys_ioctl+0x190/0x200
[ 1310.211897][T23891]  do_syscall_64+0xcd/0x230
[ 1310.211947][T23891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.211981][T23891] RIP: 0033:0x7f19f5f8e969
[ 1310.212007][T23891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1310.212040][T23891] RSP: 002b:00007f19f6d0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1310.212071][T23891] RAX: ffffffffffffffda RBX: 00007f19f61b5fa0 RCX: 00007f19f5f8e969
[ 1310.212102][T23891] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005
[ 1310.212124][T23891] RBP: 00007f19f6010ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1310.212145][T23891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1310.212165][T23891] R13: 0000000000000000 R14: 00007f19f61b5fa0 R15: 00007ffe0f0476a8
[ 1310.212209][T23891]  </TASK>
[ 1311.957686][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3779'.
[ 1311.983781][T23903] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1312.777607][T23922] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3784'.
[ 1313.225355][T23922] team0: Port device team_slave_0 removed
[ 1313.674446][ T5832] bt_warn_ratelimited: 23 callbacks suppressed
[ 1313.674471][ T5832] Bluetooth: hci4: unexpected event 0x09 length: 11 > 3
[ 1313.682581][T23927] ima: policy update failed
[ 1313.710350][   T30] audit: type=1802 audit(4294967328.281:57): pid=23927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3785" res=0 errno=0
[ 1313.768569][T23929] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i�
�(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[ 1314.475714][T23937] could not allocate digest TFM handle binfmt_misc
[ 1315.131316][T23958] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1315.498380][T23967] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1315.996733][T23978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3794'.
[ 1316.720367][T23986] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i�
�(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[ 1319.023967][T24018] ima: policy update failed
[ 1319.067783][   T30] audit: type=1802 audit(4294967333.651:58): pid=24018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3805" res=0 errno=0
[ 1319.072035][T24022] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1319.827284][T16980] Process accounting paused
[ 1320.673548][ T5832] Bluetooth: hci3: unexpected event 0x09 length: 11 > 3
[ 1320.675165][T24053] ima: policy update failed
[ 1320.776435][   T30] audit: type=1802 audit(4294967335.331:59): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3812" res=0 errno=0
[ 1321.064354][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1321.083527][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1321.096865][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1321.107437][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1321.116862][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1322.865898][T24079] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1323.236683][ T5832] Bluetooth: hci5: command tx timeout
[ 1323.392945][T24056] chnl_net:caif_netlink_parms(): no params data found
[ 1324.145236][T24056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1324.162354][T24056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1324.176687][T24056] bridge_slave_0: entered allmulticast mode
[ 1324.184743][T24056] bridge_slave_0: entered promiscuous mode
[ 1324.257029][T24056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1324.264230][T24056] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1324.283114][T24056] bridge_slave_1: entered allmulticast mode
[ 1324.299351][T24056] bridge_slave_1: entered promiscuous mode
[ 1324.514444][T24056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1324.573469][T24056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1324.663091][T24056] team0: Port device team_slave_0 added
[ 1324.694768][T24056] team0: Port device team_slave_1 added
[ 1324.772248][T24056] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1324.786812][T24056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1324.833724][T24056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1324.874007][T24056] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1324.881979][T24056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1324.926632][T24056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1325.072573][T24056] hsr_slave_0: entered promiscuous mode
[ 1325.084637][T24056] hsr_slave_1: entered promiscuous mode
[ 1325.107324][T24056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1325.114960][T24056] Cannot create hsr debugfs directory
[ 1325.316538][ T5832] Bluetooth: hci5: command tx timeout
[ 1325.680303][T24056] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1325.727996][T24056] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1325.780031][T24056] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1325.803485][T24056] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1326.119897][T24056] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1326.146747][T24056] 8021q: adding VLAN 0 to HW filter on device team0
[ 1326.174728][T20975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1326.181987][T20975] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1326.245325][T20975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1326.252592][T20975] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1326.691430][T24056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1327.189976][T24056] veth0_vlan: entered promiscuous mode
[ 1327.209982][T24056] veth1_vlan: entered promiscuous mode
[ 1327.280750][T24056] veth0_macvtap: entered promiscuous mode
[ 1327.317907][T24056] veth1_macvtap: entered promiscuous mode
[ 1327.359821][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.387365][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.405663][ T5832] Bluetooth: hci5: command tx timeout
[ 1327.412435][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.426509][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.436953][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.449403][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.459829][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.470730][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.482977][T24056] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1327.509348][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1327.530695][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.544230][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1327.556095][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.566694][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1327.577679][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.588602][T24056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1327.599906][T24056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.618252][T24056] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1327.653045][T24056] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1327.663170][T24056] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1327.676296][T24056] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1327.692859][T24056] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1327.845362][T20601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1327.868833][T20601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1327.915203][T20975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1327.924856][T20975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1329.478755][ T5832] Bluetooth: hci5: command tx timeout
[ 1329.751038][T24157] ubi4: attaching mtd1
[ 1329.773282][T24154] ptrace attach of "./syz-executor exec"[21303] was attempted by "./syz-executor exec"[24154]
[ 1329.799824][T24157] ubi4: scanning is finished
[ 1329.814051][T24157] ubi4: empty MTD device detected
[ 1329.834412][T24157] ubi4 error: ubi_early_get_peb: no free eraseblocks
[ 1329.913075][T24159] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1329.945924][T24157] ubi4 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28
[ 1330.607864][T24171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3840'.
[ 1333.298899][T24230] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1334.542500][T24237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3844'.
[ 1334.640263][T24238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3844'.
[ 1334.729195][T24243] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3845'.
[ 1334.739572][T24237] hsr_slave_0: left promiscuous mode
[ 1334.759857][T24237] hsr_slave_1: left promiscuous mode
[ 1335.025671][T24243] team0: Port device team_slave_0 removed
[ 1338.337132][T24294] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1339.487109][T24305] openvswitch: netlink: Key type 261 is out of range max 32
[ 1341.367741][T24326] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1341.760513][T24329] ima: policy update failed
[ 1341.782010][   T30] audit: type=1802 audit(4294967356.361:60): pid=24329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3860" res=0 errno=0
[ 1344.063307][T24356] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3865'.
[ 1344.320438][T24354] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1346.858822][T24383] ima: policy update failed
[ 1346.877151][   T30] audit: type=1802 audit(4294967361.441:61): pid=24383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3870" res=0 errno=0
[ 1349.332503][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1349.345515][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1349.358656][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1349.362657][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1349.363468][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1350.104314][T24402] chnl_net:caif_netlink_parms(): no params data found
[ 1350.382265][T24402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.406991][T24402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1350.439258][T24402] bridge_slave_0: entered allmulticast mode
[ 1350.460433][T24402] bridge_slave_0: entered promiscuous mode
[ 1350.492765][T24402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.506733][T24402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.514074][T24402] bridge_slave_1: entered allmulticast mode
[ 1350.529712][T24402] bridge_slave_1: entered promiscuous mode
[ 1350.659790][T24402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1350.697944][T24402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1350.784204][T24402] team0: Port device team_slave_0 added
[ 1350.801403][T24402] team0: Port device team_slave_1 added
[ 1350.871103][T24402] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1350.886915][T24402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1350.914553][T24402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1350.930185][T24402] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1350.937359][T24402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1350.964564][T24402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1351.253841][T24402] hsr_slave_0: entered promiscuous mode
[ 1351.284070][T24402] hsr_slave_1: entered promiscuous mode
[ 1351.304609][T24402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1351.321382][T24402] Cannot create hsr debugfs directory
[ 1351.407290][   T55] Bluetooth: hci6: command tx timeout
[ 1351.978539][T24402] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1352.050514][T24402] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1352.124078][T24402] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1352.160864][T24402] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1352.227425][T24434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3882'.
[ 1352.392272][T24402] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1352.427920][T24402] 8021q: adding VLAN 0 to HW filter on device team0
[ 1352.442265][T20605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1352.449466][T20605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1352.514216][T20605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1352.521424][T20605] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1353.173613][T24402] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1353.476851][   T55] Bluetooth: hci6: command tx timeout
[ 1354.564104][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1354.575797][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1354.586972][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1354.605884][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1354.615755][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1354.730562][T24402] veth0_vlan: entered promiscuous mode
[ 1354.913508][T24402] veth1_vlan: entered promiscuous mode
[ 1355.059594][T24471] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41
[ 1355.094472][T24402] veth0_macvtap: entered promiscuous mode
[ 1355.199286][T24402] veth1_macvtap: entered promiscuous mode
[ 1355.473013][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1355.502088][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.522186][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1355.540958][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.560704][ T5832] Bluetooth: hci6: command tx timeout
[ 1355.567576][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1355.578055][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.587952][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1355.598451][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.608472][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1355.621008][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.632672][T24402] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1355.683332][T24477] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1355.694405][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.725535][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.746485][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.758172][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.776467][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.787431][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.797928][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.810158][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.825728][T24402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.842099][T24402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1355.853966][T24402] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1355.963060][T24480] openvswitch: netlink: Key type 261 is out of range max 32
[ 1355.973108][T24402] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1355.982036][T24402] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1355.990846][T24402] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1355.999754][T24402] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.153777][T24467] chnl_net:caif_netlink_parms(): no params data found
[ 1356.457729][T20975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.465603][T20975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1356.539442][T24467] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1356.548178][T24467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1356.555424][T24467] bridge_slave_0: entered allmulticast mode
[ 1356.577896][T24467] bridge_slave_0: entered promiscuous mode
[ 1356.639679][T24467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1356.661827][T24467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1356.676843][T24467] bridge_slave_1: entered allmulticast mode
[ 1356.686623][ T5832] Bluetooth: hci7: command tx timeout
[ 1356.694399][T24467] bridge_slave_1: entered promiscuous mode
[ 1356.771573][T20603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.779854][T20603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1356.833809][T24467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1356.870509][T24467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1357.024462][T24467] team0: Port device team_slave_0 added
[ 1357.069852][T24467] team0: Port device team_slave_1 added
[ 1357.247803][ T5832] Bluetooth: hci3: unexpected event 0x08 length: 11 > 4
[ 1357.248829][T24493] ima: policy update failed
[ 1357.267283][   T30] audit: type=1802 audit(4294968393.837:62): pid=24493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.3894" res=0 errno=0
[ 1357.334813][T24467] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1357.352688][T24467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1357.432446][T24467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1357.432515][T24498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42
[ 1357.479192][T24467] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1357.490349][T24467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1357.529448][T24467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1357.647912][ T5832] Bluetooth: hci6: command tx timeout
[ 1357.727276][T24500] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[ 1357.953975][T24467] hsr_slave_0: entered promiscuous mode
[ 1357.988164][T24467] hsr_slave_1: entered promiscuous mode
[ 1357.994622][T24467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1358.033985][T24467] Cannot create hsr debugfs directory
[ 1358.756545][ T5832] Bluetooth: hci7: command tx timeout
[ 1360.193595][T24467] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1360.250426][T24467] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1360.300462][T24467] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1360.361496][T24467] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1360.790272][T24467] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1360.836893][ T5832] Bluetooth: hci7: command tx timeout
[ 1360.863860][T24467] 8021q: adding VLAN 0 to HW filter on device team0
[ 1360.919419][T20601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1360.926720][T20601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1360.999951][T20601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1361.007224][T20601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1361.579101][T24467] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1361.809509][T24467] veth0_vlan: entered promiscuous mode
[ 1361.872902][T24467] veth1_vlan: entered promiscuous mode
[ 1362.021874][T24467] veth0_macvtap: entered promiscuous mode
[ 1362.136069][T24467] veth1_macvtap: entered promiscuous mode
[ 1362.198079][T24571] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1362.248891][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.277850][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.315378][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.336790][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.355676][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.375104][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.395861][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.426458][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.460694][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.490765][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.506458][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1362.536691][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.570072][T24467] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1362.628370][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.652145][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.670744][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.703045][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.726427][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.757598][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.796608][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.814763][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.840084][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.861374][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.885873][T24467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.915195][T24467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1362.929207][ T5832] Bluetooth: hci7: command tx timeout
[ 1362.940252][T24467] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1363.078402][T24467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.226542][T24467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.236275][T24467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.245945][T24467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1364.020460][T20603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.062318][T20603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1364.129455][T20601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.163228][T20601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1364.623897][T24612] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3907'.
[ 1364.726598][T24622] cougar: G6 mapped to space
[ 1365.620036][T24639] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1366.768791][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.775820][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1368.233809][T24684] openvswitch: netlink: Key type 261 is out of range max 32
[ 1372.632368][T24781] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1372.883357][T24787] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1373.670654][T24812] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1375.377800][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.385698][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.428826][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.446453][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.458973][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.493354][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.522762][T24842] netlink: 'syz.5.3930': attribute type 11 has an invalid length.
[ 1375.637486][T24847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800
[ 1375.656523][T24847] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1375.665637][T24847] memcg:ffff888034b1be81
[ 1375.670815][T24847] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1375.702773][T24847] page_type: f5(slab)
[ 1375.715206][T24847] raw: 00fff00000000040 ffff88801cefa640 0000000000000000 dead000000000001
[ 1375.725725][T24847] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888034b1be81
[ 1375.741166][T24847] head: 00fff00000000040 ffff88801cefa640 0000000000000000 dead000000000001
[ 1375.750713][T24847] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff888034b1be81
[ 1375.815696][T24847] head: 00fff00000000002 ffffea0001e20001 00000000ffffffff 00000000ffffffff
[ 1375.846091][T24847] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1375.867389][T24847] page dumped because: unmovable page
[ 1375.895706][T24847] page_owner tracks the page as allocated
[ 1376.031369][T24847] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5492, tgid 5492 (dhcpcd), ts 69112822552, free_ts 35506220563
[ 1376.146490][T24847]  post_alloc_hook+0x181/0x1b0
[ 1376.151474][T24847]  get_page_from_freelist+0x135c/0x3920
[ 1376.163710][T24847]  __alloc_frozen_pages_noprof+0x263/0x23a0
[ 1376.175289][T24847]  alloc_pages_mpol+0x1fb/0x550
[ 1376.227552][T24847]  new_slab+0x244/0x340
[ 1376.256481][T24847]  ___slab_alloc+0xd9c/0x1940
[ 1376.296996][T24847]  __slab_alloc.constprop.0+0x56/0xb0
[ 1376.301308][T24857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3931'.
[ 1376.302495][T24847]  kmem_cache_alloc_lru_noprof+0xf4/0x3b0
[ 1376.336628][T24847]  proc_alloc_inode+0x25/0x200
[ 1376.352487][T24847]  alloc_inode+0x61/0x240
[ 1376.352538][T24847]  new_inode+0x22/0x1c0
[ 1376.352575][T24847]  proc_get_inode+0x1d/0x780
[ 1376.352609][T24847]  proc_lookup_de+0x253/0x320
[ 1376.352643][T24847]  proc_tgid_net_lookup+0x75/0x120
[ 1376.352681][T24847]  lookup_open.isra.0+0x4d7/0x1580
[ 1376.352724][T24847]  path_openat+0x905/0x2d40
[ 1376.352755][T24847] page last free pid 1 tgid 1 stack trace:
[ 1376.352776][T24847]  __free_frozen_pages+0x69d/0xff0
[ 1376.352826][T24847]  free_contig_range+0x135/0x3f0
[ 1376.352854][T24847]  destroy_args+0x66f/0x830
[ 1376.352902][T24847]  debug_vm_pgtable+0x130e/0x2d50
[ 1376.352951][T24847]  do_one_initcall+0x120/0x6e0
[ 1376.352997][T24847]  kernel_init_freeable+0x5c2/0x900
[ 1376.353038][T24847]  kernel_init+0x1c/0x2b0
[ 1376.353068][T24847]  ret_from_fork+0x45/0x80
[ 1376.353118][T24847]  ret_from_fork_asm+0x1a/0x30
[ 1377.455157][T24907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3937'.
[ 1377.667364][T24913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3938'.
[ 1377.840843][T24920] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1377.867876][T24921] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1379.266101][T24962] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1379.324911][T24962] FAULT_INJECTION: forcing a failure.
[ 1379.324911][T24962] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1379.480519][T24962] CPU: 1 UID: 0 PID: 24962 Comm: syz.0.3947 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1379.480577][T24962] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1379.480590][T24962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1379.480609][T24962] Call Trace:
[ 1379.480620][T24962]  <TASK>
[ 1379.480634][T24962]  dump_stack_lvl+0x16c/0x1f0
[ 1379.480682][T24962]  should_fail_ex+0x512/0x640
[ 1379.480731][T24962]  get_futex_key+0x49e/0x1000
[ 1379.480768][T24962]  ? __pfx_get_futex_key+0x10/0x10
[ 1379.480803][T24962]  ? find_held_lock+0x2b/0x80
[ 1379.480841][T24962]  futex_wait_setup+0x78/0x290
[ 1379.480909][T24962]  __futex_wait+0x266/0x3c0
[ 1379.480953][T24962]  ? __pfx___futex_wait+0x10/0x10
[ 1379.481002][T24962]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1379.481045][T24962]  ? get_pid_task+0xfc/0x250
[ 1379.481097][T24962]  futex_wait+0xe8/0x380
[ 1379.481138][T24962]  ? __pfx_futex_wait+0x10/0x10
[ 1379.481191][T24962]  ? find_held_lock+0x2b/0x80
[ 1379.481219][T24962]  ? __might_fault+0xe3/0x190
[ 1379.481254][T24962]  ? __might_fault+0xe3/0x190
[ 1379.481293][T24962]  do_futex+0x229/0x350
[ 1379.481325][T24962]  ? __pfx_do_futex+0x10/0x10
[ 1379.481358][T24962]  ? _copy_to_user+0x48/0xd0
[ 1379.481414][T24962]  __x64_sys_futex+0x1e0/0x4c0
[ 1379.481454][T24962]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1379.481491][T24962]  ? __pfx___x64_sys_clock_gettime+0x10/0x10
[ 1379.481550][T24962]  do_syscall_64+0xcd/0x230
[ 1379.481598][T24962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.481632][T24962] RIP: 0033:0x7f166018e969
[ 1379.481657][T24962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1379.481690][T24962] RSP: 002b:00007f1660f240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1379.481719][T24962] RAX: ffffffffffffffda RBX: 00007f16603b5fa8 RCX: 00007f166018e969
[ 1379.481741][T24962] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16603b5fa8
[ 1379.481761][T24962] RBP: 00007f16603b5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1379.481782][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16603b5fac
[ 1379.481801][T24962] R13: 0000000000000000 R14: 00007ffda3a17150 R15: 00007ffda3a17238
[ 1379.481842][T24962]  </TASK>
[ 1380.905076][T24976] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1381.644149][T25005] openvswitch: netlink: Key type 261 is out of range max 32
[ 1382.197227][T25019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3955'.
[ 1382.781918][T25019] team0: Port device team_slave_0 removed
[ 1385.176427][T25075] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1385.986898][T25089] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1387.019485][T25114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3965'.
[ 1387.912108][T25141] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1391.505041][T25203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3977'.
[ 1391.942374][T25218] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1391.977145][T25219] FAULT_INJECTION: forcing a failure.
[ 1391.977145][T25219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1392.046694][T25219] CPU: 0 UID: 0 PID: 25219 Comm: syz.0.3979 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1392.046757][T25219] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1392.046770][T25219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1392.046788][T25219] Call Trace:
[ 1392.046799][T25219]  <TASK>
[ 1392.046810][T25219]  dump_stack_lvl+0x16c/0x1f0
[ 1392.046858][T25219]  should_fail_ex+0x512/0x640
[ 1392.046907][T25219]  _copy_from_user+0x2e/0xd0
[ 1392.046957][T25219]  copy_msghdr_from_user+0x98/0x160
[ 1392.046993][T25219]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1392.047047][T25219]  ___sys_sendmsg+0xfe/0x1d0
[ 1392.047083][T25219]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1392.047167][T25219]  __sys_sendmsg+0x16d/0x220
[ 1392.047203][T25219]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1392.047251][T25219]  ? rcu_is_watching+0x12/0xc0
[ 1392.047291][T25219]  do_syscall_64+0xcd/0x230
[ 1392.047338][T25219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.047370][T25219] RIP: 0033:0x7f166018e969
[ 1392.047394][T25219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1392.047451][T25219] RSP: 002b:00007f1660f24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1392.047497][T25219] RAX: ffffffffffffffda RBX: 00007f16603b5fa0 RCX: 00007f166018e969
[ 1392.047518][T25219] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1392.047539][T25219] RBP: 00007f1660f24090 R08: 0000000000000000 R09: 0000000000000000
[ 1392.047558][T25219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.047576][T25219] R13: 0000000000000000 R14: 00007f16603b5fa0 R15: 00007ffda3a17238
[ 1392.047614][T25219]  </TASK>
[ 1392.686528][T25224] openvswitch: netlink: Key type 261 is out of range max 32
[ 1394.507616][T25263] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1395.701378][T25285] HfR: entered promiscuous mode
[ 1396.567570][T25309] openvswitch: netlink: Key type 29 is not supported
[ 1397.238932][ T5832] Bluetooth: hci6: unexpected subevent 0x01 length: 5 < 18
[ 1400.294172][T25363] openvswitch: netlink: Key type 261 is out of range max 32
[ 1401.336513][T25380] openvswitch: netlink: Key type 261 is out of range max 32
[ 1405.353195][T25429] FAULT_INJECTION: forcing a failure.
[ 1405.353195][T25429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1405.444674][T25429] CPU: 0 UID: 0 PID: 25429 Comm: syz.5.4008 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1405.444733][T25429] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1405.444746][T25429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1405.444765][T25429] Call Trace:
[ 1405.444777][T25429]  <TASK>
[ 1405.444790][T25429]  dump_stack_lvl+0x16c/0x1f0
[ 1405.444839][T25429]  should_fail_ex+0x512/0x640
[ 1405.444891][T25429]  _copy_from_iter+0x2a4/0x15b0
[ 1405.444943][T25429]  ? __alloc_skb+0x200/0x380
[ 1405.444977][T25429]  ? __pfx__copy_from_iter+0x10/0x10
[ 1405.445029][T25429]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1405.445066][T25429]  ? __lock_acquire+0xaa4/0x1ba0
[ 1405.445119][T25429]  netlink_sendmsg+0x829/0xdd0
[ 1405.445164][T25429]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1405.445219][T25429]  ____sys_sendmsg+0xa95/0xc70
[ 1405.445273][T25429]  ? copy_msghdr_from_user+0x10a/0x160
[ 1405.445308][T25429]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1405.445373][T25429]  ___sys_sendmsg+0x134/0x1d0
[ 1405.445411][T25429]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1405.445497][T25429]  __sys_sendmsg+0x16d/0x220
[ 1405.445534][T25429]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1405.445583][T25429]  ? rcu_is_watching+0x12/0xc0
[ 1405.445625][T25429]  do_syscall_64+0xcd/0x230
[ 1405.445674][T25429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.445706][T25429] RIP: 0033:0x7f520e58e969
[ 1405.445732][T25429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1405.445763][T25429] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1405.445793][T25429] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1405.445815][T25429] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1405.445836][T25429] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.445855][T25429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.445875][T25429] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1405.445915][T25429]  </TASK>
[ 1408.298487][T25457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4015'.
[ 1410.304842][T25483] random: crng reseeded on system resumption
[ 1411.990732][T25503] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1413.988865][T25520] openvswitch: netlink: Key type 261 is out of range max 32
[ 1414.129934][T25527] openvswitch: netlink: Key type 261 is out of range max 32
[ 1417.011360][T25566] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1418.907341][T25585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4037'.
[ 1419.861870][T25602] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1420.036635][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[ 1421.382648][T25620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.393786][T25620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.404792][T25620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.414541][T25620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.425028][T25620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.536816][T25623] netlink: 218 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1421.684023][T25623] openvswitch: netlink: Key type 29 is not supported
[ 1421.954623][T25636] snd_aloop snd_aloop.0: control 16781581:65539:6:�F˷fC���:7 is already present
[ 1423.484525][T25654] openvswitch: netlink: Key type 261 is out of range max 32
[ 1424.923712][T25676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4056'.
[ 1425.245457][T25667] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1426.642587][T25708] snd_aloop snd_aloop.0: control 16781581:65539:6:�F˷fC���:7 is already present
[ 1427.188820][T25713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4063'.
[ 1427.422588][T25720] openvswitch: netlink: Key type 29 is not supported
[ 1427.481532][T25722] openvswitch: netlink: Key type 29 is not supported
[ 1427.845369][T25732] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1428.128172][T25738] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1428.210592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.217584][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.399002][T25753] FAULT_INJECTION: forcing a failure.
[ 1429.399002][T25753] name failslab, interval 1, probability 0, space 0, times 0
[ 1429.450254][T25753] CPU: 1 UID: 0 PID: 25753 Comm: syz.5.4071 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1429.450307][T25753] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1429.450321][T25753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1429.450338][T25753] Call Trace:
[ 1429.450348][T25753]  <TASK>
[ 1429.450359][T25753]  dump_stack_lvl+0x16c/0x1f0
[ 1429.450406][T25753]  should_fail_ex+0x512/0x640
[ 1429.450446][T25753]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[ 1429.450485][T25753]  should_failslab+0xc2/0x120
[ 1429.450523][T25753]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1429.450560][T25753]  ? ovs_flow_alloc+0x1e/0x210
[ 1429.450602][T25753]  ovs_flow_alloc+0x1e/0x210
[ 1429.450640][T25753]  ovs_packet_cmd_execute+0x53f/0x1080
[ 1429.450690][T25753]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1429.450740][T25753]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1429.450788][T25753]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1429.450843][T25753]  genl_family_rcv_msg_doit+0x206/0x2f0
[ 1429.450890][T25753]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1429.450935][T25753]  ? trace_cap_capable+0x18d/0x200
[ 1429.450975][T25753]  ? bpf_lsm_capable+0x9/0x10
[ 1429.451007][T25753]  ? security_capable+0x7e/0x260
[ 1429.451038][T25753]  ? ns_capable+0xd7/0x110
[ 1429.451075][T25753]  genl_rcv_msg+0x55c/0x800
[ 1429.451122][T25753]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1429.451171][T25753]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1429.451220][T25753]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1429.451267][T25753]  ? __lock_acquire+0xaa4/0x1ba0
[ 1429.451315][T25753]  netlink_rcv_skb+0x16a/0x440
[ 1429.451354][T25753]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1429.451398][T25753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1429.451455][T25753]  ? __pfx_down_read+0x10/0x10
[ 1429.451503][T25753]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1429.451544][T25753]  genl_rcv+0x28/0x40
[ 1429.451582][T25753]  netlink_unicast+0x53a/0x7f0
[ 1429.451624][T25753]  ? __pfx_netlink_unicast+0x10/0x10
[ 1429.451658][T25753]  ? __lock_acquire+0xaa4/0x1ba0
[ 1429.451708][T25753]  netlink_sendmsg+0x8d1/0xdd0
[ 1429.451753][T25753]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1429.451808][T25753]  ____sys_sendmsg+0xa95/0xc70
[ 1429.451871][T25753]  ? copy_msghdr_from_user+0x10a/0x160
[ 1429.451907][T25753]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1429.451975][T25753]  ___sys_sendmsg+0x134/0x1d0
[ 1429.452014][T25753]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1429.452105][T25753]  __sys_sendmsg+0x16d/0x220
[ 1429.452142][T25753]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1429.452197][T25753]  ? rcu_is_watching+0x12/0xc0
[ 1429.452240][T25753]  do_syscall_64+0xcd/0x230
[ 1429.452289][T25753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.452320][T25753] RIP: 0033:0x7f520e58e969
[ 1429.452345][T25753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1429.452376][T25753] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1429.452406][T25753] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1429.452426][T25753] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1429.452446][T25753] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1429.452464][T25753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1429.452482][T25753] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1429.452521][T25753]  </TASK>
[ 1429.823678][T25749] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4070'.
[ 1429.947552][T25759] openvswitch: netlink: Key type 29 is not supported
[ 1429.970412][T25749] netlink: 218 bytes leftover after parsing attributes in process `syz.9.4070'.
[ 1430.483095][T25770] openvswitch: netlink: Key type 29 is not supported
[ 1431.737294][T25790] FAULT_INJECTION: forcing a failure.
[ 1431.737294][T25790] name failslab, interval 1, probability 0, space 0, times 0
[ 1431.779518][T25790] CPU: 0 UID: 0 PID: 25790 Comm: syz.9.4081 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1431.779577][T25790] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1431.779591][T25790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1431.779609][T25790] Call Trace:
[ 1431.779620][T25790]  <TASK>
[ 1431.779632][T25790]  dump_stack_lvl+0x16c/0x1f0
[ 1431.779682][T25790]  should_fail_ex+0x512/0x640
[ 1431.779726][T25790]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1431.779769][T25790]  should_failslab+0xc2/0x120
[ 1431.779809][T25790]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1431.779846][T25790]  ? ovs_flow_alloc+0x10e/0x210
[ 1431.779891][T25790]  ovs_flow_alloc+0x10e/0x210
[ 1431.779928][T25790]  ovs_packet_cmd_execute+0x53f/0x1080
[ 1431.779988][T25790]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1431.780040][T25790]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 1431.780089][T25790]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 1431.780147][T25790]  genl_family_rcv_msg_doit+0x206/0x2f0
[ 1431.780207][T25790]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1431.780250][T25790]  ? trace_cap_capable+0x18d/0x200
[ 1431.780291][T25790]  ? bpf_lsm_capable+0x9/0x10
[ 1431.780321][T25790]  ? security_capable+0x7e/0x260
[ 1431.780351][T25790]  ? ns_capable+0xd7/0x110
[ 1431.780387][T25790]  genl_rcv_msg+0x55c/0x800
[ 1431.780435][T25790]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1431.780477][T25790]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1431.780527][T25790]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1431.780574][T25790]  ? __lock_acquire+0xaa4/0x1ba0
[ 1431.780622][T25790]  netlink_rcv_skb+0x16a/0x440
[ 1431.780660][T25790]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1431.780707][T25790]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1431.780766][T25790]  ? __pfx_down_read+0x10/0x10
[ 1431.780814][T25790]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1431.780857][T25790]  genl_rcv+0x28/0x40
[ 1431.780893][T25790]  netlink_unicast+0x53a/0x7f0
[ 1431.780935][T25790]  ? __pfx_netlink_unicast+0x10/0x10
[ 1431.780977][T25790]  ? __lock_acquire+0xaa4/0x1ba0
[ 1431.781026][T25790]  netlink_sendmsg+0x8d1/0xdd0
[ 1431.781072][T25790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1431.781128][T25790]  ____sys_sendmsg+0xa95/0xc70
[ 1431.781174][T25790]  ? copy_msghdr_from_user+0x10a/0x160
[ 1431.781209][T25790]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1431.781273][T25790]  ___sys_sendmsg+0x134/0x1d0
[ 1431.781311][T25790]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1431.781393][T25790]  __sys_sendmsg+0x16d/0x220
[ 1431.781430][T25790]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1431.781478][T25790]  ? rcu_is_watching+0x12/0xc0
[ 1431.781519][T25790]  do_syscall_64+0xcd/0x230
[ 1431.781566][T25790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1431.781599][T25790] RIP: 0033:0x7ff1b938e969
[ 1431.781623][T25790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1431.781652][T25790] RSP: 002b:00007ff1ba1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1431.781681][T25790] RAX: ffffffffffffffda RBX: 00007ff1b95b5fa0 RCX: 00007ff1b938e969
[ 1431.781702][T25790] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1431.781722][T25790] RBP: 00007ff1ba1ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1431.781742][T25790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1431.781759][T25790] R13: 0000000000000000 R14: 00007ff1b95b5fa0 R15: 00007ffd4f1ee1f8
[ 1431.781800][T25790]  </TASK>
[ 1432.184061][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4082'.
[ 1432.459210][T25796] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1432.564456][T25795] openvswitch: netlink: Key type 29 is not supported
[ 1433.224312][T25818] openvswitch: netlink: Key type 261 is out of range max 32
[ 1434.597335][T25835] openvswitch: netlink: Key type 29 is not supported
[ 1434.604119][T25835] FAULT_INJECTION: forcing a failure.
[ 1434.604119][T25835] name failslab, interval 1, probability 0, space 0, times 0
[ 1434.688803][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.5.4093 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1434.688851][T25835] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1434.688860][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1434.688873][T25835] Call Trace:
[ 1434.688881][T25835]  <TASK>
[ 1434.688889][T25835]  dump_stack_lvl+0x16c/0x1f0
[ 1434.688926][T25835]  should_fail_ex+0x512/0x640
[ 1434.688957][T25835]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1434.688987][T25835]  should_failslab+0xc2/0x120
[ 1434.689014][T25835]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1434.689039][T25835]  ? __alloc_skb+0x2b2/0x380
[ 1434.689061][T25835]  ? bpf_lsm_capable+0x9/0x10
[ 1434.689088][T25835]  __alloc_skb+0x2b2/0x380
[ 1434.689110][T25835]  ? __pfx___alloc_skb+0x10/0x10
[ 1434.689132][T25835]  ? genl_rcv_msg+0x550/0x800
[ 1434.689161][T25835]  ? genl_rcv_msg+0x4bb/0x800
[ 1434.689209][T25835]  netlink_ack+0x15d/0xb80
[ 1434.689236][T25835]  ? __lock_acquire+0xaa4/0x1ba0
[ 1434.689269][T25835]  netlink_rcv_skb+0x347/0x440
[ 1434.689296][T25835]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1434.689327][T25835]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1434.689367][T25835]  ? __pfx_down_read+0x10/0x10
[ 1434.689400][T25835]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1434.689429][T25835]  genl_rcv+0x28/0x40
[ 1434.689455][T25835]  netlink_unicast+0x53a/0x7f0
[ 1434.689485][T25835]  ? __pfx_netlink_unicast+0x10/0x10
[ 1434.689528][T25835]  ? __lock_acquire+0xaa4/0x1ba0
[ 1434.689565][T25835]  netlink_sendmsg+0x8d1/0xdd0
[ 1434.689597][T25835]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1434.689637][T25835]  ____sys_sendmsg+0xa95/0xc70
[ 1434.689674][T25835]  ? copy_msghdr_from_user+0x10a/0x160
[ 1434.689699][T25835]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1434.689750][T25835]  ___sys_sendmsg+0x134/0x1d0
[ 1434.689778][T25835]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1434.689839][T25835]  __sys_sendmsg+0x16d/0x220
[ 1434.689865][T25835]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1434.689899][T25835]  ? rcu_is_watching+0x12/0xc0
[ 1434.689928][T25835]  do_syscall_64+0xcd/0x230
[ 1434.689963][T25835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1434.689986][T25835] RIP: 0033:0x7f520e58e969
[ 1434.690005][T25835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1434.690027][T25835] RSP: 002b:00007f520f3fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1434.690048][T25835] RAX: ffffffffffffffda RBX: 00007f520e7b5fa0 RCX: 00007f520e58e969
[ 1434.690064][T25835] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1434.690078][T25835] RBP: 00007f520f3fc090 R08: 0000000000000000 R09: 0000000000000000
[ 1434.690092][T25835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1434.690106][T25835] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1434.690134][T25835]  </TASK>
[ 1434.974538][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1436.262081][T25856] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4099'.
[ 1436.300646][T25856] netlink: 218 bytes leftover after parsing attributes in process `syz.6.4099'.
[ 1436.454917][T25864] snd_aloop snd_aloop.0: control 16781581:65539:6:�F˷fC���:7 is already present
[ 1436.841115][T25875] vivid-007: =================  START STATUS  =================
[ 1436.850436][T25875] vivid-007: Generate PTS: true
[ 1436.855400][T25875] vivid-007: Generate SCR: true
[ 1436.864701][T25875] tpg source WxH: 640x360 (Y'CbCr)
[ 1436.871033][T25875] tpg field: 1
[ 1436.874488][T25875] tpg crop: (0,0)/640x360
[ 1436.880809][T25875] tpg compose: (0,0)/640x360
[ 1436.885558][T25875] tpg colorspace: 8
[ 1436.890539][T25875] tpg transfer function: 0/0
[ 1436.899343][T25875] tpg Y'CbCr encoding: 0/0
[ 1436.905859][T25875] tpg quantization: 0/0
[ 1436.910640][T25875] tpg RGB range: 0/2
[ 1436.915440][T25875] vivid-007: ==================  END STATUS  ==================
[ 1437.138612][T25884] openvswitch: netlink: Key type 29 is not supported
[ 1437.177990][T25885] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1437.846819][T25900] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4110'.
[ 1437.891777][T25900] netlink: 218 bytes leftover after parsing attributes in process `syz.9.4110'.
[ 1440.004701][T25933] vivid-007: =================  START STATUS  =================
[ 1440.024499][T25933] vivid-007: Generate PTS: true
[ 1440.039297][T25933] vivid-007: Generate SCR: true
[ 1440.073448][T25933] tpg source WxH: 640x360 (Y'CbCr)
[ 1440.080680][T25933] tpg field: 1
[ 1440.084824][T25933] tpg crop: (0,0)/640x360
[ 1440.106130][T25933] tpg compose: (0,0)/640x360
[ 1440.139426][T25933] tpg colorspace: 8
[ 1440.143319][T25933] tpg transfer function: 0/0
[ 1440.166452][T25933] tpg Y'CbCr encoding: 0/0
[ 1440.201369][T25933] tpg quantization: 0/0
[ 1440.205646][T25933] tpg RGB range: 0/2
[ 1440.269131][T25933] vivid-007: ==================  END STATUS  ==================
[ 1440.281630][T25938] openvswitch: netlink: Key type 261 is out of range max 32
[ 1441.141453][T25964] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1441.274252][T25968] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1443.084898][T26002] openvswitch: netlink: Key type 29 is not supported
[ 1444.066709][T26018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4130'.
[ 1444.593381][T26022] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1445.579418][T26042] snd_aloop snd_aloop.0: control 16781581:65533:6:�'x?F���/��zF˷fC���:0 is already present
[ 1445.643953][   T55] Bluetooth: hci5: command 0x0406 tx timeout
[ 1446.014534][T26044] snd_aloop snd_aloop.0: control 16781581:65539:6:�F˷fC���:7 is already present
[ 1446.782510][T26055] openvswitch: netlink: Key type 261 is out of range max 32
[ 1447.527061][T26067] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[ 1447.614563][T26071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4140'.
[ 1448.034678][T26079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4141'.
[ 1448.681118][   T31] INFO: task syz.3.3759:23792 blocked for more than 143 seconds.
[ 1448.696407][   T31]       Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0
[ 1448.726649][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1448.745723][   T31] task:syz.3.3759      state:D stack:27640 pid:23792 tgid:23791 ppid:16980  task_flags:0x400140 flags:0x00004004
[ 1448.776477][   T31] Call Trace:
[ 1448.779955][   T31]  <TASK>
[ 1448.782941][   T31]  __schedule+0x116f/0x5de0
[ 1448.796363][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[ 1448.806862][   T31]  ? __pfx___schedule+0x10/0x10
[ 1448.819331][   T31]  ? find_held_lock+0x2b/0x80
[ 1448.824190][   T31]  ? schedule+0x2d7/0x3a0
[ 1448.844672][   T31]  schedule+0xe7/0x3a0
[ 1448.851263][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1448.862817][   T31]  __mutex_lock+0x6c7/0xb90
[ 1448.870257][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[ 1448.876237][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1448.883850][   T31]  ? net_generic+0xea/0x2a0
[ 1448.895326][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[ 1448.904161][   T31]  nfsd_nl_threads_set_doit+0x698/0xbf0
[ 1448.913379][   T31]  genl_family_rcv_msg_doit+0x206/0x2f0
[ 1448.922528][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1448.924486][T26083] FAULT_INJECTION: forcing a failure.
[ 1448.924486][T26083] name failslab, interval 1, probability 0, space 0, times 0
[ 1448.932996][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1448.943493][T26083] CPU: 1 UID: 0 PID: 26083 Comm: syz.5.4143 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1448.943554][T26083] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1448.943569][T26083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1448.943591][T26083] Call Trace:
[ 1448.943602][T26083]  <TASK>
[ 1448.943615][T26083]  dump_stack_lvl+0x16c/0x1f0
[ 1448.943667][T26083]  should_fail_ex+0x512/0x640
[ 1448.943717][T26083]  ? fs_reclaim_acquire+0xae/0x150
[ 1448.943772][T26083]  should_failslab+0xc2/0x120
[ 1448.943815][T26083]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1448.943855][T26083]  ? security_inode_alloc+0x3b/0x2b0
[ 1448.943899][T26083]  security_inode_alloc+0x3b/0x2b0
[ 1448.943940][T26083]  inode_init_always_gfp+0xce4/0x1030
[ 1448.944005][T26083]  alloc_inode+0x86/0x240
[ 1448.944046][T26083]  path_from_stashed+0x2be/0xb00
[ 1448.944087][T26083]  ? __pfx_path_from_stashed+0x10/0x10
[ 1448.944124][T26083]  ? do_raw_read_unlock+0x44/0xe0
[ 1448.944192][T26083]  ns_get_path+0x5f/0x80
[ 1448.944246][T26083]  proc_ns_get_link+0x121/0x260
[ 1448.944303][T26083]  ? __pfx_proc_ns_get_link+0x10/0x10
[ 1448.944358][T26083]  ? __pfx___might_resched+0x10/0x10
[ 1448.944402][T26083]  ? __pfx_proc_ns_get_link+0x10/0x10
[ 1448.944456][T26083]  step_into+0x1b22/0x2270
[ 1448.944515][T26083]  ? __pfx_step_into+0x10/0x10
[ 1448.944564][T26083]  ? find_held_lock+0x2b/0x80
[ 1448.944610][T26083]  path_openat+0x749/0x2d40
[ 1448.944676][T26083]  ? __pfx_path_openat+0x10/0x10
[ 1448.944727][T26083]  do_filp_open+0x20b/0x470
[ 1448.944763][T26083]  ? __pfx_do_filp_open+0x10/0x10
[ 1448.944827][T26083]  ? alloc_fd+0x471/0x7d0
[ 1448.944893][T26083]  do_sys_openat2+0x11b/0x1d0
[ 1448.944940][T26083]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1448.945006][T26083]  __x64_sys_openat+0x174/0x210
[ 1448.945054][T26083]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1448.945106][T26083]  ? do_user_addr_fault+0x843/0x1370
[ 1448.945153][T26083]  do_syscall_64+0xcd/0x230
[ 1448.945214][T26083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1448.945250][T26083] RIP: 0033:0x7f520e58d2d0
[ 1448.945279][T26083] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[ 1448.945317][T26083] RSP: 002b:00007f520f3fbf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1448.945352][T26083] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f520e58d2d0
[ 1448.945377][T26083] RDX: 0000000000000002 RSI: 00007f520f3fbfa0 RDI: 00000000ffffff9c
[ 1448.945400][T26083] RBP: 00007f520f3fbfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1448.945422][T26083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1448.945444][T26083] R13: 0000000000000000 R14: 00007f520e7b5fa0 R15: 00007ffce70bc518
[ 1448.945488][T26083]  </TASK>
[ 1449.229226][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1449.234118][   T31]  ? security_capable+0x7e/0x260
[ 1449.239193][   T31]  genl_rcv_msg+0x55c/0x800
[ 1449.243772][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1449.249595][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1449.255045][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 1449.261267][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[ 1449.266266][   T31]  netlink_rcv_skb+0x16a/0x440
[ 1449.271274][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1449.276401][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1449.281766][   T31]  ? __pfx_down_read+0x10/0x10
[ 1449.286657][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1449.292016][   T31]  genl_rcv+0x28/0x40
[ 1449.296763][   T31]  netlink_unicast+0x53a/0x7f0
[ 1449.303165][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1449.308688][   T31]  netlink_sendmsg+0x8d1/0xdd0
[ 1449.313513][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1449.319297][   T31]  ____sys_sendmsg+0xa95/0xc70
[ 1449.324141][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[ 1449.329740][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1449.335117][   T31]  ? try_to_wake_up+0xa2f/0x1680
[ 1449.340476][   T31]  ___sys_sendmsg+0x134/0x1d0
[ 1449.345219][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1449.351151][   T31]  __sys_sendmsg+0x16d/0x220
[ 1449.355815][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1449.361094][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1449.366108][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1449.371828][   T31]  do_syscall_64+0xcd/0x230
[ 1449.376577][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1449.382548][   T31] RIP: 0033:0x7fbd1978e969
[ 1449.387143][   T31] RSP: 002b:00007fbd1a5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1449.395901][   T31] RAX: ffffffffffffffda RBX: 00007fbd199b5fa0 RCX: 00007fbd1978e969
[ 1449.406864][   T31] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1449.414932][   T31] RBP: 00007fbd19810ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1449.423007][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1449.431128][   T31] R13: 0000000000000000 R14: 00007fbd199b5fa0 R15: 00007ffe499b91b8
[ 1449.439369][   T31]  </TASK>
[ 1449.442524][   T31] 
[ 1449.442524][   T31] Showing all locks held in the system:
[ 1449.450965][   T31] 1 lock held by khungtaskd/31:
[ 1449.467445][   T31]  #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1449.480470][   T31] 3 locks held by kworker/1:1/47:
[ 1449.485545][   T31]  #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1449.496450][   T31]  #1: ffffc90000b87d18 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1449.509238][   T31]  #2: ffffffff8e3ca840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 1449.519462][   T31] 2 locks held by kworker/u9:3/15537:
[ 1449.524871][   T31]  #0: ffff888025cae948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1449.535715][   T31]  #1: ffffc9000cf07d18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1449.547035][   T31] 2 locks held by getty/22637:
[ 1449.551821][   T31]  #0: ffff888035b3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1449.562991][   T31]  #1: ffffc9000a8632f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1449.575565][   T31] 2 locks held by syz.4.3675/23347:
[ 1449.583386][   T31]  #0: ffffffff901c8690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1449.591743][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[ 1449.602520][   T31] 2 locks held by syz-executor/23607:
[ 1449.608760][   T31]  #0: ffff88807e1c20e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1449.620019][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1449.629838][   T31] 2 locks held by syz.3.3759/23792:
[ 1449.635097][   T31]  #0: ffffffff901c8690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1449.643787][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[ 1449.654005][   T31] 2 locks held by syz-executor/24056:
[ 1449.660276][   T31]  #0: ffff888029b240e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[ 1449.671037][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1449.681064][   T31] 
[ 1449.683421][   T31] =============================================
[ 1449.683421][   T31] 
[ 1449.692058][   T31] NMI backtrace for cpu 0
[ 1449.692084][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1449.692133][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1449.692146][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1449.692164][   T31] Call Trace:
[ 1449.692174][   T31]  <TASK>
[ 1449.692187][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1449.692235][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1449.692269][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1449.692318][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1449.692361][   T31]  watchdog+0xf70/0x12c0
[ 1449.692411][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1449.692449][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1449.692492][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1449.692531][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1449.692588][   T31]  kthread+0x3c2/0x780
[ 1449.692632][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692676][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692718][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692763][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692805][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1449.692836][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692884][   T31]  ret_from_fork+0x45/0x80
[ 1449.692930][   T31]  ? __pfx_kthread+0x10/0x10
[ 1449.692976][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1449.693053][   T31]  </TASK>
[ 1449.693064][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1449.839149][    C1] NMI backtrace for cpu 1
[ 1449.839174][    C1] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1449.839216][    C1] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1449.839227][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1449.839244][    C1] Workqueue: events free_obj_work
[ 1449.839290][    C1] RIP: 0010:__orc_find+0x92/0xf0
[ 1449.839319][    C1] Code: 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc <49> 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83
[ 1449.839345][    C1] RSP: 0018:ffffc90000b876d8 EFLAGS: 00000283
[ 1449.839364][    C1] RAX: ffffffff912732ec RBX: ffffffff909f985c RCX: dffffc0000000000
[ 1449.839382][    C1] RDX: ffffffff821f2db2 RSI: 0000000000000000 RDI: ffffffff909f982c
[ 1449.839399][    C1] RBP: ffffffff909f9850 R08: ffffffff91273352 R09: 0000000000000000
[ 1449.839416][    C1] R10: 0000000000000002 R11: 0000000000011f2d R12: ffffffff909f9858
[ 1449.839432][    C1] R13: ffffffff821f2d7a R14: ffffffff909f982c R15: ffffffff909f984c
[ 1449.839449][    C1] FS:  0000000000000000(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000
[ 1449.839474][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1449.839491][    C1] CR2: 00007f520e77d2d8 CR3: 0000000012fce000 CR4: 00000000003526f0
[ 1449.839508][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1449.839524][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1449.839540][    C1] Call Trace:
[ 1449.839548][    C1]  <TASK>
[ 1449.839560][    C1]  ? kasan_save_free_info+0x3a/0x60
[ 1449.839599][    C1]  unwind_next_frame+0x2ec/0x20a0
[ 1449.839627][    C1]  ? kasan_save_free_info+0x3b/0x60
[ 1449.839666][    C1]  ? find_held_lock+0x2b/0x80
[ 1449.839689][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1449.839719][    C1]  arch_stack_walk+0x94/0x100
[ 1449.839751][    C1]  ? kasan_save_free_info+0x3b/0x60
[ 1449.839791][    C1]  stack_trace_save+0x8e/0xc0
[ 1449.839817][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1449.839844][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1449.839885][    C1]  kasan_save_stack+0x33/0x60
[ 1449.839911][    C1]  ? kasan_save_stack+0x33/0x60
[ 1449.839936][    C1]  ? kasan_save_track+0x14/0x30
[ 1449.839961][    C1]  ? kasan_save_free_info+0x3b/0x60
[ 1449.840025][    C1]  kasan_save_track+0x14/0x30
[ 1449.840051][    C1]  kasan_save_free_info+0x3b/0x60
[ 1449.840088][    C1]  __kasan_slab_free+0x51/0x70
[ 1449.840116][    C1]  kmem_cache_free+0x2d4/0x4d0
[ 1449.840142][    C1]  ? free_object_list.isra.0+0xf8/0x2a0
[ 1449.840169][    C1]  free_object_list.isra.0+0xf8/0x2a0
[ 1449.840192][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1449.840227][    C1]  free_obj_work+0x18c/0x390
[ 1449.840250][    C1]  ? __pfx_free_obj_work+0x10/0x10
[ 1449.840282][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1449.840308][    C1]  process_one_work+0x9cc/0x1b70
[ 1449.840355][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1449.840399][    C1]  ? assign_work+0x1a0/0x250
[ 1449.840436][    C1]  worker_thread+0x6c8/0xf10
[ 1449.840483][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1449.840521][    C1]  kthread+0x3c2/0x780
[ 1449.840557][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840592][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840626][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840661][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840696][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1449.840719][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840756][    C1]  ret_from_fork+0x45/0x80
[ 1449.840795][    C1]  ? __pfx_kthread+0x10/0x10
[ 1449.840831][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1449.840877][    C1]  </TASK>
[ 1449.841288][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1450.197434][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) 
[ 1450.210835][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[ 1450.216821][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 1450.226899][   T31] Call Trace:
[ 1450.230197][   T31]  <TASK>
[ 1450.233150][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1450.237785][   T31]  panic+0x71c/0x800
[ 1450.241724][   T31]  ? __pfx_panic+0x10/0x10
[ 1450.246174][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1450.251592][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1450.257612][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1450.263030][   T31]  ? watchdog+0xdda/0x12c0
[ 1450.267479][   T31]  ? watchdog+0xdcd/0x12c0
[ 1450.271938][   T31]  watchdog+0xdeb/0x12c0
[ 1450.276241][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.280955][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1450.286196][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1450.291256][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1450.295966][   T31]  kthread+0x3c2/0x780
[ 1450.300080][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.304708][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.309335][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.313956][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.318587][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1450.323414][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.328052][   T31]  ret_from_fork+0x45/0x80
[ 1450.332507][   T31]  ? __pfx_kthread+0x10/0x10
[ 1450.337135][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1450.341968][   T31]  </TASK>
[ 1450.345327][   T31] Kernel Offset: disabled
[ 1450.349667][   T31] Rebooting in 86400 seconds..