last executing test programs:

29.462735672s ago: executing program 2 (id=1111):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

27.529838786s ago: executing program 3 (id=1114):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

25.068351515s ago: executing program 2 (id=1118):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff])
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0)
pread64$auto(r1, 0x0, 0x3, 0xfdd)
mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x7)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f00000009c0), 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc)
socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
io_setup$auto(0xffff, &(0x7f0000000580))
io_setup$auto(0xa, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_TIOCGEXCL(r0, 0x80045440, &(0x7f0000000000)=0x1)
select$auto(0xe, &(0x7f00000000c0)={[0xc04c, 0x1, 0x6, 0x3, 0x400, 0x3, 0x9, 0x1, 0x1, 0x407, 0x1, 0x7, 0x3, 0x0, 0x2, 0x1]}, 0x0, 0x0, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x400000e, 0x100000000007)

23.420818721s ago: executing program 3 (id=1122):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0)
write$auto(0x3, 0x0, 0x7fffffffffffffff)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
connect$auto(0x3, 0x0, 0x50)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
msync$auto(0x110c230000, 0x200001, 0x6)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
socket(0x26, 0x5, 0x0)

18.018560888s ago: executing program 2 (id=1126):
socket(0x2d, 0x2, 0x0)
unshare$auto(0x40000080)
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000)
r0 = open(0x0, 0x0, 0x57e)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
fanotify_init$auto(0x8, 0x2000000000002)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5')
fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)

17.217968844s ago: executing program 0 (id=1127):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

16.429362146s ago: executing program 3 (id=1128):
mmap$auto(0x2000000000000000, 0x9, 0x4000000001df, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
socket(0x11, 0x3, 0x9)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$auto(r1, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff}, 0x6a)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000004)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x87, 0x8, 0x1, 0x948b, 0x5, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x400, 0x5d8, 0x1000000000000009, 0x7, 0x8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000008007, 0x800000000000004, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x4, 0xe05a, 0x4]}, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000001c40), 0xffffffffffffffff)
r4 = syz_clone(0x411, 0x0, 0x5a, 0x0, 0x0, 0x0)
kcmp$auto_KCMP_FILE(r4, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
getpid()
sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000001c80)={0x8ec, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_MASK={0x6fc, 0x7, 0x0, 0x1, [@generic="4e882c3916452324f84be9c096c2a7b208d967a396b414aeb548cc94a8bbf4528c2ea617e8d14a4191c6190bf1fa0406ebaf27ab7247990691d1f16b9ef671d6fa315caec62e8ea0cf9cca9e2c779fbcb66aaaac3c09245adece05d087dae88054263e0863458f789fd978a312eb3678a92b5b", @generic="16d489d7d2548050a57f26aa816b32bec3d73f0bac63de67612b830af75813cdb12905b01090a432d5803ce57b318e31132624e51386075b68230682a0cdf1f3e605145b7c9c47621ed1fdb62337349a8d", @typed={0xc, 0x9c, 0x0, 0x0, @str='$$\\\x9f,^^\x00'}, @typed={0x8, 0xab, 0x0, 0x0, @u32=0x200}, @generic="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"]}, @OVS_FLOW_ATTR_ACTIONS={0x1d6, 0x2, 0x0, 0x1, [@generic="5c16eae057bfbafaf3b87d66cbaf94072fc30555196945be2b10a78df6ac0feda21713c606fb65da9282a647aa98103321440ec79770ac4d603c7ccf7d15a6cb8ad2f74e70c68f29adfa9ed6d180b72aba0dcff85056ff90bfdb8ed110faeb170ac7e50fb55b90e0fa66f15bb66f2286ffcea7a0541ba48e80f5edc91877e6722a7d5fedaa3f2174685a72005295099f4e64b6861daa06d61d85b2fcec740de11cf63153879f003387ea742060bb027eeef9ffd0a05ce16bbe0662b8459aa0b8cf6c60c961caff617bbf7cd7589f5f67290d194e", @typed={0x4, 0x83}, @nested={0xbc, 0x7c, 0x0, 0x1, [@typed={0xb6, 0x148, 0x0, 0x0, @binary="5f81a87f55a95d1b082ac220148cbc1521c0fd4d110bf0d4b4e650241a39b8d42e845d83f303c3e7f413ea4d7edf7f3244bc3625c17edd23d8f7d7131095439f29defefb668631e40dcacaeeab0f255750f05882ee3c3baa821b5c9e7a7c08ebb6691a3f87949ee4927ac183eb8a6399f2a5ce613d741d7049898cd05a3d7523705731b5679b7375629e594b889b7b69fb61c69fa385c859537959cd7a4cd903891800ac9d6dc1d4f43d8a954f711cdaa5fc"}, @generic]}, @generic="19386327c35f068fa6d58bcf55d2d51f9685fed66cb87d60db16d719e897e0ab81d031d7ae30c00118d5fbb6af595271496b11b96c074962b84d808c75cb"]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x8ec}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

13.297478036s ago: executing program 0 (id=1130):
mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0xfffffffffffffffb)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket(0xa, 0x1, 0x84)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
poll$auto(0x0, 0x5, 0x108)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
open$dir(0x0, 0x22000, 0x100)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2f8)
ioctl$auto_SNDRV_CTL_IOCTL_POWER(r1, 0xc00455d0, 0x0)
ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
sendmsg$auto_NL80211_CMD_DEL_STATION(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x4880)
r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0)
ioctl$auto_MEMGETBADBLOCK(r5, 0x40084d0b, &(0x7f0000000040)=0x7)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0)
ioctl$auto(r6, 0xc0285629, r6)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000001a80)={0xda8, r4, 0x3, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x44, 0xfd, "e1d177bdae086bf64afb51afa77212513b37240f3cb5fad6666310dd088e7f61a259c8c27f7614a5eb7a7375eb905bcd908b53999451375e25904fa6ec807e05"}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_BSS_SELECT={0xd24, 0xe3, 0x0, 0x1, [@nested={0x8b, 0xb4, 0x0, 0x1, [@generic="615413756fac945e7b51b2885b396bda9ae6c80abcfcf8bfc877fbfd949c6b48bd3cb589fa393ed7426a3b3b6793c4473ab2ef977208dd4618b05b66f7c16a5e9b37e62061db07378c41636e94f49321323e33fb0eafd8b791fa3705e6a144ba641158877c9c6f8d24c86394715eaf2427c1157c2f1555fa9f03c8e1e9dda3a13ad737c4fd3b24"]}, @generic="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", @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x9, 0xbb, "038677045f"}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0xda8}, 0x1, 0x0, 0x0, 0x4000}, 0xc4)
madvise$auto(0x7, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
faccessat$auto(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_SNDCTL_SEQ_PANIC(r2, 0x5111, 0x0)

11.180523862s ago: executing program 2 (id=1133):
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x0, 0x0)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x8, 0x7, 0x0, 0x1, [@generic="68c3e315"]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxc\x00', 0x800, 0x0)
r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)='5', 0x1)
ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000140)={0x8, 0x4, 0x7, 0x80000000, 0x9})
capset$auto(0x0, &(0x7f0000000240)={0x8, 0xa2})
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r3, 0x4161, 0x0)

10.454620162s ago: executing program 3 (id=1135):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

9.917591701s ago: executing program 1 (id=1136):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r0 = fanotify_init$auto(0x3, 0x3)
ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13")
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
read$auto_uinput_fops_uinput(r1, 0x0, 0x0)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

9.483181489s ago: executing program 2 (id=1137):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff])
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0)
pread64$auto(r1, 0x0, 0x3, 0xfdd)
mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x7)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f00000009c0), 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc)
socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
io_setup$auto(0xffff, &(0x7f0000000580))
io_setup$auto(0xa, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_TIOCGEXCL(r0, 0x80045440, &(0x7f0000000000)=0x1)
select$auto(0xe, &(0x7f00000000c0)={[0xc04c, 0x1, 0x6, 0x3, 0x400, 0x3, 0x9, 0x1, 0x1, 0x407, 0x1, 0x7, 0x3, 0x0, 0x2, 0x1]}, 0x0, 0x0, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x400000e, 0x100000000007)

9.082631875s ago: executing program 0 (id=1138):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

8.849658468s ago: executing program 1 (id=1139):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0x23, 0x80a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00'})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1416", @ANYRES16=r1, @ANYBLOB="100028bd7000fddbdf252c"], 0x14}, 0x1, 0x1000060}, 0x8c011)
shmctl$auto(0x8, 0xfffffffe, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee00, 0x3ff, 0x6, 0x6, 0x400}, 0xffffffff, 0x4, 0x76d2, 0x3, @raw=0x6, @raw=0x9322, 0x40, 0x0, &(0x7f0000000040)="b5b8704c75117c52a0aee18e66292b885eec514213972b750b27c06199c226a6a333a6c0ba308d759a13b442eb3f708cebc821abf4185252d4f6a4e0bdf1fdfa25db53274435f55190c472b9069f8039ab068b32f9a52407216888532182847abca053bfb896b4d1e0a54d50809c29c8bea054", 0x0})
socket(0x1d, 0x2, 0x6)
socket(0x10, 0x80000, 0x75)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0)
pread64$auto(r2, 0x0, 0x800003, 0x270)
r3 = socket(0x2b, 0x1, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x11, 0xa, 0x300)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x70653cb9, 0x7, 0x1f, 0x1, 0x948b, 0x5, 0x15f4da07, 0x9, 0x1010, 0xb1, 0xeffffffffffdfffe, 0x1000, 0xb, 0x100000000, 0x9, 0xa]}, 0x0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r3, 0x0, 0x80)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x6, 0x40008)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x1f00}, 0x0)
prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x72, 0x0, 0x0)

7.787335052s ago: executing program 1 (id=1140):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

6.383989195s ago: executing program 3 (id=1141):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, 0x0, 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x15, 0x5, 0x0)
prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7)
unshare$auto(0x40000080)

5.809571094s ago: executing program 0 (id=1142):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x11, 0xa, 0x9)
mmap$auto(0x0, 0x351d, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
socket(0x1d, 0x2, 0x7)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x8100, 0x0)
socket(0x10, 0x2, 0x0)
sysfs$auto(0x2, 0x43, 0x0)
fsopen$auto(0x0, 0x1)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x2, 0x0)
socket(0x11, 0x3, 0x9)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x121c40, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x541c, r1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0xbc9a24602ebc743d, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x3b8e, r2)

5.620177637s ago: executing program 1 (id=1143):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xff80}, 0x1, 0x0, 0x0, 0x4004810}, 0x884)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81720000fffff7a684ff293a00", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r3, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
sysfs$auto(0x2, 0x23, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250c0000001d000280d2f7abf5204c1c01107d33d6d37bc50e476301cfa9375e0781"], 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4014)
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(&(0x7f0000000080)='}F/]%)*@\x00', 0xff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)

4.885241422s ago: executing program 0 (id=1144):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff])
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0)
pread64$auto(r1, 0x0, 0x3, 0xfdd)
mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x7)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f00000009c0), 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc)
socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
io_setup$auto(0xffff, &(0x7f0000000580))
io_setup$auto(0xa, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_TIOCGEXCL(r0, 0x80045440, &(0x7f0000000000)=0x1)
select$auto(0xe, &(0x7f00000000c0)={[0xc04c, 0x1, 0x6, 0x3, 0x400, 0x3, 0x9, 0x1, 0x1, 0x407, 0x1, 0x7, 0x3, 0x0, 0x2, 0x1]}, 0x0, 0x0, 0x0)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x400000e, 0x100000000007)

3.87243845s ago: executing program 2 (id=1145):
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe)
migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
utimensat$auto(0xffffffffffffffff, &(0x7f0000000300)='\x00', &(0x7f0000000100)={0x6, 0x3ffffffc}, 0x1000)
fcntl$auto(0x3, 0x4, 0xa553)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
ioctl$auto(0xc8, 0x400454d4, 0xe)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
readv$auto(0xffffffffffffffff, 0x0, 0x3)

2.730068016s ago: executing program 1 (id=1146):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x9, @loopback}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0002, 0x19)

1.456819973s ago: executing program 0 (id=1147):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r0 = fanotify_init$auto(0x3, 0x3)
ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13")
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
read$auto_uinput_fops_uinput(r1, 0x0, 0x0)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

435.938409ms ago: executing program 1 (id=1148):
r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000001100), 0x400, 0x0)
read$auto_evm_key_ops_evm_secfs(r0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0xa, 0x3, 0x3b)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000880}, 0x200000a1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x4000800)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
read$auto(0x3, 0x0, 0x80)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio22\x00', 0x1cb502, 0x0)
ioctl$auto(r5, 0x5646, r5)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
fcntl$auto_F_CREATED_QUERY(r6, 0x404, 0xdc5)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x5, 0x7aabb7ea, 0x0, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x5, 0x1, 0x1, 0xc, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x40, 0x40, 0x40, 0x5, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6820, 0xb3, 0x9efe, 0x6, 0x72, 0x8, 0x5, 0x931c, 0x2f, 0x3, 0xff, 0xfffffffb, 0x80000000, 0x74814ca1, 0x0, 0xd0, 0x20, 0x3, 0x6, 0x10001, 0x5, 0x0, 0xffffffd9, 0xe, 0x3, 0x10, 0x3, 0x12, 0x6578, 0xfffffff9, 0x2, 0x1b, 0xa9, 0x6, 0x7, 0x3, 0xca92, 0x82, 0x9, 0x2, 0xa, 0xb4b3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x63a4183b, 0x0, 0x4d84, 0x3bc, 0x2, 0x0, 0x8, 0x10, 0x10000, 0x30f5, 0x8000, 0x56f, 0x7, 0x4, 0x1ff, 0x10001, 0x3, 0xffff, 0x40, 0x17, 0x8, 0x6, 0x6, 0x5, 0x1ff, 0x65bb, 0x29, 0x7, 0xfffffffe, 0x4, 0x5, 0x2, 0x3, 0xf2, 0xe, 0x0, 0x6, 0xffffffff, 0x0, 0xa896, 0x2, 0x1, 0x200, 0x7, 0x2, 0x8, 0x4, 0xf04, 0x6, 0x3, 0xe9b, 0x12d, 0x9, 0x4, 0x5, 0x3, 0x8, 0x40000000], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca00000000000000008d501b1329af8d4108ac0400000000040000a1b2dfae0f309c6ea588833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"})
readv$auto(r6, &(0x7f0000000a80)={0x0, 0xfffffffffffffffc}, 0x4000000000001)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x3}, 0x100000000006)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)

0s ago: executing program 3 (id=1149):
mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400)
setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlock$auto(0x112, 0x80006)
ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv6/conf/caif0/accept_dad\x00', 0x28283, 0x0)
mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ptyp8\x00', 0x30100, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000012c0)=ANY=[@ANYRES8=r0, @ANYRES8=r4, @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80)
sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES16=r3, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004)
unshare$auto(0x40000080)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1)
sendfile$auto(r0, r0, 0x0, 0x80000000003)
mprotect$auto(0x200000000000, 0x806120, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x3, 0x2)
mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa10a)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts.
[   92.966890][ T5619] cgroup: Unknown subsys name 'net'
[   93.067334][ T5619] cgroup: Unknown subsys name 'cpuset'
[   93.079034][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   94.886304][ T5619] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   96.796375][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.807600][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.817246][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.826598][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.836954][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.953329][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.964620][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.982952][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.991705][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.000158][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.029627][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.041646][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.063577][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.071867][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.084983][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.093807][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.107650][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.115256][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.123858][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.124744][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.194937][   T29] cfg80211: failed to load regulatory.db
[   98.430842][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.438708][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.446062][ T5631] bridge_slave_0: entered allmulticast mode
[   98.454014][ T5631] bridge_slave_0: entered promiscuous mode
[   98.497340][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.504879][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.512050][ T5631] bridge_slave_1: entered allmulticast mode
[   98.520099][ T5631] bridge_slave_1: entered promiscuous mode
[   98.642785][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.696045][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.804606][ T5631] team0: Port device team_slave_0 added
[   98.834949][ T5631] team0: Port device team_slave_1 added
[   98.873974][ T5643] Bluetooth: hci0: command tx timeout
[   98.949528][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.957745][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.983767][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.033167][ T5643] Bluetooth: hci1: command tx timeout
[   99.051000][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.058168][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.087032][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.114417][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.121709][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.129414][ T5637] bridge_slave_0: entered allmulticast mode
[   99.137180][ T5637] bridge_slave_0: entered promiscuous mode
[   99.176451][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.183984][ T5643] Bluetooth: hci3: command tx timeout
[   99.184281][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.193597][ T5643] Bluetooth: hci2: command tx timeout
[   99.196756][ T5637] bridge_slave_1: entered allmulticast mode
[   99.202464][ T5637] bridge_slave_1: entered promiscuous mode
[   99.311623][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.321367][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.328937][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.336326][ T5640] bridge_slave_0: entered allmulticast mode
[   99.344032][ T5640] bridge_slave_0: entered promiscuous mode
[   99.377572][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.387109][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.394544][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.401765][ T5640] bridge_slave_1: entered allmulticast mode
[   99.409403][ T5640] bridge_slave_1: entered promiscuous mode
[   99.435491][ T5631] hsr_slave_0: entered promiscuous mode
[   99.442865][ T5631] hsr_slave_1: entered promiscuous mode
[   99.472431][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.480030][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.487355][ T5641] bridge_slave_0: entered allmulticast mode
[   99.494833][ T5641] bridge_slave_0: entered promiscuous mode
[   99.527509][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.534891][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.542354][ T5641] bridge_slave_1: entered allmulticast mode
[   99.550484][ T5641] bridge_slave_1: entered promiscuous mode
[   99.571387][ T5637] team0: Port device team_slave_0 added
[   99.580934][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.615649][ T5637] team0: Port device team_slave_1 added
[   99.623907][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.644205][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.691547][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.742540][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.749647][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.776000][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.789435][ T5640] team0: Port device team_slave_0 added
[   99.814227][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.821339][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.847539][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.860617][ T5640] team0: Port device team_slave_1 added
[   99.876128][ T5641] team0: Port device team_slave_0 added
[   99.924533][ T5641] team0: Port device team_slave_1 added
[   99.943398][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.950424][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.976495][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.016994][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.024194][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.050887][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.087578][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.094728][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.121197][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.161561][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.168826][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.194960][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.221106][ T5637] hsr_slave_0: entered promiscuous mode
[  100.227710][ T5637] hsr_slave_1: entered promiscuous mode
[  100.234417][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[  100.240249][ T5637] Cannot create hsr debugfs directory
[  100.354606][ T5640] hsr_slave_0: entered promiscuous mode
[  100.361084][ T5640] hsr_slave_1: entered promiscuous mode
[  100.367780][ T5640] debugfs: 'hsr0' already exists in 'hsr'
[  100.373664][ T5640] Cannot create hsr debugfs directory
[  100.387398][ T5641] hsr_slave_0: entered promiscuous mode
[  100.394777][ T5641] hsr_slave_1: entered promiscuous mode
[  100.400996][ T5641] debugfs: 'hsr0' already exists in 'hsr'
[  100.406897][ T5641] Cannot create hsr debugfs directory
[  100.684479][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.699747][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.733820][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.745472][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.796230][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.807027][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.843657][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.854329][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.943307][ T5643] Bluetooth: hci0: command tx timeout
[  100.978058][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.991253][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.000237][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  101.010581][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.018866][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  101.031482][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.041808][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.054415][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.113781][ T5643] Bluetooth: hci1: command tx timeout
[  101.179199][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.191117][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.199562][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.212307][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.220907][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.232109][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.250107][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.260583][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.273316][ T5643] Bluetooth: hci2: command tx timeout
[  101.279690][ T5647] Bluetooth: hci3: command tx timeout
[  101.359072][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.406728][ T5641] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  101.417348][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.426905][ T5641] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.438030][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.454442][ T5641] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.465483][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.486044][ T5641] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.497693][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.524619][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[  101.567914][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.575469][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.600279][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.607490][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.722205][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.769013][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.806963][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[  101.840088][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.847422][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.889962][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[  101.909715][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.917094][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.954895][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.962155][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.011709][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.019075][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.041500][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.097071][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[  102.133166][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.140335][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.155092][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.162283][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.953554][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.023690][ T5643] Bluetooth: hci0: command tx timeout
[  103.152382][ T5631] veth0_vlan: entered promiscuous mode
[  103.184174][ T5643] Bluetooth: hci1: command tx timeout
[  103.206029][ T5631] veth1_vlan: entered promiscuous mode
[  103.342366][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.350328][ T5643] Bluetooth: hci2: command tx timeout
[  103.356379][ T5643] Bluetooth: hci3: command tx timeout
[  103.370975][ T5631] veth0_macvtap: entered promiscuous mode
[  103.395733][ T5631] veth1_macvtap: entered promiscuous mode
[  103.491703][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.504632][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.549968][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.599924][  T164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.609918][  T164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.622291][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.640812][ T5637] veth0_vlan: entered promiscuous mode
[  103.647128][  T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.657152][  T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.718312][ T5637] veth1_vlan: entered promiscuous mode
[  103.785083][ T5641] veth0_vlan: entered promiscuous mode
[  103.840165][ T5641] veth1_vlan: entered promiscuous mode
[  103.902325][ T5637] veth0_macvtap: entered promiscuous mode
[  103.923686][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.946072][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.959915][ T5637] veth1_macvtap: entered promiscuous mode
[  103.975521][ T5640] veth0_vlan: entered promiscuous mode
[  104.014115][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.027446][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.061155][ T5640] veth1_vlan: entered promiscuous mode
[  104.078933][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.097157][ T5641] veth0_macvtap: entered promiscuous mode
[  104.126423][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.144142][ T5641] veth1_macvtap: entered promiscuous mode
[  104.157272][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  104.178372][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.188519][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.198636][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.218993][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.298548][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.347434][ T5640] veth0_macvtap: entered promiscuous mode
[  104.376350][ T5640] veth1_macvtap: entered promiscuous mode
[  104.390611][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.437713][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.460495][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.480622][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.500019][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.525534][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.569173][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.587397][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.596791][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.646377][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.658777][ T5782] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  104.671863][   T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.706754][   T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.717199][   T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.785620][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.801095][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.878572][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.917040][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.062222][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.084522][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.103496][ T5643] Bluetooth: hci0: command tx timeout
[  105.222262][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.260117][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.268482][ T5643] Bluetooth: hci1: command tx timeout
[  105.424016][ T5643] Bluetooth: hci3: command tx timeout
[  105.430026][ T5647] Bluetooth: hci2: command tx timeout
[  105.439977][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.461280][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.633488][ T5788] FAULT_INJECTION: forcing a failure.
[  105.633488][ T5788] name failslab, interval 1, probability 0, space 0, times 1
[  105.662252][ T5788] CPU: 0 UID: 0 PID: 5788 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[  105.662300][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  105.662328][ T5788] Call Trace:
[  105.662339][ T5788]  <TASK>
[  105.662351][ T5788]  dump_stack_lvl+0x100/0x190
[  105.662396][ T5788]  should_fail_ex.cold+0x5/0xa
[  105.662434][ T5788]  should_failslab+0xc2/0x120
[  105.662477][ T5788]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  105.662517][ T5788]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  105.662563][ T5788]  ? alloc_unbound_pwq+0x3ff/0xdd0
[  105.662624][ T5788]  alloc_unbound_pwq+0x3ff/0xdd0
[  105.662746][ T5788]  apply_wqattrs_prepare+0x3aa/0xbb0
[  105.662816][ T5788]  apply_workqueue_attrs_locked+0x64/0xe0
[  105.662873][ T5788]  __alloc_workqueue+0xf55/0x1940
[  105.662923][ T5788]  alloc_workqueue_noprof+0xc7/0x130
[  105.662962][ T5788]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  105.663009][ T5788]  ? __pfx___debug_object_init+0x10/0x10
[  105.663064][ T5788]  nci_register_device+0x394/0xb80
[  105.663112][ T5788]  ? __pfx_nci_register_device+0x10/0x10
[  105.663158][ T5788]  ? lockdep_init_map_type+0x5c/0x250
[  105.663211][ T5788]  virtual_ncidev_open+0x141/0x220
[  105.663253][ T5788]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  105.663293][ T5788]  misc_open+0x26d/0x450
[  105.663339][ T5788]  ? __pfx_misc_open+0x10/0x10
[  105.663384][ T5788]  chrdev_open+0x234/0x6a0
[  105.663412][ T5788]  ? __pfx_chrdev_open+0x10/0x10
[  105.663460][ T5788]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  105.663498][ T5788]  do_dentry_open+0x6ab/0x14d0
[  105.663542][ T5788]  ? __pfx_chrdev_open+0x10/0x10
[  105.663595][ T5788]  vfs_open+0x82/0x3f0
[  105.663633][ T5788]  path_openat+0x2873/0x4280
[  105.663728][ T5788]  ? __pfx_path_openat+0x10/0x10
[  105.663786][ T5788]  do_file_open+0x20e/0x430
[  105.663836][ T5788]  ? __pfx_do_file_open+0x10/0x10
[  105.663907][ T5788]  ? alloc_fd+0x471/0x7a0
[  105.663954][ T5788]  ? do_getname+0x191/0x390
[  105.663989][ T5788]  do_sys_openat2+0x10f/0x1e0
[  105.664024][ T5788]  ? __pfx_do_sys_openat2+0x10/0x10
[  105.664073][ T5788]  __x64_sys_openat+0x12d/0x210
[  105.664109][ T5788]  ? __pfx___x64_sys_openat+0x10/0x10
[  105.664159][ T5788]  do_syscall_64+0x115/0x840
[  105.664185][ T5788]  ? clear_bhb_loop+0x40/0x90
[  105.664223][ T5788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.664254][ T5788] RIP: 0033:0x7fbda4b9de59
[  105.664291][ T5788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.664319][ T5788] RSP: 002b:00007fbda5a41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  105.664353][ T5788] RAX: ffffffffffffffda RBX: 00007fbda4e25fa0 RCX: 00007fbda4b9de59
[  105.664372][ T5788] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  105.664390][ T5788] RBP: 00007fbda4c33e6f R08: 0000000000000000 R09: 0000000000000000
[  105.664407][ T5788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.664424][ T5788] R13: 00007fbda4e26038 R14: 00007fbda4e25fa0 R15: 00007ffe5afc9018
[  105.664462][ T5788]  </TASK>
[  106.893109][ T5805] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5'.
[  106.990266][ T5805] Zero length message leads to an empty skb
[  108.777680][ T5643] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  110.441050][ T5843] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  110.774542][ T5852] process 'syz.1.12' launched ':,' with NULL argv: empty string added
[  111.571675][ T5832] mmap: syz.0.10 (5832) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.914945][ T5861] nvme_fabrics: missing parameter 'transport=%s'
[  111.934179][ T5861] nvme_fabrics: missing parameter 'nqn=%s'
[  115.470761][ T5897] netlink: 342 bytes leftover after parsing attributes in process `syz.1.20'.
[  115.508539][ T5897] IPv6: NLM_F_CREATE should be specified when creating new route
[  115.520927][ T5897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.529381][ T5897] IPv6: NLM_F_CREATE should be set when creating new route
[  115.536740][ T5897] IPv6: NLM_F_CREATE should be set when creating new route
[  117.293774][ T5911] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[  117.303134][ T5911] netlink: 9 bytes leftover after parsing attributes in process `syz.1.23'.
[  117.760171][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  118.019334][ T5922] netlink: 338 bytes leftover after parsing attributes in process `syz.2.24'.
[  118.117305][ T5922] netlink: 338 bytes leftover after parsing attributes in process `syz.2.24'.
[  118.291537][ T5926] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  118.998912][ T5930] device-mapper: ioctl: name not supplied when creating device
[  121.495376][ T5958] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  122.496356][ T5974] FAULT_INJECTION: forcing a failure.
[  122.496356][ T5974] name failslab, interval 1, probability 0, space 0, times 0
[  122.496408][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.3.34 Not tainted syzkaller #0 PREEMPT(full) 
[  122.496435][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  122.496449][ T5974] Call Trace:
[  122.496456][ T5974]  <TASK>
[  122.496465][ T5974]  dump_stack_lvl+0x100/0x190
[  122.496513][ T5974]  should_fail_ex.cold+0x5/0xa
[  122.496540][ T5974]  should_failslab+0xc2/0x120
[  122.496571][ T5974]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  122.496603][ T5974]  ? kstrdup_const+0x63/0x80
[  122.496635][ T5974]  kstrdup+0x51/0xe0
[  122.496660][ T5974]  kstrdup_const+0x63/0x80
[  122.496685][ T5974]  alloc_vfsmnt+0xe5/0x710
[  122.496711][ T5974]  ? __pfx___might_resched+0x10/0x10
[  122.496748][ T5974]  clone_mnt+0x4b/0x930
[  122.496783][ T5974]  copy_tree+0xfc/0xbf0
[  122.496805][ T5974]  ? __pfx_down_write+0x10/0x10
[  122.496837][ T5974]  copy_mnt_ns+0x3fa/0x1180
[  122.496867][ T5974]  ? __pfx_copy_mnt_ns+0x10/0x10
[  122.496894][ T5974]  ? kmem_cache_alloc_noprof+0x2d7/0x6a0
[  122.496922][ T5974]  ? create_new_namespaces+0x30/0xac0
[  122.496967][ T5974]  create_new_namespaces+0xd3/0xac0
[  122.497006][ T5974]  ? bpf_lsm_capable+0x9/0x10
[  122.497028][ T5974]  ? security_capable+0x80/0x260
[  122.497070][ T5974]  unshare_nsproxy_namespaces+0xf2/0x220
[  122.497096][ T5974]  ksys_unshare+0x438/0xab0
[  122.497125][ T5974]  ? __pfx_ksys_unshare+0x10/0x10
[  122.497164][ T5974]  __x64_sys_unshare+0x31/0x40
[  122.497192][ T5974]  do_syscall_64+0x115/0x840
[  122.497212][ T5974]  ? clear_bhb_loop+0x40/0x90
[  122.497241][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.497265][ T5974] RIP: 0033:0x7f162999de59
[  122.497288][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.497317][ T5974] RSP: 002b:00007f162a7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  122.497339][ T5974] RAX: ffffffffffffffda RBX: 00007f1629c26090 RCX: 00007f162999de59
[  122.497354][ T5974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000
[  122.497368][ T5974] RBP: 00007f1629a33e6f R08: 0000000000000000 R09: 0000000000000000
[  122.497383][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.497397][ T5974] R13: 00007f1629c26128 R14: 00007f1629c26090 R15: 00007fffad437aa8
[  122.497427][ T5974]  </TASK>
[  124.548458][ T5643] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  126.113862][ T6022] netlink: 25 bytes leftover after parsing attributes in process `syz.0.43'.
[  126.699084][ T6023] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  131.014160][ T6076] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  133.036954][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.048637][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  133.259147][ T6095] syz.1.55 (6095) used greatest stack depth: 18976 bytes left
[  134.461281][ T6122] device-mapper: ioctl: name not supplied when creating device
[  141.026931][ T6189] loop6: detected capacity change from 0 to 8192
[  142.042627][ T6222] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  159.872099][ T6433] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  159.906723][ T6433] File: /dev/nullb0 PID: 6433 Comm: syz.1.115
[  173.158190][ T6625] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  173.268360][ T6625] File: /dev/nullb0 PID: 6625 Comm: syz.3.154
[  174.369576][ T6645] FAULT_INJECTION: forcing a failure.
[  174.369576][ T6645] name fail_futex, interval 1, probability 0, space 0, times 1
[  174.419670][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.0.159 Not tainted syzkaller #0 PREEMPT(full) 
[  174.419713][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  174.419743][ T6645] Call Trace:
[  174.419754][ T6645]  <TASK>
[  174.419767][ T6645]  dump_stack_lvl+0x100/0x190
[  174.419811][ T6645]  should_fail_ex.cold+0x5/0xa
[  174.419850][ T6645]  get_futex_key+0x1d2/0x14f0
[  174.419910][ T6645]  ? __pfx_get_futex_key+0x10/0x10
[  174.419965][ T6645]  ? __pfx_core_sys_select+0x10/0x10
[  174.420024][ T6645]  futex_wake+0xf4/0x5e0
[  174.420069][ T6645]  ? __pfx_futex_wake+0x10/0x10
[  174.420116][ T6645]  ? poll_select_finish+0x36e/0x670
[  174.420171][ T6645]  do_futex+0x2b2/0x440
[  174.420206][ T6645]  ? __pfx_do_futex+0x10/0x10
[  174.420250][ T6645]  __x64_sys_futex+0x34f/0x4d0
[  174.420290][ T6645]  ? __pfx___x64_sys_futex+0x10/0x10
[  174.420333][ T6645]  ? __pfx_ksys_write+0x10/0x10
[  174.420396][ T6645]  do_syscall_64+0x115/0x840
[  174.420430][ T6645]  ? clear_bhb_loop+0x40/0x90
[  174.420476][ T6645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.420511][ T6645] RIP: 0033:0x7f4ef9d9de59
[  174.420544][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.420578][ T6645] RSP: 002b:00007f4efaba70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  174.420611][ T6645] RAX: ffffffffffffffda RBX: 00007f4efa025fa8 RCX: 00007f4ef9d9de59
[  174.420633][ T6645] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4efa025fac
[  174.420654][ T6645] RBP: 00007f4efa025fa0 R08: 0000000000000001 R09: 0000000000000000
[  174.420675][ T6645] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  174.420695][ T6645] R13: 00007f4efa026038 R14: 00007ffc2bc889a0 R15: 00007ffc2bc88a88
[  174.420738][ T6645]  </TASK>
[  179.415574][ T6735] netlink: 25 bytes leftover after parsing attributes in process `syz.3.177'.
[  194.465636][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.477699][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  222.143932][ T7334] Bluetooth: hci0: command 0x0406 tx timeout
[  222.151149][ T7334] Bluetooth: hci2: command 0x0406 tx timeout
[  222.163413][ T7334] Bluetooth: hci3: command 0x0406 tx timeout
[  222.171617][ T7334] Bluetooth: hci1: command 0x0406 tx timeout
[  223.993054][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  255.907582][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  255.917131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  262.803103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  301.169973][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'.
[  310.698513][ T8623] nbd: must specify a size in bytes for the device
[  311.298309][ T8628] netlink: 25 bytes leftover after parsing attributes in process `syz.1.550'.
[  311.666616][ T8636] ubi0: attaching mtd0
[  311.691042][ T8636] ubi0: scanning is finished
[  311.721647][ T8636] ubi0: empty MTD device detected
[  312.623359][ T8636] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  312.638993][ T8636] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  312.700251][ T8636] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  312.708818][ T8636] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  312.748808][ T8636] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  312.785809][ T8636] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  312.838004][ T8636] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3081021140
[  313.018373][ T8636] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  313.166898][ T8652] ubi0: background thread "ubi_bgt0d" started, PID 8652
[  313.213694][ T8640] ubi0: detaching mtd0
[  313.338344][ T8640] ubi0: mtd0 is detached
[  317.344313][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.354333][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  317.602908][ T8713] nbd: must specify at least one socket
[  318.265714][ T8719] nbd: must specify a size in bytes for the device
[  318.282628][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  322.006021][ T8776] nbd: must specify at least one socket
[  324.597430][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'.
[  325.864231][ T8821] random: crng reseeded on system resumption
[  338.745488][ T8930] nbd: must specify a size in bytes for the device
[  349.812153][ T9069] nbd: must specify a size in bytes for the device
[  378.787559][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.794722][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  391.212809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  405.759596][ T9799] nbd: must specify a size in bytes for the device
[  409.082033][ T9854] random: crng reseeded on system resumption
[  413.180430][ T9902] random: crng reseeded on system resumption
[  418.242593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  425.982162][T10097] random: crng reseeded on system resumption
[  426.252484][T10100] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[  430.607689][T10152] FAULT_INJECTION: forcing a failure.
[  430.607689][T10152] name failslab, interval 1, probability 0, space 0, times 0
[  430.643062][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) 
[  430.643109][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  430.643138][T10152] Call Trace:
[  430.643154][T10152]  <TASK>
[  430.643167][T10152]  dump_stack_lvl+0x100/0x190
[  430.643296][T10152]  should_fail_ex.cold+0x5/0xa
[  430.643358][T10152]  should_failslab+0xc2/0x120
[  430.643430][T10152]  kmem_cache_alloc_noprof+0x91/0x6a0
[  430.643484][T10152]  ? ext4_alloc_io_end_vec+0x2b/0x1c0
[  430.643591][T10152]  ext4_alloc_io_end_vec+0x2b/0x1c0
[  430.643631][T10152]  ext4_do_writepages+0x171c/0x3ed0
[  430.643700][T10152]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  430.643836][T10152]  ? trace_hrtimer_start+0x77/0x220
[  430.643913][T10152]  ? __pfx_ext4_do_writepages+0x10/0x10
[  430.643981][T10152]  ? ext4_writepages+0x347/0x750
[  430.644026][T10152]  ext4_writepages+0x347/0x750
[  430.644075][T10152]  ? __pfx_ext4_writepages+0x10/0x10
[  430.644135][T10152]  ? do_writepages+0x4b5/0x600
[  430.644180][T10152]  ? do_writepages+0x4b5/0x600
[  430.644218][T10152]  ? __pfx_ext4_writepages+0x10/0x10
[  430.644269][T10152]  do_writepages+0x278/0x600
[  430.644308][T10152]  ? __pfx_do_writepages+0x10/0x10
[  430.644341][T10152]  ? do_raw_spin_unlock+0x145/0x1e0
[  430.644388][T10152]  ? _raw_spin_unlock+0x28/0x50
[  430.644434][T10152]  filemap_writeback+0x22d/0x2e0
[  430.644480][T10152]  ? __pfx_filemap_writeback+0x10/0x10
[  430.644559][T10152]  ? mt_find+0x45e/0x8e0
[  430.644633][T10152]  ? __pfx_mt_find+0x10/0x10
[  430.644675][T10152]  file_write_and_wait_range+0xcd/0x140
[  430.644726][T10152]  ext4_sync_file+0x358/0xb60
[  430.644798][T10152]  ? __pfx_ext4_sync_file+0x10/0x10
[  430.644840][T10152]  ? __up_read+0x240/0x980
[  430.644873][T10152]  ? __pfx___up_read+0x10/0x10
[  430.644903][T10152]  ? __do_sys_msync+0x39b/0x590
[  430.644939][T10152]  ? __pfx_ext4_sync_file+0x10/0x10
[  430.644980][T10152]  vfs_fsync_range+0x9b/0x190
[  430.645057][T10152]  __do_sys_msync+0x3ca/0x590
[  430.645101][T10152]  do_syscall_64+0x115/0x840
[  430.645152][T10152]  ? clear_bhb_loop+0x40/0x90
[  430.645202][T10152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.645246][T10152] RIP: 0033:0x7fbda4b9de59
[  430.645275][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.645309][T10152] RSP: 002b:00007fbda59ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a
[  430.645352][T10152] RAX: ffffffffffffffda RBX: 00007fbda4e26180 RCX: 00007fbda4b9de59
[  430.645375][T10152] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000
[  430.645397][T10152] RBP: 00007fbda4c33e6f R08: 0000000000000000 R09: 0000000000000000
[  430.645418][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.645440][T10152] R13: 00007fbda4e26218 R14: 00007fbda4e26180 R15: 00007ffe5afc9018
[  430.645485][T10152]  </TASK>
[  439.152944][T10269] random: crng reseeded on system resumption
[  440.227532][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.240699][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  441.397979][T10294] nbd: must specify a size in bytes for the device
[  444.815625][T10345] nbd: must specify a size in bytes for the device
[  451.724509][T10447] random: crng reseeded on system resumption
[  470.424034][T10713] nbd: must specify a size in bytes for the device
[  470.436793][   T30] audit: type=1800 audit(1843104823.500:2): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.954" name="dbroot" dev="configfs" ino=34787 res=0 errno=0
[  470.937746][T10722] random: crng reseeded on system resumption
[  473.542153][T10766] nbd: must specify a size in bytes for the device
[  477.733852][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'.
[  477.995519][T10816] openvswitch: netlink: Message has 4 unknown bytes.
[  482.841969][T10918] nbd: must specify a size in bytes for the device
[  486.906755][T10978] nbd: must specify a size in bytes for the device
[  491.519018][T11057] random: crng reseeded on system resumption
[  493.169916][T11078] FAULT_INJECTION: forcing a failure.
[  493.169916][T11078] name failslab, interval 1, probability 0, space 0, times 0
[  493.183969][T11078] CPU: 1 UID: 0 PID: 11078 Comm: syz.3.1023 Not tainted syzkaller #0 PREEMPT(full) 
[  493.184000][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  493.184015][T11078] Call Trace:
[  493.184023][T11078]  <TASK>
[  493.184032][T11078]  dump_stack_lvl+0x100/0x190
[  493.184067][T11078]  should_fail_ex.cold+0x5/0xa
[  493.184090][T11078]  ? pcpu_block_update+0x20b/0x690
[  493.184128][T11078]  should_failslab+0xc2/0x120
[  493.184160][T11078]  kmem_cache_alloc_noprof+0x91/0x6a0
[  493.184189][T11078]  ? radix_tree_node_alloc.constprop.0+0x66/0x340
[  493.184304][T11078]  radix_tree_node_alloc.constprop.0+0x66/0x340
[  493.184345][T11078]  idr_get_free+0x52e/0xa00
[  493.184395][T11078]  idr_alloc_u32+0x1ac/0x320
[  493.184455][T11078]  ? __pfx_idr_alloc_u32+0x10/0x10
[  493.184511][T11078]  ? lock_acquire+0x1b9/0x370
[  493.184562][T11078]  idr_alloc_cyclic+0x10b/0x230
[  493.184587][T11078]  ? __pfx_idr_alloc_cyclic+0x10/0x10
[  493.184609][T11078]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  493.184634][T11078]  ? kfree+0x1e5/0x6c0
[  493.184674][T11078]  map_create+0x1476/0x3120
[  493.184739][T11078]  ? __pfx_map_create+0x10/0x10
[  493.184781][T11078]  ? __might_fault+0xc5/0x140
[  493.184832][T11078]  __sys_bpf+0x2a6e/0x4e80
[  493.184880][T11078]  ? __pfx___sys_bpf+0x10/0x10
[  493.184902][T11078]  ? find_held_lock+0x2b/0x80
[  493.184928][T11078]  ? futex_wake+0x4ea/0x5e0
[  493.184960][T11078]  ? futex_private_hash_put+0x115/0x1c0
[  493.185005][T11078]  ? __pfx_futex_wake+0x10/0x10
[  493.185038][T11078]  ? rcu_read_lock_any_held+0x6a/0xa0
[  493.185072][T11078]  ? find_held_lock+0x2b/0x80
[  493.185098][T11078]  ? ksys_write+0x190/0x250
[  493.185138][T11078]  ? ksys_write+0x190/0x250
[  493.185190][T11078]  ? __x64_sys_futex+0x34f/0x4d0
[  493.185215][T11078]  ? __x64_sys_futex+0x358/0x4d0
[  493.185239][T11078]  ? __x64_sys_openat+0x12d/0x210
[  493.185269][T11078]  ? xfd_validate_state+0x129/0x190
[  493.185309][T11078]  ? __x64_sys_bpf+0xce/0x140
[  493.185331][T11078]  __x64_sys_bpf+0xce/0x140
[  493.185371][T11078]  ? do_syscall_64+0x90/0x840
[  493.185395][T11078]  do_syscall_64+0x115/0x840
[  493.185415][T11078]  ? clear_bhb_loop+0x40/0x90
[  493.185445][T11078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.185470][T11078] RIP: 0033:0x7f162999de59
[  493.185491][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.185514][T11078] RSP: 002b:00007f162a7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.185537][T11078] RAX: ffffffffffffffda RBX: 00007f1629c25fa0 RCX: 00007f162999de59
[  493.185552][T11078] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000
[  493.185567][T11078] RBP: 00007f1629a33e6f R08: 0000000000000000 R09: 0000000000000000
[  493.185581][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.185596][T11078] R13: 00007f1629c26038 R14: 00007f1629c25fa0 R15: 00007fffad437aa8
[  493.185626][T11078]  </TASK>
[  497.610039][T11130] random: crng reseeded on system resumption
[  501.676148][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  501.682799][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  505.141204][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'.
[  506.542665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  507.145908][T11257] random: crng reseeded on system resumption
[  508.058174][T11261] FAULT_INJECTION: forcing a failure.
[  508.058174][T11261] name failslab, interval 1, probability 0, space 0, times 0
[  508.099720][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.0.1058 Not tainted syzkaller #0 PREEMPT(full) 
[  508.099765][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  508.099784][T11261] Call Trace:
[  508.099796][T11261]  <TASK>
[  508.099809][T11261]  dump_stack_lvl+0x100/0x190
[  508.099853][T11261]  should_fail_ex.cold+0x5/0xa
[  508.099892][T11261]  should_failslab+0xc2/0x120
[  508.099937][T11261]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  508.099979][T11261]  ? __d_alloc+0x35/0xa50
[  508.100026][T11261]  __d_alloc+0x35/0xa50
[  508.100064][T11261]  d_alloc+0x4a/0x1e0
[  508.100100][T11261]  lookup_one_qstr_excl+0x171/0x250
[  508.100145][T11261]  start_dirop+0x59/0xb0
[  508.100196][T11261]  simple_start_creating+0xf9/0x110
[  508.100283][T11261]  ? __pfx_simple_start_creating+0x10/0x10
[  508.100335][T11261]  ? mntput+0x70/0xa0
[  508.100380][T11261]  ? simple_pin_fs+0xa3/0x190
[  508.100426][T11261]  debugfs_start_creating.part.0+0x82/0x170
[  508.100551][T11261]  __debugfs_create_file+0xb3/0x4f0
[  508.100602][T11261]  debugfs_create_file_full+0x41/0x60
[  508.100649][T11261]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  508.100753][T11261]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  508.100800][T11261]  ? ida_alloc_range+0x70d/0x830
[  508.100860][T11261]  ? kasan_save_track+0x14/0x30
[  508.100898][T11261]  ? __kasan_kmalloc+0xaa/0xb0
[  508.100941][T11261]  ? lockdep_init_map_type+0x5c/0x250
[  508.101009][T11261]  preinit_net.part.0+0x252/0x920
[  508.101144][T11261]  copy_net_ns+0x339/0x7c0
[  508.101192][T11261]  create_new_namespaces+0x3ea/0xac0
[  508.101268][T11261]  unshare_nsproxy_namespaces+0xf2/0x220
[  508.101306][T11261]  ksys_unshare+0x438/0xab0
[  508.101361][T11261]  ? __pfx_ksys_unshare+0x10/0x10
[  508.101417][T11261]  __x64_sys_unshare+0x31/0x40
[  508.101456][T11261]  do_syscall_64+0x115/0x840
[  508.101485][T11261]  ? clear_bhb_loop+0x40/0x90
[  508.101524][T11261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.101556][T11261] RIP: 0033:0x7f4ef9d9de59
[  508.101584][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.101617][T11261] RSP: 002b:00007f4efaba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  508.101649][T11261] RAX: ffffffffffffffda RBX: 00007f4efa025fa0 RCX: 00007f4ef9d9de59
[  508.101669][T11261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  508.101689][T11261] RBP: 00007f4ef9e33e6f R08: 0000000000000000 R09: 0000000000000000
[  508.101708][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.101727][T11261] R13: 00007f4efa026038 R14: 00007f4efa025fa0 R15: 00007ffc2bc88a88
[  508.101768][T11261]  </TASK>
[  509.195195][T11285] ubi0: attaching mtd0
[  509.228199][T11285] ubi0: scanning is finished
[  509.598792][T11285] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  509.613701][T11285] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  509.630005][T11285] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  509.652861][T11285] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  509.668360][T11285] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  509.678364][T11285] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  509.713446][T11285] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3081021140
[  509.729422][T11285] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  509.740433][T11288] ubi0: detaching mtd0
[  509.754060][T11297] ubi0: background thread "ubi_bgt0d" started, PID 11297
[  509.809899][T11288] ubi0: mtd0 is detached
[  510.709399][T11313] random: crng reseeded on system resumption
[  512.607707][   T30] audit: type=1800 audit(1843104865.680:3): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1070" name="version" dev="configfs" ino=39263 res=0 errno=0
[  513.033475][T11345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1072'.
[  514.395690][T11374] ubi0: attaching mtd0
[  514.466546][T11374] ubi0: scanning is finished
[  514.643973][T11381] random: crng reseeded on system resumption
[  514.889744][T11374] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  514.956031][T11374] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  515.009798][T11374] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  515.068760][T11374] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  515.124814][T11374] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  515.173835][T11374] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  515.188057][T11374] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3081021140
[  515.202580][T11374] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  515.228757][T11379] ubi0: detaching mtd0
[  515.228958][T11386] ubi0: background thread "ubi_bgt0d" started, PID 11386
[  515.315050][T11379] ubi0: mtd0 is detached
[  518.819044][T11430] nbd: must specify a size in bytes for the device
[  519.408623][T11433] random: crng reseeded on system resumption
[  519.754849][   T30] audit: type=1800 audit(1843104872.830:4): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1086" name="version" dev="configfs" ino=39546 res=0 errno=0
[  520.221431][T11447] ubi0: attaching mtd0
[  520.257566][T11447] ubi0: scanning is finished
[  520.536338][T11447] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  520.554364][T11447] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  520.596264][T11447] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  520.675005][T11447] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  520.728397][T11447] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  520.742726][T11447] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  520.769592][T11447] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3081021140
[  520.822207][T11447] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  520.877087][T11452] ubi0: detaching mtd0
[  520.882638][T11458] ubi0: background thread "ubi_bgt0d" started, PID 11458
[  521.017319][T11452] ubi0: mtd0 is detached
[  523.456886][T11473] smpboot: CPU 1 is now offline
[  528.770200][   T30] audit: type=1800 audit(1843104881.840:5): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1100" name="version" dev="configfs" ino=40193 res=0 errno=0
[  530.839652][T11531] No such timeout policy ""
[  533.603746][T11563] random: crng reseeded on system resumption
[  546.355121][   T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.976172][T11645] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input5
[  552.548954][T11681] netlink: 'syz.0.1130': attribute type 11 has an invalid length.
[  555.367541][T11712] random: crng reseeded on system resumption
[  561.824663][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  561.835819][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  563.688781][T11765] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  563.790430][T11765] vivid-011: =================  START STATUS  =================
[  563.828612][T11765] vivid-011: Radio HW Seek Mode: Bounded
[  563.882380][T11765] vivid-011: Radio Programmable HW Seek: false
[  563.915683][T11765] vivid-011: RDS Rx I/O Mode: Block I/O
[  563.942661][T11765] vivid-011: Generate RBDS Instead of RDS: false
[  563.988355][T11765] vivid-011: RDS Reception: true
[  564.011026][T11765] vivid-011: RDS Program Type: 0 inactive
[  564.034827][T11765] vivid-011: RDS PS Name:  inactive
[  564.072302][T11765] vivid-011: RDS Radio Text:  inactive
[  564.099957][T11765] vivid-011: RDS Traffic Announcement: false inactive
[  564.134310][T11765] vivid-011: RDS Traffic Program: false inactive
[  564.160864][T11765] vivid-011: RDS Music: false inactive
[  564.199682][T11765] vivid-011: ==================  END STATUS  ==================
[  565.195535][T11772] ==================================================================
[  565.195557][T11772] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910
[  565.195627][T11772] Write of size 8 at addr ffffc90004c71000 by task syz.3.1149/11772
[  565.195646][T11772] 
[  565.195657][T11772] CPU: 0 UID: 0 PID: 11772 Comm: syz.3.1149 Not tainted syzkaller #0 PREEMPT(full) 
[  565.195684][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  565.195699][T11772] Call Trace:
[  565.195707][T11772]  <TASK>
[  565.195715][T11772]  dump_stack_lvl+0x100/0x190
[  565.195741][T11772]  print_report+0x13d/0x4b0
[  565.195775][T11772]  ? _raw_spin_lock_irqsave+0x52/0x60
[  565.195813][T11772]  ? sys_fillrect+0x174a/0x1910
[  565.195838][T11772]  kasan_report+0xdf/0x1c0
[  565.195873][T11772]  ? sys_fillrect+0x174a/0x1910
[  565.195903][T11772]  sys_fillrect+0x174a/0x1910
[  565.195936][T11772]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  565.196041][T11772]  bit_clear+0x17d/0x220
[  565.196102][T11772]  ? __pfx_bit_clear+0x10/0x10
[  565.196140][T11772]  ? fb_get_color_depth+0x120/0x250
[  565.196192][T11772]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  565.196236][T11772]  __fbcon_clear+0x633/0x760
[  565.196271][T11772]  ? __pfx_bit_clear+0x10/0x10
[  565.196312][T11772]  fbcon_scroll+0x48b/0x650
[  565.196348][T11772]  con_scroll+0x464/0x690
[  565.196406][T11772]  csi_ECMA.constprop.0+0x1238/0x3b60
[  565.196437][T11772]  ? find_held_lock+0x2b/0x80
[  565.196465][T11772]  ? __pfx_csi_ECMA.constprop.0+0x10/0x10
[  565.196500][T11772]  do_con_write+0x3660/0x4a30
[  565.196539][T11772]  ? __pfx_do_con_write+0x10/0x10
[  565.196568][T11772]  ? add_softcursor+0x1c0/0x290
[  565.196594][T11772]  ? con_write+0x93/0xb0
[  565.196624][T11772]  con_write+0x23/0xb0
[  565.196652][T11772]  n_tty_write+0x431/0x1160
[  565.196733][T11772]  ? __pfx_n_tty_write+0x10/0x10
[  565.196767][T11772]  ? __kasan_kmalloc+0xaa/0xb0
[  565.196794][T11772]  ? __pfx_woken_wake_function+0x10/0x10
[  565.196818][T11772]  ? rcu_is_watching+0x12/0xc0
[  565.196843][T11772]  ? file_tty_write.isra.0+0x694/0x890
[  565.196871][T11772]  ? kfree+0x1e5/0x6c0
[  565.196906][T11772]  ? __pfx_n_tty_write+0x10/0x10
[  565.196942][T11772]  file_tty_write.isra.0+0x4d2/0x890
[  565.196974][T11772]  redirected_tty_write+0xd4/0x120
[  565.197003][T11772]  vfs_write+0x6ac/0x1050
[  565.197039][T11772]  ? __pfx_redirected_tty_write+0x10/0x10
[  565.197076][T11772]  ? __pfx_vfs_write+0x10/0x10
[  565.197111][T11772]  ? find_held_lock+0x2b/0x80
[  565.197147][T11772]  ksys_write+0x12a/0x250
[  565.197183][T11772]  ? __pfx_ksys_write+0x10/0x10
[  565.197223][T11772]  do_syscall_64+0x115/0x840
[  565.197244][T11772]  ? clear_bhb_loop+0x40/0x90
[  565.197272][T11772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.197296][T11772] RIP: 0033:0x7f162999de59
[  565.197315][T11772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.197339][T11772] RSP: 002b:00007f162a7a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  565.197361][T11772] RAX: ffffffffffffffda RBX: 00007f1629c26180 RCX: 00007f162999de59
[  565.197377][T11772] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004
[  565.197406][T11772] RBP: 00007f1629a33e6f R08: 0000000000000000 R09: 0000000000000000
[  565.197420][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.197434][T11772] R13: 00007f1629c26218 R14: 00007f1629c26180 R15: 00007fffad437aa8
[  565.197476][T11772]  </TASK>
[  565.197484][T11772] 
[  565.197490][T11772] The buggy address belongs to a vmalloc virtual mapping
[  565.197507][T11772] Memory state around the buggy address:
[  565.197519][T11772]  ffffc90004c70f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  565.197543][T11772]  ffffc90004c70f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  565.197560][T11772] >ffffc90004c71000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  565.197574][T11772]                    ^
[  565.197585][T11772]  ffffc90004c71080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  565.197602][T11772]  ffffc90004c71100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  565.197615][T11772] ==================================================================
[  565.262267][T11772] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  565.262290][T11772] CPU: 0 UID: 0 PID: 11772 Comm: syz.3.1149 Not tainted syzkaller #0 PREEMPT(full) 
[  565.262319][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  565.262334][T11772] Call Trace:
[  565.262342][T11772]  <TASK>
[  565.262352][T11772]  dump_stack_lvl+0x100/0x190
[  565.262381][T11772]  vpanic+0x552/0x970
[  565.262403][T11772]  ? __pfx_vpanic+0x10/0x10
[  565.262430][T11772]  ? sys_fillrect+0x174a/0x1910
[  565.262457][T11772]  panic+0xd1/0xe0
[  565.262480][T11772]  ? __pfx_panic+0x10/0x10
[  565.262503][T11772]  ? sys_fillrect+0x174a/0x1910
[  565.262530][T11772]  ? preempt_schedule_common+0x42/0xc0
[  565.262616][T11772]  check_panic_on_warn.cold+0x19/0x34
[  565.262642][T11772]  end_report.part.0+0x3a/0x90
[  565.262677][T11772]  kasan_report.cold+0xe/0x18
[  565.262712][T11772]  ? sys_fillrect+0x174a/0x1910
[  565.262743][T11772]  sys_fillrect+0x174a/0x1910
[  565.262776][T11772]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  565.262817][T11772]  bit_clear+0x17d/0x220
[  565.262854][T11772]  ? __pfx_bit_clear+0x10/0x10
[  565.262893][T11772]  ? fb_get_color_depth+0x120/0x250
[  565.262928][T11772]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  565.262965][T11772]  __fbcon_clear+0x633/0x760
[  565.263000][T11772]  ? __pfx_bit_clear+0x10/0x10
[  565.263039][T11772]  fbcon_scroll+0x48b/0x650
[  565.263083][T11772]  con_scroll+0x464/0x690
[  565.263113][T11772]  csi_ECMA.constprop.0+0x1238/0x3b60
[  565.263144][T11772]  ? find_held_lock+0x2b/0x80
[  565.263173][T11772]  ? __pfx_csi_ECMA.constprop.0+0x10/0x10
[  565.263208][T11772]  do_con_write+0x3660/0x4a30
[  565.263250][T11772]  ? __pfx_do_con_write+0x10/0x10
[  565.263280][T11772]  ? add_softcursor+0x1c0/0x290
[  565.263307][T11772]  ? con_write+0x93/0xb0
[  565.263336][T11772]  con_write+0x23/0xb0
[  565.263365][T11772]  n_tty_write+0x431/0x1160
[  565.263407][T11772]  ? __pfx_n_tty_write+0x10/0x10
[  565.263441][T11772]  ? __kasan_kmalloc+0xaa/0xb0
[  565.263468][T11772]  ? __pfx_woken_wake_function+0x10/0x10
[  565.263492][T11772]  ? rcu_is_watching+0x12/0xc0
[  565.263518][T11772]  ? file_tty_write.isra.0+0x694/0x890
[  565.263546][T11772]  ? kfree+0x1e5/0x6c0
[  565.263582][T11772]  ? __pfx_n_tty_write+0x10/0x10
[  565.263617][T11772]  file_tty_write.isra.0+0x4d2/0x890
[  565.263650][T11772]  redirected_tty_write+0xd4/0x120
[  565.263679][T11772]  vfs_write+0x6ac/0x1050
[  565.263716][T11772]  ? __pfx_redirected_tty_write+0x10/0x10
[  565.263747][T11772]  ? __pfx_vfs_write+0x10/0x10
[  565.263781][T11772]  ? find_held_lock+0x2b/0x80
[  565.263817][T11772]  ksys_write+0x12a/0x250
[  565.263853][T11772]  ? __pfx_ksys_write+0x10/0x10
[  565.263894][T11772]  do_syscall_64+0x115/0x840
[  565.263915][T11772]  ? clear_bhb_loop+0x40/0x90
[  565.263943][T11772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.263968][T11772] RIP: 0033:0x7f162999de59
[  565.263987][T11772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.264011][T11772] RSP: 002b:00007f162a7a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  565.264034][T11772] RAX: ffffffffffffffda RBX: 00007f1629c26180 RCX: 00007f162999de59
[  565.264051][T11772] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004
[  565.264074][T11772] RBP: 00007f1629a33e6f R08: 0000000000000000 R09: 0000000000000000
[  565.264089][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.264104][T11772] R13: 00007f1629c26218 R14: 00007f1629c26180 R15: 00007fffad437aa8
[  565.264128][T11772]  </TASK>
[  565.264202][T11772] Kernel Offset: disabled