last executing test programs:

2m35.31757985s ago: executing program 0 (id=3457):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520")
r1 = socket(0x10, 0x2, 0x4)
write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2)
socket(0x3, 0x3, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r4 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
r5 = socket(0x15, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r6, 0x5, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080)
r7 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r7, &(0x7f0000000100)="632d7efe595046ab5c98199adf260600de16baef6176e6021e1dcedc5b00e8fdd880fee6fb9ca2ac324280530000000000000000e0ffffff10", 0x39)
signalfd4$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8000}, 0x9, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), r4)
close_range$auto(0x2, 0x8, 0x0)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)
getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)

2m33.446966879s ago: executing program 0 (id=3464):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r2 = socket(0x10, 0x2, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x26640, 0x155) (async)
socket(0x2, 0x2, 0x0) (async)
r3 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r4 = open(0x0, 0x22240, 0x155)
fgetxattr$auto(r4, 0x0, 0x0, 0xffffffff) (async)
socket(0x2, 0x1, 0x106) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async)
socket(0x2, 0x1, 0x106) (async)
listen$auto(0x3, 0x81) (async)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) (async)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20532744969ade88d855f193c95f28bc3c513ebf3eff4351f87b0faf7023fa053bf89a895e877a3367e65b5cfcc0de71483bafc5342b48eb81ab4569a594b13f90a2f7deac835d8bc97b323ddad056f6ec482fe966c405fddcd80001ecb82c4a"], 0x1ac}}, 0x20000890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2102, 0x0) (async)
futex$auto(&(0x7f0000000140)=0x5e8, 0x1, 0x3, &(0x7f00000001c0)={0x2, 0x7}, &(0x7f0000000280)=0xc7, 0x2ed4) (async)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) (async)
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, r1, 0x9, 0x5) (async)
socket(0x29, 0x80000, 0x0) (async)
mmap$auto(0x0, 0xe983, 0x80000000df, 0xeb1, 0x401, 0x8000) (async)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x4, 0x3}, 0xed7138c}, 0x9ae, 0x0)

2m33.057354188s ago: executing program 0 (id=3466):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[@ANYBLOB="36c29976", @ANYRES16=r3, @ANYBLOB="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"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, 0xffffffffffffffff, 0x8000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0)
write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0x2c, 0x5, 0x0)
ioperm$auto(0x7, 0x5ad2, 0xc)
modify_ldt$auto(0x40, 0x0, 0x7ff)
r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x4c2002, 0x0)
pread64$auto(r5, 0x0, 0x7ff, 0x400)
socket(0x9, 0x6, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0)

2m31.537176856s ago: executing program 0 (id=3469):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000003, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0900bd16ad6c99df25020000000600010001800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x808)
socket(0x2, 0x801, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r2, 0x11b, 0x2, 0x0, 0x0)
readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x800000000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4c800)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0)
socket(0x10, 0x2, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0)
pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0xa, 0x3, 0x2008, 0x0, 0x3)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)

2m29.619768242s ago: executing program 0 (id=3475):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x35, 0x2, 0x80000036)
setsockopt$auto(r0, 0x29, 0x3e, 0x0, 0x1ff)
prctl$auto(0x1000000003b, 0x3, 0x0, 0xd, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
read$auto(r0, 0x0, 0x3)
socket(0xa, 0x2, 0x0)
mmap$auto(0x7e, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8002)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xc)
socket(0x2, 0x1, 0x106)
socket(0x15, 0x3, 0x2)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
write$auto(0x3, 0x0, 0x7fffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(0x0, 0xd)
ftruncate$auto(0x0, 0x8800000)
socket(0x2, 0x2, 0x88)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
listen$auto(0x3, 0x400000)
mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0x2, 0x5)
prctl$auto(0x7b, 0x1, 0x4, 0xfffffffffffffe01, 0x7)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)

2m28.41648071s ago: executing program 0 (id=3478):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_fd, 0x100000000}, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6b)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x2020009, 0x80, 0xeb1, 0x401, 0x807)
write$auto(0x3, 0x0, 0xffd8)

2m13.367594982s ago: executing program 32 (id=3478):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_fd, 0x100000000}, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6b)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x2020009, 0x80, 0xeb1, 0x401, 0x807)
write$auto(0x3, 0x0, 0xffd8)

6.94987307s ago: executing program 1 (id=4011):
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000)
select$auto(0xa404, &(0x7f0000000080)={[0xfe, 0x274, 0x5, 0xd, 0x8, 0x76, 0x100, 0x0, 0xfffffffffffffffa, 0x1, 0x31c, 0x1, 0xa, 0x502, 0x4, 0x101]}, &(0x7f0000000100)={[0x7f, 0xec, 0x8b, 0x40, 0x1, 0x401, 0x5, 0x2, 0x2, 0x7fffffff, 0x3, 0x400000000, 0x3a802154, 0xe4, 0x8]}, &(0x7f0000000180)={[0xfffffffffffffe01, 0x1, 0x7, 0x4, 0x9, 0x400, 0xda100000000, 0x3, 0x7, 0x127e, 0xffffffffffffffff, 0x8, 0x2, 0x3, 0xb54, 0xfffffffffffffff9]}, &(0x7f0000000000)={0xffffffffffffe388, 0x401})
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4) (async)
socket(0x10, 0x2, 0x4)
socket(0x1d, 0x2, 0x7)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
epoll_create$auto(0x6)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0)
pread64$auto(r0, 0x0, 0x3ff, 0x9)
ioctl$auto_FITHAW(0xffffffffffffffff, 0xc0045878, 0xffffffffffff8001)
connect$auto(0x3, 0x0, 0x18)

6.323746332s ago: executing program 4 (id=4015):
statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r2=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x7ff, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=r3], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x8901, 0xffffffffffffffff)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008)

5.952456334s ago: executing program 4 (id=4018):
bind$auto(0xffffffffffffffff, 0x0, 0x66)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(0x0, 0x591002, 0x0)
vmsplice$auto(0xffffffffffffffff, 0x0, 0x2, 0x5)
writev$auto(0xffffffffffffffff, 0x0, 0x4)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop1\x00', 0x80400, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mprotect$auto(0x8000, 0x8, 0x8)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
close_range$auto(r2, r0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
acct$auto(0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000)
vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8)

5.325373091s ago: executing program 1 (id=4019):
r0 = socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x4, 0x3ff)
socketpair$auto(0xaf, 0x8, 0x3, 0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
sendfile$auto(r2, r2, 0x0, 0x7ffff000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r3, 0x64c6, 0x1e2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00f50000893e8222b6fd435937a093c74762b998199f2c45653cdc2a3ad20c1a966366ea4e86aa27f889a8b6a26af9be0daa59dc00b684bdadf2b4835fbaa33d1134703210ea7953efb382b860cf5b1db599e8e8a99895b005f796948efa639cf29fcd30dc6df610e10ddcfdbe20ecf57c0600000000000000cc70ef759a353dbab763b78afa4df8b41cd71d70361ec1eaebf7f2bf6fdac170db0c775bf0176b1ff19c43bb8bdffc1248ac5c2fa4386c6f34dcb52ade", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000)
recvfrom$auto(0x3, 0x0, 0x6, 0x1000fb, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
clock_adjtime$auto(0xfffffffffffffffb, 0x0)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7ffffffeb000)

5.304096623s ago: executing program 3 (id=4021):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3100001000000000002ca65de95b667827494d", 0x5e) (async)
mmap$auto(0x0, 0x7, 0x4000000000e0, 0xeb1, 0x401, 0x400) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) (async)
rseq$auto(&(0x7f0000000400)={0xe, 0x6, 0x0, 0x9, 0xfffffffe, 0x2, "4125a04a5a947c57594bdcf48be8f6f8203586427262672331fe7a514e555423210c136544a046d30a2cf16bf4c899e9033fc264674bb55a7a268449affb6db8e6517ee451dc24c7fb7fa98cf5288dc4247f5668b3a994108fc46f8ac24670df2b882ba648d71ee94e8d9f196246026261de899b94f6cf529dcebb"}, 0x8001, 0x0, 0x6) (async)
migrate_pages$auto(0x0, 0x2, 0x0, &(0x7f00000000c0)=0x3)
mmap$auto(0x0, 0x22020007, 0x9, 0xeb1, r1, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
unshare$auto(0x40100080) (async)
mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) (async)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) (async)
r3 = syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap$auto(0x0, 0x4, 0x3, 0x100040eb1, r2, 0x300000000002) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x4, 0x0, 0x100082) (async)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async)
shutdown$auto(0x200000003, 0x2) (async)
setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) (async)
r4 = pidfd_open$auto(0x0, 0x0)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy12/netdev:wlan0/stations/08:02:11:00:00:01/flags\x00', 0x40000, 0x0) (async)
setns(r4, 0x20000000) (async)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) (async)
open(&(0x7f0000000000)='./file0\x00', 0x2a4c0, 0x40) (async)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x10', 0x0) (async)
ptrace$auto(0x4206, r3, 0x0, 0x5)
move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000)
sched_setaffinity$auto(0x0, 0xb00, &(0x7f00000003c0))
symlink$auto(0x0, 0x0)

4.952600634s ago: executing program 3 (id=4022):
socket(0xa, 0x801, 0x84)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)

4.309399176s ago: executing program 2 (id=4023):
io_uring_setup$auto(0x59, &(0x7f0000000080)={0xfffffffe, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x9, 0x100000000}})
r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0)
read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0)
ioctl$auto(r1, 0xc0845658, r1)
socket(0xa, 0x2, 0x0)
getpeername$auto(0x3, 0x0, 0x0)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7fffffffffffffff, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r3, 0x0, 0x24, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0c1}, 0x4000040)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
pkey_free$auto(0x1)
keyctl$auto(0xfffffffd, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)

4.229571476s ago: executing program 1 (id=4024):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx7\x00', 0x2200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x4404c2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/48, 0x30) (async, rerun: 64)
syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async)
r2 = set_tid_address$auto(0x0)
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000080))
getdents$auto(r3, 0x0, 0x3f1) (async)
sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x20000000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async)
select$auto(0x80000001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd3e, 0x1, 0x948b, 0xaef, 0x2, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x10006d3f, 0x9, 0x9, 0xffffffffffffeffe]}, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async)
ioctl$auto(r1, 0x57, r0) (async)
getgid()
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
r4 = getpid()
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async, rerun: 64)
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async, rerun: 64)
close_range$auto(0x2, 0xa, 0x0) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
openat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0xff) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0)
socket(0xa, 0x801, 0x84)

4.169048541s ago: executing program 3 (id=4025):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
prlimit64$auto(0x0, 0x3, 0x0, 0x0)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
flistxattr$auto(r2, &(0x7f0000000000)='\x00', 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
close_range$auto(0x2, 0x8, 0x0)

3.171986515s ago: executing program 3 (id=4026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x805, 0x0)
bpf$auto(0xfffffffc, &(0x7f0000000100)=@bpf_attr_4={0x80, 0xffffffffffffffff, 0x40, r1}, 0x6f4)
close_range$auto(r0, r1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x7ffd)
msgsnd$auto(0x5, 0x0, 0x3, 0x8)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x8000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x17a, 0xfffffe01, 0x35}]})
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0xfbe8, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)

3.166791236s ago: executing program 4 (id=4027):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0)
ioctl$auto_BLKPG2(r1, 0x1269, 0x0) (fail_nth: 7)

3.05054098s ago: executing program 2 (id=4028):
mmap$auto(0x100000, 0x5, 0xfffffffffffffffa, 0x40eb2, 0x401, 0x300000000000) (async)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$auto(0x3, 0x0, 0x54) (async)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async)
setresuid$auto(0x2, 0x7, 0x8080)
socket(0xa, 0x5, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x37, 0x1, 0x0, 0x7f, 0x100000000) (async)
write$auto(r0, 0x0, 0x100000a3d9)
keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) (async)
semctl$auto(0x8, 0x806, 0x13, 0x46) (async)
getsockopt$auto(0xffffffffffffffff, 0xff, 0x90, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000140)=0x3) (async)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xb, 0x5, 0x8000001f, 0x40107, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0xa, 0x10000004)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x28, 0x801, 0x0) (async)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async)
shutdown$auto(0x200000003, 0x2) (async)
socket(0x2, 0x3, 0x100)
socket(0x1d, 0x2, 0x7) (async)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', <r4=>0x0})
mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
r5 = socket(0x2b, 0x1, 0x1)
ioctl$auto(r5, 0x8941, 0x4) (async)
connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r4}, 0x18)

3.047943409s ago: executing program 3 (id=4029):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x0)
write$auto(0x3, 0x0, 0x100082)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
socket(0x23, 0x80805, 0x0)
r0 = epoll_create$auto(0x3e)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
socket(0x2, 0x80002, 0x73)
r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=<r2=>0x0)
getsockname$auto(r1, &(0x7f00000008c0)=@nfc={0x27, r2, 0x0, 0x3}, &(0x7f0000000900)=0x7)
r3 = socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x705102, 0x0)
read$auto(r1, 0x0, 0x24)
write$auto(0x3, 0x0, 0x81)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r3)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mlockall$auto(0x7)
migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)

2.661323477s ago: executing program 1 (id=4030):
capset$auto(0x0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) (async)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/hsr_slave_0/router_solicitation_interval\x00', 0x4a0202, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b67, 0x1) (async)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r1, 0x0, 0x1ff) (async)
write$auto(0x3, 0x0, 0xfdef)
unshare$auto(0x40000080) (async)
write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100)
r2 = socket(0x11, 0x1, 0x87)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c1fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0d5ef018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e4")
ioctl$auto(r3, 0x541c, r4)
setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x8, 0x23, &(0x7f0000000140)='/dev/tty12\x00', 0x7)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
mprotect$auto(0x0, 0x806121, 0x6)

2.599939877s ago: executing program 2 (id=4031):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

2.30765515s ago: executing program 4 (id=4032):
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138)
open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x401)
msync$auto(0x2, 0x9, 0x40)
select$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/firmware/timeout\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000540)=""/150, 0x96)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0)
unshare$auto(0x40000080)
r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})

2.295374189s ago: executing program 2 (id=4033):
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38) (async)
ioctl$auto(0x3, 0x400454ca, 0x38)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x1) (async)
ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r3, 0x29, 0x4b, 0x0, 0x0)
ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) (async)
ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2.063381372s ago: executing program 2 (id=4034):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0)
mmap$auto(0x6, 0x40000000000e983, 0xdf, 0xeb1, r0, 0x8000)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
open(0x0, 0x161342, 0x100)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0)
socket(0x26, 0xa, 0x84)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2, 0x801, 0x100)
connect$auto(0x3, &(0x7f0000000000), 0x55)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
r5 = open(0x0, 0xeee00, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000880)={0xa6, @raw=0x6, @raw=0xfff, 0xa18, 0x0, '\x00', {0xffffffff, 0x69, 0x3, <r6=>0xee00, 0xee01, 0x5, 0x9, 0x100000001, {0x6, 0xfffffffc}, {0x200}, {0x80, 0x80000000}, 0x9, 0x26, 0x40, 0x80000000, 0x7, 0x9, 0x400, 0xc, 0x7, 0xb284, '\x00', 0x2, 0x5, 0x4, 0x7}})
msgctl$auto_IPC_STAT(0xfffffffd, 0x2, &(0x7f00000009c0)={{0x91f5, <r7=>0x0, 0x0, 0x0, 0x100, 0xfffffff8, 0x1}, &(0x7f0000000940), &(0x7f0000000980)=0xd, 0x0, 0x1, 0x0, 0x8, 0x80, 0x0, 0x6, 0x8, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff})
sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000001540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000000a40)={0xa44, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7690}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xf9f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/snd/pcmC0D0p\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x548, 0x7, 0x0, 0x1, [@nested={0x63, 0x80, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @fd}, @generic="079a1031c32fb8a37311bd16911a4e4d545353b83eb6dc8df89aa0004098204d0cf8acb5a4cf64b15dfe08f29fdf097f6cfbacfa7751bead7b4d35dc646dbe904840fba18d1cf0", @nested={0x4, 0x15}, @nested={0x4, 0xec}, @nested={0x4, 0x2b}, @typed={0x4, 0x104}]}, @nested={0xbd, 0x82, 0x0, 0x1, [@generic="bd62bfa72cc33ba9ab939ba1433584ff39af8ef04c5d628d050a20d1a4725d101bc8cadc6be3963e26352ac54ee1bdd82c0d9cf16c1b22767e74af75b1ad1fb034a118b0ae49651f2334f5f9f63664e5a303e0e8cf8e0e14f8720ccd75c32157bc58e48c8a0c9118e3dbeefa494dc237cb17dc2658ad07d0457a90ab23eec44f9dc99d232da73b4f521249d649fd22cda223bd9953bfb9e2c653d246bbec463c63ea390c8acaba8dbe61a87a0cdc75b3e3", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="a1a7b0159a81a610ed0eef23e5065fc2c4079fed7fcf1414d8b1d423403b7c5a503547e1abd07960b78e1e1f0158903e27c63683577128595a57b9eceb945bbdb88601f68e928dbfb85299dd15d004ff1ddfc6eab0e7ba155bc3713660cf80a6491d1c5e5fd5e317d39d0bb3aba20ab42151eca7c0e05eb392af7551605e359338c288ae26f49cf8451b3b5501fdf1588d63b18625935b629c7affb4445aabb3033fdc44634db7c04a39d37ee4742f4da9ec52", @typed={0x8, 0x4f, 0x0, 0x0, @fd=r3}, @nested={0xe9, 0x3e, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid}, @nested={0x4, 0x62}, @nested={0x4, 0xc7}, @generic="d4506e09cb74bff17c7917a65ba5c0e1e7209c45c0aa616f88e67e0295f23b01d660e3565b9f71de76ffac908cfad19936865e42e952e9d762414a65cb85a7b13a547e15819db61c6abd0aaa5a12f7cd0f986384cb537aece5aa726d4ed2ba61382986eb9affdae1207697e68581557c9514a7af3f0371e968673bf0d050d3494411ae478bfe5384c3993692cfc7ccaa1241b0c56289ca8ee22ba15d430e3792c1ee227c93926419fdcece78629c0dcf8dad7061", @generic="c259ec37872df9d1688c922cf801bc40a4acfa03eff0ef12e34fca2a809528bca1"]}, @nested={0x217, 0x3f, 0x0, 0x1, [@generic="da38d62f7e43696fae9f8d85ac3f73fb9e1c1f89d5db40797df97459d80ac1b7b767f4681e1220d060a5cacfc05a93dff2d50a55ce21dc43385948f6a018644d5a1d413bbb1bf4318f69eea30fad394ff44703acad6cc0bb491d41739dadc4203831c2f0aee9a106110f3895e91ea869c70cc7bfcbabff9f8df0f616167bc9cc4d43e006a611", @typed={0x8, 0xa2, 0x0, 0x0, @str='-[(\x00'}, @generic="12eef40f2d17ad91c86e91c4d1d26837c9833bbb198be1897012d3344cfe82dbcafe65f827b1e30b7072a82b4dbc8daf5d56d7a9cc3cd3390c8b030cac7405d8b0bae5b21b8a5b7b389ec179edc1f663dbd0714d3e1cc7fd508cf3760317fd530d93c24e2fea60e3939019fbc58b0240529cf350ae493cec934652b0df7d6cd177d29f512196428bc1230eb1fc2efb45af696f25ec3617bdd242386a899109739b9640f05f64853e46bf84d8d48bf9d7faddf41530121804281f27e7664f0fba58d74d", @nested={0x4, 0x65}, @generic="ff9fc89d9e76577f19040aa90f25e2dfb222658b8ce6c02a35b6c177ea51b2cb4675f8e11231c96c83221ea294b12f8faef5ea45816863006b595b359165677829de749cc167", @typed={0x77, 0x1f, 0x0, 0x0, @binary="e1239633892824450d3c664e2031a9f54919d11f5a5fda6af60b71830d6e322595e2d82d2662507ae84c8f75f514dc40c8810ab8fc5f9b09c2c39d15fdb05a2cf5ab973df7505e78c2b316be04e6439fb051a2f9e0f0d8825f26237e14c25ad1b9b53801203bf7ad4d459873723969a458a4cb"}]}, @generic="55a929ff349f5881083c01413e686af50cfaeb3a2245c88cca8f02a71fcfc4905eafc3cf0678205e84dfb1a68ad55f9ae2056b2e442db38eb3e8e28ee7f5a523e9da578daf1db2e86dfe1c214ed95f", @generic="fbed", @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @NBD_ATTR_SOCKETS={0x49a, 0x7, 0x0, 0x1, [@typed={0xa, 0xee, 0x0, 0x0, @str='&,]-#\x00'}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r6}, @nested={0x264, 0x114, 0x0, 0x1, [@generic="852ff353668b5fdf6dc7089bffbd86678e6e5d50c8c54759c4b8da9c68f65345971feb24ab5a3a7e", @generic="b066", @nested={0x4, 0xbc}, @typed={0x8, 0xdc, 0x0, 0x0, @fd=r1}, @generic="4c7632a9cba4fbea0a9f6e18898450f87881f32f87cb5439824d65f7679245fd4b7be453a64ea04bdb21c6fb57ce7b50e21acc99dc4b023b33a8fb23558c350c53748e22e1f15a9aa1b0d1319936d15e3b122e877fbe1849b376aa4098e4f92404687cc0b37b1ae265a91ba06a086ac37bd681be7bbfd90720bc9c6124a14260e6efc241bc8fe1e3def80a5ea29360badd5717bc97f2aa4f18f9113dff1fffc0628e2d04da95b9fc2616e1962a163a4e11f2cf0d7716dd3808f1097a0ac121017609ef79fa519cbf87b527181a14133f506c08dc12660ac74ff34ff292565a", @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@broadcast}, @generic="a0679029341717adbdc1cbd393ec47ad6b165e4813943a893ae497a3db0fcdf181be2e5a3a2ba939de7fa2a769dbc83971899c516edeb24f4fabae733ca460564957", @generic="92e53e1b1473942d363c885a30139b7e70437966a63e335c1f16516e448afa1dabbf025b6cf4be0e1f75e9ad12f52f6bfe933c3e271b5d3640864b09246f72def51a396721987e27aef19955f16c0434ec63805c23416506d145f31e0258933dd351e00f86bce2951eca07bb21a922462dbe3e6b719c50133a490fb07323f6354ffc47f678a68a63648f14e299ec49a5b07159cc493fdb97a463a2cfafc5ee6ecb8efa11d7c4ea20e3697223d0a799dc61b37e3418e968d1fcef51630633818bf1814003d2cfa91ddc15c4ba7a32d8709908f09bdca8d6c578f5dc13e82186b84939620f69d8eb0a676eac5e49c6c95af8b110c84cddf36f2e", @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @typed={0x8, 0x30, 0x0, 0x0, @u32}, @generic="2bc8147afb8f13ff63c7a1ed569e1996caa1ca857e435f18ed6ba1427cfac0381689a41e82ef7c3dd1c7ed7815c17e41f55b2d1cef4ca3ffd3b4228b495037279628584796f23cde9868ac253a84976ef391e0b75518677c061aeaa928e15e7672b515b135350d5f4e782c34d7724f3261f012191192cd280aeb645867097fb7921569ab647cda05499291f0817e50af6cf31c35677e809e47ca3a8d3e8b86b0cc774656e988d1bd52df910a0e1744eea856e469f9c0572a26b68987a9ee4dd210e1a456b398e67a6be502611cd75408c1183781f2ff1da7bf196725d93065c00004173f6f", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0xcf}]}, @nested={0x26, 0x132, 0x0, 0x1, [@generic="9aca5f859fc6758e50291910191427759bb599d072e875bb596872e79f12cd8d8999"]}, @generic="68735dd46c49c41c3d14976a24d2e06dc50387405d138ce521fd6ecc5e506c0cc0a2d32d5960a69f5a217fee57fb89491babf1d0e7654e1a98dc21a1d66990ca90c000023ae3e3f519ed7f106c391cf39488329cece89b2e02", @nested={0x54, 0x2, 0x0, 0x1, [@generic="21261038defd1c5a9ddd6dc9be058a2ca8f688e84ac1bd790964cae9bf572133581bc12637e11d7c2e96b2da40ae168ea4f7f7580b35f1063095498378bb4f1e75f9c01a473a673e1b055e3125c966a0"]}, @nested={0x51, 0xe2, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x10}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x8, 0x44, 0x0, 0x0, @uid=r7}, @generic="0adb4adf643823cbefc2efbce1345c32009581acad0a8247c3d5a60941bed3daff2e8b6eca8677e73413c1edda"]}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0xa44}, 0x1, 0x0, 0x0, 0xc091}, 0x4800)
msgctl$auto(0x8000, 0x100006, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0x20004090)
socket(0x21, 0x2, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x4836, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9)

2.059682979s ago: executing program 3 (id=4035):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0)
r0 = socket(0x1b, 0x3, 0x76)
madvise$auto(0x0, 0x2000040080000003, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0900bd16ad6c99df25020000000600010001800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x808)
socket(0x2, 0x801, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r2, 0x11b, 0x2, 0x0, 0x0)
readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x800000000001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4c800)
syz_genetlink_get_family_id$auto_nlctrl(0x0, r0)
socket(0x10, 0x2, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0)
pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0xa, 0x3, 0x2008, 0x0, 0x3)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)

1.601299206s ago: executing program 1 (id=4036):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x55)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x55)
statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242e03, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x27, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004020)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x800000000003, 0x15f4da0a, 0x7, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x1e, 0x800, 0x0)
getpid()
rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8)
mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, r1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_size_kb\x00', 0x105002, 0x0)
r3 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r3, 0x4, 0x4, 0x0, &(0x7f0000000140)=0x97)

612.285549ms ago: executing program 1 (id=4037):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
mmap$auto(0x6, 0x2000b, 0xdd1, 0xfffffffffffffffe, r0, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ioctl$auto(r1, 0x545c, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000100)={0x42011400, 0x0, 0x0, 0x0, {0x8000037}, 0x0, 0x0, 0x0, 0x0}, 0x58)
unshare$auto(0x40000080)

233.644953ms ago: executing program 4 (id=4038):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x85, 0x11, 0x0, 0x200)

115.712193ms ago: executing program 2 (id=4039):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x1ff)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x80106f53, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x43, 0x100000000, 0x4, 0x8, 0x3d34)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

0s ago: executing program 4 (id=4040):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0)
ioctl$auto_BLKPG2(r1, 0x1269, 0x0) (fail_nth: 8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts.
[   90.398050][ T5818] cgroup: Unknown subsys name 'net'
[   90.533542][ T5818] cgroup: Unknown subsys name 'cpuset'
[   90.543305][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.481308][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   94.715161][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.724587][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.732679][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.740663][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.751425][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.766115][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.779946][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.788405][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.796667][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.826098][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.909313][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.917590][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.926074][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.936678][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.944529][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.964633][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.972642][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.980541][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.988722][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.997321][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.481178][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   95.567889][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   95.580516][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   95.775206][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.783316][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.790844][ T5832] bridge_slave_0: entered allmulticast mode
[   95.798168][ T5832] bridge_slave_0: entered promiscuous mode
[   95.806653][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   95.837688][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.845124][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.852360][ T5832] bridge_slave_1: entered allmulticast mode
[   95.860197][ T5832] bridge_slave_1: entered promiscuous mode
[   95.934220][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.941991][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.949775][ T5838] bridge_slave_0: entered allmulticast mode
[   95.957133][ T5838] bridge_slave_0: entered promiscuous mode
[   96.008339][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.015670][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.022952][ T5838] bridge_slave_1: entered allmulticast mode
[   96.030387][ T5838] bridge_slave_1: entered promiscuous mode
[   96.037106][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.048060][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.055683][ T5828] bridge_slave_0: entered allmulticast mode
[   96.065450][ T5828] bridge_slave_0: entered promiscuous mode
[   96.076581][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.106676][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.114085][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.121722][ T5828] bridge_slave_1: entered allmulticast mode
[   96.129407][ T5828] bridge_slave_1: entered promiscuous mode
[   96.141605][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.213562][ T5832] team0: Port device team_slave_0 added
[   96.228447][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.255803][ T5832] team0: Port device team_slave_1 added
[   96.291613][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.318733][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.353223][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.361552][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.368725][ T5839] bridge_slave_0: entered allmulticast mode
[   96.376593][ T5839] bridge_slave_0: entered promiscuous mode
[   96.405542][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.418503][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.425596][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.451817][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.463780][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.473191][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.480813][ T5839] bridge_slave_1: entered allmulticast mode
[   96.488149][ T5839] bridge_slave_1: entered promiscuous mode
[   96.497733][ T5838] team0: Port device team_slave_0 added
[   96.507350][ T5838] team0: Port device team_slave_1 added
[   96.528016][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.535234][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.562117][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.640931][ T5828] team0: Port device team_slave_0 added
[   96.662425][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.671291][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.697559][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.710675][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.717749][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.744020][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.759828][ T5828] team0: Port device team_slave_1 added
[   96.768343][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.781397][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.873542][ T5151] Bluetooth: hci0: command tx timeout
[   96.879485][ T5836] Bluetooth: hci1: command tx timeout
[   96.904754][ T5839] team0: Port device team_slave_0 added
[   96.914223][ T5839] team0: Port device team_slave_1 added
[   96.939807][ T5838] hsr_slave_0: entered promiscuous mode
[   96.946225][ T5838] hsr_slave_1: entered promiscuous mode
[   96.954389][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.962429][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.988684][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.019772][ T5832] hsr_slave_0: entered promiscuous mode
[   97.026074][ T5832] hsr_slave_1: entered promiscuous mode
[   97.031863][ T5151] Bluetooth: hci3: command tx timeout
[   97.033253][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.037650][ T5151] Bluetooth: hci2: command tx timeout
[   97.050088][ T5832] Cannot create hsr debugfs directory
[   97.060512][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.067507][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.093968][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.187036][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.194591][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.221089][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.234470][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.241500][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.267648][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.387001][ T5828] hsr_slave_0: entered promiscuous mode
[   97.393537][ T5828] hsr_slave_1: entered promiscuous mode
[   97.400417][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.408010][ T5828] Cannot create hsr debugfs directory
[   97.473095][ T5839] hsr_slave_0: entered promiscuous mode
[   97.480785][ T5839] hsr_slave_1: entered promiscuous mode
[   97.487045][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.495103][ T5839] Cannot create hsr debugfs directory
[   97.822329][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.836483][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.869016][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.907783][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.984652][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.003861][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   98.030242][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   98.055222][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.131824][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.148378][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.181162][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.193480][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.284080][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.324688][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.364475][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.372245][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.405334][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.431882][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.456795][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   98.493333][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.500799][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.514668][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.521855][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.544732][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   98.593427][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.600637][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.633336][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.640536][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.744070][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.804146][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   98.875842][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.883055][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.914181][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.937869][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.945129][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.949499][ T5836] Bluetooth: hci1: command tx timeout
[   98.957921][ T5151] Bluetooth: hci0: command tx timeout
[   99.071449][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   99.115766][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.118926][ T5151] Bluetooth: hci2: command tx timeout
[   99.122975][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.128239][ T5151] Bluetooth: hci3: command tx timeout
[   99.181313][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.188465][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.433976][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.516817][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.642050][ T5838] veth0_vlan: entered promiscuous mode
[   99.697112][ T5838] veth1_vlan: entered promiscuous mode
[   99.765133][ T5832] veth0_vlan: entered promiscuous mode
[   99.783716][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.804388][ T5832] veth1_vlan: entered promiscuous mode
[   99.892191][ T5838] veth0_macvtap: entered promiscuous mode
[   99.904277][ T5838] veth1_macvtap: entered promiscuous mode
[   99.961388][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.969470][ T5839] veth0_vlan: entered promiscuous mode
[   99.983331][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.003047][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.015251][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.025585][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.035497][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.044343][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.066369][ T5832] veth0_macvtap: entered promiscuous mode
[  100.078374][ T5832] veth1_macvtap: entered promiscuous mode
[  100.088229][ T5839] veth1_vlan: entered promiscuous mode
[  100.154109][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.226725][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.255071][ T5839] veth0_macvtap: entered promiscuous mode
[  100.264758][ T5828] veth0_vlan: entered promiscuous mode
[  100.293428][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.304927][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.314320][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.325457][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.336881][ T5839] veth1_macvtap: entered promiscuous mode
[  100.377151][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.405897][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.420609][ T5828] veth1_vlan: entered promiscuous mode
[  100.482340][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.513058][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.532537][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.550067][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.565198][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.575564][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.586030][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.598352][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.616298][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.634509][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.650152][ T5828] veth0_macvtap: entered promiscuous mode
[  100.716497][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.726368][ T5828] veth1_macvtap: entered promiscuous mode
[  100.744369][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.761643][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.854168][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.956808][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.997179][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.029346][ T5151] Bluetooth: hci0: command tx timeout
[  101.034839][ T5151] Bluetooth: hci1: command tx timeout
[  101.038334][   T30] audit: type=1326 audit(1750608499.429:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68cb8e929 code=0x0
[  101.044413][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.072280][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.085217][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.125070][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.148033][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.190376][ T5151] Bluetooth: hci3: command tx timeout
[  101.190699][ T5836] Bluetooth: hci2: command tx timeout
[  101.330186][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.346314][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.555508][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.599242][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.950170][ T5930] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[  101.969576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.028088][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.040130][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.111341][   T24] cfg80211: failed to load regulatory.db
[  102.820801][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.947811][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  103.109105][ T5836] Bluetooth: hci1: command tx timeout
[  103.114602][ T5836] Bluetooth: hci0: command tx timeout
[  103.269112][ T5836] Bluetooth: hci2: command tx timeout
[  103.274739][ T5151] Bluetooth: hci3: command tx timeout
[  103.420572][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  104.629502][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  104.809396][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.869651][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.079269][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.289990][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.299170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.309188][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  105.509282][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'.
[  105.703350][ T5976] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  105.717868][ T5976] Zero length message leads to an empty skb
[  106.492420][ T5979] ecryptfs_parse_packet_length: Error parsing packet length
[  106.508949][ T5979] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  106.726601][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[  106.812237][   T30] audit: type=1800 audit(1750608505.189:3): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name="version" dev="configfs" ino=6791 res=0 errno=0
����	�����	�	�	���
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
�����
������
������	
������
�����
������	
�����	
�����	
������	
������	
�����	
�����	
������	
������		
������			
�����	

�����		
������		
������		
������
������
�����	
�����	
������	
�����	
�����	
�����	
������	
������	
������		
������	
������	
�����	
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
������	��		��
������	�	
����	�����	�	�	���
������	��		�	�	�	��
	�	���	����	�
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
�����
������		
������
������
������
������	
�����
������
�����
������
�����
������
�����
�����
������
������
�����	
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����			��	�
�����	�������
������	���		���		
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
����	�������					
�����	����	
�����	����	
�����	����	
�����	����	
�����	����	
����		���	��
����	�	�������	�����
�������	�	����	�
����	�����	�	�	���
������	�	��	
�����	����	
�����	����	
�����	����	
�����	����	
�����	����	
�����	����	
�����	����	
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
�����	�
����	�	�	�������	������		�	
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
������		
�����	
�����
�����		
�����			
�����
�����			
�����		
������		
������	
������

������		
�����
������
�����
������	
������
������		
�����
������
�����
�����
������
������	
�����	
������	
������
�����
������
�����
������
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����	���	�	�
����	���	�	�
����	�����	�	�	���
������	��		�	�	�	��
	��	��	�	�	��
������	�	��	
����	�	��	�
�������������
������	��		�	�	�	��
	�		�	��	��	��
������	��		�	�	�	��
	��				��	��	��
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
�����
�����
�����
�����
�����
������
������	
�����
������	
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����	�����	�	�	���
����	�����	�	�	���
����	�����	�	�	���
������	�
������	��		�	�	�	��
	�		���		��	��
�����		����
������	�	
����	�

�	
��				
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
������
�����
������
�����	
������	
������
�����		
������		
�����		
�����
������		
������
������		
�����
�����
�����
�����
������
������	
�����
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�������	���
�����	����	
�����	����	
�����	����	
�����	����	
����	�����	�	�	���
����	�����	�	�	���
����		�	����	�			���	�	
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
�����
�����
�����	
������	
�����
�����	
������	
������		
������			
������		
�����		
�����		
�����
������		
������
������		
�����
�����
�����
�����
������
������	
�����
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����	�	�	�������	������		�	
�����	�
�������	���
����	�����	�	�	���
��������
��������
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
�����	
�����
������	
�����	
�����
�����
�����
������	
������
������
�����
������
������	
������	
������	
�����	
�����	
�����
������
�����
�����
������		
�����
������
������
�����	
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����	���	�
�������	�	�
�������	��	
����
�����		
�����	
��������
��������
��������
��������
��������
��������
��������
���������
�������	���	���		�	��	��	����
�����
�����	
�����
�����
�����
��������
��������
�����
�����
�����
�����
�����
�����	
�����
�����	
�����
�����
�����
�������	��	���
�����
�����	
�����	
�����	
�����
�����
�����
�����
�����
�����
�����
�����
�����
�����
�����
�����
������	��		�	�	�	��
	�	���	����	�
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������
������
�����
������		
������
������
�����
������
�����
������
�����
������
�����
�����
������
������
�����	
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����	�����	�	�	���
����	�	�
����	�	�	�		
����	��	��	������
������	�	��	
����	��	�	�����
������	��		�	�	�	��
	�	���	����	�
����		������
����		���
����		���
��������	
�����	�
������	
������	
������
������	�
������	�
�����		�
�������
����		������
������	�	
����	�����	�	�	���
��������	
������	��		�	�	�	��
	�	���	����	�
�������		
�����	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	����	
�����	����	
�����	����	
�������	����	
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
�����
������
�����
������
������		
�����
������
������	
�����
������
������
������	
������
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����	���	�	�
����	���	�	�
������	�	�	���
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	����	
������	��		�	�	�	��
	��	���	�	��
����	�����	�	�	���
����		���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
�����	����	
�������	����	
�����	����	
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	��	�	���
����	�����	�	�	���
����		�	�	
����	�����	�	�	���
�����	���	�
�����	���	�
�����	���	�
�����	���	�
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
������	
�����	
�����
�����	
������	
�����		
������		
������
������		
�����		
�����
������		
������
������		
�����
�����
�����
�����
������
������	
�����
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
����
����	�
����	����	�
�����	����	
����	�����	�	�	���
�����	����	
�����	����	
�����	����	
����	�����	�	�	���
����	�������					

syzkaller
syzkaller login: [  221.252464][ T5151] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  222.492411][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[  223.431902][   T30] audit: type=1800 audit(6045575917.824:14): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  223.564215][ T7671] can: request_module (can-proto-3) failed.
[  224.858166][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'.
[  224.943020][ T7693] HfR: entered promiscuous mode
[  225.015089][ T7693] device-mapper: ioctl: Unable to rename non-existent device,  to �
[  225.863473][ T7710] net_ratelimit: 21 callbacks suppressed
[  225.863498][ T7710] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  226.028896][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'.
[  226.053643][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.068922][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.116534][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.154771][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.969608][ T7739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.372724][ T7745] mkiss: ax0: crc mode is auto.
[  228.409426][ T7765] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  228.563567][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'.
[  228.858246][ T7772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  229.326399][ T7772] Process accounting paused
[  232.675513][ T7846] random: crng reseeded on system resumption
[  237.023113][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'.
[  237.054481][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'.
[  237.772547][ T7922] FAULT_INJECTION: forcing a failure.
[  237.772547][ T7922] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  237.819499][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.1.367 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  237.819543][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  237.819560][ T7922] Call Trace:
[  237.819569][ T7922]  <TASK>
[  237.819580][ T7922]  dump_stack_lvl+0x16c/0x1f0
[  237.819631][ T7922]  should_fail_ex+0x512/0x640
[  237.819678][ T7922]  should_fail_alloc_page+0xe7/0x130
[  237.819709][ T7922]  prepare_alloc_pages+0x3c2/0x610
[  237.819772][ T7922]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  237.819839][ T7922]  ? __up_read+0x1f8/0x750
[  237.819894][ T7922]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  237.820001][ T7922]  __folio_alloc_noprof+0x11/0x220
[  237.820053][ T7922]  alloc_migration_target+0x2bf/0x770
[  237.820095][ T7922]  migrate_pages_batch+0x3bf/0x31a0
[  237.820140][ T7922]  ? __pfx_alloc_migration_target+0x10/0x10
[  237.820191][ T7922]  ? __pfx_migrate_pages_batch+0x10/0x10
[  237.820234][ T7922]  ? update_and_free_hugetlb_folio+0xd3/0x210
[  237.820290][ T7922]  ? __pfx_update_and_free_hugetlb_folio+0x10/0x10
[  237.820352][ T7922]  migrate_pages_sync+0x12d/0x8a0
[  237.820392][ T7922]  ? __pfx_alloc_migration_target+0x10/0x10
[  237.820438][ T7922]  ? __pfx_migrate_pages_sync+0x10/0x10
[  237.820473][ T7922]  ? __pfx___folio_put+0x10/0x10
[  237.820532][ T7922]  ? rcu_is_watching+0x12/0xc0
[  237.820564][ T7922]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.820620][ T7922]  migrate_pages+0x1b67/0x23b0
[  237.820662][ T7922]  ? __pfx_alloc_migration_target+0x10/0x10
[  237.820728][ T7922]  ? __pfx_migrate_pages+0x10/0x10
[  237.820767][ T7922]  ? queue_pages_range+0x11e/0x180
[  237.820828][ T7922]  ? __pfx___up_read+0x10/0x10
[  237.820879][ T7922]  ? do_migrate_pages+0x458/0x750
[  237.820920][ T7922]  do_migrate_pages+0x48e/0x750
[  237.820970][ T7922]  ? __pfx_do_migrate_pages+0x10/0x10
[  237.821006][ T7922]  ? rcu_is_watching+0x12/0xc0
[  237.821046][ T7922]  ? cap_capable+0xb3/0x250
[  237.821074][ T7922]  ? get_task_mm+0xc2/0xf0
[  237.821110][ T7922]  ? security_capable+0x250/0x260
[  237.821169][ T7922]  kernel_migrate_pages+0x5b0/0x750
[  237.821204][ T7922]  ? __pfx_kernel_migrate_pages+0x10/0x10
[  237.821251][ T7922]  __x64_sys_migrate_pages+0x96/0x100
[  237.821286][ T7922]  ? lockdep_hardirqs_on+0x7c/0x110
[  237.821336][ T7922]  do_syscall_64+0xcd/0x490
[  237.821392][ T7922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.821426][ T7922] RIP: 0033:0x7fc68cb8e929
[  237.821453][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.821485][ T7922] RSP: 002b:00007fc68da72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  237.821517][ T7922] RAX: ffffffffffffffda RBX: 00007fc68cdb5fa0 RCX: 00007fc68cb8e929
[  237.821539][ T7922] RDX: 0000200000000100 RSI: 0000000000000003 RDI: 0000000000000000
[  237.821559][ T7922] RBP: 00007fc68cc10b39 R08: 0000000000000000 R09: 0000000000000000
[  237.821580][ T7922] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  237.821601][ T7922] R13: 0000000000000000 R14: 00007fc68cdb5fa0 R15: 00007ffc2fdfe7d8
[  237.821643][ T7922]  </TASK>
[  238.132141][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.643465][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'.
[  241.301670][ T7949] team0: Port device team_slave_0 removed
[  244.008942][   T30] audit: type=1326 audit(6045575938.394:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68cb8e929 code=0x0
[  244.067855][ T7988] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  244.398709][ T7985] FAULT_INJECTION: forcing a failure.
[  244.398709][ T7985] name fail_futex, interval 1, probability 0, space 0, times 0
[  244.414426][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.1.379 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  244.414469][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  244.414504][ T7985] Call Trace:
[  244.414515][ T7985]  <TASK>
[  244.414527][ T7985]  dump_stack_lvl+0x16c/0x1f0
[  244.414582][ T7985]  should_fail_ex+0x512/0x640
[  244.414635][ T7985]  get_futex_key+0x1d0/0x1540
[  244.414678][ T7985]  ? __pfx_get_futex_key+0x10/0x10
[  244.414717][ T7985]  ? __pfx___schedule+0x10/0x10
[  244.414772][ T7985]  futex_wait_setup+0x9d/0x550
[  244.414832][ T7985]  __futex_wait+0x194/0x2f0
[  244.414881][ T7985]  ? __pfx___futex_wait+0x10/0x10
[  244.414935][ T7985]  ? __pfx_futex_wake_mark+0x10/0x10
[  244.414987][ T7985]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  244.415034][ T7985]  ? __hrtimer_setup+0x176/0x280
[  244.415087][ T7985]  ? ktime_add_safe+0x60/0x70
[  244.415139][ T7985]  futex_wait+0xe8/0x380
[  244.415185][ T7985]  ? __pfx_futex_wait+0x10/0x10
[  244.415230][ T7985]  ? __lock_acquire+0xb8a/0x1c90
[  244.415276][ T7985]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  244.415341][ T7985]  do_futex+0x229/0x350
[  244.415381][ T7985]  ? __pfx_do_futex+0x10/0x10
[  244.415417][ T7985]  ? rcu_is_watching+0x12/0xc0
[  244.415448][ T7985]  ? ktime_get+0x200/0x310
[  244.415490][ T7985]  ? lockdep_hardirqs_on+0x7c/0x110
[  244.415538][ T7985]  ? read_tsc+0x9/0x20
[  244.415575][ T7985]  __x64_sys_futex+0x1e0/0x4c0
[  244.415622][ T7985]  ? __pfx___x64_sys_futex+0x10/0x10
[  244.415663][ T7985]  ? xfd_validate_state+0x61/0x180
[  244.415719][ T7985]  do_syscall_64+0xcd/0x490
[  244.415771][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.415804][ T7985] RIP: 0033:0x7fc68cb8e929
[  244.415829][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.415859][ T7985] RSP: 002b:00007ffc2fdfe938 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  244.415889][ T7985] RAX: ffffffffffffffda RBX: 000000000003ba7d RCX: 00007fc68cb8e929
[  244.415910][ T7985] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc68cdb608c
[  244.415929][ T7985] RBP: 0000000000000032 R08: 00007fc68da73000 R09: 000000132fdfec2f
[  244.415948][ T7985] R10: 00007ffc2fdfea30 R11: 0000000000000246 R12: 00007fc68cdb608c
[  244.415968][ T7985] R13: 00007ffc2fdfea30 R14: 000000000003baaf R15: 00007ffc2fdfea50
[  244.416010][ T7985]  </TASK>
[  253.053780][ T8081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.399'.
[  256.566940][ T8148] zram0: detected capacity change from 0 to 8
[  259.111604][ T8192] netlink: 206 bytes leftover after parsing attributes in process `syz.3.421'.
[  259.955048][ T8185] Process accounting resumed
[  260.141250][ T8208] overlayfs: missing 'lowerdir'
[  260.802385][ T8210] bridge0: port 3(vlan1) entered blocking state
[  260.871189][ T8210] bridge0: port 3(vlan1) entered disabled state
[  260.881461][ T8210] vlan1: entered allmulticast mode
[  260.888956][ T8210] veth0_vlan: entered allmulticast mode
[  261.018470][ T8210] vlan1: entered promiscuous mode
[  261.092301][ T8210] bridge0: port 3(vlan1) entered blocking state
[  261.099321][ T8210] bridge0: port 3(vlan1) entered forwarding state
[  263.492443][ T8259] FAULT_INJECTION: forcing a failure.
[  263.492443][ T8259] name failslab, interval 1, probability 0, space 0, times 0
[  263.543935][ T8258] ubi0: attaching mtd0
[  263.562200][ T8258] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033)
[  263.585963][ T8259] CPU: 0 UID: 0 PID: 8259 Comm: syz.2.432 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  263.586006][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.586024][ T8259] Call Trace:
[  263.586034][ T8259]  <TASK>
[  263.586046][ T8259]  dump_stack_lvl+0x16c/0x1f0
[  263.586100][ T8259]  should_fail_ex+0x512/0x640
[  263.586146][ T8259]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  263.586206][ T8259]  should_failslab+0xc2/0x120
[  263.586235][ T8259]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  263.586281][ T8259]  ? do_raw_spin_lock+0x12c/0x2b0
[  263.586328][ T8259]  ? ptlock_alloc+0x1f/0x70
[  263.586375][ T8259]  ptlock_alloc+0x1f/0x70
[  263.586415][ T8259]  pte_alloc_one+0x82/0x3a0
[  263.586465][ T8259]  __do_fault+0x320/0x490
[  263.586514][ T8259]  ? __pfx_filemap_map_pages+0x10/0x10
[  263.586565][ T8259]  __handle_mm_fault+0x374c/0x5490
[  263.586621][ T8259]  ? __pfx___handle_mm_fault+0x10/0x10
[  263.586662][ T8259]  ? __pfx_mt_find+0x10/0x10
[  263.586735][ T8259]  ? find_vma+0xbf/0x140
[  263.586767][ T8259]  ? __pfx_find_vma+0x10/0x10
[  263.586805][ T8259]  handle_mm_fault+0x589/0xd10
[  263.586851][ T8259]  ? __pkru_allows_pkey+0x41/0xb0
[  263.586897][ T8259]  do_user_addr_fault+0x7a6/0x1370
[  263.586948][ T8259]  ? rcu_is_watching+0x12/0xc0
[  263.586986][ T8259]  exc_page_fault+0x5c/0xb0
[  263.587036][ T8259]  asm_exc_page_fault+0x26/0x30
[  263.587067][ T8259] RIP: 0010:rep_movs_alternative+0x11/0x90
[  263.587109][ T8259] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 2e 0f
[  263.587140][ T8259] RSP: 0018:ffffc900030e7d20 EFLAGS: 00050202
[  263.587173][ T8259] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000004
[  263.587192][ T8259] RDX: fffff5200061cfbb RSI: ffffc900030e7dd8 RDI: 0000000000000000
[  263.587214][ T8259] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200061cfbb
[  263.587234][ T8259] R10: 0000000000000003 R11: 0000000000000001 R12: ffffc900030e7dd8
[  263.587254][ T8259] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000
[  263.587297][ T8259]  _copy_to_user+0xbb/0xd0
[  263.587352][ T8259]  do_timer_create+0x6dc/0x14e0
[  263.587403][ T8259]  ? __pfx_do_timer_create+0x10/0x10
[  263.587447][ T8259]  ? __pfx_do_futex+0x10/0x10
[  263.587502][ T8259]  __x64_sys_timer_create+0x199/0x1d0
[  263.587550][ T8259]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  263.587596][ T8259]  ? fput+0x70/0xf0
[  263.587629][ T8259]  ? xfd_validate_state+0x61/0x180
[  263.587671][ T8259]  ? __pfx_ksys_write+0x10/0x10
[  263.587730][ T8259]  do_syscall_64+0xcd/0x490
[  263.587787][ T8259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.587820][ T8259] RIP: 0033:0x7f4883b8e929
[  263.587847][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.587878][ T8259] RSP: 002b:00007f4884a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  263.587909][ T8259] RAX: ffffffffffffffda RBX: 00007f4883db5fa0 RCX: 00007f4883b8e929
[  263.587931][ T8259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  263.587950][ T8259] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000
[  263.587970][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.587989][ T8259] R13: 0000000000000000 R14: 00007f4883db5fa0 R15: 00007ffebfeda178
[  263.588030][ T8259]  </TASK>
[  264.111069][ T8259] netlink: 350 bytes leftover after parsing attributes in process `syz.2.432'.
[  265.191376][ T8283] random: crng reseeded on system resumption
[  265.908219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  265.926781][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  266.694753][ T8312] netlink: 86 bytes leftover after parsing attributes in process `syz.1.444'.
[  266.985915][ T8324] FAULT_INJECTION: forcing a failure.
[  266.985915][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  267.061785][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.3.447 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  267.061827][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  267.061844][ T8324] Call Trace:
[  267.061854][ T8324]  <TASK>
[  267.061877][ T8324]  dump_stack_lvl+0x16c/0x1f0
[  267.061928][ T8324]  should_fail_ex+0x512/0x640
[  267.061978][ T8324]  _copy_to_user+0x32/0xd0
[  267.062028][ T8324]  simple_read_from_buffer+0xcb/0x170
[  267.062071][ T8324]  proc_fail_nth_read+0x197/0x270
[  267.062107][ T8324]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  267.062146][ T8324]  ? rw_verify_area+0xcf/0x680
[  267.062185][ T8324]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  267.062221][ T8324]  vfs_read+0x1e1/0xc60
[  267.062290][ T8324]  ? __pfx___mutex_lock+0x10/0x10
[  267.062339][ T8324]  ? __pfx_vfs_read+0x10/0x10
[  267.062393][ T8324]  ? __fget_files+0x20e/0x3c0
[  267.062449][ T8324]  ksys_read+0x12a/0x250
[  267.062494][ T8324]  ? __pfx_ksys_read+0x10/0x10
[  267.062539][ T8324]  ? fput+0x70/0xf0
[  267.062574][ T8324]  do_syscall_64+0xcd/0x490
[  267.062628][ T8324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.062660][ T8324] RIP: 0033:0x7fdd0af8d33c
[  267.062685][ T8324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  267.062715][ T8324] RSP: 002b:00007fdd0bdc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  267.062753][ T8324] RAX: ffffffffffffffda RBX: 00007fdd0b1b5fa0 RCX: 00007fdd0af8d33c
[  267.062778][ T8324] RDX: 000000000000000f RSI: 00007fdd0bdc80a0 RDI: 0000000000000005
[  267.062796][ T8324] RBP: 00007fdd0bdc8090 R08: 0000000000000000 R09: 0000000000000000
[  267.062815][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.062833][ T8324] R13: 0000000000000000 R14: 00007fdd0b1b5fa0 R15: 00007ffe51c18ea8
[  267.062873][ T8324]  </TASK>
[  267.249605][    C1] vkms_vblank_simulate: vblank timer overrun
[  271.393153][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'.
[  271.466155][ T8387] netlink: 354 bytes leftover after parsing attributes in process `syz.2.462'.
[  271.712108][ T5836] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14
[  271.864475][ T8393] tty tty39: ldisc open failed (-12), clearing slot 38
[  272.283097][ T8401] FAULT_INJECTION: forcing a failure.
[  272.283097][ T8401] name failslab, interval 1, probability 0, space 0, times 0
[  272.332023][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.2.464 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  272.332064][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.332080][ T8401] Call Trace:
[  272.332090][ T8401]  <TASK>
[  272.332101][ T8401]  dump_stack_lvl+0x16c/0x1f0
[  272.332170][ T8401]  should_fail_ex+0x512/0x640
[  272.332214][ T8401]  ? fs_reclaim_acquire+0xae/0x150
[  272.332253][ T8401]  ? tomoyo_encode2+0x100/0x3e0
[  272.332293][ T8401]  should_failslab+0xc2/0x120
[  272.332323][ T8401]  __kmalloc_noprof+0xd2/0x510
[  272.332366][ T8401]  ? d_absolute_path+0x136/0x1a0
[  272.332404][ T8401]  tomoyo_encode2+0x100/0x3e0
[  272.332452][ T8401]  tomoyo_encode+0x29/0x50
[  272.332491][ T8401]  tomoyo_realpath_from_path+0x18f/0x6e0
[  272.332555][ T8401]  tomoyo_check_open_permission+0x2ab/0x3c0
[  272.332594][ T8401]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  272.332675][ T8401]  ? do_raw_spin_lock+0x12c/0x2b0
[  272.332735][ T8401]  tomoyo_file_open+0x6b/0x90
[  272.332786][ T8401]  security_file_open+0x84/0x1e0
[  272.332827][ T8401]  do_dentry_open+0x596/0x1c10
[  272.332888][ T8401]  vfs_open+0x82/0x3f0
[  272.332926][ T8401]  path_openat+0x1de4/0x2cb0
[  272.332985][ T8401]  ? __pfx_path_openat+0x10/0x10
[  272.333033][ T8401]  ? __lock_acquire+0xb8a/0x1c90
[  272.333082][ T8401]  do_filp_open+0x20b/0x470
[  272.333129][ T8401]  ? __pfx_do_filp_open+0x10/0x10
[  272.333206][ T8401]  ? alloc_fd+0x471/0x7d0
[  272.333259][ T8401]  do_sys_openat2+0x11b/0x1d0
[  272.333292][ T8401]  ? __pfx_do_sys_openat2+0x10/0x10
[  272.333344][ T8401]  __x64_sys_openat+0x174/0x210
[  272.333380][ T8401]  ? __pfx___x64_sys_openat+0x10/0x10
[  272.333434][ T8401]  do_syscall_64+0xcd/0x490
[  272.333486][ T8401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.333517][ T8401] RIP: 0033:0x7f4883b8e929
[  272.333546][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.333575][ T8401] RSP: 002b:00007f4884a48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  272.333615][ T8401] RAX: ffffffffffffffda RBX: 00007f4883db6080 RCX: 00007f4883b8e929
[  272.333634][ T8401] RDX: 0000000000080100 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  272.333652][ T8401] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000
[  272.333669][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.333686][ T8401] R13: 0000000000000000 R14: 00007f4883db6080 R15: 00007ffebfeda178
[  272.333724][ T8401]  </TASK>
[  272.334225][ T8401] ERROR: Out of memory at tomoyo_realpath_from_path.
[  272.682416][ T8406] [U] 
[  272.685523][ T8406] [U] 
[  272.688290][ T8406] [U] 
[  272.691060][ T8406] [U] 
[  272.724718][ T8406] [U] 
[  272.727525][ T8406] [U] 
[  272.730292][ T8406] [U] 
[  272.733061][ T8406] [U] 
[  272.753529][ T8407] [U] 
[  272.947508][ T8409] syz.3.465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  273.655538][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'.
[  273.954729][ T8426] netlink: 'syz.3.471': attribute type 1 has an invalid length.
[  273.990336][ T8427] FAULT_INJECTION: forcing a failure.
[  273.990336][ T8427] name failslab, interval 1, probability 0, space 0, times 0
[  274.005001][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.2.470 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[  274.005040][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.005056][ T8427] Call Trace:
[  274.005066][ T8427]  <TASK>
[  274.005077][ T8427]  dump_stack_lvl+0x16c/0x1f0
[  274.005127][ T8427]  should_fail_ex+0x512/0x640
[  274.005168][ T8427]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  274.005217][ T8427]  should_failslab+0xc2/0x120
[  274.005244][ T8427]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  274.005289][ T8427]  ? __kernfs_new_node+0xd2/0x8e0
[  274.005334][ T8427]  __kernfs_new_node+0xd2/0x8e0
[  274.005375][ T8427]  ? kernfs_add_one+0x37d/0x840
[  274.005428][ T8427]  ? __pfx___kernfs_new_node+0x10/0x10
[  274.005479][ T8427]  ? find_held_lock+0x2b/0x80
[  274.005509][ T8427]  ? kernfs_root+0xee/0x2a0
[  274.005557][ T8427]  kernfs_new_node+0x13c/0x1e0
[  274.005609][ T8427]  kernfs_create_dir_ns+0x4c/0x1a0
[  274.005660][ T8427]  internal_create_group+0x34d/0xf30
[  274.005710][ T8427]  ? __pfx_internal_create_group+0x10/0x10
[  274.005752][ T8427]  ? __pfx_internal_create_group+0x10/0x10
[  274.005800][ T8427]  ? __pfx_dev_add_physical_location+0x10/0x10
[  274.005849][ T8427]  ? bus_to_subsys+0x131/0x160
[  274.005888][ T8427]  dpm_sysfs_add+0x80/0x280
[  274.005917][ T8427]  device_add+0x9a6/0x1a70
[  274.005949][ T8427]  ? __pfx_device_add+0x10/0x10
[  274.006011][ T8427]  __add_disk+0x457/0xf00
[  274.006054][ T8427]  ? find_held_lock+0x2b/0x80
[  274.006088][ T8427]  add_disk_fwnode+0x3f8/0x5d0
[  274.006136][ T8427]  zram_add+0x4c8/0x700
[  274.006170][ T8427]  ? __pfx_zram_add+0x10/0x10
[  274.006231][ T8427]  ? find_held_lock+0x2b/0x80
[  274.006268][ T8427]  ? __pfx_hot_add_show+0x10/0x10
[  274.006301][ T8427]  ? __pfx_class_attr_show+0x10/0x10
[  274.006329][ T8427]  hot_add_show+0x21/0x80
[  274.006363][ T8427]  class_attr_show+0x6f/0xa0
[  274.006394][ T8427]  sysfs_kf_seq_show+0x216/0x3e0
[  274.006446][ T8427]  seq_read_iter+0x506/0x12c0
[  274.006503][ T8427]  kernfs_fop_read_iter+0x40f/0x5a0
[  274.006534][ T8427]  ? rw_verify_area+0xcf/0x680
[  274.006578][ T8427]  vfs_read+0x8bc/0xc60
[  274.006627][ T8427]  ? __pfx___mutex_lock+0x10/0x10
[  274.006675][ T8427]  ? __pfx_vfs_read+0x10/0x10
[  274.006746][ T8427]  ksys_read+0x12a/0x250
[  274.006788][ T8427]  ? __pfx_ksys_read+0x10/0x10
[  274.006843][ T8427]  do_syscall_64+0xcd/0x490
[  274.006895][ T8427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.006926][ T8427] RIP: 0033:0x7f4883b8e929
[  274.006951][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.006980][ T8427] RSP: 002b:00007f4884a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  274.007008][ T8427] RAX: ffffffffffffffda RBX: 00007f4883db5fa0 RCX: 00007f4883b8e929
[  274.007028][ T8427] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007
[  274.007047][ T8427] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000
[  274.007065][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.007083][ T8427] R13: 0000000000000000 R14: 00007f4883db5fa0 R15: 00007ffebfeda178
[  274.007124][ T8427]  </TASK>
[  274.319481][    C1] vkms_vblank_simulate: vblank timer overrun
[  274.753448][ T8432] netlink: 338 bytes leftover after parsing attributes in process `syz.3.472'.
[  275.187797][ T8438] netlink: 98 bytes leftover after parsing attributes in process `syz.0.475'.
[  275.198236][ T8438] netlink: 2 bytes leftover after parsing attributes in process `syz.0.475'.
[  275.384814][ T8447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.476'.
[  275.912110][ T8438] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  275.918255][ T8438] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  275.971310][ T8438] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  276.005619][ T8438] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  276.033045][ T8438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  277.341506][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  277.984732][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  278.050062][   T30] audit: type=1800 audit(4294967317.380:16): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.485" name="dbroot" dev="configfs" ino=18219 res=0 errno=0
[  278.078729][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  278.084814][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  279.197903][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[  279.428032][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  279.925835][ T8518] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  280.048024][ T8518] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  280.054212][ T8518] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  280.088966][ T8518] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  281.343554][ T8549] can: request_module (can-proto-0) failed.
[  281.496962][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  281.847571][ T8562] sd 0:0:1:0: PR command failed: 1026
[  281.847625][ T8562] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  281.847681][ T8562] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  282.107488][ T8569] Bluetooth: hci1: command 0x0c1a tx timeout
[  282.137100][ T8574] Bluetooth: hci3: command 0x0c1a tx timeout
[  282.143161][ T8574] Bluetooth: hci2: command 0x0c1a tx timeout
[  284.402230][ T8620] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  284.402230][ T8620] The task syz.3.509 (8620) triggered the difference, watch for misbehavior.
[  287.680478][ T8678] program syz.3.522 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  287.777333][ T8678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  290.174098][ T8725] Process accounting paused
[  291.006776][ T8736] nfs4: Unknown parameter '�'
[  295.577710][ T8824] block nbd7: not configured, cannot reconfigure
[  296.503653][ T8572] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 4: bad block bitmap checksum
[  296.531698][ T8572] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74
[  296.548066][ T8572] EXT4-fs (sda1): This should not happen!! Data will be lost
[  296.548066][ T8572] 
����		���	��
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	�����	�	�	���
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	�	������
������	��		�	�	�	��
	��	��	�	�	��
�������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������			
������			
�����			
�����		
������		
������
������
������
������	
������	
�����		
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������	
�����	
������
�����
�����
�����
������
������	
�����
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����	���	�	��	���	���	����	��
����	��	�����		�
�����	�	�����	��
����
�������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������	
������
�����
�����
������
�����
������
������	
������	
������	
������	
������
������
�����
������
�����
������	
������
������		
�����
������
�����
�����
������
������	
�����	
������	
������
�����
������
������
�����
������
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
��������
��������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�
�����	���	�
�����	���	�
�����	���	�
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	����	
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	�����	�	�	���
�����	����	
�����	����	
�����	����	
����		���	��
�������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
��������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
����	�	��	�
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
������
�����	
�����
������
������	
������
�����
�����
�����
�����
������
�����
�����
������
������	
�����	
������	
������
�����
������
�����
������
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
�����		��	�	���	��	
�������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	�
����	�	�	�	�	�	�	�	
������	�	�		�������	�
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
������	���	�	
�������	���	��
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
��������
�������
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
�����	�	�����	��
����
�����	���	�	��	���	���	����	��
����	�����	�	�	���
������	�	�		�����	��	��
������	�	�		�����	��	��
�����	�	�����	��
����
�����		��	�	���	��	
�����	�������
�����	�	�		��	
����	���	�	�
����	���	�	�
�����	�������
����	
	�	��	
�����	�	��		����	�
������	��	�����	���	�
���������	��	�	��
�����
�����
�����
�����	
������
�����	
�����
������	
������	
������		
������		
�����
�����		
�����		
�����
������		
������
������		
�����
�����
�����
�����
������
������	
�����
�����
�����
����	�
��������������������������������������������������������������������
��������	�
���������
������	��	�
���������
���������
���������
�����
[ 1303.989621][T15790] Bluetooth: hci0: unexpected event 0x01 length: 440 > 1
[ 1304.093725][T27729] Process accounting resumed
[ 1305.058482][T27740] kexec: Could not allocate control_code_buffer
[ 1305.566504][T27801] FAULT_INJECTION: forcing a failure.
[ 1305.566504][T27801] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1305.581123][T27801] CPU: 1 UID: 0 PID: 27801 Comm: syz.1.4019 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[ 1305.581157][T27801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1305.581172][T27801] Call Trace:
[ 1305.581180][T27801]  <TASK>
[ 1305.581188][T27801]  dump_stack_lvl+0x16c/0x1f0
[ 1305.581229][T27801]  should_fail_ex+0x512/0x640
[ 1305.581265][T27801]  should_fail_alloc_page+0xe7/0x130
[ 1305.581289][T27801]  prepare_alloc_pages+0x3c2/0x610
[ 1305.581319][T27801]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[ 1305.581357][T27801]  ? mas_next_slot+0x12d3/0x21b0
[ 1305.581379][T27801]  ? __up_read+0x1f8/0x750
[ 1305.581417][T27801]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1305.581455][T27801]  ? validate_mm+0x40a/0x570
[ 1305.581509][T27801]  ? __pfx_validate_mm+0x10/0x10
[ 1305.581540][T27801]  ? trace_irq_enable.constprop.0+0xd4/0x120
[ 1305.581580][T27801]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1305.581616][T27801]  ? policy_nodemask+0xea/0x4e0
[ 1305.581654][T27801]  alloc_pages_mpol+0x1fb/0x550
[ 1305.581676][T27801]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1305.581696][T27801]  ? mas_next_node+0x7e0/0xf50
[ 1305.581731][T27801]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1305.581766][T27801]  alloc_pages_noprof+0x131/0x390
[ 1305.581788][T27801]  __pmd_alloc+0x3b/0x930
[ 1305.581814][T27801]  __handle_mm_fault+0xaac/0x5490
[ 1305.581847][T27801]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1305.581885][T27801]  ? find_vma+0xbf/0x140
[ 1305.581907][T27801]  ? __pfx_find_vma+0x10/0x10
[ 1305.581931][T27801]  handle_mm_fault+0x589/0xd10
[ 1305.581981][T27801]  __get_user_pages+0x589/0x3b80
[ 1305.582012][T27801]  ? __pfx_mt_find+0x10/0x10
[ 1305.582033][T27801]  ? __pfx___get_user_pages+0x10/0x10
[ 1305.582061][T27801]  ? __pfx___might_resched+0x10/0x10
[ 1305.582085][T27801]  ? cap_capable+0xb3/0x250
[ 1305.582108][T27801]  populate_vma_page_range+0x278/0x3a0
[ 1305.582141][T27801]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1305.582170][T27801]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1305.582197][T27801]  ? do_mmap+0x69c/0x1210
[ 1305.582223][T27801]  __mm_populate+0x1d8/0x380
[ 1305.582251][T27801]  ? __pfx___mm_populate+0x10/0x10
[ 1305.582280][T27801]  ? up_write+0x1b2/0x520
[ 1305.582315][T27801]  vm_mmap_pgoff+0x362/0x450
[ 1305.582340][T27801]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1305.582366][T27801]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1305.582394][T27801]  ? __x64_sys_futex+0x1e9/0x4c0
[ 1305.582424][T27801]  ksys_mmap_pgoff+0x7d/0x5c0
[ 1305.582448][T27801]  ? xfd_validate_state+0x61/0x180
[ 1305.582478][T27801]  ? __pfx_ksys_write+0x10/0x10
[ 1305.582518][T27801]  __x64_sys_mmap+0x125/0x190
[ 1305.582551][T27801]  do_syscall_64+0xcd/0x490
[ 1305.582589][T27801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.582614][T27801] RIP: 0033:0x7fb43218e929
[ 1305.582632][T27801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1305.582656][T27801] RSP: 002b:00007fb433001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1305.582678][T27801] RAX: ffffffffffffffda RBX: 00007fb4323b6320 RCX: 00007fb43218e929
[ 1305.582695][T27801] RDX: 0000001000000004 RSI: 0000000000000008 RDI: 0000000000000000
[ 1305.582710][T27801] RBP: 00007fb432210b39 R08: 0000000000000002 R09: 0000000000008000
[ 1305.582725][T27801] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[ 1305.582740][T27801] R13: 0000000000000000 R14: 00007fb4323b6320 R15: 00007ffe323ba048
[ 1305.582763][T27801]  </TASK>
[ 1305.987209][T27784] zswap: compressor  not available
[ 1306.063072][T27802] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4022'.
[ 1307.479758][T25018] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1330 with max blocks 8 with error 117
[ 1307.536192][T27834] 0x000200000001-0xa29656a63616329 : ""
[ 1307.536731][T25018] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1307.536731][T25018] 
[ 1307.616665][T27831] ALUA LU Group already has a valid ID, ignoring request
[ 1307.620455][   T30] audit: type=1800 audit(4294970912.216:43): pid=27831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4029" name="lu_gp_id" dev="configfs" ino=106340 res=0 errno=0
[ 1307.678515][T27834] mtd: partition "" is out of reach -- disabled
[ 1307.703702][T27834] FAULT_INJECTION: forcing a failure.
[ 1307.703702][T27834] name failslab, interval 1, probability 0, space 0, times 0
[ 1307.786644][T15790] Bluetooth: hci1: Unable to find connection for big 0xd2
[ 1307.811804][T27834] CPU: 0 UID: 0 PID: 27834 Comm: syz.4.4027 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[ 1307.811849][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1307.811868][T27834] Call Trace:
[ 1307.811879][T27834]  <TASK>
[ 1307.811891][T27834]  dump_stack_lvl+0x16c/0x1f0
[ 1307.811943][T27834]  should_fail_ex+0x512/0x640
[ 1307.811991][T27834]  should_failslab+0xc2/0x120
[ 1307.812021][T27834]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[ 1307.812074][T27834]  ? kvasprintf_const+0x66/0x1a0
[ 1307.812106][T27834]  kvasprintf+0xbc/0x160
[ 1307.812132][T27834]  ? __pfx_kvasprintf+0x10/0x10
[ 1307.812176][T27834]  ? idr_alloc_u32+0x20f/0x2f0
[ 1307.812219][T27834]  kvasprintf_const+0x66/0x1a0
[ 1307.812246][T27834]  kobject_set_name_vargs+0x5a/0x140
[ 1307.812277][T27834]  dev_set_name+0xc7/0x100
[ 1307.812310][T27834]  ? __pfx_dev_set_name+0x10/0x10
[ 1307.812344][T27834]  ? idr_alloc+0xdd/0x130
[ 1307.812382][T27834]  ? __pfx_idr_alloc+0x10/0x10
[ 1307.812421][T27834]  ? mtd_add_partition+0x304/0x670
[ 1307.812453][T27834]  ? add_mtd_device+0x841/0x1720
[ 1307.812498][T27834]  add_mtd_device+0x901/0x1720
[ 1307.812545][T27834]  ? __pfx_add_mtd_device+0x10/0x10
[ 1307.812594][T27834]  mtd_add_partition+0x30c/0x670
[ 1307.812633][T27834]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1307.812662][T27834]  ? __might_fault+0x13b/0x190
[ 1307.812704][T27834]  ? rcu_is_watching+0x12/0xc0
[ 1307.812742][T27834]  mtdchar_blkpg_ioctl+0x20b/0x250
[ 1307.812775][T27834]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1307.812814][T27834]  ? lock_release+0x201/0x2f0
[ 1307.812858][T27834]  mtdchar_ioctl+0xbc4/0x2090
[ 1307.812893][T27834]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1307.812926][T27834]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1307.812961][T27834]  ? __mutex_trylock_common+0xe9/0x250
[ 1307.813000][T27834]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1307.813042][T27834]  ? __pfx___might_resched+0x10/0x10
[ 1307.813074][T27834]  ? trace_contention_end+0xdd/0x130
[ 1307.813113][T27834]  ? __mutex_lock+0x1ca/0xb90
[ 1307.813160][T27834]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1307.813194][T27834]  ? __pfx___mutex_lock+0x10/0x10
[ 1307.813251][T27834]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1307.813284][T27834]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1307.813319][T27834]  __x64_sys_ioctl+0x18e/0x210
[ 1307.813354][T27834]  do_syscall_64+0xcd/0x490
[ 1307.813401][T27834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1307.813431][T27834] RIP: 0033:0x7f8d3d78e929
[ 1307.813453][T27834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1307.813482][T27834] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1307.813510][T27834] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929
[ 1307.813530][T27834] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003
[ 1307.813547][T27834] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000
[ 1307.813565][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1307.813583][T27834] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18
[ 1307.813615][T27834]  </TASK>
[ 1308.124865][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.080816][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1310.087345][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1310.483908][T27897] 0x000200000001-0xa29656a63616329 : ""
[ 1310.489819][T27897] mtd: partition "" is out of reach -- disabled
[ 1310.506814][T27897] FAULT_INJECTION: forcing a failure.
[ 1310.506814][T27897] name failslab, interval 1, probability 0, space 0, times 0
[ 1310.541127][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[ 1310.541181][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1310.541202][T27897] Call Trace:
[ 1310.541212][T27897]  <TASK>
[ 1310.541225][T27897]  dump_stack_lvl+0x16c/0x1f0
[ 1310.541279][T27897]  should_fail_ex+0x512/0x640
[ 1310.541328][T27897]  should_failslab+0xc2/0x120
[ 1310.541359][T27897]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1310.541401][T27897]  ? __pfx___debug_object_init+0x10/0x10
[ 1310.541436][T27897]  ? __pfx___debug_object_init+0x10/0x10
[ 1310.541469][T27897]  ? device_add+0xccc/0x1a70
[ 1310.541504][T27897]  device_add+0xccc/0x1a70
[ 1310.541534][T27897]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1310.541583][T27897]  ? lockdep_init_map_type+0x5c/0x280
[ 1310.541627][T27897]  ? __pfx_device_add+0x10/0x10
[ 1310.541658][T27897]  ? lockdep_init_map_type+0x5c/0x280
[ 1310.541703][T27897]  ? __init_waitqueue_head+0xca/0x150
[ 1310.541760][T27897]  add_mtd_device+0x999/0x1720
[ 1310.541813][T27897]  ? __pfx_add_mtd_device+0x10/0x10
[ 1310.541868][T27897]  mtd_add_partition+0x30c/0x670
[ 1310.541902][T27897]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1310.541935][T27897]  ? __might_fault+0x13b/0x190
[ 1310.541982][T27897]  ? rcu_is_watching+0x12/0xc0
[ 1310.542022][T27897]  mtdchar_blkpg_ioctl+0x20b/0x250
[ 1310.542059][T27897]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1310.542103][T27897]  ? lock_release+0x201/0x2f0
[ 1310.542161][T27897]  mtdchar_ioctl+0xbc4/0x2090
[ 1310.542201][T27897]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1310.542238][T27897]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1310.542278][T27897]  ? __mutex_trylock_common+0xe9/0x250
[ 1310.542324][T27897]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1310.542369][T27897]  ? __pfx___might_resched+0x10/0x10
[ 1310.542405][T27897]  ? trace_contention_end+0xdd/0x130
[ 1310.542451][T27897]  ? __mutex_lock+0x1ca/0xb90
[ 1310.542503][T27897]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1310.542541][T27897]  ? __pfx___mutex_lock+0x10/0x10
[ 1310.542604][T27897]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1310.542641][T27897]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1310.542681][T27897]  __x64_sys_ioctl+0x18e/0x210
[ 1310.542720][T27897]  do_syscall_64+0xcd/0x490
[ 1310.542771][T27897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.542804][T27897] RIP: 0033:0x7f8d3d78e929
[ 1310.542829][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1310.542861][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1310.542892][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929
[ 1310.542914][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003
[ 1310.542933][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000
[ 1310.542954][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1310.542973][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18
[ 1310.543004][T27897]  </TASK>
[ 1310.850412][T27897] ------------[ cut here ]------------
[ 1310.856009][T27897] WARNING: CPU: 1 PID: 27897 at drivers/mtd/mtdpart.c:37 release_mtd_partition+0x71/0x90
[ 1310.865979][T27897] Modules linked in:
[ 1310.869905][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[ 1310.882013][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1310.892115][T27897] RIP: 0010:release_mtd_partition+0x71/0x90
[ 1310.898087][T27897] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 0f a4 ac fb 48 89 df 5b 5d e9 05 a4 ac fb e8 f0 ca 51 fb 90 <0f> 0b 90 eb c2 e8 55 aa b7 fb eb db 48 89 ef e8 4b aa b7 fb eb a5
[ 1310.917760][T27897] RSP: 0018:ffffc90005077840 EFLAGS: 00010293
[ 1310.923839][T27897] RAX: 0000000000000000 RBX: ffff88803247c000 RCX: ffffffff8b7769ad
[ 1310.931966][T27897] RDX: ffff888060a73c00 RSI: ffffffff8669bdc0 RDI: ffff88803247c000
[ 1310.939965][T27897] RBP: ffff88803247c648 R08: 0000000000000001 R09: 0000000000000001
[ 1310.947980][T27897] R10: 0000000000000009 R11: fffffffffffe8560 R12: 0000000000000000
[ 1310.956002][T27897] R13: dffffc0000000000 R14: ffff8880599005a0 R15: 0000000000000000
[ 1310.964003][T27897] FS:  00007f8d3e6966c0(0000) GS:ffff888124861000(0000) knlGS:0000000000000000
[ 1310.972951][T27897] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1310.979714][T27897] CR2: 000000110d78a637 CR3: 00000000316e8000 CR4: 00000000003526f0
[ 1310.987721][T27897] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1310.995732][T27897] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1311.003745][T27897] Call Trace:
[ 1311.007034][T27897]  <TASK>
[ 1311.009975][T27897]  mtd_release+0xa0/0xd0
[ 1311.014265][T27897]  ? __pfx_mtd_release+0x10/0x10
[ 1311.019220][T27897]  device_release+0xa1/0x240
[ 1311.023855][T27897]  kobject_put+0x1e7/0x5a0
[ 1311.028288][T27897]  put_device+0x1f/0x30
[ 1311.032477][T27897]  add_mtd_device+0xbc7/0x1720
[ 1311.037295][T27897]  ? __pfx_add_mtd_device+0x10/0x10
[ 1311.042527][T27897]  mtd_add_partition+0x30c/0x670
[ 1311.047511][T27897]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1311.052985][T27897]  ? __might_fault+0x13b/0x190
[ 1311.057803][T27897]  ? rcu_is_watching+0x12/0xc0
[ 1311.062592][T27897]  mtdchar_blkpg_ioctl+0x20b/0x250
[ 1311.067744][T27897]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1311.073438][T27897]  ? lock_release+0x201/0x2f0
[ 1311.078154][T27897]  mtdchar_ioctl+0xbc4/0x2090
[ 1311.082850][T27897]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1311.088018][T27897]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1311.094040][T27897]  ? __mutex_trylock_common+0xe9/0x250
[ 1311.099534][T27897]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1311.105476][T27897]  ? __pfx___might_resched+0x10/0x10
[ 1311.110781][T27897]  ? trace_contention_end+0xdd/0x130
[ 1311.116104][T27897]  ? __mutex_lock+0x1ca/0xb90
[ 1311.120814][T27897]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1311.126233][T27897]  ? __pfx___mutex_lock+0x10/0x10
[ 1311.131300][T27897]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1311.136541][T27897]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1311.142450][T27897]  __x64_sys_ioctl+0x18e/0x210
[ 1311.147297][T27897]  do_syscall_64+0xcd/0x490
[ 1311.151832][T27897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.157846][T27897] RIP: 0033:0x7f8d3d78e929
[ 1311.162313][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1311.181972][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1311.190469][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929
[ 1311.198488][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003
[ 1311.206493][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000
[ 1311.214501][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.222484][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18
[ 1311.230491][T27897]  </TASK>
[ 1311.233581][T27897] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1311.240878][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) 
[ 1311.252967][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1311.263053][T27897] Call Trace:
[ 1311.266356][T27897]  <TASK>
[ 1311.269316][T27897]  dump_stack_lvl+0x3d/0x1f0
[ 1311.273937][T27897]  panic+0x71c/0x800
[ 1311.277853][T27897]  ? __pfx_panic+0x10/0x10
[ 1311.282293][T27897]  ? show_trace_log_lvl+0x29b/0x3e0
[ 1311.287514][T27897]  ? check_panic_on_warn+0x1f/0xb0
[ 1311.292644][T27897]  ? release_mtd_partition+0x71/0x90
[ 1311.297957][T27897]  check_panic_on_warn+0xab/0xb0
[ 1311.302923][T27897]  __warn+0xf6/0x3c0
[ 1311.306842][T27897]  ? release_mtd_partition+0x71/0x90
[ 1311.312143][T27897]  report_bug+0x3c3/0x580
[ 1311.316488][T27897]  ? release_mtd_partition+0x71/0x90
[ 1311.321780][T27897]  handle_bug+0x184/0x210
[ 1311.326126][T27897]  exc_invalid_op+0x17/0x50
[ 1311.330644][T27897]  asm_exc_invalid_op+0x1a/0x20
[ 1311.335531][T27897] RIP: 0010:release_mtd_partition+0x71/0x90
[ 1311.341438][T27897] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 0f a4 ac fb 48 89 df 5b 5d e9 05 a4 ac fb e8 f0 ca 51 fb 90 <0f> 0b 90 eb c2 e8 55 aa b7 fb eb db 48 89 ef e8 4b aa b7 fb eb a5
[ 1311.361064][T27897] RSP: 0018:ffffc90005077840 EFLAGS: 00010293
[ 1311.367152][T27897] RAX: 0000000000000000 RBX: ffff88803247c000 RCX: ffffffff8b7769ad
[ 1311.375133][T27897] RDX: ffff888060a73c00 RSI: ffffffff8669bdc0 RDI: ffff88803247c000
[ 1311.383116][T27897] RBP: ffff88803247c648 R08: 0000000000000001 R09: 0000000000000001
[ 1311.391109][T27897] R10: 0000000000000009 R11: fffffffffffe8560 R12: 0000000000000000
[ 1311.399092][T27897] R13: dffffc0000000000 R14: ffff8880599005a0 R15: 0000000000000000
[ 1311.407104][T27897]  ? delete_node+0x40d/0x8d0
[ 1311.411732][T27897]  ? release_mtd_partition+0x70/0x90
[ 1311.417036][T27897]  mtd_release+0xa0/0xd0
[ 1311.421296][T27897]  ? __pfx_mtd_release+0x10/0x10
[ 1311.426265][T27897]  device_release+0xa1/0x240
[ 1311.430889][T27897]  kobject_put+0x1e7/0x5a0
[ 1311.435321][T27897]  put_device+0x1f/0x30
[ 1311.439495][T27897]  add_mtd_device+0xbc7/0x1720
[ 1311.444289][T27897]  ? __pfx_add_mtd_device+0x10/0x10
[ 1311.449511][T27897]  mtd_add_partition+0x30c/0x670
[ 1311.454467][T27897]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1311.459951][T27897]  ? __might_fault+0x13b/0x190
[ 1311.464738][T27897]  ? rcu_is_watching+0x12/0xc0
[ 1311.469518][T27897]  mtdchar_blkpg_ioctl+0x20b/0x250
[ 1311.474643][T27897]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1311.480339][T27897]  ? lock_release+0x201/0x2f0
[ 1311.485052][T27897]  mtdchar_ioctl+0xbc4/0x2090
[ 1311.489773][T27897]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1311.494918][T27897]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1311.500926][T27897]  ? __mutex_trylock_common+0xe9/0x250
[ 1311.506417][T27897]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1311.512341][T27897]  ? __pfx___might_resched+0x10/0x10
[ 1311.517638][T27897]  ? trace_contention_end+0xdd/0x130
[ 1311.522941][T27897]  ? __mutex_lock+0x1ca/0xb90
[ 1311.527731][T27897]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 1311.533125][T27897]  ? __pfx___mutex_lock+0x10/0x10
[ 1311.538208][T27897]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 1311.543451][T27897]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1311.549372][T27897]  __x64_sys_ioctl+0x18e/0x210
[ 1311.554161][T27897]  do_syscall_64+0xcd/0x490
[ 1311.558782][T27897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.564694][T27897] RIP: 0033:0x7f8d3d78e929
[ 1311.569126][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1311.588751][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1311.597182][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929
[ 1311.605169][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003
[ 1311.613241][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000
[ 1311.621227][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.629213][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18
[ 1311.637207][T27897]  </TASK>
[ 1311.640591][T27897] Kernel Offset: disabled
[ 1311.644934][T27897] Rebooting in 86400 seconds..