last executing test programs:

1m11.872336291s ago: executing program 0 (id=830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xc000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x4)
ioctl$auto_RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0xff, 0x1ff, 0x2, 0x2})
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r4 = socket(0x10, 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0)
r5 = socket(0x11, 0x3, 0x6)
sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040)="e9cdf9c4f59ea1", 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00", @ANYRES16=r5, @ANYRESHEX=r0], 0x1ac}}, 0x48000)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$auto(r6, 0x400454d9, r6)
recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x18, r8, 0x301, 0x70bd27, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_MASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4004050)
read$auto_clk_summary_fops_(r3, &(0x7f0000000400)=""/27, 0x1b)
close_range$auto(r3, 0x8000, 0x0)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
setsockopt$auto(0x3, 0x1, 0x3, 0x0, 0x1009)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x807111}, 0x8)
writev$auto(r2, &(0x7f0000000140)={&(0x7f0000000280)="000fa74d578c26acb9c9aed10631012de2c8b87a67e2264a9325a2bd1f6b5997311c4b37c01c0bea94633eb8a6d965dc090f59d9aec2acaee8fa7f18ea4e53c8cbf622b68c65693d8385a51cfb697cf5815564ec6f24d9af4733d7d254869a69a8807ca16067c732242009e0480523d7dca127f6466399dc57851abff9fc9b4c830b01a2ef59c90844948a2f5e16f205b8415c38d69398af52a3bdacccd9d03ceeed6323c99650c887cc01445dc288dfe1d757c054f99e18107e79fb9af509f4010a9a81f3292a9d3bfc718565392d1314e608ff56e7968a1a90208f728739bcdf5882c00cc1a054ed2eb8", 0x5}, 0x0)

1m10.42807507s ago: executing program 0 (id=836):
r0 = socket(0x22, 0x1, 0x80000000)
r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x10074c)
unshare$auto(0x40000080)
sendmmsg$auto(r0, 0x0, 0x3b87, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = socket(0xa, 0x2, 0x88)
r3 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000240)="4c0c5800000000000004", 0x49}, 0x4, &(0x7f0000000080)="7fd8b8869633de0aac2e49e39a41ef765d5d", 0x0, 0x11}, 0x2fcd716e}, 0x80000002, 0x100)
setsockopt$auto(r2, 0x29, 0x10, 0x0, 0x1)
r4 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r4, r1, 0x7ff, 0x6, 0xa, 0x1100009, r5, 0x440, 0x1}, 0x6f3)
r6 = bpf$auto(0x100000001, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
ftruncate$auto(r6, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
write$auto(0x3, 0x0, 0xfffffdef)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)

1m1.62992441s ago: executing program 0 (id=851):
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000)
r0 = io_uring_setup$auto(0x8000, 0x0)
r1 = socket(0x11, 0x3, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000700)="d04e07c7ed5258635d58d903433b8ebb237477a12b61f0d6777cce2681e889eee7afb3dc4f719af93bea9bbfc4b181ae178feecc258eef949b505c24ca5ffcf95708635bc3fb0655c245928fef89e71aa031c59172332e6f23122843a4051c2bb763062c533868a4f61a3869be077c15928f24ab931710315dbbacbb048e642a8f6dd44876392abfcf1247b0154afa4355ac4ba09ca39ef21d9ffd3f1c476d9e2aec41d87a7183530012b96391856556b18ea0613be711746f37bffbfb6c960dd12448219868320ced1c03a974b411a623989daf83013b12e8fea25f8d7b771c2a8bcd09b63d3fb0d5f80278e46c25e5155e0fe55b1cf0241d6751248d2940009cf8fb5703b65476a0", 0x5aa, 0x0, 0x2e, &(0x7f00000004c0)="37c468538b67dedec151e7a56857fba9230dcc66cb312db89c8c67b908e3a3193a3cc549d03826b11fa23a1381ee895b2aeba3c00b8dadc5fed7c46592d4afa2c966810528915a01d9ae2c0ff0d71d9ac456d613be5eac2fcc547129e971340eae70a683ba8c02fbaead81f7fd1999a154a9ad21de239a135c43bcb5647d9306910abece0c9cc306d7ee9400cd51e54f1c2254e034816ebde4878d29f220f988042b46ddb509cb821089c0dcc8320fc183ab946731c0918314ae6281020ce5d1a99656b0c8e4f40110eac817d50356086ddc957e9a1131795f71741e4157b43f0a8f18b486dd0c6b5e6af2efd8745cb3ed4e63ac54f08eff", 0x7, 0x8}, 0xa32}, 0xfffffdff, 0x1)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
acct$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x8, 0x2020009, 0x800000000003, 0xeb1, r1, 0x8000)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2)
read$auto(r2, &(0x7f0000000040)='nl80211\x00', 0xbe62)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYBLOB="0f1526bd7000fc01000000001000009a909449e1a2d4c174d2ab00"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)="574a2b0b965899f007ef80dbadeeca7a64516dc3fa389f7afb8f4ff63de8685714422a49ce049730ca645163904398c1289eac833f28d8b05f279fcf0cad9eaa9afcad84f5eb8ba3da4189b70104e5fbc71ba89aa0ff3a8407e42f8605265cebac8c13d92db3a0788d219bc419c7fce42468b132bc78c156100c1d8e42f6a8d49b112f6588961f6a52dc1f53e7fa930ac1a4bac639fa3b54ce3218")

59.76217849s ago: executing program 0 (id=859):
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
socket(0x10, 0x3, 0x6)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x2, 0x4)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x6)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

59.341418532s ago: executing program 0 (id=863):
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})
r0 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x0, 0x0)
read$auto_fops_u64_(r0, 0x0, 0x0)

58.664028854s ago: executing program 0 (id=864):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0)
ioctl$auto(r0, 0x4b45, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/iosched/fifo_batch\x00', 0xa001, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
r1 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r1, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x200, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_DATA={0x62, 0x9c, "68e9411626a2e6bf9ff3e81ba024b32cc41757f05ad18fbbaea64f77d606119de5ab4f38e8bb6d0045cc8f62983e83803119c101eca72d36e12c6a2a6cee4d84abdacf3f5aea089f64147602430cdf46cd5b0ae347b57928af4fb2e627c1"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x89, 0x125, "916cb9355c0ed4a53ce1d311e9c8c45a77055b24fb74f7cf9a0c2b672b1291442c9911eecd92a3ba7d48ce35403513614d20dd70dfdf7bd42e16f62023342149ce62c14b0ccc6ea18914bbbb57393bc182bead2b0e668ead1ed670417b67b20e09917e2bfdefa597aed2b0cbec722aedfd1c5889477ceb80432038c24457d4dd5e35b83dde"}, @NL80211_ATTR_PMKR0_NAME={0xdd, 0x102, "380c2cc5ac20f7a172a408da41f1b51f1c3333a95c4ec5fec0158eb1419b86cc6c15e960d32ef0c176bbe3f33ae99c74bee6b63dc1232b7fff953b1d5b51c7344373fa6fff579d0080e230f766bf6d3558f0a92a22ed8b3ad0959b4f9015e0c61eb99e3c4c95047388cad79c4e345b0ffa3fc2580a9f1c8f22014f051918157ac10e530eb711435b9053f8c268fb2cb3b46ed9259d329a53692810f5fe15780b6f0efce96b9f4fee3d9b78254098d309d65cd5b9ce35d9ffdc260101f157c25f61cc944ebe82bbdf8f4f8889600b30e03d624c805155d2b309"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

58.001063077s ago: executing program 32 (id=864):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0)
ioctl$auto(r0, 0x4b45, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/iosched/fifo_batch\x00', 0xa001, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc)
r1 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r1, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x200, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_DATA={0x62, 0x9c, "68e9411626a2e6bf9ff3e81ba024b32cc41757f05ad18fbbaea64f77d606119de5ab4f38e8bb6d0045cc8f62983e83803119c101eca72d36e12c6a2a6cee4d84abdacf3f5aea089f64147602430cdf46cd5b0ae347b57928af4fb2e627c1"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x89, 0x125, "916cb9355c0ed4a53ce1d311e9c8c45a77055b24fb74f7cf9a0c2b672b1291442c9911eecd92a3ba7d48ce35403513614d20dd70dfdf7bd42e16f62023342149ce62c14b0ccc6ea18914bbbb57393bc182bead2b0e668ead1ed670417b67b20e09917e2bfdefa597aed2b0cbec722aedfd1c5889477ceb80432038c24457d4dd5e35b83dde"}, @NL80211_ATTR_PMKR0_NAME={0xdd, 0x102, "380c2cc5ac20f7a172a408da41f1b51f1c3333a95c4ec5fec0158eb1419b86cc6c15e960d32ef0c176bbe3f33ae99c74bee6b63dc1232b7fff953b1d5b51c7344373fa6fff579d0080e230f766bf6d3558f0a92a22ed8b3ad0959b4f9015e0c61eb99e3c4c95047388cad79c4e345b0ffa3fc2580a9f1c8f22014f051918157ac10e530eb711435b9053f8c268fb2cb3b46ed9259d329a53692810f5fe15780b6f0efce96b9f4fee3d9b78254098d309d65cd5b9ce35d9ffdc260101f157c25f61cc944ebe82bbdf8f4f8889600b30e03d624c805155d2b309"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

10.635945711s ago: executing program 1 (id=968):
r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0)
read$auto_urandom_fops_random(r0, 0x0, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
r1 = socket(0x11, 0x3, 0x9)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/status\x00', 0x200, 0x0)
lseek$auto(r2, 0x5, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100)

9.976793631s ago: executing program 1 (id=972):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socket(0x10, 0x2, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64)
sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf25000700000800010002"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x0, 0x8, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) (async, rerun: 32)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xc0282, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x6483, 0x0)
read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) (async)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
clock_adjtime$auto(0x6bc8, &(0x7f00000005c0)={0x9, 0x0, 0xfc9b, 0x8000000000000001, 0x7, 0xfffffffffffffff7, 0x6, 0x0, 0x2, 0x2, 0x1, {0xf, 0x7}, 0x82ba, 0x801, 0x59d, 0x5, 0x0, 0x8000000000000000, 0x100000000, 0x6, 0x9, 0x7, 0x81000})
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x200000000807, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x9, 0x4, 0x5, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) (async, rerun: 64)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio23\x00', 0x4000, 0x0) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) (async, rerun: 64)
io_uring_setup$auto(0x6, 0x0) (async, rerun: 64)
socket(0x10, 0x2, 0x0) (async)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

9.868681029s ago: executing program 2 (id=973):
mmap$auto(0xf038, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8003)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x58, 0x0)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x2f)
ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0)
close_range$auto(0x2, 0xa, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x20000000000000e2, 0xeb1, 0x405, 0x8000)
socket(0xa, 0x2, 0x88)
setsockopt$auto(0x3, 0x0, 0x22, 0x0, 0x10001)
write$auto(0xffffffffffffffff, &(0x7f0000000100)=',$/\x00', 0x85a)
r2 = io_uring_setup$auto(0x9, 0x0)
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000002300)=@query={@target_fd=r0, 0x2, 0x0, 0x6, 0x5, @count=0x6888, 0x0, 0x7, 0xc6, 0xa8, 0x1c39}, 0x9)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/99, 0x63)
mmap$auto(0x2, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x189160, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv_slave_1\x00'})
sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000)
ioctl$auto_BINDER_VERSION(r3, 0xc0046209, 0x0)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000140), 0x280080, 0x0)
r5 = gettid()
write$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffffff, &(0x7f0000000240)="d5a7", 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
tkill$auto(r5, 0x7)

9.264230278s ago: executing program 2 (id=974):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket(0x10, 0x2, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x2041, 0x0)
memfd_create$auto(0x0, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setresgid$auto(0x0, 0xee01, 0xffffffffffffffff)
r1 = getegid()
mmap$auto(0x400, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002)
semctl$auto(0x7, 0x2, 0x13, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0xc2040, 0x0)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r2, 0x4b72, r3)
setregid$auto(r1, r1)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0)
ioctl$auto_SOUND_MIXER_READ_RECMASK2(r4, 0x80044dfd, &(0x7f00000014c0))
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x8)
socket(0xa, 0x3, 0xff)
exit$auto(0xd8b)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
mmap$auto(0x6, 0x101, 0x1, 0xfffffffffffffff1, 0x2, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0x90000000)

7.347873733s ago: executing program 1 (id=976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4040040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3)
sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRESOCT, @ANYRES32, @ANYRESHEX=r2, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
statfs$auto(0x0, 0x0)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r5)
sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r5)
connect$auto(r5, &(0x7f0000000940)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x1e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r5)
sendmsg$auto_TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x498, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c4, 0x9, 0x0, 0x1, [@nested={0x8, 0x48, 0x0, 0x1, [@nested={0x4, 0x7e}]}, @nested={0x1c1, 0x128, 0x0, 0x1, [@generic="3324bfdb8767e173afebd40d73c23fbe2237c81d173921803ade9837bafdc8a9b05e404b2370df31c54089a4a698db4b872c6aa014183738c2857a3db7988a4bf36afe723f85422b6fed3496dc068a1517937942071f903cbbcc7461a3f2e8aa7cb0847cf6dbde346b9622cf5af143619a5bf7b7038a8b0b6376c7b65e9d4feb2b13cb0b9a827d45c1891b8a14ba6bb96387b7c36a3502298c24b8a8833461fac759f08c53", @typed={0xc, 0x98, 0x0, 0x0, @u64=0x4}, @generic="4a96eb682c23d221b93c30f6afa3ad5a55f986feb2a8cb90de09b4b43b4278895fd791872048d483dba6976c01388c9d123f5c", @nested={0x4, 0x10}, @generic="8b4ded33a5d958647bd51a6d14e17374bcac810a72d4f9d32f6aafaf62428835c96bc1f05888a72606490ce5a0c0542d30ef567026e8674d13bf211afb7eadfc50edb577a61c90966d65e13aa35c794b87dea60ebecbdb5833aad73cc082edba8d6dbc55fde53e9133afc2b24c1d8ca429c2ddbea3da57761a48081bfa9eb860b4cbacbf4295fba7110bddbb20b760684fbb053b2e97be6f8752f1e9160f9a5db9ed982ec24dc784afdc8012b5ec3bac43e7dde0724deab5c536cdbeca66396ab66f8164ef8c2b13918d7496da395515de5bc8ad6b"]}, @generic="f49c5fb56967a62ed56b9ee77d56cda731013efe0994a5adbc1b4cd391312997941d43797961e4588a9c4a241f302feea13583ebff08567459df95518da62ddb8a1944724c391e7efeb07c6c69d71360d67c5aa81d1c32a335d7f95b431dc7874c429518fbb09c177c687d8805743dde6d735d", @typed={0x4, 0x5a}, @generic="1f7eab9e819625ad4f081e7ee4af82c2acddc436d96c3606bfcb1147fa6d49e53554880329e114ba883c5ad2acc1927a03e7e0364dd35bcd346997851a73b942ab5bb9ba787ab3d9eade748787c51c9aaf744d66db35e2dd043f7c51e1b6a8d4e528f36b5ad64e2b1f215b599c18bba99a04116739677a17367608542b"]}, @TIPC_NLA_NAME_TABLE={0x1bd, 0x8, 0x0, 0x1, [@nested={0x9a, 0xc3, 0x0, 0x1, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x2603, 0x0, 0x0, @fd=r0}, @generic="d85fdc3239a43d7a77b8b3a0f2b01fff14ea55d5742c258823ff321a13428395100027326fdda5be95d2b2890c0193893a6f15a43acb00b510568ff8dcb9b8cde12637b88b179eb58f62135d0d08d8f6e8bac1761625", @nested={0x4, 0x7a}]}, @generic="9c57dc6964f13a9a4ad22977ec04c98902c87844560c0c94b5b14709b2d7271d31a264c0747311b3012f9dff424cfea806b20f352ec545682977533bd01b5e66b1d0a9ce6321294253c375e254dfd9fc462c556b075da4d37374660ea3b4845b651d203f072450ed8a8e3a3cf0e2e2e0aecf0987fbee1527efafe77c4c6e8a866de37c41124d23117cfe92972a95f83231e2e5e6b559d4b7f74b6de79ad8a59f7ac131e8760dddeec54457165ee5c7df51fa96c38c45d21c47b41d5763ce375984af246d24524b433025cb93eb273ac552ff9d2b233f2f3adc1ea37ee162de584aff668dc3f9d0f0198e4a3ccf54d5bebb", @typed={0xc, 0xca, 0x0, 0x0, @u64=0xffffffffffff5a3d}, @nested={0x20, 0x66, 0x0, 0x1, [@typed={0x14, 0x12, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x4, 0x83}, @nested={0x4, 0x11a}]}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000845)

7.128915689s ago: executing program 4 (id=977):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
fstat$auto(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff)
read$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000200)=""/34, 0x22)
pipe$auto(&(0x7f0000000040)=<r0=>0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=<r2=>r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff050000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)
sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
madvise$auto(0x0, 0x2003f0, 0x15)
mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
mkdir$auto(&(0x7f0000000380)='./file0/file0\x00', 0x552)
rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180))
ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "147f624b05a2b22a62eb108f57b62c1a128c0f4a188dab9dc484db51686adb5a70d52b7f2f66145c31facd1cbb574c587628bd4cd6107b246f8f98fc23c6a864a492955d4c9350848a1d376d48008c8245ef620306a514c0e2f4dccf4932b8161402a453d31f6a2849bd701d53c73b5c87638db257f5ee75b4b2f3050dcd85bdda18e5f6c8f07bcbafc93b528f48baacd00dff67c662817347d58f7e2540061f146deeeb8a8fbea98e59c0ed49ac5898827aaa13b42a504dc9de98747915c70a39df9e7ad1373109c541923589e6364976cd3168fe3d0f085186627bde1577bbf260387eb8ecb5ad8d705de9f1e9b3d50ce454db9cbecf236dffbd3b274b5a7a63d3be027f04c7111ed622df2830ad588ef1d8b6c480b0f0772b5e7f621f8afa59a92859c296e01a7fa3f30f0d0d4337652988adb2b9d680d2c4f9896e1139548670c3598f33ba0f43def8ca1044626e75ca4d2b886f6db26ebb438a587407e59cf70e6cedf804044a4ccbccdcdcfd3e18152f5ac92af75d4deb491679de72f1b13ad5478ed08bb7acfc503580dae5c23583d01fdfecc9207f9e276540cf2328ba7a585937fd6acbda9a3a770277729be4f41177789decd4e0854b9861c08504c89215d7e8ce3473a0ad98f25d1d9e5fe2054a4ba9d3e0a67718ac00f384b74f5c8b24097e30e63af0c374c78f21d0af94486933450a311f8194051592e9e37607542244627393d338575c5a0a51815a01bd5ecf313cadddbb3c6bd4941a5c636b0c884ea266740b25c397ff3ea626070602d43ffbbebc0bddfdc47602432ecedce3bb6b0aba196f0eb714251d210bc979b4518005e41b5b6b0fc0ba793a8e77edd81553ce3a99cf9e7f4a9a41858e1971ac4127fa9995c888259e3436b7366e1344955ec1dd8628581a07056ec537e8196f87ab570af4fb4744f874fb283f8a54cae01cb32f70543eb60b6f65cc5269171d7e5fff4cbe4cc0b76983aaba8d869d8848e496e2c5359251a39e5f9d1c0c6756456dcdd744e82594b2a6bfe3db7877c7fc123c259f8f70b36b3c48ae31875d5cf3eb6b00a32e107f419a079641e51c8233f4c304b4bf7942814ec1eb8166f0b168d76fb3c05cb1d0ccd66fd15cbb399f3730076246721f4d71f5bbcb63d2309c74878bb16ec592873f7514b66118673f808c2cb16b4a7b3be7b560b5183bb231be5829d9de866ecbf23c70779c6f9d37b7d185cdf53a328eeee8ea27931c68c68edad37f2a10fbfcffacbacb80e8c39a0504bddab3156c7c35ab417aee9c979bf14718975e59ec51a37516a71abd59ddc916de121937da400f09b85e96b554a1f5688b20e2df0f814163e46db2ef60268a6c57035008998b834560a7f9a69bcde2110f8d401321db671c7cd28fce473d9dd43d598ef1e576c93281a5a510fb48e7dbfe06451e2e9718ab0b6cd6ec02b6b62ae9d6cc7ec94af64311793125d92ef9ac91b0d99445c4dae30f46ef49f8068950a6a32661094ac22af30e313fc183ebe103e709be8bcb4e657a731ac05e55a5f3b772ec5f89074fce97e565f560d172c6975dd1edde80507a9e442b208fd57520cbbcac16ddcb26fc8ef1d19d2cfb07e80d32aab1769e628303478aff29f0143140478b50d392fb3e53e0d386ea97d901c27ae5911330f337ef7048cb7f5307fb0231066c100177c09722719372aa5dcffbfa6e84469bfa884446d5848d6af5c4a324f0805e5a1c82e97387239ba24e8406edccd92d37c0bafd97160cea312ba3ef96b6982d28e0d5e2b3bba83dcee9f5de3155d635deebc55bc030f9dadc659a0b6f5a84d539077e785ed5ed098115b576a7238c3532cea0fe9f00cfad2112908e57e66be5e86339812b5257a03e735727ea8c4cf5bcf0820dcf87a906bd962806a2767971f6079613acfb781d514111f35ba1fcdecaa15764d9ca817794c536cb4b1d4a2f60cf116520aa1cd2f7ade5d38c195ee6aaa196ceeaad0a3d642b0e4b54a5c9ffe8941e4f661aba9b9d77a0e2af0d1dd8120810f4b4f93bc56a2405b32ec460ccfae654ed07abfbfc3dab30d5e0b77538033ee73833910ecb297be29cf034a1133583e5afd7633e4a1b44c844cd34eb7d5e07d74e695b4abea1a70b5eb902385563e30134ec33ada8dc78433b4eefa2ead19df77dfc71148607e5c708f7692f1645e7a323f175849bd045f0bbed4f6a06169deceb2a4d361493ee6db8c7b0bd18b9782f48f7459c9d9033221dcf6a07464c04df0b11f99a943e12b1b0b6dc71c3bfef7128b2df83f1ee99952e4cc0a51189a21302e998fd2ed37b2ae8bfd96a47d50eb3d196fea3af714157e6a4e0630e0944de57556aa3225b485388faed23a9a9d595a5ff296e8e29452ef5541230954d4d0f916a27781041902f13cf0e962527e1a0f659a95a0c3831bb62841ba3e01c74859818283ad0725e76ed82f695405fffccd90ad1be0ad211891546a2ab3f75b9872c3ad68c2f5f4d8510cf1e087e789c5ab821ef46e197a36986434b1569499ad2717db7b200afd77b7542ba00a46192341aee8fe3bfe3d6e0c2767cafca11ce2beaf97602ef9095e815ab6eaec42399865f724ee9d96217f45a84a0def5d87375c65e0430cdc83422b8d367982f2722e793c6ba37687d34f0e2068c114fae854a3158abba5f5689a40488d095de19071a71d8d7a17f4389f2d20c4c0f9c16760d52d166acc5c201cfaecc0fc54b7143c60aaaac0ae196b36f3e1447e3e0992be2642ca8302b24514bd06cce84279ce361bb8ce245ca5152848ab4cced61c67e4579c0db21efd26efc0780cf4a04b02ddaa54335fa327d57320307e0dc3fe1f6cdb686150e2235e05ddeba10a193d49408ee47f57229a6ff30351dedf61b8789900eb15db5b0069c57984ba31710509d88da1d78b3eface0ad5b2cb7f303e248cb68abfd5a0c3ac672d1f6178fe54ef67e034d38c01e3458d9b64a97eb0cccfae7efbbbc0c8b806e75ae5dbdf641d8daa862f90cac0d460c6f70a7765169cd1e9fe305db403e4e453ce84c35a3573751a93ca7dd478ba547449254f3d7ac7b05f345bf0eec346db042b982c964c81545bf05986d033df8e41e9e19d3561250514ed703444048f44763261a860aa3cf0b539544af9a1fc4ba7f989111e00dcab0e64b538a1019467c3b43641e13c2707a4fdc78648b92302a54a0e7e3de53488e852f0fe658557ad1df2cf12a898515769bcde0f4a3386764d5b2f0eba5eee1e3257215c005b3bad612ff43b4121efc277fe9b80c69eee2c1ffdcb3ef843485d636a0025848254e22cd2f51c1f85202ae22d53969072c1ec4dbb973a157059ed523b8dad9671f6bba68a9d4521564a826b208df019ea32eeaf5b8f973263fdcab4c2519ac0d5ce4c181b12ba71bb3fc02388e72e89a24152e07b264fb00b425633ca2b2aaccd7208d5df00002b7fa4502656593a8e84e4b620bc65a60bf3d3c8b0c1d0ac93bcc711b9cf206b1037d3437e515913badbd7ce52a69b32cd5b828193dac41fe0ff1a869bf086927eff915e422be23f40a54a2384e478f74bb2a397ecd214224294d9300d921afad2f50960e9830dc1ac8ee08ea0ff474d40a23b1f7dbc7761120c889b3354281751342d2429eb2555a8a57063f61c6cb3115d99d41a040c4d9fb3c5ddec980abfef33562607b7ad6fc8ac67c8026d50f2e01d949d065a8ea488b3d0d7ba296c914352b99a6c36aad4c030d1f9bef8696cb6d9dee3835646695b2a43f8682405c118477dd6486699dcd9cb93d911dae691fabfdfcc76ae48bcdf5d5ea87fffdcaf4e14faaa36689da73c9012ff943a787ec0e83f52cf221219f3468bdc010698450a19717e4ed062ab7d682d9e18c4469581bd09cd31aeaf1d17afb02b9cd769f56830d0ad155e4898889b438edfb13fb40d46bfe082ae1cd0f287805e4f2d011f43cd070f883668f45612132b19ff2f406bf80a1e5e69c741c63bc366c102a7a7e78d92e058d1f771031e582094bc7536182ddf2b88ef13d6573d0d34183c5e4dff48654ec1d18a44f6b2c67b17eb06489523bc3e7908b612e5204985cad17ff99b41650e49e469d8d80f3a2e32e93826e02160fbf19d92ab300bee4319b333aa9e96ac46d22ed71cf8394663f62362fe145094d140588c2e6f3eadc0bc16f6f6172aeac1e9ca44d93fa1399c641729e21f97f25ce5b4163419235bb98a218fa9d50b7aaa835d122c0436352b27909dcab907e43630907b23713bb445b93b8ec840b17d3d4618dd38bf58f2a0a6c3272a00aa8704774078f565faa4195ddfc15b33b196e646ebd8ab55e74da11ab4c30d031785c7c168d30ca12d23dcfa4a5a4f883f3b887fb77d822dae0a161d6c3565037a1f36bb1cf1d8601d94e4111b4ee435a98c21577b1e647ba160921881339a00a2d04210e603dcd9dfe2c40d32e5d93d9e94a5c176ca6291d5befa75121ec0abd660e2bac1458bd5609a6d725af0895b0d559ad726f34b50a06fd45f86764508386ab65ade7c76d0ce07330bf0d342216a769c98edb854cad6f6b02e0d09e713bbb7e12c786edd9d1078f3c5d0a87d34d9326e938098d674fb2d1ab1e39e3683a3ef0e00d9b66d56582e9d5f2d61a60226ee2c9cda7d44ef0504d6109fcd7978207df3eb9ed5ac860e0172907362654efb54cd6d04f7a58578fa3853d65e9243730466085905cbf1e1b34ea7a2f9dd268495d49824045074debb4c9140dfdbfc81fc6d371ec49521ddd996fd8761ada5d427348503a57a73a3ac74a540df4c2af59a1ecf644c00ebfbffafbf2990776717a2687889da69fefd0b0cb33c8351d147bcf31f98c8909e554c7ffd2cc9f64e4eb6b9c4b232489a2d912f19f79108b73a38de79fafd4a885de47810bdc4658d6d773c97e523732997392f1e02396875eda8ff955ef0ad75145cc1819df6a53878b9f1c5964146dcd73eabed0df798aea5c533fc263bc8d2533e36cde59e2cdd2ffac12cd7e6bea69ccc14b0b22b7606a6f82e8528f8dc739cd5c0ed0795d49452f257be2068055dcfaa7589ca65820d31583a81834910d8d1327469e370339dce1d87c31a750a02270cdaef457da2d50abac6651357858c391464781009209d79cf4286045773fe247e705a14b162583cd89e850df91b7517bd0a4476ac02fdc1dbd0faa81fa1e829ad0a548236939efcdf63c15b868b8712ca05571d7c0b810cc02cba9d1ae63e987b59ec3281cd706d7571d6b69a92663f11a24a68dbc6b2436b8049986f78fbe8effcf94457d5085dbf8812abb1fd431c6b465203eb67070a936a665fb19273240ed1e3905ea27b996b74b31b1216a77734b106dd9752a5f430ac5aef718c6942379dbd342aa66537e655afa95ec78cadcfc80584045cd07d43911c4d7dc3a37a4cf3cdf6eea9904c441ec02cfe0515c6c360463237aa6b3fafebcb1a59be1bf5ebe4680819f3e78ccc1e517987db6220b45bf840fb8fc9b33757a0e258468a911f2504358981410b6daad15bb0ed81ff971ef3cc89f06dacfa45a37cb37e946f5010d0a308ff760227d439f07401839b7844bd4e5f5d1824c17797c5abfb5a326f6b4626f9789d8d7a074b7f223cc4183f68e14de037a197920a858c310e3602a3c6f319b506bc4c523af495a95b74eb88af2699cbbeecbab62811ed05a0ea5e292e72e565ccbeb3fda2f32ee05ff7bfa40bfead96ace132532026e553bc4438a65ea897d64e9cdec2baa75839f9ea4dba584b81a9b813dc648e3ac31c885ec5dcedda3efc7a3a7"})
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

6.552463702s ago: executing program 2 (id=978):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bpf$auto(0x53, &(0x7f0000000100)=@batch={0x8, 0xf, 0x10000, 0x3, 0x8, 0xffffffffffffffff, 0x7e4b, 0x957}, 0x4)
move_pages$auto(0x0, 0xd0, &(0x7f0000001100), 0x0, 0x0, 0x2)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
shmctl$auto_SHM_STAT_ANY(0x40, 0xf, &(0x7f0000000400)={{0x10000, <r0=>0xee00, 0x0, 0x8, 0xd37638c, 0x6, 0x1}, 0xfffffff7, 0x8, 0x8, 0x1, @raw=0x7, @raw=0x9, 0x9, 0x0, &(0x7f0000000300)="b4b3654cca8039f550f99b9cf116782571b1ad8971508a43e8daab41e1490f4b661d6b2481739fba027db8e8317d600040127ae84051854900a34132e83ac48bf4ce29f8f426c05b733c9803acefec2e1934aca9d54c601f6ca317a69184", &(0x7f0000000380)="f5fc4766ebfe5ff9b951c7503eba1e70ac86d5d26c897e9895b1442089ee80aaa4de010f798b2237067e7c73d889c2764695b679eddf83e97f05267eee96b84077aaa5532870fe0404aa6e1ee9b981919b8848b140865194e1a95f4f03ca60ba00835e1fe654618dd5d7283bd8103331c03af54f268a4504388f0246c29263c4"})
setfsuid$auto(r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="853669a3", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x44801)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

6.140365706s ago: executing program 2 (id=980):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x7, 0x0)
socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x4, 0x0)
openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0)
openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x1c000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
io_uring_setup$auto(0x7, 0x0)
socket(0x1d, 0x2, 0x7)
socketpair$auto(0x4004, 0x7, 0x4, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
mmap$auto(0x0, 0x80fb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0)
ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_TCFLSH2(r0, 0x5408, 0x0)

5.487922217s ago: executing program 4 (id=981):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x23, 0x1, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x0, 0x6, 0x3, 0x9b72, 0x7, 0x28000)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0)
pread64$auto(r0, 0x0, 0x6, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_cancel$auto(0x6, 0x0, 0x0)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11d0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
capget$auto(0x0, 0xfffffffffffffffe)
r1 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r1, 0x6, 0x24, 0x0, 0x40)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x8000)
shmdt$auto(0x0)
io_uring_setup$auto(0x7, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x7, 0x0, 0xfb48dd26, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyab\x00', 0xc7f16bff2a183342, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)

5.268785301s ago: executing program 2 (id=982):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9})
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
write$auto_tty_fops_tty_io(r2, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b3c", 0x25)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd)
lseek$auto(0xffffffffffffffff, 0x8001, 0x4)
unshare$auto(0x40000080)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(r3, 0x0, 0x1)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xbe, 0xfffffffffffffffa, 0xffff)
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r5, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x40080, 0x0)
r6 = socket(0x25, 0x1, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
sendmsg$auto_NL80211_CMD_GET_REG(r6, 0x0, 0x40000)

5.06760572s ago: executing program 1 (id=983):
socket(0x10, 0x2, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
r0 = socket(0x2, 0x2, 0x1) (rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async, rerun: 64)
sendto$auto(r0, 0x0, 0xb, 0xc, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xe0000000}, 0x1c) (async, rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/lowpan0/phys_port_name\x00', 0x80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 32)
io_uring_setup$auto(0x6, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
pipe2$auto(0x0, 0x80)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
getsockopt$auto_SO_RCVTIMEO_NEW(r1, 0x6, 0x42, &(0x7f0000000180)='/proc/self/net/dev_snmp6/macvtap0\x00', &(0x7f00000001c0)=0xffffb1d6) (async, rerun: 32)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) (async, rerun: 32)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/56, 0x38) (async, rerun: 32)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000280), 0x604041, 0x0) (async, rerun: 32)
execve$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=&(0x7f0000000040)='/sys/devices/virtual/net/lowpan0/phys_port_name\x00', &(0x7f0000000100)=&(0x7f00000000c0)='/sys/devices/virtual/net/lowpan0/phys_port_name\x00') (async)
madvise$auto(0x110c230000, 0x1ffffff, 0x9)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev_snmp6/macvtap0\x00', 0x440100, 0x0)

4.413837598s ago: executing program 4 (id=984):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x9, 0x6, 0x9, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xad41, 0x0)
semctl$auto(0x204, 0xfffffffe, 0x3, 0x4)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0)
readv$auto(r0, &(0x7f0000003dc0)={0x0, 0x1}, 0x3)
r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0)
writev$auto(r3, &(0x7f00000035c0)={0x0, 0x4}, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033d940fdf05ecff75c12163ddeab942ed73d07dadd6f419694d591eca8162"})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x41}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x44098)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

4.255908311s ago: executing program 1 (id=985):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/device_hdr\x00', 0x10b402, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8)
r1 = socket(0x10, 0x2, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x181c00, 0x0)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x20080, 0x0)
read$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r2, 0x40045201, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x807}, 0x4, 0x8)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x60)
execve$auto(0x0, 0x0, 0x0)
execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=&(0x7f0000000280)='\\s\x9a\xf0\xc9\t\b\x00\x00\x00\x00\x00', 0x0)

4.028758414s ago: executing program 3 (id=986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x2, 0x2)
connect$auto(r0, 0x0, 0x55)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r1, 0x0, 0x7ff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
write$auto(0x3, 0x0, 0x5c8)

3.636007345s ago: executing program 1 (id=987):
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
lsm_list_modules$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x5400, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x0)
getsockopt$auto(r0, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f00000000c0)=0xffff0000)
socket(0x80000000000000a, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7)
socket(0x2, 0x5, 0x6)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)

3.627476078s ago: executing program 4 (id=988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f0000000140))
ioctl$auto_TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000840)="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")
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0xa821, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, 0x0)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D2\x00', 0x40, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
signalfd4$auto(r5, &(0x7f0000000180)={0x1}, 0x8000, 0x8)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121482, 0x0)
pwrite64$auto(r7, &(0x7f0000000200)='/proc\'sis/ne4/ipv4/tcp^\xff\xf7\x00\x00', 0x4bf, 0x200)
socket(0x2a, 0x6, 0xfffffffd)
ioctl$auto_SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302, 0x0)
socket(0x23, 0x2, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00045db988f760da2bbd7000ffdb00"/27], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40440d1)
write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
write$auto_console_fops_tty_io(r3, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4b", 0x3a)
fchdir$auto(r2)
open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0)
exit$auto(0x7)
creat$auto(&(0x7f0000000340)='./cgroup\x00', 0x8)

2.848987769s ago: executing program 3 (id=989):
mmap$auto(0xf038, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8003)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x58, 0x0)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x2f)
ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0)
close_range$auto(0x2, 0xa, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x20000000000000e2, 0xeb1, 0x405, 0x8000)
socket(0xa, 0x2, 0x88)
setsockopt$auto(0x3, 0x0, 0x22, 0x0, 0x10001)
write$auto(0xffffffffffffffff, &(0x7f0000000100)=',$/\x00', 0x85a)
r2 = io_uring_setup$auto(0x9, 0x0)
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000002300)=@query={@target_fd=r0, 0x2, 0x0, 0x6, 0x5, @count=0x6888, 0x0, 0x7, 0xc6, 0xa8, 0x1c39}, 0x9)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/99, 0x63)
mmap$auto(0x2, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x189160, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv_slave_1\x00'})
sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000)
ioctl$auto_BINDER_VERSION(r3, 0xc0046209, 0x0)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000140), 0x280080, 0x0)
r5 = gettid()
write$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffffff, &(0x7f0000000240)="d5a7", 0x2)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
tkill$auto(r5, 0x7)

2.548613695s ago: executing program 4 (id=990):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010026bd03000000df2504"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0)

2.261909079s ago: executing program 3 (id=991):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$auto(0x2, &(0x7f0000001a00), 0x80)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a19b5dde", 0x36)

1.964973317s ago: executing program 4 (id=992):
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0)
sendfile$auto(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x5)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x7)
ioctl$auto(r1, 0x10000, r1)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(r1, r1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000f8dbdf250e00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x20000810)
keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662)
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/uid_map\x00', 0x101042, 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0)
write$auto(r5, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0xfff)

1.898785179s ago: executing program 3 (id=993):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r1 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)=0x7ff)
bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_1={r1, 0x20000000c, @value=0x58, 0x3}, 0x3)
setreuid$auto(0x8, 0x9d7)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0))

1.027994456s ago: executing program 3 (id=994):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
ioctl$auto(0x3, 0x1, 0x90000800000402)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84) (async)
futex_wake$auto(0x0, 0x0, 0x3, 0x0) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, &(0x7f00000001c0)) (async)
write$auto(0x3, 0x0, 0xffd8) (async)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd3, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x300b, 0x10000}, 0x8, 0x40000000000006, 0x9, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0xdea9, 0x804}) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, 0x0, 0xa3d9) (async)
recvmmsg$auto(r2, 0x0, 0x10000, 0xac, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
epoll_create$auto(0x4) (async)
r7 = socket(0x28, 0x1, 0x1)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) (async)
r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r6)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="00ce0000", @ANYRES16=r8, @ANYBLOB="00032dbd7000fbdbdf25040000008f00180048de3b72bc4f5b080b0b7e812975fe9d72a948ab549af4fe9106388f677f8153713c99915caa4d3cc32855c700a83e6b75f716fac4597cf70c95cbec80239eaeee7a349592c47c8955a07ff5ee08cebfa7f739b27892073a423456b008835f85839e5f78062f20bb9f858e8425271ae90c7e279c57863ab4c1a436749d81379d3f44e8cd800203ef2a7cc30008000600f7ffffff"], 0xac}, 0x1, 0x0, 0x0, 0x4004053}, 0x20004004) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000440)={"9c1e20c2a8736083483f2b9f3160b44a8969cde3b7823efcefeee010a70dcbe2", 0x8000, 0xf, 0xff, 0x5, 0xb9, 0xffffffffffffffff})

110.854015ms ago: executing program 2 (id=995):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
mount_setattr$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000100)={0x7fffffff, 0x100000000b, 0x5, @inferred=<r2=>r0}, 0x1)
r3 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2c, 0x80003, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/devices/virtual/iscsi_transport/iser/caps\x00', 0x400, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
r5 = socket(0x2, 0x3, 0xa)
mlockall$auto(0xfffffffd)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r6, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r2], 0x104}}, 0x40)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(r4, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x24102, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x6, 0x0)
open(0x0, 0x22240, 0x155)
io_uring_setup$auto(0x6, 0x0)

0s ago: executing program 3 (id=996):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/device_hdr\x00', 0x10b402, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8)
r1 = socket(0x10, 0x2, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x181c00, 0x0)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x20080, 0x0)
read$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r2, 0x40045201, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x807}, 0x4, 0x8)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x60)
execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
execve$auto(0x0, &(0x7f0000000040)=&(0x7f0000000280)='\\s\x9a\xf0\xc9\t\b\x00\x00\x00\x00\x00', 0x0)

kernel console output (not intermixed with test programs):












	
	








		


	

	









		






	
	

	












	

	
		
	

	
		
	

	
		
	

	
		
	

	
		
	

	
		

	
		

	


		

		
	
		
	
	

	



			








	
	
	




	














	
	
	










	




	





		







	
	

	












	

		


			

			

			

			

			

			

			

			

			

			


	

	
				
	
	



	
		

	
		

	


	

	

		
	
		
	
	

	



			








	

	










	



	



	



	




	





	






	





	



	


	
	



	


	




	


	
	




	
	
	
	
	
	

	





	



		

		








	







	
	
	

	

	


	


		



		

		

	
	








	








	




	





		






	

	
		
	

	
		

	
				
	
	



	
		
	
	

	
	
	
	

	
	
	
	

	
	
	
	

	
	



		

		
		





















	
	


	
				



	














	
	








		




	
		
	

	










	
		

	


	
	

		
	
		
	
	

	



			








	




	





	

	

	

	
	
	
	
		
	

	






	













	

	
	
	











	







	




	




	

	










	

	

	
				
	
	



	
		
		






	
	

	












			
	

	
		

	

	
		

	
		

	


	
	

		
	
		
	
	

	



			








	


	



	



	


	

	



	


	




	


	
	




	
	
	
	
	
	

	





	



		

		








	







	
	
	

	

	


	


		



		

		

	
	








	








	





	





		








	

	
		
	

	
		
	


		
	
	
	
	
	
	
	
	

				

		
		

	
				
	
	



	
		

	
				
	
	



	
		

	
				
	
	



	
		

	
		

	


		

		
	
		
	
	

	



			








	


























	




	






		









		

		
		
	
	
	

	
		
	

	
		

	
		

	


		

		
	
		
	
	

	



			








	


























	





	






		












	
				
	
	



	
		

	
		

	


		

		
	
		
	
	

	



			








	





	
	




	














	




	





		





	
	

	



		


	


	

	
		
	

	
		
	
	

	

	
				
	
		


	



		
	

	
		
	

	
		

	
		

	


	
	

		
	
		
	
	

	



			








	

	
	


	




		

		

			



	
	

	



	

	










	

	
	
















	




	




		







	

	







	
		

	


		

		
	
		
	
	

	



			








	


























	




	






		










	

	
	

	
		







	




	
	
	


	
		

	


		

		
	
		
	
	

	



			








	


























	





	






		












	
		

	


	

	

		
	
		
	
	

	



			








	

	






	
	




	











	

	

		
	
	








	



	


	
	












	
	






	













	
		




	



















	




	





		








		
			
	

	
		

	


	
	

		
	
		
	
	

	



			








	







	









				

	

		

	








	

	





	

	

	


	

	






	





	





		









	
				
	
	



	
		

	
				
	
	



	
		

	
		

	


	
	

		
	
		
	
	

	



			








	





	





	
	


	
	


	

	


	





	




	



	


	
	

	









	










	





	

	

	

	













	

	

	


















	




	





		







	
	

	
	
	

	

			

	


	


	
		

	
	
				


	

		


		


	


	
	

	

	
		

	


		

		
	
		
	
	

	



			








	


























	




	






		









	

	
	

	
		
	

	
		

	
				
	
	



	
		

	
		

	


		

		
	
		
	
	

	



			








	

	


	


	

	



	






	

	
	











	


	




	
	






	

	
	

	
		
	

	
		

	
		

	


		

		
	
		
	
	

	



			








	


























	




	





		







	

	

	
				
	
	



	
		

	
				
	
	



	
		

	


	

	
		
	

	
		
		



	
	

	
		
	

	
		
	

	
		

	


	


	
		

	


	
	

		
	
		
	
	

	



			








	





	





	






	



	

	


	


	
	



	





	







	





	




	

		

		
	


	


		
		
	
	





	
	

	
	
	
	
	
	
		
	
	
	






	




	





		








	

	

	
				
	
	



	
		



	

	

	

	
	
	
	

	




	

	

								


	

	
		
	

	
		
	
	
	
	
	
	
	
								
[  325.274302][ T9148] netlink: 504 bytes leftover after parsing attributes in process `syz.2.673'.
[  325.282052][ T9148] netlink: 504 bytes leftover after parsing attributes in process `syz.2.673'.
[  326.035454][ T9160] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  326.035454][ T9160] The task syz.1.677 (9160) triggered the difference, watch for misbehavior.
[  327.014909][ T9175] ima: policy update failed
[  327.015938][   T30] audit: type=1802 audit(6043354619.296:44): pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.681" res=0 errno=0
[  327.096278][   T30] audit: type=1800 audit(6043354619.376:45): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="dbroot" dev="configfs" ino=25040 res=0 errno=0
[  327.421293][ T9179] netlink: 25 bytes leftover after parsing attributes in process `syz.1.681'.
[  328.400313][ T9190] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  328.401651][ T9190] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  328.411487][ T9190] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  328.412761][ T9190] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  328.518232][ T9190] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  328.519280][ T9190] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  328.528193][ T9190] CPU0 is offline.
[  328.955214][ T5833] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18
[  328.978264][   T30] audit: type=1800 audit(6043354629.259:46): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.689" name="dbroot" dev="configfs" ino=25147 res=0 errno=0
[  329.327421][   T30] audit: type=1800 audit(6043354629.609:47): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.680" name="dbroot" dev="configfs" ino=25176 res=0 errno=0
[  330.026066][   T30] audit: type=1800 audit(6043354630.299:48): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.692" name="dbroot" dev="configfs" ino=25263 res=0 errno=0
[  330.072238][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  330.472575][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout
[  330.478972][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  330.552244][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  330.888366][ T9256] netlink: 'syz.3.697': attribute type 3 has an invalid length.
[  331.008499][ T9262] FAULT_INJECTION: forcing a failure.
[  331.008499][ T9262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.060702][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.1.698 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  331.060736][ T9262] Tainted: [U]=USER
[  331.060742][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.060753][ T9262] Call Trace:
[  331.060759][ T9262]  <TASK>
[  331.060766][ T9262]  dump_stack_lvl+0x16c/0x1f0
[  331.060796][ T9262]  should_fail_ex+0x512/0x640
[  331.060819][ T9262]  _copy_from_iter+0x29f/0x16f0
[  331.060845][ T9262]  ? __pfx__copy_from_iter+0x10/0x10
[  331.060875][ T9262]  file_tty_write.constprop.0+0x486/0x9b0
[  331.060901][ T9262]  redirected_tty_write+0xd4/0x150
[  331.060919][ T9262]  vfs_write+0x6c4/0x1150
[  331.060938][ T9262]  ? __pfx_redirected_tty_write+0x10/0x10
[  331.060958][ T9262]  ? __pfx_vfs_write+0x10/0x10
[  331.060973][ T9262]  ? find_held_lock+0x2b/0x80
[  331.061021][ T9262]  ksys_write+0x12a/0x250
[  331.061038][ T9262]  ? __pfx_ksys_write+0x10/0x10
[  331.061062][ T9262]  do_syscall_64+0xcd/0x230
[  331.061094][ T9262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.061112][ T9262] RIP: 0033:0x7f0584f8e969
[  331.061127][ T9262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.061145][ T9262] RSP: 002b:00007f0585ec4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  331.061163][ T9262] RAX: ffffffffffffffda RBX: 00007f05851b5fa0 RCX: 00007f0584f8e969
[  331.061174][ T9262] RDX: 0000000000000036 RSI: 0000200000000440 RDI: 0000000000000003
[  331.061185][ T9262] RBP: 00007f0585ec4090 R08: 0000000000000000 R09: 0000000000000000
[  331.061196][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.061206][ T9262] R13: 0000000000000000 R14: 00007f05851b5fa0 R15: 00007ffc1bc02358
[  331.061228][ T9262]  </TASK>
[  331.405276][ T9267] netlink: zone id is out of range
[  331.410574][ T9267] netlink: zone id is out of range
[  331.418053][ T9267] netlink: zone id is out of range
[  331.423562][ T9267] netlink: zone id is out of range
[  331.428799][ T9267] netlink: zone id is out of range
[  331.444665][ T9267] netlink: zone id is out of range
[  331.449890][ T9267] netlink: zone id is out of range
[  331.460487][ T9267] netlink: zone id is out of range
[  331.467475][ T9267] netlink: zone id is out of range
[  331.553693][ T9267] netlink: zone id is out of range
[  331.990848][   T30] audit: type=1800 audit(6043354632.269:49): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.703" name="dbroot" dev="configfs" ino=25457 res=0 errno=0
[  332.093169][ T9271] FAULT_INJECTION: forcing a failure.
[  332.093169][ T9271] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  332.272296][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.3.701 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  332.272329][ T9271] Tainted: [U]=USER
[  332.272336][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  332.272346][ T9271] Call Trace:
[  332.272353][ T9271]  <TASK>
[  332.272360][ T9271]  dump_stack_lvl+0x16c/0x1f0
[  332.272392][ T9271]  should_fail_ex+0x512/0x640
[  332.272415][ T9271]  should_fail_alloc_page+0xe7/0x130
[  332.272440][ T9271]  prepare_alloc_pages+0x3c2/0x610
[  332.272472][ T9271]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  332.272498][ T9271]  ? find_held_lock+0x2b/0x80
[  332.272525][ T9271]  ? is_bpf_text_address+0x8a/0x1a0
[  332.272546][ T9271]  ? bpf_ksym_find+0x124/0x1c0
[  332.272574][ T9271]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  332.272598][ T9271]  ? __lock_acquire+0x622/0x1c90
[  332.272627][ T9271]  ? __lock_acquire+0x622/0x1c90
[  332.272645][ T9271]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  332.272670][ T9271]  ? policy_nodemask+0xea/0x4e0
[  332.272694][ T9271]  alloc_pages_mpol+0x1fb/0x550
[  332.272717][ T9271]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  332.272745][ T9271]  folio_alloc_mpol_noprof+0x36/0x2f0
[  332.272773][ T9271]  vma_alloc_folio_noprof+0xed/0x1e0
[  332.272821][ T9271]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  332.272847][ T9271]  ? find_held_lock+0x2b/0x80
[  332.272874][ T9271]  ? __handle_mm_fault+0x1092/0x5450
[  332.272895][ T9271]  __handle_mm_fault+0x2fac/0x5450
[  332.272943][ T9271]  ? __pfx___handle_mm_fault+0x10/0x10
[  332.272975][ T9271]  ? find_vma+0xbf/0x140
[  332.272999][ T9271]  ? __pfx_find_vma+0x10/0x10
[  332.273022][ T9271]  ? string+0x2c4/0x4f0
[  332.273046][ T9271]  handle_mm_fault+0x3fe/0xad0
[  332.273068][ T9271]  do_user_addr_fault+0x7a6/0x1370
[  332.273094][ T9271]  ? rcu_is_watching+0x12/0xc0
[  332.273127][ T9271]  exc_page_fault+0x5c/0xb0
[  332.273152][ T9271]  asm_exc_page_fault+0x26/0x30
[  332.273170][ T9271] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  332.273191][ T9271] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  332.273209][ T9271] RSP: 0018:ffffc90003fdf9b0 EFLAGS: 00050202
[  332.273224][ T9271] RAX: 0000000000000001 RBX: 0000000000000fa4 RCX: 0000000000000118
[  332.273236][ T9271] RDX: ffffed1002624df5 RSI: ffff888013126e8c RDI: 0000200000001000
[  332.273248][ T9271] RBP: 0000000000000fa4 R08: 0000000000000000 R09: ffffed1002624df4
[  332.273260][ T9271] R10: ffff888013126fa3 R11: 0000000000000000 R12: 0000000000000134
[  332.273271][ T9271] R13: ffffc90003fdfbc8 R14: ffff888013126000 R15: 0000200000000174
[  332.273296][ T9271]  _copy_to_iter+0x4eb/0x16f0
[  332.273324][ T9271]  ? __pfx__copy_to_iter+0x10/0x10
[  332.273344][ T9271]  ? seq_putc+0x62/0xf0
[  332.273367][ T9271]  ? slab_show+0xce/0x160
[  332.273401][ T9271]  seq_read_iter+0xcf8/0x12c0
[  332.273437][ T9271]  seq_read+0x39e/0x4e0
[  332.273464][ T9271]  ? __pfx_seq_read+0x10/0x10
[  332.273504][ T9271]  ? __pfx_seq_read+0x10/0x10
[  332.273531][ T9271]  proc_reg_read+0x120/0x330
[  332.273552][ T9271]  ? __pfx_proc_reg_read+0x10/0x10
[  332.273572][ T9271]  vfs_read+0x1e1/0xc60
[  332.273594][ T9271]  ? __pfx_vfs_read+0x10/0x10
[  332.273609][ T9271]  ? find_held_lock+0x2b/0x80
[  332.273635][ T9271]  ? __fget_files+0x204/0x3c0
[  332.273656][ T9271]  ? __fget_files+0x20e/0x3c0
[  332.273679][ T9271]  __x64_sys_pread64+0x1eb/0x250
[  332.273699][ T9271]  ? __pfx___x64_sys_pread64+0x10/0x10
[  332.273725][ T9271]  do_syscall_64+0xcd/0x230
[  332.273753][ T9271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.273770][ T9271] RIP: 0033:0x7fe6b5b8e969
[  332.273785][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.273802][ T9271] RSP: 002b:00007fe6b6a14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  332.273818][ T9271] RAX: ffffffffffffffda RBX: 00007fe6b5db5fa0 RCX: 00007fe6b5b8e969
[  332.273829][ T9271] RDX: 0000000000007fff RSI: 0000200000000040 RDI: 0000000000000006
[  332.273840][ T9271] RBP: 00007fe6b5c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  332.273850][ T9271] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  332.273861][ T9271] R13: 0000000000000000 R14: 00007fe6b5db5fa0 R15: 00007fffd22a0608
[  332.273884][ T9271]  </TASK>
[  333.422226][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  333.428495][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  333.450052][   T30] audit: type=1800 audit(6043354633.639:50): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="dbroot" dev="configfs" ino=25492 res=0 errno=0
[  333.902320][ T9300] netlink: 504 bytes leftover after parsing attributes in process `syz.2.707'.
[  333.933558][ T9300] netlink: 504 bytes leftover after parsing attributes in process `syz.2.707'.
[  334.067143][ T9301] Invalid ELF header magic: != ELF
[  334.078460][ T9304] netlink: 146 bytes leftover after parsing attributes in process `syz.0.708'.
[  335.813045][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 122 > 18
[  337.189835][   T30] audit: type=1800 audit(6043354637.469:51): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.716" name="dbroot" dev="configfs" ino=25837 res=0 errno=0
[  339.490257][ T9391] random: crng reseeded on system resumption
[  339.770115][ T5833] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5
[  340.247973][ T9403] netlink: 504 bytes leftover after parsing attributes in process `syz.2.731'.
[  340.301053][ T9403] netlink: 504 bytes leftover after parsing attributes in process `syz.2.731'.
[  340.610776][ T9410] netlink: 342 bytes leftover after parsing attributes in process `syz.2.733'.
[  341.043944][ T9414] i2c i2c-0: new_device: Missing parameters
[  342.772572][ T9449] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.813373][ T9463] netlink: 504 bytes leftover after parsing attributes in process `syz.2.742'.
[  343.858155][ T9463] netlink: 504 bytes leftover after parsing attributes in process `syz.2.742'.
[  344.157796][ T9469] FAULT_INJECTION: forcing a failure.
[  344.157796][ T9469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.219732][ T9469] CPU: 1 UID: 0 PID: 9469 Comm: syz.2.744 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  344.219764][ T9469] Tainted: [U]=USER
[  344.219770][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.219781][ T9469] Call Trace:
[  344.219786][ T9469]  <TASK>
[  344.219793][ T9469]  dump_stack_lvl+0x16c/0x1f0
[  344.219824][ T9469]  should_fail_ex+0x512/0x640
[  344.219847][ T9469]  _copy_from_user+0x2e/0xd0
[  344.219868][ T9469]  copy_msghdr_from_user+0x98/0x160
[  344.219890][ T9469]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  344.219925][ T9469]  ? __pfx__kstrtoull+0x10/0x10
[  344.219955][ T9469]  ___sys_sendmsg+0xfe/0x1d0
[  344.219977][ T9469]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.220007][ T9469]  ? find_held_lock+0x2b/0x80
[  344.220047][ T9469]  __sys_sendmmsg+0x200/0x420
[  344.220070][ T9469]  ? __pfx___sys_sendmmsg+0x10/0x10
[  344.220099][ T9469]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  344.220134][ T9469]  ? fput+0x70/0xf0
[  344.220155][ T9469]  ? ksys_write+0x1ac/0x250
[  344.220172][ T9469]  ? __pfx_ksys_write+0x10/0x10
[  344.220193][ T9469]  __x64_sys_sendmmsg+0x9c/0x100
[  344.220214][ T9469]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.220238][ T9469]  do_syscall_64+0xcd/0x230
[  344.220266][ T9469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.220285][ T9469] RIP: 0033:0x7f629858e969
[  344.220299][ T9469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.220317][ T9469] RSP: 002b:00007f62963f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  344.220334][ T9469] RAX: ffffffffffffffda RBX: 00007f62987b5fa0 RCX: 00007f629858e969
[  344.220346][ T9469] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003
[  344.220357][ T9469] RBP: 00007f62963f6090 R08: 0000000000000000 R09: 0000000000000000
[  344.220368][ T9469] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001
[  344.220378][ T9469] R13: 0000000000000000 R14: 00007f62987b5fa0 R15: 00007ffcbff611e8
[  344.220400][ T9469]  </TASK>
[  344.428280][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.501592][ T9500] FAULT_INJECTION: forcing a failure.
[  346.501592][ T9500] name failslab, interval 1, probability 0, space 0, times 0
[  346.580407][ T9503] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  346.618525][ T9500] CPU: 1 UID: 0 PID: 9500 Comm: syz.3.750 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  346.618558][ T9500] Tainted: [U]=USER
[  346.618565][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  346.618576][ T9500] Call Trace:
[  346.618583][ T9500]  <TASK>
[  346.618590][ T9500]  dump_stack_lvl+0x16c/0x1f0
[  346.618621][ T9500]  should_fail_ex+0x512/0x640
[  346.618640][ T9500]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  346.618665][ T9500]  should_failslab+0xc2/0x120
[  346.618687][ T9500]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  346.618708][ T9500]  ? __alloc_skb+0x2b2/0x380
[  346.618731][ T9500]  __alloc_skb+0x2b2/0x380
[  346.618750][ T9500]  ? __pfx___alloc_skb+0x10/0x10
[  346.618770][ T9500]  ? kasan_quarantine_put+0x10a/0x240
[  346.618788][ T9500]  ? lockdep_hardirqs_on+0x7c/0x110
[  346.618819][ T9500]  inet6_netconf_notify_devconf+0x87/0x180
[  346.618842][ T9500]  addrconf_sysctl_unregister+0x134/0x1c0
[  346.618865][ T9500]  addrconf_ifdown.isra.0+0x1487/0x1a90
[  346.618894][ T9500]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  346.618925][ T9500]  addrconf_notify+0x220/0x19e0
[  346.618949][ T9500]  ? ip6mr_device_event+0x1bc/0x230
[  346.618978][ T9500]  notifier_call_chain+0xb9/0x410
[  346.618996][ T9500]  ? __pfx_addrconf_notify+0x10/0x10
[  346.619024][ T9500]  call_netdevice_notifiers_info+0xbe/0x140
[  346.619052][ T9500]  unregister_netdevice_many_notify+0xf9a/0x26f0
[  346.619085][ T9500]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  346.619108][ T9500]  ? mark_held_locks+0x49/0x80
[  346.619127][ T9500]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  346.619151][ T9500]  ? lockdep_hardirqs_on+0x7c/0x110
[  346.619180][ T9500]  ? ppp_release+0x167/0x230
[  346.619203][ T9500]  ? __pfx___mutex_lock+0x10/0x10
[  346.619243][ T9500]  unregister_netdevice_queue+0x305/0x3f0
[  346.619268][ T9500]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  346.619293][ T9500]  ? __pfx_locks_remove_file+0x10/0x10
[  346.619322][ T9500]  ? __pfx_ppp_release+0x10/0x10
[  346.619341][ T9500]  ppp_release+0x209/0x230
[  346.619362][ T9500]  __fput+0x402/0xb70
[  346.619390][ T9500]  task_work_run+0x14d/0x240
[  346.619415][ T9500]  ? __pfx_task_work_run+0x10/0x10
[  346.619441][ T9500]  ? __pfx___do_sys_close_range+0x10/0x10
[  346.619464][ T9500]  syscall_exit_to_user_mode+0x25f/0x290
[  346.619491][ T9500]  do_syscall_64+0xda/0x230
[  346.619519][ T9500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.619537][ T9500] RIP: 0033:0x7fe6b5b8e969
[  346.619557][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.619575][ T9500] RSP: 002b:00007fe6b69f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  346.619594][ T9500] RAX: 0000000000000000 RBX: 00007fe6b5db6080 RCX: 00007fe6b5b8e969
[  346.619605][ T9500] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  346.619616][ T9500] RBP: 00007fe6b5c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  346.619627][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.619637][ T9500] R13: 0000000000000000 R14: 00007fe6b5db6080 R15: 00007fffd22a0608
[  346.619660][ T9500]  </TASK>
[  346.936915][    C1] vkms_vblank_simulate: vblank timer overrun
[  347.072918][ T9503] PCI: Can't parse resource_alignment parameter: B¿F
[  347.697195][ T9515] FAULT_INJECTION: forcing a failure.
[  347.697195][ T9515] name failslab, interval 1, probability 0, space 0, times 0
[  347.730783][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.0.755 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  347.730818][ T9515] Tainted: [U]=USER
[  347.730825][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  347.730836][ T9515] Call Trace:
[  347.730842][ T9515]  <TASK>
[  347.730850][ T9515]  dump_stack_lvl+0x16c/0x1f0
[  347.730915][ T9515]  should_fail_ex+0x512/0x640
[  347.730935][ T9515]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  347.730959][ T9515]  should_failslab+0xc2/0x120
[  347.730983][ T9515]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  347.731002][ T9515]  ? __pfx_map_id_range_down+0x10/0x10
[  347.731025][ T9515]  ? __x64_sys_futex+0x1e0/0x4c0
[  347.731044][ T9515]  ? __x64_sys_futex+0x1e9/0x4c0
[  347.731065][ T9515]  ? prepare_creds+0x2c/0x7d0
[  347.731091][ T9515]  prepare_creds+0x2c/0x7d0
[  347.731114][ T9515]  __sys_setreuid+0x101/0xaf0
[  347.731146][ T9515]  do_syscall_64+0xcd/0x230
[  347.731174][ T9515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.731194][ T9515] RIP: 0033:0x7f1d20f8e969
[  347.731209][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.731227][ T9515] RSP: 002b:00007f1d21db0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[  347.731252][ T9515] RAX: ffffffffffffffda RBX: 00007f1d211b6160 RCX: 00007f1d20f8e969
[  347.731265][ T9515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  347.731278][ T9515] RBP: 00007f1d21010ab1 R08: 0000000000000000 R09: 0000000000000000
[  347.731291][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  347.731302][ T9515] R13: 0000000000000000 R14: 00007f1d211b6160 R15: 00007ffec2cc4588
[  347.731325][ T9515]  </TASK>
[  347.908194][    C1] vkms_vblank_simulate: vblank timer overrun
[  348.607247][ T9518] netlink: 504 bytes leftover after parsing attributes in process `syz.1.753'.
[  348.677565][ T9519] netlink: 504 bytes leftover after parsing attributes in process `syz.1.753'.
[  349.258170][ T9526] tipc: Started in network mode
[  349.285791][ T9526] tipc: Node identity 37373130, cluster identity 4711
[  349.316932][ T9526] tipc: Node number set to 926363952
[  349.774973][   T30] audit: type=1800 audit(6043354656.062:52): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.762" name="dbroot" dev="configfs" ino=26960 res=0 errno=0
[  349.795099][    C1] vkms_vblank_simulate: vblank timer overrun
[  350.492938][ T9561] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  350.972809][ T9563] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f5c0114f pfn:0x78000
[  351.194212][ T9563] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[  351.301153][ T9567] netlink: 504 bytes leftover after parsing attributes in process `syz.2.766'.
[  351.416397][ T9568] netlink: 504 bytes leftover after parsing attributes in process `syz.2.766'.
[  351.470152][ T9563] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[  351.629603][ T9563] raw: 00000007f5c0114f 0000000000000000 0000000400000002 0000000000000000
[  351.780062][ T9563] page dumped because: unmovable page
[  351.889851][ T9563] page_owner tracks the page as allocated
[  351.984548][ T9563] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5823, tgid 5823 (syz-executor), ts 93057678300, free_ts 92812537954
[  352.405385][ T9563]  post_alloc_hook+0x1c0/0x230
[  352.482000][ T9563]  get_page_from_freelist+0x135c/0x3950
[  352.539465][   T30] audit: type=1800 audit(6043354658.822:53): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.772" name="dbroot" dev="configfs" ino=27192 res=0 errno=0
[  352.657917][ T9563]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  352.700760][ T9563]  alloc_pages_mpol+0x1fb/0x550
[  352.832461][ T9563]  alloc_pages_noprof+0x131/0x390
[  352.945294][ T9563]  __vmalloc_node_range_noprof+0x732/0x1520
[  352.951376][ T9563]  vmalloc_user_noprof+0x9e/0xe0
[  353.067544][ T9563]  kcov_ioctl+0x4c/0x730
[  353.114633][ T9563]  __x64_sys_ioctl+0x18b/0x210
[  353.173241][ T9563]  do_syscall_64+0xcd/0x230
[  353.193140][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.243443][ T9563] page last free pid 5817 tgid 5817 stack trace:
[  353.303956][ T9563]  free_unref_folios+0xa5f/0x17f0
[  353.356116][ T9563]  folios_put_refs+0x56f/0x740
[  353.361069][ T9563]  free_pages_and_swap_cache+0x245/0x4a0
[  353.418000][ T9563]  __tlb_batch_free_encoded_pages+0xf9/0x290
[  353.452331][ T9563]  tlb_finish_mmu+0x168/0x7c0
[  353.492200][ T9563]  vms_clear_ptes+0x55e/0x770
[  353.496953][ T9563]  vms_complete_munmap_vmas+0x1ca/0x970
[  353.574194][ T9563]  do_vmi_align_munmap+0x43b/0x7d0
[  353.621510][ T9563]  do_vmi_munmap+0x204/0x3e0
[  353.644971][ T9563]  __vm_munmap+0x19a/0x390
[  353.649550][ T9563]  __x64_sys_munmap+0x59/0x80
[  353.715091][ T9563]  do_syscall_64+0xcd/0x230
[  353.719761][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.384003][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'.
[  354.598710][ T9618] Setting dangerous option i915.mitigations - tainting kernel
[  354.670478][ T9617] netlink: 504 bytes leftover after parsing attributes in process `syz.1.777'.
[  354.799273][ T9620] netlink: 504 bytes leftover after parsing attributes in process `syz.1.777'.
[  357.424353][ T9657] netlink: 504 bytes leftover after parsing attributes in process `syz.2.788'.
[  357.505912][ T9657] netlink: 504 bytes leftover after parsing attributes in process `syz.2.788'.
[  358.465207][ T9664] netlink: 330 bytes leftover after parsing attributes in process `syz.0.790'.
[  358.961213][   T30] audit: type=1800 audit(6043354665.242:54): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.789" name="dbroot" dev="configfs" ino=27606 res=0 errno=0
[  359.138048][ T9668] Invalid ELF header magic: != ELF
[  359.199395][ T9672] netlink: 326 bytes leftover after parsing attributes in process `syz.0.791'.
[  361.151251][ T9713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.050323][   T30] audit: type=1800 audit(6043354668.332:55): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.802" name="dbroot" dev="configfs" ino=27954 res=0 errno=0
[  362.618230][   T30] audit: type=1800 audit(6043354668.902:56): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.803" name="dbroot" dev="configfs" ino=27980 res=0 errno=0
[  363.950482][ T9758] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  364.010412][ T9758] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.072746][ T9758] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  364.371366][ T9758] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  364.442755][ T9758] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.495685][   T30] audit: type=1800 audit(6043354670.772:57): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="dbroot" dev="configfs" ino=28154 res=0 errno=0
[  364.527695][ T9758] CPU0 is offline.
[  365.002034][ T9786] futex_wake_op: syz.2.818 tries to shift op by 64; fix this program
[  365.692842][ T9798] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  365.706943][   T30] audit: type=1800 audit(6043354671.992:58): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.817" name="dbroot" dev="configfs" ino=28210 res=0 errno=0
[  365.992945][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  366.072330][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  366.249881][ T9799] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  366.393388][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  366.472198][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  366.808649][ T9819] netlink: 504 bytes leftover after parsing attributes in process `syz.1.824'.
[  366.854293][ T9819] netlink: 504 bytes leftover after parsing attributes in process `syz.1.824'.
[  366.885290][   T30] audit: type=1800 audit(6043354673.152:59): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.825" name="discovery_nqn" dev="configfs" ino=28331 res=0 errno=0
[  368.152491][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  372.648706][ T9878] random: crng reseeded on system resumption
[  374.135548][ T9921] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  374.872346][ T9922] random: crng reseeded on system resumption
[  375.405814][ T9913] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  379.338573][ T9956] netlink: 'syz.0.851': attribute type 16 has an invalid length.
[  379.509292][ T9956] netlink: 194 bytes leftover after parsing attributes in process `syz.0.851'.
[  380.615660][ T9979] netlink: 504 bytes leftover after parsing attributes in process `syz.0.859'.
[  380.668846][ T9984] netlink: 504 bytes leftover after parsing attributes in process `syz.0.859'.
[  380.974603][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  381.762512][ T8131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.957729][ T8131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.193360][ T8131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.357183][ T9998] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  382.494359][ T9998] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  382.611008][ T8131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.642289][ T9998] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  383.120900][T10014] netlink: 338 bytes leftover after parsing attributes in process `syz.2.868'.
[  383.907468][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.922439][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.932228][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.940142][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.950280][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  384.239961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  384.248224][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  385.090499][ T8131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.176062][ T8131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.226991][ T8131] bond0 (unregistering): Released all slaves
[  385.992784][ T5833] Bluetooth: hci2: command tx timeout
[  387.819689][ T8131] hsr_slave_0: left promiscuous mode
[  387.856347][ T8131] hsr_slave_1: left promiscuous mode
[  387.882744][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.905198][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.944102][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.978228][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.029350][ T8131] veth1_macvtap: left promiscuous mode
[  388.047431][ T8131] veth0_macvtap: left promiscuous mode
[  388.062964][ T8131] veth1_vlan: left promiscuous mode
[  388.072597][ T5833] Bluetooth: hci2: command tx timeout
[  388.080184][ T8131] veth0_vlan: left promiscuous mode
[  388.667481][ T8131] team0 (unregistering): Port device team_slave_1 removed
[  388.711051][ T8131] team0 (unregistering): Port device team_slave_0 removed
[  389.139777][T10025] chnl_net:caif_netlink_parms(): no params data found
[  389.702467][T10025] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.709711][T10025] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.772969][T10025] bridge_slave_0: entered allmulticast mode
[  389.803025][T10025] bridge_slave_0: entered promiscuous mode
[  389.852004][T10025] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.904325][T10025] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.956803][T10025] bridge_slave_1: entered allmulticast mode
[  390.001481][T10025] bridge_slave_1: entered promiscuous mode
[  390.158625][ T5833] Bluetooth: hci2: command tx timeout
[  390.247139][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.304707][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.580972][T10025] team0: Port device team_slave_0 added
[  390.704256][T10025] team0: Port device team_slave_1 added
[  390.956982][T10108] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  391.007416][T10108] netlink: 322 bytes leftover after parsing attributes in process `syz.1.877'.
[  391.070511][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.115153][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.265126][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.369600][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.424204][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.543644][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.799459][T10025] hsr_slave_0: entered promiscuous mode
[  391.865404][T10025] hsr_slave_1: entered promiscuous mode
[  391.927513][T10025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  391.973721][T10025] Cannot create hsr debugfs directory
[  392.034789][T10129] can: request_module (can-proto-3) failed.
[  392.234162][ T5833] Bluetooth: hci2: command tx timeout
[  393.003069][T10025] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  393.081307][T10025] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  393.122878][   T30] audit: type=1800 audit(6043354699.412:60): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.883" name="dbroot" dev="configfs" ino=30289 res=0 errno=0
[  393.191807][T10025] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  393.258157][T10025] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  393.486993][T10159] netlink: 504 bytes leftover after parsing attributes in process `syz.3.885'.
[  393.545344][T10162] netlink: 504 bytes leftover after parsing attributes in process `syz.3.885'.
[  393.647464][T10025] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.749893][T10025] 8021q: adding VLAN 0 to HW filter on device team0
[  393.916664][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.923978][ T8131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.009805][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.018118][ T8131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.819577][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.496451][   T30] audit: type=1800 audit(6043354702.782:61): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.892" name="dbroot" dev="configfs" ino=30569 res=0 errno=0
[  396.519093][    C1] vkms_vblank_simulate: vblank timer overrun
[  397.108714][T10025] veth0_vlan: entered promiscuous mode
[  397.173799][T10025] veth1_vlan: entered promiscuous mode
[  397.362420][T10025] veth0_macvtap: entered promiscuous mode
[  397.420924][T10025] veth1_macvtap: entered promiscuous mode
[  397.528959][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.616625][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.716985][T10025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.770409][T10025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.820166][T10025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.881685][T10025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.334595][ T7302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.396294][ T7302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.530767][ T8132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.588884][ T8132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.920359][   T30] audit: type=1800 audit(6043354706.202:62): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.898" name="dbroot" dev="configfs" ino=31163 res=0 errno=0
[  402.039116][T10313] tipc: Can't bind to reserved service type 1
[  402.605432][T10318] ubi: mtd0 is already attached to ubi0
[  403.692817][T10327] netlink: 330 bytes leftover after parsing attributes in process `syz.3.907'.
[  403.944879][T10346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  406.569122][T10381] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  407.471930][T10404] can: request_module (can-proto-3) failed.
[  408.215207][T10419] FAULT_INJECTION: forcing a failure.
[  408.215207][T10419] name failslab, interval 1, probability 0, space 0, times 0
[  408.279598][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.1.923 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  408.279631][T10419] Tainted: [U]=USER
[  408.279637][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.279647][T10419] Call Trace:
[  408.279653][T10419]  <TASK>
[  408.279661][T10419]  dump_stack_lvl+0x16c/0x1f0
[  408.279691][T10419]  should_fail_ex+0x512/0x640
[  408.279710][T10419]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  408.279741][T10419]  should_failslab+0xc2/0x120
[  408.279764][T10419]  __kmalloc_cache_noprof+0x6a/0x3e0
[  408.279792][T10419]  ? __lock_acquire+0xb8a/0x1c90
[  408.279823][T10419]  ? snd_timer_instance_new+0x47/0x2e0
[  408.279852][T10419]  snd_timer_instance_new+0x47/0x2e0
[  408.279876][T10419]  snd_seq_timer_open+0x1cc/0x5e0
[  408.279898][T10419]  ? __pfx_snd_seq_timer_open+0x10/0x10
[  408.279919][T10419]  ? find_held_lock+0x2b/0x80
[  408.279948][T10419]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  408.279972][T10419]  ? lockdep_hardirqs_on+0x7c/0x110
[  408.279996][T10419]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  408.280022][T10419]  queue_use+0xe3/0x250
[  408.280049][T10419]  snd_seq_queue_alloc+0x2e5/0x550
[  408.280080][T10419]  snd_seq_ioctl_create_queue+0xa9/0x380
[  408.280104][T10419]  snd_seq_kernel_client_ctl+0x107/0x1c0
[  408.280132][T10419]  alloc_seq_queue+0xda/0x180
[  408.280156][T10419]  ? __pfx_alloc_seq_queue+0x10/0x10
[  408.280193][T10419]  ? mark_held_locks+0x49/0x80
[  408.280211][T10419]  ? _raw_spin_unlock_irq+0x23/0x50
[  408.280235][T10419]  snd_seq_oss_open+0x38c/0xa20
[  408.280264][T10419]  odev_open+0x6f/0x90
[  408.280285][T10419]  ? __pfx_odev_open+0x10/0x10
[  408.280306][T10419]  soundcore_open+0x40c/0x580
[  408.280330][T10419]  ? __pfx_soundcore_open+0x10/0x10
[  408.280352][T10419]  chrdev_open+0x231/0x6a0
[  408.280371][T10419]  ? __pfx_apparmor_file_open+0x10/0x10
[  408.280398][T10419]  ? __pfx_chrdev_open+0x10/0x10
[  408.280422][T10419]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  408.280455][T10419]  do_dentry_open+0x741/0x1c10
[  408.280474][T10419]  ? __pfx_chrdev_open+0x10/0x10
[  408.280498][T10419]  vfs_open+0x82/0x3f0
[  408.280524][T10419]  path_openat+0x1de4/0x2cb0
[  408.280550][T10419]  ? __pfx_path_openat+0x10/0x10
[  408.280569][T10419]  ? __lock_acquire+0xb8a/0x1c90
[  408.280590][T10419]  do_filp_open+0x20b/0x470
[  408.280609][T10419]  ? __pfx_do_filp_open+0x10/0x10
[  408.280642][T10419]  ? alloc_fd+0x471/0x7d0
[  408.280676][T10419]  do_sys_openat2+0x11b/0x1d0
[  408.280699][T10419]  ? __pfx_do_sys_openat2+0x10/0x10
[  408.280732][T10419]  __x64_sys_openat+0x174/0x210
[  408.280756][T10419]  ? __pfx___x64_sys_openat+0x10/0x10
[  408.280790][T10419]  do_syscall_64+0xcd/0x230
[  408.280824][T10419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.280843][T10419] RIP: 0033:0x7f0584f8e969
[  408.280858][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.280877][T10419] RSP: 002b:00007f0585ec4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  408.280894][T10419] RAX: ffffffffffffffda RBX: 00007f05851b5fa0 RCX: 00007f0584f8e969
[  408.280906][T10419] RDX: 00000000001c8340 RSI: 0000200000000540 RDI: ffffffffffffff9c
[  408.280917][T10419] RBP: 00007f0585010ab1 R08: 0000000000000000 R09: 0000000000000000
[  408.280927][T10419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.280938][T10419] R13: 0000000000000000 R14: 00007f05851b5fa0 R15: 00007ffc1bc02358
[  408.280960][T10419]  </TASK>
[  409.432209][   T30] audit: type=1800 audit(6043354715.692:63): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.926" name="version" dev="configfs" ino=31700 res=0 errno=0
[  413.050727][T10460] FAULT_INJECTION: forcing a failure.
[  413.050727][T10460] name fail_futex, interval 1, probability 0, space 0, times 0
[  413.214201][T10462] FAULT_INJECTION: forcing a failure.
[  413.214201][T10462] name failslab, interval 1, probability 0, space 0, times 0
[  413.234533][T10460] CPU: 1 UID: 0 PID: 10460 Comm: syz.3.932 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  413.234567][T10460] Tainted: [U]=USER
[  413.234573][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  413.234584][T10460] Call Trace:
[  413.234592][T10460]  <TASK>
[  413.234599][T10460]  dump_stack_lvl+0x16c/0x1f0
[  413.234629][T10460]  should_fail_ex+0x512/0x640
[  413.234651][T10460]  get_futex_key+0x293/0x1540
[  413.234682][T10460]  ? __pfx_get_futex_key+0x10/0x10
[  413.234712][T10460]  ? __mutex_trylock_common+0xe9/0x250
[  413.234800][T10460]  futex_wake+0xea/0x530
[  413.234823][T10460]  ? __pfx_futex_wake+0x10/0x10
[  413.234843][T10460]  ? __lock_acquire+0xb8a/0x1c90
[  413.234871][T10460]  do_futex+0x1e3/0x350
[  413.234888][T10460]  ? __pfx_do_futex+0x10/0x10
[  413.234904][T10460]  ? __might_fault+0xe3/0x190
[  413.234929][T10460]  mm_release+0x24e/0x300
[  413.234958][T10460]  do_exit+0x901/0x2c70
[  413.234987][T10460]  ? __pfx_do_exit+0x10/0x10
[  413.235007][T10460]  ? do_raw_spin_lock+0x12c/0x2b0
[  413.235030][T10460]  ? find_held_lock+0x2b/0x80
[  413.235058][T10460]  do_group_exit+0xd3/0x2a0
[  413.235081][T10460]  get_signal+0x2673/0x26d0
[  413.235106][T10460]  ? __pfx_get_signal+0x10/0x10
[  413.235122][T10460]  ? do_futex+0x122/0x350
[  413.235139][T10460]  ? __pfx_do_futex+0x10/0x10
[  413.235158][T10460]  arch_do_signal_or_restart+0x8f/0x790
[  413.235188][T10460]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  413.235229][T10460]  syscall_exit_to_user_mode+0x13b/0x290
[  413.235258][T10460]  do_syscall_64+0xda/0x230
[  413.235284][T10460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.235303][T10460] RIP: 0033:0x7fe6b5b8e969
[  413.235319][T10460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.235337][T10460] RSP: 002b:00007fe6b69d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  413.235355][T10460] RAX: fffffffffffffe00 RBX: 00007fe6b5db6168 RCX: 00007fe6b5b8e969
[  413.235366][T10460] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6b5db6168
[  413.235377][T10460] RBP: 00007fe6b5db6160 R08: 0000000000000000 R09: 0000000000000000
[  413.235388][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6b5db616c
[  413.235399][T10460] R13: 0000000000000000 R14: 00007fffd22a0520 R15: 00007fffd22a0608
[  413.235420][T10460]  </TASK>
[  413.772154][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.4.933 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  413.772189][T10462] Tainted: [U]=USER
[  413.772195][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  413.772206][T10462] Call Trace:
[  413.772212][T10462]  <TASK>
[  413.772219][T10462]  dump_stack_lvl+0x16c/0x1f0
[  413.772257][T10462]  should_fail_ex+0x512/0x640
[  413.772276][T10462]  ? fs_reclaim_acquire+0xae/0x150
[  413.772305][T10462]  should_failslab+0xc2/0x120
[  413.772327][T10462]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  413.772350][T10462]  ? security_inode_alloc+0x3b/0x2b0
[  413.772378][T10462]  security_inode_alloc+0x3b/0x2b0
[  413.772403][T10462]  inode_init_always_gfp+0xce4/0x1030
[  413.772424][T10462]  alloc_inode+0x86/0x240
[  413.772447][T10462]  new_inode+0x22/0x1c0
[  413.772471][T10462]  proc_pid_make_inode+0x22/0x160
[  413.772492][T10462]  proc_pident_instantiate+0x85/0x320
[  413.772513][T10462]  proc_pident_lookup+0x21d/0x290
[  413.772537][T10462]  __lookup_slow+0x24e/0x460
[  413.772562][T10462]  ? __pfx___lookup_slow+0x10/0x10
[  413.772621][T10462]  ? lookup_fast+0x156/0x610
[  413.772651][T10462]  walk_component+0x353/0x5b0
[  413.772680][T10462]  link_path_walk+0x627/0xe20
[  413.772716][T10462]  path_openat+0x1b0/0x2cb0
[  413.772733][T10462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.772761][T10462]  ? __pfx_path_openat+0x10/0x10
[  413.772782][T10462]  ? __lock_acquire+0xb8a/0x1c90
[  413.772805][T10462]  do_filp_open+0x20b/0x470
[  413.772824][T10462]  ? __pfx_do_filp_open+0x10/0x10
[  413.772850][T10462]  ? __pfx_kfree_link+0x10/0x10
[  413.772881][T10462]  ? alloc_fd+0x471/0x7d0
[  413.772915][T10462]  do_sys_openat2+0x11b/0x1d0
[  413.772939][T10462]  ? __pfx_do_sys_openat2+0x10/0x10
[  413.772972][T10462]  __x64_sys_openat+0x174/0x210
[  413.772998][T10462]  ? __pfx___x64_sys_openat+0x10/0x10
[  413.773032][T10462]  ? syscall_user_dispatch+0x78/0x140
[  413.773063][T10462]  do_syscall_64+0xcd/0x230
[  413.773092][T10462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.773110][T10462] RIP: 0033:0x7f573898d2d0
[  413.773126][T10462] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  413.773146][T10462] RSP: 002b:00007f57397d1f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  413.773164][T10462] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f573898d2d0
[  413.773176][T10462] RDX: 0000000000000002 RSI: 00007f57397d1fa0 RDI: 00000000ffffff9c
[  413.773188][T10462] RBP: 00007f57397d1fa0 R08: 0000000000000000 R09: 0000000000000000
[  413.773198][T10462] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  413.773210][T10462] R13: 0000000000000000 R14: 00007f5738bb5fa0 R15: 00007ffd7cbab718
[  413.773232][T10462]  </TASK>
[  414.301409][T10472] FAULT_INJECTION: forcing a failure.
[  414.301409][T10472] name failslab, interval 1, probability 0, space 0, times 0
[  414.314526][T10472] CPU: 1 UID: 0 PID: 10472 Comm: syz.2.934 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  414.314573][T10472] Tainted: [U]=USER
[  414.314580][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  414.314591][T10472] Call Trace:
[  414.314598][T10472]  <TASK>
[  414.314606][T10472]  dump_stack_lvl+0x16c/0x1f0
[  414.314637][T10472]  should_fail_ex+0x512/0x640
[  414.314656][T10472]  ? fs_reclaim_acquire+0xae/0x150
[  414.314687][T10472]  should_failslab+0xc2/0x120
[  414.314710][T10472]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  414.314732][T10472]  ? security_inode_alloc+0x3b/0x2b0
[  414.314758][T10472]  security_inode_alloc+0x3b/0x2b0
[  414.314815][T10472]  inode_init_always_gfp+0xce4/0x1030
[  414.314837][T10472]  alloc_inode+0x86/0x240
[  414.314860][T10472]  new_inode+0x22/0x1c0
[  414.314885][T10472]  proc_pid_make_inode+0x22/0x160
[  414.314905][T10472]  proc_pident_instantiate+0x85/0x320
[  414.314926][T10472]  proc_pident_lookup+0x21d/0x290
[  414.314951][T10472]  __lookup_slow+0x24e/0x460
[  414.314977][T10472]  ? __pfx___lookup_slow+0x10/0x10
[  414.315016][T10472]  ? lookup_fast+0x156/0x610
[  414.315046][T10472]  walk_component+0x353/0x5b0
[  414.315076][T10472]  link_path_walk+0x627/0xe20
[  414.315110][T10472]  path_openat+0x1b0/0x2cb0
[  414.315127][T10472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.315161][T10472]  ? __pfx_path_openat+0x10/0x10
[  414.315181][T10472]  ? __lock_acquire+0xb8a/0x1c90
[  414.315205][T10472]  do_filp_open+0x20b/0x470
[  414.315224][T10472]  ? __pfx_do_filp_open+0x10/0x10
[  414.315250][T10472]  ? __pfx_kfree_link+0x10/0x10
[  414.315288][T10472]  ? alloc_fd+0x471/0x7d0
[  414.315324][T10472]  do_sys_openat2+0x11b/0x1d0
[  414.315348][T10472]  ? __pfx_do_sys_openat2+0x10/0x10
[  414.315381][T10472]  __x64_sys_openat+0x174/0x210
[  414.315406][T10472]  ? __pfx___x64_sys_openat+0x10/0x10
[  414.315432][T10472]  ? syscall_user_dispatch+0x78/0x140
[  414.315463][T10472]  do_syscall_64+0xcd/0x230
[  414.315498][T10472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.315517][T10472] RIP: 0033:0x7f629858d2d0
[  414.315534][T10472] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  414.315552][T10472] RSP: 002b:00007f62963d4f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  414.315571][T10472] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f629858d2d0
[  414.315583][T10472] RDX: 0000000000000002 RSI: 00007f62963d4fa0 RDI: 00000000ffffff9c
[  414.315595][T10472] RBP: 00007f62963d4fa0 R08: 0000000000000000 R09: 0000000000000000
[  414.315606][T10472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  414.315617][T10472] R13: 0000000000000000 R14: 00007f62987b6080 R15: 00007ffcbff611e8
[  414.315640][T10472]  </TASK>
[  415.317264][   T30] audit: type=1800 audit(6043354721.602:64): pid=10462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.933" name="dbroot" dev="configfs" ino=31938 res=0 errno=0
[  416.033014][T10491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.937'.
[  416.082640][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'.
[  416.118531][T10496] netlink: 186 bytes leftover after parsing attributes in process `syz.1.937'.
[  416.408298][T10496] netlink: 186 bytes leftover after parsing attributes in process `syz.1.937'.
[  417.192944][T10514] netlink: 504 bytes leftover after parsing attributes in process `syz.1.939'.
[  417.280792][T10521] netlink: 504 bytes leftover after parsing attributes in process `syz.1.939'.
[  417.554799][   T30] audit: type=1800 audit(6043354723.792:65): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.934" name="dbroot" dev="configfs" ino=32028 res=0 errno=0
[  417.796330][T10534] WARNING! power/level is deprecated; use power/control instead
[  419.012610][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'.
[  419.058552][T10549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.106319][T10549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.191439][T10551] ubi: mtd0 is already attached to ubi0
[  419.218571][T10549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.273130][T10549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.580153][T10569] FAULT_INJECTION: forcing a failure.
[  420.580153][T10569] name failslab, interval 1, probability 0, space 0, times 0
[  420.870308][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.3.947 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  420.870343][T10569] Tainted: [U]=USER
[  420.870349][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.870359][T10569] Call Trace:
[  420.870365][T10569]  <TASK>
[  420.870372][T10569]  dump_stack_lvl+0x16c/0x1f0
[  420.870404][T10569]  should_fail_ex+0x512/0x640
[  420.870423][T10569]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  420.870445][T10569]  should_failslab+0xc2/0x120
[  420.870467][T10569]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  420.870487][T10569]  ? security_file_alloc+0x34/0x2b0
[  420.870518][T10569]  security_file_alloc+0x34/0x2b0
[  420.870545][T10569]  init_file+0x93/0x4c0
[  420.870567][T10569]  alloc_empty_file+0x73/0x1e0
[  420.870590][T10569]  path_openat+0xda/0x2cb0
[  420.870606][T10569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.870632][T10569]  ? __pfx_path_openat+0x10/0x10
[  420.870651][T10569]  ? __lock_acquire+0xb8a/0x1c90
[  420.870674][T10569]  do_filp_open+0x20b/0x470
[  420.870692][T10569]  ? __pfx_do_filp_open+0x10/0x10
[  420.870725][T10569]  ? alloc_fd+0x471/0x7d0
[  420.870758][T10569]  do_sys_openat2+0x11b/0x1d0
[  420.870783][T10569]  ? __pfx_do_sys_openat2+0x10/0x10
[  420.870815][T10569]  __x64_sys_openat+0x174/0x210
[  420.870839][T10569]  ? __pfx___x64_sys_openat+0x10/0x10
[  420.870872][T10569]  do_syscall_64+0xcd/0x230
[  420.870900][T10569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.870917][T10569] RIP: 0033:0x7fe6b5b8d2d0
[  420.870932][T10569] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  420.870949][T10569] RSP: 002b:00007fe6b6a13fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  420.870966][T10569] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe6b5b8d2d0
[  420.870978][T10569] RDX: 0000000000000002 RSI: 00007fe6b5c10d96 RDI: 00000000ffffff9c
[  420.870989][T10569] RBP: 00007fe6b5c10d96 R08: 0000000000000000 R09: 00007fe6b6a15000
[  420.871006][T10569] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  420.871017][T10569] R13: 0000000000000000 R14: 00007fe6b5db5fa0 R15: 00007fffd22a0608
[  420.871038][T10569]  </TASK>
[  421.106709][    C1] vkms_vblank_simulate: vblank timer overrun
[  421.690824][T10585] FAULT_INJECTION: forcing a failure.
[  421.690824][T10585] name fail_futex, interval 1, probability 0, space 0, times 0
[  421.807149][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.1.949 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  421.807185][T10585] Tainted: [U]=USER
[  421.807191][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  421.807203][T10585] Call Trace:
[  421.807209][T10585]  <TASK>
[  421.807216][T10585]  dump_stack_lvl+0x16c/0x1f0
[  421.807248][T10585]  should_fail_ex+0x512/0x640
[  421.807284][T10585]  ? unwind_get_return_address+0x59/0xa0
[  421.807313][T10585]  get_futex_key+0x1d0/0x1540
[  421.807348][T10585]  ? __pfx_get_futex_key+0x10/0x10
[  421.807378][T10585]  ? stack_trace_save+0x8e/0xc0
[  421.807417][T10585]  ? __pfx_stack_trace_save+0x10/0x10
[  421.807445][T10585]  ? stack_depot_save_flags+0x28/0xa40
[  421.807468][T10585]  futex_wait_setup+0x9d/0x550
[  421.807498][T10585]  __futex_wait+0x194/0x2f0
[  421.807521][T10585]  ? __pfx___futex_wait+0x10/0x10
[  421.807547][T10585]  ? __pfx_futex_wake_mark+0x10/0x10
[  421.807582][T10585]  futex_wait+0xe8/0x380
[  421.807604][T10585]  ? __pfx_futex_wait+0x10/0x10
[  421.807641][T10585]  ? kmem_cache_free+0x2d1/0x4d0
[  421.807660][T10585]  ? fd_install+0x225/0x750
[  421.807676][T10585]  ? putname+0x154/0x1a0
[  421.807702][T10585]  do_futex+0x229/0x350
[  421.807721][T10585]  ? __pfx_do_futex+0x10/0x10
[  421.807741][T10585]  ? find_held_lock+0x2b/0x80
[  421.807773][T10585]  __x64_sys_futex+0x1e0/0x4c0
[  421.807796][T10585]  ? __x64_sys_openat+0x174/0x210
[  421.807821][T10585]  ? __pfx___x64_sys_futex+0x10/0x10
[  421.807848][T10585]  do_syscall_64+0xcd/0x230
[  421.807875][T10585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.807893][T10585] RIP: 0033:0x7f0584f8e969
[  421.807908][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.807927][T10585] RSP: 002b:00007f0585ec40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  421.807945][T10585] RAX: ffffffffffffffda RBX: 00007f05851b5fa8 RCX: 00007f0584f8e969
[  421.807957][T10585] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f05851b5fa8
[  421.807968][T10585] RBP: 00007f05851b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  421.807978][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05851b5fac
[  421.807989][T10585] R13: 0000000000000000 R14: 00007ffc1bc02270 R15: 00007ffc1bc02358
[  421.808018][T10585]  </TASK>
[  422.052058][    C1] vkms_vblank_simulate: vblank timer overrun
[  426.496404][   T30] audit: type=1800 audit(6043354732.782:66): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.958" name="dbroot" dev="configfs" ino=32847 res=0 errno=0
[  428.506300][T10686] FAULT_INJECTION: forcing a failure.
[  428.506300][T10686] name fail_futex, interval 1, probability 0, space 0, times 0
[  428.684815][T10716] netlink: 504 bytes leftover after parsing attributes in process `syz.4.965'.
[  428.761388][T10721] netlink: 504 bytes leftover after parsing attributes in process `syz.4.965'.
[  428.803144][T10686] CPU: 1 UID: 0 PID: 10686 Comm: syz.1.962 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  428.803180][T10686] Tainted: [U]=USER
[  428.803187][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  428.803198][T10686] Call Trace:
[  428.803205][T10686]  <TASK>
[  428.803212][T10686]  dump_stack_lvl+0x16c/0x1f0
[  428.803245][T10686]  should_fail_ex+0x512/0x640
[  428.803269][T10686]  get_futex_key+0x1d0/0x1540
[  428.803302][T10686]  ? __pfx_get_futex_key+0x10/0x10
[  428.803341][T10686]  futex_wake+0xea/0x530
[  428.803365][T10686]  ? __pfx_futex_wake+0x10/0x10
[  428.803385][T10686]  ? proc_reg_read+0x128/0x330
[  428.803405][T10686]  ? __pfx_proc_reg_read+0x10/0x10
[  428.803426][T10686]  ? vfs_read+0x23b/0xc60
[  428.803449][T10686]  do_futex+0x1e3/0x350
[  428.803467][T10686]  ? __pfx_do_futex+0x10/0x10
[  428.803492][T10686]  __x64_sys_futex+0x1e0/0x4c0
[  428.803512][T10686]  ? fput+0x70/0xf0
[  428.803533][T10686]  ? __pfx___x64_sys_futex+0x10/0x10
[  428.803553][T10686]  ? __pfx___x64_sys_pread64+0x10/0x10
[  428.803578][T10686]  do_syscall_64+0xcd/0x230
[  428.803607][T10686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.803627][T10686] RIP: 0033:0x7f0584f8e969
[  428.803643][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.803661][T10686] RSP: 002b:00007f0585ec40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  428.803680][T10686] RAX: ffffffffffffffda RBX: 00007f05851b5fa8 RCX: 00007f0584f8e969
[  428.803692][T10686] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05851b5fac
[  428.803716][T10686] RBP: 00007f05851b5fa0 R08: 00007f0585ec5000 R09: 0000000000000000
[  428.803728][T10686] R10: 00000000000010d8 R11: 0000000000000246 R12: 00007f05851b5fac
[  428.803740][T10686] R13: 0000000000000000 R14: 00007ffc1bc02270 R15: 00007ffc1bc02358
[  428.803764][T10686]  </TASK>
[  431.757480][T10785] FAULT_INJECTION: forcing a failure.
[  431.757480][T10785] name failslab, interval 1, probability 0, space 0, times 0
[  431.921841][T10770] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  431.985883][T10770] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  431.995877][T10770] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  432.036442][T10770] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  432.065773][T10770] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  432.073857][T10785] CPU: 1 UID: 0 PID: 10785 Comm: syz.3.971 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  432.073889][T10785] Tainted: [U]=USER
[  432.073895][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  432.073906][T10785] Call Trace:
[  432.073912][T10785]  <TASK>
[  432.073919][T10785]  dump_stack_lvl+0x16c/0x1f0
[  432.073951][T10785]  should_fail_ex+0x512/0x640
[  432.073970][T10785]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  432.073994][T10785]  should_failslab+0xc2/0x120
[  432.074017][T10785]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  432.074037][T10785]  ? security_file_alloc+0x34/0x2b0
[  432.074069][T10785]  security_file_alloc+0x34/0x2b0
[  432.074096][T10785]  init_file+0x93/0x4c0
[  432.074118][T10785]  alloc_empty_file+0x73/0x1e0
[  432.074142][T10785]  path_openat+0xda/0x2cb0
[  432.074159][T10785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.074184][T10785]  ? __pfx_path_openat+0x10/0x10
[  432.074203][T10785]  ? __lock_acquire+0xb8a/0x1c90
[  432.074227][T10785]  do_filp_open+0x20b/0x470
[  432.074245][T10785]  ? __pfx_do_filp_open+0x10/0x10
[  432.074278][T10785]  ? alloc_fd+0x471/0x7d0
[  432.074311][T10785]  do_sys_openat2+0x11b/0x1d0
[  432.074335][T10785]  ? __pfx_do_sys_openat2+0x10/0x10
[  432.074367][T10785]  __x64_sys_openat+0x174/0x210
[  432.074392][T10785]  ? __pfx___x64_sys_openat+0x10/0x10
[  432.074425][T10785]  do_syscall_64+0xcd/0x230
[  432.074453][T10785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.074472][T10785] RIP: 0033:0x7fe6b5b8e969
[  432.074490][T10785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.074508][T10785] RSP: 002b:00007fe6b69d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  432.074526][T10785] RAX: ffffffffffffffda RBX: 00007fe6b5db6160 RCX: 00007fe6b5b8e969
[  432.074538][T10785] RDX: 0000000000080c00 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  432.074549][T10785] RBP: 00007fe6b5c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  432.074560][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.074570][T10785] R13: 0000000000000000 R14: 00007fe6b5db6160 R15: 00007fffd22a0608
[  432.074591][T10785]  </TASK>
[  432.305433][    C1] vkms_vblank_simulate: vblank timer overrun
[  433.250288][T10770] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  433.455432][T10770] CPU0 is offline.
[  433.598503][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[  433.853053][T10822] netlink: 334 bytes leftover after parsing attributes in process `syz.2.978'.
[  434.077133][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  434.085195][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  434.091229][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout
[  434.347013][T10795] nbd: must specify at least one socket
[  436.152218][T10826] Bluetooth: hci2: command 0x0c1a tx timeout
[  438.232732][T10826] Bluetooth: hci2: command 0x0c1a tx timeout
[  438.468263][T10913] program syz.3.993 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.513066][T10910] FAULT_INJECTION: forcing a failure.
[  438.513066][T10910] name failslab, interval 1, probability 0, space 0, times 0
[  438.576785][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.4.992 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  438.576823][T10910] Tainted: [U]=USER
[  438.576829][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  438.576840][T10910] Call Trace:
[  438.576847][T10910]  <TASK>
[  438.576854][T10910]  dump_stack_lvl+0x16c/0x1f0
[  438.576886][T10910]  should_fail_ex+0x512/0x640
[  438.576905][T10910]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  438.576930][T10910]  should_failslab+0xc2/0x120
[  438.576964][T10910]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  438.576984][T10910]  ? __proc_create+0xc3/0x8c0
[  438.577004][T10910]  ? __proc_create+0x2ce/0x8c0
[  438.577029][T10910]  __proc_create+0x2ce/0x8c0
[  438.577051][T10910]  ? __pfx___proc_create+0x10/0x10
[  438.577076][T10910]  ? _raw_write_unlock+0x28/0x50
[  438.577100][T10910]  ? proc_register+0x314/0x5f0
[  438.577124][T10910]  proc_create_reg+0x7d/0x180
[  438.577149][T10910]  proc_create_net_data+0x8e/0x1b0
[  438.577174][T10910]  ? __pfx_proc_create_net_data+0x10/0x10
[  438.577203][T10910]  nfs_fs_proc_net_init+0x141/0x1e0
[  438.577233][T10910]  nfs_net_init+0x130/0x300
[  438.577260][T10910]  ? __pfx_nfs_net_init+0x10/0x10
[  438.577286][T10910]  ops_init+0x1e2/0x5f0
[  438.577311][T10910]  setup_net+0x21e/0x850
[  438.577336][T10910]  ? __pfx_setup_net+0x10/0x10
[  438.577356][T10910]  ? lockdep_init_map_type+0x5c/0x280
[  438.577378][T10910]  ? __pfx_down_read_killable+0x10/0x10
[  438.577397][T10910]  ? debug_mutex_init+0x37/0x70
[  438.577425][T10910]  copy_net_ns+0x2a6/0x5f0
[  438.577452][T10910]  create_new_namespaces+0x3ea/0xa90
[  438.577486][T10910]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  438.577517][T10910]  ksys_unshare+0x45b/0xa40
[  438.577541][T10910]  ? __pfx_ksys_unshare+0x10/0x10
[  438.577561][T10910]  ? xfd_validate_state+0x61/0x180
[  438.577590][T10910]  __x64_sys_unshare+0x31/0x40
[  438.577612][T10910]  do_syscall_64+0xcd/0x230
[  438.577640][T10910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.577659][T10910] RIP: 0033:0x7f573898e969
[  438.577674][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.577692][T10910] RSP: 002b:00007f57397d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  438.577709][T10910] RAX: ffffffffffffffda RBX: 00007f5738bb5fa0 RCX: 00007f573898e969
[  438.577721][T10910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  438.577732][T10910] RBP: 00007f5738a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  438.577742][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.577753][T10910] R13: 0000000000000000 R14: 00007f5738bb5fa0 R15: 00007ffd7cbab718
[  438.577775][T10910]  </TASK>
[  439.265382][T10916] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5
[  440.585528][T10910] ------------[ cut here ]------------
[  440.591336][T10910] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs'
[  440.650551][T10910] WARNING: CPU: 1 PID: 10910 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530
[  440.660612][T10910] Modules linked in:
[  440.665195][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.4.992 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  440.679463][T10910] Tainted: [U]=USER
[  440.684120][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  440.694783][T10910] RIP: 0010:remove_proc_entry+0x45e/0x530
[  440.700603][T10910] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 80 96 a2 8b 48 c7 c7 a0 95 a2 8b e8 03 81 1e ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 e7 5e ff 90 48 b8 00 00 00 00 00
[  440.721454][T10910] RSP: 0018:ffffc9000418fb70 EFLAGS: 00010282
[  440.728146][T10910] RAX: 0000000000000000 RBX: ffff888031ce1b40 RCX: ffffc90004bf9000
[  440.736795][T10910] RDX: 0000000000080000 RSI: ffffffff817a67f5 RDI: 0000000000000001
[  440.745299][T10910] RBP: ffff888022eb60c0 R08: 0000000000000001 R09: 0000000000000000
[  440.753883][T10910] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888022eb6000
[  440.763209][T10910] R13: ffff888022eb60e4 R14: ffff888022eb6c24 R15: dffffc0000000000
[  440.771280][T10910] FS:  00007f57397d26c0(0000) GS:ffff888124ab1000(0000) knlGS:0000000000000000
[  440.781273][T10910] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.788678][T10910] CR2: 0000000000009000 CR3: 0000000067620000 CR4: 00000000003526f0
[  440.797294][T10910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  440.805578][T10910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  440.813924][T10910] Call Trace:
[  440.817323][T10910]  <TASK>
[  440.820524][T10910]  ? __pfx_remove_proc_entry+0x10/0x10
[  440.826393][T10910]  ? kfree+0x2b4/0x4d0
[  440.830786][T10910]  ? cache_destroy_net+0x31/0x50
[  440.835996][T10910]  ? sunrpc_exit_net+0x37/0x90
[  440.841292][T10910]  sunrpc_exit_net+0x46/0x90
[  440.846020][T10910]  ? __pfx_sunrpc_exit_net+0x10/0x10
[  440.851368][T10910]  ops_exit_list+0xb3/0x180
[  440.856179][T10910]  setup_net+0x4e8/0x850
[  440.860560][T10910]  ? __pfx_setup_net+0x10/0x10
[  440.865563][T10910]  ? lockdep_init_map_type+0x5c/0x280
[  440.871012][T10910]  ? __pfx_down_read_killable+0x10/0x10
[  440.877156][T10910]  ? debug_mutex_init+0x37/0x70
[  440.882984][T10910]  copy_net_ns+0x2a6/0x5f0
[  440.887430][T10910]  create_new_namespaces+0x3ea/0xa90
[  440.892888][T10910]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  440.898891][T10910]  ksys_unshare+0x45b/0xa40
[  440.903656][T10910]  ? __pfx_ksys_unshare+0x10/0x10
[  440.908732][T10910]  ? xfd_validate_state+0x61/0x180
[  440.914002][T10910]  __x64_sys_unshare+0x31/0x40
[  440.918876][T10910]  do_syscall_64+0xcd/0x230
[  440.923435][T10910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.929436][T10910] RIP: 0033:0x7f573898e969
[  440.934011][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.953860][T10910] RSP: 002b:00007f57397d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  440.962326][T10910] RAX: ffffffffffffffda RBX: 00007f5738bb5fa0 RCX: 00007f573898e969
[  440.970793][T10910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  440.979023][T10910] RBP: 00007f5738a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  440.987612][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.996501][T10910] R13: 0000000000000000 R14: 00007f5738bb5fa0 R15: 00007ffd7cbab718
[  441.004918][T10910]  </TASK>
[  441.007991][T10910] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  441.015469][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.4.992 Tainted: G     U              6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) 
[  441.029035][T10910] Tainted: [U]=USER
[  441.032952][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.043013][T10910] Call Trace:
[  441.046324][T10910]  <TASK>
[  441.049259][T10910]  dump_stack_lvl+0x3d/0x1f0
[  441.053968][T10910]  panic+0x71c/0x800
[  441.058061][T10910]  ? __pfx_panic+0x10/0x10
[  441.062579][T10910]  ? show_trace_log_lvl+0x29b/0x3e0
[  441.067795][T10910]  ? remove_proc_entry+0x45e/0x530
[  441.072946][T10910]  check_panic_on_warn+0xab/0xb0
[  441.078104][T10910]  __warn+0xf6/0x3c0
[  441.082199][T10910]  ? preempt_schedule_notrace+0x62/0xe0
[  441.087989][T10910]  ? remove_proc_entry+0x45e/0x530
[  441.093213][T10910]  report_bug+0x3c3/0x580
[  441.097732][T10910]  ? remove_proc_entry+0x45e/0x530
[  441.102856][T10910]  handle_bug+0x184/0x210
[  441.107289][T10910]  exc_invalid_op+0x17/0x50
[  441.112151][T10910]  asm_exc_invalid_op+0x1a/0x20
[  441.117024][T10910] RIP: 0010:remove_proc_entry+0x45e/0x530
[  441.123048][T10910] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 80 96 a2 8b 48 c7 c7 a0 95 a2 8b e8 03 81 1e ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 e7 5e ff 90 48 b8 00 00 00 00 00
[  441.143124][T10910] RSP: 0018:ffffc9000418fb70 EFLAGS: 00010282
[  441.149228][T10910] RAX: 0000000000000000 RBX: ffff888031ce1b40 RCX: ffffc90004bf9000
[  441.157301][T10910] RDX: 0000000000080000 RSI: ffffffff817a67f5 RDI: 0000000000000001
[  441.165367][T10910] RBP: ffff888022eb60c0 R08: 0000000000000001 R09: 0000000000000000
[  441.173347][T10910] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888022eb6000
[  441.181413][T10910] R13: ffff888022eb60e4 R14: ffff888022eb6c24 R15: dffffc0000000000
[  441.189673][T10910]  ? __warn_printk+0x1a5/0x350
[  441.194788][T10910]  ? __pfx_remove_proc_entry+0x10/0x10
[  441.200350][T10910]  ? kfree+0x2b4/0x4d0
[  441.204509][T10910]  ? cache_destroy_net+0x31/0x50
[  441.209476][T10910]  ? sunrpc_exit_net+0x37/0x90
[  441.214446][T10910]  sunrpc_exit_net+0x46/0x90
[  441.219053][T10910]  ? __pfx_sunrpc_exit_net+0x10/0x10
[  441.224458][T10910]  ops_exit_list+0xb3/0x180
[  441.228975][T10910]  setup_net+0x4e8/0x850
[  441.233260][T10910]  ? __pfx_setup_net+0x10/0x10
[  441.238236][T10910]  ? lockdep_init_map_type+0x5c/0x280
[  441.243832][T10910]  ? __pfx_down_read_killable+0x10/0x10
[  441.249561][T10910]  ? debug_mutex_init+0x37/0x70
[  441.254541][T10910]  copy_net_ns+0x2a6/0x5f0
[  441.259010][T10910]  create_new_namespaces+0x3ea/0xa90
[  441.264599][T10910]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  441.270474][T10910]  ksys_unshare+0x45b/0xa40
[  441.275096][T10910]  ? __pfx_ksys_unshare+0x10/0x10
[  441.280349][T10910]  ? xfd_validate_state+0x61/0x180
[  441.285587][T10910]  __x64_sys_unshare+0x31/0x40
[  441.290448][T10910]  do_syscall_64+0xcd/0x230
[  441.294968][T10910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.300996][T10910] RIP: 0033:0x7f573898e969
[  441.305513][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.325341][T10910] RSP: 002b:00007f57397d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  441.334093][T10910] RAX: ffffffffffffffda RBX: 00007f5738bb5fa0 RCX: 00007f573898e969
[  441.342172][T10910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  441.350410][T10910] RBP: 00007f5738a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  441.358487][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.366480][T10910] R13: 0000000000000000 R14: 00007f5738bb5fa0 R15: 00007ffd7cbab718
[  441.374554][T10910]  </TASK>
[  441.377753][T10910] Kernel Offset: disabled
[  441.382195][T10910] Rebooting in 86400 seconds..