last executing test programs:

8.634847375s ago: executing program 2 (id=337):
r0 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/auxv\x00', 0x200, 0x0)
mmap$auto(0xcf6, 0xd, 0x2, 0x14, r0, 0x401)
pipe$auto(&(0x7f0000000040)=r0) (async)
r1 = pipe$auto(&(0x7f0000000040)=<r2=>r0)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
syz_clone(0xa00400, &(0x7f0000000100)="66b3eacb060a1ba4b6ff3629c7483f446a1113a5740f0801132f5ddf0c6d72769777c80a5f7f22ec9d6aa73a4d07c97e241dff3f157446555f598fbaed", 0x3d, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="92dd4aacfe0b4ea2725ed149398614bcef00dde446d9c933a4a5d31ca3d22a36c009b0044c8340da65887bd7fe49818b851f65006117021d66") (async)
r4 = syz_clone(0xa00400, &(0x7f0000000100)="66b3eacb060a1ba4b6ff3629c7483f446a1113a5740f0801132f5ddf0c6d72769777c80a5f7f22ec9d6aa73a4d07c97e241dff3f157446555f598fbaed", 0x3d, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="92dd4aacfe0b4ea2725ed149398614bcef00dde446d9c933a4a5d31ca3d22a36c009b0044c8340da65887bd7fe49818b851f65006117021d66")
r5 = getpgid(0x0)
shmctl$auto_IPC_SET(0xd, 0x1, &(0x7f0000000380)={{0x0, <r6=>0xee01, <r7=>0x0, 0x74da, 0xfff, 0x1, 0x1}, 0x71b, 0x8000000000000000, 0x4605, 0x9, @inferred=0xffffffffffffffff, @raw=0xbbd, 0xfff8, 0x0, &(0x7f0000000200)="8658a9df6f01c337861d5448a6b4f2cf4a3dd222e4984d3ff2062392da54778180faa44f974e0431eccd82a41ac0ae68a0b5d3af3a5c01813eb34e62de213120309562e6dcc6fc5d026ffdf3d25e977770d40a47321416ff4d68bfaac0bee0137d52068312d5236b0fa4f67bfdd5a5882ee9ede0cf622f74b30f9af541ff099976c27d4e191a072328491f67e61a91cd6875e0f6304a82abfe8deb6846dedc06a2ed348e2ef0c5f5914120fca9d300e958753fc4db5dfb46f43334366d2ab62b0607e1e8e681aae436322b135f1b", &(0x7f0000000300)="a92d088ae88e04940ae87d689d304e453de6d999f1445b7b921643c2f8b9ad16ac9ce2ff4ccae373d409e0ebdf1866b4d91faf99617d1a24bcdbd983959f09afe24348aabc54479d01bac1fa1bc358c5f981fddbd3e9e4d080cd6cab0db153c1020c7fc4b597af1b330a33796e832d0d7ad96b79ee7acc42"})
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000019c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000000400)={0x1564, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_UNSPEC={0x1004, 0x0, "98c4cf6f4fe2b06228b1f1212c5bb1c17db493745b98328d30951e01d225a72bf2124a31d6f675bdd3de086a5c15cbeb1e072626f9dddb4e00ff752d7600ac7c7414613669a495e07848b6b25500359c23349aadaa9a3b7e63be781886da39eef8b450159952007ef70c2d6c0016c4ef61a8cd6ceac032674ac33cdddb68b1c400429719709bf7cb567a4671a887de09d2c01758df7246e9d32e52d0d44cfe0155f19c0f1ef3b9ad8f677b1dee1cb63892979ce1789da2d14c240b4552ca2883c6c2d0e0b2396528c4ec1277a1bb65c3202a7cb62a9bfd1934578e196b7c81bb7e6ec8727c6849a213356b288250be588bdc63c38a7f70d16d21ad2e92bf6d257b3987b5dcc20927223f2ac8aaca3f20e91d1d33553c0b3f5f10e69e79a45fc55faace2bd17718b2b551a037dbc00e9dd68cf5fb3e612b680a3cd175a71e4803ffdd604530773d5b802a59c90331c4794a393cf843d8fb623d51a7c1840077f6a9219624df169d2a0a69c99563c424d54b3e13900b0e78e237d7de242b12b2746dd080fff55ef0ffc166aaa7b383fb2d86482c9c0d063c7816b0ec24716c72cd1ec5525e65d54f0242de6c702ad847a680db4f048c179186c362d362ce6eadd24f52a6b4761ef2826d28a041bd61df839be70c1d32fb1bb6953efa051082a3830179f0b50810199a2efa4db0d33ba971f5c3ead44823c0a17355c7dce7f42b931ea81ec7470c1cf50204db6f49f9ab8b284d3963092311d3ef5c537a4a17215322f3d71073da63bece45be92bbc23560673d79cbf88170ad4cbb4b45b837595c9461f0d9c60ea6649824c11fb4032e7c841153091193ea603e7df7f0c2e12b5d3d19a98bdbf43a23142e73d31c36c1f4aa3c96f2bd11a3cdbf286b9cba0bf017e79670ea8780cc4bc040423b3af7fed07b93f679ddd1adf0fe369420a75f007041e87f9540a2e6b5c1cd634124a6099501b873fdf9a054b2c1bbf6f34a64c63f5ad0f1e8568c968893f1ced379925d0f7a1cbf9174a8853d46a9057caa6f26e0c532007cb82ac77231dcafa28dee8b764318d2cf274ffaecc880ca21fcd13dff6391d308c702d05008ee73b5f89e2cbd2bbb8a9764eade68190e4a2d3a727c714df82dec9c6f4bd5c001d3f435afdb427d9fa902ac71f398155d5f2a0f3c7eb4ce2faff633412484e2b8e4cd95768fe539f8257a5836e01386455254de2128a9b60bc62fcb1bbb0da06946a2ba0101147b5b4dffc7e6349a33fbcdec787bfc209f79686769d6c3591f6060465cc9a9c7a3dd92ae4bb2e9d78792b5ea5982fafdaedcd927f01a2c2d1b570097516cd84aaa7ee0c26d3b052307688ee8419c9cb2b698dd521396ca5e1c8b505ab86f3a117d6e61fdf6ce6fcd607215fae62b07cae0fa1cb4f065a847a4f051b800a59dac29f1cf0e83f5a3de221d01210effbbaa3c967738a576523dca35f0f5fa4377bddab2965f20588894b2dc514223a6707c0fd16f00b5576c4c91ba50078f19f517595a1560e8b825e114ba07e476d933ddbc6d55b212c50b2192620d3265b8ad7478b803f819f4e297daa994ccc1c009ae8e57bf6d87752ce21861b59c4d8aad50f6ef6ed053ddefaa6af3e490b9dc542408536bc1d92ba502dff28e88afaedc635e194460e9da8310156aa5197eb6263d2993b758bcf11781fb49b16aed88ff7f0e02e5ebbadb7b6bab1348c2787dca1663530abbb7a85f19527b3baa1e029147ef4d8a9b63b7638a8788270b65a88622a8ee59e97dc31a300ea2ad50f2e5fb835ed673f9869d56a67e3811f9180016df94a88710b06aab64ac865e26c71795bd62af9470d8f92913f8c1283b5ac083d28ecc9aedecb6e11c8581b0cad580b6ea99ce62e4a93b94b3f69636fa77b6f9ba4a5ad7ce8aaf2a56bdc45c94d2025077f68e3c7c020cb1d4a25d840a04a3b810064bc1cbfaea44eb864d5f8d6aee7e346918ee245765de46f1628fef0ecafcfb4824db0b3f9eb3afac3de81a3f951fd2c3b2551732cdc3bb603e1c9dc42e62aa930d1078a10d5f66c8f9373a8f0d9b5f354f0e0f8f9c059dc74e9e908b1532b58bd532b10775e91bd4f1b503c479914571b152d2a2eb4292151f68b4261a2331c157b4f471271082eae7ce84d40e702aff3a9ca49c679aa2c2c38c07d2ede2aa5f37fe6413b2cb71fe7fcf6366f14bc05d756bf54cb58db3cc3a6e9fc264ca4c554001a707a358469e481be0aa94d20141f0c991bc5b84418e9b7b97f5dc4a97e5b583534a518339a4474f37a0146222ac1a685ac42e8d4c73bfe56a948eac8c0e6dc6e2f354497c0992537e4d7c6092c29cabe223837ef6c7d7908234da6b8e06d919a47bc4b26f00426a1f0804e155555e84c4c3657fc76ab3225ef37373db3f186467dd3eef561d6e70825672a2da639706296c84a439105dc6f9fb99bb2ab7f5bc9585bb7f1dfe7ceaeb1a396529a5faa6858ef720530fb9816fdf189d9a98dd722cfd47ee2185a3a71762037e814a05b89dcff53725ed8f004c3afa4c99bdb6925995b3e995eb742e798fd26cf1ad4523b9408f1d7684474248e03007af136730229dabcfe02e08e58ca253acb999e0db655e6b2ee0cec653818931b67aef9ad94654d68b92e43beb6d7cf160a96d59af09f0a0f80271b5416838b6f3f7cb332a19c4709239d2d2e5ad81294c0f3ca2de9fdc1d68423e32cdad3fd04eef5e5d899799049f047777a26502ebc5045d69bec3e01077a806373de2d502be2cb02c2c0f73eebb3d8cc648f56044ea69697c9567748f1291b4a27875250e83a82625620014b0702a876feb30e87ace2542a61914fb640171808e6bf9b61734ad4d8105e62342a7cc91f7d3c104ffea614cedf4a5fac1024e60a2406c46c5ad118f5a7e5aab2e5c001f25ca905ad65982e8ccc622f69b50b1e48905b98fc187f7c7dff62b2f29abf267394a06c272757960663ad30edf3ee4ff97bc0ca7c5846d114ed54d8c6fee18c89d4a288ff95bb6b58b3f75aeef784e567042be5a5e9cc0e16cbec3bcbb11f6814118a7598377506d362976cf52235f744171a7124b76a14f3d49e6433463078a5912784212d190e028ee45f21e462ea0f30f98424d82abbae1bc0815634a1cf0556eddf638246a461986f13d013a2ffc7230dc840dd1f8d7305e88bbbe0b1c240721c6f186a14645d107858392a6380217f21f0b5308d5ff5c4a95d9add302b4ebad74fd986c8a0cd145c94ba3091180b356c73478da2a7ab155d2e3ea1720bdd12497dfe8a011a89584eade50686d5de51ec62a16001077a5614cdd76b94f2dcf7520f2f4ea2df16d6485224f7dbaabe9a82a1e600c0e56d393371bfc01c388a7ae1f0f2547cf73c9eca443c495dba8c9ea8522dc92196d48e5d529988464c284ead291c75049050425ff52d931963dc389f8d761338ab89e59c6229f3252675acd14fbbe050f822ba3a851711531cddedb9ba9f98dc12bb96f431c7eb12a6a8c618b89a2f7f00469ebaca80d65bbd131bda694e930ef9e71324b61d03b0d01e120b206d01c0d9ab5d03aa52400494ef2b56196407600a3cf69a18a23971eb0a47cf50bd057663ebd1f2ba65156d939f1cd8376bcc41db639e1b8b807e196d7c8a8b70b1ee144a70f18ca61f67ccbc336464aa56291c6370a95989b4f7aefdd48160741f83b43b690ba5db0dfe839de99c82b3727a237aef75488c7c91c0eb27eaaad2909c158fc4b788ef81e4b6266c913f4e4bd36d72af12397d39fc4b4007359445c7c5e7be5346adc70794968eec73e799319bf1728fc2f5429fdcb99cf88c94c6a4ddb93f1f27167a6608331e9246675da802c165d57782f183f8addcf18066a9405b0424c6a2f1d3295cc079bac4bbbea2663d85cc32ca768ba04e7fcead8172a0b3a9d26c7e8019d8530b04f738932fe7c726b4be49c136f092b8ba3606af87368d0562892145bbfd0513811bf3cbe438d7c1247fbc6348ef06d462fa8cec4bb9b260b363d2a1fbaf237dd0808a42dc4dc16b8740598d4886d12a0d3e5fc37d146a8d7983f90192b41877c06cf68215a4acd3aa00126930b84e19c258c0ec6c3a4b1ae09f3c19f2cd1da9cc20945de2503333b09521d5b78103f08338b60f2dd84cedf6caedb01e73b0c229a1f3a835a5c8dd6214780485229c9763764e7316d7e46b0858d8252a4a6b7778278b2e8ac765c3166852a8d64a8240cd89843769a214f9fdf4afbbbf3ad1a32a6b99e2847271e1d8a323f58b5b7fa8f8c857edc833a7069dd82c27e81995041aa86e2b0795d96f33b7f8d0aa1cfd8980a1c8784f1038bf497ee8ded84843bf9697ffc14f10029fc0f97d531d970fbbbc4724ac6613a7e817b33a76f42f4ab3e77ed4e63adeb8bc47d68898cf0f50039bf28baaafde0e9b16e44403df889b761938946937747464ca601e01a3dc260372183c573f2b2b00cf8c02ccce4615e1a8df30f848388c168e8ebac79a70d68b2646bc051fd0748da4a221c7e51f4dc023f7ad505546f4a05e902477650622aea6ab0267b7c96a04467dca531273a63a71000901f5810b6f4a8da154a1bc0b56af62d26dcf16dcf587cde1323abaf0a8ad5ec8d2733d1f9799003e1cf5bb8611ba600fefaa5a5a30452f50eb0d2fe20e857cbfe12f5425299650dd6eb7b4d3320ca73d24dfd54f188e5ace7346b2501c1bc719261051e1ae94c0f1da52c0e620a116fe9911aa14276663fb408c6a67896680f2e34ecc413da44a8db0f2946dba8284f04796fe888b18b656a261120a54fac495bb8266f4c34950b58b04723145ac2fe81b9fc489d6edebb5d9feb8efa71f65e4108016ec4f807bff4bbbc51a78dc25cb7ca1fa994f7a6120a666cdeea70ba0998852e13c0bce0e2f6a4eb6495afe73bb1a64bfd46e344791c72b8d8df31bad2d181c54ad140458d6fb0b608d689331ec754c30abfc0e86a79411cf65c77733b0c4ce025a8d9aa9a3a8b34eab83e1535df6bab02b066286c04c90a68dafc3be0845857327bc54cd23d61da9b75584d3ffc6c913bf3d826e85f7a9233c4b6997c5c7ec45985580d10394bdc8f31da5affe72d8354bdfa3348cb1152474108c3b09831b838bfcda9a6976abfc035041be7ecb16f5d2df05c07265ca97a88852f0b007ed705dbc33119700bf6e9b8b06c34ce4dbcb264e32322f8dc34821c7edabe1273b92544ad06b4ec370fe74abfe44124a3437fef402caf2e36af68901f7b11bf64b6aa6e11602f9efb5c6d17aa9975b3956617c42f012120ee2ea2c528382ece29ed9249ede425945935180f00b47f46c3337657ca00725954121423647c43a34adc8473a7ab94e4214f84a9c1e3348d09532800f3fbc6188b8010edf7b8eb3a34daf6089a696fe3552b345244ad625c00eff876e2a1f104649c3d438658dd5e557d47309bb23c337a3b479dbae3bf594eec93b202372033e5fae71a06c6e7271afe7cce4efd151727c9b463e708c1aa3ed65c3d11c2b8576969dfa88dd01afae1f4c2f693fd33f3a2a9dc9b52f90259fdd2c88ec170184edb30f8ab7521ff96d36bd79cb0f341c825eb978d2eeec34f2c15fc9cabecbbbcb2dd887db2cf12761167565933e807bf587d8a11b96e7f8b2e4c3f5cfa77cb55b01c02bdc4f3f52dda05b34c5a3a59d1681143fd8727bae7ca718b0128a841c480e8308a065ef6874732f86f5e89f52d16a6b9a2e5c0330ec2f4717c19bab6fa50ff3af563ca7bb9bb1d14e5e1d6f16b04f016c0d5326a91863121d94d1485e29b2e0a660c177ee3224bc039bc"}, @TIPC_NLA_LINK={0x51f, 0x4, 0x0, 0x1, [@generic="a4203121603c0718052c7e4f7198bf11f6ef0b3973956c5c9c71ac68cfb3262f3ca552d31dafe2f7ba02de218fa3b19ec88d1a0270522189e4001a3105de37f6cccd878b1de79b1c7c5cae85d56e9334cf55811d5758219bd1aa632b6b62d20675092c192729d1d0f8bf521a6c2c9f51de87f50865d4c9", @nested={0x1dc, 0x8b, 0x0, 0x1, [@nested={0x4, 0x21}, @generic="c56efd623428038d14e7d74c9ad5b22af8c142ea8d6997707d333606ea2ec1d746392da0f0b63807dc9478d46732ef6e478399cac621389b0eb82cdd7e37d81d", @nested={0x4, 0x100}, @generic="8ed87e1120d3e243e602f7e09aa7b53ff90301947f197b0ebd72a8df17b43d0b1a8b5e421699a28a392fc965b3cf90d743ba476b0ea6d3e3b3acea4dcdd41a59a24584f85f6174896823b5fd2d78bdaadf1a77d92dc9254a4b679d580a56e2e85e00248d09fae735c27ae965b66f496490d32a2204d24d824e59afd7e9cc732976f428a36db1095a58bc058f5e12856999ed9c242b96f677cee50fe61ccfd014a81389c5cb64a3e68cfea9ee8e5b1ba05db4949cb8a8642843e92eb10d466e570a421e6cd02bc2e973a562c30844464ad4298e94aec1291a8ab14558219d785db09b9566", @nested={0x4, 0x15}, @typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x9e}, @generic="6fdc352d8c361e852ccb8d18dbf36d92116d2a3b1fb9a04481a5a097b3867bd9a32660c33bc3284c5dba1e098d2f6a164cbfdd55a8bcd793f9124a0460c54e3dc93c37919ecc1766d3b4a8e815b969e97e807946a4039667d6902f0637e3ae79d0b6b69be4e20d075772e280eaa3a30ca6d39ac6f1e5806a90b9b177d94a209e", @typed={0x5, 0xb1, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0xed, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x75, 0x0, 0x0, @uid=r6}, @nested={0x265, 0x10f, 0x0, 0x1, [@generic="889bc880eb3a8ae403e678716e34cf9f91e9644a5772678e56f52ce3d610e7935b02b1990762d5f34436adbd250aeb4b4608ad40455fcfe7b48bb986aab8d33a8f1dd310cf2f4a3752f4606f76ee854265637b974c16c0b51bbdeb45c9d4a703999992de29bda48c641b135fa24fe1c75ec3ede8e403014ca58565", @generic="66a17856ac5ed727c172e1db", @nested={0x4, 0x55}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="f66b8c3638421942c7585b51467840a932ab193cbd8a4501f773031ac308dc4f2719552895695593cb28fbfa792ceffcd727a55b7e1ed6562625de3a4a6813f772a7bf90bd263519132a37f03b9508e805a9817bf6515c71d9008a907440df41d950d0d0427c72ba84c8b726ca10bfae27d6c223c3b9c2d9f26133a68c7be707fdb416001c71476f038ac7f47009bfa6489e9aa8e7cf71668f644a9a687f8307bb433882ef32a746a01f4299277586753bed02102439775f9312bb9fd0c06834e44cfa14966784b2eb8e7a45ea758e1602f0625405ecf27e7ac3c9f49e7f8fea35b0c0e03cc6f0a58f3753", @generic="fa3e6bfe15b9d26c10ff0e9abe12a43776f663155e90bf4bb9fd111cba5dd0979dc2df299fc2a462f94448cf394337c72225df65d62c9cd9bbbdaa247c8d02510d71591097bec5c5b89ad1b10295ebbd876a8fed6a675338cced02c207de86154c87cb7b88ab70d58ce9f232dad152b9b02ca5e1820410955a0c541c48344cc8887d439312caec06d438b405c592f9b4f58f2ef4436e31750c83dbffe1f85b242b033b08e8906e9f9f55eadcf640e3ead60102ff3f1bdb8a22184740698ab672d2b68343df0103db6c322ba305ba0b96aa5514cdd7665b7cabdfeeea07e882", @nested={0x4, 0x55}]}, @nested={0x4f, 0xf2, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@private2}, @generic="b34781ce8081d16291511f82d0b52a58a9586d0c1efafdaef06fe8085d8a7637cebc72e67f893eed8daa89", @typed={0x8, 0x45, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xb6}]}]}, @TIPC_NLA_UNSPEC={0x2c, 0x0, "4946ec8f5aa82404e22067f073689bb64180020042f257b1c0ee891854424d8321499262e2d8be1e"}]}, 0x1564}, 0x1, 0x0, 0x0, 0x884}, 0x8100)
kill$auto(r4, 0x4)
ioctl$auto_BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001a00)={@raw=0x8000000000000000, "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"})
r8 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000002a00)='/sys/kernel/debug/netdevsim/netdevsim5/ports/1/udp_ports_reset\x00', 0x410000, 0x0)
fsconfig$auto(r8, 0x3800, &(0x7f0000002a40)='/proc/thread-self/auxv\x00', &(0x7f0000002a80)="743f339f1c8ff61cf1b0f39add7045301ecf264784142d0278aea577342121321c1e0f9c793a59045999b8f4de1c5518f9e4681e19c15d9a30c5457f97e937d20cca798342fbf7f9ea72d5746700c6741d206ecdb7058607c26c85b2e11850fe3bf66482f33e23d14ba1cfca831942d15ceb9f244b2dd79182087ea544679030c02fb770ec60dd2dae5f825908d1ee82f96d4813dad9e53236320033a063d6bf138aa6f707a7907f34f40254", r7) (async)
fsconfig$auto(r8, 0x3800, &(0x7f0000002a40)='/proc/thread-self/auxv\x00', &(0x7f0000002a80)="743f339f1c8ff61cf1b0f39add7045301ecf264784142d0278aea577342121321c1e0f9c793a59045999b8f4de1c5518f9e4681e19c15d9a30c5457f97e937d20cca798342fbf7f9ea72d5746700c6741d206ecdb7058607c26c85b2e11850fe3bf66482f33e23d14ba1cfca831942d15ceb9f244b2dd79182087ea544679030c02fb770ec60dd2dae5f825908d1ee82f96d4813dad9e53236320033a063d6bf138aa6f707a7907f34f40254", r7)
r9 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/self/setgroups\x00', 0x101000, 0x0)
ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000002b80)={0x100000001, 0x70a, [0x10, 0x0, 0x6, 0x8001, 0x80000000, 0x3]}) (async)
ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000002b80)={0x100000001, 0x70a, [0x10, 0x0, 0x6, 0x8001, 0x80000000, 0x3]})
syz_genetlink_get_family_id$auto_ila(&(0x7f0000002c00), r1) (async)
r10 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000002c00), r1)
sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x30, r10, 0x10, 0x70bd28, 0x25dfdbff, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}, @ILA_ATTR_CSUM_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) (async)
sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x30, r10, 0x10, 0x70bd28, 0x25dfdbff, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}, @ILA_ATTR_CSUM_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r11 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002d00)={'macvtap0\x00', <r12=>0x0})
sendmsg$auto_NL80211_CMD_DEL_STATION(r11, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x38, 0x0, 0x200, 0x1, 0x25dfdbfb, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7}, @NL80211_ATTR_WIPHY_NAME={0x18, 0x2, ':!.]-.+,%\\)\'%&$$+}@\x00'}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
bind$auto(r9, &(0x7f0000002e40)=@xdp={0x2c, 0x2, r12, 0xd}, 0x88) (async)
bind$auto(r9, &(0x7f0000002e40)=@xdp={0x2c, 0x2, <r13=>r12, 0xd}, 0x88)
mq_timedreceive$auto(r11, &(0x7f0000002e80)='\'\r:.[\x00', 0xb734, &(0x7f0000002ec0)=0x6, &(0x7f0000002f00)={0x3})
setsockopt$auto(r2, 0xd156, 0x7ff, &(0x7f0000002f40)='TIPCv2\x00', 0x8)
ioctl$auto_VHOST_SET_LOG_BASE2(r11, 0x4008af04, &(0x7f0000002f80)=0xd1)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003000), r1) (async)
r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003000), r1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003040)={'veth0_to_bridge\x00', <r16=>0x0})
sendmsg$auto_ETHTOOL_MSG_EEE_GET(r14, &(0x7f0000003200)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000031c0)={&(0x7f0000003080)={0x110, r15, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa51}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000040}, 0x410)
r17 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003240)='/dev/nbd13\x00', 0xccf00, 0x0)
ioctl$auto_IOC_PR_RESERVE(r17, 0x401070c9, &(0x7f0000003280)={0xfffffffffffffffd, 0x9, 0x80}) (async)
ioctl$auto_IOC_PR_RESERVE(r17, 0x401070c9, &(0x7f0000003280)={0xfffffffffffffffd, 0x9, 0x80})
fsopen$auto(&(0x7f00000032c0)='vxcan1\x00', 0x8)

8.361521819s ago: executing program 2 (id=339):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0)
lseek$auto(0x3, 0x8, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000580)=@bpf_attr_3={0x1000, 0x10, 0x80000000, 0x0, 0x80000000, 0x43f, 0x3ff, 0x2, 0xffffffff, "d579b34781f18494636cc5b60d43d989", 0x0, 0x8000, r0, 0x9, 0x0, 0x7, 0x20004, 0x6, 0x7, 0x4, @attach_btf_obj_fd=r0, 0x0, 0x8, 0xd5d, 0x5, 0x7fff, r0, r0}, 0x8)
statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0x9, 0x6ef, 0xfffffffc, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1000]}, 0x1fe, 0x533)
r1 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10)
bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r1, 0x815}, 0xffffffff)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0)
ioctl$auto_FITHAW(r2, 0xc0045878, 0x5)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
unshare$auto(0x40000080)
socket(0x27, 0x5, 0x80)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
epoll_ctl$auto_EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000500)={0x2, 0x69a})
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80)
socket(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0)
epoll_create$auto(0x8ca0d1a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(r5, 0x0, 0x7)
utime$auto(0x0, &(0x7f00000003c0)={0xffff, 0xd73})

6.724773482s ago: executing program 2 (id=347):
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0)
r0 = socketpair$auto(0x2, 0x4, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe39b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async)
sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x44}, 0x4010) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(r3, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x3, 0x0) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
mbind$auto(0x4, 0x6d02, 0x4a, &(0x7f0000000000)=0x6, 0x6, 0x5) (async)
r4 = clone$auto(0x6db, 0x10, 0x0, 0x0, 0x40000006)
migrate_pages$auto(r4, 0x4, 0x0, &(0x7f0000000180)=0x2)

5.418647514s ago: executing program 2 (id=353):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRESOCT=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008)
r2 = fsopen$auto(0x0, 0x1)
socket(0x2, 0x3, 0x100)
sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d)
fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0)
bpf$auto(0x7, 0x0, 0x9)
newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty12\x00', 0x101440, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a00000abc025132a7e84860681c6fc622cd565ebfeb234cc7d27c1a29de2ed84378bb9c6e05f7ca7352dfd378ba8b09eb203cfedded76187dc5d18adc3ecde818cd05d0879908d20f7a13ffcfbc63f602bab73e1a84b76747d569f576faf76928b5f82e1d386a9caee3ef1a99070fbbb4f5fbb65b9249945ba176bd8b44910d3b427813c69a390343"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
socket(0x5, 0x4, 0x5)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
getsockopt$auto_SO_BUF_LOCK(r2, 0x40, 0x48, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f00000001c0)=0x2)
ioctl$auto(r3, 0x4b67, r5)
r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, 0x0)

4.523709299s ago: executing program 3 (id=358):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900), 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r0, 0x0, 0xffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0xc, 0x0)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0)
mmap$auto(0x40000000000, 0x40000b, 0x8, 0x100000009b72, 0xffffffffffffffff, 0xa)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r2, 0x1, 0x2, 0x6653)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_TIOCVHANGUP2(r4, 0x5437, &(0x7f0000000180))
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f2, 0x400, 0x9}]})
mmap$auto(0x0, 0x40000b, 0xdf, 0x18, r6, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
socket(0x23, 0x80805, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

4.522643843s ago: executing program 0 (id=359):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
semctl$auto(0x1, 0x2, 0x13, 0x8) (async)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r1, 0x29, 0x20, 0x0, 0x20)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async)
mmap$auto(0x80000001, 0x8000128009, 0x2, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
r2 = io_uring_setup$auto(0x6, 0x0) (rerun: 64)
close_range$auto(r0, r2, 0x0) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)

3.430920707s ago: executing program 0 (id=362):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
mmap$auto(0x0, 0x600008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0)
read$auto(r1, 0x0, 0x9)
r2 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x20020, 0x0)
read$auto_mgts_fops_(r2, &(0x7f0000000080)=""/4096, 0x1000)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x2, 0x1, 0x0)
socket(0x18, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto_SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000001080)="1074709c0d0c53f704d7203303c4b9f1eb93affcd12cb461b6e14a52daa8f95d0ca8b20b8a9e5aef29a2dfe1daf0f147bff6a62af382825e6f05b9cbc61a16f3e19139db64e10460c89a65706bff7fb8707e4786605d18d6ed0048a7a24bee07b1f776a3044889737b7c9b7e2dcd8cfaf82fb5353ccd16cc888abab4aaf25554d0e1a5a70ce4b511f488733691ddc378b25821c65f240d17b2e6d7d7fb8f7dbde9c28374d28fa0b7a23178e2663f9210274724552880b85fcbaf69b0fb53c8843073709852808abb3647cc26efb2df2e01df7ef606bfe10a6d")
ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000080)={0xc4})
r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000005d40), 0x8600, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
memfd_secret$auto(0x0)
socket(0xa, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x6, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
ioctl$auto_IMDELTIMER(r6, 0x80044941, &(0x7f0000005dc0)=0x80)
write$auto(r0, 0x0, 0x5)

3.019886958s ago: executing program 3 (id=363):
mmap$auto(0xfffffffffffffffe, 0xfff, 0x4, 0x13, 0xffffffffffffffff, 0xfc3e363)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0)
fgetxattr$auto(r0, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0)
close_range$auto(r0, 0x8, 0x401) (async)
r1 = io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2, 0x5, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8002)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x1, 0x84) (async, rerun: 64)
futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa) (async, rerun: 64)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket(0x28, 0x5, 0x0) (async)
r3 = getsockopt$auto(r2, 0x84, 0x8, 0x0, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
ioctl$auto(0x3, 0x541b, 0x38)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x4}, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r1, 0x4, 0x401, 0xffffffffffffffff, @relative_fd=r3, 0xe600}, 0xf) (async)
r7 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0x91)

3.016482774s ago: executing program 0 (id=364):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffd, 0x2, 0x6, 0x15, r0, 0x7ffe)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop6/rqos/wbt/id\x00', 0x101a00, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000340)=""/179, 0xb3)
ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0)

3.01062718s ago: executing program 1 (id=365):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x60020000)
getcwd$auto(0x0, 0xffffffffffffffff)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x84, 0x80000}, 0x283)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x1, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000003c0)='\x00\xa3B\x9f!\'\xb5\xd8\x7f\xedP\x93S\x8d0\xbe\x80F\x8e\x9d\x97\xea>O\xa0\r\x1d\x15\xd6\xa96\xb3\x0e\xfdf\x14a\x06\x11\xa9r\xad\xe2\x1a\x83/\xa4\x06z\xbf\x88n\xdc\xca\xf3%\xba\x8d\xe7\x17\xccZ\x19Xb\xcf\x1e\x18\xd9\xae\"\xb0\x04=cX\x94\xd3wn\x15\x96[\xc9\xe4B\x99\xf3\xb9\x82-\xad}h\x10o\xec\x05\xe8P_\xa3\xab)\x7f\x97\rS\a\x7f\x97Qt{4C\xe5f\xdc\xe4P\xdb:\xaf\xc5FV s~=\xc9\xda\xbd\xda\x1f\xa9\xda\xd8\x96\x13Hbu\xb5+\"\x94X~\x85\xbf\xc6\xc4\xfcak\x8b\x06UB\xc7R|\x94~.\x90\x8d\xa9d<m\xf6Av\xe2\xd4P\':g\x1a\xc0\'c\x865\xc9J\xfc\v\x88\xdc\xd9p\x91\x88[\xf0y{E\xa0\x84`\x8b\x86R\x1eF\xba\xb7\\\xa67\xd7\xfb\xc9', &(0x7f00000001c0)={0x0, 0xa50, 0x10004}, 0x2000000001000)

2.441239304s ago: executing program 3 (id=366):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async)
r1 = epoll_create$auto(0x3e)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000040)=@bpf_attr_11={0x4, 0x2, 0x6, 0x2f, 0x8002, 0x3ff, 0x3c4, <r2=>r0}, 0x4) (async)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)=0x6)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8303, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$auto(r1, 0x5, r2)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
removexattr$auto(0x0, &(0x7f0000000400)='/dev/mtdblock0\x00') (async)
setitimer$auto_ITIMER_PROF(0x2, 0x0, &(0x7f0000000040)={{0x0, 0x7}, {0xffffffff, 0x9}}) (async)
mmap$auto(0x4, 0x5, 0x8b5, 0x100000010, 0x401, 0x23ca)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x44, 0x0) (async)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto_JFFS2_COMPR_MODE_NONE(r4, 0x4, &(0x7f0000000100)='/dev/fuse\x00', &(0x7f0000001580), 0x0)
r5 = socket(0x22, 0x3, 0x0)
r6 = getsockopt$auto(r5, 0x6, 0x4010a, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x80044942, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, r6) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty15\x00', 0x201, 0x0)
ioctl$auto_TIOCSTI2(r7, 0x5412, &(0x7f0000000840)="13")

2.091808994s ago: executing program 0 (id=367):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x100, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(r2, 0x0, 0x820009a6, 0x10000)
msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x5})
setresgid$auto(0x0, 0xffffffffffffffff, r3)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
brk$auto(0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x7fff, 0x8], {0x6, 0x6, 0x8c48, 0x4, 0x3, 0x83, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x3128, 0xffffffff}})
io_uring_register$auto(0x2, 0x9, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
r5 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x0, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2139, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x4, 0x40000081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044)
mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
write$auto(0x3, 0x0, 0x5c8)
mmap$auto(0x0, 0x5810, 0xffb, 0x8000000018011, 0x3, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
close_range$auto(r4, 0x8, 0x0)

2.057236429s ago: executing program 1 (id=368):
unshare$auto(0x8000000)
semget$auto(0x0, 0x2e4a, 0x8000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x1000003, 0x7ff, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = open(0x0, 0x261c2, 0x84)
io_uring_setup$auto(0xf, 0x0)
r3 = open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee00", @ANYRES16=r4, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000)
shmctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000100)={{0x8, 0x0, 0xee01, 0x8, 0x8, 0x3, 0xf}, 0xfffff000, 0x5, 0x6, 0xcb, @raw=0x9, @inferred, 0x3, 0x0, &(0x7f0000000080)='\b5', &(0x7f00000000c0)="38b14d00fdf7f4acbb30c2ae6596eb4450cfafc3563fcca085833f1165ed96b8"})
r5 = wait4$auto(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x5, &(0x7f00000001c0)={{0x4, 0x5}, {0x3383, 0xff}, 0x6, 0x5, 0x6, 0x1, 0x2, 0x7fffffffffffffff, 0xa, 0x3, 0x1, 0x5, 0x4, 0xfffffffffffffffc, 0x6, 0xfffffffffffffff8})
ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, 0x0)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYBLOB='T\r\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0001070001cb0ecddea4d0e0707ac4955650542e2034c246d90e96e3a5d6f4873378164bef9b43993bd7cf4d2782eda4dd21ddc39b20df56274b6eddace9d8612929a0b2f76d5b20204db136486e13ea752ed5e58b7d568dfc198fd4acc75d9be2088f6efbdc8260d4ff3079ca26ffc8cddc45e181856889857686abd1afc94b78c62fb822a586b2dd3a4cddf9aa6233b6cbf5c0cbc7af97cec0b836fc8ebc8ddb3a2ccb15e64e293d29447132ba1d3f67ee65a893c4d30b81ec8685183a58be9c65d67a88b32c3f3fd451efdee265d0731ac01a72e0f24d74b29a85181f36b1b517775c37ec1de21f91d5f257431fcc45ca38b13b95c5e844303f5c4b62664e5c0f6244a8037ba68470189cb3118655e1f4c7ec0872c13f690dc6bce97887ade0e70172f093d840e59e8c185cdd599c9502a366dcb2c5271749308e457d698638d26f723fc4d52c0a91a6210b171e834044f340e900e480cab1b4e6b3780e8a342eea76b296d2e1d5cd35e68146b38d0cdb64c4c9f154fe0bcf226ec863449b6a0eb438682eb00cce8f00e5b230e525f4d4b84ff6ec237d6319c93551010088bd4c322963c10d879e7843b3d144225db3db40980a49499c37310b60c6d3804a523dbe6f9fa4d45dcc7fea73f2348e81575a6c45148d33edc35df9b0edba16e229ea52fa20b3c85b295ed30a266649d6f7ac1d695a6b59340a944161ed10e999ade0f8f2f9b02ba24a0262dee5fd72f6566c481f7daaffa54b3dd3a68592fdb4bc85d6cab4a0d6aa9606070cf3fe8b1ef20511e93b3774f999dab8eb32000000b1001a001c5ef80ae59f4a5c59171bfda86a789d4faef0b1a809f6ac400babc60040a9aef4d48ac88044c401e416c82b16b1a49e1103f96c8c5f5d1278ae38a8f762918996924fe0fcaf4058d5fc3a31a11ba5100f8e7942890e73f642ff166967668310c69d861255cac3d2b65df7f5ae926367d8ebe034ec451191d6bf8846056d04decb59108053d64ded9f9d49146a68615e4d1b866c5d1c299be2a470ffb5d57c855ca18a18f6a3eee949912313250000004b087f00968458276440cba4674d2c08d0ef204ee41111b16629664e667b310a15193902f74a892e7a68ba30d7b77c9cd97d2bbbbdbccf010cd9a63a89cf8692d2403d86e68e9e3d37e0b42d75eab805e93ff2643eca539c1edf4eb787589f6f147bc60989ccecf0f31b0b503c163a0c2ca71e86daf7de6e013846f1898c8fe0e7f0475cb665479383b1001e326143e99dc605c9972d2a1a16686c225b77986ae4fb457d9fcaec8e615b15c0d052efcded066944be9f537542056218e86ed7e4f5904f3af90843d15dea8ce16b61293548aeb8151b6e8bc51ee39bec0ace5f59dcd72932ef1b3a92890aacfd4cd297116a1bab8752104d0ec0d678294eabc2a002bfbb544e48a4ee7206de563d884099a95a765bfe67c87b84181c0b3c729775a508202baeabe492fcb96625be05200668e1982376ea7f17b0d2c32676eb44af899ddb246baa77e6e336c3f834a9824feefb9e10910df5e8142f8cd196d0561139f3d333c62cda3d36ccbf46aa8008ca115f7e28e76eca5ee74a87546fbac13ab278e4f22d5f89dc22bebd1dbb3e2c668a7ef74f68aa64d2b275b711086d98b8e237a0bdb5cad9d77992554e457f24b5c8dd052a1ce92745a57c58be2b49f03f7bdeb7124eb54b9381eecc6359911dcbb97f59cf7fbe0a28e82516a29210ff3a39421a457578800374578b934e9b57f5eb2cb726e12f740f8ec33c4d19f2e3a6a0e45d3596c5068f0ed740e08fd2bb883e88d2101f111a5b4c69fb8ce9a1ef1884898f63a00ff99f3b0d5e2278415062cfb5897301fc98842f45ced18d1f636d21ee4ef5409f8661bb21d178fcf271a05114b6d1c75a94c077064ae877bfcc3e4c05453594e9345a28e0d3f41ec3d926005941b744d7dd41669d1a26c2dc8a1ee44a617673719d44c7a17b5f0cec569bb7dd34a2affd6096b5c8f847ec42d0fea7c804ddde07e79cb366a32dfcc07382f7d59cdf880967f7b7c749dca6e5ee39318fe78ef609da1b60b1cc94d465551de6996492092c234dcbc7df55efe87204bc01db1035c6528dd9e8434904d5f99c003e0bb2729f93966ce179e60ae7063cf030aa56f0cebed56ba4840da008bfd1ad0a291cd5e93a489571f0284e66b6b1198dc3cb1862e37746d84a67ee12d737c63d9faad12cd51782d6f969f1d89a2d39f8e8788f3c8e228edc431aa32531ce88cd76a0058eae4638344a1f24bf9273600c6804196c4906c7555d8771b7597699c360439d5d65b97245eb1066b5387e2e2185f0622869dafacdc2d82be2e2f3ff7c6ed761f2884e168ac8f14b519be03893029f4c27e344cd78c12cf16f92befa46d895ead4effccb3f373afd52d1ad76ca08620b62469dc4770ef45cafb00098b0b8cffdc068c165e8063c4e95a00895cb8c92f19308460b89e59b941c4ffc82b35044ba9a99040391fa4bb79c8edcd3a1fcc17c4c770c28c22fbf652f9cce1af65ac74017136352c362af5690483baf651c77d2207dbb3661d449ba6b326f30725d438a238acb9d5d7bdc77ed4c107ae0821523512f496e0e69480549cd855af11ecaa8044c1ce5ca2a5d0d86ccd1b2e6030c650c1dbc1e7814daf2df47d0fc331d871534c7956fc2e2462860cfdeff2926015396fda0c6d0676452b7180734b89587ecfbad9920c89e4ff88e5004e24e72af77e754446fe703c5e3bcf2edf4ee65cafae1e85a4b176138ecbeaddec43f7b6d7f1f2e18dc9f3456fdd679d207b8824d3ae9a3ad3ade9dd0d1e7cd944bfa262b409b042f63e0481228a53157e5c96d3b8f522abe0e04d1d1de641bf6c487912f4ba2364c6ba6bef70c2b1f85b1708084cae3442fd4729ed6a55468cd5d018451d01a3374151f583615acad2ed414f726a4f56e488316b7c3322c70ef700c829209dcb064b4e0a67fb270894d4e8592f5b4b7e89c2ae8f5742f0b86bdb604470f9866dab7c069d7cb66cd5879dbdb03d8f6a055b22d0ea06341a891605ec0ff36e9f9ab0e6dba2ad058ff98961b9fd3f72d28ae8076c03a583cece551ff1c3025c37b1d3b7664e34274295dd9d258ee783d252e8c78b9072784763052fa5cf27e3643e7afb0a89fd2ef453447a1258319cbe4d8a05dc8af9a0b3555a8f48ca8e476a4c39e7bfcb7c8b3b3dacd11b9d2871ec9e91bba2cd19363c48569ebe869ba627297f737d031c3417023153d9d1c7c043a9e018ca3e0bb49ded8954fbad28ce7118108a6e367fb855554017d15d0821138dc985d1c5ba7ccb5b443fa61a6e9baad3c7ad268b14be08129f2a3c1513c2ca2e0b3f5ae2c5e1c404c5def4b470f422cc3115e5aa85aa3ccdaa0b310cb8827abca2c7b23192e5bae0807def853d5f9735c8c1402585bce7318c2d3bb03895974c4496be896a1bda50f12769eb4f7495d721d8ee00840a209723f431ee6d92910980306a0c1f1c941fa0fbfd56454855be24c048d93f907cc472d8617e308b3fed9577292efc833bf233370c826d6afc8849f71c42c0152233c8960891495e0233de4671a4caf5703b8bc1b8469496f720d5802bdf2b55055b1795850b2649b4acde20f98081d81ee4fe755b80a9b9b32527aa0c0f9dd92c2b0e04dd1080d768abfbbe743b438e252ea9ffba441111d16674079a62e844dfd0d9a0d679c353ce46b4b7fa43a90b0fc78ee7a34f19cdf62ef4c5ab3a539893bc5fecd70cf11f3865b9884fd304daf0c9a38a138619ca25a20df4bd3592eda09dddd1bd61ff8cb68bce0a2ccc68a873f6388ce554d0d6509d879291168491147f35e98099468ae32fa9d058355384b28c728448a2d7f3f04c7596dde6c27be21bad6ebc3ae5af5da0e105ba5f0d4a2982da5ee854dcd015f0c46129c6247c8cb553fd343bf53ff5e48fb5fab1d69ee37753ca691afd810fe5fb4484b5cc1d9b4dd8b140afda66f9dff86120ae4762b80a8abd54bcfe9a783fa7d8aae6bf863b535f00dd8d2d68073d3b042505b0513e76ba56cf6b67fb139293ab79e0c001400508008004700", @ANYRES32=r5, @ANYBLOB="080049005692c6c6369e8e98f9c61c6d1261dd01901b74086c6595688ee0f4b903f7763a", @ANYRES32, @ANYBLOB="0800c90002000000d4002c80d00002805400008008000100090000000800010008000000080002000200000008000100400000000800020005000000080001000100000008000100100c00000800010001000000080001007200000008000200050000002400008008000100ffffffff0800010006000000080002000700000008000200030000005400008008000200af020000080001000900000008000100010000000800020055c3587b0800010001800000080001000200000008000100ffffff7f080001000600000008000100a300000008000100ff0f0000"], 0xd54}, 0x1, 0x0, 0x0, 0x80}, 0x20040004)
socket(0x18, 0xa, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x145943, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x5, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x1d6, 0x200, 0x0, 0x4]}, 0x1fe, 0x81)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10048080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0)

1.856804397s ago: executing program 2 (id=369):
socket(0xa, 0x1, 0x84)
r0 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x29, 0x2, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
write$auto(r1, 0x0, 0xfffffdf1)
fallocate$auto(r1, 0x3, 0x8, 0x9)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x6, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1802", @ANYRES16=r3], 0x218}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r4, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="203973e7", @ANYRES16=r2, @ANYBLOB="11072cb57000fedbdf25130000000c00098008000200", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/status\x00', 0x101600, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
read$auto(r5, &(0x7f0000000040)='\x04\x00\x86\xd2\x0f\x84\xe7\x05}\x88\x04\xc2&\x14^\v\x802\x89Y\xf2;\xe8\xf4a\xab\x01\xf5\x1f\xd5\xf5\x89lg\x0f+S\xbf\xa7\xc3\xd0\x1e\x18\xc2\xe8\x87\xa9\x9a4I;\xf6wP\'go\xf2\xf13\x91I\x819nz65-\x84\x11\x7f^\xed^\xbc\x17\x17\x82r\xa4\xf6\x86m\x81YI\xa7\xe7\x97%\x9d\bs\xc92\x1b\t\xf9q\a*\xf1\r\xc1\x18\xa7\x05m\xb1\xda\apU\xb8)b\x7f\xe9rQ\xc5N~,,\xad\xf0\x011\x8b`\xb8\x06\x01$\'\xb4\x03g\xe6\xf8\x18liR-\x97\xadX\x7f\v\xa4\xb5\xfa\xe0k\xa1\xc3\x89\x01\xb1J\xdcy!\x99\xf65\x9e\xcd\xe2[\xd78\x0e\xde-!u\x9bh\a\xbbHC\x91\xde\xd2\x9a}S\xf0\x85\x7f\x86/\xd7||\xf4\xca\xc9A\xac\xfb\x1f\xcb\xed\xbaF\xe5\xb2\xdc/Z\x1b\xc9\xb8\xc9\x83O2F\x91\a\x8c\xcd\xe57\xaa\x12\x03\xe4=\x85\xb3\xa7L', 0xc)
waitid$auto_P_PIDFD(0x3, r0, 0x0, 0x9, 0x0)
madvise$auto(0x0, 0x1, 0x9)

1.600571872s ago: executing program 3 (id=370):
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x400, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config/nullb/features\x00', 0x48400, 0x0)
socket(0x2, 0x3, 0xa)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
r1 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000180)={@_si_pad}, 0xedd8, &(0x7f00000002c0)={{0x9, 0x1e}, {0x80000001, 0x1a2e5170}, 0x5, 0x6, 0x1, 0x6, 0x6, 0x4, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x7, 0x10001, 0x8001})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x7fff, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @inferred=r1, @enumerated={0x8001, 0x1, "71c50495875fda8c62df9c4ab3f3008e01480fea07617a177302693a82a9c321a2721a69f938599440e0511333b8446367f732b02f3c559db123b30ed62f6042", 0x9, 0x18}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1ff, 0x0)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x178ab487)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x40)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0)
seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, 0x0)
ioctl$auto(0x3, 0x5, 0x10000000000402)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
acct$auto(&(0x7f0000000280)='/proc/net/\x00\x00v\a\x00c\x00j\x05\x00\x00\x001\x00\x00\x00\x00\x00\x00\xda\x1a?\xde\xe9LJ^\xc6\x98-\xb3\x8e\xa8\xfc\x9e\xfc*\x00\x00\x9b\xdaq\x8b\rX\x9d\x06\xaf\xb6\xcf?\xa1\xd0Cadu\xf21\x96\xcb#{\x1b\x99\xe3\xe9\x00\x00\x00\x00\xf6\xfb\xbe\xf7\xa1\xbf\x89\xb2\\f\xa6J\xb6\xc5\x00\xc9\x00\x00\x8a\xcb\xe1t\xecU\x9e@\x00\x00\x00\x00\x9f\xef\xe3T\xbe_\x05\nP\xee\x95\xe4\xb7GB\xc8\xf9\xa8N\xffG\xc4\x92\xaa\x0f\x16SZ\x83\xfdN\xda\xd4\xb3\xa4\xf6\xd3\'\xbb\x95@ni\x99\xfbp\xf0{\xb6\xbe=\xd6\x03?\xf0p\x99\x10#Z\xe5\xbc\x119\xce\xd1\x9cH\xfe\x1f9\x1c\x15\xbf\xda\x12\xcf\xd2\fJ\"\xe9+,\xf5}uQ\'B\xbf\xff\xa2\xd7\xb4(\x9f\x88\xda\xdeq4 \xf6\x05\x04v(Q\xfa/\x87\x9dh\xe3\nqy]\xe3\x11G^\xb5\xf50\x92\x92/\xe7\xec\x13>\x1d8\xf6~\x92\xcf\xb7Fmps\x0fXSGnjS8Ol\xc6~\xfc\x88b\x04\xc7&\xc6\x95\x89\x02vF%[\xa7\x81\'\xc3\x13{\xee!\xd0\x14\x84\x05\x12O\xc4\xceK}\x98\xa9\x04\v:\x84\x9fls~*\xa5t5\xcb\xd6,R\xf5\xb3d\a-\xb8\x00'/334)
fanotify_init$auto(0x1f53, 0x2000000000002)
open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/vbi17/dev\x00', 0x208183, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/nvram\x00', 0xa502, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1.565716837s ago: executing program 1 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r2=>0x0})
r3 = socket(0xa, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_fd, 0xe600}, 0xf)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c8, r1, 0x301, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_MM_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_MM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}]}, @ETHTOOL_A_MM_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_MM_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_MM_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_MM_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_MM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_MM_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_MM_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd20}]}, @ETHTOOL_A_MM_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)

1.335628688s ago: executing program 0 (id=372):
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@rc, 0xb87)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0)
write$auto_force_suspend_fops_hci_vhci(r1, 0x0, 0x0)
mmap$auto(0x400000100, 0x1, 0xdf, 0x4000000000009b73, 0x2, 0x6)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r3, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e1182, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
shutdown$auto(r2, 0x81)
ioctl$auto(0x3, 0xae41, r0)
ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
sendmsg$auto_NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="02002d6c2a9ee8bd7000fbdbdf250600000004008e00"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x4000, 0x0)
mmap$auto(0xfffffffffffffffc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)

1.226742841s ago: executing program 1 (id=373):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$auto_BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x8, 0x2, "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", "db11b05296694f4479c3543d544f5379879258c30d7fdb5a5a6df4825eddaa30570a270c0804c1c6c9689b40b84f5ef1d794e70481521546a838de4912ad2de0994807b42339dd18e26a9c2c8d01d2a5bdb943d30799591d8be1cc20a84c7b9fec3660020c2475bf6fecbdcda8bb59f4fe8be58005166a2c46e6af82469d970f1f0e9c3564d1a0ceaeabb01bacd9e0b781b25c10fb2c4266827315746022abde85a20762759c3553908dd9a9ddf2eeca4e225002be4d19a44679d187b4bc23509c401b6d8fcc7738267e50a95a9aa7e2612f5ed0de7a1ec8fc76de71ea72482f4f31c5eb9667bfb614907f4c0fb436e9e211ae0ee06950d0e8d3e1fec32239deb4e9ee14fb74100d690513a0f39d75c7335207f148e8d14ace0c5f55ea8f6f19729ae9484935997438be386813e996809766c2df11d1a1766512505583f93e32838202fec3ff0cb6d02806b1673b0e2c73acffaf4998e4767d67eb309007b703e41b70ee184625ef8521935aec73b186271e5be1b429701dc527825963557f0787d18f4731d7f1512db417f60bea3c1107e595de138ba07ef1da859ef9568d8f2e2157d51e9f90853b67d76bf0dc29a7dd4d5f5a39d9d71a877b0eb92f87c28649c8a86f031fc7572bc1653ff860e17954d876ba9560bfa8855f9cc2b7f09946dd16d13a85910a779dbbcabedadffed72d80ddc4b5a9d3a161e7ee3b0c7a260fdbf5219503d647b835adf53a0f412d29a01e97a650b3cfddadcd0cb285d8a214df169801544bde7ca49c91b1d8c31aa08345006882857477023245e2b2dd5e73250dd63a4a5e8b65824c4fb6cbaa69ed294a5918f3221aa57a4726f36cc902ea3d24ff951898dd5d39d1a53f80e4813f963dde7e6ef3a17f5c7aa4f23896a308904f2a63e675f0398561673aa8c246569c6ed6119a461d998a0cfd2aa438cbd55a0f99b817f1a482e88d0712a0cbfc4a4972f55f6f77bc1b6708887fb86c7c16dd3e4f6c7fae9947064549b675897bc0112f48ad866e4c0e3dda43acdc906f0187f10eda8b362e6d53357b499b97a71af83a26cd66c8f78debb3302ae085be837934e25261eafc632f3b91cc2dfb4475322bf8dfe31c7a8e320634a9f73292ca6abb8c2673c8ecf55cfe77674d2cbb03433ee6777b7213dbf3830e7c2420f36ad1483196cf423c8808817e5596e8c74185d31bb7a49a2f7439634b12d904891dd6175f548c042f83aa8ee81a90e290353c4516477deae3ab6a982690cfeffdf3d97f8527b40767da3e94e3b7dbcf163a6f532e3b3587ec554cd6b7ea33e7f4cad99f6d9910a7fdeec290bd6565b3653f8259bee351fc6721ead4bd971a58cfe066b9610da69466423cfb6274f269f2a33439200395efcc5e6e889eac0bf4910392a177798577bf7ac255d04f9619a176e61dd022662bb41f48d8d4749f2827d63c500f446cf64e33f4c31f21060a2d9cd0d88f1b2c380584df3df5c154f0818e3dda9bfcffaa74a65097462d09d9abe6a2e075218733717155f8c02e57e672981914786c0886eab196bd42e85c22f720eaaf0de640a2e49d70f7bc8bcfbdf8a237a7691e8deb5364212e9e5b54072d293b6dbeb0075ce2dd51b7416df332f6704bd5466a935c678848fc49ff53e9908039dae808ad287f6a0c847695953a433c48458d789ac1ec6ea29b8d82959cd41d1532b761bb2b4c7736e9842a2e689da36481efd77c2e59a1f28f133d7c9b97661e4438cf014714c3bce0ed9b0a967282f25f9c0679862952bfd6c2476f524b2e7169b211c0a3104986c07f758862eefc8680d5e8130aad9cad4feb74409b73704831af7fbb2812b63b7c42d78d82200adb20440ecac57f0bc928f36a4acfb193bd8688216a4bb8b180934323bd78da33d7b1ba0057b6a1c5a7d0425bc5fe016bd240e2de340013d665c7e7226e1ba67154cc026ed13c0613d802c4ea8614322bce2f874c3b087a856b56d7958de6d197e4c8943279f3513edbc81e8e9aae3639ae324dc2dda6385a0c57786e1f475362c96a71b74be9b187eb8ad90d7e5c7bc81063fc3113c93525d2eead66861eb9aa3575864465ebaef7051e03140cbe9ddae97ac96dc15fdac4391920e22d798f71e5a46cecd669215257a098c96a21d1e1d6209bd28e66db752877c1f62f631c24cdde02c3b8bd91d2da4425e528eda17155446326e47b2b97706ae706cc107cd92aa93f5513226a4fb19ef035417f255544fb24dafe9624ee9368d5ff5edcd2433534000d992ac57b0651e3da3c5fefc150a7d3202b0cd6e99e7b44e284edd53ebce2854ed58334079984e8ee2d9bb7774ae3e82ea6d6c1e551cdc318db07a27005692c86f7afaeca1cb184e06f38cd74775aea1b65eb65a6379bf776750c474f4e269e5548c858ce174f3fd59117673d11d651b15a3087217fa816a8cb77ffb26f7a828a1d662e57537049026db447f517f3258ea048c800ae468bf647022ee9af2fe55cc928e822c0831874ccbdfac84bceac1a1456d32dd6ce352e03ad5e1927649935937ad47d11b6f9569203813156843fbeee0535c7bc5e6e534dc59106f2441bdf553d1d1d2784a763a163769a1e6279419d28e527309f3afbccb30218b4e1029e6027e8e4c456b04451aa0a44ade745c0b0a9744b3b86c66b3c2a5b7541268fe72bd9a983388aef857df85d1d6f6b614077e7397083dc5c76704ea692988ef1b2f326e18b0e44370ee78c9b5ff68e8b96d1b0612e5e60d44259496ca425325a41d106b00c7779f7bd74777819903005d3565c9ebd96ff71adf03888bc0a134422ee6143602343939cbcfda2cde2f6c7bd9297ec99ae2b06d6e83f4b2cbeab259f82f287a4c9cdd525a57d3cdd1cfcf2c3030182f57939f138bb201fc333bd86f804c5debfb8afdcb48b7f766f7d2496acffc9a0a66cbf1d80754cadb7a6ddc8a5a99dfc3be5bf737a12eb9f7a81bcb2dd3f2f0256374867d4dc30d55c3f8b4e50aabe7a3dc7c868a41d9d95d93850b390043c9d115b854cdfa86eced723afabfe7e427c4e8f616cee59de9cb1b9a44d7463567119ed1f90bc95fad288c7afc17563e236eb0e74119df596a3ea8ebc69f048181475f3e44496eabad0d094f69b24c1972c6880413a10a2480abc4cf852864da8f04e87bb5b7caa49b534fc157fda578a6437417eed9e49a7afd39ff242eaf9af47942de75b6ea45e6da8370e7dbf6d4062094a330c750fb5b3c386a8c78b8ae799be40c0434b32eccc8a04ba523b8b5bd09a44b90e834f225e3099846ee1288be75d68ce58a72b8a32e6ea00aeb3132d21f417b5c18a34bd42c5aacc6b69ed719dab8271b6ba7d41d54fa966197b052752c2da4fbc3391d7f9202aeba563a67dec510bfdf76c527cb7bc3dd285470bd8baaec754dcdfe32aa0255c636d9903b40938adfeb4bab4eae48ff6d583a2b28074999e958231200b95f0ea40f05e9d4809668a4870de50f8ae58cb905aca1730fcd9cca4289640f5ff7db8dab74cce35e368ee46ad773bfdbd4ce3dce07d60f62b28d87741d974086725a05e55f6c290fae8149df45eecef3a486191a43611db3a55d965f543fb40be6436c3a54e6fce6fc0691e7565bf7b5ad8f5e1ea98923af41038377db8c3aa065cba098ea8972a186699b667febbd8df6844dda75c426ceb0aa0fb6b14a5cd5815ddb1be414bffc7d01f1e8caac980e90070d06ced5c7416667858975b37b91ef14c9c291c7d881dccfbcc877853b19b2cddb0e4aa28843da501e8b182ecc8eb35e0d37e8511ac7f266ee4d5512c90e147022509163600efeff82178c7a55465654ba8b2c2d2b4d6abe105695f62f567d47c39919b1d1885d12ff3ed8e7ce5d2e7a87f215e07b541575f1984d1050fcd232c63d8368f4b8473c95b350655d7af77f0305043d4d11019486933d6d447902fd461d4b9d8f87c095c263beaf490d9c904cb81ec4e26502e391efce0fecb10535bd2e867e69b36ef01a42f18aec938a7d14868374182897bcc94b4280279df027139e4e533fb615ae58755b0a66bab7e5b86c8a00b890119f1fc6a107312768f245a702b81ad0811032b939b607d4470a9385bf6d5f5335626bca4c948044322ac9ed7b5774e226185094fd79ab1e135b14c910c350fe1a574598fdd0d1eafd5358f8791b332a097db2f6f0a0e6f558c146d8ef788d4ab7161afdbf6087ba30fcc6524b7ea2576b1fa9d39fb375b1692c0229c37180a6a91cf265f3f0a33a20fb92ec62d37c16409ac3bf967fca53429869afddbea998331717e15e9f13a67a54d74d302c3486bafaecb9a53e26a387b70c5c07201e25f0652cd048ce3a3e9a55a5f96991d4aff1dd262b43dd5fd48c92d121eb69cc9032536af1b6a156c161b83b1c6c82e6caa62f30d6e29306a9e7f61c730a6762de376f7d9e542a0e1b30d10ffbcd97c45dfda7fe73f65503177ac53caa9e0f9f16e713079915217ba55395193d0ed31c9066b8ea47467744e61fe2c3b476edf90b5bc17ed080ab0791a261259a8d478211a82a0df6e35ab65348c87f4d0d3907a02c0b567d9398af870c65c805bea6c9f3a24caf80b13af276defabf681a24007f1727d82168cacd288f442a4ccc5bc56af6b7a80a94b08f66982e338b4d7d9b7e7d2ed818c26f8dded364e90b134dcda887c53ea45bb3d56a0b24dff37a5b69af44cb4172bfc484a3eb4b50160de8a87b38ef93f5b8071b58b91247bbe9d4f5fa15e365734ba4ca321752d0549ae02213ccd806bb57142c5e3064bd4f49a9a3f85f3cb26e44270c19973e13581089ef237409c33c4dad27aaab8d992ec0affcd7319f97cc73e306084d27f3b318f7b30e170165f913f1c4f622682bacb1270bb45d20042cd77e05351d33810207a6a41ea9a436c9dae765cf875acdbf9b45e793b0c7f0befe14821f558e7f71f5281988c06ec490339b6cf6819feb87630e09ff561e06ec25318f349198e82acf9f06269777ccd5ab03e8e073940d4b102d49efb23c5095db66ab7cc9f126bc9670a7a4fc3025d8c9b954d6901a4dd873a08874cea2c2ee04d36e0656d1871b721ca2d4befeaee1262585fdcffd6513979e8f41983b5597f65b414c444c0eba8f65eb3684e9a2fbf305f81cca7102ae134478553ad4b9654a7aca96a317b1ed7b8e305ee33be667ac7ada83c0a38a2a883ebfdf9890da0bfa77ebb1f04176f2c0a55ffea467caeb99d3b792ab2e59ef2ce597f55171f31caa7ab326be6d84982fa7e1a1d39e06e6bfde17fd3b29b68b697a84db7e27428ae3e8f296a097569b576f93e54bbf3be703f13bfce482290d71943ef0abc7f7d9b1af40b09baadcfa6a8fae60b830655d537a179f17655d5f08b89a61e816484d80b2a58b41a92e8a82923ef209b03333f081c9e4353"})
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0xc00, 0x0)
r1 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0)
read$auto(r1, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1)
ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f00000003c0)="bad802d17493c3c5b5cfb8e1f56545c3993080324928e7407443037898abb3a925b108cb77b954ae77a12bccee64e54dcc74d9b686982aa27b388ab161bdda868f26dc2f5f109ceafb48f403723e5198944ede00d6976ba1b8f79731512678cdb16221eeb3eaeef7a7fed13d9972a8ce9b56ba56d9196f4439cfe2ce8dc93d7b51b37e962544c93c993b89e2f2cd65d4e48cd1d5850c448e4f9bd1bfe337df6cc4943d5f3e5f8129814a1b433d189b51824b5c7bcc945c523956f62b4be511079df5a7dcd3a732c904175b91d29d91bf9a2f7250b8f3de31d1d8db997a080560fc17")
syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff)
r2 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, <r3=>r1, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x5, 0x0)
semctl$auto(0x7, 0x2, 0x13, 0x1)
r4 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r4, 0x84, 0x10, 0x0, 0x0)
r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0)
epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0xffff8000, 0x7})
r6 = socket(0x10, 0x3, 0x6)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES8=r3, @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001008000000200000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0)
r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r7, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x2, 0x400008, 0x400000000df, 0x75, 0x2, 0x8000)
socket(0x15, 0x5, 0x0)
arch_prctl$auto(0x3, 0x1)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8)

1.120030338s ago: executing program 3 (id=374):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0xc00, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0xa, 0x8, 0x4008, @inferred, &(0x7f0000000180)={@inferred, 0xc55, 0x1, 0x9, "c6748c4b2e608a932fc1397851147ff7061797e8272d3a5557b5f87c7e8f2aba3518525a24cfb7fccd710536", @raw=0xd}, "b7e1ffdbf3bee034affd69a9fd3ee63cb2ebdb0e9c80178f679ed7d5cb320be4084bcac9f967e9ad782296c9d369e3a70244"}) (fail_nth: 7)

1.050751251s ago: executing program 1 (id=375):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x60020000)
getcwd$auto(0x0, 0xffffffffffffffff)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x84, 0x80000}, 0x283)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x1, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = timerfd_create$auto(0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0)
getxattrat$auto(r3, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000003c0)='\x00\xa3B\x9f!\'\xb5\xd8\x7f\xedP\x93S\x8d0\xbe\x80F\x8e\x9d\x97\xea>O\xa0\r\x1d\x15\xd6\xa96\xb3\x0e\xfdf\x14a\x06\x11\xa9r\xad\xe2\x1a\x83/\xa4\x06z\xbf\x88n\xdc\xca\xf3%\xba\x8d\xe7\x17\xccZ\x19Xb\xcf\x1e\x18\xd9\xae\"\xb0\x04=cX\x94\xd3wn\x15\x96[\xc9\xe4B\x99\xf3\xb9\x82-\xad}h\x10o\xec\x05\xe8P_\xa3\xab)\x7f\x97\rS\a\x7f\x97Qt{4C\xe5f\xdc\xe4P\xdb:\xaf\xc5FV s~=\xc9\xda\xbd\xda\x1f\xa9\xda\xd8\x96\x13Hbu\xb5+\"\x94X~\x85\xbf\xc6\xc4\xfcak\x8b\x06UB\xc7R|\x94~.\x90\x8d\xa9d<m\xf6Av\xe2\xd4P\':g\x1a\xc0\'c\x865\xc9J\xfc\v\x88\xdc\xd9p\x91\x88[\xf0y{E\xa0\x84`\x8b\x86R\x1eF\xba\xb7\\\xa67\xd7\xfb\xc9', &(0x7f00000001c0)={0x0, 0xa50, 0x10004}, 0x2000000001000)
unshare$auto(0x40000080)

451.697968ms ago: executing program 2 (id=376):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x60020000)
getcwd$auto(0x0, 0xffffffffffffffff)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x84, 0x80000}, 0x283)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x1, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000003c0)='\x00\xa3B\x9f!\'\xb5\xd8\x7f\xedP\x93S\x8d0\xbe\x80F\x8e\x9d\x97\xea>O\xa0\r\x1d\x15\xd6\xa96\xb3\x0e\xfdf\x14a\x06\x11\xa9r\xad\xe2\x1a\x83/\xa4\x06z\xbf\x88n\xdc\xca\xf3%\xba\x8d\xe7\x17\xccZ\x19Xb\xcf\x1e\x18\xd9\xae\"\xb0\x04=cX\x94\xd3wn\x15\x96[\xc9\xe4B\x99\xf3\xb9\x82-\xad}h\x10o\xec\x05\xe8P_\xa3\xab)\x7f\x97\rS\a\x7f\x97Qt{4C\xe5f\xdc\xe4P\xdb:\xaf\xc5FV s~=\xc9\xda\xbd\xda\x1f\xa9\xda\xd8\x96\x13Hbu\xb5+\"\x94X~\x85\xbf\xc6\xc4\xfcak\x8b\x06UB\xc7R|\x94~.\x90\x8d\xa9d<m\xf6Av\xe2\xd4P\':g\x1a\xc0\'c\x865\xc9J\xfc\v\x88\xdc\xd9p\x91\x88[\xf0y{E\xa0\x84`\x8b\x86R\x1eF\xba\xb7\\\xa67\xd7\xfb\xc9', &(0x7f00000001c0)={0x0, 0xa50, 0x10004}, 0x2000000001000)

396.082211ms ago: executing program 3 (id=377):
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x9, 0x0, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
ioctl$auto_USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0xffffffff)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
r2 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000002940)="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", 0x102)
ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={<r4=>r3, 0x80000001, 0x3763, 0x3ac3})
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2)
sendmsg$auto_NL802154_CMD_ABORT_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006001}, 0x4001)
epoll_create1$auto(0xa413)
mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="6e0d496984baaf8efe21def205079b16d8e4773c9b3dbd677702e8f7eb78892978bbf3cd1f92a801d23b6a24971bd0755fd7a445333bd5f5854eaba29dad54b54e62ba9138977ff2be6b39505a76545ba4a519", @ANYRES16=r1, @ANYBLOB="00012abd7000ffff00001c000000080003009b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getcwd$auto(0x0, 0xffffffffffffffff)
r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
ioctl$auto(r7, 0xc0305602, r6)
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc)

303.001332ms ago: executing program 0 (id=378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, r0, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x103040, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280100000af975dcce9ec3a4a38ab1cd9398fe6b208ae3874f87208d94725fa9ed271417bf5d5ee685bbba7a55f959a2060000000000009e24cd487f1eead03edd15cbfbfa0306b1e0d9cd2f366891de9cafd1e64f", @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x24040071}, 0x800)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffffb}, 0x1)
r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sendfile$auto(r4, r4, 0x0, 0x1)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r5, 0xffff, 0x29}, 0x3, 0x8)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f00000000c0)='\t', 0x1)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x8, 0x8021, 0x15)
mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, r0, 0x9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
clone$auto(0x9004, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5)
creat$auto(&(0x7f0000000040)='./file0\x00', 0x7)

0s ago: executing program 1 (id=379):
mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
eventfd$auto(0x4)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x1)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0)
mkdir$auto(&(0x7f0000000000)='#(//\x00', 0x353)
unlink$auto(&(0x7f00000000c0)='#(//\x00')
close_range$auto(0x2, 0x8, 0x0)
socket(0x22, 0x2, 0xffffffff)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts.
[   99.497307][ T5819] cgroup: Unknown subsys name 'net'
[   99.632190][ T5819] cgroup: Unknown subsys name 'cpuset'
[   99.643310][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  101.492156][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  103.349731][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  103.366500][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  103.374333][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  103.386056][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  103.395913][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  103.536376][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.544822][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.552929][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.561161][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.569192][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.608505][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.617717][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.627879][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.639932][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.648292][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.658444][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.666477][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.680161][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.703331][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.711846][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.976390][ T5831] chnl_net:caif_netlink_parms(): no params data found
[  104.190964][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.198645][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.206500][ T5831] bridge_slave_0: entered allmulticast mode
[  104.213903][ T5831] bridge_slave_0: entered promiscuous mode
[  104.233923][ T5837] chnl_net:caif_netlink_parms(): no params data found
[  104.252814][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.260124][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.267386][ T5831] bridge_slave_1: entered allmulticast mode
[  104.274746][ T5831] bridge_slave_1: entered promiscuous mode
[  104.379063][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.429359][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.505903][ T5840] chnl_net:caif_netlink_parms(): no params data found
[  104.522037][ T5831] team0: Port device team_slave_0 added
[  104.567653][ T5831] team0: Port device team_slave_1 added
[  104.573463][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.580708][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.588150][ T5837] bridge_slave_0: entered allmulticast mode
[  104.595408][ T5837] bridge_slave_0: entered promiscuous mode
[  104.603412][ T5839] chnl_net:caif_netlink_parms(): no params data found
[  104.639142][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.647290][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.654770][ T5837] bridge_slave_1: entered allmulticast mode
[  104.657879][   T43] cfg80211: failed to load regulatory.db
[  104.666046][ T5837] bridge_slave_1: entered promiscuous mode
[  104.699676][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.706748][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.732714][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.788649][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.795720][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.821910][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.846642][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.880353][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.954301][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.961544][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.968816][ T5840] bridge_slave_0: entered allmulticast mode
[  104.976627][ T5840] bridge_slave_0: entered promiscuous mode
[  105.008832][ T5837] team0: Port device team_slave_0 added
[  105.014692][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.022187][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.030137][ T5840] bridge_slave_1: entered allmulticast mode
[  105.037528][ T5840] bridge_slave_1: entered promiscuous mode
[  105.068847][ T5837] team0: Port device team_slave_1 added
[  105.091166][ T5831] hsr_slave_0: entered promiscuous mode
[  105.097751][ T5831] hsr_slave_1: entered promiscuous mode
[  105.104421][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.112396][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.119678][ T5839] bridge_slave_0: entered allmulticast mode
[  105.132651][ T5839] bridge_slave_0: entered promiscuous mode
[  105.168440][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.177838][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.185035][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.192742][ T5839] bridge_slave_1: entered allmulticast mode
[  105.200627][ T5839] bridge_slave_1: entered promiscuous mode
[  105.222299][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.253771][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.261001][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.287827][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.331074][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.338187][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.364138][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.388576][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.419062][ T5840] team0: Port device team_slave_0 added
[  105.428867][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.447363][ T5841] Bluetooth: hci0: command tx timeout
[  105.449371][ T5840] team0: Port device team_slave_1 added
[  105.544647][ T5839] team0: Port device team_slave_0 added
[  105.566111][ T5837] hsr_slave_0: entered promiscuous mode
[  105.572599][ T5837] hsr_slave_1: entered promiscuous mode
[  105.578977][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[  105.584799][ T5837] Cannot create hsr debugfs directory
[  105.591134][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.598142][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.625137][ T5841] Bluetooth: hci1: command tx timeout
[  105.630732][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.644200][ T5839] team0: Port device team_slave_1 added
[  105.665030][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.672062][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.698008][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.766213][ T5841] Bluetooth: hci2: command tx timeout
[  105.766227][   T52] Bluetooth: hci3: command tx timeout
[  105.778733][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.786167][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.812613][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.826244][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.833209][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.859152][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.937519][ T5840] hsr_slave_0: entered promiscuous mode
[  105.943907][ T5840] hsr_slave_1: entered promiscuous mode
[  105.950332][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[  105.956205][ T5840] Cannot create hsr debugfs directory
[  106.063516][ T5839] hsr_slave_0: entered promiscuous mode
[  106.070023][ T5839] hsr_slave_1: entered promiscuous mode
[  106.076492][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[  106.082235][ T5839] Cannot create hsr debugfs directory
[  106.300204][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  106.328692][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  106.341799][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  106.386509][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  106.522989][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.559136][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.592271][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.603767][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.650144][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.662733][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.675076][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.688136][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.797939][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.810247][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.824211][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.846327][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.952873][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.020296][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[  107.032268][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.057123][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.071511][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.078802][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.109817][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.116963][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.149131][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  107.171907][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[  107.203454][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.210594][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.234115][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.241264][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.262280][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.269449][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.289620][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.299503][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.306665][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.375069][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[  107.413691][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.420891][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.432069][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.439211][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.528062][ T5841] Bluetooth: hci0: command tx timeout
[  107.690901][ T5841] Bluetooth: hci1: command tx timeout
[  107.848990][ T5841] Bluetooth: hci2: command tx timeout
[  107.849076][   T52] Bluetooth: hci3: command tx timeout
[  107.954532][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.999823][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.101084][ T5831] veth0_vlan: entered promiscuous mode
[  108.145046][ T5831] veth1_vlan: entered promiscuous mode
[  108.189931][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.225352][ T5837] veth0_vlan: entered promiscuous mode
[  108.267742][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.275296][ T5837] veth1_vlan: entered promiscuous mode
[  108.287687][ T5831] veth0_macvtap: entered promiscuous mode
[  108.318979][ T5831] veth1_macvtap: entered promiscuous mode
[  108.360565][ T5839] veth0_vlan: entered promiscuous mode
[  108.388809][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.408955][ T5839] veth1_vlan: entered promiscuous mode
[  108.422270][ T5837] veth0_macvtap: entered promiscuous mode
[  108.432833][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.467325][ T5837] veth1_macvtap: entered promiscuous mode
[  108.475291][ T1529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.487990][ T5840] veth0_vlan: entered promiscuous mode
[  108.500601][ T1529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.509690][ T1529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.522487][ T1529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.555856][ T5840] veth1_vlan: entered promiscuous mode
[  108.564613][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.587661][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.621558][ T3772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.630663][ T3772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.653757][ T5839] veth0_macvtap: entered promiscuous mode
[  108.670277][ T3772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.679789][ T3772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.701590][ T5839] veth1_macvtap: entered promiscuous mode
[  108.760450][ T1795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.782427][ T1795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.794309][ T5840] veth0_macvtap: entered promiscuous mode
[  108.814092][ T5840] veth1_macvtap: entered promiscuous mode
[  108.841800][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.883074][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.891275][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.903880][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.936204][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.974720][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.994925][ T1795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.007540][ T1529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.016673][ T1529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.037721][ T1795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.046776][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  109.076603][ T1795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.116383][ T1795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.179054][ T1795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.201035][ T1795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.216145][ T1795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.224922][ T1795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.242697][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.268597][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.356030][ T1529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.379073][ T1529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.466168][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.494316][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.551036][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.583970][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.605820][   T52] Bluetooth: hci0: command tx timeout
[  109.628211][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.631365][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.636512][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.775702][   T52] Bluetooth: hci1: command tx timeout
[  109.927724][   T52] Bluetooth: hci2: command tx timeout
[  109.927734][ T5841] Bluetooth: hci3: command tx timeout
[  110.167813][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[  110.202456][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.142669][ T5941] netlink: 'syz.1.7': attribute type 33 has an invalid length.
[  111.401809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.447753][ T5947] Zero length message leads to an empty skb
[  111.686236][   T52] Bluetooth: hci0: command tx timeout
[  111.846290][   T52] Bluetooth: hci1: command tx timeout
[  112.006575][   T52] Bluetooth: hci3: command tx timeout
[  112.006844][ T5841] Bluetooth: hci2: command tx timeout
[  112.369029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.378149][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.543880][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.629618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  112.646124][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.654419][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.676261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.686505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.696405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.530358][ T6030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  116.092098][ T6038] netlink: 'syz.3.24': attribute type 33 has an invalid length.
[  116.208022][ T6043] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.22' sets config #-1
[  116.452043][ T6043] FAULT_INJECTION: forcing a failure.
[  116.452043][ T6043] name failslab, interval 1, probability 0, space 0, times 1
[  116.534584][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) 
[  116.534630][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.534656][ T6043] Call Trace:
[  116.534675][ T6043]  <TASK>
[  116.534687][ T6043]  dump_stack_lvl+0x16c/0x1f0
[  116.534819][ T6043]  should_fail_ex+0x512/0x640
[  116.534861][ T6043]  ? __kmalloc_node_track_caller_noprof+0xcb/0x930
[  116.534926][ T6043]  should_failslab+0xc2/0x120
[  116.534976][ T6043]  __kmalloc_node_track_caller_noprof+0xec/0x930
[  116.535042][ T6043]  ? key_alloc+0x43e/0x1330
[  116.535079][ T6043]  ? kmem_cache_alloc_noprof+0x2af/0x770
[  116.535124][ T6043]  ? kmemdup_noprof+0x29/0x60
[  116.535160][ T6043]  kmemdup_noprof+0x29/0x60
[  116.535199][ T6043]  key_alloc+0x43e/0x1330
[  116.535253][ T6043]  ? __pfx_key_alloc+0x10/0x10
[  116.535297][ T6043]  ? apparmor_cred_prepare+0x173/0x370
[  116.535334][ T6043]  keyring_alloc+0x44/0xc0
[  116.535383][ T6043]  lookup_user_key+0xc51/0x1300
[  116.535426][ T6043]  ? __pfx_lookup_user_key+0x10/0x10
[  116.535462][ T6043]  ? find_held_lock+0x2b/0x80
[  116.535517][ T6043]  ? setid_policy_lookup+0x10c/0x350
[  116.535567][ T6043]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  116.535614][ T6043]  ? bpf_lsm_capable+0x9/0x10
[  116.535656][ T6043]  ? security_capable+0x7e/0x260
[  116.535714][ T6043]  keyctl_get_persistent+0x1a5/0x8c0
[  116.535759][ T6043]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  116.535809][ T6043]  ? __x64_sys_futex+0x1e0/0x4c0
[  116.535843][ T6043]  ? __x64_sys_futex+0x1e9/0x4c0
[  116.535882][ T6043]  ? fput+0x70/0xf0
[  116.535915][ T6043]  ? xfd_validate_state+0x61/0x180
[  116.535944][ T6043]  ? __pfx_ksys_write+0x10/0x10
[  116.535996][ T6043]  __do_sys_keyctl+0x1a9/0x590
[  116.536032][ T6043]  do_syscall_64+0xcd/0xf80
[  116.536096][ T6043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.536129][ T6043] RIP: 0033:0x7f74c898f7c9
[  116.536163][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.536194][ T6043] RSP: 002b:00007f74c987d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  116.536234][ T6043] RAX: ffffffffffffffda RBX: 00007f74c8be5fa0 RCX: 00007f74c898f7c9
[  116.536255][ T6043] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016
[  116.536275][ T6043] RBP: 00007f74c8a13f91 R08: 000000000000000c R09: 0000000000000000
[  116.536294][ T6043] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000
[  116.536314][ T6043] R13: 00007f74c8be6038 R14: 00007f74c8be5fa0 R15: 00007fff1d59a5b8
[  116.536357][ T6043]  </TASK>
[  117.324672][ T6059] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  117.605895][ T6071] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET)
[  117.705730][ T6052] syz.1.26 (6052): attempted to duplicate a private mapping with mremap.  This is not supported.
[  117.936448][ T6076] mkiss: ax0: crc mode is auto.
[  118.098274][ T6079] netlink: 330 bytes leftover after parsing attributes in process `syz.2.30'.
[  118.156955][ T6069] netlink: 'syz.0.28': attribute type 33 has an invalid length.
[  118.259336][ T6079] mac80211_hwsim hwsim4 ›: renamed from wlan0 (while UP)
[  118.541811][ T6085] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.31' sets config #-1
[  118.689213][ T6085] FAULT_INJECTION: forcing a failure.
[  118.689213][ T6085] name failslab, interval 1, probability 0, space 0, times 0
[  118.726475][ T6085] CPU: 1 UID: 0 PID: 6085 Comm: syz.1.31 Not tainted syzkaller #0 PREEMPT(full) 
[  118.726517][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.726536][ T6085] Call Trace:
[  118.726556][ T6085]  <TASK>
[  118.726568][ T6085]  dump_stack_lvl+0x16c/0x1f0
[  118.726621][ T6085]  should_fail_ex+0x512/0x640
[  118.726655][ T6085]  ? kmem_cache_alloc_noprof+0x62/0x770
[  118.726697][ T6085]  should_failslab+0xc2/0x120
[  118.726744][ T6085]  kmem_cache_alloc_noprof+0x83/0x770
[  118.726782][ T6085]  ? key_alloc+0xbef/0x1330
[  118.726846][ T6085]  ? key_alloc+0xbef/0x1330
[  118.726882][ T6085]  key_alloc+0xbef/0x1330
[  118.726937][ T6085]  ? __pfx_key_alloc+0x10/0x10
[  118.726975][ T6085]  ? __asan_memcpy+0x3c/0x60
[  118.727025][ T6085]  keyring_alloc+0x44/0xc0
[  118.727081][ T6085]  keyctl_get_persistent+0x750/0x8c0
[  118.727131][ T6085]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  118.727188][ T6085]  ? __x64_sys_futex+0x1e0/0x4c0
[  118.727224][ T6085]  ? __x64_sys_futex+0x1e9/0x4c0
[  118.727275][ T6085]  ? xfd_validate_state+0x61/0x180
[  118.727302][ T6085]  ? __pfx_ksys_write+0x10/0x10
[  118.727368][ T6085]  __do_sys_keyctl+0x1a9/0x590
[  118.727404][ T6085]  do_syscall_64+0xcd/0xf80
[  118.727455][ T6085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.727487][ T6085] RIP: 0033:0x7f9d1f98f7c9
[  118.727511][ T6085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.727542][ T6085] RSP: 002b:00007f9d20876038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  118.727572][ T6085] RAX: ffffffffffffffda RBX: 00007f9d1fbe5fa0 RCX: 00007f9d1f98f7c9
[  118.727600][ T6085] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016
[  118.727632][ T6085] RBP: 00007f9d1fa13f91 R08: 000000000000000c R09: 0000000000000000
[  118.727650][ T6085] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000
[  118.727667][ T6085] R13: 00007f9d1fbe6038 R14: 00007f9d1fbe5fa0 R15: 00007ffc6c9acff8
[  118.727709][ T6085]  </TASK>
[  119.221101][ T6092] UHID_CREATE from different security context by process 27 (syz.1.34), this is not allowed.
[  119.273535][ T6092] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)

syzkaller
syzkaller login: [  120.491214][ T6111] netlink: 504 bytes leftover after parsing attributes in process `syz.1.38'.
[  120.518056][ T6111] netlink: 350 bytes leftover after parsing attributes in process `syz.1.38'.
[  121.225114][ T6118] mmap: syz.0.39 (6118) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  121.716741][ T6132] netlink: 'syz.1.42': attribute type 33 has an invalid length.
[  123.837458][ T6182] device-mapper: ioctl: device name cannot contain '/'
[  125.006300][ T6194] netlink: 186 bytes leftover after parsing attributes in process `syz.2.51'.
[  129.458242][ T6251] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  129.479829][ T6254] binder: 6248:6254 ioctl 4018620d 9 returned -22
[  130.144034][ T6254] FAULT_INJECTION: forcing a failure.
[  130.144034][ T6254] name failslab, interval 1, probability 0, space 0, times 0
[  130.183361][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) 
[  130.183397][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.183414][ T6254] Call Trace:
[  130.183422][ T6254]  <TASK>
[  130.183432][ T6254]  dump_stack_lvl+0x16c/0x1f0
[  130.183479][ T6254]  should_fail_ex+0x512/0x640
[  130.183508][ T6254]  ? __kmalloc_noprof+0xca/0x910
[  130.183541][ T6254]  should_failslab+0xc2/0x120
[  130.183582][ T6254]  __kmalloc_noprof+0xeb/0x910
[  130.183613][ T6254]  ? memcg_list_lru_alloc+0x4e9/0x740
[  130.183652][ T6254]  ? memcg_list_lru_alloc+0x4e9/0x740
[  130.183682][ T6254]  memcg_list_lru_alloc+0x4e9/0x740
[  130.183724][ T6254]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  130.183765][ T6254]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  130.183806][ T6254]  __memcg_slab_post_alloc_hook+0x133/0x880
[  130.183858][ T6254]  ? kasan_save_track+0x14/0x30
[  130.183899][ T6254]  kmem_cache_alloc_lru_noprof+0x58f/0x770
[  130.183935][ T6254]  ? alloc_inode+0xc3/0x240
[  130.183970][ T6254]  ? alloc_inode+0xc3/0x240
[  130.183998][ T6254]  alloc_inode+0xc3/0x240
[  130.184029][ T6254]  path_from_stashed+0x25b/0x750
[  130.184081][ T6254]  ns_get_path+0x60/0x80
[  130.184123][ T6254]  proc_ns_get_link+0x121/0x230
[  130.184163][ T6254]  ? __pfx_proc_ns_get_link+0x10/0x10
[  130.184198][ T6254]  ? atime_needs_update+0x8b/0x710
[  130.184235][ T6254]  pick_link+0xc96/0x13b0
[  130.184269][ T6254]  ? __pfx_proc_ns_get_link+0x10/0x10
[  130.184305][ T6254]  step_into_slowpath+0x6c6/0xf50
[  130.184348][ T6254]  ? __pfx_step_into_slowpath+0x10/0x10
[  130.184383][ T6254]  ? find_held_lock+0x2b/0x80
[  130.184431][ T6254]  path_openat+0x10db/0x3140
[  130.184499][ T6254]  ? __pfx_path_openat+0x10/0x10
[  130.184555][ T6254]  do_filp_open+0x20b/0x470
[  130.184598][ T6254]  ? __pfx_do_filp_open+0x10/0x10
[  130.184667][ T6254]  ? alloc_fd+0x471/0x7d0
[  130.184716][ T6254]  do_sys_openat2+0x121/0x290
[  130.184746][ T6254]  ? __pfx_do_sys_openat2+0x10/0x10
[  130.184791][ T6254]  __x64_sys_openat+0x174/0x210
[  130.184823][ T6254]  ? __pfx___x64_sys_openat+0x10/0x10
[  130.184857][ T6254]  ? syscall_user_dispatch+0x78/0x140
[  130.184902][ T6254]  do_syscall_64+0xcd/0xf80
[  130.184948][ T6254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.184975][ T6254] RIP: 0033:0x7ff8c5b8e010
[  130.184997][ T6254] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  130.185023][ T6254] RSP: 002b:00007ff8c69c9f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  130.185049][ T6254] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff8c5b8e010
[  130.185066][ T6254] RDX: 0000000000000002 RSI: 00007ff8c69c9fa0 RDI: 00000000ffffff9c
[  130.185081][ T6254] RBP: 00007ff8c69c9fa0 R08: 0000000000000000 R09: 0000000000000000
[  130.185096][ T6254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  130.185111][ T6254] R13: 00007ff8c5de6128 R14: 00007ff8c5de6090 R15: 00007ffe5b9abbe8
[  130.185147][ T6254]  </TASK>
[  131.378266][ T6284] __vm_enough_memory: pid: 6284, comm: syz.0.66, bytes: 8589938688 not enough memory for the allocation
[  132.878178][ T6311] nvme_fcloop: unknown parameter or missing value ''
[  134.180535][ T6334] FAULT_INJECTION: forcing a failure.
[  134.180535][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  134.195908][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) 
[  134.195944][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.195962][ T6334] Call Trace:
[  134.195972][ T6334]  <TASK>
[  134.195982][ T6334]  dump_stack_lvl+0x16c/0x1f0
[  134.196033][ T6334]  should_fail_ex+0x512/0x640
[  134.196071][ T6334]  _copy_to_user+0x32/0xd0
[  134.196107][ T6334]  simple_read_from_buffer+0xcb/0x170
[  134.196153][ T6334]  proc_fail_nth_read+0x197/0x240
[  134.196217][ T6334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.196271][ T6334]  ? rw_verify_area+0xcf/0x6c0
[  134.196309][ T6334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.196360][ T6334]  vfs_read+0x1e4/0xcf0
[  134.196404][ T6334]  ? __pfx___mutex_lock+0x10/0x10
[  134.196463][ T6334]  ? __pfx_vfs_read+0x10/0x10
[  134.196517][ T6334]  ? __fget_files+0x20e/0x3c0
[  134.196572][ T6334]  ksys_read+0x12a/0x250
[  134.196613][ T6334]  ? __pfx_ksys_read+0x10/0x10
[  134.196669][ T6334]  do_syscall_64+0xcd/0xf80
[  134.196716][ T6334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.196747][ T6334] RIP: 0033:0x7ff8c5b8e1dc
[  134.196770][ T6334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  134.196803][ T6334] RSP: 002b:00007ff8c69eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  134.196838][ T6334] RAX: ffffffffffffffda RBX: 00007ff8c5de5fa0 RCX: 00007ff8c5b8e1dc
[  134.196857][ T6334] RDX: 000000000000000f RSI: 00007ff8c69eb0a0 RDI: 0000000000000004
[  134.196874][ T6334] RBP: 00007ff8c69eb090 R08: 0000000000000000 R09: 0000000000000000
[  134.196891][ T6334] R10: 000000008000000b R11: 0000000000000246 R12: 0000000000000001
[  134.196912][ T6334] R13: 00007ff8c5de6038 R14: 00007ff8c5de5fa0 R15: 00007ffe5b9abbe8
[  134.196954][ T6334]  </TASK>
[  135.062812][ T6348] FAULT_INJECTION: forcing a failure.
[  135.062812][ T6348] name fail_futex, interval 1, probability 0, space 0, times 1
[  135.075886][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) 
[  135.075913][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  135.075926][ T6348] Call Trace:
[  135.075934][ T6348]  <TASK>
[  135.075942][ T6348]  dump_stack_lvl+0x16c/0x1f0
[  135.075980][ T6348]  should_fail_ex+0x512/0x640
[  135.076009][ T6348]  get_futex_key+0x1d0/0x15f0
[  135.076036][ T6348]  ? __pfx_get_futex_key+0x10/0x10
[  135.076069][ T6348]  futex_wake+0xea/0x530
[  135.076096][ T6348]  ? futex_wait+0x120/0x380
[  135.076128][ T6348]  ? __pfx_futex_wake+0x10/0x10
[  135.076156][ T6348]  ? __lock_acquire+0x436/0x2890
[  135.076181][ T6348]  ? __lock_acquire+0x436/0x2890
[  135.076207][ T6348]  do_futex+0x1e3/0x350
[  135.076232][ T6348]  ? __pfx_do_futex+0x10/0x10
[  135.076265][ T6348]  ? __fget_files+0x204/0x3c0
[  135.076304][ T6348]  __x64_sys_futex+0x1e0/0x4c0
[  135.076333][ T6348]  ? __pfx___x64_sys_futex+0x10/0x10
[  135.076359][ T6348]  ? __sys_setsockopt+0x140/0x1a0
[  135.076399][ T6348]  do_syscall_64+0xcd/0xf80
[  135.076434][ T6348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.076457][ T6348] RIP: 0033:0x7ff8c5b8f7c9
[  135.076474][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.076495][ T6348] RSP: 002b:00007ff8c69ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  135.076515][ T6348] RAX: ffffffffffffffda RBX: 00007ff8c5de6098 RCX: 00007ff8c5b8f7c9
[  135.076530][ T6348] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8c5de609c
[  135.076543][ T6348] RBP: 00007ff8c5de6090 R08: 00007ff8c69ec000 R09: 0000000000000000
[  135.076556][ T6348] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  135.076569][ T6348] R13: 00007ff8c5de6128 R14: 00007ffe5b9abb00 R15: 00007ffe5b9abbe8
[  135.076598][ T6348]  </TASK>
[  137.572843][ T6410] sp0: Synchronizing with TNC
[  137.710284][ T6420] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  143.266726][ T6539] futex_wake_op: syz.2.105 tries to shift op by -2048; fix this program
[  143.325741][ T6539] futex_wake_op: syz.2.105 tries to shift op by -2048; fix this program
[  144.305639][   T30] audit: type=1800 audit(1765969591.627:2): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.110" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  145.506303][ T6585] binder: 6580:6585 ioctl c0306201 2000000000c0 returned -14
[  145.570318][ T6583] binder: 6580:6583 ioctl c0306201 2000000000c0 returned -14
[  145.611188][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  145.626912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  146.399746][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'.
[  148.965871][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'.
[  152.095331][ T6726] binder: 6725:6726 ioctl c0306201 0 returned -14
[  152.136381][ T6726] capability: warning: `syz.2.131' uses deprecated v2 capabilities in a way that may be insecure
[  152.260719][ T6729] binder: 6725:6729 ioctl 8936 91 returned -22
[  152.491932][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[  154.359028][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[  154.465329][ T6785] openvswitch: netlink: Flow key attribute not present in set flow.
[  154.713734][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[  158.448466][ T6872] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.154' sets config #-1
[  158.562257][ T6872] FAULT_INJECTION: forcing a failure.
[  158.562257][ T6872] name failslab, interval 1, probability 0, space 0, times 0
[  158.577108][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) 
[  158.577135][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  158.577147][ T6872] Call Trace:
[  158.577153][ T6872]  <TASK>
[  158.577161][ T6872]  dump_stack_lvl+0x16c/0x1f0
[  158.577217][ T6872]  should_fail_ex+0x512/0x640
[  158.577241][ T6872]  ? kmem_cache_alloc_noprof+0x62/0x770
[  158.577272][ T6872]  should_failslab+0xc2/0x120
[  158.577303][ T6872]  kmem_cache_alloc_noprof+0x83/0x770
[  158.577326][ T6872]  ? keyring_get_key_chunk+0x22d/0x280
[  158.577353][ T6872]  ? key_alloc+0xbef/0x1330
[  158.577381][ T6872]  ? key_alloc+0xbef/0x1330
[  158.577403][ T6872]  key_alloc+0xbef/0x1330
[  158.577435][ T6872]  ? __pfx_key_alloc+0x10/0x10
[  158.577466][ T6872]  keyring_alloc+0x44/0xc0
[  158.577495][ T6872]  keyctl_get_persistent+0x6a8/0x8c0
[  158.577525][ T6872]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  158.577555][ T6872]  ? __x64_sys_futex+0x1e0/0x4c0
[  158.577578][ T6872]  ? __x64_sys_futex+0x1e9/0x4c0
[  158.577604][ T6872]  ? xfd_validate_state+0x61/0x180
[  158.577621][ T6872]  ? __pfx_ksys_write+0x10/0x10
[  158.577661][ T6872]  __do_sys_keyctl+0x1a9/0x590
[  158.577682][ T6872]  do_syscall_64+0xcd/0xf80
[  158.577724][ T6872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.577744][ T6872] RIP: 0033:0x7ff8c5b8f7c9
[  158.577759][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.577781][ T6872] RSP: 002b:00007ff8c69eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  158.577799][ T6872] RAX: ffffffffffffffda RBX: 00007ff8c5de5fa0 RCX: 00007ff8c5b8f7c9
[  158.577812][ T6872] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016
[  158.577824][ T6872] RBP: 00007ff8c5c13f91 R08: 000000000000000c R09: 0000000000000000
[  158.577835][ T6872] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000
[  158.577847][ T6872] R13: 00007ff8c5de6038 R14: 00007ff8c5de5fa0 R15: 00007ffe5b9abbe8
[  158.577901][ T6872]  </TASK>
[  161.266549][ T6923] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  161.554823][ T6412] Bluetooth: hci1: SCO packet for unknown connection handle 0
[  161.900711][ T6926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  162.490758][ T6943] netlink: 330 bytes leftover after parsing attributes in process `syz.3.168'.

syzkaller
syzkaller login: [  164.426374][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[  164.993533][ T7014] netlink: 'syz.0.180': attribute type 21 has an invalid length.
[  165.034823][ T7014] netlink: 326 bytes leftover after parsing attributes in process `syz.0.180'.
[  166.559994][ T6412] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11
[  167.971855][ T7076] netlink: 'syz.1.190': attribute type 33 has an invalid length.
[  172.086878][ T7122] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  174.229284][ T6412] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  175.576811][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[  176.078457][ T7189] nfs: Bad value for 'source'
[  177.455740][ T7217] netlink: 'syz.1.212': attribute type 33 has an invalid length.
[  178.292322][ T7236] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  178.506398][ T6463] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  178.516895][ T6463] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  178.526608][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  178.526651][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  178.526672][ T6463] Workqueue: hci0 hci_rx_work
[  178.526749][ T6463] Call Trace:
[  178.526761][ T6463]  <TASK>
[  178.526774][ T6463]  dump_stack_lvl+0x16c/0x1f0
[  178.526837][ T6463]  sysfs_warn_dup+0x7f/0xa0
[  178.526892][ T6463]  sysfs_create_dir_ns+0x24b/0x2b0
[  178.526928][ T6463]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  178.526960][ T6463]  ? find_held_lock+0x2b/0x80
[  178.527010][ T6463]  ? do_raw_spin_unlock+0x172/0x230
[  178.527052][ T6463]  kobject_add_internal+0x2c4/0x9d0
[  178.527097][ T6463]  kobject_add+0x16e/0x240
[  178.527127][ T6463]  ? __pfx_kobject_add+0x10/0x10
[  178.527164][ T6463]  ? kobject_put+0xaf/0x6f0
[  178.527211][ T6463]  ? _raw_spin_unlock+0x28/0x50
[  178.527283][ T6463]  device_add+0x288/0x1980
[  178.527342][ T6463]  ? __pfx_dev_set_name+0x10/0x10
[  178.527396][ T6463]  ? __pfx_device_add+0x10/0x10
[  178.527441][ T6463]  ? mgmt_send_event_skb+0x2fb/0x460
[  178.527508][ T6463]  hci_conn_add_sysfs+0x1a8/0x260
[  178.527567][ T6463]  le_conn_complete_evt+0x11ed/0x1fa0
[  178.527625][ T6463]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  178.527665][ T6463]  ? __pfx_bt_warn+0x10/0x10
[  178.527712][ T6463]  hci_le_conn_complete_evt+0x23c/0x3a0
[  178.527765][ T6463]  hci_le_meta_evt+0x357/0x610
[  178.527815][ T6463]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  178.527864][ T6463]  hci_event_packet+0x685/0x1210
[  178.527907][ T6463]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  178.527960][ T6463]  ? __pfx_hci_event_packet+0x10/0x10
[  178.528007][ T6463]  ? kcov_remote_start+0x399/0x680
[  178.528064][ T6463]  ? lockdep_hardirqs_on+0x7c/0x110
[  178.528133][ T6463]  hci_rx_work+0x2c9/0x1020
[  178.528180][ T6463]  process_one_work+0x9ba/0x1b20
[  178.528242][ T6463]  ? __pfx_process_one_work+0x10/0x10
[  178.528291][ T6463]  ? assign_work+0x1a0/0x250
[  178.528325][ T6463]  worker_thread+0x6c8/0xf10
[  178.528369][ T6463]  ? __kthread_parkme+0x19e/0x250
[  178.528433][ T6463]  ? __pfx_worker_thread+0x10/0x10
[  178.528467][ T6463]  kthread+0x3c5/0x780
[  178.528498][ T6463]  ? __pfx_kthread+0x10/0x10
[  178.528532][ T6463]  ? rcu_is_watching+0x12/0xc0
[  178.528575][ T6463]  ? __pfx_kthread+0x10/0x10
[  178.528618][ T6463]  ret_from_fork+0x983/0xb10
[  178.528652][ T6463]  ? __pfx_ret_from_fork+0x10/0x10
[  178.528686][ T6463]  ? __switch_to+0x7af/0x10d0
[  178.528726][ T6463]  ? __pfx_kthread+0x10/0x10
[  178.528763][ T6463]  ret_from_fork_asm+0x1a/0x30
[  178.528831][ T6463]  </TASK>
[  178.528869][ T6463] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  178.843803][ T6463] Bluetooth: hci0: failed to register connection device
[  180.052940][ T7279] netlink: 'syz.0.224': attribute type 33 has an invalid length.
[  181.358197][ T7311] capability: warning: `syz.0.225' uses 32-bit capabilities (legacy support in use)
[  181.517206][ T7312] syz.3.227 (7312): drop_caches: 0
[  181.681920][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'.
[  181.745567][ T7310] mkiss: ax0: crc mode is auto.
[  181.839386][ T7316] zswap: compressor  not available
[  185.256569][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'.
[  185.313275][ T7394] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[  185.341678][ T7394] netlink: 13 bytes leftover after parsing attributes in process `syz.3.247'.
[  186.477183][ T7425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  187.122210][ T7428] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  187.256152][ T7433] zswap: compressor  not available
[  189.455292][ T7471] hub 1-0:1.0: USB hub found
[  189.475322][ T7471] hub 1-0:1.0: 1 port detected
[  189.672786][ T7496] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  189.679875][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  189.780203][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  189.836878][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  189.884134][ T7496] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  189.949259][ T7496] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  189.959437][ T7496] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  189.997234][ T7496] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  190.049139][ T7496] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  190.081256][ T7496] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  190.107506][ T7496] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  190.110003][ T7496] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  190.113255][ T7496] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  190.125879][ T7496] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  191.046229][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.015567][ T6412] Bluetooth: hci1: command 0x0c1a tx timeout
[  192.085559][ T6412] Bluetooth: hci2: command 0x0c1a tx timeout
[  192.175932][ T6412] Bluetooth: hci3: command 0x0c1a tx timeout
[  192.949467][ T7591] nbd: must specify a size in bytes for the device
[  192.985960][ T7597] FAULT_INJECTION: forcing a failure.
[  192.985960][ T7597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.039634][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.3.294 Not tainted syzkaller #0 PREEMPT(full) 
[  193.039669][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  193.039682][ T7597] Call Trace:
[  193.039690][ T7597]  <TASK>
[  193.039698][ T7597]  dump_stack_lvl+0x16c/0x1f0
[  193.039736][ T7597]  should_fail_ex+0x512/0x640
[  193.039766][ T7597]  _copy_to_user+0x32/0xd0
[  193.039793][ T7597]  simple_read_from_buffer+0xcb/0x170
[  193.039838][ T7597]  proc_fail_nth_read+0x197/0x240
[  193.039877][ T7597]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  193.039916][ T7597]  ? rw_verify_area+0xcf/0x6c0
[  193.039949][ T7597]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  193.039986][ T7597]  vfs_read+0x1e4/0xcf0
[  193.040018][ T7597]  ? __pfx___mutex_lock+0x10/0x10
[  193.040056][ T7597]  ? __pfx_vfs_read+0x10/0x10
[  193.040094][ T7597]  ? __fget_files+0x20e/0x3c0
[  193.040136][ T7597]  ksys_read+0x12a/0x250
[  193.040173][ T7597]  ? __pfx_ksys_read+0x10/0x10
[  193.040213][ T7597]  do_syscall_64+0xcd/0xf80
[  193.040249][ T7597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.040273][ T7597] RIP: 0033:0x7f9ba518e1dc
[  193.040291][ T7597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  193.040312][ T7597] RSP: 002b:00007f9ba33ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  193.040333][ T7597] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518e1dc
[  193.040347][ T7597] RDX: 000000000000000f RSI: 00007f9ba33ee0a0 RDI: 0000000000000004
[  193.040367][ T7597] RBP: 00007f9ba33ee090 R08: 0000000000000000 R09: 0000000000000000
[  193.040388][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.040401][ T7597] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  193.040431][ T7597]  </TASK>
[  193.265260][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  193.778404][ T7611] vhci_hcd vhci_hcd.1: invalid port number 9
[  194.085536][ T6412] Bluetooth: hci1: command 0x0c1a tx timeout
[  194.166874][ T6412] Bluetooth: hci2: command 0x0c1a tx timeout
[  194.186795][ T7626] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  194.245733][ T6412] Bluetooth: hci3: command 0x0c1a tx timeout
[  194.277431][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[  194.517525][ T7638] FAULT_INJECTION: forcing a failure.
[  194.517525][ T7638] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  194.592767][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.1.303 Not tainted syzkaller #0 PREEMPT(full) 
[  194.592809][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  194.592828][ T7638] Call Trace:
[  194.592838][ T7638]  <TASK>
[  194.592850][ T7638]  dump_stack_lvl+0x16c/0x1f0
[  194.592902][ T7638]  should_fail_ex+0x512/0x640
[  194.592946][ T7638]  should_fail_alloc_page+0xe7/0x130
[  194.593006][ T7638]  prepare_alloc_pages+0x401/0x670
[  194.593053][ T7638]  ? __rb_allocate_pages+0x4b2/0xda0
[  194.593096][ T7638]  ? ring_buffer_resize+0x717/0x1f90
[  194.593142][ T7638]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  194.593204][ T7638]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  194.593286][ T7638]  ? rcu_is_watching+0x12/0xc0
[  194.593329][ T7638]  ? trace_kmalloc+0x2b/0xb0
[  194.593370][ T7638]  ? __kmalloc_node_noprof+0x372/0x930
[  194.593418][ T7638]  __alloc_pages_noprof+0xb/0x1b0
[  194.593455][ T7638]  alloc_cpu_data+0x63/0x150
[  194.593490][ T7638]  __rb_allocate_pages+0x5ef/0xda0
[  194.593542][ T7638]  ring_buffer_resize+0x717/0x1f90
[  194.593592][ T7638]  ? __pfx_update_last_data+0x10/0x10
[  194.593634][ T7638]  __tracing_resize_ring_buffer.part.0+0x52/0x1f0
[  194.593690][ T7638]  tracing_update_buffers+0x12e/0x150
[  194.593737][ T7638]  event_pid_write.isra.0+0xf8/0x7f0
[  194.593792][ T7638]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[  194.593849][ T7638]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[  194.593894][ T7638]  vfs_write+0x2a0/0x11d0
[  194.593941][ T7638]  ? __pfx___mutex_lock+0x10/0x10
[  194.593994][ T7638]  ? __pfx_vfs_write+0x10/0x10
[  194.594052][ T7638]  ? __fget_files+0x20e/0x3c0
[  194.594109][ T7638]  ksys_write+0x12a/0x250
[  194.594155][ T7638]  ? __pfx_ksys_write+0x10/0x10
[  194.594213][ T7638]  do_syscall_64+0xcd/0xf80
[  194.594270][ T7638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.594302][ T7638] RIP: 0033:0x7f9d1f98f7c9
[  194.594327][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.594357][ T7638] RSP: 002b:00007f9d20855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  194.594385][ T7638] RAX: ffffffffffffffda RBX: 00007f9d1fbe6090 RCX: 00007f9d1f98f7c9
[  194.594405][ T7638] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  194.594422][ T7638] RBP: 00007f9d1fa13f91 R08: 0000000000000000 R09: 0000000000000000
[  194.594440][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  194.594458][ T7638] R13: 00007f9d1fbe6128 R14: 00007f9d1fbe6090 R15: 00007ffc6c9acff8
[  194.594502][ T7638]  </TASK>
[  195.052295][ T7649] FAULT_INJECTION: forcing a failure.
[  195.052295][ T7649] name failslab, interval 1, probability 0, space 0, times 0
[  195.100686][ T7649] CPU: 1 UID: 0 PID: 7649 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(full) 
[  195.100725][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  195.100742][ T7649] Call Trace:
[  195.100761][ T7649]  <TASK>
[  195.100771][ T7649]  dump_stack_lvl+0x16c/0x1f0
[  195.100822][ T7649]  should_fail_ex+0x512/0x640
[  195.100856][ T7649]  ? fs_reclaim_acquire+0xae/0x150
[  195.100907][ T7649]  should_failslab+0xc2/0x120
[  195.100962][ T7649]  __kmalloc_noprof+0xeb/0x910
[  195.100996][ T7649]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  195.101046][ T7649]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  195.101087][ T7649]  tomoyo_realpath_from_path+0xc2/0x6e0
[  195.101133][ T7649]  ? tomoyo_profile+0x47/0x60
[  195.101183][ T7649]  tomoyo_path_number_perm+0x245/0x580
[  195.101217][ T7649]  ? tomoyo_path_number_perm+0x237/0x580
[  195.101262][ T7649]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  195.101301][ T7649]  ? find_held_lock+0x2b/0x80
[  195.101375][ T7649]  ? find_held_lock+0x2b/0x80
[  195.101412][ T7649]  ? hook_file_ioctl_common+0x144/0x410
[  195.101459][ T7649]  ? __fget_files+0x20e/0x3c0
[  195.101508][ T7649]  security_file_ioctl+0x9b/0x240
[  195.101547][ T7649]  __x64_sys_ioctl+0xb7/0x210
[  195.101588][ T7649]  do_syscall_64+0xcd/0xf80
[  195.101638][ T7649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.101669][ T7649] RIP: 0033:0x7ff8c5b8f7c9
[  195.101692][ T7649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.101720][ T7649] RSP: 002b:00007ff8c69eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  195.101747][ T7649] RAX: ffffffffffffffda RBX: 00007ff8c5de5fa0 RCX: 00007ff8c5b8f7c9
[  195.101766][ T7649] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  195.101785][ T7649] RBP: 00007ff8c69eb090 R08: 0000000000000000 R09: 0000000000000000
[  195.101819][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.101836][ T7649] R13: 00007ff8c5de6038 R14: 00007ff8c5de5fa0 R15: 00007ffe5b9abbe8
[  195.101877][ T7649]  </TASK>
[  195.310004][ T7649] ERROR: Out of memory at tomoyo_realpath_from_path.
[  195.318396][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.166152][ T6412] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.245798][ T6412] Bluetooth: hci2: command 0x0c1a tx timeout
[  196.325592][ T6412] Bluetooth: hci3: command 0x0c1a tx timeout
[  196.878431][ T7697] netlink: 9 bytes leftover after parsing attributes in process `syz.3.317'.
[  197.087684][ T7704] FAULT_INJECTION: forcing a failure.
[  197.087684][ T7704] name failslab, interval 1, probability 0, space 0, times 0
[  197.128415][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) 
[  197.128449][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  197.128464][ T7704] Call Trace:
[  197.128472][ T7704]  <TASK>
[  197.128481][ T7704]  dump_stack_lvl+0x16c/0x1f0
[  197.128524][ T7704]  should_fail_ex+0x512/0x640
[  197.128552][ T7704]  ? fs_reclaim_acquire+0xae/0x150
[  197.128595][ T7704]  should_failslab+0xc2/0x120
[  197.128635][ T7704]  __kmalloc_noprof+0xeb/0x910
[  197.128677][ T7704]  ? tomoyo_encode2+0x100/0x3e0
[  197.128723][ T7704]  ? tomoyo_encode2+0x100/0x3e0
[  197.128769][ T7704]  tomoyo_encode2+0x100/0x3e0
[  197.128814][ T7704]  tomoyo_encode+0x29/0x50
[  197.128852][ T7704]  tomoyo_realpath_from_path+0x18f/0x6e0
[  197.128906][ T7704]  tomoyo_path_number_perm+0x245/0x580
[  197.128938][ T7704]  ? tomoyo_path_number_perm+0x237/0x580
[  197.128976][ T7704]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  197.129012][ T7704]  ? find_held_lock+0x2b/0x80
[  197.129083][ T7704]  ? find_held_lock+0x2b/0x80
[  197.129119][ T7704]  ? hook_file_ioctl_common+0x144/0x410
[  197.129164][ T7704]  ? __fget_files+0x20e/0x3c0
[  197.129214][ T7704]  security_file_ioctl+0x9b/0x240
[  197.129251][ T7704]  __x64_sys_ioctl+0xb7/0x210
[  197.129291][ T7704]  do_syscall_64+0xcd/0xf80
[  197.129338][ T7704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.129372][ T7704] RIP: 0033:0x7f9d1f98f7c9
[  197.129392][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.129416][ T7704] RSP: 002b:00007f9d20876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.129440][ T7704] RAX: ffffffffffffffda RBX: 00007f9d1fbe5fa0 RCX: 00007f9d1f98f7c9
[  197.129456][ T7704] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  197.129471][ T7704] RBP: 00007f9d20876090 R08: 0000000000000000 R09: 0000000000000000
[  197.129486][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.129500][ T7704] R13: 00007f9d1fbe6038 R14: 00007f9d1fbe5fa0 R15: 00007ffc6c9acff8
[  197.129534][ T7704]  </TASK>
[  197.129559][ T7704] ERROR: Out of memory at tomoyo_realpath_from_path.
[  197.365908][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  197.965296][ T7725] netlink: 'syz.3.323': attribute type 33 has an invalid length.
[  199.356567][ T7766] netlink: 'syz.3.329': attribute type 33 has an invalid length.
[  199.387313][ T7768] FAULT_INJECTION: forcing a failure.
[  199.387313][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.446120][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  199.463194][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT(full) 
[  199.463223][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.463236][ T7768] Call Trace:
[  199.463244][ T7768]  <TASK>
[  199.463252][ T7768]  dump_stack_lvl+0x16c/0x1f0
[  199.463291][ T7768]  should_fail_ex+0x512/0x640
[  199.463321][ T7768]  _copy_from_user+0x2e/0xd0
[  199.463346][ T7768]  snd_ctl_ioctl+0x979/0x13e0
[  199.463393][ T7768]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  199.463429][ T7768]  ? find_held_lock+0x2b/0x80
[  199.463458][ T7768]  ? hook_file_ioctl_common+0x144/0x410
[  199.463498][ T7768]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  199.463532][ T7768]  __x64_sys_ioctl+0x18e/0x210
[  199.463563][ T7768]  do_syscall_64+0xcd/0xf80
[  199.463598][ T7768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.463622][ T7768] RIP: 0033:0x7ff8c5b8f7c9
[  199.463642][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.463664][ T7768] RSP: 002b:00007ff8c69eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.463692][ T7768] RAX: ffffffffffffffda RBX: 00007ff8c5de5fa0 RCX: 00007ff8c5b8f7c9
[  199.463707][ T7768] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  199.463720][ T7768] RBP: 00007ff8c69eb090 R08: 0000000000000000 R09: 0000000000000000
[  199.463733][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.463746][ T7768] R13: 00007ff8c5de6038 R14: 00007ff8c5de5fa0 R15: 00007ffe5b9abbe8
[  199.463776][ T7768]  </TASK>
[  201.457992][ T7809] FAULT_INJECTION: forcing a failure.
[  201.457992][ T7809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.475631][ T7809] CPU: 0 UID: 0 PID: 7809 Comm: syz.3.341 Not tainted syzkaller #0 PREEMPT(full) 
[  201.475672][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.475689][ T7809] Call Trace:
[  201.475699][ T7809]  <TASK>
[  201.475711][ T7809]  dump_stack_lvl+0x16c/0x1f0
[  201.475764][ T7809]  should_fail_ex+0x512/0x640
[  201.475803][ T7809]  _copy_from_user+0x2e/0xd0
[  201.475838][ T7809]  snd_ctl_ioctl+0x979/0x13e0
[  201.475884][ T7809]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  201.475934][ T7809]  ? find_held_lock+0x2b/0x80
[  201.475973][ T7809]  ? hook_file_ioctl_common+0x144/0x410
[  201.476030][ T7809]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  201.476076][ T7809]  __x64_sys_ioctl+0x18e/0x210
[  201.476117][ T7809]  do_syscall_64+0xcd/0xf80
[  201.476166][ T7809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.476197][ T7809] RIP: 0033:0x7f9ba518f7c9
[  201.476220][ T7809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.476249][ T7809] RSP: 002b:00007f9ba33ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.476276][ T7809] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518f7c9
[  201.476294][ T7809] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  201.476311][ T7809] RBP: 00007f9ba33ee090 R08: 0000000000000000 R09: 0000000000000000
[  201.476328][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.476344][ T7809] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  201.476385][ T7809]  </TASK>
[  201.978159][ T7820] FAULT_INJECTION: forcing a failure.
[  201.978159][ T7820] name failslab, interval 1, probability 0, space 0, times 0
[  202.011503][ T7805] db_root: cannot open: 
[  202.031971][   T30] audit: type=1800 audit(1765969649.327:3): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.339" name="dbroot" dev="configfs" ino=14199 res=0 errno=0
[  202.091873][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) 
[  202.091913][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.091927][ T7820] Call Trace:
[  202.091934][ T7820]  <TASK>
[  202.091942][ T7820]  dump_stack_lvl+0x16c/0x1f0
[  202.091981][ T7820]  should_fail_ex+0x512/0x640
[  202.092006][ T7820]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  202.092038][ T7820]  should_failslab+0xc2/0x120
[  202.092072][ T7820]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  202.092101][ T7820]  ? __d_alloc+0x35/0xa80
[  202.092137][ T7820]  ? __d_alloc+0x35/0xa80
[  202.092154][ T7820]  __d_alloc+0x35/0xa80
[  202.092177][ T7820]  d_alloc_pseudo+0x1c/0xc0
[  202.092208][ T7820]  alloc_file_pseudo+0xcf/0x230
[  202.092235][ T7820]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  202.092259][ T7820]  ? alloc_fd+0x471/0x7d0
[  202.092296][ T7820]  sock_alloc_file+0x50/0x210
[  202.092336][ T7820]  __sys_socket+0x1c0/0x260
[  202.092356][ T7820]  ? fput+0x70/0xf0
[  202.092376][ T7820]  ? __pfx___sys_socket+0x10/0x10
[  202.092400][ T7820]  ? syscall_user_dispatch+0x78/0x140
[  202.092435][ T7820]  __x64_sys_socket+0x72/0xb0
[  202.092457][ T7820]  do_syscall_64+0xcd/0xf80
[  202.092493][ T7820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.092516][ T7820] RIP: 0033:0x7f9ba518f7c9
[  202.092533][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.092554][ T7820] RSP: 002b:00007f9ba33ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  202.092580][ T7820] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518f7c9
[  202.092595][ T7820] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  202.092608][ T7820] RBP: 00007f9ba5213f91 R08: 0000000000000000 R09: 0000000000000000
[  202.092622][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.092640][ T7820] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  202.092669][ T7820]  </TASK>
[  202.318537][ T7826] FAULT_INJECTION: forcing a failure.
[  202.318537][ T7826] name failslab, interval 1, probability 0, space 0, times 0
[  202.344046][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(full) 
[  202.344084][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.344102][ T7826] Call Trace:
[  202.344112][ T7826]  <TASK>
[  202.344123][ T7826]  dump_stack_lvl+0x16c/0x1f0
[  202.344172][ T7826]  should_fail_ex+0x512/0x640
[  202.344205][ T7826]  ? __kmalloc_cache_noprof+0x5f/0x800
[  202.344245][ T7826]  should_failslab+0xc2/0x120
[  202.344292][ T7826]  __kmalloc_cache_noprof+0x80/0x800
[  202.344327][ T7826]  ? devlink_fmsg_nest_common.part.0+0x48/0x1e0
[  202.344400][ T7826]  ? devlink_fmsg_nest_common.part.0+0x48/0x1e0
[  202.344447][ T7826]  devlink_fmsg_nest_common.part.0+0x48/0x1e0
[  202.344499][ T7826]  devlink_fmsg_string_pair_put+0x17a/0x1b0
[  202.344533][ T7826]  nsim_dev_dummy_reporter_dump+0x54/0xa0
[  202.344610][ T7826]  devlink_health_do_dump+0x243/0x620
[  202.344647][ T7826]  devlink_health_report+0x6c3/0xaa0
[  202.344684][ T7826]  ? __pfx_devlink_health_report+0x10/0x10
[  202.344736][ T7826]  ? _copy_from_user+0x59/0xd0
[  202.344775][ T7826]  nsim_dev_health_break_write+0x166/0x210
[  202.344823][ T7826]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  202.344883][ T7826]  full_proxy_write+0x131/0x1a0
[  202.344931][ T7826]  ? __pfx_full_proxy_write+0x10/0x10
[  202.344971][ T7826]  vfs_write+0x2a0/0x11d0
[  202.345026][ T7826]  ? __pfx___mutex_lock+0x10/0x10
[  202.345080][ T7826]  ? __pfx_vfs_write+0x10/0x10
[  202.345137][ T7826]  ? __fget_files+0x20e/0x3c0
[  202.345193][ T7826]  ksys_write+0x12a/0x250
[  202.345236][ T7826]  ? __pfx_ksys_write+0x10/0x10
[  202.345292][ T7826]  do_syscall_64+0xcd/0xf80
[  202.345342][ T7826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.345375][ T7826] RIP: 0033:0x7f9d1f98f7c9
[  202.345399][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.345430][ T7826] RSP: 002b:00007f9d20876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  202.345462][ T7826] RAX: ffffffffffffffda RBX: 00007f9d1fbe5fa0 RCX: 00007f9d1f98f7c9
[  202.345482][ T7826] RDX: 0000000000000006 RSI: 0000200000005900 RDI: 0000000000000009
[  202.345501][ T7826] RBP: 00007f9d1fa13f91 R08: 0000000000000000 R09: 0000000000000000
[  202.345518][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.345536][ T7826] R13: 00007f9d1fbe6038 R14: 00007f9d1fbe5fa0 R15: 00007ffc6c9acff8
[  202.345578][ T7826]  </TASK>
[  202.369275][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'.
[  202.910625][ T7832] netlink: 'syz.1.344': attribute type 33 has an invalid length.
[  203.660035][ T7870] FAULT_INJECTION: forcing a failure.
[  203.660035][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.795562][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT(full) 
[  203.795598][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  203.795621][ T7870] Call Trace:
[  203.795630][ T7870]  <TASK>
[  203.795641][ T7870]  dump_stack_lvl+0x16c/0x1f0
[  203.795687][ T7870]  should_fail_ex+0x512/0x640
[  203.795725][ T7870]  _copy_to_user+0x32/0xd0
[  203.795759][ T7870]  snd_ctl_elem_list+0x45b/0x540
[  203.795804][ T7870]  ? __pfx_snd_ctl_elem_list+0x10/0x10
[  203.795837][ T7870]  ? __might_fault+0xe3/0x190
[  203.795894][ T7870]  snd_ctl_ioctl+0x99b/0x13e0
[  203.795933][ T7870]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  203.795979][ T7870]  ? find_held_lock+0x2b/0x80
[  203.796054][ T7870]  ? hook_file_ioctl_common+0x144/0x410
[  203.796120][ T7870]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  203.796168][ T7870]  __x64_sys_ioctl+0x18e/0x210
[  203.796211][ T7870]  do_syscall_64+0xcd/0xf80
[  203.796268][ T7870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.796299][ T7870] RIP: 0033:0x7f9d1f98f7c9
[  203.796323][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.796353][ T7870] RSP: 002b:00007f9d20876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  203.796381][ T7870] RAX: ffffffffffffffda RBX: 00007f9d1fbe5fa0 RCX: 00007f9d1f98f7c9
[  203.796401][ T7870] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  203.796418][ T7870] RBP: 00007f9d20876090 R08: 0000000000000000 R09: 0000000000000000
[  203.796436][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.796452][ T7870] R13: 00007f9d1fbe6038 R14: 00007f9d1fbe5fa0 R15: 00007ffc6c9acff8
[  203.796494][ T7870]  </TASK>
[  204.654442][ T7895] netlink: 'syz.2.353': attribute type 28 has an invalid length.
[  204.805309][ T7901] FAULT_INJECTION: forcing a failure.
[  204.805309][ T7901] name failslab, interval 1, probability 0, space 0, times 0
[  204.865550][ T7895] netlink: 334 bytes leftover after parsing attributes in process `syz.2.353'.
[  205.155571][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.2.353 Not tainted syzkaller #0 PREEMPT(full) 
[  205.155608][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  205.155625][ T7901] Call Trace:
[  205.155635][ T7901]  <TASK>
[  205.155647][ T7901]  dump_stack_lvl+0x16c/0x1f0
[  205.155719][ T7901]  should_fail_ex+0x512/0x640
[  205.155751][ T7901]  ? __kmalloc_cache_noprof+0x5f/0x800
[  205.155790][ T7901]  should_failslab+0xc2/0x120
[  205.155837][ T7901]  __kmalloc_cache_noprof+0x80/0x800
[  205.155872][ T7901]  ? loop_add+0xb6/0xb70
[  205.155950][ T7901]  ? loop_add+0xb6/0xb70
[  205.156028][ T7901]  loop_add+0xb6/0xb70
[  205.156076][ T7901]  ? __pfx_loop_add+0x10/0x10
[  205.156212][ T7901]  ? find_held_lock+0x2b/0x80
[  205.156262][ T7901]  loop_control_ioctl+0x13e/0x630
[  205.156313][ T7901]  ? __pfx_loop_control_ioctl+0x10/0x10
[  205.156368][ T7901]  ? __pfx_loop_control_ioctl+0x10/0x10
[  205.156421][ T7901]  __x64_sys_ioctl+0x18e/0x210
[  205.156463][ T7901]  do_syscall_64+0xcd/0xf80
[  205.156515][ T7901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.156557][ T7901] RIP: 0033:0x7ff8c5b8f7c9
[  205.156581][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.156609][ T7901] RSP: 002b:00007ff8c69a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.156649][ T7901] RAX: ffffffffffffffda RBX: 00007ff8c5de6180 RCX: 00007ff8c5b8f7c9
[  205.156668][ T7901] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000009
[  205.156685][ T7901] RBP: 00007ff8c5c13f91 R08: 0000000000000000 R09: 0000000000000000
[  205.156721][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.156740][ T7901] R13: 00007ff8c5de6218 R14: 00007ff8c5de6180 R15: 00007ffe5b9abbe8
[  205.156779][ T7901]  </TASK>
[  205.650094][ T7928] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations!
[  205.953328][ T7913] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  205.954330][ T7913] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  205.954591][ T7913] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  205.954829][ T7913] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  207.057796][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  207.057893][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  207.405816][ T7966] syz.3.366 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  207.534578][ T6412] Bluetooth: hci0: command 0x0c1a tx timeout
[  207.726925][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.367'.
[  207.857747][ T7978] netlink: 'syz.1.368': attribute type 33 has an invalid length.
[  208.007064][ T6412] Bluetooth: hci3: command 0x0c1a tx timeout
[  208.013206][ T6463] Bluetooth: hci1: command 0x0c1a tx timeout
[  208.019398][ T7252] Bluetooth: hci2: command 0x0c1a tx timeout
[  208.101975][   T30] audit: type=1800 audit(1765969655.427:4): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.370" name="features" dev="configfs" ino=16131 res=0 errno=0
[  208.648545][ T8004] FAULT_INJECTION: forcing a failure.
[  208.648545][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.683456][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(full) 
[  208.683493][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  208.683509][ T8004] Call Trace:
[  208.683518][ T8004]  <TASK>
[  208.683529][ T8004]  dump_stack_lvl+0x16c/0x1f0
[  208.683597][ T8004]  should_fail_ex+0x512/0x640
[  208.683636][ T8004]  _copy_to_user+0x32/0xd0
[  208.683672][ T8004]  snd_ctl_elem_list+0x45b/0x540
[  208.683731][ T8004]  ? __pfx_snd_ctl_elem_list+0x10/0x10
[  208.683763][ T8004]  ? __might_fault+0xe3/0x190
[  208.683814][ T8004]  snd_ctl_ioctl+0x99b/0x13e0
[  208.683864][ T8004]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  208.683909][ T8004]  ? find_held_lock+0x2b/0x80
[  208.683946][ T8004]  ? hook_file_ioctl_common+0x144/0x410
[  208.683998][ T8004]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  208.684041][ T8004]  __x64_sys_ioctl+0x18e/0x210
[  208.684080][ T8004]  do_syscall_64+0xcd/0xf80
[  208.684131][ T8004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.684160][ T8004] RIP: 0033:0x7f9ba518f7c9
[  208.684182][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.684208][ T8004] RSP: 002b:00007f9ba33ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.684235][ T8004] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518f7c9
[  208.684252][ T8004] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003
[  208.684269][ T8004] RBP: 00007f9ba33ee090 R08: 0000000000000000 R09: 0000000000000000
[  208.684284][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.684300][ T8004] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  208.684338][ T8004]  </TASK>
[  209.645048][ T8018] ==================================================================
[  209.645066][ T8018] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  209.645121][ T8018] Write of size 8 at addr ffffc90003bf9000 by task syz.3.377/8018
[  209.645147][ T8018] 
[  209.645161][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) 
[  209.645199][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  209.645217][ T8018] Call Trace:
[  209.645228][ T8018]  <TASK>
[  209.645239][ T8018]  dump_stack_lvl+0x116/0x1f0
[  209.645320][ T8018]  print_report+0xcd/0x630
[  209.645367][ T8018]  ? __virt_addr_valid+0x81/0x610
[  209.645419][ T8018]  ? sys_imageblit+0x1a6f/0x1e60
[  209.645462][ T8018]  kasan_report+0xe0/0x110
[  209.645506][ T8018]  ? sys_imageblit+0x1a6f/0x1e60
[  209.645554][ T8018]  sys_imageblit+0x1a6f/0x1e60
[  209.645604][ T8018]  ? __pfx_sys_imageblit+0x10/0x10
[  209.645649][ T8018]  ? find_held_lock+0x2b/0x80
[  209.645697][ T8018]  ? up+0xcb/0x140
[  209.645722][ T8018]  ? do_raw_spin_unlock+0x172/0x230
[  209.645758][ T8018]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  209.645811][ T8018]  ? prb_read_valid+0x78/0xa0
[  209.645842][ T8018]  ? __pfx_prb_read_valid+0x10/0x10
[  209.645879][ T8018]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  209.645931][ T8018]  soft_cursor+0x524/0xa10
[  209.645971][ T8018]  ? fb_get_color_depth+0x120/0x250
[  209.646006][ T8018]  bit_cursor+0xe8c/0x17e0
[  209.646046][ T8018]  ? __pfx_bit_cursor+0x10/0x10
[  209.646082][ T8018]  ? __lock_acquire+0x436/0x2890
[  209.646114][ T8018]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  209.646162][ T8018]  ? get_color+0x1da/0x450
[  209.646191][ T8018]  ? __pfx_bit_cursor+0x10/0x10
[  209.646224][ T8018]  fbcon_cursor+0x437/0x5d0
[  209.646254][ T8018]  ? add_softcursor+0x11/0x290
[  209.646294][ T8018]  set_cursor+0x1db/0x250
[  209.646329][ T8018]  con_write+0x89/0xb0
[  209.646372][ T8018]  do_output_char+0x5d9/0x840
[  209.646423][ T8018]  n_tty_write+0x514/0x1280
[  209.646466][ T8018]  ? __pfx_n_tty_write+0x10/0x10
[  209.646498][ T8018]  ? __pfx_woken_wake_function+0x10/0x10
[  209.646544][ T8018]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  209.646591][ T8018]  ? __pfx_n_tty_write+0x10/0x10
[  209.646622][ T8018]  file_tty_write.constprop.0+0x503/0x9b0
[  209.646673][ T8018]  redirected_tty_write+0xd4/0x120
[  209.646718][ T8018]  vfs_write+0x7d3/0x11d0
[  209.646781][ T8018]  ? __pfx_redirected_tty_write+0x10/0x10
[  209.646837][ T8018]  ? __pfx_vfs_write+0x10/0x10
[  209.646879][ T8018]  ? find_held_lock+0x2b/0x80
[  209.646931][ T8018]  ksys_write+0x12a/0x250
[  209.646975][ T8018]  ? __pfx_ksys_write+0x10/0x10
[  209.647027][ T8018]  do_syscall_64+0xcd/0xf80
[  209.647076][ T8018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.647109][ T8018] RIP: 0033:0x7f9ba518f7c9
[  209.647132][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.647163][ T8018] RSP: 002b:00007f9ba33ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  209.647192][ T8018] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518f7c9
[  209.647214][ T8018] RDX: 0000000000000102 RSI: 0000200000002940 RDI: 0000000000000006
[  209.647233][ T8018] RBP: 00007f9ba5213f91 R08: 0000000000000000 R09: 0000000000000000
[  209.647252][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.647269][ T8018] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  209.647301][ T8018]  </TASK>
[  209.647312][ T8018] 
[  209.647320][ T8018] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900038f9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0
[  209.647396][ T8018] Memory state around the buggy address:
[  209.647412][ T8018]  ffffc90003bf8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  209.647440][ T8018]  ffffc90003bf8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  209.647463][ T8018] >ffffc90003bf9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  209.647481][ T8018]                    ^
[  209.647496][ T8018]  ffffc90003bf9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  209.647518][ T8018]  ffffc90003bf9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  209.647536][ T8018] ==================================================================
[  209.648075][ T8018] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  209.648098][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(full) 
[  209.648135][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  209.648154][ T8018] Call Trace:
[  209.648164][ T8018]  <TASK>
[  209.648175][ T8018]  dump_stack_lvl+0x3d/0x1f0
[  209.648257][ T8018]  vpanic+0x640/0x6f0
[  209.648290][ T8018]  panic+0xca/0xd0
[  209.648319][ T8018]  ? __pfx_panic+0x10/0x10
[  209.648349][ T8018]  ? sys_imageblit+0x1a6f/0x1e60
[  209.648394][ T8018]  ? preempt_schedule_common+0x44/0xc0
[  209.648438][ T8018]  ? preempt_schedule_thunk+0x16/0x30
[  209.648478][ T8018]  check_panic_on_warn+0xab/0xb0
[  209.648512][ T8018]  end_report+0x107/0x160
[  209.648557][ T8018]  kasan_report+0xee/0x110
[  209.648603][ T8018]  ? sys_imageblit+0x1a6f/0x1e60
[  209.648651][ T8018]  sys_imageblit+0x1a6f/0x1e60
[  209.648703][ T8018]  ? __pfx_sys_imageblit+0x10/0x10
[  209.648746][ T8018]  ? find_held_lock+0x2b/0x80
[  209.648785][ T8018]  ? up+0xcb/0x140
[  209.648816][ T8018]  ? do_raw_spin_unlock+0x172/0x230
[  209.648853][ T8018]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  209.648917][ T8018]  ? prb_read_valid+0x78/0xa0
[  209.648948][ T8018]  ? __pfx_prb_read_valid+0x10/0x10
[  209.648983][ T8018]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  209.649032][ T8018]  soft_cursor+0x524/0xa10
[  209.649073][ T8018]  ? fb_get_color_depth+0x120/0x250
[  209.649119][ T8018]  bit_cursor+0xe8c/0x17e0
[  209.649158][ T8018]  ? __pfx_bit_cursor+0x10/0x10
[  209.649191][ T8018]  ? __lock_acquire+0x436/0x2890
[  209.649221][ T8018]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  209.649267][ T8018]  ? get_color+0x1da/0x450
[  209.649294][ T8018]  ? __pfx_bit_cursor+0x10/0x10
[  209.649326][ T8018]  fbcon_cursor+0x437/0x5d0
[  209.649355][ T8018]  ? add_softcursor+0x11/0x290
[  209.649394][ T8018]  set_cursor+0x1db/0x250
[  209.649429][ T8018]  con_write+0x89/0xb0
[  209.649470][ T8018]  do_output_char+0x5d9/0x840
[  209.649519][ T8018]  n_tty_write+0x514/0x1280
[  209.649556][ T8018]  ? __pfx_n_tty_write+0x10/0x10
[  209.649594][ T8018]  ? __pfx_woken_wake_function+0x10/0x10
[  209.649633][ T8018]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  209.649678][ T8018]  ? __pfx_n_tty_write+0x10/0x10
[  209.649708][ T8018]  file_tty_write.constprop.0+0x503/0x9b0
[  209.649767][ T8018]  redirected_tty_write+0xd4/0x120
[  209.649818][ T8018]  vfs_write+0x7d3/0x11d0
[  209.649862][ T8018]  ? __pfx_redirected_tty_write+0x10/0x10
[  209.649908][ T8018]  ? __pfx_vfs_write+0x10/0x10
[  209.649951][ T8018]  ? find_held_lock+0x2b/0x80
[  209.650003][ T8018]  ksys_write+0x12a/0x250
[  209.650045][ T8018]  ? __pfx_ksys_write+0x10/0x10
[  209.650096][ T8018]  do_syscall_64+0xcd/0xf80
[  209.650147][ T8018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.650179][ T8018] RIP: 0033:0x7f9ba518f7c9
[  209.650203][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.650233][ T8018] RSP: 002b:00007f9ba33ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  209.650263][ T8018] RAX: ffffffffffffffda RBX: 00007f9ba53e5fa0 RCX: 00007f9ba518f7c9
[  209.650284][ T8018] RDX: 0000000000000102 RSI: 0000200000002940 RDI: 0000000000000006
[  209.650305][ T8018] RBP: 00007f9ba5213f91 R08: 0000000000000000 R09: 0000000000000000
[  209.650324][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.650344][ T8018] R13: 00007f9ba53e6038 R14: 00007f9ba53e5fa0 R15: 00007ffded3f2878
[  209.650376][ T8018]  </TASK>
[  209.650714][ T8018] Kernel Offset: disabled