last executing test programs:

5m14.105293466s ago: executing program 2 (id=2009):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0)
r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0)
read$auto(r1, 0x0, 0x2)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0)
exit$auto(0x7)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(r0, 0x0, 0xc3)
write$auto(0x3, 0x0, 0xfffffdef)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.7/usb8/power/active_duration\x00', 0xc8080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/17, 0x11)
write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b3f3963", 0x26)

5m13.008432129s ago: executing program 2 (id=2015):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = pidfd_getfd$auto(0x3, 0x1, 0x100000000)
bpf$auto(0x0, 0x0, 0x92)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0xc000, 0x8, 0x8)
ioctl$auto(r0, 0x2, r1)

5m12.220012274s ago: executing program 2 (id=2019):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000003c0))
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}})
mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000)
r3 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r3, 0x107, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r1)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ')
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add6969e6f9cd236532b20ed763ac8caf4b9b3f00"/38, 0x26)

5m10.694075985s ago: executing program 2 (id=2023):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54)
write$auto(0x3, 0x0, 0xfffffdef)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff)
write$auto(0x3, 0x0, 0xfffffdf2)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14d142a943201126, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x20002, {0x100000000}, 0x5, 0x4, 0xfffffffffffffffd, 0xffff0003, 0x0, 0x1, 0x9, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x80c})
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$auto(r1, 0xaccd, 0xffffffffffffffff)
setresuid$auto(0x2, 0x7, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(r0, &(0x7f0000000040)='\xfa\b\x1c\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x81)
connect$auto(0x3, 0x0, 0x55)

5m9.48645587s ago: executing program 2 (id=2026):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0xffffffff)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae41, r3)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x4b, 0x0)
fsopen$auto(0x0, 0x6)
fsconfig$auto(r3, 0x7, &(0x7f00000003c0)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9f\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce\x0e\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v+\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96`~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\xe9\x9c\xec cQA&H\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\x06\x003,\xcb\xa2\xa7q \xe2\x00\x00\x00\x00', &(0x7f0000000080)="5fa5b0305fa066f386dead6b6d65475b7fb6fdf8a72579ca3ab56240dd8dac1f7fde57164b65a3cc33ca2319ed185c44441b37aee3c4ac0c00cd7c39e6d341f3af591e0ae19a7d59684797bc77470bd5eafd842a5c42b8461703c93a5c522bb32b83c626b284058efbf7fa221f67f73fc09c451975bd6e6874262af17ca06dda4bca5c5f4b2df67e85805d529f6e14edaad96f8fb922", 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, &(0x7f0000000080))
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0xfffffffffffffff8, 0x3, 0x200)
getresgid$auto(0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0)
msgget$auto(0x0, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

5m8.895835616s ago: executing program 2 (id=2029):
close_range$auto(0x2, 0xffffffffffffffff, 0x7e)
mmap$auto(0x0, 0x2000000003, 0x6, 0x10000000040eb1, 0x401, 0x300000000000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r0, 0x0, 0x9) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/platform/drivers/cht_wcove_pwrsrc/bind\x00', 0x113000, 0x0) (async)
getsockopt$auto(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) (async)
mbind$auto(0x100000000, 0x1, 0x9, &(0x7f0000000040)=0x48000000, 0xbca, 0x5) (async)
mmap$auto(0x3ff, 0x8000240000a, 0x9, 0x516, r0, 0xffff) (async)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
mkdir$auto(0x0, 0x0)
mmap$auto(0x8, 0x1, 0xdf, 0x9b73, 0x2, 0x8000) (async)
socket(0x2b, 0x1, 0x1) (async)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
unshare$auto(0x8000000) (async)
semget$auto(0x0, 0x13c, 0x1ff) (async)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
futex$auto(0x0, 0x6, 0x7, 0x0, 0x0, 0x80000002)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x9) (async)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0)
ioctl$auto(r2, 0xc0285628, r2) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x4)

4m53.819585468s ago: executing program 32 (id=2029):
close_range$auto(0x2, 0xffffffffffffffff, 0x7e)
mmap$auto(0x0, 0x2000000003, 0x6, 0x10000000040eb1, 0x401, 0x300000000000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0)
read$auto(r0, 0x0, 0x9) (async)
write$auto(0x3, 0x0, 0xfdef) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/platform/drivers/cht_wcove_pwrsrc/bind\x00', 0x113000, 0x0) (async)
getsockopt$auto(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) (async)
mbind$auto(0x100000000, 0x1, 0x9, &(0x7f0000000040)=0x48000000, 0xbca, 0x5) (async)
mmap$auto(0x3ff, 0x8000240000a, 0x9, 0x516, r0, 0xffff) (async)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
mkdir$auto(0x0, 0x0)
mmap$auto(0x8, 0x1, 0xdf, 0x9b73, 0x2, 0x8000) (async)
socket(0x2b, 0x1, 0x1) (async)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
unshare$auto(0x8000000) (async)
semget$auto(0x0, 0x13c, 0x1ff) (async)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
futex$auto(0x0, 0x6, 0x7, 0x0, 0x0, 0x80000002)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x9) (async)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0)
ioctl$auto(r2, 0xc0285628, r2) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x4)

2m48.959694031s ago: executing program 4 (id=2396):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9)
io_uring_setup$auto(0x1, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
connect$auto(0x3, 0x0, 0x55)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/9/smp_affinity_list\x00', 0x1c1282, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_MEMERASE(r0, 0x40084d02, &(0x7f0000000040)={0x4, 0x5d81f7b4})
close_range$auto(0x2, 0xffffffffffffffff, 0x8)
r2 = socket(0x22, 0x3, 0x1)
connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)

2m46.601197016s ago: executing program 4 (id=2402):
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)
r0 = io_uring_setup$auto(0x4c2, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000380)="1dc62ab277eab7df57164f084de709ab1e2ec7f622f02bfe88fa8344a8a6b0e1f132d1434b895ed32a921068094bf01f3d13067f7c41f15cd41fa5687d155791c6162471ec21bdd0312a83d20976b65df3d7d0257497fabdfd5a189dc39a2e9162479c40f6584cf95a9df2c6c29df0d47181a6cbb1dd749f837101b6ab22753376ef69f3717b19af8d875feaa86598a37c74e654ed130aa4015733edc10fe3d12cb5cce848fa1814e4845e59581f2118f5e44ffc3892d6f3995ddb9c34679ce249fa")
r1 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0xee8c, 0x4)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff)
shmctl$auto_SHM_STAT_ANY(0x5a3, 0xf, &(0x7f0000001180)={{0x1000, 0x0, 0x0, 0x52, 0x5, 0x3, 0x3000}, 0xffffff7f, 0x5, 0x100, 0x7, @raw=0x27, @raw=0x9, 0x2, 0x0, &(0x7f0000000140)="07d4df2a", &(0x7f0000000180)="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"})
syz_clone(0xa010080, &(0x7f0000001200)="0bd4d47091bf4a5dbb", 0x9, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="66c557307c520573117b873c717173e12df45d49a7dc901b5337f2f00fbb6d00721c8d56e3a560e8ed561e08a319b50a01")
semctl$auto_GETPID(0x0, 0x5, 0xb, 0xfffffffffffffffe)
shmctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000002380)={{0x10, 0xffffffffffffffff, 0xee01, 0x6, 0x6, 0xffffffff, 0xd}, 0x40, 0x3, 0xc, 0x4, @raw=0x6, @raw=0x9, 0x6, 0x0, &(0x7f0000001300)="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", &(0x7f0000002300)="a2b4b7022092af54bd29a413e428fdfcb69ac3525cba56ec91bf9389b81a5ea1d0d7acfb66b764636f4ea0f91d5169f2e6c363ca4969dba91ec201cddcef91cd1fbc7cedc46666c110a5a75b3c2c94dde10055c1a1bba827ff85093eff6aedfcd6531754d33a8bc9d6f2f8428cff257cc33a2c5320f32a0636d9d2314ea3eaf3"})
r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x22840, 0x0)
pread64$auto(r2, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x7)
shmctl$auto_SHM_STAT(0x10000, 0xd, &(0x7f0000002500)={{0x2, 0xee01, 0xee01, 0x9, 0x401, 0x80000000, 0x2}, 0x1, 0x1, 0x9, 0x3, @inferred, @raw=0xed, 0x9, 0x0, &(0x7f0000002400)="9af0019b7ef18d47a932deca6fbae7e8977e2bf9975103066b57ffdb47fbaba2a680621512a2af265ffbe15630c6f394e54a69b23be3c375beb4a2c0228f4c04da75fd0a8f6b9f5dbc5a711ecfb35c9c228086d0", &(0x7f0000002480)="91ddd9fb1ee22dbb52545f6fcb56600cc2233183069323b6f43697f413546b23ab21df4b45f5eb5d6d8e74918b6a43a1f371ddf4d4a97d9acc666991743c96409ea813e3c16aceb8bcc9fa0112453b992c78c0ac4b854d6ebfe34ed7eca0fc040ac40b731a11"})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x1d, 0xa, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r4, 0x40095505, &(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x7, 0x9, 0x8, 0x1})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x2, 0x2020009, 0xffffffffffffffff, 0xebf, r3, 0x2000000000007fff)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000001100)=""/4096, 0x1000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r6 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev$auto(r6, &(0x7f0000000100)={0x0, 0x10}, 0x1)
madvise$auto(0x0, 0x20499d, 0x9)

2m45.801880716s ago: executing program 4 (id=2406):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0xfffffffffffffffc, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
mprotect$auto(0x8000, 0x8, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x10, 0xffffb)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
mmap$auto(0xfffc, 0x1, 0x80, 0x44eb5, 0xffffffffffffffff, 0x20000070)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x22, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x10001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x0, 0x8fd6, 0x10001, 0x3, 0x65d, 0x4000000000005, 0x6, 0x1, 0xb, 0x7, 0x1, 0xb, 0x0, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

2m40.023730969s ago: executing program 4 (id=2420):
r0 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@_si_pad}, 0x7ff, &(0x7f0000000080)={{0xffffffffffffffa8}, {0x91, 0x4810}, 0x4542, 0xff, 0x1, 0x6, 0x1, 0x9, 0xffffffffffff8001, 0x101, 0x100, 0xffffffffffffffff, 0x6, 0xd, 0x6ec, 0x562})
kill$auto(r0, 0xfffffff1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000380)={{0x88, <r3=>0xee01, 0xffffffffffffffff, 0x9, 0x7, 0x6, 0x3ff}, 0x10, 0x7ec, 0xffff, 0x5, @inferred=r0, @inferred=r0, 0x101, 0x0, &(0x7f00000001c0)="1a3699e3fedc935fdf62ee3b20681bebebe86b92df3d402296e345116d01d8a3a03ede1ca09fb5469303a889c0e8e3d97c562f89caf61c4cc318e590b3e10e29cb7c10105991a87c006e775f92b32d4e788d8a825497a2964a053dfe901f81af5e6673356c2549219242acffd4c7956580ef225bc7ad321a2c3bb749d8a3fcc11d3363d437138f0d752b8004430f1d", &(0x7f0000000280)="51a72f9f08ec518e4b34da8fb8065e009005ce4d8093ba52fa42e351eb982be2ea750ffeb4b66433f6e90bd526bcd9623d82b72fb4cbacfdf4b4d5d3e3a3afd18055f49881a412788fec9199c19b7080edfe4ca8c346f54a51602d7a49afaef0f48c76f1b3f8c141dd22e05edfba9edb3b2ed73ce494da75da684628ebd6d5f5249b4895bcc0f6787943c5d140becfd91d8ff26977b244ad5a51b6ac09c6d1b49e233bea172377e38b748f299c83afd4d7875d19a12d13d639d754d24a6e24edf8b792b77069783dbb6f7db120c881b541f9b5fa7c"})
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)={0x3b4, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x37f, 0x18, 0x0, 0x1, [@nested={0x14, 0x106, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x150}]}, @nested={0x256, 0xd5, 0x0, 0x1, [@generic="7ee981fc893649a593fba3e94105df91e5ad87f22e12ded185d288558224ea6c3a0069455d753eef0f068a8d6c4db378dde82cf68793ae512aff397600e1d0682ec79a2ecb72e1913ca898dbee879ab927df02f97962166a3c97040ef0166c226437a7fe878d4e34005e67488cec0ceacb840bcaa6ef71be35aa59b4f8df2224e97be326af90cb42f6a75b10648a3dea8bb0b3f4057c6c445963faf9a478eabc52e08e6cafbf9a759d230f4f3894ddd2804bf202e3186a1e13aad1ee6004ae8982b83779ea08c05bb2a6b8d549ed3d57d8bdec82bdecb0b977d9885b86dbb56f4bd048db2cf78fe5cd0cb46a21d3d9f23a9f62e0fa92", @generic="ba9b90c117b090cab54870835cd0e5662c541270a9e07912caad9ae21aea2bb4bdc620f9515f703a61aef56a8da591ffd44a15e00478810fd04a6e825b055d71be65f100a2bad8c1fe7b6ea2866876e6907f28985ca97e9a48f3d6e6144a", @generic="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"]}, @generic="5227671c447d0d2fbadd8031e806d11d55a35ad0278341584e2bf7", @typed={0x8, 0x114, 0x0, 0x0, @fd}, @nested={0xe6, 0x108, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x78}, @generic="a30863e0aba77659bb785630ea5b6f082525403c34d4cec95e267693a69dfbdfdd656ba9a5670c5e477261e57d410bb4d2a0a8384356486fff8b477426e18bc352beaef881b86766f3b3ec1f67d6e6bd9c978230d69bcf532fca1dcf3e6386847febbb83dca56f381321eb4a19d8259a4093a95ed322", @typed={0x58, 0x123, 0x0, 0x0, @binary="a0228ecb61f4cd0dd30feaab5fe8883a94b1ec805ef7e43fd7f3546477b08281ddd69e5da94e8570e7a1b541481f9565f214b62698f75a6e9b4751e258318e8f0508c59111e7ea4eff422567f4f2229cc1bfe67e"}]}, @typed={0x4, 0x2}]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x30}, 0x80)
ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000840)={<r4=>r1, 0x5})
read$auto_fault_around_bytes_fops_(r4, &(0x7f0000000880)=""/171, 0xab)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000001f00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000980)={0x1520, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x150c, 0x18, 0x0, 0x1, [@nested={0x195, 0xc5, 0x0, 0x1, [@nested={0x4, 0x127}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="aa83702fbcee86e9ce4f0e0ba23c8b93fb285c862df3474606296e61016842a4722b7950ad45ce89ce35fdf4e771a8478a6331608b26868dd3b6de262866c3f03e95beefbd8064cd7bf78b3bf5e027991058924a73f70a88663407118234ed3daa2804f2dbdcdd4443bd70d337a443278c650893f5bd", @generic="b5a45f3c5e96095bc409a1e38cb401778e9a0b91134baa078a6db1acf2a2d94a2b20d518067a1da7521059208d1d905c9650c9aef1f58b8b87aeb034d0f0cbc79b9514ac9d25746f11ba0f33aec38c5e3736a214a26e3323a6be5aa28df7eb7a923076f7ccb2f5ab9deaaa57be0bf952f60c8dcf52eb44e066652591b82596d848baa55ad5c53c1045b900f0aaa78d156c6be8fdf7217ef98728e067cf0f7233e72733a6e2d034f1cf4b4deb3c157c78a1b76bb5a28ad070d31f465e8054b9342e1e852e7b2394c8e95a15a0631adaf14a6760a8053c614ee8e44460a422190ec41721a0e7f4de", @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @nested={0xdc, 0x9f, 0x0, 0x1, [@generic="936ff8642aa50bd3d755e1302c9156b57df4524ead2841c63b63df676c71615c1316e5a6970d9720e48a4d5105c3070afaf12e2d61c94b03f527dee0605fa2dd8094da5bf122cd505e61edeb616f52c07e003a9a50c13588ea345d992d2cf9bcaa78422fadae88b01765d0df03df7bca6538e44cfa47bf3191dbd0f4118f602e5a79f7fec74b1a417a9e064fd6d17cec32a58e08a12251af099d06753725bca131f0c57122d647cb6e65f16524619e2a", @nested={0x4, 0x8f}, @nested={0x4, 0x95}, @typed={0x8, 0x11c, 0x0, 0x0, @u32=0x2}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x26}]}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x35, 0x43, 0x0, 0x0, @binary="83bcc7ade264fc9c51f33e7fb7ef9fe194dc95d6b73acb198d2fde6bd88acd3eded20522241ecf751425d701e8562a6146"}, @nested={0x1120, 0xb, 0x0, 0x1, [@generic="e85e10bcc7054dbec4ed37381b395d0907aa2a2f0050e26bb202f44d5819521ef86050a8e02add4c6f838a4ffaca764b8fd11672669098cfcb0277b3dc60e2b86192d36f5b5eb6d35ef994c895a16dfc5ddcdfb7921521eef7e901c8b3fe0fc7d9976edcb4077c0a83906bd5e2538e9ddd9e127d5899262d78246dd86cfb7780999dbeb34f3bc0d6b8ea756e0d9f7f714259c1d79051759c2e606cbf526a1bbaf77ccee73c45d50a89b49d83fd8e6b3e88c9991d572f5a1328ac08d8e7ec0cc318b6604f4ad025e321199175282b9128dee1bca67c1e3d39e81c3f60408c9aa41bf14176a062ba166c913b949abc7fbaf208ce5cce62e50d8902a7f42a01b6274c032429cd92a54f2b446c37db073b4bde55d07118db1c33645bfacf59ffc4ab5b0d6e313afa42119814cb3f504d4030ff58c0f28661beb7a860a657a0582c6336f0416932e491d2691bc4ad3bc69540518ebfcd2b06d7f8030ca81d79ad063edb61bc5b81f74d063bf231c0fa44d9dfbceb27ce0a0f8174084bdc86175df194edb36f8f6a8a3fb4351a46bf8776987ef5d1c27a55802b8647dac1bc397c0570d667bb6001b19769f25928c0765c38b9d5dc244894f3dd2194f831cc80e2477378bd678ce9afe24370ba5f025fbcdf1c6c5f99b3122966915f08fe508dc95e78b6ce49da76367c69b3d8245c90be6d9bf961761a9608609e431b6f83a258f08e1ee04178886667fd4c788f7e608aff929650e694a7ab765d92b88853685fc303f8c1bacd0e69ce5ab21b4b99b0eddc598113473a4bc729217d719f997d2f204552237690689b8696b990b6d0b9e67402f60907561a2fc128165f308f84a63d7d9f624a87d278c49ce53a44c457d7b60ee90590bcab646200082f3f89d94c62d2400c9407f8e75cf0f7929ad6518da881660426d620035a0ab7adcd22206a2ef911c8401ed90b548a7fdca3565da778624db51e4d7623a08f53f321dcbe8624115143b9d95011fe61b100ce14200f8024118b3bbf260fdd5a67de93cbfdd73d78ba2a13e9eed3ff1f7bd5760bef0c3aa0d278a6d92becd3aaca209777c6ab786418c849b3606b12ea52e19f6d120d967858b7fd99a7e37a8fa95550766b6d4d1749f69f3065cc8e9877242db07efa88a2e4b56836eb4ca2b677f17b8c264b91f74bc289e89c06de96b3b8063956fce9124e217f45f34da810986185e0d2700ec0061b33d4e8c07eec6d82970c96c0f21cd36fd36262eeab29f7df099dc41b82121b5737cab7ee75fb15d46e90d71a7c622b00fe1a68b79f05509dea3b2f7df1df71a86d58bbb2d6c3267b5a09e9b5aa7f88d0956b25b103579728f91d0364e554c309119f45c329db8184b31c209865e0fd7812c4e8d18506ac8e87e57212a46ed8811aa64a66c41274ae9e1a429655324a7ca568691a5a46fa3c91b088f47d10078dd9a88bc355c503f3e00ed3fe644d413c10dea73d8ca7e384ad1f5059800f36bf44e7488a26eb4a0957af334a8ab977e3aab259cc5eeea07574bb7adc723f702d8fde6c67b6568f9c4e0c4a94e78b59c2dd1ff0fda421b2233ba891478a08f3909a08ab5b4af48827dfe56ad202a411ecb0db7f5f1e11a4f6d6006c5ac3ebdd8d3ce2cc31495e444379ba8ba075032562918392e10ff26db46eebc0f75fcf85a29167b6ef4e5895076ea321a480e8e979fe87877cdbec23570adeb0273349e1d35768e4ea4de991dbec50f4ba73ce5a54c6bc03a8c4320ac10d8d68836aa5ec91800bab45c27d984764d8721b930b72fe573aa9a4717bc042d1be84709066fb8b9b7f74bda5da239d93ef570157cac626db4fcc2b52a9b925cf9e94f710b590fb1661efa59f3ea8b199cd2fd17d929a727f6bf625e48ec9ded5558670c344e38bcc988658ebdac4178164c7b47d44b81707bbca3f118076271314b7c2f9ff53a2753d8b03e7f70351904eb628c0e3bff12942ec26ebf44ad99e4b53b7ea4c9ab01c15a80ef79535d2a655faf5fca7a045c4272f6fe8c150c0cf9f061d97c1c5ae4b2e897077c3ab73eec4e7a90aaef105e785b45effe6b91be74113306586031d4de7480668486fbb64a19ea24306b8b535b957901345c99a79b06c76cc8e26921e7eab79a3d9067952e5a7e4e595a6ebace9c24b4a131a8382945663fa04b3df5712ec7f6897f61a4bbb732ef0183691f7c13077143c021cba96543c551bd4d7c52013f607d42e6c42f037fad80d2ea3bffe3274ab4bcc2f970bdfd43f5613b518cad1bb38593d67f817ebdca30dc189f435b3e09fe51655c8095845c585d291bf937e200515745635e6131c0f3a3c64801c7b18abcb7bb171e1a73738f7a304d871cc121136fda189d195de71612f456375e106fd980aa98e20326d346cd53024308ee5c5775d9ecc1933eda9f183a3ce3b2b2d922ae6e71c800c72b1fd3e8b0e93e0fe53880e9901521316d47673b4f8cd4666170d3e46bbd1fb618d2194f59802eba0ee578942550550e279f1f1b715b060bb6c118e746412dc07b46b38375262d810a3e01a8927a439d74be47db267df8ec86c8cef01f8fbe2a778d2eb8ef9dbab7e61a618ee6daf51c70bb06f9b94c9c8d72812963cfaaa73a19fc59fafae6a44f5f144933108092672dfb1546bf0c16f4236f89b0e267d877b429e995d0868f358bac383aa451f0ab0108babade18bbfd0cabe3b43f5cade23d2a03652c570c21a57547c147ea0b225c9d369226fcf97b0a1db14d2f61042582255ecfbdde9cecde0c1af8b0d55d5afb1ed84ddebef70a0663c9e70b384db2cecfc94f9e05a3f1324957b7735d2a9cc5571ef67cdfab9cbf29d61ade4540afd626f278fcaa1dc3efb4de0e59bb5c6f7092d66581cc771d3613e1858e25b22e8a43fa03de69e20d87e17847d384cbce7b5a5701fbc07c0d8f75dfb02ca3ad49e5d4f01cb9aafe5f710dc4753a2979d25ad31882148506bbec42a41919fda251d5631428d193f426cb12e8be821a18f593745b04c9870b68e080cc815c65f6d21779391ac7edd41d7da2d12e6c99aac7894792f901e39e00894bcdf3e419a5c60cce46371cef481c7a5f82b7d332cc4b6310043f551f8e46d65248413205e75f27bdd8881ed418acf0ade430deae2ece566e4dee03190c96eb2f7177895669a9a35847e4371691076b6da93d457c6a0eb67286115165b72ebdea046ec58dc09e1c3f875c7d9990ccb02f03eeb7e7a327b5f92b48a05aba7d9d606f76e06cd22fb64de5e8b88abad374abfdde5721548cbd927e36f7811ccb20264fea0fd45be6ee4f3307eb39c05146006f7fc54de51a814d004fa99e115fd054f2202249df92a464126202333f15a164d6d9696efbd9f0f48e9573e79faae7d3fa2f0fbfea843c4707d03af71815a6f2295efb9ff36b905f546f88b0ca5ad63c92e0be2ab41244a7f08296ccab841aeacaa4ded926168103b80f73b97ccaad93b342528a7ce637bd0aff15f95eed6b2f8558c1d46d154a4d04978435c84c0c8a5ec6a8a715d2f840041e74924e8833136a15c97a017aa26e13260cf303ada34f21e889e35ea738b9d7a2785d875ca3f5bb5c58c0b01d3b42d1be496714aaea716c335fbc1d355d04c8d9274d479889a869105c4dc7dd4e8e8bb497af94c1374e92f90694e4234c86e21c3c9b825f0487ddb3373a71114dfd35bfd786d68f8b1c2b3dc515fdbb4183b60ce9b751f114ae635beb8ea950258ad9943e8950653982fa64ff1b9d861dfaf85cff65e5178c502bcdb3cb7e55de8358f390a704979b76a2460298e9d940907c1e0a77004b689aa1dd0a37fd1ee56d2a1517ad8887c6cef3e4a2813b0b89953c99a377d047dd8642456c6b70106a92c1d48621624f6e37a0e1cec8b6749e8357cc75684345eeddb8cb60436eaf1a9b4906021292c7d401174e2f6f400e38f8953005551f8dfd2606f52b563ec1b74cf92cb206a46dbeec36fd52401fe7db03daf08262140548ceb23ad17e8a63a39af2dbf223d422b7fb1fe266b5f77b359662c2cb28b7003ed07bd86570a3aaa5c2a83371f3ca404918e6934107c88d50d549b359785386ae8f0ad325684da3b46ccc6667a434ff61742543c8cdae5f9e1b63922ef95cd5112761419653985b289c21ffee1c21153ddc4a3ba20fa25ca5119b442d61084aa7faf67793e7b37b2650d015bc1bd6e0a06acad416e9caa18307cf3c4846b329fcada85d539e6b2bf0182aa0814312c81bd7b551f546ffbc6762630ccb9e47093197969c81c22446d3e2f2d07d4fb3297281ce66e62455b3471b2ddfd2ad96ada2aeb5f6174585c111f10818e9721fbd11a078597fa83c668ec24c0f2610e41f8d444508c1cf556a24df9b6f265aae209fa7955ad1e74182a3a7b9676e30bc17461200e96c7830a9d948bc7fc5ded65a4f50c905cbc417dc547d751090f9506e35f4754f63f114f3d02293932a6e234e080ab25a9f32ad9ab87d45e3a3af3cbe97da94719180aafcee29d00b41c3ba8413b41067e68a86e4d20aa86e8b706b359d1b8f71661320f059ead172db03e08356d338bb8d81a2f4fedc5db9dd1e1ceb8f03b6a652c039f03c6cac0dc5a8bbfcbce712a778e1248926f8752a16666aaf2847a5791d739cde4fc065f3a3c035d28fd3ed99356b9b64d740010d478d8b1bc4245ec89ee3434b107120358d5b356d7ca683587752411f664e9aab80c9b9fd3363e5e4c4ffb897095096c230885042473e2603c17843f3fd7cac10c779909d0e4872f59e40966c1dfcbdcb79f0f890185d603058bc8669a27e88b1c4d55cc3805645e45bfa85cf195daa272735670f4a7ce1c78f83d8f007bb1315f53e737c0cba4583c919a64135ab59381787c1e4a9b7cd0b3788fbd08350fc9b23f8c3f9649f9c85d89a252cb78a4e2a5245b0a44e83aec0792ea071c5a39e2afb3e9a9f0251a65e23cb355761cb32b55e020d8e6fb4577f73f12fd80b9ffedaf7128ddd141e38a8fb113c4d1548e85336378ba87b62735778cfd031efdb049364bc0adddd765b7180f8e6b1c5b765bd292e6e3b768ef875b26984c652efbd787c4075220b1503e6f6e27e412790ff1beea381d5d4f8b5eb2bc4ac20096c5d6260779181d9dddab7d5f5cf17e6f04d19508a93031eccbf6929f3f3ed774bcc806900aeab3ede438785de7d985aaa976233d4827e7408bfc58c88610481655cd0380b44e4538f75a396e4fdfddfa32a3970935f03239215277b1aac59f8ff12b778d39f0806baa139736832d5293fc0b27a0a43134a2d955849e06689aa2c9adf23a2b3f6a8b3d302c19e2270946936c8891e7c92a9c4bc4580c165fdd4a7aee6648ab0a558f425e9001efe0e01db9b30aeb1a6918134861f2381f61e47cda763d3a16d18b40ae3d96aa9b02a1cb15def97553f61b10631d90323edd59e237142cb3619fd3f3d354b35ec69b132feed7321383d32191dbc7cc81b6b95399cbb05825952ba2d7a61c35eb892ebe06f600122964a1165c7770013616aa657e7fd94a6eb9657377d955e4c6d3f145ea77149ebae6e1b51c226cad9d6fde3e6f556183bfdd1c5d259ed84c5452f6a6528278d68985d9c227993472bdad8eb7a7bb3e1b301305d5b9697b3780186ca46a6ba9ca86173b76566faf9e5f9c1d553a1f18587d6cdc3799011e152dfbf8fd75453b2048ab1fe638a8b5286aa9e2a3bb78f3bf70c8a895cff58856f2712ab992defc66e267f6a6d25ff5d720bef715efe76cf2972ab1b211dba5eb948aead9885e7f9b98455bbac52db6d080b1b85cdbae", @nested={0x4, 0x130}, @generic="0d0d8cf44d8c479a196bca94c65c4755121d9e495af05514041b6b78e045870ee11fff13d0df1de1c90c1ea833efa72c6e4f2c4bd3d741787b138f7f90a23205dcda516b305171ce63fe347b7d13391f41c1ffd9a50c0792055a91dbd48181574e60134cbcdd3a6ce98450949616538d6b28a8804fa1a3769fd31693ceae2bfebb795046c46144f2a0b0fb1a76bef0e06033723ad471cb285b8ee70d863922c7feb14356a1a4531dc29559e79b3e440e524249bcd597f058de93e224774a86ddd55f0ffdf560fae1b6216c3a00b710baabbd558a9fd3e86250e5f72c5a4d118b12fa0f0d97c85e538c676044f1fc258ca33650bac6d7afe7f7", @typed={0x8, 0xbb, 0x0, 0x0, @u32=0xd7}, @typed={0x8, 0x50, 0x0, 0x0, @uid=r3}, @generic="c6278963c309685c660ea398422904"]}, @nested={0x120, 0x107, 0x0, 0x1, [@typed={0xc, 0x141, 0x0, 0x0, @u64=0x4}, @generic="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", @nested={0x4, 0x13f}, @typed={0xb, 0x87, 0x0, 0x0, @str='#[#&\x86^\x00'}, @nested={0x4, 0x14c}]}]}]}, 0x1520}}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001f80), r4)
r7 = gettid()
sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000002b00)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001fc0)={0xb00, r6, 0xe04, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_RIC={0x591, 0xb2, "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"}, @NL80211_ATTR_BEACON_TAIL={0x2da, 0xf, "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"}, @NL80211_ATTR_STA_FLAGS={0x1ec, 0x11, 0x0, 0x1, [@nested={0x17f, 0x44, 0x0, 0x1, [@generic="12e15c539f92febf2a6f42ec529ed57f44b6f4ca3f43d139c3f64ddab5a09cb0aa892ef54498f073291a6db22903f3aa50ce4d22fd8e0e4eca8557a0cef657d8615b4750e9392ae1a1db29be62662ddde2ca8bad2cd5c0c24cd450e21d552d2441ddb84969908d31d459394da00f7e07be3689e6a574b3dffa3bf29fe6aa6452d6785d5d73c05eaef09ab9", @typed={0x9, 0x11, 0x0, 0x0, @str='{,\\)\x00'}, @typed={0x4, 0xf2}, @nested={0x4, 0x97}, @typed={0x8, 0xed, 0x0, 0x0, @ipv4=@local}, @typed={0xce, 0x1b, 0x0, 0x0, @binary="12098391ff3015008e1d49fd53b9857c535f254ac1f91b4c654306a8370b05d0f9fbaab7c141b3bf79661fb44080f50d05f1815193d3517c9ea45e9131a654115f327e270d28f42a665e2ee5344c5287f20a067eac0a2ca2ef4a603cc755703b1f678e7c82e02537c923b4e0d9a698bbc9defd16378068a9267c8e7bdc0b471b747b84165e642ac408099f2d416e867064dcebb176585e598876c0189d2da90df9bfa770e97b4c087a432382fa982ae0f90b97834f3a9d90e6c900ce399f3bf597a07f5ad6e6738f4b1a"}, @nested={0x4, 0x4a}]}, @nested={0x60, 0x33, 0x0, 0x1, [@generic="23d3db2913837a87f2e6241c65e2170a6a80e433d22e1d2d6606847ab02f5af2a0c85ececd6dfd04cf41626858517bb26a4c96ba3744e7a221e6ec2b041eb552c0ce1837", @nested={0x4, 0x68}, @nested={0x4, 0x18}, @typed={0x8, 0x86, 0x0, 0x0, @pid=r7}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r3}]}, @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x41}, @NL80211_ATTR_FILS_CACHE_ID={0x7e, 0xfd, "8b83d02e0ddacb718bb667d7b533e46f7bfdd3df7112a74a66b1b7a051130808e3b76c04b08da1d3276772d074dc259cd7c765201108e6f56651ac667aa613feeb2e1ae9076480ddd1c05fe2c003c4565ad7c84e84dd431c1c551312ce42681d0f6a25dabd5e019631a5dfbae6c22a9111b3f928ef3ad1e05f0e"}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0xb00}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000002b40)={'ip6_vti0\x00', <r9=>0x0})
mkdir$auto(&(0x7f0000002b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000002d80), 0x24800, 0x0)
r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002e00), r5)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40005)
write$auto_tty_fops_tty_io(r4, &(0x7f0000002f00)="ab7db5f75243f4335a21c8c13bb5e3f4b09a13efc08ba83fc6aac4b0d36467e3e6e2503a7a7aa9f7f54e80f45855d7bd46ebc8cc5ffa0509bc0b4da8f807078a6a2c9cf194d082c308666cfa55d815c83532cba5d43436f4c1191bcbecf79254035fff", 0x63)
r11 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto_def_blk_fops_fs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r11, 0x8)
rt_sigsuspend$auto(&(0x7f0000002f80)={0x8}, 0x8)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000032c0)={{&(0x7f0000002fc0)="8f57d66f3f03abad13543bb8525b66d061a7b83ed880527055888d5776bb6ef294a5ddaccbabab05df0177d3b813b55c129dcab9d01c8c12ce32450443280849089c88632dccaea858751a25f4c0639fdfc1fe9357cb7f421a13313b5c9b93c4e658dc653f262e212cc2831730575dc78c75196d846c7036444295b5818a7304d65375bdf6f2b9d7c02a9d239bcdc59869589106f25ddbbe4aa8b7d2c1c00babc02c8cf12a5a44ca33d9761b6355b45aafa8599d73357fa900d53351a93a9361c8a98aa55bcfa26c3a5447fd", 0x29e, &(0x7f00000031c0)={&(0x7f00000030c0)="d23c4766cec2f7536cf6814e3215b51582a7b7b44c435640542364bc00196ee9d7731cbfdaa61bf32d81de902b5e22fe376d96745179bb95e2d15819462d96603cddb533c8cd4a7a9a28cc93e39d9ec7d2c1d3f26a505518e39b001b85663d7b81afb5c561efc91d8880225adc13300697a2822756bbaad549150d5ba8db09b1e5b6a9c1f01113f1b0647dd11f17fab40acba2488a41f6debdee27d7f1550dc248f6df95aaa1884c444085781cc3c29f331e6c4b3b07a2f0c8fe3332bb45b6b17d73ff49881576e048d292200da59b7cc5d34c7d1abeec641589352c36507428eeac3b0539b6fdaa228a13", 0xfffffffffffffffc}, 0xb625, &(0x7f0000003200)="5924b94a902e15791af2c157e2e6837b45ee4b51d7667c333cb44fb650a843b4c73afbe2150f87b173c09aeb4f485caecfe89c0b03b95a37242646a171cb434a14c3f703f7326d61578e6c44a88d74255c7846d1b8bd9b47f74c4a79e11929581ef39e487d310130d32c8e4f656bd158b16c5fd38bbd832b5a4b23786b4132e856ebc997a4741cb929028c8e7765a0ec7d9aab87b6c53af262144c78e353581cbbaaa0696b099359f9bf46afe87263cbd3a39c0013a1496eb24ebe57", 0x0, 0xc}}, 0x80, 0x9, &(0x7f0000003300)={0x7ff, 0x3})
read$auto_ima_ascii_measurements_ops_ima_fs(r4, &(0x7f0000003340)=""/102, 0x66)
mmap$auto(0x8, 0x4, 0x2, 0x15, r1, 0x100)
munmap$auto(0x2, 0x1)
getrandom$auto(&(0x7f00000033c0)='\x0f$t\x10\'^\xe8::(\x00', 0x8, 0x3)
r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003440), r11)
sendmsg$auto_ETHTOOL_MSG_STATS_GET(r11, &(0x7f0000004780)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000004740)={&(0x7f0000003480)={0x12c0, r12, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_HEADER={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x80}, @ETHTOOL_A_STATS_GROUPS={0x1271, 0x3, 0x0, 0x1, [@generic="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", @generic="ef55142ebb7d62373831f521988d570503ad5ea778d7a19f2b2d2330b5aeeee6f6a299363184f60d8247790128a69349cf43a2c08c3d32aa3e39599035fb93b12f2e1708c30544710d837ec23e9a927e061971431d628bb662bee7e4321ae8633586b6caab2eb7446c5c6b8345db9cd0a98547eeb713716aa5294580c5608c0252855c78f27987669364f52161c086c442d65f76a75d4004fa6e32439e87c69a1190149a0f9e4df7c40347f288d5a140ebe1fe0926f6758395c6c5d186d890ad26bbb090775833c62a0ca3d6f80e18f71dc5a0b5bf6db8084bbaf3543c75176372a9b33b306270da21ff8953f48275ba73d0", @typed={0xc, 0x47, 0x0, 0x0, @u64=0x9}, @generic="8cc9cb0c8435bb4549af43da6f9f244a480e45f1dd438f2b8d0e115507be1d6768438089b9ab1790c05247743f0675246c66b6e5e570a36e13da99514d224968b67cb56e67c165752956dc8d731d0b83bf847926b4033ff18bb25cc0b5eeecbc26a891ac9150d2738f82df901dc6633ce6ad827f5d5fce2b63c669233455363a4199042632d9193c28e4dae125ee60143ecebb4f250246cd02a987fe9580f3b4942d0facf2db97d98056b7febc0699d72b6974bfd240d208c524", @generic="54bafead51d81a8168f39be1bb2c515294ab0d54fa5a954e65fccb8939a9ead4f35a272785628e05e6ce33e7571ff5b7d660af5269e3b962852476c085aa71d3b776117f87225296bcebd3b5551d3e01987f74743807420072935dbd220503639b3b3f24377c9b111b2189afe20aba8f7688f1772215ba674b1d60082bcbdeab7409f2342707dcd05fc2766be6a038c371ff51d04e4798a43ed9d4b1fc48cbe3884cc60021bcb258aa24d87fe2b8606d13966494c7"]}]}, 0x12c0}}, 0x0)

2m39.021877389s ago: executing program 4 (id=2426):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x15, 0x5, 0x0)
r1 = socket(0x2, 0x1, 0x106)
semctl$auto_GETPID(0x0, 0x4, 0xb, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
clock_getres$auto(0x10, &(0x7f0000000080)={0x5, 0x200})
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x02e\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000280), r0)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)=ANY=[@ANYBLOB="b811ec00f80cb0d7f7def5e68e981c961d97967f89097eece6c40ccf31456e0d9337ac0ebf03000dfeef83fd6923fbb0e11ab117ec61bf2f5e665c78c46d88a5a08f00", @ANYRES16=r3, @ANYBLOB="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"], 0x11b8}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_enter$auto(0xffffffffffffffff, 0x1, 0xeb1, 0x7fffffff, &(0x7f0000000440)="fea7f2866d7e2025bd14091592dc3053c3268d4d9ad50957b16e436e9fc67d3cbf1538b34a5ebc5921770a704806763d73e237cb679fef877b8ef011cd7ef289a2aef1bcae27c95ef2e34a3b8fcf92286b92709f0ca70d335412fd275e888010f14b03ff884e2affda70d4b1d99ac4683b2e34547c2e9c34d6eb23f6ebb8d04931e4e6a57f50690f66050da3e10d70a29861ea263b59b70ffc62145ee05c", 0x2000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
write$auto(0x3, 0x0, 0x80000003)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
r5 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r6 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000100)=0x9)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
preadv2$auto(r7, &(0x7f00000000c0)={0x0, 0x6}, 0x6, 0x7fff, 0xd01f, 0x4)

2m37.531300387s ago: executing program 4 (id=2430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8)
seccomp$auto(0x1, 0x8, &(0x7f00000000c0)="04")
r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0)
write$auto_dfs_global_fops_debug(r1, &(0x7f0000000d80)='0', 0x1)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)

2m34.212867824s ago: executing program 3 (id=2440):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x101000, 0x0)
mmap$auto(0x1, 0x8, 0x2, 0x9b72, r0, 0x0)
r1 = socket(0xa, 0x801, 0x106)
poll$auto(&(0x7f0000000240)={r1, 0x7, 0xc4d}, 0x1, 0xf3e)
setsockopt$auto(0x3, 0x1, 0x1, 0x0, 0x9)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x101001, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram9/queue/write_zeroes_max_bytes\x00', 0x20400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/255, 0xff)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
ioctl$auto_BLKRRPART(r5, 0x125f, 0x700000000000000)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', <r8=>0x0})
setresuid$auto(0x8, 0x8, 0x0)
ioprio_set$auto(0x2, 0x800000000, 0x8)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESDEC=r3, @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800)
open(0x0, 0xeee00, 0x31)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x8000000004, 0x0)
socket(0x3a, 0x0, 0x2)
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x9ae3, &(0x7f0000000380)={@siginfo_0_0={0x8, 0x40, 0x1, @_sigpoll={0xfffffffffffffff9, r4}}}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0xffffffffffffc318, 0xbb, 0x3, 0x15f4da06, 0x3, 0x40000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)

2m33.255885477s ago: executing program 3 (id=2443):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54)
write$auto(0x3, 0x0, 0xfffffdef)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0)
write$auto(0x3, 0x0, 0xfffffdf2)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14d142a943201126, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x20002, {0x100000000}, 0x5, 0x4, 0xfffffffffffffffd, 0xffff0003, 0x0, 0x1, 0x9, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x80c})
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$auto(r2, 0xaccd, 0xffffffffffffffff)
setresuid$auto(0x2, 0x7, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(r1, 0x0, 0x81)
connect$auto(0x3, 0x0, 0x55)

2m31.662004146s ago: executing program 3 (id=2447):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
open(0x0, 0x280001, 0x4)
pidfd_open$auto(0x0, 0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e0, 0x40eb2, 0xffffffffffffffff, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18)
open_by_handle_at$auto(r2, &(0x7f0000000140)={0x8, 0x30001, "0100000000000000"}, 0x42)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x4}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xc7f1, 0x200}, 0x100, 0x80000006)
close_range$auto(0x2, 0x8, 0x0)

2m30.836446534s ago: executing program 3 (id=2448):
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={0xffffffffffffffff, 0x81}, 0x3)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020209, 0x800000000002, 0x10, 0xfffffffffffffffa, 0x2)
r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/tty/ttya6/power/runtime_active_time\x00', 0xa82, 0x0)
mmap$auto(0x0, 0x402000d, 0x200d8, 0x13, r0, 0x3)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/veth0/accept_redirects\x00', 0x2000, 0x0)
read$auto(r4, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0)
r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ppoll$auto(&(0x7f0000000000)={r5, 0x81, 0x9}, 0x9, 0x0, 0x0, 0x8)
socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f0000000180)=0x8)
mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, r2, 0x8000)
openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x40, 0x0)
readv$auto(r1, &(0x7f0000000100)={&(0x7f0000000240)='\x00Y.\x00\x00\x00\x00\x00\x00\x00\x00', 0x3}, 0x3)
mmap$auto(0x0, 0x20006, 0x4000000000de, 0x10010, 0xffffffffffffffff, 0x8001)
sendmmsg$auto(0x3, 0x0, 0x27ffc, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/nr2/carrier_down_count\x00', 0x2200, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff)
write$auto(0x3, 0x0, 0xfdef)
fcntl$auto(0xffffffffffffffff, 0x8, 0x1)

2m29.68037682s ago: executing program 3 (id=2452):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
mmap$auto(0xc, 0x400008, 0x5, 0x9b72, 0xffffffffffffffff, 0x8000)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0)
getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0xbae, 0x52, 0x0, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121b01, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0x1000000e, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000040)="78298dc7", 0x1)
inotify_init1$auto(0x403)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000480)={&(0x7f0000000040), 0x5, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x2005c810}, 0x44040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x8000000eb1, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
rmdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000280)={&(0x7f00000004c0)={0x5c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0x0, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x211e78dc}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_CONN_ID={0x0, 0x9, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
socket(0xa, 0x1, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)

2m28.273234736s ago: executing program 3 (id=2456):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0)
getpid()
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)
mmap$auto(0x5d, 0x4020009, 0xd7, 0xeb1, r0, 0x7fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_suspend_noirq\x00', 0x8a100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/38, 0x26)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x6, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x0, 0x3, 0x3, 0x62, 0x8, 0x7, 0x1, 0x101, 0x3, 0x3ff]}, 0x0)
write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x6, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_uring_setup$auto(0x6, 0x0)

2m22.482380215s ago: executing program 33 (id=2430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8)
seccomp$auto(0x1, 0x8, &(0x7f00000000c0)="04")
r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0)
write$auto_dfs_global_fops_debug(r1, &(0x7f0000000d80)='0', 0x1)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000)

2m12.964668625s ago: executing program 34 (id=2456):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0)
getpid()
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)
mmap$auto(0x5d, 0x4020009, 0xd7, 0xeb1, r0, 0x7fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_suspend_noirq\x00', 0x8a100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/38, 0x26)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x6, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x0, 0x3, 0x3, 0x62, 0x8, 0x7, 0x1, 0x101, 0x3, 0x3ff]}, 0x0)
write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x6, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_uring_setup$auto(0x6, 0x0)

14.383183646s ago: executing program 0 (id=2768):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x400008, 0xdf, 0x1ff, 0x2, 0x8000)
r0 = socket(0x37, 0x4, 0xa)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r2 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r2, 0x0)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYBLOB="1559b6b4bad4815cc371293cbc87ff9def4bd086a90a2ac7eb64da23af2a64ec49158e7f181c967279dfd80d0ddd3255441ea6647abab6ee87de37ee", @ANYRES32=r2, @ANYRESDEC=r1], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x60000004)
r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000200)=""/34, 0x22)
ioctl$auto(0x3, 0x40081271, 0x38)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffff70001, 0x1)
getpid()
shmctl$auto_SHM_UNLOCK(0x40a03811, 0xc, &(0x7f0000000640)={{0x200, 0x0, 0x0, 0x1010001, 0x4, 0x0, 0x3}, 0x8, 0x3b04, 0xc, 0x81, @raw=0x10000, @inferred, 0x7, 0x0, &(0x7f0000000100)="abbccf8a35fce84f0882858654c07eba", 0x0})
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x10000000006a28, 0x1000, 0x1, 0x3, 0xfffffffffffffffc)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

12.216632042s ago: executing program 0 (id=2773):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
semctl$auto(0xb47, 0x100002, 0x13, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x23, 0x4, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@generic={0x5, "444cf575c02dd753ff403ac8c6ea"}, 0x68)
shutdown$auto(0x200000003, 0x2)
listen$auto(0x3, 0x83)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)

10.401782176s ago: executing program 0 (id=2777):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x0)
prctl$auto(0x4003e, 0x6, 0x0, 0xfffffffffffffffe, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5)
mprotect$auto(0x8000, 0x8, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x10, 0xffffb)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
mmap$auto(0xfffc, 0x1, 0x80, 0x44eb5, 0xffffffffffffffff, 0x20000070)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x1)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x22, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x2081, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x10010001, 0x0, 0x0, &(0x7f00000002c0)={[0x200, 0x2, 0x6, 0x9, 0x3, 0x3, 0x5, 0x4000000000005, 0x2, 0x6, 0xd, 0x7, 0x1, 0xb, 0x0, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000005c0)='1\xabL\x11\xe2\x81\xd2\x91\xdez\xf8\x01\xb7%(\x8b\xc9V\x1c\xc7k|\xf0\xfb\xcebF@\xad\xf0^m\xa3\xbe\xe0\xdf\xb8\fK8D\xd4\x05\xaf\xf3\x96\xcc\xb9V*SHIy\xe5\x97\x8ab]\x14\x81\x928\xbc\xe6\x9a\a\xab\x91\x8f \"\xed\xd4\xbf\xf6\xad\xb6\xa6\xa9\ne\x95\x95V\xe9\xd1lI\n\xbdm\xb1\x9e\xc7\xdd>d-s\'\x1e\x19]:\xf7\xb9\xf1s\xa4&4R\xa3\xfb.\x93\xb3\x92\xf5k=#=\x10\x01\xe4\xb9\xa6U2\x9eIe\x8b\\\xef\xbe\xc8\xa5\xc8\x89\xbe\xbf\x02%\xe9\xe9\xa4l\x1b\xc7/\xe0\xb2\x13\x03$\bq\x06(6,\xaa>6\x0f\x86\x82\xc7\x04\xdc\xc0\xcb\xd0@}\x1bk8)A\xf9Y\xbd\xc3\x90\x1f<R~lN\x9e\xae\xc0\xe0\x8d\x83!\x9e}\xaaNIn\xfa\x88^%y,-\x80Z!;\xd9%p0\xa4\xccb\x0f\x1b\xf2J\x80\x81A\x10\'\x92\xbf:S-\xab\xae\xa8Z\xb2\xaf\x01U\xf1\xfd\xda\x10\x8d\x82\xe0\"$\"\xc5\xcd\xc7\xab8\xc3\xf4\x111\x8c\xd6\x11\xb0\xfa\xe9\xc1\xd9p\x8a\xa1\xcf^\xe5\xf0S\xeeB\xc2\xf6\xe2Z\xdb\v\x18o=\xe1\xde\xf9\x19\xf3h\xcb\xadgl\x87\xdc\x93\xf0\x14\xbb\x90\xe8\xebi\xdf]lj\xae\xe9\xfc\xad\xa2\xb7\x99\xd0\x06$1\xa9\x96\xc9m\xd0\x8d\xcc\xfa\xda\xdfw\x15\x9e\x96\x97\xd5c\xa5\xa5\xbe\x88UC', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

10.302195032s ago: executing program 1 (id=2778):
mmap$auto(0x4, 0x400008, 0x10000, 0x9b72, 0xffffffffffffffff, 0x400000000008000)
openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0xe400, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x84, 0x7, 0x0, 0x0)
mlockall$auto(0x7)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
pipe2$auto(0x0, 0x0)
io_uring_setup$auto(0x7e1b, 0x0)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x1d, 0xa, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r2, 0x40095505, &(0x7f00000000c0)={0x3c, 0x0, 0x7, 0x7, 0x9, 0x8, 0x1})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="500196087013b22be17beb5645c86de3638e92a907afc830e5516db1159d9ae47f83acf3726d550c00157ff586cc6d2619cb6c32ac2ac18a2b5e9b0ab6bc6fa91e11890fc92c3318f2556e30139d1efe2ae23e841ba338e3832edbabc45891392d530695f84cd2ef89cdfb6090f1f61fc942e18df111561780b165f6ab5638d0db80030959a86977e04f17e95f05c0943ce32c2950d9fcaf568d5fceca9a7ca97eb5ca696d97246c42579487a16eb094c84f2b146944361d11b951211fd0a3728ffae3ee43d7dca0c461942df5287887bda346644ab99e214a2af6568077903cc3ba941d5156464d", @ANYRES32=r1], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x2, 0x2020009, 0xffffffffffffffff, 0xebf, r1, 0x2000000000007fff)
r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000001100)=""/4096, 0x1000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r4 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev$auto(r4, &(0x7f0000000100)={0x0, 0x10}, 0x1)
madvise$auto(0x0, 0x20499d, 0x9)

9.437691511s ago: executing program 1 (id=2779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010323fd7000025cdf25050000000c00010000000000000000000c0001009677000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008850}, 0x5)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/8/smp_affinity_list\x00', 0x0, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = getsockopt$auto(r2, 0x88, 0x65, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-touch0\x00', 0xa2800, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x1004, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r4)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
ioctl$auto_TIOCEXCL2(r4, 0x540c, 0x0)
r5 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)
move_mount$auto(r5, 0x0, r5, 0x0, 0x176)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
unshare$auto(0x40000080)
r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x292880, 0x0)
sysfs$auto(0x2, 0x8, 0x6)
write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="11000000126584", 0x7)
socket(0x2, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r7 = socket(0xa, 0x3, 0x2c)
setsockopt$auto(r7, 0x1, 0x44, &(0x7f0000000180)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\xb9E\x81\xb6F\x96\xa6\xba\xf4\x98;n\xb2nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x00\x00\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81', 0xa95e)

9.437432688s ago: executing program 6 (id=2780):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
semctl$auto(0xb47, 0x100002, 0x13, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x23, 0x4, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@generic={0x5, "444cf575c02dd753ff403ac8c6ea"}, 0x68)
shutdown$auto(0x200000003, 0x2)
listen$auto(0x3, 0x83)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)

9.294499018s ago: executing program 5 (id=2781):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtd\x00', 0x10b402, 0x0)
pread64$auto(r0, 0x0, 0x8100000041, 0x3) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

8.923902006s ago: executing program 5 (id=2782):
read$auto(0xffffffffffffffff, &(0x7f0000000280)='veth1_vlan\x00', 0x7)

8.614021396s ago: executing program 0 (id=2783):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0)
getpid()
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)
mmap$auto(0x5d, 0x4020009, 0xd7, 0xeb1, r0, 0x7fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/38, 0x26)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x6, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x0, 0x3, 0x3, 0x62, 0x8, 0x7, 0x1, 0x101, 0x3, 0x3ff]}, 0x0)
write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x6, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_uring_setup$auto(0x6, 0x0)

8.613562579s ago: executing program 5 (id=2784):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x400008, 0xdf, 0x1ff, 0x2, 0x8000)
r0 = socket(0x37, 0x4, 0xa)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r2 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r2, 0x0)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYBLOB="1559b6b4bad4815cc371293cbc87ff9def4bd086a90a2ac7eb64da23af2a64ec49158e7f181c967279dfd80d0ddd3255441ea6647abab6ee87de37ee", @ANYRES32=r2, @ANYRESDEC=r1], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x60000004)
r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000200)=""/34, 0x22)
ioctl$auto(0x3, 0x40081271, 0x38)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffff70001, 0x1)
getpid()
shmctl$auto_SHM_UNLOCK(0x40a03811, 0xc, &(0x7f0000000640)={{0x200, 0x0, 0x0, 0x1010001, 0x4, 0x0, 0x3}, 0x8, 0x3b04, 0xc, 0x81, @raw=0x10000, @inferred, 0x7, 0x0, &(0x7f0000000100)="abbccf8a35fce84f0882858654c07eba", 0x0})
preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x10000000006a28, 0x1000, 0x1, 0x3, 0xfffffffffffffffc)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

8.326043232s ago: executing program 1 (id=2785):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0004, 0x1a)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000020c0)=""/4069, 0xfe5)
setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000)
madvise$auto(0x8, 0xc89, 0xffffff33)
r2 = socket(0x10, 0x3, 0xc)
setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16)
mmap$auto(0xc0a3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x4e8c, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/ep_00/bmAttributes\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)

7.729764142s ago: executing program 6 (id=2786):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0x1c94, 0x2)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getcwd$auto(0x0, 0xffffffffffffffff)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0x80000008)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffd)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000000)=@llc={0x1a, 0x30c, 0x9, 0x80, 0x6, 0xf9, @multicast}, 0x400006a)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54)
write$auto(0x3, 0x0, 0xfffffdef)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0)
write$auto(0x3, 0x0, 0xfffffdf2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14d142a9433d09a7, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x20002, {0x100000000}, 0x5, 0x4, 0xfffffffffffffffd, 0xffff0003, 0x0, 0x1, 0x9, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x80c})
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$auto(r1, 0xaccd, 0xffffffffffffffff)
setresuid$auto(0x2, 0x7, 0x0)

6.577278937s ago: executing program 0 (id=2787):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0004, 0x1a)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000020c0)=""/4069, 0xfe5)
setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000)
madvise$auto(0x8, 0xc89, 0xffffff33)
r2 = socket(0x10, 0x3, 0xc)
setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x4e8c, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/ep_00/bmAttributes\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)

6.499867448s ago: executing program 5 (id=2788):
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
keyctl$auto_KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x4)
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x4, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0x7, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8000, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r0 = set_tid_address$auto(0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)="e90500")
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000580)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0x2003f0, 0x15)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
getpid()

6.351820404s ago: executing program 6 (id=2789):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0)
getpid()
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)
mmap$auto(0x5d, 0x4020009, 0xd7, 0xeb1, r0, 0x7fff)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_suspend_noirq\x00', 0x8a100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x6, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x0, 0x3, 0x3, 0x62, 0x8, 0x7, 0x1, 0x101, 0x3, 0x3ff]}, 0x0)
write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x6, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x9]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_uring_setup$auto(0x6, 0x0)

4.382607093s ago: executing program 1 (id=2790):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
write$auto_fops_u64_ro_(r0, &(0x7f0000000240)="4c2826e0f5a5197be4cfc11d0498f4a7f3f4c3261d13e520c28c5f3049040000000000000069ab8aedc62e76f1619e31b8aa0b3a1a8a4cfb16cc6fec603a25c5f1da09718a962271f1b425d110766736d8f0ba5e42490a02bd1e25ce419099cb8dcfd749d3aca1e9b2252e9b8b32c44e0682a56e095f711d1be05b0c5fbfa7199506970759f2452f6839299cebb292296bdc6c5f75ffa6bf4410c758e20158e46ffe5071ba5a106e14758acb4937f3ac890ce1eaa467e9731ca34df4f4c9c77dbce67beb03ec36a985b7f52a310edabd88303b116d6836792f9e9e5dcb5283028429e9bb349c40d3090e88bdc910ec201408", 0xf2)
getdents$auto(r0, 0xfffffffffffffffc, 0x45)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20242, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x23, 0x0, 0x568)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0xffffffffffffffff)
ioctl$auto_USBDEVFS_RESET(r0, 0x5514, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)="8b5e55d196e7abbb9aa450c39f80d8310000", 0x12)
io_uring_register$auto_IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000140)="c147bb5a100f475c6a4e15bb35a0ba824b4e6d4bd917f6867047fb38c65a9595bcc7c3b56f2147f9ae0d060061eec79f653b312961e794ec828c1b0a7187f25c62cc27ac05ebff2b6e8632b837e2ea7b4450c69a6f938613c1224380a12111d5748161994a0fa32c833512c2c75e1eda0fbcdfc874f0bbdd6e33f1f621820a520d3a832b2ddc56a2eff53fa01a83ba7da797e429d247d47135d4c56ebff580949b27bdf86c110f8dc92a7244a37677fbd8badfb4d34f571cd78b7b6547ea6204b6a3984ca921fe639f00b1415bef020767ed23cbc9e50860d3965ce8f2a6a8246beb3136f3abb08cf70e41d8152eeecfa4ad557e9cd6015507", 0x4da)

4.239560394s ago: executing program 6 (id=2791):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
read$auto_dvb_dvr_fops_dmxdev(r0, &(0x7f0000000240)=""/138, 0x8a)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xff0000000010, 0x401, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
socket(0x25, 0x1, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x8800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x3, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x9, 0x15f4da0a, 0x3, 0x4, 0x3, 0x8000001d, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r3 = gettid()
process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x20000000000008}, 0x1007, 0x0, 0x9, 0x0)

4.084995269s ago: executing program 5 (id=2792):
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
msgrcv$auto(0xfffffffd, 0x0, 0x9, 0x8000000000000000, 0xb5)
mprotect$auto(0x8000, 0x8, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x10, 0xffffb)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
mmap$auto(0xfffc, 0x1, 0x80, 0x44eb5, 0xffffffffffffffff, 0x20000070)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
pipe$auto(0x0)
tee$auto(0x2000000000000, 0x3, 0x402, 0xd)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
socket(0x22, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3d, 0x1, 0x0, 0xfffffffffffffffe, 0x0)
select$auto(0x10001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x0, 0x8fd6, 0x10001, 0x3, 0x65d, 0x4000000000005, 0x6, 0x1, 0xb, 0x7, 0x1, 0xb, 0x0, 0x18]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

3.971661511s ago: executing program 1 (id=2793):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="ffffff7febbddac7f3f7ddbd48bb731ab6faaee5ead3c031bdd9fb363b18b5c4a78cbddbf9730199f3b389b8ad4092f8271d46e52bbc9dd49e88dc753d770a146c532eb527911a0bc5fa680a0e002fe8e35b521484a2334b9fb3e6385966e64a37acf5e754924860fdd84328c83d69b1a9da3af6dcb89181da188191cc8bec2dc8f4f8a2fd56", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf25210000000800350107000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x80002, 0x0, 0x400000000000, 0x4)
write$auto(r0, &(0x7f0000000780)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x9a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xe5\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804\xd16z\f\xfa\xd6\x83\x858\x1b{M\x85\x1eY\xdf\xe3p\xe1~\xc2~\xd1&\xfe\xfeB\x9b\xeb\xa3%\xd2\xa1\x0e1\x91q\"\x1aAV\x82Y\xc7\xb9.o\x9a\x025to\xdc5\xe2\xccI\xcd\x16CA`2\xf35\x9f$8\xed\n\xd4\xfa:\x81\x9b\xd3\xbd\xeb\xa6\x0e-\xc6\xdby\xea\x99\f\x82M\xe4R\xf1\x9e_\xb8\t\xb8\f\x8c\xfb?\x99w', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xb2c7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r2, 0x0, 0xfff)
msync$auto(0x7f, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x400c000)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x120021, 0x0)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

1.611607662s ago: executing program 6 (id=2794):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
modify_ldt$auto(0x3, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
process_mrelease$auto(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r2, 0x0, 0x1f40)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)

1.398735196s ago: executing program 0 (id=2795):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
semctl$auto(0xb47, 0x100002, 0x13, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x1a, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0x23, 0x4, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@generic={0x5, "444cf575c02dd753ff403ac8c6ea"}, 0x68)
shutdown$auto(0x200000003, 0x2)
listen$auto(0x3, 0x83)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0)

700.953612ms ago: executing program 1 (id=2796):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x400008, 0xdf, 0x1ff, 0x2, 0x8000)
r0 = socket(0x37, 0x4, 0xa)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
r2 = syz_open_procfs$namespace(0x0, 0x0)
fstat$auto(r2, 0x0)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYBLOB="1559b6b4bad4815cc371293cbc87ff9def4bd086a90a2ac7eb64da23af2a64ec49158e7f181c967279dfd80d0ddd3255441ea6647abab6ee87de37ee", @ANYRES32=r2, @ANYRESDEC=r1], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x60000004)
r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000200)=""/34, 0x22)
ioctl$auto(0x3, 0x40081271, 0x38)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffff70001, 0x1)
getpid()
shmctl$auto_SHM_UNLOCK(0x40a03811, 0xc, &(0x7f0000000640)={{0x200, 0x0, 0x0, 0x1010001, 0x4, 0x0, 0x3}, 0x8, 0x3b04, 0xc, 0x81, @raw=0x10000, @inferred, 0x7, 0x0, &(0x7f0000000100)="abbccf8a35fce84f0882858654c07eba", 0x0})
preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x10000000006a28, 0x1000, 0x1, 0x3, 0xfffffffffffffffc)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

278.006734ms ago: executing program 5 (id=2797):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e0, 0x40eb2, 0xffffffffffffffff, 0x5)
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18)
open_by_handle_at$auto(r2, &(0x7f0000000140)={0x8, 0x30001, "0100000000000000"}, 0x42)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x4}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xc7f1, 0x200}, 0x100, 0x80000006)
close_range$auto(0x2, 0x8, 0x0)

0s ago: executing program 6 (id=2798):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x59, 0x1000008de, 0x17, r0, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/block/loop3/poll_stat\x00', 0x80040, 0x0)
preadv$auto(r2, &(0x7f0000001240)={0x0, 0xa}, 0x4, 0x5, 0x0)
mq_open$auto(0x0, 0x5, 0x3, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x4, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0x80000, 0x1)
socket(0xa, 0xa, 0x3a)
bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0x7f, @any, 0x9, 0x1}, 0x6a)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000080), 0x6b)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000)
ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0)

kernel console output (not intermixed with test programs):









	




	

















	




	





		







	
		

	


		

		
	
		
	
	



			








	






	

	





	


	






	




	






		








		
		

	
		

	


		

		
	
		
	
	



			








	



	

	

	




	

	

	


	

	








	





	








		











	
	
	
	
	
	

	
		

	


		

		
	
		
	
	



			








	
	
	
	
	
	
	

		
		
		
	
		
	
	
	

	






	





	







		







	

	
		
	

	
		

	
		

	


		

		
	
		
	
	



			








	






	

	




	


	








	




	






		








	




	
				

	
		

	


		

		
	
		
	
	



			








	






	

	




	


	


	








	




	






		








	




	
				

	
		

	


	
	

		
	
		
	
	



			








	




	





	

	

	

	





	


	




	






	





	







		









	

	
		
	

	
		
	




	
				
	

	
		



	

	




	
				

	
		

	


		

		
	
		
	
	



			








	






	

	




	


	


	








	




	






		








	
	
	

	
		
	

	
		

		
			


	
		

	


		

		
	
		
	
	



			








	

	


	


	

	



	






	











	



	







	
	







	
	
	

	
		
		


			

		

		
		
	




	
				
	




	
				
	

	
		

	
		

	
	
		
				

	
	



	
		

	


		

		
	
		
	
	



			








	




















	




















	




	






		









	

	
	


							
		


			
	
	
	




	
				
	

	
		



	
		

	


	
	

		
	
		
	
	



			








	

	
	


	




		

		

			



	


	



		












	




	





		






	




	
				

	
		

	


	
	

		
	
		
	
	



			








	




	




















	
	







	




















	






	




	




		








[  666.155069][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  666.195039][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  667.009631][T15476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100
[  667.810828][T15496] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101
[  670.267600][T15538] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2048'.
[  670.296669][T15538] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2048'.
[  671.155552][T15538] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2048'.
[  671.261011][T15552] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102
[  671.762182][T15542] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103
[  675.443680][   T30] audit: type=1326 audit(4294967567.859:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15600 comm="syz.0.2063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7236b8e929 code=0x0
[  675.504337][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2063'.
[  678.157009][T15652] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  678.258583][T15652] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  678.334331][T15652] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  678.399310][T15662] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum
[  678.531150][   T30] audit: type=1800 audit(4294967570.949:18): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2078" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  678.647666][T15657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104
[  678.855963][T15661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105
[  679.222235][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  679.496799][T12946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  679.508258][T12946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  679.517405][T12946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  679.542140][T12946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  679.552674][T12946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  679.927174][T15678] Process accounting resumed
[  680.959497][T15683] chnl_net:caif_netlink_parms(): no params data found
[  680.974106][T15714] random: crng reseeded on system resumption
[  681.634650][T12946] Bluetooth: hci4: command tx timeout
[  681.681015][T15683] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.687961][T15683] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.711320][T15683] bridge_slave_0: entered allmulticast mode
[  681.713230][T15683] bridge_slave_0: entered promiscuous mode
[  681.796860][T15683] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.797029][T15683] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.797168][T15683] bridge_slave_1: entered allmulticast mode
[  681.800366][T15683] bridge_slave_1: entered promiscuous mode
[  682.137844][T15683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  682.354434][T15683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.787609][T15732] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106
[  683.000651][T15683] team0: Port device team_slave_0 added
[  683.211850][T15683] team0: Port device team_slave_1 added
[  683.293176][T15733] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107
[  683.372580][T15683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  683.393539][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  683.488175][T15683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  683.640426][T15683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  683.652282][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  683.709314][T12946] Bluetooth: hci4: command tx timeout
[  683.710989][T15683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.036500][T15683] hsr_slave_0: entered promiscuous mode
[  684.043055][T15683] hsr_slave_1: entered promiscuous mode
[  684.069567][T15683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  684.079728][T15683] Cannot create hsr debugfs directory
[  685.002251][T15683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  685.132493][T15683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  685.212427][T15683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  685.265824][T15683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  685.716437][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.722791][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  685.785124][T12946] Bluetooth: hci4: command tx timeout
[  685.963809][T15776] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108
[  686.405430][T15683] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.433399][T15683] 8021q: adding VLAN 0 to HW filter on device team0
[  686.572021][T15782] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109
[  686.594174][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.601319][ T9437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.867409][T15788] can0: slcan on pty19.
[  686.879784][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.887951][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.075084][T15787] can0 (unregistered): slcan off pty19.
[  687.874993][T12946] Bluetooth: hci4: command tx timeout
[  688.192602][T15683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.449008][T15818] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110
[  689.174713][T15800] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111
[  689.377061][T15683] veth0_vlan: entered promiscuous mode
[  689.418014][T15683] veth1_vlan: entered promiscuous mode
[  689.691901][T15683] veth0_macvtap: entered promiscuous mode
[  689.719705][T15683] veth1_macvtap: entered promiscuous mode
[  689.793283][T15683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.853774][T15683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  689.881380][T15683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.908457][T15683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.929227][T15683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.938262][T15683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.407765][ T9438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.624431][ T9438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.850995][ T9452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.863138][ T9452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.330570][T15853] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2109'.
[  692.283205][T15887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112
[  692.676349][T15897] FAULT_INJECTION: forcing a failure.
[  692.676349][T15897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.689570][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.1.2118 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  692.689603][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  692.689618][T15897] Call Trace:
[  692.689627][T15897]  <TASK>
[  692.689637][T15897]  dump_stack_lvl+0x16c/0x1f0
[  692.689678][T15897]  should_fail_ex+0x512/0x640
[  692.689718][T15897]  _copy_from_user+0x2e/0xd0
[  692.689756][T15897]  copy_msghdr_from_user+0x98/0x160
[  692.689793][T15897]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  692.689845][T15897]  ___sys_sendmsg+0xfe/0x1d0
[  692.689882][T15897]  ? __pfx____sys_sendmsg+0x10/0x10
[  692.689921][T15897]  ? __lock_acquire+0x622/0x1c90
[  692.689995][T15897]  __sys_sendmsg+0x16d/0x220
[  692.690031][T15897]  ? __pfx___sys_sendmsg+0x10/0x10
[  692.690090][T15897]  do_syscall_64+0xcd/0x490
[  692.690129][T15897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.690154][T15897] RIP: 0033:0x7f1c9ab8e929
[  692.690175][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  692.690199][T15897] RSP: 002b:00007f1c9b9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  692.690222][T15897] RAX: ffffffffffffffda RBX: 00007f1c9adb5fa0 RCX: 00007f1c9ab8e929
[  692.690239][T15897] RDX: 0000000020000040 RSI: 0000200000000000 RDI: 0000000000000003
[  692.690256][T15897] RBP: 00007f1c9b9f6090 R08: 0000000000000000 R09: 0000000000000000
[  692.690271][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.690286][T15897] R13: 0000000000000000 R14: 00007f1c9adb5fa0 R15: 00007ffe0d171078
[  692.690319][T15897]  </TASK>
[  693.073331][T15872] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113
[  696.600491][T15958] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114
[  697.775558][T15965] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115
[  697.999570][T15991] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2136'.
[  698.226619][T15997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116
[  698.743867][T15998] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117
[  700.533338][T16035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118
[  700.796642][T16048] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119
[  702.747509][T16071] svc: failed to register nfsdv3 RPC service (errno 111).
[  702.863438][T16071] svc: failed to register nfsaclv3 RPC service (errno 111).
[  703.044869][T16074] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120
[  703.687830][   T30] audit: type=1804 audit(4294967596.109:19): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2152" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1069 res=1 errno=0
[  703.816298][T16084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121
[  704.282565][T12946] Bluetooth: hci4: unexpected event 0x14 length: 11 > 6
[  706.774249][T12946] Bluetooth: hci4: unexpected event 0x14 length: 11 > 6
[  707.565437][T16159] FAULT_INJECTION: forcing a failure.
[  707.565437][T16159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  707.625183][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.4.2169 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  707.625218][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  707.625233][T16159] Call Trace:
[  707.625241][T16159]  <TASK>
[  707.625252][T16159]  dump_stack_lvl+0x16c/0x1f0
[  707.625301][T16159]  should_fail_ex+0x512/0x640
[  707.625340][T16159]  _copy_to_user+0x32/0xd0
[  707.625380][T16159]  simple_read_from_buffer+0xcb/0x170
[  707.625414][T16159]  proc_fail_nth_read+0x197/0x270
[  707.625444][T16159]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  707.625475][T16159]  ? rw_verify_area+0xcf/0x680
[  707.625504][T16159]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  707.625531][T16159]  vfs_read+0x1e4/0xc60
[  707.625566][T16159]  ? __pfx___mutex_lock+0x10/0x10
[  707.625602][T16159]  ? __pfx_vfs_read+0x10/0x10
[  707.625644][T16159]  ? __fget_files+0x20e/0x3c0
[  707.625687][T16159]  ksys_read+0x12a/0x250
[  707.625718][T16159]  ? __pfx_ksys_read+0x10/0x10
[  707.625761][T16159]  do_syscall_64+0xcd/0x490
[  707.625800][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.625825][T16159] RIP: 0033:0x7f7f01b8d33c
[  707.625846][T16159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  707.625869][T16159] RSP: 002b:00007f7f02a91030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  707.625894][T16159] RAX: ffffffffffffffda RBX: 00007f7f01db5fa0 RCX: 00007f7f01b8d33c
[  707.625911][T16159] RDX: 000000000000000f RSI: 00007f7f02a910a0 RDI: 0000000000000004
[  707.625927][T16159] RBP: 00007f7f02a91090 R08: 0000000000000000 R09: 0000000000000000
[  707.625942][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.625957][T16159] R13: 0000000000000000 R14: 00007f7f01db5fa0 R15: 00007ffc0e7d4d68
[  707.625993][T16159]  </TASK>
[  710.052668][T16197] Process accounting paused
[  712.824605][   T30] audit: type=1800 audit(4294967605.239:20): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2186" name="dbroot" dev="configfs" ino=57037 res=0 errno=0
[  713.050281][T16239] warn_alloc: 1 callbacks suppressed
[  713.050300][T16239] syz.0.2188: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  713.334767][T16239] CPU: 1 UID: 0 PID: 16239 Comm: syz.0.2188 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  713.334806][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  713.334822][T16239] Call Trace:
[  713.334833][T16239]  <TASK>
[  713.334844][T16239]  dump_stack_lvl+0x16c/0x1f0
[  713.334889][T16239]  warn_alloc+0x248/0x3a0
[  713.334930][T16239]  ? __pfx_warn_alloc+0x10/0x10
[  713.334974][T16239]  ? __lock_acquire+0xb8a/0x1c90
[  713.335030][T16239]  ? dvb_dvr_do_ioctl+0x15d/0x290
[  713.335070][T16239]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  713.335102][T16239]  ? __pfx___mutex_trylock_common+0x10/0x10
[  713.335139][T16239]  ? __pfx___might_resched+0x10/0x10
[  713.335167][T16239]  ? rcu_is_watching+0x12/0xc0
[  713.335196][T16239]  ? dvb_dvr_do_ioctl+0x15d/0x290
[  713.335233][T16239]  ? __mutex_lock+0x1ca/0xb90
[  713.335271][T16239]  ? tomoyo_path_number_perm+0x295/0x580
[  713.335304][T16239]  ? dvb_dvr_do_ioctl+0x7e/0x290
[  713.335345][T16239]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  713.335376][T16239]  ? __pfx___mutex_lock+0x10/0x10
[  713.335417][T16239]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  713.335456][T16239]  ? dvb_dvr_do_ioctl+0x15d/0x290
[  713.335494][T16239]  __vmalloc_node_noprof+0xad/0xf0
[  713.335526][T16239]  ? dvb_dvr_do_ioctl+0x15d/0x290
[  713.335569][T16239]  dvb_dvr_do_ioctl+0x15d/0x290
[  713.335615][T16239]  dvb_usercopy+0x167/0x340
[  713.335652][T16239]  ? __pfx_dvb_dvr_do_ioctl+0x10/0x10
[  713.335694][T16239]  ? __pfx_dvb_usercopy+0x10/0x10
[  713.335746][T16239]  ? __fget_files+0x20e/0x3c0
[  713.335788][T16239]  dvb_dvr_ioctl+0x29/0x40
[  713.335825][T16239]  ? __pfx_dvb_dvr_ioctl+0x10/0x10
[  713.335864][T16239]  __x64_sys_ioctl+0x18b/0x210
[  713.335898][T16239]  do_syscall_64+0xcd/0x490
[  713.335940][T16239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.335967][T16239] RIP: 0033:0x7f7236b8e929
[  713.335995][T16239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  713.336021][T16239] RSP: 002b:00007f7237917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  713.336047][T16239] RAX: ffffffffffffffda RBX: 00007f7236db5fa0 RCX: 00007f7236b8e929
[  713.336066][T16239] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  713.336083][T16239] RBP: 00007f7236c10b39 R08: 0000000000000000 R09: 0000000000000000
[  713.336100][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  713.336116][T16239] R13: 0000000000000000 R14: 00007f7236db5fa0 R15: 00007ffe868d0198
[  713.336154][T16239]  </TASK>
[  713.336172][T16239] Mem-Info:
[  713.647391][T16239] active_anon:22067 inactive_anon:0 isolated_anon:0
[  713.647391][T16239]  active_file:15848 inactive_file:46276 isolated_file:0
[  713.647391][T16239]  unevictable:768 dirty:713 writeback:0
[  713.647391][T16239]  slab_reclaimable:11358 slab_unreclaimable:98703
[  713.647391][T16239]  mapped:31436 shmem:6184 pagetables:1275
[  713.647391][T16239]  sec_pagetables:0 bounce:0
[  713.647391][T16239]  kernel_misc_reclaimable:0
[  713.647391][T16239]  free:1276747 free_pcp:23021 free_cma:0
[  713.825651][T16239] Node 0 active_anon:73700kB inactive_anon:0kB active_file:63392kB inactive_file:185044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129876kB dirty:2856kB writeback:0kB shmem:10948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12724kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  713.920719][T16239] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  713.996293][T16256] netlink: 'syz.1.2190': attribute type 1 has an invalid length.
[  714.004184][T16256] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2190'.
[  714.075121][T16239] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  714.190657][T16239] lowmem_reserve[]: 0 2481 2482 2482 2482
[  714.216678][T16239] Node 0 DMA32 free:1205556kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74556kB inactive_anon:0kB active_file:63392kB inactive_file:183716kB unevictable:1536kB writepending:2856kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:70656kB local_pcp:15324kB free_cma:0kB
[  714.321560][T16239] lowmem_reserve[]: 0 0 1 1 1
[  714.326419][T16239] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  714.400657][T16239] lowmem_reserve[]: 0 0 0 0 0
[  714.406382][T16239] Node 1 Normal free:3906732kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13576kB local_pcp:3712kB free_cma:0kB
[  714.523892][T16239] lowmem_reserve[]: 0 0 0 0 0
[  714.544917][T16239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  714.716271][T16239] Node 0 DMA32: 821*4kB (ME) 504*8kB (ME) 599*16kB (ME) 124*32kB (ME) 132*64kB (UM) 59*128kB (UM) 83*256kB (UM) 50*512kB (UME) 55*1024kB (UM) 24*2048kB (UM) 246*4096kB (M) = 1196804kB
[  714.807680][T16239] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  714.866741][T16239] Node 1 Normal: 237*4kB (UME) 71*8kB (UME) 52*16kB (UME) 224*32kB (UME) 80*64kB (UME) 17*128kB (UME) 9*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 947*4096kB (M) = 3906732kB
[  714.910881][T16239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  714.920606][T16239] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  714.940106][T16239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  715.016561][T16239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  715.026205][T16239] 63511 total pagecache pages
[  715.030906][T16239] 11 pages in swap cache
[  715.035396][T16239] Free swap  = 123064kB
[  715.039702][T16239] Total swap = 124996kB
[  715.043877][T16239] 2097051 pages RAM
[  715.048011][T16239] 0 pages HighMem/MovableOnly
[  715.053154][T16239] 429861 pages reserved
[  715.068697][T16239] 0 pages cma reserved
[  715.518857][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'.
[  718.444223][T16308] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122
[  718.840709][T16299] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123
[  720.348248][T16326] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  720.423731][T16326] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  720.525848][T16326] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  720.663738][T16326] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  720.698314][T16331] can: request_module (can-proto-0) failed.
[  720.704305][T16333] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  720.765053][T16326] page dumped because: unmovable page
[  720.774647][T16326] page_owner info is not present (never set?)
[  720.779869][ T5185] ERROR: Out of memory at tomoyo_memory_ok.
[  721.291709][T16341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124
[  721.816825][T16335] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125
[  723.261257][T16356] FAULT_INJECTION: forcing a failure.
[  723.261257][T16356] name failslab, interval 1, probability 0, space 0, times 0
[  723.323385][T16356] CPU: 1 UID: 0 PID: 16356 Comm: syz.3.2212 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  723.323424][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  723.323440][T16356] Call Trace:
[  723.323449][T16356]  <TASK>
[  723.323460][T16356]  dump_stack_lvl+0x16c/0x1f0
[  723.323504][T16356]  should_fail_ex+0x512/0x640
[  723.323539][T16356]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  723.323579][T16356]  should_failslab+0xc2/0x120
[  723.323604][T16356]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  723.323641][T16356]  ? getname_flags.part.0+0x4c/0x550
[  723.323675][T16356]  getname_flags.part.0+0x4c/0x550
[  723.323707][T16356]  getname_flags+0x93/0xf0
[  723.323739][T16356]  __x64_sys_renameat2+0xc7/0x130
[  723.323781][T16356]  do_syscall_64+0xcd/0x490
[  723.323821][T16356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.323847][T16356] RIP: 0033:0x7fe3e1d8e929
[  723.323868][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.323893][T16356] RSP: 002b:00007fe3e2c6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  723.323917][T16356] RAX: ffffffffffffffda RBX: 00007fe3e1fb6080 RCX: 00007fe3e1d8e929
[  723.323935][T16356] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff
[  723.323952][T16356] RBP: 00007fe3e1e10b39 R08: 0000000000000001 R09: 0000000000000000
[  723.323968][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  723.323984][T16356] R13: 0000000000000000 R14: 00007fe3e1fb6080 R15: 00007fff7d5d1228
[  723.324018][T16356]  </TASK>
[  723.522733][T16361] FAULT_INJECTION: forcing a failure.
[  723.522733][T16361] name failslab, interval 1, probability 0, space 0, times 0
[  723.545083][T16361] CPU: 1 UID: 0 PID: 16361 Comm: syz.1.2213 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  723.545121][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  723.545137][T16361] Call Trace:
[  723.545146][T16361]  <TASK>
[  723.545156][T16361]  dump_stack_lvl+0x16c/0x1f0
[  723.545199][T16361]  should_fail_ex+0x512/0x640
[  723.545234][T16361]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  723.545275][T16361]  should_failslab+0xc2/0x120
[  723.545299][T16361]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  723.545334][T16361]  ? kmem_cache_free+0x2d1/0x4d0
[  723.545366][T16361]  ? getname_kernel+0x52/0x370
[  723.545396][T16361]  getname_kernel+0x52/0x370
[  723.545422][T16361]  do_file_open_root+0x19d/0x610
[  723.545455][T16361]  ? stack_trace_save+0x8e/0xc0
[  723.545486][T16361]  ? __pfx_do_file_open_root+0x10/0x10
[  723.545556][T16361]  ? vsnprintf+0x318/0x1160
[  723.545592][T16361]  file_open_root+0x2a7/0x450
[  723.545629][T16361]  ? __pfx_file_open_root+0x10/0x10
[  723.545662][T16361]  ? find_held_lock+0x2b/0x80
[  723.545690][T16361]  ? kernel_read_file_from_path_initns+0x17a/0x260
[  723.545725][T16361]  kernel_read_file_from_path_initns+0x189/0x260
[  723.545758][T16361]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  723.545783][T16361]  ? trace_kmem_cache_alloc+0x28/0xc0
[  723.545823][T16361]  ? _request_firmware+0x503/0x1470
[  723.545864][T16361]  _request_firmware+0x744/0x1470
[  723.545911][T16361]  ? __pfx__request_firmware+0x10/0x10
[  723.545958][T16361]  request_firmware+0x35/0x50
[  723.545992][T16361]  valid_regdb+0x188/0x590
[  723.546019][T16361]  ? __pfx___mutex_lock+0x10/0x10
[  723.546057][T16361]  ? __pfx_valid_regdb+0x10/0x10
[  723.546093][T16361]  reg_reload_regdb+0x11e/0x460
[  723.546123][T16361]  ? __pfx_reg_reload_regdb+0x10/0x10
[  723.546154][T16361]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  723.546188][T16361]  ? nl80211_pre_doit+0x1b0/0xb10
[  723.546228][T16361]  genl_family_rcv_msg_doit+0x206/0x2f0
[  723.546264][T16361]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  723.546294][T16361]  ? rcu_is_watching+0x12/0xc0
[  723.546331][T16361]  ? bpf_lsm_capable+0x9/0x10
[  723.546360][T16361]  ? security_capable+0x7e/0x260
[  723.546406][T16361]  genl_rcv_msg+0x55c/0x800
[  723.546441][T16361]  ? __pfx_genl_rcv_msg+0x10/0x10
[  723.546471][T16361]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  723.546505][T16361]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  723.546532][T16361]  ? __pfx_nl80211_post_doit+0x10/0x10
[  723.546581][T16361]  netlink_rcv_skb+0x155/0x420
[  723.546608][T16361]  ? __pfx_genl_rcv_msg+0x10/0x10
[  723.546641][T16361]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  723.546683][T16361]  ? netlink_deliver_tap+0x1ae/0xd30
[  723.546714][T16361]  genl_rcv+0x28/0x40
[  723.546741][T16361]  netlink_unicast+0x53d/0x7f0
[  723.546772][T16361]  ? __pfx_netlink_unicast+0x10/0x10
[  723.546815][T16361]  netlink_sendmsg+0x8d1/0xdd0
[  723.546848][T16361]  ? __pfx_netlink_sendmsg+0x10/0x10
[  723.546889][T16361]  ____sys_sendmsg+0xa98/0xc70
[  723.546920][T16361]  ? copy_msghdr_from_user+0x10a/0x160
[  723.546958][T16361]  ? __pfx_____sys_sendmsg+0x10/0x10
[  723.546995][T16361]  ? __pfx_futex_wake_mark+0x10/0x10
[  723.547035][T16361]  ___sys_sendmsg+0x134/0x1d0
[  723.547075][T16361]  ? __pfx____sys_sendmsg+0x10/0x10
[  723.547109][T16361]  ? __lock_acquire+0x622/0x1c90
[  723.547186][T16361]  __sys_sendmsg+0x16d/0x220
[  723.547224][T16361]  ? __pfx___sys_sendmsg+0x10/0x10
[  723.547259][T16361]  ? __x64_sys_futex+0x1e0/0x4c0
[  723.547311][T16361]  do_syscall_64+0xcd/0x490
[  723.547350][T16361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.547376][T16361] RIP: 0033:0x7f1c9ab8e929
[  723.547398][T16361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  723.547423][T16361] RSP: 002b:00007f1c9b9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  723.547448][T16361] RAX: ffffffffffffffda RBX: 00007f1c9adb5fa0 RCX: 00007f1c9ab8e929
[  723.547466][T16361] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009
[  723.547482][T16361] RBP: 00007f1c9ac10b39 R08: 0000000000000000 R09: 0000000000000000
[  723.547498][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  723.547513][T16361] R13: 0000000000000000 R14: 00007f1c9adb5fa0 R15: 00007ffe0d171078
[  723.547549][T16361]  </TASK>
[  723.547570][T16361] platform regulatory.0: loading /lib/firmware/6.16.0-rc4-syzkaller-00013-g66701750d556/regulatory.db.p7s failed with error -12
[  724.482664][T16370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126
[  725.287964][T16372] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127
[  726.052234][T16397] netlink: 'syz.3.2219': attribute type 1 has an invalid length.
[  726.070414][T16397] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2219'.
[  727.758955][T16419] FAULT_INJECTION: forcing a failure.
[  727.758955][T16419] name failslab, interval 1, probability 0, space 0, times 0
[  727.824592][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.4.2224 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  727.824637][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  727.824653][T16419] Call Trace:
[  727.824662][T16419]  <TASK>
[  727.824673][T16419]  dump_stack_lvl+0x16c/0x1f0
[  727.824718][T16419]  should_fail_ex+0x512/0x640
[  727.824754][T16419]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  727.824796][T16419]  should_failslab+0xc2/0x120
[  727.824820][T16419]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  727.824857][T16419]  ? radix_tree_node_alloc.constprop.0+0x7c/0x350
[  727.824897][T16419]  radix_tree_node_alloc.constprop.0+0x7c/0x350
[  727.824939][T16419]  idr_get_free+0x528/0xa30
[  727.824990][T16419]  idr_alloc_u32+0x190/0x2f0
[  727.825029][T16419]  ? __pfx_idr_alloc_u32+0x10/0x10
[  727.825070][T16419]  ? __pfx___mutex_lock+0x10/0x10
[  727.825117][T16419]  idr_alloc+0xc0/0x130
[  727.825151][T16419]  ? __pfx_idr_alloc+0x10/0x10
[  727.825187][T16419]  ? __radix_tree_lookup+0x21f/0x2c0
[  727.825229][T16419]  ppp_dev_configure+0x905/0xc80
[  727.825269][T16419]  ppp_ioctl+0x17e0/0x2660
[  727.825303][T16419]  ? find_held_lock+0x2b/0x80
[  727.825328][T16419]  ? __pfx_ppp_ioctl+0x10/0x10
[  727.825365][T16419]  ? __fget_files+0x20e/0x3c0
[  727.825405][T16419]  ? __pfx_ppp_ioctl+0x10/0x10
[  727.825436][T16419]  __x64_sys_ioctl+0x18b/0x210
[  727.825471][T16419]  do_syscall_64+0xcd/0x490
[  727.825512][T16419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.825539][T16419] RIP: 0033:0x7f7f01b8e929
[  727.825562][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  727.825589][T16419] RSP: 002b:00007f7f02a70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  727.825614][T16419] RAX: ffffffffffffffda RBX: 00007f7f01db6080 RCX: 00007f7f01b8e929
[  727.825644][T16419] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006
[  727.825662][T16419] RBP: 00007f7f01c10b39 R08: 0000000000000000 R09: 0000000000000000
[  727.825679][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  727.825696][T16419] R13: 0000000000000000 R14: 00007f7f01db6080 R15: 00007ffc0e7d4d68
[  727.825733][T16419]  </TASK>
[  729.773131][T16452] ubi0: attaching mtd0
[  729.796773][T16452] ubi0: scanning is finished
[  729.801452][T16452] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  730.107019][T16452] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  733.538153][T16518] can: request_module (can-proto-0) failed.
[  733.561148][T16523] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128
[  733.633211][T16518] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  733.873561][T16530] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129
[  734.443952][T16546] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  737.398690][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  737.410857][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  737.425336][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  737.438622][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  737.446311][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  737.489551][ T9437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.042454][ T9437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.198495][ T9437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.760583][T16602] chnl_net:caif_netlink_parms(): no params data found
[  738.876252][ T9437] bridge_slave_0: left allmulticast mode
[  738.918754][ T9437] bridge_slave_0: left promiscuous mode
[  738.949949][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.467279][T12946] Bluetooth: hci1: command tx timeout
[  739.502881][T16631] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131
[  739.992942][T16634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132
[  740.395101][ T9437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  740.427691][ T9437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  740.448469][ T9437] bond0 (unregistering): Released all slaves
[  740.909823][ T9437] tipc: Left network mode
[  741.309864][T16602] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.328383][T16602] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.351241][T16602] bridge_slave_0: entered allmulticast mode
[  741.367660][T16602] bridge_slave_0: entered promiscuous mode
[  741.422691][T16602] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.439372][T16602] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.448686][T16602] bridge_slave_1: entered allmulticast mode
[  741.461972][T16602] bridge_slave_1: entered promiscuous mode
[  741.546938][T12946] Bluetooth: hci1: command tx timeout
[  741.652320][ T9437] hsr_slave_0: left promiscuous mode
[  741.671331][ T9437] hsr_slave_1: left promiscuous mode
[  741.678112][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  741.690541][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  741.706195][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  741.717782][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  741.792911][ T9437] veth1_macvtap: left promiscuous mode
[  741.800968][ T9437] veth1_vlan: left promiscuous mode
[  741.809686][ T9437] veth0_vlan: left promiscuous mode
[  742.359125][ T9437] team0 (unregistering): Port device team_slave_1 removed
[  742.400461][ T9437] team0 (unregistering): Port device team_slave_0 removed
[  742.851058][T16602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.043167][T16602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.233412][T16660] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2272'.
[  743.263983][T16602] team0: Port device team_slave_0 added
[  743.361478][T16602] team0: Port device team_slave_1 added
[  743.548469][T16602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.583214][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.611946][T16602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.628293][T12946] Bluetooth: hci1: command tx timeout
[  743.640412][T16602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.648535][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.674715][T16602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.813113][T16602] hsr_slave_0: entered promiscuous mode
[  743.840832][T16602] hsr_slave_1: entered promiscuous mode
[  743.871629][T16602] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  743.909638][T16602] Cannot create hsr debugfs directory
[  744.296091][T16670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133
[  744.990132][T16687] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134
[  745.706654][T12946] Bluetooth: hci1: command tx timeout
[  745.994451][T16723] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2279'.
[  746.971371][T16602] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  747.017575][T16602] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  747.078558][T16602] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  747.108332][T16602] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  747.149563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  747.156475][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  747.488230][T16602] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.542555][T16602] 8021q: adding VLAN 0 to HW filter on device team0
[  747.585081][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.592245][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.637007][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.644214][ T9437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.230343][T16602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.331799][T16602] veth0_vlan: entered promiscuous mode
[  748.374215][T16602] veth1_vlan: entered promiscuous mode
[  748.462163][T16602] veth0_macvtap: entered promiscuous mode
[  748.490060][T16602] veth1_macvtap: entered promiscuous mode
[  748.626129][T16602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.661696][T16602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.700993][T16602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.739619][T16602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.771202][T16602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.835654][T16602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.149864][ T9450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.197017][ T9450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.317900][ T9437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.336057][ T9437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.616747][T16839] program syz.3.2291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  751.627250][T16839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  752.266476][T16841] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135
[  752.593299][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  752.614797][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  752.627924][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  752.637225][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  752.645315][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  752.926566][T16848] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136
[  753.839577][T11642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.357277][T11642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.746679][ T5839] Bluetooth: hci3: command tx timeout
[  754.800018][T11642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.293966][T11642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.311144][T16853] chnl_net:caif_netlink_parms(): no params data found
[  756.409841][T16853] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.423274][T16853] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.433806][T16853] bridge_slave_0: entered allmulticast mode
[  756.447392][T16853] bridge_slave_0: entered promiscuous mode
[  756.458153][T11642] vlan1: left allmulticast mode
[  756.463046][T11642] vlan1: left promiscuous mode
[  756.529932][T11642] bridge0: port 2(vlan1) entered disabled state
[  756.784330][T11642] bridge_slave_0: left allmulticast mode
[  756.818099][T11642] bridge_slave_0: left promiscuous mode
[  756.823828][T11642] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.831151][ T5839] Bluetooth: hci3: command tx timeout
[  758.904817][ T5839] Bluetooth: hci3: command tx timeout
[  759.083399][T11642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.173777][T11642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.225313][T11642] bond0 (unregistering): Released all slaves
[  759.302151][T16853] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.352385][T16853] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.374917][T16853] bridge_slave_1: entered allmulticast mode
[  759.429758][T16853] bridge_slave_1: entered promiscuous mode
[  759.751570][T16940] random: crng reseeded on system resumption
[  760.107354][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.382730][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  760.985378][ T5839] Bluetooth: hci3: command tx timeout
[  761.028932][T16853] team0: Port device team_slave_0 added
[  761.441375][T16853] team0: Port device team_slave_1 added
[  762.298037][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.325014][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.424796][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.462535][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.489810][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  762.564593][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.609573][T11642] hsr_slave_0: left promiscuous mode
[  762.665334][T11642] hsr_slave_1: left promiscuous mode
[  762.694767][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  762.702205][T11642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  762.748799][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  762.756313][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.802078][T11642] veth1_macvtap: left promiscuous mode
[  762.829397][T11642] veth1_vlan: left promiscuous mode
[  762.854888][T11642] veth0_vlan: left promiscuous mode
[  763.952791][T11642] team0 (unregistering): Port device team_slave_1 removed
[  764.009080][T11642] team0 (unregistering): Port device team_slave_0 removed
[  764.606636][T16853] hsr_slave_0: entered promiscuous mode
[  764.617251][T16853] hsr_slave_1: entered promiscuous mode
[  766.499479][T16853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  766.583395][T16853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  766.592974][T16853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  766.602054][T16853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  767.242775][T16853] 8021q: adding VLAN 0 to HW filter on device bond0
[  767.285467][T16853] 8021q: adding VLAN 0 to HW filter on device team0
[  767.314182][T11642] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.321340][T11642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.407281][T11642] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.414554][T11642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  768.644138][T16853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.787290][T16853] veth0_vlan: entered promiscuous mode
[  768.907668][T16853] veth1_vlan: entered promiscuous mode
[  769.001133][T16853] veth0_macvtap: entered promiscuous mode
[  769.022294][T17029] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  769.084251][T16853] veth1_macvtap: entered promiscuous mode
[  769.177956][T16853] batman_adv: batadv0: Interface activated: batadv_slave_0
[  769.241362][T16853] batman_adv: batadv0: Interface activated: batadv_slave_1
[  769.287512][T16853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  769.362450][T16853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  769.391804][T16853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  769.500618][T16853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  769.932900][ T9452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.987817][ T9452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  770.088023][ T9452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  770.124551][ T9452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.835630][T17100] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137
[  772.480461][T17093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138
[  774.110069][T17147] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2328'.
[  777.815691][T17208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139
[  778.910693][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2338'.
[  779.222910][T17209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140
[  780.800736][T17254] nbd: socks must be embedded in a SOCK_ITEM attr
[  780.889983][T17254] block nbd0: shutting down sockets
[  782.801407][T17270] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141
[  783.660402][T17273] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142
[  784.853003][T17300] ptm ptm4: ldisc open failed (-12), clearing slot 4
[  784.905492][T17301] ttyS ttyS2: ldisc open failed (-12), clearing slot 2
[  785.635886][T17308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.227213][T17327] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2359'.
[  787.598863][T17339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143
[  788.317508][T17346] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144
[  789.334103][T17370] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  789.370517][T17372] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  790.620650][T17378] cgroup: fork rejected by pids controller in /syz1
[  791.801617][T17582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145
[  792.188621][T17586] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146
[  794.208930][T17599] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147
[  794.817762][T17610] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148
[  801.803362][T17696] FAULT_INJECTION: forcing a failure.
[  801.803362][T17696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  801.912538][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz.1.2394 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  801.912566][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  801.912575][T17696] Call Trace:
[  801.912580][T17696]  <TASK>
[  801.912586][T17696]  dump_stack_lvl+0x16c/0x1f0
[  801.912612][T17696]  should_fail_ex+0x512/0x640
[  801.912634][T17696]  _copy_from_user+0x2e/0xd0
[  801.912656][T17696]  copy_from_sockptr_offset.constprop.0+0x136/0x170
[  801.912673][T17696]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  801.912695][T17696]  mptcp_setsockopt+0xe64/0x30e0
[  801.912713][T17696]  ? __pfx_mptcp_setsockopt+0x10/0x10
[  801.912730][T17696]  ? __pfx_aa_sk_perm+0x10/0x10
[  801.912749][T17696]  ? sock_common_setsockopt+0x2e/0xf0
[  801.912768][T17696]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  801.912783][T17696]  do_sock_setsockopt+0x224/0x470
[  801.912798][T17696]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  801.912823][T17696]  __sys_setsockopt+0x120/0x1a0
[  801.912846][T17696]  __x64_sys_setsockopt+0xbd/0x160
[  801.912865][T17696]  ? syscall_trace_enter+0x5e/0x260
[  801.912887][T17696]  do_syscall_64+0xcd/0x490
[  801.912910][T17696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.912924][T17696] RIP: 0033:0x7fa698d8e929
[  801.912937][T17696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.912951][T17696] RSP: 002b:00007fa699bba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  801.912964][T17696] RAX: ffffffffffffffda RBX: 00007fa698fb6160 RCX: 00007fa698d8e929
[  801.912974][T17696] RDX: 0000000000000020 RSI: 0000000000000001 RDI: 0000000000000003
[  801.912982][T17696] RBP: 00007fa699bba090 R08: 0000000000000009 R09: 0000000000000000
[  801.912990][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  801.912998][T17696] R13: 0000000000000000 R14: 00007fa698fb6160 R15: 00007ffecf3db1c8
[  801.913016][T17696]  </TASK>
[  805.549951][T12946] Bluetooth: hci4: command 0x0406 tx timeout
[  805.912923][T17736] can: request_module (can-proto-4) failed.
[  808.591812][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  808.598321][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  809.040391][T17766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150
[  810.298534][T17795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151
[  813.375237][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'.
[  813.696775][T17862] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  813.707592][T17862] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  813.734172][T17862] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  813.773465][T17862] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  813.824818][T17862] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  813.911596][T17862] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  813.987975][T17862] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  813.998103][T17862] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  814.062227][T17862] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  814.214867][T17878] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582)
[  815.559988][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  815.706060][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  815.784925][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  816.024745][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  817.483474][T17928] ima: policy update failed
[  817.508289][   T30] audit: type=1802 audit(4294967308.830:21): pid=17928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2439" res=0 errno=0
[  817.785976][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  817.864691][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  818.105599][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  818.709038][T17941] FAULT_INJECTION: forcing a failure.
[  818.709038][T17941] name fail_futex, interval 1, probability 0, space 0, times 0
[  818.769370][T17941] CPU: 1 UID: 0 PID: 17941 Comm: syz.0.2442 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  818.769409][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  818.769425][T17941] Call Trace:
[  818.769435][T17941]  <TASK>
[  818.769446][T17941]  dump_stack_lvl+0x16c/0x1f0
[  818.769492][T17941]  should_fail_ex+0x512/0x640
[  818.769534][T17941]  get_futex_key+0x1d0/0x1540
[  818.769568][T17941]  ? find_held_lock+0x2b/0x80
[  818.769594][T17941]  ? __pfx_get_futex_key+0x10/0x10
[  818.769627][T17941]  ? do_raw_spin_unlock+0x172/0x230
[  818.769668][T17941]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  818.769708][T17941]  futex_wait_setup+0x9d/0x550
[  818.769755][T17941]  __futex_wait+0x194/0x2f0
[  818.769794][T17941]  ? __pfx___futex_wait+0x10/0x10
[  818.769827][T17941]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  818.769862][T17941]  ? lockdep_hardirqs_on+0x7c/0x110
[  818.769902][T17941]  ? __pfx_futex_wake_mark+0x10/0x10
[  818.769958][T17941]  futex_wait+0xe8/0x380
[  818.769993][T17941]  ? __pfx_futex_wait+0x10/0x10
[  818.770050][T17941]  do_futex+0x229/0x350
[  818.770081][T17941]  ? __pfx_do_futex+0x10/0x10
[  818.770116][T17941]  ? do_raw_spin_unlock+0x172/0x230
[  818.770158][T17941]  __x64_sys_futex+0x1e0/0x4c0
[  818.770205][T17941]  ? __sys_accept4+0x146/0x1c0
[  818.770240][T17941]  ? __pfx___x64_sys_futex+0x10/0x10
[  818.770273][T17941]  ? xfd_validate_state+0x61/0x180
[  818.770305][T17941]  ? __pfx_do_writev+0x10/0x10
[  818.770350][T17941]  do_syscall_64+0xcd/0x490
[  818.770390][T17941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.770418][T17941] RIP: 0033:0x7f550458e929
[  818.770440][T17941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  818.770465][T17941] RSP: 002b:00007f550544a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  818.770490][T17941] RAX: ffffffffffffffda RBX: 00007f55047b6088 RCX: 00007f550458e929
[  818.770510][T17941] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55047b6088
[  818.770527][T17941] RBP: 00007f55047b6080 R08: 0000000000000000 R09: 0000000000000000
[  818.770545][T17941] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55047b608c
[  818.770562][T17941] R13: 0000000000000000 R14: 00007ffc39a9dd40 R15: 00007ffc39a9de28
[  818.770598][T17941]  </TASK>
[  819.429060][T17947] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  819.954951][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  820.186945][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  823.177582][T18008] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2452'.
[  824.582659][T18015] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  825.572025][T18040] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2460'.
[  825.992429][T18048] bridge0: port 3(gretap0) entered blocking state
[  825.998975][T18048] bridge0: port 3(gretap0) entered disabled state
[  826.005939][T18048] gretap0: entered allmulticast mode
[  826.012208][T18048] gretap0: entered promiscuous mode
[  826.024777][T18048] bridge0: port 3(gretap0) entered blocking state
[  826.031276][T18048] bridge0: port 3(gretap0) entered forwarding state
[  826.099416][T18052] Invalid ELF header magic: != ELF
[  826.353459][T18052] netlink: 'syz.1.2461': attribute type 11 has an invalid length.
[  830.390538][T12946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  830.400438][T12946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  830.412658][T12946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  830.421701][T12946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  830.431223][T12946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  831.066073][T18093] chnl_net:caif_netlink_parms(): no params data found
[  831.608304][T18093] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.616247][T18093] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.623475][T18093] bridge_slave_0: entered allmulticast mode
[  831.636617][T18093] bridge_slave_0: entered promiscuous mode
[  831.660235][T18093] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.680016][T18093] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.695567][T18093] bridge_slave_1: entered allmulticast mode
[  831.730432][T18093] bridge_slave_1: entered promiscuous mode
[  831.880233][T18093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  831.938186][T18093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.189459][T18093] team0: Port device team_slave_0 added
[  832.217248][T18093] team0: Port device team_slave_1 added
[  832.316631][T18093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.334621][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.380773][T18093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.410736][T18093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.431628][T18093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  832.466977][T18093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  832.509040][T12946] Bluetooth: hci5: command tx timeout
[  832.629495][T18093] hsr_slave_0: entered promiscuous mode
[  832.707704][T18093] hsr_slave_1: entered promiscuous mode
[  832.722763][T18093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  832.741095][T18093] Cannot create hsr debugfs directory
[  833.764306][T18093] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  833.932884][T18093] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  833.970309][T18093] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  834.013354][T18093] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  834.091415][T18151] syz.1.2480 (18151): attempted to duplicate a private mapping with mremap.  This is not supported.
[  834.298468][T18093] 8021q: adding VLAN 0 to HW filter on device bond0
[  834.329374][T18093] 8021q: adding VLAN 0 to HW filter on device team0
[  834.365059][T17446] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.372243][T17446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  834.418410][T17446] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.425630][T17446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  834.467452][T18093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  834.485645][T18093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  834.585463][T12946] Bluetooth: hci5: command tx timeout
[  834.794093][T18158] FAULT_INJECTION: forcing a failure.
[  834.794093][T18158] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  834.817921][T18158] CPU: 1 UID: 0 PID: 18158 Comm: syz.0.2483 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  834.817958][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  834.817973][T18158] Call Trace:
[  834.817982][T18158]  <TASK>
[  834.817993][T18158]  dump_stack_lvl+0x16c/0x1f0
[  834.818033][T18158]  should_fail_ex+0x512/0x640
[  834.818072][T18158]  should_fail_alloc_page+0xe7/0x130
[  834.818099][T18158]  prepare_alloc_pages+0x3c2/0x610
[  834.818135][T18158]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  834.818174][T18158]  ? mas_next_slot+0x12d3/0x21b0
[  834.818198][T18158]  ? __up_read+0x1f8/0x750
[  834.818243][T18158]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  834.818282][T18158]  ? validate_mm+0x40a/0x570
[  834.818319][T18158]  ? __pfx_validate_mm+0x10/0x10
[  834.818350][T18158]  ? lockdep_hardirqs_on+0x7c/0x110
[  834.818390][T18158]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  834.818428][T18158]  ? policy_nodemask+0xea/0x4e0
[  834.818469][T18158]  alloc_pages_mpol+0x1fb/0x550
[  834.818494][T18158]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  834.818530][T18158]  alloc_pages_noprof+0x131/0x390
[  834.818555][T18158]  __pmd_alloc+0x3b/0x930
[  834.818586][T18158]  __handle_mm_fault+0xaac/0x5490
[  834.818628][T18158]  ? __pfx___handle_mm_fault+0x10/0x10
[  834.818699][T18158]  handle_mm_fault+0x589/0xd10
[  834.818740][T18158]  __get_user_pages+0x589/0x3b80
[  834.818779][T18158]  ? __pfx_mt_find+0x10/0x10
[  834.818804][T18158]  ? __pfx___get_user_pages+0x10/0x10
[  834.818845][T18158]  populate_vma_page_range+0x278/0x3a0
[  834.818877][T18158]  ? __pfx_populate_vma_page_range+0x10/0x10
[  834.818905][T18158]  ? __pfx_find_vma_intersection+0x10/0x10
[  834.818935][T18158]  ? do_mmap+0x69c/0x1210
[  834.818965][T18158]  __mm_populate+0x1d8/0x380
[  834.818996][T18158]  ? __pfx___mm_populate+0x10/0x10
[  834.819030][T18158]  ? up_write+0x1b2/0x520
[  834.819068][T18158]  vm_mmap_pgoff+0x362/0x450
[  834.819097][T18158]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  834.819131][T18158]  ? __x64_sys_futex+0x1e0/0x4c0
[  834.819158][T18158]  ? __x64_sys_futex+0x1e9/0x4c0
[  834.819192][T18158]  ksys_mmap_pgoff+0x7d/0x5c0
[  834.819217][T18158]  ? xfd_validate_state+0x61/0x180
[  834.819246][T18158]  ? __pfx_do_writev+0x10/0x10
[  834.819281][T18158]  __x64_sys_mmap+0x125/0x190
[  834.819319][T18158]  do_syscall_64+0xcd/0x490
[  834.819359][T18158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.819384][T18158] RIP: 0033:0x7f550458e929
[  834.819405][T18158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.819430][T18158] RSP: 002b:00007f550546b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  834.819455][T18158] RAX: ffffffffffffffda RBX: 00007f55047b5fa0 RCX: 00007f550458e929
[  834.819472][T18158] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  834.819489][T18158] RBP: 00007f5504610b39 R08: 0000000000000002 R09: 0000000000008000
[  834.819506][T18158] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  834.819523][T18158] R13: 0000000000000000 R14: 00007f55047b5fa0 R15: 00007ffc39a9de28
[  834.819557][T18158]  </TASK>
[  834.819652][   T30] audit: type=1326 audit(4294967326.140:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18157 comm="syz.0.2483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f550458e929 code=0x0
[  835.330859][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.063572][T18093] veth0_vlan: entered promiscuous mode
[  836.093912][T18093] veth1_vlan: entered promiscuous mode
[  836.248007][T18093] veth0_macvtap: entered promiscuous mode
[  836.270390][T18093] veth1_macvtap: entered promiscuous mode
[  836.301318][T18093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  836.325511][T18093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  836.339100][T18093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.351602][T18093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.360425][T18093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.405218][T18093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.571556][ T9437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.594652][ T9437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.671900][T12946] Bluetooth: hci5: command tx timeout
[  836.712148][ T9437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.759834][ T9437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.057049][T18206] FAULT_INJECTION: forcing a failure.
[  837.057049][T18206] name failslab, interval 1, probability 0, space 0, times 0
[  837.085560][T18206] CPU: 1 UID: 0 PID: 18206 Comm: syz.5.2468 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  837.085597][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  837.085612][T18206] Call Trace:
[  837.085622][T18206]  <TASK>
[  837.085632][T18206]  dump_stack_lvl+0x16c/0x1f0
[  837.085682][T18206]  should_fail_ex+0x512/0x640
[  837.085717][T18206]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  837.085757][T18206]  should_failslab+0xc2/0x120
[  837.085782][T18206]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  837.085817][T18206]  ? __pfx___might_resched+0x10/0x10
[  837.085843][T18206]  ? __anon_vma_prepare+0xae/0x5e0
[  837.085884][T18206]  __anon_vma_prepare+0xae/0x5e0
[  837.085918][T18206]  ? __pfx___pte_alloc+0x10/0x10
[  837.085947][T18206]  __vmf_anon_prepare+0x11c/0x240
[  837.085979][T18206]  __handle_mm_fault+0x27f6/0x5490
[  837.086023][T18206]  ? __pfx___handle_mm_fault+0x10/0x10
[  837.086088][T18206]  handle_mm_fault+0x589/0xd10
[  837.086130][T18206]  __get_user_pages+0x589/0x3b80
[  837.086170][T18206]  ? __pfx_mt_find+0x10/0x10
[  837.086196][T18206]  ? __pfx___get_user_pages+0x10/0x10
[  837.086249][T18206]  populate_vma_page_range+0x278/0x3a0
[  837.086284][T18206]  ? __pfx_populate_vma_page_range+0x10/0x10
[  837.086315][T18206]  ? __pfx_find_vma_intersection+0x10/0x10
[  837.086348][T18206]  ? do_mmap+0x69c/0x1210
[  837.086381][T18206]  __mm_populate+0x1d8/0x380
[  837.086414][T18206]  ? __pfx___mm_populate+0x10/0x10
[  837.086447][T18206]  ? up_write+0x1b2/0x520
[  837.086486][T18206]  vm_mmap_pgoff+0x362/0x450
[  837.086518][T18206]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  837.086553][T18206]  ? __x64_sys_futex+0x1e0/0x4c0
[  837.086583][T18206]  ? __x64_sys_futex+0x1e9/0x4c0
[  837.086619][T18206]  ksys_mmap_pgoff+0x7d/0x5c0
[  837.086645][T18206]  ? xfd_validate_state+0x61/0x180
[  837.086677][T18206]  ? __pfx_do_writev+0x10/0x10
[  837.086714][T18206]  __x64_sys_mmap+0x125/0x190
[  837.086753][T18206]  do_syscall_64+0xcd/0x490
[  837.086794][T18206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.086821][T18206] RIP: 0033:0x7f64e298e929
[  837.086843][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  837.086869][T18206] RSP: 002b:00007f64e3842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  837.086894][T18206] RAX: ffffffffffffffda RBX: 00007f64e2bb5fa0 RCX: 00007f64e298e929
[  837.086913][T18206] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  837.086929][T18206] RBP: 00007f64e2a10b39 R08: 0000000000000002 R09: 0000000000008000
[  837.086946][T18206] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  837.086962][T18206] R13: 0000000000000000 R14: 00007f64e2bb5fa0 R15: 00007ffe5bf75788
[  837.086997][T18206]  </TASK>
[  837.717056][T18206] nbd: socks must be embedded in a SOCK_ITEM attr
[  838.753962][T12946] Bluetooth: hci5: command tx timeout
[  839.905224][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  839.925344][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  839.949177][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  839.967146][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  839.979159][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  840.181272][T18241] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 7f00010002
[  841.034366][T18237] chnl_net:caif_netlink_parms(): no params data found
[  841.838989][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'.
[  841.966888][T18237] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.994909][T18237] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.002173][T18237] bridge_slave_0: entered allmulticast mode
[  842.014724][T18237] bridge_slave_0: entered promiscuous mode
[  842.025635][T12946] Bluetooth: hci6: command tx timeout
[  842.091207][T18237] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.109900][T18237] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.130956][T18237] bridge_slave_1: entered allmulticast mode
[  842.149455][T18237] bridge_slave_1: entered promiscuous mode
[  842.366867][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  842.389599][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  842.466381][T18237] team0: Port device team_slave_0 added
[  842.477370][T18237] team0: Port device team_slave_1 added
[  843.113406][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  843.124738][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  843.236916][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  843.307519][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  843.324574][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  843.489535][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  844.115019][T12946] Bluetooth: hci6: command tx timeout
[  844.262645][T18237] hsr_slave_0: entered promiscuous mode
[  844.365073][T18237] hsr_slave_1: entered promiscuous mode
[  844.371434][T18237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  844.424802][T18237] Cannot create hsr debugfs directory
[  845.661314][T18237] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  845.739621][T18237] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  845.798620][T18237] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  845.867175][T18237] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  846.203618][T12946] Bluetooth: hci6: command tx timeout
[  846.275790][T18237] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.372913][T18237] 8021q: adding VLAN 0 to HW filter on device team0
[  846.426347][T17575] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.433540][T17575] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.486087][T17575] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.493279][T17575] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.059679][   T30] audit: type=1804 audit(4294967338.370:23): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2515" name=2F6E6577726F6F742F31302F22050820 dev="tmpfs" ino=70 res=1 errno=0
[  847.098518][T18330] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2515'.
[  847.164016][   T30] audit: type=1800 audit(4294967338.410:24): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2515" name=22050820 dev="tmpfs" ino=70 res=0 errno=0
[  847.526682][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.283211][T12946] Bluetooth: hci6: command tx timeout
[  848.297978][T18347] ERROR: Out of memory at tomoyo_memory_ok.
[  848.952963][T18237] veth0_vlan: entered promiscuous mode
[  849.027496][T18237] veth1_vlan: entered promiscuous mode
[  849.342918][T18237] veth0_macvtap: entered promiscuous mode
[  849.395901][T18237] veth1_macvtap: entered promiscuous mode
[  849.509909][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.559402][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  849.628462][T18237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.674679][T18237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.714805][T18237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.747010][T18237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.057048][T17575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.097526][T17575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.200220][T17426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.260136][T17426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.648004][T18400] ERROR: Out of memory at tomoyo_memory_ok.
[  860.517120][T18525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152
[  861.517933][   T30] audit: type=1800 audit(4294967352.840:25): pid=18538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2550" name="version" dev="configfs" ino=71296 res=0 errno=0
[  861.949771][T18545] i2c i2c-0: delete_device: Can't find device in list
[  865.859723][   T30] audit: type=1326 audit(4294967357.180:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18583 comm="syz.5.2560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64e298e929 code=0x0
[  870.036065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  870.042542][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  871.432727][T18687] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  872.902566][T18705] FAULT_INJECTION: forcing a failure.
[  872.902566][T18705] name failslab, interval 1, probability 0, space 0, times 0
[  872.999404][T18705] CPU: 1 UID: 0 PID: 18705 Comm: syz.6.2578 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  872.999444][T18705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  872.999460][T18705] Call Trace:
[  872.999469][T18705]  <TASK>
[  872.999480][T18705]  dump_stack_lvl+0x16c/0x1f0
[  872.999526][T18705]  should_fail_ex+0x512/0x640
[  872.999561][T18705]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  872.999604][T18705]  should_failslab+0xc2/0x120
[  872.999629][T18705]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  872.999667][T18705]  ? lockdep_init_map_type+0x5c/0x280
[  872.999701][T18705]  ? __d_alloc+0x31/0xaa0
[  872.999743][T18705]  __d_alloc+0x31/0xaa0
[  872.999785][T18705]  d_alloc_pseudo+0x1c/0xc0
[  872.999814][T18705]  alloc_file_pseudo+0xcf/0x230
[  872.999844][T18705]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  872.999872][T18705]  ? alloc_fd+0x471/0x7d0
[  872.999921][T18705]  sock_alloc_file+0x50/0x210
[  872.999950][T18705]  __sys_socket+0x1c0/0x260
[  872.999981][T18705]  ? __pfx___sys_socket+0x10/0x10
[  873.000013][T18705]  ? xfd_validate_state+0x61/0x180
[  873.000054][T18705]  __x64_sys_socket+0x72/0xb0
[  873.000084][T18705]  ? lockdep_hardirqs_on+0x7c/0x110
[  873.000120][T18705]  do_syscall_64+0xcd/0x490
[  873.000160][T18705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.000186][T18705] RIP: 0033:0x7fb69f98e929
[  873.000209][T18705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  873.000235][T18705] RSP: 002b:00007fb6a0849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  873.000260][T18705] RAX: ffffffffffffffda RBX: 00007fb69fbb6160 RCX: 00007fb69f98e929
[  873.000277][T18705] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  873.000292][T18705] RBP: 00007fb69fa10b39 R08: 0000000000000000 R09: 0000000000000000
[  873.000308][T18705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  873.000322][T18705] R13: 0000000000000000 R14: 00007fb69fbb6160 R15: 00007ffd3c810628
[  873.000355][T18705]  </TASK>
[  876.718315][T18759] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154
[  877.225777][T18764] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155
[  878.213546][T18765] FAULT_INJECTION: forcing a failure.
[  878.213546][T18765] name failslab, interval 1, probability 0, space 0, times 0
[  878.292672][T18765] CPU: 1 UID: 0 PID: 18765 Comm: syz.5.2588 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  878.292704][T18765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  878.292716][T18765] Call Trace:
[  878.292724][T18765]  <TASK>
[  878.292733][T18765]  dump_stack_lvl+0x16c/0x1f0
[  878.292769][T18765]  should_fail_ex+0x512/0x640
[  878.292797][T18765]  ? __kmalloc_noprof+0xbf/0x510
[  878.292829][T18765]  ? kernfs_fop_write_iter+0x237/0x510
[  878.292850][T18765]  should_failslab+0xc2/0x120
[  878.292870][T18765]  __kmalloc_noprof+0xd2/0x510
[  878.292907][T18765]  kernfs_fop_write_iter+0x237/0x510
[  878.292933][T18765]  vfs_write+0x6c4/0x1150
[  878.292962][T18765]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  878.292986][T18765]  ? __pfx___mutex_lock+0x10/0x10
[  878.293017][T18765]  ? __pfx_vfs_write+0x10/0x10
[  878.293066][T18765]  ksys_write+0x12a/0x250
[  878.293094][T18765]  ? __pfx_ksys_write+0x10/0x10
[  878.293131][T18765]  do_syscall_64+0xcd/0x490
[  878.293165][T18765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.293186][T18765] RIP: 0033:0x7f64e298e929
[  878.293205][T18765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  878.293225][T18765] RSP: 002b:00007f64e3842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  878.293247][T18765] RAX: ffffffffffffffda RBX: 00007f64e2bb5fa0 RCX: 00007f64e298e929
[  878.293261][T18765] RDX: 00000000000098c7 RSI: 0000200000000440 RDI: 0000000000000004
[  878.293275][T18765] RBP: 00007f64e3842090 R08: 0000000000000000 R09: 0000000000000000
[  878.293288][T18765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.293300][T18765] R13: 0000000000000000 R14: 00007f64e2bb5fa0 R15: 00007ffe5bf75788
[  878.293331][T18765]  </TASK>
[  881.701850][T18818] FAULT_INJECTION: forcing a failure.
[  881.701850][T18818] name failslab, interval 1, probability 0, space 0, times 0
[  881.756792][T18818] CPU: 1 UID: 0 PID: 18818 Comm: syz.1.2596 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  881.756830][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  881.756846][T18818] Call Trace:
[  881.756856][T18818]  <TASK>
[  881.756867][T18818]  dump_stack_lvl+0x16c/0x1f0
[  881.756912][T18818]  should_fail_ex+0x512/0x640
[  881.756947][T18818]  ? __kmalloc_noprof+0xbf/0x510
[  881.756986][T18818]  ? sk_prot_alloc+0x1a8/0x2a0
[  881.757012][T18818]  should_failslab+0xc2/0x120
[  881.757037][T18818]  __kmalloc_noprof+0xd2/0x510
[  881.757090][T18818]  sk_prot_alloc+0x1a8/0x2a0
[  881.757122][T18818]  sk_alloc+0x36/0xc20
[  881.757159][T18818]  __netlink_create+0x5e/0x2c0
[  881.757195][T18818]  ? __wake_up+0x3f/0x60
[  881.757226][T18818]  netlink_create+0x39e/0x620
[  881.757264][T18818]  ? __pfx_genl_bind+0x10/0x10
[  881.757291][T18818]  ? __pfx_genl_unbind+0x10/0x10
[  881.757318][T18818]  ? __pfx_genl_release+0x10/0x10
[  881.757351][T18818]  __sock_create+0x335/0x8d0
[  881.757388][T18818]  __sys_socket+0x14d/0x260
[  881.757419][T18818]  ? __pfx___sys_socket+0x10/0x10
[  881.757450][T18818]  ? xfd_validate_state+0x61/0x180
[  881.757491][T18818]  __x64_sys_socket+0x72/0xb0
[  881.757520][T18818]  ? lockdep_hardirqs_on+0x7c/0x110
[  881.757556][T18818]  do_syscall_64+0xcd/0x490
[  881.757597][T18818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.757624][T18818] RIP: 0033:0x7fa698d8e929
[  881.757646][T18818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  881.757673][T18818] RSP: 002b:00007fa699bdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  881.757698][T18818] RAX: ffffffffffffffda RBX: 00007fa698fb6080 RCX: 00007fa698d8e929
[  881.757716][T18818] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  881.757732][T18818] RBP: 00007fa698e10b39 R08: 0000000000000000 R09: 0000000000000000
[  881.757749][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  881.757766][T18818] R13: 0000000000000000 R14: 00007fa698fb6080 R15: 00007ffecf3db1c8
[  881.757801][T18818]  </TASK>
[  882.946573][T18838] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156
[  884.377468][   T30] audit: type=1326 audit(4294967375.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18849 comm="syz.6.2605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb69f98e929 code=0x0
[  884.887761][T18864] synth uevent: /module/orangefs: unknown uevent action string
[  890.147815][T18903] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157
[  891.052259][T18907] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158
[  892.066334][T18933] [U]  
[  892.069424][T18933] [U] 
[  892.072109][T18933] [U] 
[  892.074788][T18933] [U] 
[  892.151266][T18933] [U] 
[  892.154013][T18933] [U] 
[  892.156715][T18933] [U] 
[  892.159394][T18933] [U] 
[  892.259747][T18933] [U] 
[  892.262512][T18933] [U] 
[  892.265241][T18933] [U] 
[  892.267958][T18933] [U] 
[  892.345731][T18933] [U] 
[  892.348446][T18933] [U] 
[  892.351125][T18933] [U] 
[  892.353797][T18933] [U] 
[  892.426911][T18933] [U] 
[  892.429648][T18933] [U] 
[  892.432327][T18933] [U] 
[  892.435036][T18933] [U] 
[  892.480906][T18933] [U] 
[  892.483646][T18933] [U] 
[  892.486356][T18933] [U] 
[  892.489057][T18933] [U] 
[  892.554651][T18933] [U] 
[  892.557398][T18933] [U] 
[  892.560115][T18933] [U] 
[  892.562827][T18933] [U] 
[  892.588848][T18933] [U] 
[  892.591566][T18933] [U] 
[  892.594245][T18933] [U] 
[  892.596928][T18933] [U] 
[  892.671103][T18933] [U] 
[  892.673812][T18933] [U] 
[  892.676490][T18933] [U] 
[  892.679170][T18933] [U] 
[  892.740309][T18933] [U] 
[  892.743075][T18933] [U] 
[  892.745782][T18933] [U] 
[  892.748476][T18933] [U] 
[  892.840507][T18933] [U] 
[  892.843221][T18933] [U] 
[  892.845905][T18933] [U] 
[  892.848584][T18933] [U] 
[  892.871710][T18933] [U] 
[  892.874462][T18933] [U] 
[  892.877185][T18933] [U] 
[  892.879900][T18933] [U] 
[  892.975077][T18933] [U] 
[  892.996364][T18940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159
[  893.366489][T18951] random: crng reseeded on system resumption
[  893.471063][T18943] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160
[  895.176522][T18977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input161
[  896.654919][T18979] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input162
[  898.015572][T19006] random: crng reseeded on system resumption
[  900.701264][T19059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input163
[  903.328327][T19097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input164
[  908.131541][T19162] FAULT_INJECTION: forcing a failure.
[  908.131541][T19162] name failslab, interval 1, probability 0, space 0, times 0
[  908.243478][T19162] CPU: 1 UID: 0 PID: 19162 Comm: syz.5.2660 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  908.243513][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  908.243528][T19162] Call Trace:
[  908.243537][T19162]  <TASK>
[  908.243547][T19162]  dump_stack_lvl+0x16c/0x1f0
[  908.243587][T19162]  should_fail_ex+0x512/0x640
[  908.243626][T19162]  ? __kmalloc_noprof+0xbf/0x510
[  908.243663][T19162]  ? copy_splice_read+0x1a8/0xba0
[  908.243690][T19162]  should_failslab+0xc2/0x120
[  908.243714][T19162]  __kmalloc_noprof+0xd2/0x510
[  908.243756][T19162]  copy_splice_read+0x1a8/0xba0
[  908.243786][T19162]  ? __pfx_pipe_to_null+0x10/0x10
[  908.243823][T19162]  ? __pfx_copy_splice_read+0x10/0x10
[  908.243849][T19162]  ? pipe_unlock+0x4a/0x70
[  908.243883][T19162]  ? __pfx_splice_from_pipe+0x10/0x10
[  908.243923][T19162]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  908.243956][T19162]  ? __pfx_copy_splice_read+0x10/0x10
[  908.243982][T19162]  do_splice_read+0x285/0x370
[  908.244012][T19162]  splice_direct_to_actor+0x2a1/0xa30
[  908.244043][T19162]  ? __pfx_direct_splice_actor+0x10/0x10
[  908.244081][T19162]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  908.244122][T19162]  do_splice_direct+0x174/0x240
[  908.244152][T19162]  ? __pfx_do_splice_direct+0x10/0x10
[  908.244183][T19162]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  908.244214][T19162]  ? bpf_lsm_file_permission+0x9/0x10
[  908.244239][T19162]  ? security_file_permission+0x71/0x210
[  908.244271][T19162]  ? rw_verify_area+0xcf/0x680
[  908.244304][T19162]  do_sendfile+0xb06/0xe50
[  908.244338][T19162]  ? __pfx_do_sendfile+0x10/0x10
[  908.244373][T19162]  ? __x64_sys_futex+0x1e0/0x4c0
[  908.244399][T19162]  ? __x64_sys_futex+0x1e9/0x4c0
[  908.244435][T19162]  __x64_sys_sendfile64+0x1d8/0x220
[  908.244457][T19162]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  908.244489][T19162]  do_syscall_64+0xcd/0x490
[  908.244526][T19162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  908.244550][T19162] RIP: 0033:0x7f64e298e929
[  908.244569][T19162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  908.244592][T19162] RSP: 002b:00007f64e3821038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  908.244623][T19162] RAX: ffffffffffffffda RBX: 00007f64e2bb6080 RCX: 00007f64e298e929
[  908.244640][T19162] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[  908.244654][T19162] RBP: 00007f64e2a10b39 R08: 0000000000000000 R09: 0000000000000000
[  908.244669][T19162] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000
[  908.244685][T19162] R13: 0000000000000000 R14: 00007f64e2bb6080 R15: 00007ffe5bf75788
[  908.244718][T19162]  </TASK>
[  909.593198][T19190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input165
[  910.187330][T19175] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input166
[  910.597509][T19182] FAULT_INJECTION: forcing a failure.
[  910.597509][T19182] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  910.625567][T19182] CPU: 0 UID: 0 PID: 19182 Comm: syz.5.2664 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  910.625607][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  910.625629][T19182] Call Trace:
[  910.625638][T19182]  <TASK>
[  910.625649][T19182]  dump_stack_lvl+0x16c/0x1f0
[  910.625694][T19182]  should_fail_ex+0x512/0x640
[  910.625738][T19182]  should_fail_alloc_page+0xe7/0x130
[  910.625767][T19182]  prepare_alloc_pages+0x3c2/0x610
[  910.625806][T19182]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  910.625845][T19182]  ? find_held_lock+0x2b/0x80
[  910.625873][T19182]  ? __folio_batch_add_and_move+0x602/0xc90
[  910.625926][T19182]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  910.625965][T19182]  ? __lock_acquire+0x622/0x1c90
[  910.626012][T19182]  ? lock_acquire+0x179/0x350
[  910.626046][T19182]  ? find_held_lock+0x2b/0x80
[  910.626070][T19182]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  910.626110][T19182]  ? policy_nodemask+0xea/0x4e0
[  910.626154][T19182]  alloc_pages_mpol+0x1fb/0x550
[  910.626181][T19182]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  910.626206][T19182]  ? __page_table_check_ptes_set+0x1ae/0x420
[  910.626248][T19182]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  910.626292][T19182]  folio_alloc_mpol_noprof+0x36/0x2f0
[  910.626324][T19182]  shmem_alloc_folio+0x135/0x160
[  910.626356][T19182]  shmem_alloc_and_add_folio+0x499/0xc20
[  910.626399][T19182]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  910.626440][T19182]  ? shmem_allowable_huge_orders+0xcb/0x2f0
[  910.626484][T19182]  shmem_get_folio_gfp+0x67f/0x1600
[  910.626529][T19182]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  910.626568][T19182]  ? __pte_offset_map_lock+0x174/0x310
[  910.626600][T19182]  shmem_write_begin+0x160/0x300
[  910.626648][T19182]  ? find_held_lock+0x2b/0x80
[  910.626672][T19182]  ? __pfx_shmem_write_begin+0x10/0x10
[  910.626709][T19182]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[  910.626741][T19182]  ? __pfx_timestamp_truncate+0x10/0x10
[  910.626783][T19182]  generic_perform_write+0x3d0/0x930
[  910.626831][T19182]  ? __pfx_generic_perform_write+0x10/0x10
[  910.626869][T19182]  ? inode_needs_update_time.part.0+0x191/0x270
[  910.626918][T19182]  shmem_file_write_iter+0x10e/0x140
[  910.626946][T19182]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  910.626971][T19182]  __kernel_write_iter+0x317/0xa90
[  910.627010][T19182]  ? __pfx___kernel_write_iter+0x10/0x10
[  910.627046][T19182]  ? __up_read+0x1f8/0x750
[  910.627087][T19182]  ? dump_user_range+0x745/0xb60
[  910.627124][T19182]  dump_user_range+0x41f/0xb60
[  910.627162][T19182]  ? __pfx_dump_user_range+0x10/0x10
[  910.627194][T19182]  ? elf_coredump_extra_notes_write+0xbd/0x4f0
[  910.627237][T19182]  ? __pfx_writenote+0x10/0x10
[  910.627278][T19182]  elf_core_dump+0x288a/0x3a90
[  910.627330][T19182]  ? __pfx_elf_core_dump+0x10/0x10
[  910.627360][T19182]  ? kasan_save_stack+0x33/0x60
[  910.627394][T19182]  ? kasan_save_track+0x14/0x30
[  910.627428][T19182]  ? __kasan_kmalloc+0xaa/0xb0
[  910.627462][T19182]  ? do_coredump+0x1c9a/0x4f10
[  910.627487][T19182]  ? get_signal+0x22e3/0x26d0
[  910.627514][T19182]  ? arch_do_signal_or_restart+0x8f/0x790
[  910.627549][T19182]  ? 0xffffffffff600000
[  910.627641][T19182]  ? do_coredump+0x399f/0x4f10
[  910.627669][T19182]  do_coredump+0x399f/0x4f10
[  910.627713][T19182]  ? __pfx_do_coredump+0x10/0x10
[  910.627744][T19182]  ? find_held_lock+0x2b/0x80
[  910.627771][T19182]  ? is_bpf_text_address+0x8a/0x1a0
[  910.627811][T19182]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  910.627841][T19182]  ? is_bpf_text_address+0x94/0x1a0
[  910.627876][T19182]  ? kernel_text_address+0x8d/0x100
[  910.627915][T19182]  ? __kernel_text_address+0xd/0x40
[  910.627952][T19182]  ? unwind_get_return_address+0x59/0xa0
[  910.628013][T19182]  ? stack_depot_save_flags+0x28/0xa40
[  910.628052][T19182]  ? __lock_acquire+0xb8a/0x1c90
[  910.628090][T19182]  ? kasan_save_stack+0x42/0x60
[  910.628122][T19182]  ? kasan_save_stack+0x33/0x60
[  910.628156][T19182]  ? kasan_save_track+0x14/0x30
[  910.628190][T19182]  ? kasan_save_free_info+0x3b/0x60
[  910.628218][T19182]  ? __kasan_slab_free+0x51/0x70
[  910.628250][T19182]  ? kmem_cache_free+0x2d1/0x4d0
[  910.628282][T19182]  ? __sigqueue_free+0xba/0x2a0
[  910.628313][T19182]  ? get_signal+0xcba/0x26d0
[  910.628337][T19182]  ? arch_do_signal_or_restart+0x8f/0x790
[  910.628414][T19182]  ? proc_coredump_connector+0x2d1/0x4f0
[  910.628445][T19182]  ? __pfx_proc_coredump_connector+0x10/0x10
[  910.628484][T19182]  ? rcu_is_watching+0x12/0xc0
[  910.628516][T19182]  get_signal+0x22e3/0x26d0
[  910.628553][T19182]  ? lockdep_hardirqs_on+0x7c/0x110
[  910.628591][T19182]  ? __pfx_get_signal+0x10/0x10
[  910.628624][T19182]  ? force_sig_info_to_task+0x3a0/0x660
[  910.628661][T19182]  arch_do_signal_or_restart+0x8f/0x790
[  910.628689][T19182]  ? __pfx_force_exit_sig+0x10/0x10
[  910.628717][T19182]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  910.628758][T19182]  ? syscall_user_dispatch+0x12c/0x140
[  910.628803][T19182]  exit_to_user_mode_loop+0x84/0x110
[  910.628843][T19182]  do_syscall_64+0x3f6/0x490
[  910.628884][T19182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.628911][T19182] RIP: 0033:0x7f64e298e929
[  910.628933][T19182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  910.628959][T19182] RSP: 002b:00007f64e38210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  910.628985][T19182] RAX: ffffffffffffffda RBX: 00007f64e2bb6088 RCX: 00007f64e298e929
[  910.629003][T19182] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64e2bb608c
[  910.629020][T19182] RBP: 00007f64e2bb6080 R08: 00007f64e3843000 R09: 0000000000000000
[  910.629037][T19182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64e2bb608c
[  910.629053][T19182] R13: 0000000000000000 R14: 00007ffe5bf756a0 R15: 00007ffe5bf75788
[  910.629089][T19182]  </TASK>
[  913.166339][T19227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input167
[  913.272424][T19230] random: crng reseeded on system resumption
[  913.988278][T19231] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input168
[  917.078567][T19269] random: crng reseeded on system resumption
[  918.838405][T19304] random: crng reseeded on system resumption
[  922.151592][T19344] FAULT_INJECTION: forcing a failure.
[  922.151592][T19344] name failslab, interval 1, probability 0, space 0, times 0
[  922.214958][T19322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input169
[  922.244621][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.0.2689 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  922.244653][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  922.244667][T19344] Call Trace:
[  922.244675][T19344]  <TASK>
[  922.244685][T19344]  dump_stack_lvl+0x16c/0x1f0
[  922.244725][T19344]  should_fail_ex+0x512/0x640
[  922.244757][T19344]  ? __kmalloc_noprof+0xbf/0x510
[  922.244793][T19344]  ? kernfs_fop_write_iter+0x237/0x510
[  922.244817][T19344]  should_failslab+0xc2/0x120
[  922.244841][T19344]  __kmalloc_noprof+0xd2/0x510
[  922.244885][T19344]  kernfs_fop_write_iter+0x237/0x510
[  922.244916][T19344]  vfs_write+0x6c4/0x1150
[  922.244951][T19344]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  922.244979][T19344]  ? __pfx___mutex_lock+0x10/0x10
[  922.245015][T19344]  ? __pfx_vfs_write+0x10/0x10
[  922.245072][T19344]  ksys_write+0x12a/0x250
[  922.245104][T19344]  ? __pfx_ksys_write+0x10/0x10
[  922.245148][T19344]  do_syscall_64+0xcd/0x490
[  922.245187][T19344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.245213][T19344] RIP: 0033:0x7f550458e929
[  922.245234][T19344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  922.245258][T19344] RSP: 002b:00007f550546b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  922.245282][T19344] RAX: ffffffffffffffda RBX: 00007f55047b5fa0 RCX: 00007f550458e929
[  922.245299][T19344] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003
[  922.245314][T19344] RBP: 00007f550546b090 R08: 0000000000000000 R09: 0000000000000000
[  922.245329][T19344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  922.245345][T19344] R13: 0000000000000000 R14: 00007f55047b5fa0 R15: 00007ffc39a9de28
[  922.245381][T19344]  </TASK>
[  923.251021][T19347] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input170
[  928.920770][T19439] tipc: Started in network mode
[  928.958005][T19439] tipc: Node identity ee00, cluster identity 4711
[  929.005055][T19439] tipc: Node number set to 60928
[  929.128171][T19432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input171
[  929.934280][T19444] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input172
[  931.469107][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.475865][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  939.170657][T19544] netlink: 'syz.5.2725': attribute type 2 has an invalid length.
[  939.208668][T19548] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input173
[  939.289061][T19549] bridge0: port 3(hsr_slave_1) entered blocking state
[  939.354287][T19549] bridge0: port 3(hsr_slave_1) entered disabled state
[  939.454965][T19549] hsr_slave_1: entered allmulticast mode
[  939.462791][T19549] hsr_slave_1: left allmulticast mode
[  939.739474][T19551] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input174
[  946.148969][T19648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input175
[  947.464391][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2744'.
[  947.709415][T19649] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input176
[  954.038142][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  960.029422][   T30] audit: type=1804 audit(4294967451.340:28): pid=19833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2772" name="/newroot/130/file0" dev="tmpfs" ino=693 res=1 errno=0
[  960.134287][   T30] audit: type=1800 audit(4294967451.450:29): pid=19833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2772" name="file0" dev="tmpfs" ino=693 res=0 errno=0
[  960.662957][T19847] nfs4: Unknown parameter ''
[  962.251522][T19866] can: request_module (can-proto-4) failed.
[  964.265202][T12946] Bluetooth: hci6: command 0x0406 tx timeout
[  968.909608][T19950] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input177
[  970.634766][T19960] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input178
[  971.785035][   T31] INFO: task syz-executor:5829 blocked for more than 143 seconds.
[  971.793054][   T31]       Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0
[  971.831886][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  971.860229][   T31] task:syz-executor    state:D stack:23144 pid:5829  tgid:5829  ppid:1      task_flags:0x400140 flags:0x00004004
[  971.873654][   T31] Call Trace:
[  971.877331][   T31]  <TASK>
[  971.880381][   T31]  __schedule+0x116a/0x5de0
[  971.886299][   T31]  ? __lock_acquire+0x622/0x1c90
[  971.891375][   T31]  ? __pfx___schedule+0x10/0x10
[  971.901607][   T31]  ? find_held_lock+0x2b/0x80
[  971.910533][   T31]  ? schedule+0x2d7/0x3a0
[  971.920490][   T31]  schedule+0xe7/0x3a0
[  971.931069][   T31]  schedule_preempt_disabled+0x13/0x30
[  971.942733][   T31]  __mutex_lock+0x6c7/0xb90
[  971.952534][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.958277][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  971.963428][   T31]  ? net_generic+0xea/0x2a0
[  971.968492][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  971.973918][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  971.980654][   T31]  nfsd_umount+0x48/0xe0
[  971.985251][   T31]  deactivate_locked_super+0xc1/0x1a0
[  971.991372][   T31]  deactivate_super+0xde/0x100
[  971.996498][   T31]  cleanup_mnt+0x225/0x450
[  972.001483][   T31]  task_work_run+0x14d/0x240
[  972.006585][   T31]  ? __pfx_task_work_run+0x10/0x10
[  972.011882][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  972.017790][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  972.023257][   T31]  do_syscall_64+0x3f6/0x490
[  972.028406][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  972.055793][   T31] RIP: 0033:0x7fe3e1d8fc57
[  972.074808][   T31] RSP: 002b:00007fff7d5d04b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  972.084441][   T31] RAX: 0000000000000000 RBX: 00007fe3e1e10925 RCX: 00007fe3e1d8fc57
[  972.094074][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7d5d0570
[  972.102783][   T31] RBP: 00007fff7d5d0570 R08: 0000000000000000 R09: 0000000000000000
[  972.111977][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7d5d1600
[  972.167128][   T31] R13: 00007fe3e1e10925 R14: 00000000000c90b1 R15: 00007fff7d5d1640
[  972.219641][   T31]  </TASK>
[  972.243377][   T31] 
[  972.243377][   T31] Showing all locks held in the system:
[  972.289291][   T31] 1 lock held by khungtaskd/31:
[  972.294192][   T31]  #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  972.358464][   T31] 2 locks held by syz-executor/5829:
[  972.364730][   T31]  #0: ffff88804fd300e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  972.375445][   T31]  #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  972.386465][   T31] 1 lock held by syz.2.2029/15438:
[  972.391737][   T31] 2 locks held by getty/15469:
[  972.397458][   T31]  #0: ffff8880364820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  972.407827][   T31]  #1: ffffc900182232f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  972.419535][   T31] 4 locks held by kworker/u8:4/17426:
[  972.429197][   T31]  #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  972.440056][   T31]  #1: ffffc9000f7f7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  972.463644][   T31]  #2: ffffffff90337c90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  972.485798][   T31]  #3: ffffffff8e5cfc80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[  972.516184][   T31] 4 locks held by kworker/u8:5/17427:
[  972.530071][   T31] 2 locks held by kworker/u8:10/17446:
[  972.549568][   T31]  #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  972.590558][   T31]  #1: ffffc90004cc7d10 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  972.646440][   T31] 2 locks held by syz.4.2430/17883:
[  972.676633][   T31]  #0: ffffffff903f24f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  972.708763][   T31]  #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  972.738471][   T31] 1 lock held by syz.1.2796/19978:
[  972.756067][   T31]  #0: ffff8880b843a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  972.788843][   T31] 2 locks held by syz.5.2797/19982:
[  972.797911][   T31]  #0: ffffffff90337c90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  972.819837][   T31]  #1: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  972.832275][   T31] 
[  972.848442][   T31] =============================================
[  972.848442][   T31] 
[  972.858765][   T31] NMI backtrace for cpu 0
[  972.858782][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  972.858813][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  972.858826][   T31] Call Trace:
[  972.858840][   T31]  <TASK>
[  972.858850][   T31]  dump_stack_lvl+0x116/0x1f0
[  972.858890][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  972.858917][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  972.858952][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  972.858983][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  972.859015][   T31]  watchdog+0xf70/0x12c0
[  972.859055][   T31]  ? __pfx_watchdog+0x10/0x10
[  972.859086][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  972.859123][   T31]  ? __kthread_parkme+0x19e/0x250
[  972.859152][   T31]  ? __pfx_watchdog+0x10/0x10
[  972.859185][   T31]  kthread+0x3c5/0x780
[  972.859218][   T31]  ? __pfx_kthread+0x10/0x10
[  972.859252][   T31]  ? rcu_is_watching+0x12/0xc0
[  972.859276][   T31]  ? __pfx_kthread+0x10/0x10
[  972.859310][   T31]  ret_from_fork+0x5d4/0x6f0
[  972.859339][   T31]  ? __pfx_kthread+0x10/0x10
[  972.859372][   T31]  ret_from_fork_asm+0x1a/0x30
[  972.859413][   T31]  </TASK>
[  972.859422][   T31] Sending NMI from CPU 0 to CPUs 1:
[  972.988918][    C1] NMI backtrace for cpu 1
[  972.988936][    C1] CPU: 1 UID: 0 PID: 9452 Comm: kworker/u8:31 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  972.988967][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  972.988984][    C1] Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor
[  972.989019][    C1] RIP: 0010:trace_irq_enable.constprop.0+0x37/0x120
[  972.989060][    C1] Code: 07 0f 87 f3 00 00 00 89 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 50 28 a8 90 e8 61 1c 5e 00 48 0f a3 1d 99 cc e4 0e <0f> 82 92 00 00 00 5b 5d c3 cc cc cc cc 48 89 fb 65 8b 05 66 b4 08
[  972.989083][    C1] RSP: 0018:ffffc9001954fa60 EFLAGS: 00000047
[  972.989102][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81c35baf
[  972.989118][    C1] RDX: fffffbfff215050b RSI: 0000000000000008 RDI: ffffffff90a82850
[  972.989134][    C1] RBP: ffff888022316700 R08: 0000000000000000 R09: fffffbfff215050a
[  972.989154][    C1] R10: ffffffff90a82857 R11: 0000000000002c00 R12: ffff88801b8413c0
[  972.989170][    C1] R13: 0000000000000200 R14: ffff888022316700 R15: 0000000000000000
[  972.989186][    C1] FS:  0000000000000000(0000) GS:ffff88812485f000(0000) knlGS:0000000000000000
[  972.989209][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  972.989225][    C1] CR2: 0000001b2f3cfff8 CR3: 000000003277e000 CR4: 00000000003526f0
[  972.989241][    C1] Call Trace:
[  972.989248][    C1]  <TASK>
[  972.989259][    C1]  trace_hardirqs_on+0x26/0x40
[  972.989292][    C1]  kasan_quarantine_put+0x10a/0x240
[  972.989329][    C1]  kmem_cache_free_bulk.part.0+0x383/0x7f0
[  972.989367][    C1]  ? kvfree_rcu_bulk+0x1b7/0x1e0
[  972.989406][    C1]  kvfree_rcu_bulk+0x1b7/0x1e0
[  972.989438][    C1]  kfree_rcu_monitor+0x1d0/0x2f0
[  972.989473][    C1]  ? rcu_is_watching+0x12/0xc0
[  972.989500][    C1]  process_one_work+0x9cf/0x1b70
[  972.989541][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  972.989579][    C1]  ? __pfx_process_one_work+0x10/0x10
[  972.989620][    C1]  ? assign_work+0x1a0/0x250
[  972.989654][    C1]  worker_thread+0x6c8/0xf10
[  972.989697][    C1]  ? __pfx_worker_thread+0x10/0x10
[  972.989733][    C1]  kthread+0x3c5/0x780
[  972.989766][    C1]  ? __pfx_kthread+0x10/0x10
[  972.989800][    C1]  ? rcu_is_watching+0x12/0xc0
[  972.989823][    C1]  ? __pfx_kthread+0x10/0x10
[  972.989857][    C1]  ret_from_fork+0x5d4/0x6f0
[  972.989889][    C1]  ? __pfx_kthread+0x10/0x10
[  972.989922][    C1]  ret_from_fork_asm+0x1a/0x30
[  972.989955][    C1]  </TASK>
[  973.285272][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  973.292162][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  973.303992][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  973.314072][   T31] Call Trace:
[  973.317350][   T31]  <TASK>
[  973.320272][   T31]  dump_stack_lvl+0x3d/0x1f0
[  973.324863][   T31]  panic+0x71c/0x800
[  973.328751][   T31]  ? __pfx_panic+0x10/0x10
[  973.333160][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  973.338528][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  973.344511][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  973.349897][   T31]  ? watchdog+0xdda/0x12c0
[  973.354308][   T31]  ? watchdog+0xdcd/0x12c0
[  973.358720][   T31]  watchdog+0xdeb/0x12c0
[  973.362960][   T31]  ? __pfx_watchdog+0x10/0x10
[  973.367631][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  973.372827][   T31]  ? __kthread_parkme+0x19e/0x250
[  973.377842][   T31]  ? __pfx_watchdog+0x10/0x10
[  973.382511][   T31]  kthread+0x3c5/0x780
[  973.386582][   T31]  ? __pfx_kthread+0x10/0x10
[  973.391167][   T31]  ? rcu_is_watching+0x12/0xc0
[  973.395919][   T31]  ? __pfx_kthread+0x10/0x10
[  973.400501][   T31]  ret_from_fork+0x5d4/0x6f0
[  973.405085][   T31]  ? __pfx_kthread+0x10/0x10
[  973.409670][   T31]  ret_from_fork_asm+0x1a/0x30
[  973.414447][   T31]  </TASK>
[  973.417710][   T31] Kernel Offset: disabled
[  973.422026][   T31] Rebooting in 86400 seconds..