last executing test programs:

5m31.03802864s ago: executing program 0 (id=779):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x3, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
write$auto(0x3, 0x0, 0xfffffdef)
shmctl$auto_SHM_STAT(0x8, 0xd, &(0x7f0000001180)={{0x3, 0xee00, 0xee01, 0x0, 0xfffffff3, 0x8, 0x8001}, 0x5, 0xa, 0x8, 0x7, @inferred=0xffffffffffffffff, @raw=0xa7ea, 0x8, 0x0, &(0x7f0000000180), &(0x7f00000000c0)})
capset$auto(&(0x7f0000001200)={0x5, 0xffffffffffffffff}, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, 0x0, 0x20044004)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r1)
sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r2, 0xdffe7dec83bbd25b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x4004094)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100082)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
write$auto(0x3, 0x0, 0x3f00)

5m30.491323019s ago: executing program 0 (id=783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x14, r1, 0x400, 0x70bd2e, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040810}, 0x10800)

5m29.852583703s ago: executing program 0 (id=786):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
socket(0x1f, 0x800, 0xffffff01)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0)
socket(0x28, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521"], 0x14}}, 0x4000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r2 = socket(0xa, 0x2, 0x0)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
setsockopt$auto(r2, 0x29, 0x37, &(0x7f0000000440)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\x1a\x02\xb1\xd9V\x1c\xc3\xe4\xb1t\xd9\xc0\xa2\x0f\x88\"m\xada\xee\xbf9\xee\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,e}L \x84\xe7\r\x12\xff\xb2\t\x82\x98\xc9\x02I$\xa6B\xc8\x81oD\x12Lw\x80\xe8-Y\x1d\r\xf5\xf9\x11\x00\xf1\xba\xa7D\x00\xef\xebp@;\x9c\xb48\xf2\x1a\xa9\x10,\x82\xce6r)\xb4\xa5P\xa5\x80\xf7\x8e\xb5 ]\xdcA&!\xe6\xe75\x8f\x83v\xf0\xb4\b\xb3\x1f\x05\xb3\x9e\xd1\"\xc3f\x82I\xbf\x86:\xd6\xa0\xad\xd6\x10\x1b/\v3g\xa1\x9a:\xaaNua`\x9en\xba\x04Mg\xbc\x94mMI\x01\\\xb3\xdf\xa2\x10d\xa5@i\xf1\xc5\xc0\x11\xab\xe97R\xeb\xc0?k\xe3S\x89l\'l\x17_\xe9\tr\xf9\xbe\xd4_DJ\t\xb6\t\x1an#\x9a\xa0\x9a\xf1\x9f\x81\x18r\r\xa3\x8b\xf7y\xce\xc7\x81s\xb0\xcd2\xfaP\xc6?0\x9e\x1b\xc16W\x87\xc3\xb93\x12\xa6oKA\x9d\xec\x84\x95&;\x97\xeb\x81\xad\xa1\xa4\xe1\xe5\x80S\x84-\x90\xe2\x15iJ&\x88\x90K\x8d\x8eS\xf2\xbd\x06\xbac\x00\x00\x00\x00\x00\xfb\x8e\x028\x95\xa6\xc1\xec\xdf\xc2\xa0\xe9\x83v\xdd(S\x89\xf94\xa7\xb8\x86\x89\xb78P\xe1PM\xa7\xfe<l9>\x19\x82\x9c\xf4d^{&K\x81\xcd\x11\xdf\xf8C\x1aK\xbb1\xd8\x00\xde\xa8\xb1\xe3\xca_\xf7c\x917n\x14\x02R5*\xbf\x81\x7f\x1e\x01:[\xa0\xac\xaa@\x86\xfef\x86\x88\x9b\xea\xc2\xfbd\xe2\xf7\xa4\x88\x98\xd5\xdbW\xeby\x0fX1\xd1(6\xe5 \xf4Q8\\\xc68\b3\xe2m\x10\x1chP)Z\x05P\x8c\xbd\xaa\x8b\xe9>y\x0e?Vr\xce', 0x94d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
madvise$auto(0x108000, 0x800034, 0xa)
unshare$auto(0x40000080)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="b3ac3fb4a05156f5206c000000", @ANYRES16=r3, @ANYBLOB="000225bd7000fedbdf250400000014001f00fc01000000000000000000000000000114002000fc000000000000000000000000000000060003001e0b000006001a004e2100000500140000000000050014000800000006001a004e20000008000a00a6000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5)
r4 = open$auto(&(0x7f0000000200)='./file0\x00', 0x49193, 0xff90)
ioctl$auto_PPPIOCGFLAGS(r4, 0x8004745a, 0x0)
r5 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_COMEDI_LOCK(r5, 0x6405, 0x0)
write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

5m28.254960892s ago: executing program 0 (id=790):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0xc, 0x40008, 0xdf, 0x9b72, r0, 0x4)
mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x3, 0x1}, 0x4dc, 0x0)
r1 = bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={<r2=>0x0, r0, 0xd, 0x89, 0x2, 0x4, <r3=>r0, 0x81, 0x9}, 0x6f4)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x8, 0xfffffffffffffff9, 0xdf, 0x9b72, r0, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
readv$auto(r0, &(0x7f0000000a80)={0x0, 0x100}, 0x7)
close_range$auto(0x2, 0xa, 0x0)
r4 = socket(0x18, 0xa, 0x1)
connect$auto(0x3, 0x0, 0x55)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x125900, 0x0)
r6 = accept$auto(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000080)=0x9)
r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001e00)=ANY=[@ANYRESHEX=r4, @ANYRES8=r7, @ANYRES16=<r8=>r5, @ANYRES64=r1, @ANYRESDEC=r5], 0x14dc}, 0x1, 0x0, 0x0, 0x4008050}, 0x8000)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f2d84e7c0483b054dac163e29a4edc0f1af19751023725", @ANYRES16=r8, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000)
bpf$auto(0x18, 0x0, 0x92)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(0x0, 0x101000, 0x15e)
msync$auto(0x0, 0x2000000005, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)

5m25.680417569s ago: executing program 0 (id=801):
statmount$auto(&(0x7f00000000c0)={0x5, @raw=0xd, 0x1, 0x2, 0x8}, &(0x7f0000000380)={0x7, 0x9, 0x9, 0x3, 0xffff9e68, 0x3, 0x8, 0x7, 0x2, 0x1, 0xffffffff, 0x9, 0xd7b2, 0x1, 0x0, 0x8, 0x8, 0x3, 0x3, 0x7fffffffffffffff, 0x7, 0xfffffd5e, 0x4, 0x7fffffff, 0xfffffff8, 0x2, [0x0, 0x80000001, 0x5c5, 0xfffffffffffffff7, 0x5, 0x5000000000000, 0x6, 0x7, 0x81, 0x6, 0x8, 0x6, 0x10001, 0x7, 0x80000000, 0x3, 0x4, 0x8001, 0x5, 0x40, 0x6, 0x4, 0x2, 0x8, 0xffffffffffffffed, 0x3, 0xc0000000000, 0xb, 0x100, 0x2, 0x4, 0xe, 0x307, 0x2, 0x8, 0x2, 0x10001, 0x2dc4, 0x4, 0x60000000, 0x0, 0x9, 0x5, 0x5, 0x6, 0x1000], "7ba84f3dd44567beb60e11abb4806e4f68adf9a98ae1326f6c1fde5c66975e0723f77afc884c56224c82e41805087806126b8a96538bc54a483696ec32376e25bd147a5ad05a9cd9d78cbeca45fab65cae15038956eea912feb0248454d962ada973b4e9b5b98bcc612bb7b7a77d6f7ac26e4993c9c628a272aef54af48cb125983d5fc48dd6aa3bc7d206e1b29e477f5073c21c5d4f412231430d02e842"}, 0xc, 0x2)
read$auto_fops_u32_ro_(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
close_range$auto(0x2, 0x5, 0x0) (async)
close_range$auto(0x2, 0x5, 0x0)
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x8080, 0x0) (async)
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x8080, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:3/min_ratio\x00', 0x80000, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:3/min_ratio\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfdef)
r1 = fsopen$auto(0x0, 0x3)
socket(0x27, 0x2, 0x0) (async)
r2 = socket(0x27, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xc, 0x1, 0x202, 0x4, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0xfffffffffffffffe, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xfffffffffffffffe, 0x6, 0x10001, 0x80, 0x80000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7, 0x8e1, 0x3]}, 0x1fe, 0xd) (async)
statmount$auto(0x0, &(0x7f0000000180)={0xc, 0x1, 0x202, 0x4, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0xfffffffffffffffe, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xfffffffffffffffe, 0x6, 0x10001, 0x80, 0x80000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7, 0x8e1, 0x3]}, 0x1fe, 0xd)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x1) (async)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x1)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001c000380180011801400f2800c00010000000000000000000400a08012000100898771f1c19f1779048590828847000004000280"], 0x4c}, 0x1, 0x0, 0x0, 0x4044}, 0xc800)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

5m25.051773057s ago: executing program 0 (id=806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000001265843a0000000000000000", 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
r4 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0xce}}, 0x4000000) (async)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) (async)
r5 = pipe2$auto(&(0x7f0000000040)=r2, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="db000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf252800000006006d00090000000500390102000000"], 0x24}}, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r7, 0x0, 0x71d) (async)
r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r8, 0x8038550a, 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40c, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@nested={0x4, 0x5}, @generic="4eb679eb"]}, @NL80211_ATTR_NAN_FUNC={0x3da, 0xf0, 0x0, 0x1, [@generic="b7cbb522d4406e9d5298986d6f18907434789f3def92cd368ccfb847f61dda2e260df5384fa29888601b144c61fda35b91d4d26be983293e2accebff21a0190b0be6bd06b96cab702383f603e1de94b9b546a88943409952b59b05ead9e007f476dd3e1af0789c3325081a2d8bab5f58eb1092a39485d4708ff526bfdec8af8030e1ebeca792afefdfe7e50a074c131b777e60e82a5b", @nested={0x2b8, 0xa7, 0x0, 0x1, [@nested={0x4, 0xb1}, @typed={0x55, 0xe2, 0x0, 0x0, @binary="62bed014d6c019e1ca9e521b3f0534ab0adc444f90c8784c1df0f1586e0395e9200b07817599b384968d4a8fe3d3d9caafe453a8036737f9c390a1f0a71316c8313ff34344fcc80dd5d0d572a63aff202b"}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x2b}, @generic="f8f05d9bada23886dcbea3fcf7b8540cfeda8ac708bcf0d47f944e1e118a0079cc7511523138c46913c4236719c831f8093630b60da6a5e323eaa81e3326124152cf2804c81e37a5141fe5d0ebd084fe0e51c8fa9c637e5e9d05ffc7f2bb36d275927fdf8a40b058dbece9ba5df166f96413625be10dc4f77e575b47db9557621b10891e7cf94f996c8931c3c44864597beb2d2777b4aa747d7af13678d01d0e00eea72c81b20866c101a14c6459b9", @typed={0xe, 0x65, 0x0, 0x0, @str=')^}@$\xd4\n,-\x00'}, @generic="60bdcb31e2f7c75476ea91e7f8de9ee8727bfe5d0a3f8d883a86363bf7f09aeadde0438dc2a0735740d704f5c4ff671425f4b9f3e8f4b0311a1819dd4e37b2162ea8b0a028829a5da55b441295d0e4b11f39150d69927134a80afceee73d5332c1b9b1619f6721c6a4eb8546e2d2b6b8dfaa02df5a376faa572bd51470f4b6b76e3107e4d05f0bf5248b7135e947212f3df1bea735f415ac8bea71fdb712479759dde1", @generic="43a81c1127b54d3abff1aefd779a413bfb187e955a376989e52565e8cc6292e5264a851387474e09034f62c56ef7dcecc99e285c629ef50e54b1912b4b3ec37d175aae4f3901d64d14f30dca2a623414dd8ab80a9dfd5eeb0c3b013bcab0fed24ebd086bff6fa9f076de647a9f95d034120659ab969bc33d2e2eb1eac71c4dfc97fb8bcf705646ff720f839165d91b0d2f572b19a1b3d918a76b7c5ced7d838ae4574431e04a1d427bf713f7b58670fdf44098a57c6fc8f69d0499d76c97f44183a42629d42a5e7bf47ffac87986573e926b74a33734c13ca5ce", @nested={0x4, 0x14c}]}, @nested={0x87, 0xfd, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x145}, @generic="35afb1220fd9f1a10bfab5c2b60ad938e3de24d510b9ec106400e09dcdff4c886eb611366cca71e3ae21e7e891e6e55308ca411dfc406c6f6ca829680dbb79e1f70e0e829244a3d6df733cbb1330802ea95bcfa2228d7d449efc07b15a3669e81dcfff49a0232ce9007634bd1574ed24e2ac573497ad96bedc3f88"]}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7fffffff}]}, 0x40c}}, 0x4000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r10 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0)
poll$auto(&(0x7f00000000c0)={r10, 0x4, 0x4}, 0x1, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.max.descendants\x00', 0x0, 0x0) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)

5m9.205905622s ago: executing program 32 (id=806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000001265843a0000000000000000", 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
r4 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0xce}}, 0x4000000) (async)
mmap$auto(0x8000000, 0x5, 0x72, 0x8b72, 0x2, 0x8000) (async)
r5 = pipe2$auto(&(0x7f0000000040)=r2, 0xffffffff)
sendmsg$auto_NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="db000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf252800000006006d00090000000500390102000000"], 0x24}}, 0x0) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0)
read$auto(r7, 0x0, 0x71d) (async)
r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto(r8, 0x8038550a, 0x1)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40c, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@nested={0x4, 0x5}, @generic="4eb679eb"]}, @NL80211_ATTR_NAN_FUNC={0x3da, 0xf0, 0x0, 0x1, [@generic="b7cbb522d4406e9d5298986d6f18907434789f3def92cd368ccfb847f61dda2e260df5384fa29888601b144c61fda35b91d4d26be983293e2accebff21a0190b0be6bd06b96cab702383f603e1de94b9b546a88943409952b59b05ead9e007f476dd3e1af0789c3325081a2d8bab5f58eb1092a39485d4708ff526bfdec8af8030e1ebeca792afefdfe7e50a074c131b777e60e82a5b", @nested={0x2b8, 0xa7, 0x0, 0x1, [@nested={0x4, 0xb1}, @typed={0x55, 0xe2, 0x0, 0x0, @binary="62bed014d6c019e1ca9e521b3f0534ab0adc444f90c8784c1df0f1586e0395e9200b07817599b384968d4a8fe3d3d9caafe453a8036737f9c390a1f0a71316c8313ff34344fcc80dd5d0d572a63aff202b"}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x2b}, @generic="f8f05d9bada23886dcbea3fcf7b8540cfeda8ac708bcf0d47f944e1e118a0079cc7511523138c46913c4236719c831f8093630b60da6a5e323eaa81e3326124152cf2804c81e37a5141fe5d0ebd084fe0e51c8fa9c637e5e9d05ffc7f2bb36d275927fdf8a40b058dbece9ba5df166f96413625be10dc4f77e575b47db9557621b10891e7cf94f996c8931c3c44864597beb2d2777b4aa747d7af13678d01d0e00eea72c81b20866c101a14c6459b9", @typed={0xe, 0x65, 0x0, 0x0, @str=')^}@$\xd4\n,-\x00'}, @generic="60bdcb31e2f7c75476ea91e7f8de9ee8727bfe5d0a3f8d883a86363bf7f09aeadde0438dc2a0735740d704f5c4ff671425f4b9f3e8f4b0311a1819dd4e37b2162ea8b0a028829a5da55b441295d0e4b11f39150d69927134a80afceee73d5332c1b9b1619f6721c6a4eb8546e2d2b6b8dfaa02df5a376faa572bd51470f4b6b76e3107e4d05f0bf5248b7135e947212f3df1bea735f415ac8bea71fdb712479759dde1", @generic="43a81c1127b54d3abff1aefd779a413bfb187e955a376989e52565e8cc6292e5264a851387474e09034f62c56ef7dcecc99e285c629ef50e54b1912b4b3ec37d175aae4f3901d64d14f30dca2a623414dd8ab80a9dfd5eeb0c3b013bcab0fed24ebd086bff6fa9f076de647a9f95d034120659ab969bc33d2e2eb1eac71c4dfc97fb8bcf705646ff720f839165d91b0d2f572b19a1b3d918a76b7c5ced7d838ae4574431e04a1d427bf713f7b58670fdf44098a57c6fc8f69d0499d76c97f44183a42629d42a5e7bf47ffac87986573e926b74a33734c13ca5ce", @nested={0x4, 0x14c}]}, @nested={0x87, 0xfd, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x145}, @generic="35afb1220fd9f1a10bfab5c2b60ad938e3de24d510b9ec106400e09dcdff4c886eb611366cca71e3ae21e7e891e6e55308ca411dfc406c6f6ca829680dbb79e1f70e0e829244a3d6df733cbb1330802ea95bcfa2228d7d449efc07b15a3669e81dcfff49a0232ce9007634bd1574ed24e2ac573497ad96bedc3f88"]}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7fffffff}]}, 0x40c}}, 0x4000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r10 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0)
poll$auto(&(0x7f00000000c0)={r10, 0x4, 0x4}, 0x1, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.max.descendants\x00', 0x0, 0x0) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)

3m17.377305537s ago: executing program 3 (id=1398):
mmap$auto(0x7f, 0xc00, 0x0, 0xeb1, 0x1272, 0x1b) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
close_range$auto(0x2, 0xfffffffffffff000, 0x2) (async, rerun: 32)
clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64)
open(0x0, 0x4242, 0xe1d2b27bdc14aabc) (rerun: 64)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async, rerun: 32)
mlock$auto(0xfbe8, 0x4) (async, rerun: 32)
mlock$auto(0x81, 0x10001) (async, rerun: 32)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) (async, rerun: 32)
brk$auto(0x3) (async, rerun: 32)
r0 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x8) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0xfffffffffffffffc, 0x3, 0xeb0, r0, 0x8000) (async)
socket(0x3d, 0x6, 0x1) (async)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3) (async)
mmap$auto(0x400800000, 0x8000, 0x7fd, 0x58, r1, 0x80000000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x40000) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async, rerun: 32)
sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) (rerun: 32)

3m12.737279411s ago: executing program 3 (id=1416):
socket(0x2, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket(0x10, 0x2, 0x6)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x24a8, 0x1, 0x948b, 0x4, 0x15f4da08, 0x4, 0x4, 0x300000000000000, 0x80000004, 0x0, 0x6d3c, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0)

3m10.63690117s ago: executing program 3 (id=1425):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0)
writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001)
pread64$auto(r0, 0x0, 0x3f, 0x7fff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
r2 = open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1)
mmap$auto(0x3, 0x4020029, 0x6, 0xeb1, 0x401, 0x8000)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000013c0), r2)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x198, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_STATS={0x173, 0x1e, 0x0, 0x1, [@nested={0x91, 0xc1, 0x0, 0x1, [@nested={0x4, 0x6a}, @generic="f6808107153b0c4e0f654075dc64ea03bc76954175e2d45c63ccdb9e6e61e842d80a57130c6619905c4531ce1e0861fb4646e87aaa9fa76b0868338a7e37d2a13240e59397303ffbb8d9a83cd3bf4162037e77af37aea07bd41a257cc7375b1db4f8f79e92cb5c16943fbc3f6e43f3e0b2b11c9f07c1e8e3f3421a6dcc4980b391bd3d7a68", @nested={0x4, 0x4a}]}, @generic="8f288411a20bab6c7346fea1edcaacd958d9b292bedcce0f8a1d1b62ac3dd74e4d8d14be6b4293b3a363fd81b2cebfa40d4da00d578cd24669e07d20253f1c355728bfaa1bb0cd019a6a28a4d3f9bd1990c07dd360f58bc2ee63960ad877a7aae762b845afc2fe9275dfff50558a80381fa501d0d4c6911d8c839981946750f5954040a90f46e2ecd0d21d2ccff9c2e1335bd9085b3da03cbb199109245f3a9ed3c27a9184c78ad0aa5cfb4a98a1bce5700b8ca8964e7071000caf537a2940639b6b5252b19904b67a1020a818822b6fe51b395f6988fee39a5b09"]}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040080)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x2, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x1, 0x202, 0x0, 0x84, [0x6, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffe, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x4, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x4, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/207, 0xcf)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/kernel/shm_rmid_forced\x00', 0x40, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4)

3m7.576380788s ago: executing program 3 (id=1437):
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)="9b58b4fccb6c3b383dfc9362cd7b115312eddbc6e2")
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mincore$auto(0x1000, 0x8001, 0x0) (async)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) (async)
mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x237, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
socket(0xa, 0x2, 0x0) (async)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(0x3, 0x89f2, 0x38)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mq_getsetattr$auto(r3, &(0x7f0000000040)={0x0, 0xfd0, 0x9, 0x3}, &(0x7f0000000080)={0x5, 0x3, 0xfffffffffffff9e5, 0x8000})
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0xc0040, 0x0)
mmap$auto(0x0, 0x4020009, 0x8, 0x19, r1, 0x8000)
socket(0x11, 0x80003, 0x300)

3m3.336552108s ago: executing program 3 (id=1448):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
r0 = socket(0x1f, 0x800, 0xffffff01)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0)
madvise$auto(0x108000, 0x800034, 0xa)
unshare$auto(0x40000080)
r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$auto_IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0x2, 0x7, 0x3ff})
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400fe00e4e819d1eba5df4b92b50cc7c1119b183cb8c20711833e16fef33721c375387424ae26cfad96b2ad946a", @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
open$auto(0x0, 0x49193, 0xff90)
r5 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_COMEDI_LOCK(r5, 0x6405, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1", 0x300)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)

2m59.204137612s ago: executing program 3 (id=1461):
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x5, 0x2000000000001, 0x0, 0x5, 0x3)
r1 = socket(0xa, 0x6, 0x0)
uname$auto(0x0)
ioctl$auto(r1, 0x5, 0xffffffffffffffff)
unshare$auto(0x40000080)
writev$auto(0x1, 0x0, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffd, 0x80000000, 0xdb, 0x14, 0x5, 0x8000)
recvmmsg$auto(r2, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0xc, 0x0, 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0x100000001, 0x100)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0c/sub6/info\x00', 0x408001, 0x0)
getsockopt$auto(r3, 0x1, 0x9, &(0x7f0000008c00)='[){\x00', &(0x7f0000008c40)=0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x480, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000000c0), r0)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x200080c1)
mmap$auto(0x0, 0x9, 0xe3, 0x1a, 0x2, 0x8000)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
wait4$auto(0xfffffffffffffffb, 0x0, 0x6, 0xfffffffffffffffc)
socket(0x11, 0xa, 0x1000)
ioctl$auto(r2, 0x2, r5)
ioctl$auto_KVM_CREATE_VM(r6, 0xc008ae09, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x7fff}, 0x5, 0x0, 0x0, 0x8)
ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0)

2m47.875585951s ago: executing program 4 (id=1504):
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x8, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x8000000000000000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x7, 0xc567]}, 0x1fe, 0xd) (async)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
listen$auto(0x3, 0x81) (async)
sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x20000000) (async)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd04, &(0x7f00000001c0))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0)

2m47.425093579s ago: executing program 4 (id=1506):
r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0)
lseek$auto(r0, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r2 = socket(0x2, 0x1, 0x106)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x6}, 0x5, 0x20000000)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x1000000007, 0x0)
getpgrp(0xffffffffffffffff)
sysfs$auto(0x7, 0x5, 0x3)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xcb, 0x0, 0x4)
syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff)
fsopen$auto(0x0, 0x1)

2m45.773269634s ago: executing program 4 (id=1508):
socket(0x2, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x101200, 0x0)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket(0x10, 0x2, 0x6)
unshare$auto(0x40000080)
setfsuid$auto(0x401)
setregid$auto(0x5, 0x6)
keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0x4070aea0, 0x38)
keyctl$auto(0x6, 0xfffffffd, 0x5, 0x1, 0x6)
mmap$auto(0x0, 0x20000000040009, 0xc0fb, 0x9b72, 0x7, 0xfdea)
mmap$auto(0x1, 0x7ff, 0x100000000, 0x11, 0xfffffffffffffff1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2b, 0x1, 0x1)
getsockopt$auto(0x4, 0x6, 0x14, 0xfffffffffffffffc, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x338)
syz_clone(0x224011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(0x0, &(0x7f0000000000)=0x3, 0x5, 0x0)
madvise$auto(0xff, 0xffffffffffff0001, 0x15)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6)

2m43.456107126s ago: executing program 33 (id=1461):
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x5, 0x2000000000001, 0x0, 0x5, 0x3)
r1 = socket(0xa, 0x6, 0x0)
uname$auto(0x0)
ioctl$auto(r1, 0x5, 0xffffffffffffffff)
unshare$auto(0x40000080)
writev$auto(0x1, 0x0, 0x1)
madvise$auto(0x0, 0x20200, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffffffffffffffd, 0x80000000, 0xdb, 0x14, 0x5, 0x8000)
recvmmsg$auto(r2, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0xc, 0x0, 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0x100000001, 0x100)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0c/sub6/info\x00', 0x408001, 0x0)
getsockopt$auto(r3, 0x1, 0x9, &(0x7f0000008c00)='[){\x00', &(0x7f0000008c40)=0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x480, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000000c0), r0)
sendmsg$auto_NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x200080c1)
mmap$auto(0x0, 0x9, 0xe3, 0x1a, 0x2, 0x8000)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
wait4$auto(0xfffffffffffffffb, 0x0, 0x6, 0xfffffffffffffffc)
socket(0x11, 0xa, 0x1000)
ioctl$auto(r2, 0x2, r5)
ioctl$auto_KVM_CREATE_VM(r6, 0xc008ae09, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x7fff}, 0x5, 0x0, 0x0, 0x8)
ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0)

2m43.239331743s ago: executing program 4 (id=1511):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8000, 0x8)
socket(0x1, 0x5, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ppoll$auto(&(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x4, 0x2}, 0x9, &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x4}, 0x8)
socket(0xa, 0x806, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
connect$auto(0x3, 0x0, 0x55)
madvise$auto(0x0, 0x3, 0x14)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
socket(0x10, 0x2, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
fstat$auto(r2, 0x0)
readv$auto(0x3, 0x0, 0x1)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)

2m42.965047066s ago: executing program 4 (id=1513):
futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0xa000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x100000001, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r2, 0x125d, 0xffffffffffffffff)
recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x20001000, 0x2000000c)

2m40.589235884s ago: executing program 4 (id=1519):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
personality$auto(0x80)

2m24.96034956s ago: executing program 34 (id=1519):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x21, 0x2, 0x2)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
personality$auto(0x80)

5.239061188s ago: executing program 5 (id=2477):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
connect$auto(0x4, 0x0, 0x10)

5.093379129s ago: executing program 5 (id=2478):
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0)
ioperm$auto(0x7, 0x6, 0x2)
sched_getscheduler$auto(0x0)
ioctl$auto(0xc8, 0x400454cb, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6}, 0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3c)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0x1, 0x9b72, r0, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x40000090)
socket(0xa, 0x2, 0x88)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40000, 0x0)
readv$auto(r0, &(0x7f0000000140)={&(0x7f0000000180)="376d04fc2eb3ef1f5e517479427c8743bc4249a612c3cef583dad589ee40a1f425ed35777df0faa4cc3742e315541141c0e1941f547ccbe16ad811bcbb8321bf", 0x6}, 0x3)
ioctl$auto(0x3, 0x800005411, 0x38)
socket(0xa, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

3.147731276s ago: executing program 2 (id=2489):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
ioctl$auto(r0, 0x40384708, 0x9)

3.014599785s ago: executing program 2 (id=2490):
openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0)
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010)
r0 = socket(0x2, 0x80802, 0x0)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(0x0, r0)
sendmsg$auto_IPVS_CMD_GET_CONFIG(r2, 0x0, 0x800)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x1d, 0x3, 0x1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r3 = getpgid(0x0)
fcntl$auto(0xffffffffffffffff, 0xa, r3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone3$auto(0x0, 0x294)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mprotect$auto(0x1ffff000, 0x8007, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084)

2.897786621s ago: executing program 5 (id=2491):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek$auto(r0, 0x5, 0x0)

2.732750574s ago: executing program 5 (id=2493):
ioperm$auto(0x7, 0x6, 0x1)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8600a1e4cf01680b6001f522090002006c3201bc318200"/35], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0xbb72, 0x2, 0x8000)
r2 = socket(0x27, 0x80000, 0x3b)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
setsockopt$auto(r2, 0x29, 0x15, 0x0, 0x56b)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)

2.064955139s ago: executing program 5 (id=2498):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_SET_MM_ARG_START(0x0, 0x8, 0x0, 0x9, 0x1d)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x9, 0xa861, 0x8000000008012, 0x1000000004, 0x0)
unshare$auto(0x200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x936355e497c8b7e3, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x400, 0x0)
ioctl$auto(r2, 0x800064bf, 0x1ed)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3)
sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r4, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x80)

1.785918532s ago: executing program 2 (id=2501):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek$auto(r0, 0x5, 0x0)

1.699288012s ago: executing program 2 (id=2502):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000004c80)='/sys/devices/virtual/block/loop7/events_poll_msecs\x00', 0x8081, 0x0)
write$auto(r0, &(0x7f0000004cc0)='NLBL_UNLBL\x00', 0x101)
pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000000), r1)
r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11RTSFailureCount\x00', 0x149040, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x40000, 0x0)
ioctl$auto_SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000500)="80e2")

1.59590187s ago: executing program 2 (id=2504):
mmap$auto(0x0, 0x2020009, 0x1000000000004, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xfffffffffffff000, 0x2) (async)
bpf$auto(0x97, 0xffffffffffffffff, 0x100000) (async, rerun: 64)
r2 = socket(0x10, 0x2, 0x4) (rerun: 64)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="70d558410200", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf25030000004f000200cacc2dffe79d1818a17ea4a0c17d4b11578856f80fe9a83a0489458112b404000000000000000812af2118ec2cffc1132ac4bcde0d4d0f8223c98210533cf349f3aee1a2a71692be00000000090011002a5e7b2c000000007f2559a1e5739860739a97114d708031f9d59b39f4d246b72e12eef76f7468fa1a45df658755916fcba3a8a0f9444aa777ff136c36e655fbe8387678870c3f606b57f9ab3241a15c0b8a5db47ba5e2e422462a36cd6fa1f1c309f43a73cc6e8eb55503f99028affb1fcbcb96fd5763f8009cb9013f9b42411710d24c20794f3400500fc26b28199071aeda3b863d405fef970a65ab44de33bdc3f1fc96f8cf63831183c0de72fd05ef19259d4070b02dc1d2f3b5a121ef3acbbe6001b497b1df2bdc6ab6a74cfc14f614a7c366057af9f3b9e3025566b59940403556251420e467f82b01614cc9e6c72707c8c1de"], 0x70}, 0x1, 0x0, 0x0, 0x4000095}, 0xb06af94f6e038a6)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x2, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) (async)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
socket(0x10, 0x2, 0x14) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pidfd_open$auto(0x1, 0x0) (async)
socket(0x22, 0x2, 0x0) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
r5 = socket(0x11, 0xa, 0x1000)
ioctl$auto(r5, 0x2, 0x2) (async)
ioctl$auto_KVM_CREATE_VM(r4, 0xc008ae09, 0x0)
ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000000)=0xd) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
r6 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2)
r7 = open_by_handle_at$auto(r6, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2)
sendfile$auto(r7, r7, 0x0, 0x6)

1.578714607s ago: executing program 5 (id=2505):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x1, 0x0)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2505000000050500007b18efe6bf7a04a74705000000180001801400022173796e5f740300000000000000000000ac283014d1101fbd30fe67129b1b0792d8b7e8c2809e07bddb173c"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/hard\x00', 0x2600, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/228, 0xe4)
r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
poll$auto(&(0x7f00000046c0)={r1, 0x8, 0x3}, 0x9, 0x10)
r2 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0)
read$auto_ptdump_curusr_fops_(r2, &(0x7f00000003c0)=""/237, 0xed)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x3fd, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/tcp\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0xffe, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
msgrcv$auto(0x1ff, 0xfffffffffffffffd, 0x1fffffffffffffc, 0x10, 0xdf66)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.511081378s ago: executing program 6 (id=2506):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/block/nbd14/rqos/wbt/inflight\x00', 0x40000, 0x0)
readv$auto(r1, &(0x7f0000000d40)={&(0x7f0000000cc0), 0x4}, 0x33) (async, rerun: 32)
ioctl$auto_TCFLSH2(r0, 0x802c542a, 0x0) (async, rerun: 32)
msync$auto(0x0, 0x2000000005, 0x6) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x9) (async)
bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x7, 0xf8, 0xfffffffffffffffa, 0x8004) (async)
madvise$auto(0x4, 0x4, 0xe) (async)
r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x81, 0x7}, 0x9, 0x20000000) (async, rerun: 64)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 32)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/116, 0x74) (rerun: 32)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @inferred=r3}})
io_uring_setup$auto(0x6, 0x0) (async)
mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2)
open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000) (async)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40900, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x10677d, 0x48) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (rerun: 32)

1.400211293s ago: executing program 6 (id=2507):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0)
socket(0xa, 0x2, 0x73)
timerfd_create$auto(0x0, 0x0)
socket(0x2, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x73)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto(r0, 0x40204706, 0x9)

1.373283882s ago: executing program 6 (id=2508):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
r0 = getpid()
pidfd_open$auto(r0, 0x0)
socket(0xa, 0x801, 0x84)
r1 = epoll_create$auto(0x3e)
epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create$auto(0x4)
mmap$auto(0x20000000000, 0x5, 0x35d, 0x50, r2, 0x8)
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0xb7, 0x7, 0x0, 0x14)
connect$auto(0x4, 0x0, 0x10)

1.127934995s ago: executing program 6 (id=2509):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x100)
socket(0xf, 0x80000, 0x8)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x8800, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x1, 0x0)
socket(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
msgget$auto(0x0, 0x5)
msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)

1.097981986s ago: executing program 1 (id=2510):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8000, 0x8)
socket(0x1, 0x5, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x8001)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x806, 0x0)
connect$auto(0x3, 0x0, 0x55)
connect$auto(0x3, 0x0, 0x55)
madvise$auto(0x0, 0x3, 0x14)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
fstat$auto(r1, 0x0)
readv$auto(0x3, 0x0, 0x1)
ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0)

869.062074ms ago: executing program 1 (id=2511):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/dev_snmp6/macsec0\x00', 0x0, 0x0)
lseek$auto(r0, 0x5, 0x0) (fail_nth: 1)

464.32315ms ago: executing program 1 (id=2512):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/dev_snmp6/macsec0\x00', 0x0, 0x0)
lseek$auto(r0, 0x5, 0x0)

425.957294ms ago: executing program 1 (id=2513):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/default_smp_affinity\x00', 0xc0000, 0x0)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
pread64$auto(r1, &(0x7f0000000040)='\x00', 0x8, 0x1ff) (async)
pread64$auto(r1, &(0x7f0000000040)='\x00', 0x8, 0x1ff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r2) (async)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r2)
sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x28044004) (async)
sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x28044004)
read$auto(0x3, 0x0, 0x400000)
eventfd$auto(0x3)
socket(0x10, 0x2, 0xc) (async)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r0, @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x80)

367.189473ms ago: executing program 2 (id=2514):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_SET_MM_ARG_START(0x0, 0x8, 0x0, 0x9, 0x1d)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x9, 0xa861, 0x8000000008012, 0x1000000004, 0x0)
unshare$auto(0x200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x936355e497c8b7e3, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x400, 0x0)
ioctl$auto(r2, 0x800064bf, 0x1ed)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3)
sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r4, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x80)

265.508918ms ago: executing program 6 (id=2515):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x3)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/dev_snmp6/macsec0\x00', 0x0, 0x0)
lseek$auto(r0, 0x5, 0x0)

212.372552ms ago: executing program 1 (id=2516):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram9/queue/discard_max_hw_bytes\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/40, 0x28)

134.714467ms ago: executing program 6 (id=2517):
r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0)
pread64$auto(r0, 0x0, 0x3, 0x50c) (fail_nth: 2)

0s ago: executing program 1 (id=2518):
r0 = prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x7, 0x0, 0x0, 0x8)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x22c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xe1, 0xac, "21b50e0f46322d4247ab44edac14ab515885d39346f8820b6c3086944c6c043c9f9fa4e3f07e648f2b20b2ab4a32dd33ce0716ba69595d2243db4a3bad3029fd93f9ab0df4c181a11a4516f7bcafed71675579298a31c1739dc397f535cdb10dfa7716fce4278a8e05dc11cf8be5f034201c873e891530ecd1c64bb8c33578176db3bdcf01c0371c9ded90f824cd0cc4c5f8ef0ddd56a9802c2bea64d56e165fcd7ccf80ea1b618ee46514b5dddfbd474c900a41a2a5c2fd834d5efa3608c787172519afc8b997c0701c33bdfc4477ac3b83f51705234ab009f7503d29"}, @NL80211_ATTR_TX_RATES={0xc7, 0x5a, 0x0, 0x1, [@generic="2edeedf240ab3f0047eb84cca4d7ea3d71d7b15bdaf856f6b828f7b808d8f46a33ed616abbcc680cc6b63bae2f5a6787e8c70faae4a44d4b2ed8f73f5251d19b18fa068398d149ac5e844d7edb83c26907225608c2470fa88065761a0984e9c24a0b607c832c969d88a10ff157f751cde00be19d464f86b6e4711446314f91952e06ae9980e934f0fdfc16f9f416e132b25683923e64561ea46058669e6b4c9101f5acc2551731", @typed={0x8, 0x123, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xe9, 0x0, 0x0, @u32=0x228}, @typed={0xc, 0x51, 0x0, 0x0, @u64=0x80}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x76}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x3b, 0xe8, "bc3989b4674744f5953cc0d2ae4d96ac7bc43daace5814269b2df40015604d9b32d2dec176adc8dbf6e8d965a1803bbe476b803531c67f"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xff81}, @NL80211_ATTR_MESH_ID={0x8, 0x18, "9a8fdf01"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0xfffffc01}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0x48050) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r0)
sendmsg$auto_NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3}, @NL80211_ATTR_FILS_NONCES={0xb2, 0xf3, "89fbd82e607c59d5a6ee2439870d90c561f26d270e39810b84b55901f229c9ddf4d20896bb2c69fb3e371b7a4e34e9458c1de0ea4f270ffa5d14055dcf82db71e84dec67d98dd8d7949a2b966867a58a3938d964b2235cd703f8b193bf750b2904c8fd4fac5655214b3fbcecfd98b26c1a92230a279ed8ff42fdbbd9652a152b7bef192b5181ee6b80b8e55db3ff7b71c70ef3975b4b754709b5e72099b4646a7a2f358fba3a18eeaf1d7311c533"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_to_team\x00'}) (async)
write$auto_evm_xattr_ops_evm_secfs(r0, &(0x7f0000000580)="2b95a9503ac0fe14f21f68ee264a0bcd37312e7f2a7459741cebec5fad851ebd0aaf6ac1952442b8763860410f81ed4b44eb54922eee72f238e5661b20b24fa1bdb4a32d4d02025f7f068b4fec8f96f74842af7fc166e64fc70bbefe2a", 0x5d)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000640), r0) (async)
r5 = semctl$auto_IPC_SET(0x7, 0x1, 0x1, 0x8000000000000001)
shmctl$auto_SHM_STAT(0x2, 0xd, &(0x7f0000001780)={{0x7, <r6=>0xee01, <r7=>0xee00, 0x0, 0x6, 0x100, 0x200}, 0xa, 0x3, 0x2f, 0x0, @inferred=0xffffffffffffffff, @raw=0x6, 0x400, 0x0, &(0x7f0000000680)="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", &(0x7f0000001680)="2805c27931dbf39a10a75d2d31a920e0aefd8efa6c3b989dc358ac4175f2d0b3a71b17d4fe7a79d987e3d6f153f52623063aa86b4527f14dbde1e0a1d432482bc36beac6ac2472f1b5a2349ec6bc75c8c3c16eb810f23f8afc7109ad52fe5c96c17c6aaabf01547fd1d26b93031e71a40f0b0c42566b0024c4ddc768b22c99bfcceadd8b9dc0862d923ab1595a25d9bcc8e02032574bfd69bbc5d8d8e59c5684d49b236dac134ada60fd8a68ab8fcef5ed56f7be2c78f0df4bb008a701626d6cf23a8da59842657bddcd8b79c8561234b3456fe4227474"})
sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000018c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@nested={0x14, 0x74, 0x0, 0x1, [@nested={0x4, 0x9d}, @nested={0x4, 0x7e}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r6}]}, @typed={0xc, 0xf2, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x20, 0x0, 0x0, @u32=0x1}]}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'veth0_to_bond\x00', <r9=>0x0})
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x3c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x8e5e}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, '*\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) (async)
shmctl$auto_SHM_UNLOCK(0x4, 0xc, &(0x7f0000001b00)={{0x7, r6, <r10=>r7, 0x7, 0x0, 0x6, 0x81}, 0x6, 0x8000000000000001, 0x800, 0x0, @inferred=<r11=>r5, @raw=0xd, 0xdc93, 0x0, &(0x7f0000001a40)="afacbdcf1a05cab77673f0f9afd0", &(0x7f0000001a80)="88c8a41e29a99a23833bb4de3cb24c75f993bc9f554be032568a9d9074a1956758b9b6040a9fec0d2c909680ba7a7d0ca14cbdb1fb2706229df38ccb1222ea4aeaaf1e174d30aa80cccc36725b467edae8b7088b4180bf3a0a0e176c8278bdf0b79889283727fd2540959ccb0c6f1e29c143"})
r12 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001bc0), r8) (async)
shmctl$auto(0x3, 0x4, &(0x7f0000001e00)={{0x49d5, <r13=>0x0, r10, 0xfffffffe, 0x7, 0x0, 0x400}, 0xffffffff, 0x7, 0x3, 0x2, @raw=0x7, @raw=0xb0, 0x3, 0x0, &(0x7f0000001c00)="5a93da1c3ccf0f07a5ed6db88db8e4a64c385c1b36a170660c843fd49c120e2f62f19b73e4f88195b1487c09cae0be026cdcc0b2256ef8adcf850c4243fb5cedf6021115787ec2d8c7f1aa52527b68b2f61de8b6dab7bb4c08bdf2a0fb0b5a3c6970ced10778ea4a250ea93b4d29cc591552afada7b63b9c26a79027a3edd9fff701e8c5f27871f605f9844cd2f248de29ae14beb16fbf612ba3ac14b4009429bef63eac455f14140ae1c87aded5e0daee9e0aef14bc70db1a325e52c520bcc8ca6a554342f406374c0c686c43e6d809c4d7a126374fdc01edd4d46616", &(0x7f0000001d00)="f540694ee699facb10f4fbc112c20d8ea43f62b620f22e5ea079f922380afa5324bf2ff16ef80a99ccd1b8a6e010078438213d93ff0c8c1352cc96ed87df43ef10b963fcd6f474581d63df68831d3ddcbe0d868a08cc5312974090dafda8a4296d0fbc0c4c223b0733075406cf73903ab5bcdf1d362bc6922a28714cf67da4deba521b3112ccadfd60d23190bfa82be158c3ade3223a5a2e5bc46a96378d164893b6cb6b1333dd4f4a06829efa8dcbee4659442f0851169f5b81fac8d435c32ca6bcc8326637587bd4ff6c455205c943bd"})
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f0000003940)={&(0x7f0000001b80), 0xc, &(0x7f0000003900)={&(0x7f0000001e80)={0x1a4c, r12, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x18, 0x3}, @THERMAL_GENL_ATTR_TZ_TRIP={0x210, 0x5, 0x0, 0x1, [@nested={0x8, 0x34, 0x0, 0x1, [@typed={0x4, 0xec}]}, @nested={0xb0, 0x14, 0x0, 0x1, [@generic="e8dcec78b1a1ce99e81ba7df9699c8298cbee63164bbcf88b0ce36050643c7bbc3f7982f189033630542e6e606c8fe08eb79a8f0cf32519c85f1a8a618ca57e5b75e0f9a6ce0c5a98969be50d6e486b8dbcd9b1787fb53dbb525ec488e109b9dd80b51baae4c9740062c5ff54d8198caa3635dff9c7c839a6087a87cad46e162240484cff9411c1c8ff8b90cc5b175a7", @typed={0x8, 0xa6, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x6}, @typed={0xd, 0x149, 0x0, 0x0, @str='nl802154\x00'}]}, @nested={0x42, 0xfa, 0x0, 0x1, [@nested={0x4, 0x83}, @generic="6313181f959fcb4ac20a408aaeb77dfb0f1e5a47e8cd3411163af1b9a6e1c7be6ab61d3bd9833e2d907d", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x40}]}, @nested={0x110, 0x10a, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @generic="4b8cb7b0cf2a11eba42b0bf2ada39dd4ff0eaca30694a01f37e6a8254735516c7e0e2a0fcb8ce6910ca29cc0475aa826578565c20b3100db303529f42193478286a837a007d51565e52ef9bbdaf6e1a4da1bda7373a62d882ead5a18ce61d5f18ae300eb7c8f653ecd1b45b89164fb18e53cdca0e2d1778e9f82d93133c1829b2f070b78c1ccf643609be793dac06c1677c3b9a4fb275209bfb4ad97d1573e4598570876", @generic="3ffb4bea542557ee160264ea2ecc6321b89c9016f84832e8f65d04f74efb0819e4a946", @generic="a99ca2848f5d27e83e7b3d7cdec7c5c23e6caaf59efa81901ac67334f4f643808bae6a0332873ac42add624b6d6393822316b87479c0ed9e7c09341756"]}]}, @THERMAL_GENL_ATTR_CDEV={0x44c, 0xf, 0x0, 0x1, [@typed={0x14, 0x12a, 0x0, 0x0, @ipv6=@empty}, @nested={0x377, 0x16, 0x0, 0x1, [@generic="b1051b82d139deb3bf99c3ec98506a58833ef3d73ee7b8c9c74d17e7e1f83331df9a3b3751b9fad426f87ebb7daf85df7339057b11bae183fddc647e5f133413f49bfced788537dca1a17baeccddb6e2909db6b6c631d41ca70f306ddc201aa4d5961f8238ac8aa5d9487572f0a77c4ab7df453c0fb8dfd534f3e15ece712a55b6bed8825977a7064608acc506a73c02928b4103ec81a9c81a8ef081a884da285bcb14bf5754faf70ecc0e6e4d6138e3b6c9dfdf9bef807662857cb72d23f8867ae09f9db546a9ff080309a33e5f580a5b", @typed={0xdc, 0x8b, 0x0, 0x0, @binary="94e0477d81eec90ce4ed868ffbde5822eafcd5c0c6a5bdf71ae8d9470f48ec7b1716cf39aaa24a21ba803bdb161258e9530f1a65b8f82f2da388f7fa2d9b68e8dfca85b23501d88b45063fef56addcf4af417de7416ec73e87c40969c9fe37e422e789a13382100e058abd5ee7189efc9b6407387b4845077bfba395026988338850699efe3d39c30d3b2cf3df4da8eb60a305153b381c18a52b6f4c927beead5aa0ea63574099831f58e92c537b617c0f0c2989f8b68caf62665a622395ac4679e14c5fce678ea4263fc8228c99921d8f0382b60deade66"}, @generic="050f6f0934f412a423df57a255937b9db48e3c6cdbbbcadeb92538f5bdbdf4992b4205ef28b37d614ab623b2207dc1f59c087525f63fc5b3d6bf69e9e4d58a04f73ccb31d727fe7042607ca94501304dc42af7f6dd94fce80ef416587bbc6b30d9cb1e47055de543a69930d61031bf5779cb334d2e193459189100bfc72c8ed2b6110b055005695f0471eb3e555cc4b075a1b5a023267cbd112693a56704ea0a551eb16c13d9e98064c8d9b5d956549b2c74cbd9bbc1213d301001f5f3f5bb2c6490cd", @generic="f4d673546a5f2544738af9aa2b0926cad691461595da396d2930e0dfdb22403c7e93b37928e89d3704c5115a1357972ef06b1d456a58", @generic="9bcafff9b01e268ba409609ef15109a60438770016867eacf1e95fef0f822bc86e7f125cad96307188b63b7fb09cc403fc45f149ac2b2a4609a24da2a55ce9974fe51db0f9ff1f9b90c89617bee3dce3571265892d69bbddc74f21fc6b29bb63b5ca7b571bee640fdc88abaa5d027ac56f397c097d9f10b98464f5d07ecaa2ac0f2f0eab7bcaaf07fe65fc7e864ec20be6f5a10de1c516ab27561e59c58665a5b12b8cb785d9cdc8c7dfcba6cf807d1642f3a92dccd1ccd118ad0850d0af07f2bd830c3f508cf1c2fa", @nested={0x4, 0xf2}]}, @generic="15fa1873c8ee42aa6f1c91b5ab594ce69f4b9f53382186c72c7c43e35bbb85c49b2e74cb7d9fa08cf89aab7cf5966c292f2b80974cf33272872ba3fec5595ea8bdaf8b0e3ee38595b19318eb79ddbe457508b8d93bd6a729eb8f1e85378ee7fe3719a1da12c05aaf43bfd2950cfa91d4adc98d6bc7e883296d752133af0d0979f70d5d7b8b9f9fe967826fbe217c5f00a7a6c451ffa559174306e832d6b842c802c1a0681af614f1b13f6b31301d71043b88a7f1fb8b974818a434a1"]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x9, 0xe, '%-@%{'}, @THERMAL_GENL_ATTR_TZ_GOV={0x1198, 0xd, 0x0, 0x1, [@generic="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", @typed={0x8, 0xd7, 0x0, 0x0, @pid=r11}, @nested={0x18a, 0xb, 0x0, 0x1, [@generic="536952b5717a45878e52c91fc75db518638536980f6a5bf76a6528006c594c2d1f8b2426ea8af4cf50e9f0395edd9f845179a60c159e40a1a6f11543283670269ab645a7e6e18c59cef9f04ed4b4d1efdf514ad0084d9aaefe9332787f0edfbf0f7891d11f98c9f609cffc5556414eafc522e6", @typed={0x8, 0x1d, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r13}, @nested={0x4, 0xc9}, @generic="c08eea405f8c7828b5e05de6f8983cd6aa2964bcd3c526d01603723b403c2e4a138667481dbf183c3ad582af78dbc29f8aa3d47520782dc25afb1124236fb1c56adbc746a20dadf2a056a8c50641cfca180c5cd729bc96e5e8b4c77c47b679df7257a8360ae8b491e87b9621aeced39f557f42477fcd1255acb113b0635947eb7a983a640891662cf98249f9fc3376", @generic="d9db7e054adac4b2c5c1e26d954897fb5a063bcd3717952ad9ae624b2bf2af3767b43d130ae411062dd1b75b44495e21c81bbcefe0a3417360184b19b56f767d90812b8a1ed013c5e2f6e9b9e5486a5aa78613ee664d2c4c1b4f9d7523c3a47e0d1ef3a48392f10c405d5f05", @nested={0x4, 0xbe}]}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x17, 0x393737e0}, @THERMAL_GENL_ATTR_TZ_TRIP={0x134, 0x5, 0x0, 0x1, [@typed={0xcf, 0x63, 0x0, 0x0, @binary="1f5462d564831f65dc5fd137d7077feabce84e898243a199b9de37e9348a35830f8ad4d9e704fd5e50d059f084b67d28df51f31bc981ce0c3a205c4f50de6108a24d55f8ae55507b5081998ef8130bd589654f91e0f3a40f3dee3c183d1290c10e16bf74213e0898aaa19a8a69c2a80a604f328d434d20f3a5ff5e64e3754ad60281a4c2cd461b8fd2dc9608e7198d9ace051c091c9d72048eef852bdc0c5a76e94d95236aae7569cad466ed1b2e5330717e3e1c0541b929717cc39fcc885f9272d7e23872319f75c466a1"}, @nested={0x18, 0x38, 0x0, 0x1, [@nested={0x4, 0x148}, @typed={0x8, 0x16, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x12a, 0x0, 0x0, @uid=r6}]}, @nested={0x46, 0x9b, 0x0, 0x1, [@typed={0x4, 0x88}, @generic="c8", @nested={0x4, 0x3a}, @nested={0x4, 0xa5}, @nested={0x4, 0x12c}, @generic="1fa5c09038ea839b8ed7e9e1acb72c470f5ee7fe0abbb54499e0c2b239b640521c0928e39791f0cd038569e12d77709aab"]}]}, @THERMAL_GENL_ATTR_TZ_GOV={0xe3, 0xd, 0x0, 0x1, [@nested={0xc, 0x121, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x97}, @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="19dd559f1dd2d33a57259da31ae0c6e80cc0c0a7c13b5056ab0273d02c0b594a77765c6b88ce253788bb4f836cc88402277bd96cf76e614cdc0b00f0acb8bd43568203d4cb9e0f9714faa0a953081f4ebb2e134dd520e2d678120277360eb4ed80ac1ce4fc33d66e70634299b458722e30c8fa0ae84b6890cceed2e188d146c0cc8c155c164ac44e5eba44fa980cf2fb64267f6246ede12385817b2514574f5ffa5f0ec0e92ba2e82f5ee86a42ab556f22d1caf63d6e394fddf1e30fe795ef409d5d75ee98aaa0"]}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0xa, 0x9}]}, 0x1a4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) (async)
r14 = getsockopt$auto_SO_DOMAIN(r0, 0x9, 0x27, &(0x7f0000003980)='nl802154\x00', &(0x7f00000039c0)=0x7)
bind$auto(r14, &(0x7f0000003a00)=@can, 0x9)
listmount$auto(&(0x7f0000003a40)={0x10, @inferred=r0, 0xbc, 0x4, 0x600000000000000}, &(0x7f0000003a80)=0x8, 0x3, 0xa381) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r15, &(0x7f0000003e40)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e00)={&(0x7f0000003b00)={0x2e4, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_ERP_REALM={0xcb, 0xfa, "ff50aa8b902118aed86c21cd3f8103798b91e60030a44f71ea5bb04b331e2c294ddd4cf90c122494359e5cc6672be7b1dfcf39a70bae1a14b63e327d6fc1699d12c6a9f9ea6ab33c3042ad1e45da6b3e32c39a5499ff398b1ba0220e2058f7c5fec7507e119b78e623380747ba918124c31820c7533da5e7e2faf68de7657c63340d64b4b66cd1e638e7a1958fc2495f26218e8736eec5a713745c60256d601bf1fe3863abc6541490a125381023add0d81f97688d051df2eea93172c14a71da768f6e5969f805"}, @NL80211_ATTR_SAE_PASSWORD={0x52, 0x115, "ca4de1979368aae663667d274315b2e6595fa22fc9c8c69352413eea2efb0d14b940a12f6588a70b9a4ef4a1db8ba4740476bcb76ae2bce46b09cefed84e6a3ea37fa525873246e0a485765d6e49"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_MAC_ADDRS={0x3c, 0xa6, 0x0, 0x1, [@nested={0x10, 0x21, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xb4}]}, @nested={0x28, 0x53, 0x0, 0x1, [@nested={0x4, 0xb9}, @nested={0x4, 0xd5}, @nested={0x4, 0x41}, @nested={0x4, 0xe1}, @nested={0x4, 0x69}, @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xa8}, @nested={0x4, 0xfc}]}]}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, "79c752f81be6f32c45753721788fb0021bdbab894cc55a"}, @NL80211_ATTR_MLO_LINKS={0x150, 0x138, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x2}, @NL80211_ATTR_SAE_PASSWORD={0x3d, 0x115, "7b6a48f5724f4ecda84a0521848e7684846439a02f6d1bc4c592d6c7aac875daa8dee6124c0c771c62ea340d50259ad667a8ac46d7b20e8745"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x6}}, @NL80211_ATTR_FILS_ERP_REALM={0xf7, 0xfa, "5826c1976c1b38a074aafce0d1087c174c97d0cbdefa5f0fea2063a5b57b74c63b75dbdcd3b670b05eebb970e5709b840a92ddcb1e0dac940dc75e02eb5dbc23c25deaccaf4fdc9b9855ead2974b4d465463e318f972afc9b25693382c38d0e0fec6db07563fac9b9dd298eb4968b40a6bb2a5194d5e11d552b4605ac0160f5fc07a63aa067f68b2c3213794d9e04821522324df8d447ba0128addfc605ccf9d60fd2bae1ec20d1e734b7b01cc18d4fb4810627b5c513aedb4f5bb51e535bdcf5e785c2e78a1a25919201f27ed3fb39326a181642db5d7fbeaa047925433ec3fbfb08cf1ba5949db7e175959b3f552def3b48c"}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x2001}, 0x0)
r16 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003ec0), r8)
sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r14, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x1c, r16, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4005) (async)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000003fc0), 0x400001, 0x0)
prctl$auto_PR_GET_PDEATHSIG(0x2, 0x33b3, r11, 0x5, 0x1)
r17 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000004040), r3)
sendmsg$auto_OVS_FLOW_CMD_NEW(r14, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004280)={&(0x7f0000004100)={0x144, r17, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x7}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xe}, @OVS_FLOW_ATTR_ACTIONS={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0xa5}]}, @OVS_FLOW_ATTR_KEY={0x110, 0x1, 0x0, 0x1, [@nested={0x10a, 0x105, 0x0, 0x1, [@generic="c6f252ff8d170e0bdba672cfdb07f0e1f9877935c1a6d8f385aa06146578f91a72e8d64a313ee54c6d0396017191497db0c995d6c4a901f2ff4afee140b662fae688d76cd7d32b271e6c11dbed65f2134b1b346bd24fe3203d4417d7911642a3593cdc7c13f2e3c51055499f24459200e3350ff8b7fd71e196288da2e7df01261b787b7f96f30b932122d88a5417931027435a736a0aaeced9f987a69f233aa59dd5842ad6898095875cdbf6d3cdd7d6c1b0e7c029701da5a436efa9173e68fde910244610171bb01647f0feba600afd90e89eace969ae97f2931b3ab0904c53b7239664a27ebbbff1dca654f402c312ce87", @typed={0x8, 0xf6, 0x0, 0x0, @fd}, @typed={0xb, 0x90, 0x0, 0x0, @str='$^+*,@\x00'}]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x800d5)

kernel console output (not intermixed with test programs):

9275][T11059] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1178'.
[  357.144207][T11094] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1187'.
[  357.259964][T11101] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1190'.
[  359.906340][T11156] QAT: Device 2 not found
[  359.915319][T11157] QAT: Device 2 not found
[  360.007242][T11161] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1202'.
[  360.996235][T11172] FAULT_INJECTION: forcing a failure.
[  360.996235][T11172] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  361.029793][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.4.1206 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  361.029828][T11172] Tainted: [U]=USER
[  361.029835][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  361.029847][T11172] Call Trace:
[  361.029853][T11172]  <TASK>
[  361.029862][T11172]  dump_stack_lvl+0x16c/0x1f0
[  361.029896][T11172]  should_fail_ex+0x497/0x5b0
[  361.029924][T11172]  _copy_to_user+0x32/0xd0
[  361.029953][T11172]  rng_dev_read+0x24b/0x790
[  361.029989][T11172]  ? __pfx_rng_dev_read+0x10/0x10
[  361.030022][T11172]  ? bpf_lsm_file_permission+0x9/0x10
[  361.030047][T11172]  ? security_file_permission+0x71/0x210
[  361.030082][T11172]  ? rw_verify_area+0xcf/0x680
[  361.030112][T11172]  ? __pfx_rng_dev_read+0x10/0x10
[  361.030143][T11172]  vfs_readv+0x6c2/0x8a0
[  361.030170][T11172]  ? find_held_lock+0x2d/0x110
[  361.030209][T11172]  ? __pfx_vfs_readv+0x10/0x10
[  361.030238][T11172]  ? find_held_lock+0x2d/0x110
[  361.030277][T11172]  ? __pfx_lock_release+0x10/0x10
[  361.030302][T11172]  ? trace_lock_acquire+0x14e/0x1f0
[  361.030334][T11172]  ? __fget_files+0x206/0x3a0
[  361.030364][T11172]  ? do_readv+0x133/0x340
[  361.030391][T11172]  do_readv+0x133/0x340
[  361.030427][T11172]  ? __pfx_do_readv+0x10/0x10
[  361.030467][T11172]  do_syscall_64+0xcd/0x250
[  361.030499][T11172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.030530][T11172] RIP: 0033:0x7fa235b8cd29
[  361.030549][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.030569][T11172] RSP: 002b:00007fa236a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  361.030590][T11172] RAX: ffffffffffffffda RBX: 00007fa235da6080 RCX: 00007fa235b8cd29
[  361.030605][T11172] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003
[  361.030617][T11172] RBP: 00007fa236a42090 R08: 0000000000000000 R09: 0000000000000000
[  361.030630][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.030641][T11172] R13: 0000000000000000 R14: 00007fa235da6080 R15: 00007ffc9133ec98
[  361.030670][T11172]  </TASK>
[  362.414294][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  362.659477][T11200] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1214'.
[  362.792359][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'.
	

	
		

	

	

	
	

	
		

	


	
	
	
	

	

	
	

	


		

	

	

		

	

	
		
	

	
		
	

	
		
	

	
		
	
	
	
	
	
	
	

	
		
	

	
		


	
	
	

	
		
	

	
		
	
		
	
	
			
	

	
		
		
	

	
		

	
				
				
				
				
	
	
					
				
	
	

	
		
				
				

				
		
	
				
				
				
	

	
		




				

	
	

	
		

	
		

	


		

		
	
		
	





	



			








	

	








	


	

	



	
	

	

	

	
	

	

	

	





	



	








	








	





	





		








	

	
		

	
		

	


	
	

		
	
		
	





	



			








	

	
	


	























	

	
	

	

			
	






	





	






		













	

	
		
	

	
		



	

	
			
		
	
	
	



	
				
	
		
	
	
		

	
				
	
	



				
		
	

	
		
	

	
		

		
	
	

	
		
	

	
		






























		


			
		
	

	
		
	
		
			

	

	
		






	
	
	
	
	
	

		
	




	
	
		
		

		
		


	

	

	


	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	
			

			

			

			

			

			

			

			

			

			

	
	
	
	
	
	
	
	
	


	



	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	


	
	
	
	

	

	
		






	
			

			

			

			


	
		

	
		

		
		

		
	
	

		
		

		
	
	


	
		


	
	

	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




			
	
			
	
			
	
			
	


				


			


				


			
	

	
		
						
	
						
	
						
	
						
	
	

	

	
	
		
		


	

	

	
	
		
		



	
		

	


	

	

		
	
		
	





	



			








	

	
	


	













		





	

	

		
	
	









	
		
		


			
	


	

		
	

	

	
	






	




	






		










	

	
		
			

	
	
	

			






			
	





	

		
	
	
		
	




	

	
		
		


	




		
				

		

		
		

	
	
		
	
		

		

		





	

	

	


		
	


		
	
		

		


	
	
		
		













	
		

	
	
	



		
	
		
	











			


	

	



		
		






		
	





	



			









		

	


	




	

	



	

		
	



	

	
	


	
		
	



	
		
	



		
	



		
		
	



		

	
	
		
	

		
	



		
	


		
	
	







		
		
	
		

		

		


	
	

	
	


	

		
		
	

	


		
		





	



	


	
	

	











	











	

	

	





	

	









		









	

	









		






	


	

	

	

				



				


	
	
	
	
	
	
			

				

				

		


	
						

	

		
	




	

	
		
	
			




		
		

		
		


	

	

	
	
	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	
	

	
		

	

	
		






	
	

	
		
			

			

			

			

	

	
		

	
		

	
		

	

	
		
		
		

		
	
	

		
		

		
	
	

	

	
		
	
	

	
		



	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




			
	
			
	
			
	
			
	
	

		


				
	

		


			


				


			
	
	
	
	

	
				
	
		
	


	

	



	

		
	

	

	
		
						

	
						

		


		


	

	
		
	

	
		

	
						
	

	
		
	

	
		
	

	
		
						
	
						
	
						
	
	

	
		

	
		

	


	

	

		
	
		
	





	



			








	

	
	


	



























































	
	

		
	
	














	



	


	


	
	
	
		


























	

	







	











	
		







	










	
	








	




	






		












						
	
	

	
		
	

	

	
	
		
		


	

	

	
	
		
		


			

	
	
	

	

	
		
			

	
	
	

			



	

	
		
	

		
		


	

	





	

	









		









	

	









		






	


	

	

	



	




	


				



				


	

	
		
	

	
		
	

	
		
			

			

	

	
		
			

			

			

			

			

			

			


	
						
	

	
		
	

	
		
		
		


		
		


		
	
	

	

	
		
	

	
		
	

	
		

	
						
	
	

	

	

	
		
				

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						

	
						
	

	
	

	
	

	
	
	
	
	
	

	
	
	
	
	
	

	
	

	
	

	

	
	
	

	

	

	
		

	


		

		
	
		
	





	



			








	
	


	
	
	








	





	


	
	
	
	






	




	





		








	
						
	

	
		
	

	
		
	

	
		
	

	
		

				



				


	

	

	
						
	

	
	

	
		
	

	
		
	
			




	
			




	
	

	



	
						

	
		
			
			


	

	
		
			
			


	

	

	
	

	
	

	
		
	

	
		
	

	
		
	

	

	

	





		




	

	
			
		

	
						

	
		

	


		

		
	
		
	





	



			








	










	

	
	




	

	



	
	
	


	

	

	

	
	

	

	
	
	





	



	


	
	
	

	








	




	





		











	
			
	
	

	

	
		
		
	

	
		

				

		
		

	

		

		
		

	
						

	
						
	
			





	

	

	
						

		


			
	
	
			





	
						
	

	
		
	
	
	
	
	
	

	
						
	

	



	


syzkaller
syzkaller login: [  504.081290][T14467] zswap: compressor  not available
[  504.167039][T14478] openvswitch: netlink: Duplicate or invalid key (type 0).
[  505.203478][T14523] zswap: compressor  not available
[  505.409586][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'.
[  505.420897][T14547] veth0_macvtap: left promiscuous mode
[  505.691433][T14566] bridge0: port 4() entered blocking state
[  505.700516][T14566] bridge0: port 4() entered disabled state
[  505.707269][T14566] : entered allmulticast mode
[  505.713541][T14566] bond_slave_0: entered allmulticast mode
[  505.722438][T14566] : entered promiscuous mode
[  505.728772][T14566] bond_slave_0: entered promiscuous mode
[  506.621545][T14599] Invalid ELF header magic: != ELF
[  506.732681][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1905'.
[  506.822529][T14625] scsi_dev_info_list_add_str: bad dev info string '�' '' ''
[  508.127245][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'.
[  508.179268][   T29] audit: type=1326 audit(4294968494.717:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.2.1921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f009018cd29 code=0x0
[  508.860923][T14706] : Can't lookup blockdev
[  508.865983][T14705] : Can't lookup blockdev
[  508.934190][T14702] netlink: 'syz.1.1926': attribute type 1 has an invalid length.
[  509.726909][T14749] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582)
[  510.465543][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1941'.
[  510.639336][T14771] bond0: (slave bond_slave_1): Releasing backup interface
[  510.653198][T14766] sp0: Synchronizing with TNC
[  512.397050][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'.
[  512.530115][T14819] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1957'.
[  512.548306][T14819] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.556473][T14819] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.780195][T14838] caif:caif_disconnect_client(): nothing to disconnect
[  512.862914][T14840] caif:caif_disconnect_client(): nothing to disconnect
[  513.244778][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1966'.
[  513.378059][   T29] audit: type=1800 audit(4294968499.897:20): pid=14863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1967" name="dummy_udc" dev="gadgetfs" ino=7451 res=0 errno=0
[  513.544404][T14866] zswap: compressor  not available
[  514.816406][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1978'.
[  515.146340][T14906] zswap: compressor  not available
[  517.407384][T14945] caif:caif_disconnect_client(): nothing to disconnect
[  517.839028][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  517.847044][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1990'.
[  517.857371][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  517.964309][   T29] audit: type=1804 audit(4294968504.497:21): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1993" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=1052 res=1 errno=0
[  518.544601][T14974] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request
[  518.756544][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1997'.
[  519.873750][T15017] netlink: 4439 bytes leftover after parsing attributes in process `syz.6.2005'.
[  519.901357][T15018] netlink: 4439 bytes leftover after parsing attributes in process `syz.6.2005'.
[  520.035668][T15023] netlink: 18 bytes leftover after parsing attributes in process `syz.6.2006'.
[  520.771393][T15046] bonding: *&(' is being created...
[  521.791181][ T5500] 8021q: adding VLAN 0 to HW filter on device *&('
[  521.980582][T15088] caif:caif_disconnect_client(): nothing to disconnect
[  522.893613][T15140] aoe: could not set interface list: too many interfaces
[  523.000350][T15144] cgroup2: Unknown parameter '/sys/devices/system/memory/memory0/online'
[  523.389020][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2033'.
[  524.319106][T15167] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht'
[  524.712508][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'.
[  524.782310][T15181] Process accounting resumed
[  525.078785][T15189] caif:caif_disconnect_client(): nothing to disconnect
[  527.073212][T15241] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2060'.
[  527.109217][T15241] ipvlan0: entered promiscuous mode
[  527.114985][T15241] ipvlan0: entered allmulticast mode
[  527.129218][T15241] veth0_vlan: entered allmulticast mode
[  527.165575][T15241] vivid-013: =================  START STATUS  =================
[  527.179729][T15241] vivid-013: Generate PTS: true
[  527.185125][T15241] vivid-013: Generate SCR: true
[  527.208497][T15241] tpg source WxH: 640x360 (Y'CbCr)
[  527.214236][T15241] tpg field: 1
[  527.228694][T15241] tpg crop: 640x360@0x0
[  527.233309][T15241] tpg compose: 640x360@0x0
[  527.254115][T15241] tpg colorspace: 8
[  527.273990][T15241] tpg transfer function: 0/0
[  527.290910][T15241] tpg Y'CbCr encoding: 0/0
[  527.295814][T15241] tpg quantization: 0/0
[  527.300812][T15241] tpg RGB range: 0/2
[  527.305259][T15241] vivid-013: ==================  END STATUS  ==================
[  527.339251][T15243] ima: policy update failed
[  527.374951][   T29] audit: type=1802 audit(4294968525.899:22): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2060" res=0 errno=0
[  527.839444][T15259] caif:caif_disconnect_client(): nothing to disconnect
[  528.086547][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2068'.
[  531.599229][T15347] netlink: 'syz.2.2084': attribute type 1 has an invalid length.
[  531.763015][T15357] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2081'.
[  531.774043][T15357] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2081'.
[  531.938500][T15357] nbd: socks must be embedded in a SOCK_ITEM attr
[  531.946559][T15357] block nbd0: shutting down sockets
[  532.360301][T15384] Invalid ELF header magic: != ELF
[  532.586633][   T29] audit: type=1326 audit(4294968531.109:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.1.2096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f653ff8cd29 code=0x0
[  533.441001][T15391] base_sock_release(ffff88807c6dc200) sk=ffff888033adc000
[  533.666643][T15421] caif:caif_disconnect_client(): nothing to disconnect
[  534.001566][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'.
[  534.586919][T15474] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2109'.
[  534.753165][T15478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2110'.
[  535.025099][T15496] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2115'.
[  536.359183][T15524] kAFS: bad VL server IP address
[  537.270383][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'.
[  537.376966][T15550] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2130'.
[  538.067229][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'.
[  538.090647][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'.
[  538.968952][T15535] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  539.543283][T15589] caif:caif_disconnect_client(): nothing to disconnect
[  540.662209][T15595] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  540.678391][T15595] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  540.685001][T15595] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  540.708174][T15595] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  540.931849][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2142'.
[  542.528874][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  542.688140][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  542.694799][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  542.768231][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  543.521146][T15667] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2156'.
[  543.675662][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'.
[  543.708241][T15670] ksmbd: Unknown IPC event: 0, ignore.
[  544.436048][T15691] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[15691]
[  544.624120][T15721] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2169'.
[  545.137309][T15729] caif:caif_disconnect_client(): nothing to disconnect
[  545.318910][T15742] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2174'.
[  545.861463][T15771] caif:caif_disconnect_client(): nothing to disconnect
[  546.003284][T15782] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2188'.
[  546.439285][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2193'.
[  546.599972][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2193'.
[  547.265349][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  547.273382][T15845] bond0: option all_slaves_active: invalid value ()
[  547.281992][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  547.291476][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  547.301622][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  547.319834][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  547.329911][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  547.860417][T15861] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2204'.
[  547.940725][T15851] chnl_net:caif_netlink_parms(): no params data found
[  548.197285][T15851] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.218101][T15851] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.246319][T15851] bridge_slave_0: entered allmulticast mode
[  548.265429][T15851] bridge_slave_0: entered promiscuous mode
[  548.303954][T15851] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.333770][T15851] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.431272][T15870] zswap: compressor  not available
[  548.465718][T15851] bridge_slave_1: entered allmulticast mode
[  548.473383][T15851] bridge_slave_1: entered promiscuous mode
[  548.671263][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.700148][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.807147][T15851] team0: Port device team_slave_0 added
[  548.815290][T15851] team0: Port device team_slave_1 added
[  548.888723][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.896388][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.928155][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.950736][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.958641][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.005836][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.083459][T15851] hsr_slave_0: entered promiscuous mode
[  549.108916][T15851] hsr_slave_1: entered promiscuous mode
[  549.115597][T15851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  549.134456][T15851] Cannot create hsr debugfs directory
[  549.335504][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'.
[  549.411390][T15851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.428446][ T5837] Bluetooth: hci4: command tx timeout
[  549.549426][T15851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.657147][T15921] [U] 
[  549.660170][T15921] [U] 
[  549.663156][T15921] [U] 
[  549.666143][T15921] [U] 
[  549.678699][T15921] [U] 
[  549.681704][T15921] [U] 
[  549.684679][T15921] [U] 
[  549.687634][T15921] [U] 
[  549.698224][T15921] [U] 
[  549.701224][T15921] [U] 
[  549.704211][T15921] [U] 
[  549.707386][T15921] [U] 
[  549.719746][T15851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.720780][T15921] [U] 
[  549.734009][T15921] [U] 
[  549.736960][T15921] [U] 
[  549.739908][T15921] [U] 
[  549.768236][T15921] [U] 
[  549.771248][T15921] [U] 
[  549.774222][T15921] [U] 
[  549.799544][T15920] [U] 
[  549.894034][T15930] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2215'.
[  549.917640][T15851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.947098][T15932] Process accounting resumed
[  550.105536][T15936] FAULT_INJECTION: forcing a failure.
[  550.105536][T15936] name failslab, interval 1, probability 0, space 0, times 0
[  550.121525][T15936] CPU: 1 UID: 0 PID: 15936 Comm: syz.2.2217 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  550.121565][T15936] Tainted: [U]=USER
[  550.121573][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  550.121588][T15936] Call Trace:
[  550.121595][T15936]  <TASK>
[  550.121604][T15936]  dump_stack_lvl+0x16c/0x1f0
[  550.121640][T15936]  should_fail_ex+0x497/0x5b0
[  550.121663][T15936]  ? fs_reclaim_acquire+0xae/0x150
[  550.121699][T15936]  should_failslab+0xc2/0x120
[  550.121726][T15936]  kmem_cache_alloc_noprof+0x6e/0x3b0
[  550.121750][T15936]  ? __pfx_lock_release+0x10/0x10
[  550.121777][T15936]  ? alloc_empty_file+0x73/0x1e0
[  550.121806][T15936]  alloc_empty_file+0x73/0x1e0
[  550.121833][T15936]  path_openat+0xe1/0x2d80
[  550.121854][T15936]  ? __x64_sys_openat+0x175/0x210
[  550.121881][T15936]  ? do_syscall_64+0xcd/0x250
[  550.121910][T15936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.121946][T15936]  ? __pfx_path_openat+0x10/0x10
[  550.121971][T15936]  do_filp_open+0x20c/0x470
[  550.121993][T15936]  ? __pfx_do_filp_open+0x10/0x10
[  550.122025][T15936]  ? alloc_fd+0x41f/0x760
[  550.122049][T15936]  do_sys_openat2+0x17a/0x1e0
[  550.122075][T15936]  ? __pfx_do_sys_openat2+0x10/0x10
[  550.122109][T15936]  __x64_sys_openat+0x175/0x210
[  550.122151][T15936]  ? __pfx___x64_sys_openat+0x10/0x10
[  550.122183][T15936]  ? rcu_is_watching+0x12/0xc0
[  550.122219][T15936]  ? rcu_is_watching+0x12/0xc0
[  550.122253][T15936]  do_syscall_64+0xcd/0x250
[  550.122283][T15936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.122314][T15936] RIP: 0033:0x7f009018cd29
[  550.122332][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.122356][T15936] RSP: 002b:00007f0090fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  550.122377][T15936] RAX: ffffffffffffffda RBX: 00007f00903a5fa0 RCX: 00007f009018cd29
[  550.122393][T15936] RDX: 0000000000000582 RSI: 0000000020000040 RDI: ffffffffffffff9c
[  550.122408][T15936] RBP: 00007f009020e2a0 R08: 0000000000000000 R09: 0000000000000000
[  550.122421][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  550.122435][T15936] R13: 0000000000000000 R14: 00007f00903a5fa0 R15: 00007ffdfb5d6d98
[  550.122456][T15936]  </TASK>
[  550.203939][T15851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  550.470162][T15851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  550.494609][T15851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  550.509939][T15938] nbd: must specify at least one socket
[  550.518381][T15851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  550.635309][T15941] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2220'.
[  550.651505][T15851] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.684870][T15851] 8021q: adding VLAN 0 to HW filter on device team0
[  550.712174][T10010] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.720013][T10010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.867183][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.875039][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.914132][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'.
[  550.941462][T15851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  551.186452][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.270693][T15851] veth0_vlan: entered promiscuous mode
[  551.328729][T15851] veth1_vlan: entered promiscuous mode
[  551.387159][T15851] veth0_macvtap: entered promiscuous mode
[  551.405163][T15851] veth1_macvtap: entered promiscuous mode
[  551.443346][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.485579][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.496604][ T5837] Bluetooth: hci4: command tx timeout
[  551.518066][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.588317][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.614414][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.640216][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.669193][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.702189][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.738044][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.758204][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.778307][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.798038][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.821097][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.850196][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.884429][T15851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.904486][T15851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.918030][T15851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.932633][T15851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.017739][T15851] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
[  552.074446][T10701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.075156][T15851] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht'
[  552.106004][T10701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.186293][T15989] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2229'.
[  552.196680][T10704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.216867][T10704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.352000][T15996] netlink: 266 bytes leftover after parsing attributes in process `syz.5.2230'.
[  552.399739][T15996] IPv6: NLM_F_CREATE should be specified when creating new route
[  553.568569][ T5837] Bluetooth: hci4: command tx timeout
[  554.433201][T16033] vivid-003: =================  START STATUS  =================
[  554.461841][T16033] vivid-003: Radio HW Seek Mode: Bounded
[  554.477312][T16033] vivid-003: Radio Programmable HW Seek: false
[  554.504580][T16033] vivid-003: RDS Rx I/O Mode: Block I/O
[  554.515409][T16033] vivid-003: Generate RBDS Instead of RDS: false
[  554.537086][T16033] vivid-003: RDS Reception: true
[  554.543415][T16033] vivid-003: RDS Program Type: 0 inactive
[  554.558025][T16033] vivid-003: RDS PS Name:  inactive
[  554.576912][T16035] caif:caif_disconnect_client(): nothing to disconnect
[  554.588089][T16033] vivid-003: RDS Radio Text:  inactive
[  554.598057][T16033] vivid-003: RDS Traffic Announcement: false inactive
[  554.628843][T16033] vivid-003: RDS Traffic Program: false inactive
[  554.635872][T16033] vivid-003: RDS Music: false inactive
[  554.708257][T16033] vivid-003: ==================  END STATUS  ==================
[  555.648177][ T5837] Bluetooth: hci4: command tx timeout
[  558.239164][T16121] caif:caif_disconnect_client(): nothing to disconnect
[  558.665865][T16134] Process accounting resumed
[  558.676293][T16136] FAULT_INJECTION: forcing a failure.
[  558.676293][T16136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  558.705462][T16134] Process accounting resumed
[  558.713045][T16136] CPU: 1 UID: 0 PID: 16136 Comm: syz.2.2274 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  558.713078][T16136] Tainted: [U]=USER
[  558.713085][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  558.713097][T16136] Call Trace:
[  558.713102][T16136]  <TASK>
[  558.713111][T16136]  dump_stack_lvl+0x16c/0x1f0
[  558.713143][T16136]  should_fail_ex+0x497/0x5b0
[  558.713165][T16136]  _copy_to_user+0x32/0xd0
[  558.713191][T16136]  simple_read_from_buffer+0xd0/0x160
[  558.713222][T16136]  proc_fail_nth_read+0x198/0x270
[  558.713249][T16136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.713276][T16136]  ? security_file_permission+0x71/0x210
[  558.713309][T16136]  ? rw_verify_area+0xcf/0x680
[  558.713337][T16136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.713363][T16136]  vfs_read+0x1df/0xbf0
[  558.713391][T16136]  ? __fget_files+0x1fc/0x3a0
[  558.713411][T16136]  ? __pfx___mutex_lock+0x10/0x10
[  558.713438][T16136]  ? __pfx_vfs_read+0x10/0x10
[  558.713479][T16136]  ? __fget_files+0x206/0x3a0
[  558.713502][T16136]  ksys_read+0x12b/0x250
[  558.713531][T16136]  ? __pfx_ksys_read+0x10/0x10
[  558.713561][T16136]  ? rcu_is_watching+0x12/0xc0
[  558.713594][T16136]  ? rcu_is_watching+0x12/0xc0
[  558.713625][T16136]  do_syscall_64+0xcd/0x250
[  558.713654][T16136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.713684][T16136] RIP: 0033:0x7f009018b73c
[  558.713701][T16136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  558.713722][T16136] RSP: 002b:00007f0090f82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  558.713742][T16136] RAX: ffffffffffffffda RBX: 00007f00903a6080 RCX: 00007f009018b73c
[  558.713756][T16136] RDX: 000000000000000f RSI: 00007f0090f820a0 RDI: 0000000000000005
[  558.713770][T16136] RBP: 00007f0090f82090 R08: 0000000000000000 R09: 0000000000000000
[  558.713783][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.713795][T16136] R13: 0000000000000001 R14: 00007f00903a6080 R15: 00007ffdfb5d6d98
[  558.713815][T16136]  </TASK>
[  558.737195][T16134] Process accounting resumed
[  558.897209][T16140] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2268'.
[  558.918058][T16134] Process accounting resumed
[  558.969582][T16117] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  558.977182][T16117] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  559.018388][T16117] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  559.025021][T16117] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  559.050336][T16134] Process accounting resumed
[  559.055734][T16117] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  559.062603][T16134] Process accounting resumed
[  559.068521][T16117] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  559.077163][T16134] Process accounting resumed
[  559.103363][T16134] Process accounting resumed
[  559.108734][T16134] Process accounting resumed
[  559.128442][T16134] Process accounting resumed
[  559.134607][T16134] Process accounting resumed
[  559.140257][T16134] Process accounting resumed
[  559.145587][T16134] Process accounting resumed
[  559.150963][T16134] Process accounting resumed
[  559.156322][T16134] Process accounting resumed
[  559.162541][T16134] Process accounting resumed
[  559.167882][T16134] Process accounting resumed
[  559.176228][T16134] Process accounting resumed
[  559.182636][T16134] Process accounting resumed
[  559.190264][T16134] Process accounting resumed
[  559.195564][T16134] Process accounting resumed
[  559.221548][T16134] Process accounting resumed
[  559.236741][T16134] Process accounting resumed
[  559.246279][T16134] Process accounting resumed
[  559.266194][T16134] Process accounting resumed
[  559.273161][T16134] Process accounting resumed
[  559.280707][T16134] Process accounting resumed
[  559.286059][T16134] Process accounting resumed
[  559.308963][T16134] Process accounting resumed
[  559.319841][T16134] Process accounting resumed
[  559.339726][T16134] Process accounting resumed
[  559.354130][T16134] Process accounting resumed
[  559.361125][T16134] Process accounting resumed
[  559.376757][T16134] Process accounting resumed
[  559.392770][T16134] Process accounting resumed
[  559.409445][T16134] Process accounting resumed
[  559.427722][T16134] Process accounting resumed
[  559.474502][T16147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'.
[  559.537937][T16155] caif:caif_disconnect_client(): nothing to disconnect
[  559.796981][T16168] zswap: compressor  not available
[  559.878340][T16146] caif:caif_disconnect_client(): nothing to disconnect
[  559.888055][   T29] audit: type=1800 audit(4294967299.892:24): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2279" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0
[  559.936727][   T29] audit: type=1800 audit(4294967299.942:25): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2281" name="members" dev="configfs" ino=53179 res=0 errno=0
[  560.065144][T16189] base_sock_release(ffff88807c68b000) sk=ffff8880652f3000
[  560.094600][T16189] base_sock_release(ffff88807c68b600) sk=ffff888065400000
[  560.104050][T16189] base_sock_release(ffff88807c68ce00) sk=ffff888022f94000
[  560.112229][T16189] base_sock_release(ffff88807c689e00) sk=ffff888022f92000
[  560.128420][T16189] base_sock_release(ffff88807c68d400) sk=ffff888022f97000
[  560.140677][T16189] base_sock_release(ffff88807c68da00) sk=ffff888022f90000
[  560.152741][T16189] base_sock_release(ffff88807c68bc00) sk=ffff888022f91000
[  560.161249][T16189] base_sock_release(ffff88807c68e000) sk=ffff888022f95000
[  560.169546][T16189] base_sock_release(ffff88807c68aa00) sk=ffff888022f93000
[  560.177803][T16189] base_sock_release(ffff88807c68ec00) sk=ffff88807e55d000
[  560.187413][T16189] base_sock_release(ffff88808a6e1e00) sk=ffff88807e55c000
[  560.195806][T16189] base_sock_release(ffff88808a6e2400) sk=ffff88807e55f000
[  560.204072][T16189] base_sock_release(ffff88808a6e1800) sk=ffff88807e55e000
[  560.218363][T16189] base_sock_release(ffff88808a6e1200) sk=ffff888028d23000
[  560.236696][T16189] base_sock_release(ffff88808a6e2a00) sk=ffff888028d22000
[  560.255067][T16189] base_sock_release(ffff88808a6e3000) sk=ffff88805bd4a000
[  560.288394][T16189] base_sock_release(ffff88808a6e4e00) sk=ffff88805bd49000
[  560.296332][T16189] base_sock_release(ffff88808a6e6000) sk=ffff888072435000
[  560.334428][T16201] caif:caif_disconnect_client(): nothing to disconnect
[  560.342346][T16189] base_sock_release(ffff88808a6e6600) sk=ffff888072437000
[  560.357160][T16189] base_sock_release(ffff88808a6e5a00) sk=ffff888032fc3000
[  560.385009][T16189] base_sock_release(ffff88808a6e5400) sk=ffff888032fc4000
[  560.405035][T16189] base_sock_release(ffff88808a6e7200) sk=ffff888032fc5000
[  560.422037][T16189] base_sock_release(ffff88808a6e6c00) sk=ffff888032fc6000
[  560.440770][T16189] base_sock_release(ffff88808a6e7800) sk=ffff888032fc7000
[  560.454961][T16189] base_sock_release(ffff88808a6e0600) sk=ffff88805b8f0000
[  560.483450][T16189] base_sock_release(ffff88808a6e0c00) sk=ffff88806598b000
[  560.493229][T16189] base_sock_release(ffff888012c04200) sk=ffff88806598f000
[  560.618057][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  560.741471][T16213] zswap: compressor  not available
[  560.921773][T16224] zswap: compressor  not available
[  561.009338][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  561.088151][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  561.094880][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  561.614928][T16247] Process accounting resumed
[  562.320933][T16261] zswap: compressor  not available
[  562.581160][T16277] caif:caif_disconnect_client(): nothing to disconnect
[  562.611643][T16281] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  562.726519][T16284] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2309'.
[  563.168182][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  563.331192][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  563.338323][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  563.356801][T16303] zswap: compressor  not available
[  563.661436][T16319] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2320'.
[  563.726804][T16317] FAULT_INJECTION: forcing a failure.
[  563.726804][T16317] name failslab, interval 1, probability 0, space 0, times 0
[  563.747735][T16321] synth uevent: /devices/virtual/tty/ttys3: unknown uevent action string
[  563.769373][T16321] tty ttys3: uevent: failed to send synthetic uevent: -22
[  563.776506][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.5.2318 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  563.776542][T16317] Tainted: [U]=USER
[  563.776550][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  563.776561][T16317] Call Trace:
[  563.776568][T16317]  <TASK>
[  563.776576][T16317]  dump_stack_lvl+0x16c/0x1f0
[  563.776608][T16317]  should_fail_ex+0x497/0x5b0
[  563.776631][T16317]  ? fs_reclaim_acquire+0xae/0x150
[  563.776663][T16317]  should_failslab+0xc2/0x120
[  563.776689][T16317]  __kmalloc_node_track_caller_noprof+0xcf/0x520
[  563.776716][T16317]  ? sysctl_core_net_init+0x42/0x270
[  563.776742][T16317]  kmemdup_noprof+0x29/0x60
[  563.776772][T16317]  sysctl_core_net_init+0x42/0x270
[  563.776797][T16317]  ? __pfx_sysctl_core_net_init+0x10/0x10
[  563.776819][T16317]  ops_init+0x1df/0x5f0
[  563.776849][T16317]  setup_net+0x21f/0x860
[  563.776879][T16317]  ? __pfx_setup_net+0x10/0x10
[  563.776908][T16317]  ? down_read_killable+0xcc/0x380
[  563.776937][T16317]  ? __pfx_down_read_killable+0x10/0x10
[  563.776967][T16317]  ? debug_mutex_init+0x37/0x70
[  563.777001][T16317]  copy_net_ns+0x2b4/0x6c0
[  563.777040][T16317]  create_new_namespaces+0x3ea/0xad0
[  563.777073][T16317]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  563.777104][T16317]  ksys_unshare+0x45d/0xa40
[  563.777134][T16317]  ? __pfx_ksys_unshare+0x10/0x10
[  563.777164][T16317]  ? xfd_validate_state+0x5d/0x180
[  563.777192][T16317]  ? rcu_is_watching+0x12/0xc0
[  563.777222][T16317]  __x64_sys_unshare+0x31/0x40
[  563.777251][T16317]  do_syscall_64+0xcd/0x250
[  563.777280][T16317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.777309][T16317] RIP: 0033:0x7fe2e798cd29
[  563.777326][T16317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.777347][T16317] RSP: 002b:00007fe2e57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  563.777368][T16317] RAX: ffffffffffffffda RBX: 00007fe2e7ba6080 RCX: 00007fe2e798cd29
[  563.777382][T16317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  563.777395][T16317] RBP: 00007fe2e7a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  563.777407][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.777420][T16317] R13: 0000000000000000 R14: 00007fe2e7ba6080 R15: 00007ffce9d1a828
[  563.777441][T16317]  </TASK>
[  565.020476][T16341] Process accounting resumed
[  565.067836][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2323'.
[  565.185958][T16337] geneve1: entered allmulticast mode
[  565.249018][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  566.093293][T16370] zswap: compressor  not available
[  566.229945][T16385] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2336'.
[  566.668262][T16397] netlink: 'syz.5.2337': attribute type 11 has an invalid length.
[  566.900309][T16405] sd 0:0:1:0: PR command failed: 1026
[  566.953366][T16413] sd 0:0:1:0: PR command failed: 1026
[  566.998174][T16413] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  567.012246][T16405] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  567.033771][T16413] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  567.096012][T16419] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2343'.
[  567.126579][T16405] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  567.641949][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  567.650505][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  567.658536][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  567.666963][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  567.675152][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  567.683224][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  567.990779][T16440] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2345'.
[  568.433530][T16433] chnl_net:caif_netlink_parms(): no params data found
[  568.623304][T16457] caif:caif_disconnect_client(): nothing to disconnect
[  568.866129][T16433] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.898139][T16433] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.906062][T16433] bridge_slave_0: entered allmulticast mode
[  568.931839][T16433] bridge_slave_0: entered promiscuous mode
[  568.969674][T16433] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.977520][T16433] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.006391][T16433] bridge_slave_1: entered allmulticast mode
[  569.018836][T16433] bridge_slave_1: entered promiscuous mode
[  569.159363][T16433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.189982][T16433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.276712][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2352'.
[  569.373399][T16433] team0: Port device team_slave_0 added
[  569.385436][T16433] team0: Port device team_slave_1 added
[  569.520196][T16433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.527884][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.568839][T16433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.645072][T16433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.679464][T16482] CIFS: VFS: Invalid SecurityFlags: 
[  569.732806][ T5833] Bluetooth: hci2: command tx timeout
[  569.778243][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.857015][T16433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.901922][T16492] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2356'.
[  569.983290][T16433] hsr_slave_0: entered promiscuous mode
[  570.002654][T16433] hsr_slave_1: entered promiscuous mode
[  570.018741][T16433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.048219][T16433] Cannot create hsr debugfs directory
[  570.626222][T16433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.767404][T16433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.961106][T16433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.081393][T16433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.276978][T16433] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  571.393748][T16433] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  571.416226][T16433] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  571.573659][T16433] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  571.808111][ T5833] Bluetooth: hci2: command tx timeout
[  571.967165][T16433] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.974802][T16518] zswap: compressor  not available
[  571.987237][T16433] 8021q: adding VLAN 0 to HW filter on device team0
[  572.009161][T10702] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.017060][T10702] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.094497][T16531] Process accounting resumed
[  572.119461][T10702] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.127282][T10702] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.402766][T16433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.483077][T16433] veth0_vlan: entered promiscuous mode
[  572.515453][T16433] veth1_vlan: entered promiscuous mode
[  572.591531][T16433] veth0_macvtap: entered promiscuous mode
[  572.615475][T16433] veth1_macvtap: entered promiscuous mode
[  572.649615][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.688161][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.710616][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.723773][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.735048][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.756878][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.771197][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  572.810178][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.848818][T16433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.877153][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.898212][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.919726][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  572.958160][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  572.977063][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.005218][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.018177][T16433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  573.038108][T16433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  573.060505][T16433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.081443][T16433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.112087][T16433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.138243][T16433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.168416][T16433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.275942][T16433] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht'
[  573.368640][T10701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.380681][T16433] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht'
[  573.391265][T10701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.508216][T10701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  573.529335][T10701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.898245][ T5833] Bluetooth: hci2: command tx timeout
[  575.911719][T16595] FAULT_INJECTION: forcing a failure.
[  575.911719][T16595] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  575.988257][ T5833] Bluetooth: hci2: command tx timeout
[  576.006355][T16595] CPU: 1 UID: 0 PID: 16595 Comm: syz.2.2379 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  576.006395][T16595] Tainted: [U]=USER
[  576.006402][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  576.006415][T16595] Call Trace:
[  576.006422][T16595]  <TASK>
[  576.006430][T16595]  dump_stack_lvl+0x16c/0x1f0
[  576.006479][T16595]  should_fail_ex+0x497/0x5b0
[  576.006502][T16595]  ? fs_reclaim_acquire+0xae/0x150
[  576.006534][T16595]  should_fail_alloc_page+0xe7/0x130
[  576.006561][T16595]  prepare_alloc_pages.constprop.0+0x16f/0x560
[  576.006595][T16595]  __alloc_pages_noprof+0x18e/0x2470
[  576.006621][T16595]  ? stack_trace_save+0x95/0xd0
[  576.006653][T16595]  ? __pfx_stack_trace_save+0x10/0x10
[  576.006684][T16595]  ? stack_depot_save_flags+0x28/0x9e0
[  576.006707][T16595]  ? is_bpf_text_address+0x8a/0x1a0
[  576.006731][T16595]  ? __pfx_lock_release+0x10/0x10
[  576.006766][T16595]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  576.006789][T16595]  ? kasan_save_stack+0x42/0x60
[  576.006811][T16595]  ? kasan_save_track+0x14/0x30
[  576.006832][T16595]  ? __kmalloc_noprof+0x21a/0x4f0
[  576.006855][T16595]  ? copy_splice_read+0x1a8/0xb90
[  576.006883][T16595]  ? do_splice_read+0x282/0x370
[  576.006910][T16595]  ? splice_file_to_pipe+0x109/0x120
[  576.006940][T16595]  ? do_sendfile+0x3fd/0xe40
[  576.006968][T16595]  ? __x64_sys_sendfile64+0x1da/0x220
[  576.006992][T16595]  ? do_syscall_64+0xcd/0x250
[  576.007029][T16595]  alloc_pages_bulk_noprof+0x72b/0x10b0
[  576.007059][T16595]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  576.007087][T16595]  ? __kmalloc_noprof+0x23b/0x4f0
[  576.007110][T16595]  ? copy_splice_read+0x1a8/0xb90
[  576.007140][T16595]  copy_splice_read+0x1e3/0xb90
[  576.007170][T16595]  ? trace_lock_acquire+0x14e/0x1f0
[  576.007190][T16595]  ? __pfx_copy_splice_read+0x10/0x10
[  576.007221][T16595]  ? __pfx___mutex_lock+0x10/0x10
[  576.007251][T16595]  ? __fget_files+0x1fc/0x3a0
[  576.007275][T16595]  ? lock_acquire+0x2f/0xb0
[  576.007299][T16595]  ? __fget_files+0x40/0x3a0
[  576.007318][T16595]  ? __pfx_copy_splice_read+0x10/0x10
[  576.007347][T16595]  do_splice_read+0x282/0x370
[  576.007377][T16595]  splice_file_to_pipe+0x109/0x120
[  576.007409][T16595]  do_sendfile+0x3fd/0xe40
[  576.007441][T16595]  ? __pfx_do_sendfile+0x10/0x10
[  576.007471][T16595]  ? __fget_files+0x206/0x3a0
[  576.007493][T16595]  __x64_sys_sendfile64+0x1da/0x220
[  576.007517][T16595]  ? ksys_write+0x1ba/0x250
[  576.007548][T16595]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  576.007573][T16595]  ? rcu_is_watching+0x12/0xc0
[  576.007604][T16595]  ? rcu_is_watching+0x12/0xc0
[  576.007635][T16595]  do_syscall_64+0xcd/0x250
[  576.007663][T16595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.007693][T16595] RIP: 0033:0x7f8e9438cd29
[  576.007710][T16595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.007732][T16595] RSP: 002b:00007f8e9525d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  576.007760][T16595] RAX: ffffffffffffffda RBX: 00007f8e945a5fa0 RCX: 00007f8e9438cd29
[  576.007775][T16595] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[  576.007788][T16595] RBP: 00007f8e9525d090 R08: 0000000000000000 R09: 0000000000000000
[  576.007801][T16595] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001
[  576.007814][T16595] R13: 0000000000000000 R14: 00007f8e945a5fa0 R15: 00007ffda9ad88e8
[  576.007835][T16595]  </TASK>
[  576.917647][T16603] caif:caif_disconnect_client(): nothing to disconnect
[  577.741018][T16613] caif:caif_disconnect_client(): nothing to disconnect
[  577.962157][T16619] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2386'.
[  578.083849][T16606] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  578.091323][T16606] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  578.098627][T16606] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  578.105405][T16606] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  578.112156][T16606] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  578.270021][T16606] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  579.051371][T16656] FAULT_INJECTION: forcing a failure.
[  579.051371][T16656] name failslab, interval 1, probability 0, space 0, times 0
[  579.065364][T16656] CPU: 1 UID: 0 PID: 16656 Comm: syz.2.2396 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  579.065397][T16656] Tainted: [U]=USER
[  579.065405][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  579.065418][T16656] Call Trace:
[  579.065424][T16656]  <TASK>
[  579.065432][T16656]  dump_stack_lvl+0x16c/0x1f0
[  579.065464][T16656]  should_fail_ex+0x497/0x5b0
[  579.065487][T16656]  ? fs_reclaim_acquire+0xae/0x150
[  579.065520][T16656]  should_failslab+0xc2/0x120
[  579.065546][T16656]  __kmalloc_noprof+0xce/0x4f0
[  579.065570][T16656]  ? tomoyo_realpath_from_path+0xbf/0x710
[  579.065595][T16656]  tomoyo_realpath_from_path+0xbf/0x710
[  579.065619][T16656]  ? tomoyo_path_number_perm+0x235/0x5b0
[  579.065650][T16656]  tomoyo_path_number_perm+0x248/0x5b0
[  579.065680][T16656]  ? tomoyo_path_number_perm+0x235/0x5b0
[  579.065711][T16656]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  579.065742][T16656]  ? rcu_is_watching+0x12/0xc0
[  579.065776][T16656]  ? preempt_count_add+0x76/0x150
[  579.065807][T16656]  ? __pfx_lock_release+0x10/0x10
[  579.065832][T16656]  ? trace_lock_acquire+0x14e/0x1f0
[  579.065853][T16656]  ? __fget_files+0x40/0x3a0
[  579.065873][T16656]  ? lock_acquire+0x2f/0xb0
[  579.065897][T16656]  ? __fget_files+0x40/0x3a0
[  579.065918][T16656]  ? __fget_files+0x206/0x3a0
[  579.065939][T16656]  security_file_ioctl+0x9b/0x240
[  579.065972][T16656]  __x64_sys_ioctl+0xb7/0x200
[  579.066002][T16656]  do_syscall_64+0xcd/0x250
[  579.066031][T16656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.066061][T16656] RIP: 0033:0x7f8e9438cd29
[  579.066079][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.066100][T16656] RSP: 002b:00007f8e9525d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  579.066120][T16656] RAX: ffffffffffffffda RBX: 00007f8e945a5fa0 RCX: 00007f8e9438cd29
[  579.066134][T16656] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000017
[  579.066147][T16656] RBP: 00007f8e9525d090 R08: 0000000000000000 R09: 0000000000000000
[  579.066179][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.066192][T16656] R13: 0000000000000000 R14: 00007f8e945a5fa0 R15: 00007ffda9ad88e8
[  579.066220][T16656]  </TASK>
[  579.066229][T16656] ERROR: Out of memory at tomoyo_realpath_from_path.
[  579.374716][T16655] caif:caif_disconnect_client(): nothing to disconnect
[  579.498058][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  579.731305][T16667] caif:caif_disconnect_client(): nothing to disconnect
[  579.823074][T16671] FAULT_INJECTION: forcing a failure.
[  579.823074][T16671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  579.841576][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.2.2400 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  579.841611][T16671] Tainted: [U]=USER
[  579.841619][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  579.841631][T16671] Call Trace:
[  579.841637][T16671]  <TASK>
[  579.841645][T16671]  dump_stack_lvl+0x16c/0x1f0
[  579.841677][T16671]  should_fail_ex+0x497/0x5b0
[  579.841701][T16671]  _copy_to_user+0x32/0xd0
[  579.841727][T16671]  simple_read_from_buffer+0xd0/0x160
[  579.841758][T16671]  proc_fail_nth_read+0x198/0x270
[  579.841787][T16671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  579.841813][T16671]  ? security_file_permission+0x71/0x210
[  579.841843][T16671]  ? rw_verify_area+0xcf/0x680
[  579.841869][T16671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  579.841892][T16671]  vfs_read+0x1df/0xbf0
[  579.841919][T16671]  ? __fget_files+0x1fc/0x3a0
[  579.841937][T16671]  ? __pfx___mutex_lock+0x10/0x10
[  579.841961][T16671]  ? __pfx_vfs_read+0x10/0x10
[  579.841991][T16671]  ? __fget_files+0x206/0x3a0
[  579.842012][T16671]  ksys_read+0x12b/0x250
[  579.842038][T16671]  ? __pfx_ksys_read+0x10/0x10
[  579.842065][T16671]  ? rcu_is_watching+0x12/0xc0
[  579.842093][T16671]  ? rcu_is_watching+0x12/0xc0
[  579.842121][T16671]  do_syscall_64+0xcd/0x250
[  579.842146][T16671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.842174][T16671] RIP: 0033:0x7f8e9438b73c
[  579.842190][T16671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  579.842210][T16671] RSP: 002b:00007f8e9525d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  579.842230][T16671] RAX: ffffffffffffffda RBX: 00007f8e945a5fa0 RCX: 00007f8e9438b73c
[  579.842243][T16671] RDX: 000000000000000f RSI: 00007f8e9525d0a0 RDI: 0000000000000005
[  579.842255][T16671] RBP: 00007f8e9525d090 R08: 0000000000000000 R09: 0000000000000000
[  579.842267][T16671] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001
[  579.842279][T16671] R13: 0000000000000000 R14: 00007f8e945a5fa0 R15: 00007ffda9ad88e8
[  579.842299][T16671]  </TASK>
[  580.128970][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  580.135623][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[  580.142358][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  581.595465][T16707] caif:caif_disconnect_client(): nothing to disconnect
[  582.208120][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  583.314956][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'.
[  583.460885][T16743] caif:caif_disconnect_client(): nothing to disconnect
[  584.154686][T16746] zswap: compressor  not available
[  584.288182][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  584.648298][T16770] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2428'.
[  584.869975][T16777] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2429'.
[  586.494614][T16792] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  586.523292][T16792] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  586.558870][T16792] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  586.565555][T16792] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  587.728058][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  588.479280][T16807] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2437'.
[  588.528247][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  588.607049][T16812] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2440'.
[  588.618322][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  588.624975][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout
[  588.933310][T16824] ubi0: attaching mtd0
[  588.939291][T16824] ubi0: scanning is finished
[  588.954669][T16824] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  589.378538][T16824] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  589.814160][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2446'.
[  589.886363][T16845] caif:caif_disconnect_client(): nothing to disconnect
[  590.243516][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'.
[  590.774184][T16870] caif:caif_disconnect_client(): nothing to disconnect
[  591.152763][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2457'.
[  591.324973][T16883] caif:caif_disconnect_client(): nothing to disconnect
[  592.725785][T16928] caif:caif_disconnect_client(): nothing to disconnect
[  593.590559][T16956] caif:caif_disconnect_client(): nothing to disconnect
[  594.003972][T16964] caif:caif_disconnect_client(): nothing to disconnect
[  594.743972][T16963] caif:caif_disconnect_client(): nothing to disconnect
[  594.891339][T16980] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2486'.
[  595.590014][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  595.896382][T17007] FAULT_INJECTION: forcing a failure.
[  595.896382][T17007] name failslab, interval 1, probability 0, space 0, times 0
[  595.919316][T17007] CPU: 1 UID: 0 PID: 17007 Comm: syz.1.2495 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  595.919358][T17007] Tainted: [U]=USER
[  595.919366][T17007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  595.919381][T17007] Call Trace:
[  595.919388][T17007]  <TASK>
[  595.919397][T17007]  dump_stack_lvl+0x16c/0x1f0
[  595.919437][T17007]  should_fail_ex+0x497/0x5b0
[  595.919462][T17007]  ? fs_reclaim_acquire+0xae/0x150
[  595.919496][T17007]  should_failslab+0xc2/0x120
[  595.919535][T17007]  kmem_cache_alloc_lru_noprof+0x73/0x3b0
[  595.919562][T17007]  ? __x64_sys_eventfd+0x32/0x50
[  595.919588][T17007]  ? __d_alloc+0x35/0x8c0
[  595.919615][T17007]  __d_alloc+0x35/0x8c0
[  595.919640][T17007]  d_alloc_pseudo+0x1c/0xc0
[  595.919671][T17007]  alloc_file_pseudo+0xd2/0x200
[  595.919699][T17007]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  595.919727][T17007]  ? alloc_fd+0x41f/0x760
[  595.919747][T17007]  ? __pfx_lock_release+0x10/0x10
[  595.919775][T17007]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  595.919809][T17007]  __anon_inode_getfile+0x136/0x3c0
[  595.919842][T17007]  ? _raw_spin_unlock+0x28/0x50
[  595.919867][T17007]  ? __pfx___anon_inode_getfile+0x10/0x10
[  595.919904][T17007]  do_eventfd+0x199/0x2f0
[  595.919929][T17007]  __x64_sys_eventfd+0x32/0x50
[  595.919954][T17007]  do_syscall_64+0xcd/0x250
[  595.919980][T17007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.920010][T17007] RIP: 0033:0x7f001398cd29
[  595.920027][T17007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  595.920049][T17007] RSP: 002b:00007f001471b038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c
[  595.920072][T17007] RAX: ffffffffffffffda RBX: 00007f0013ba5fa0 RCX: 00007f001398cd29
[  595.920088][T17007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  595.920103][T17007] RBP: 00007f0013a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  595.920118][T17007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.920133][T17007] R13: 0000000000000000 R14: 00007f0013ba5fa0 R15: 00007fffeded42a8
[  595.920157][T17007]  </TASK>
[  595.923377][T17005] caif:caif_disconnect_client(): nothing to disconnect
[  596.293324][T17011] caif:caif_disconnect_client(): nothing to disconnect
[  596.551622][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'.
[  596.832768][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2503'.
[  596.994477][T17057] caif:caif_disconnect_client(): nothing to disconnect
[  597.579866][T17070] FAULT_INJECTION: forcing a failure.
[  597.579866][T17070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.616324][T17070] CPU: 0 UID: 0 PID: 17070 Comm: syz.1.2511 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  597.616363][T17070] Tainted: [U]=USER
[  597.616370][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  597.616383][T17070] Call Trace:
[  597.616390][T17070]  <TASK>
[  597.616398][T17070]  dump_stack_lvl+0x16c/0x1f0
[  597.616430][T17070]  should_fail_ex+0x497/0x5b0
[  597.616456][T17070]  _copy_to_user+0x32/0xd0
[  597.616484][T17070]  simple_read_from_buffer+0xd0/0x160
[  597.616517][T17070]  proc_fail_nth_read+0x198/0x270
[  597.616544][T17070]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.616572][T17070]  ? security_file_permission+0x71/0x210
[  597.616607][T17070]  ? rw_verify_area+0xcf/0x680
[  597.616636][T17070]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.616663][T17070]  vfs_read+0x1df/0xbf0
[  597.616694][T17070]  ? __fget_files+0x1fc/0x3a0
[  597.616714][T17070]  ? __pfx___mutex_lock+0x10/0x10
[  597.616742][T17070]  ? __pfx_vfs_read+0x10/0x10
[  597.616776][T17070]  ? __fget_files+0x206/0x3a0
[  597.616800][T17070]  ksys_read+0x12b/0x250
[  597.616831][T17070]  ? __pfx_ksys_read+0x10/0x10
[  597.616862][T17070]  ? rcu_is_watching+0x12/0xc0
[  597.616894][T17070]  ? rcu_is_watching+0x12/0xc0
[  597.616926][T17070]  do_syscall_64+0xcd/0x250
[  597.616955][T17070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.616986][T17070] RIP: 0033:0x7f001398b73c
[  597.617003][T17070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  597.617025][T17070] RSP: 002b:00007f001471b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  597.617046][T17070] RAX: ffffffffffffffda RBX: 00007f0013ba5fa0 RCX: 00007f001398b73c
[  597.617062][T17070] RDX: 000000000000000f RSI: 00007f001471b0a0 RDI: 0000000000000004
[  597.617075][T17070] RBP: 00007f001471b090 R08: 0000000000000000 R09: 0000000000000000
[  597.617089][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.617102][T17070] R13: 0000000000000000 R14: 00007f0013ba5fa0 R15: 00007fffeded42a8
[  597.617123][T17070]  </TASK>
[  598.331281][T17081] zswap: compressor  not available
[  598.359058][T17089] FAULT_INJECTION: forcing a failure.
[  598.359058][T17089] name failslab, interval 1, probability 0, space 0, times 0
[  598.398828][T17089] CPU: 1 UID: 0 PID: 17089 Comm: syz.6.2517 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  598.398866][T17089] Tainted: [U]=USER
[  598.398873][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  598.398886][T17089] Call Trace:
[  598.398893][T17089]  <TASK>
[  598.398900][T17089]  dump_stack_lvl+0x16c/0x1f0
[  598.398933][T17089]  should_fail_ex+0x497/0x5b0
[  598.398956][T17089]  ? fs_reclaim_acquire+0xae/0x150
[  598.398988][T17089]  should_failslab+0xc2/0x120
[  598.399012][T17089]  __kmalloc_cache_noprof+0x68/0x420
[  598.399033][T17089]  ? mutex_lock_io_nested+0x891/0x8e0
[  598.399060][T17089]  ? __kvmalloc_node_noprof+0xad/0x1a0
[  598.399084][T17089]  gpiolib_seq_start+0x69/0x270
[  598.399113][T17089]  traverse.part.0.constprop.0+0xac/0x640
[  598.399143][T17089]  ? __pfx_lock_release+0x10/0x10
[  598.399173][T17089]  seq_read_iter+0x934/0x12b0
[  598.399203][T17089]  ? aa_file_perm+0x4d5/0xfe0
[  598.399227][T17089]  seq_read+0x39f/0x4e0
[  598.399255][T17089]  ? lock_release+0x4e2/0x6f0
[  598.399278][T17089]  ? __pfx_seq_read+0x10/0x10
[  598.399305][T17089]  ? trace_lock_acquire+0x14e/0x1f0
[  598.399327][T17089]  ? __debugfs_file_get+0x43d/0x5d0
[  598.399359][T17089]  ? apparmor_file_permission+0x251/0x400
[  598.399391][T17089]  full_proxy_read+0xfd/0x1b0
[  598.399419][T17089]  ? __pfx_full_proxy_read+0x10/0x10
[  598.399448][T17089]  vfs_read+0x1df/0xbf0
[  598.399479][T17089]  ? __fget_files+0x1fc/0x3a0
[  598.399498][T17089]  ? __pfx_lock_release+0x10/0x10
[  598.399522][T17089]  ? __pfx_vfs_read+0x10/0x10
[  598.399560][T17089]  ? __fget_files+0x40/0x3a0
[  598.399578][T17089]  ? lock_acquire+0x2f/0xb0
[  598.399601][T17089]  ? __fget_files+0x40/0x3a0
[  598.399621][T17089]  ? __fget_files+0x206/0x3a0
[  598.399644][T17089]  __x64_sys_pread64+0x1f6/0x250
[  598.399665][T17089]  ? __pfx___x64_sys_pread64+0x10/0x10
[  598.399686][T17089]  ? rcu_is_watching+0x12/0xc0
[  598.399717][T17089]  ? rcu_is_watching+0x12/0xc0
[  598.399749][T17089]  do_syscall_64+0xcd/0x250
[  598.399778][T17089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.399808][T17089] RIP: 0033:0x7f6ce898cd29
[  598.399825][T17089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.399847][T17089] RSP: 002b:00007f6ce97f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  598.399868][T17089] RAX: ffffffffffffffda RBX: 00007f6ce8ba5fa0 RCX: 00007f6ce898cd29
[  598.399883][T17089] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  598.399896][T17089] RBP: 00007f6ce97f8090 R08: 0000000000000000 R09: 0000000000000000
[  598.399909][T17089] R10: 000000000000050c R11: 0000000000000246 R12: 0000000000000001
[  598.399922][T17089] R13: 0000000000000000 R14: 00007f6ce8ba5fa0 R15: 00007ffe490a6aa8
[  598.399942][T17089]  </TASK>
[  598.400249][T17089] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
[  598.714596][T17089] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  598.723838][T17089] CPU: 1 UID: 0 PID: 17089 Comm: syz.6.2517 Tainted: G     U             6.13.0-syzkaller-07048-gae8b53aac327 #0
[  598.736905][T17089] Tainted: [U]=USER
[  598.741070][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  598.752118][T17089] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0
[  598.758124][T17089] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b
[  598.779684][T17089] RSP: 0018:ffffc90003547a58 EFLAGS: 00010247
[  598.786347][T17089] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88806f065390
[  598.795104][T17089] RDX: 0000000000000000 RSI: ffffffff84f075ee RDI: 0000000000000004
[  598.803863][T17089] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff
[  598.812619][T17089] R10: ffffffff8e380993 R11: 0000000000000001 R12: ffffffff8bd69880
[  598.821382][T17089] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90003547c40
[  598.830137][T17089] FS:  00007f6ce97f86c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  598.839953][T17089] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  598.847186][T17089] CR2: 00007f0942c04000 CR3: 000000005a802000 CR4: 00000000003526f0
[  598.855949][T17089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  598.864706][T17089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  598.873463][T17089] Call Trace:
[  598.877059][T17089]  <TASK>
[  598.880274][T17089]  ? die_addr+0x3b/0xa0
[  598.884848][T17089]  ? exc_general_protection+0x155/0x230
[  598.890952][T17089]  ? asm_exc_general_protection+0x26/0x30
[  598.897255][T17089]  ? gpiolib_seq_stop+0xe/0xe0
[  598.902498][T17089]  ? gpiolib_seq_stop+0x4c/0xe0
[  598.907826][T17089]  ? gpiolib_seq_stop+0xe/0xe0
[  598.913059][T17089]  traverse.part.0.constprop.0+0x2bd/0x640
[  598.919455][T17089]  ? __pfx_lock_release+0x10/0x10
[  598.924982][T17089]  seq_read_iter+0x934/0x12b0
[  598.930133][T17089]  ? aa_file_perm+0x4d5/0xfe0
[  598.935273][T17089]  seq_read+0x39f/0x4e0
[  598.939839][T17089]  ? lock_release+0x4e2/0x6f0
[  598.944977][T17089]  ? __pfx_seq_read+0x10/0x10
[  598.950123][T17089]  ? trace_lock_acquire+0x14e/0x1f0
[  598.955830][T17089]  ? __debugfs_file_get+0x43d/0x5d0
[  598.961555][T17089]  ? apparmor_file_permission+0x251/0x400
[  598.968036][T17089]  full_proxy_read+0xfd/0x1b0
[  598.973179][T17089]  ? __pfx_full_proxy_read+0x10/0x10
[  598.978988][T17089]  vfs_read+0x1df/0xbf0
[  598.983583][T17089]  ? __fget_files+0x1fc/0x3a0
[  598.988727][T17089]  ? __pfx_lock_release+0x10/0x10
[  598.994253][T17089]  ? __pfx_vfs_read+0x10/0x10
[  598.999396][T17089]  ? __fget_files+0x40/0x3a0
[  599.004530][T17089]  ? lock_acquire+0x2f/0xb0
[  599.009481][T17089]  ? __fget_files+0x40/0x3a0
[  599.014520][T17089]  ? __fget_files+0x206/0x3a0
[  599.019662][T17089]  __x64_sys_pread64+0x1f6/0x250
[  599.025085][T17089]  ? __pfx___x64_sys_pread64+0x10/0x10
[  599.031083][T17089]  ? rcu_is_watching+0x12/0xc0
[  599.036360][T17089]  ? rcu_is_watching+0x12/0xc0
[  599.041602][T17089]  do_syscall_64+0xcd/0x250
[  599.046553][T17089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.053041][T17089] RIP: 0033:0x7f6ce898cd29
[  599.057889][T17089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  599.079459][T17089] RSP: 002b:00007f6ce97f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  599.088714][T17089] RAX: ffffffffffffffda RBX: 00007f6ce8ba5fa0 RCX: 00007f6ce898cd29
[  599.097479][T17089] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  599.106238][T17089] RBP: 00007f6ce97f8090 R08: 0000000000000000 R09: 0000000000000000
[  599.114994][T17089] R10: 000000000000050c R11: 0000000000000246 R12: 0000000000000001
[  599.123751][T17089] R13: 0000000000000000 R14: 00007f6ce8ba5fa0 R15: 00007ffe490a6aa8
[  599.132537][T17089]  </TASK>
[  599.135854][T17089] Modules linked in:
[  599.141231][T17089] ---[ end trace 0000000000000000 ]---
[  599.178097][T17089] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0
[  599.228280][T17089] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b
[  599.295572][T17089] RSP: 0018:ffffc90003547a58 EFLAGS: 00010247
[  599.302821][T17089] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88806f065390
[  599.313813][T17089] RDX: 0000000000000000 RSI: ffffffff84f075ee RDI: 0000000000000004
[  599.327196][T17089] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff
[  599.337813][T17089] R10: ffffffff8e380993 R11: 0000000000000001 R12: ffffffff8bd69880
[  599.346974][T17089] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90003547c40
[  599.363989][T17089] FS:  00007f6ce97f86c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  599.376621][T17089] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  599.384287][T17089] CR2: 00007f0013b79178 CR3: 000000005a802000 CR4: 00000000003526f0
[  599.393484][T17089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  599.402924][T17089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  599.411972][T17089] Kernel panic - not syncing: Fatal exception
[  599.418792][T17089] Kernel Offset: disabled
[  599.423562][T17089] Rebooting in 86400 seconds..