last executing test programs:

1m46.437732354s ago: executing program 2 (id=243):
mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9)
socket(0xa, 0x2, 0x0)
r0 = pidfd_open$auto(0x0, 0x0)
setns(r0, 0x2000000)
ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1001}, 0x10003)
r4 = socket(0x1d, 0x5, 0x0)
syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
connect$auto(0x4, 0x0, 0x10)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b47, 0x1)
mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000180)="14768875e594b49cf4a2ec4aaa1934903cc8f8fc4df231eba334a9b0a4dc0ba48b7b5954df55c91a5ff71eae2ae6e42a5baa06732060699f8bde35e9904249e4ee797d656496c9a3c3a5ae2cea0cae015651b7d5e63cbd205e658b16bb16e1fddf21525f45380bd0d9677538d0a055f1b84ab70970320f6348530ca1ac814a7ff8cd26387f15d6dfa28d542bf4b6e0ce5137b84cf796bda9ad")
r6 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x2}, 0x6)
sendfile$auto(r6, 0xffffffffffffffff, 0x0, 0x2)

1m45.289280666s ago: executing program 2 (id=251):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
listen$auto(0x3, 0x81) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001) (async)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async)
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) (async)
write$auto(0x3, 0x0, 0x5c8)
ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f0000000080)={"a49d980a059fa15ab42df574526717a42787c7192a7e12417113edfa3556973a", 0xb, 0x7, 0x8, 0x9, 0x1000, <r5=>0xffffffffffffffff})
kcmp$auto_KCMP_SIGHAND(0xffffffffffffffff, r5, 0x4, 0x9, 0x5)

1m44.452125326s ago: executing program 2 (id=258):
r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x8]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x20000000002, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket(0x2, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0)
write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55)
shutdown$auto(0x200000003, 0x2)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0x7, 0x18, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64$auto(r4, 0x0, 0x200000000006, 0x8)
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
semtimedop$auto(0xf598, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)

1m43.437336241s ago: executing program 2 (id=264):
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/ports/2/pp_hold\x00', 0x440001, 0x0)
mmap$auto(0x100000000, 0xda0, 0xffff, 0xeb4, r0, 0x8000)
r1 = socket(0x38, 0x2, 0x3)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0)
ioctl$auto(r0, 0x7, r1)
ioctl$auto_CDROMCLOSETRAY(r2, 0x5319, &(0x7f0000000040))
r3 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
read$auto_sc_seq_fops_netdebug(r3, &(0x7f0000000180)=""/203, 0xcb)
ioctl$auto_SCSI_IOCTL_SYNC(r2, 0x4, &(0x7f0000000280)="29857ea7ba167969c826b8003993b55687690eaebb55a9ecdc59400259fc151ac7c9192a64e418d0529a8bda6a86d5c74b3d5a8979224610f72d1d6f2f280c567130c00dd8cb023e5af6bbc61aba36c1ddc717c0c41a57e79c3ddba37d0a1e82f08fa4ce3a0bec4bd5055edc177521d2594f9065bea40c96afd46e820e4933a57a460c16da6a2ecc19c8660c37886acfc8ced025e42b4b3d11e56fb564ea5e94c3a047ed209532eb3fd8698a3c116642f3c2caf31b5a14e97fee5fd126f887c0144a8d461395e71acbc2fa6f89bf4bb09ec3ee3d54c08582b8ae86abac7e84a78630911b6145bdab3a8b3b6337fa13478ee6f9c1aea8b0b2077445f79407ba398c482c6fa173cad0af4070bf241b453618171dd74daa22a1cfc5a328169136ec1d88fea6b368fcd7cd6c62a984dc18e0cff1215482cec26bb6b56d94c5ad07249f7806dd855b36e043249c73748916e57ee0305c60cb51409d460d220f3e0b63bbbfd7d736f12649c1fd8a517b0ce6cd2ab119033745deb53141189440b4c12f8030ad8e31e8a9d050e7fb2bfc04e2f7339b618290ad10b327e712fe8f53388ca95ea4438ee105f96f6726b55e8708b2a87aff2da6584d9ff6e180058f1f00db00def0bd076f1f9074883913181da26d70d9666c3993c4a56b98cec14901fd835d03afb7bdc6b05191e09175cd02eff6a1c928f85b81536bf21d47e3c513cffb47e6863d97e2424844c05c1fb2cc37a17faf3cb173e0345b913c7aae19fbb680ba1fbefe3adb7a014a07afa366a40b7960b58a3187a54e2f700a4bdad2f09c919ae0bdf2dc992e25527acb218ea578c8ffa970fae150407f9297b29f3abc3e3f6bfc88ea72da351a67564647b5c49593cdca6d932cdfde03a30100e34d9027ad9644dc7ee850153050bc1b831b157b0c6cdbba27b077f9a0fe6e572b54095b5428f4a83a4e93eb6aa9e3ad2db9c6151553c01f695ee6c9a2374a0ba4bf7c0af8414d493a3993a323a554bd987ab1f1592b9043ae611306ce64e30a475d4bc31cb37cf040d76860de6dd1a50549b4d0c5522d2994e30804c1360096f5602b96b297e8b7498d8e6c92445ba883f42c55c2bd12daa298abccc137a3918217398c4cec0df64f475afaff1d8bab046e64ab5543a85c13bfc05e32b0d1b35b22eb4c91aaf1d1ec77445088bbab6d83d5e5372a7893a26b9a8d4b36999771602849de05102b19116dab21f0bf0357d6ba80f2575688d4d595957b04df0b7e5dd8ebb1b21ccb7121fb28b6ac7005ab84bf6570f69fb8995e4cabbccce6be51e131223a1b8473b84082e7583cc59ae1cbb46beed934585009069fd489b1b705bc6cc529d1d42b97555b852f8a9fc29b86b0a64a35aa5b51817f1749d464bde9fe4d3be0728ad91e75970ae457b5600f074c3f43f6b815ff81eee71b88c580d0355982407924f671b775e80273295db6f47d68de3e2d97165da1db2d6274c56137a3f40856a0aecfe112b73c414970b7a9a0b9a6fd26527a30e20bff6598eb4cf5056be70958f36019d96f12ef134147805d12e1ed5ad3e92d6dcab042a6038f3396a4e07f11fed1394dddd58ff7f5b6242c60ea5eb54cdc8cf2a206b22c3ab270d27100ad7615860fb00f97c60c8faee502e4651168a6fdf8c6495826b6bbdf7d745cf70ad75caa75f87bd00e46b2dfe086a9eb3ac4f56e9990c366ead477391b87f2ab59d5bd43c3e33bba3bdff7feba810158f69b42bec3343a88d28c9fa6e916d854e07986d939d295489a9180400414c9484d4d4400cfed90abe2c50d8b6410a7936beb61504d14d952c56b72ae89fb6e9794394460cf9d3f8a39be3402767187601f8c76d150f144fed3b7325ddbe9944e33e6e45d30f41886a02454b814f563d65a791692519842ea6d373ef196aad531393781874322dd3049f0a937a7acf4c579d6111c77bbd95cf49e4e86845fec679e92eba169e51a9e0c338978ce5db9acd66cab9c24e7eca2243dd83e20d57dc64455d22846cf0f414797bfead1d04e7510033992743d16d114d2243eb563ac866f9e79c8450244b26aa5b812082965affc65de06dc45b2b326ee2b4ef39c7a4902e2aa92d8585f4099465e54d7a632b474c20c63b9ecebe6f8d83724654e86cef49812e526e58e622e59e36272274fe4cdc1058483b745cd707ca6d93fd0ff80c8c43c6a56ede863037c712f1a4e243f6cbfd199bb54cdc929fb5abab31cbbbd0a7bddf751673b196390a031aa17ca07d80c0559f53bd8703c00335b0454395a8f6f78978038b3cbafee07734b18eb4f5630a839fd2b245159a6a69db50f8a33f210ec6fbd52e93bd1b9ff8629796742074d61cdb321215be87deb33198704b7d329e6db7f2fe7523b108ace448cbd871e37b5eb02b5e2fe5489df4048e3b23bd0e3ed66003fee5977176157d559442c986e6fb31622d8d3a95f5cdc3f6813c46449426af97e4b64e061a09b20659c27c01868b943e8f0254d28f54457bb0b431c1bc005290245129cb4b7b499c14691a6514388dda2b69ca9e138c3e81b1289a8c2309f15461e2fa2e7b6c260327b58568507ff4e91a72443fa7a2bb01ca71bdbaf7e94cef6dd9f55c9a243d18b709c36905517c9e7b0d5abe4d1a445736017541d0dd54786e6ba35498b986cabe8a446f0bfc6ab5a8a7936229c906fbab07f899a9177d63cb55e0f8ea91c0f3d6faabf68e23d610251bcf20317db6fbec79b29ecab91c2cca7c27f3c35ff287d5e5e30e9bb3874c21a5489790120781abef7bea0bff80de0e52beffdc086ec3da82b11e2ff6422d99ce2f8c59de6b7c1c0e3bf840fd99830c1e50733d82a3af915ea300fe56751e5206fa2b89fc0719e2be07d9241af89522a37bd0d13c714a5311b4755ae354340d459e4c1f36c174648b52f1f19888a2154204261f341ec4ecb0eef87c90ce5c8fa451ecd36aa5edb7c7e3b0018e058add2406ba24f52d1e2d01cdee8123781b9dcd6778dee07925759653549757bfc584adf2e8e4643cb95572dd95aa2908d8c545737db22cb686b2cb168825b16b393bd8ef5a751b6df94fa1c3f5a344dcca406df5a69485c39cbfa7a259c6033a59c1bb54d9335c1f339c59fa82f46a0cc9a3ce3c2b398395461d7edcda9803c70288dc94390ec4d386369142766d9bd2432313fd2969b769576709a3bfe51bdb70b156d9cf84cc75f1f04c8302051c3faba8ba962f266f1b23eb0e81317eb649639375b7f2c87e44d2e254a18327e43646b517ec09c4d5caac6e001ff34bcae7431994c704619c8c65b73e1249fd32fab63f5fe809f3e33aa00122f5732f1c28b302cdaa6be69560ffb033c96a3ba5cc848d21f6960e6a60ddd26ec379eee3c3ac6cc798a2f4188c9d8e900b678d1531eb3f5f3c067512e5fde1f00ef09fab8d6abbcf63fee9e83fee3c482377082aaa85ab8018970d302d286afd6cbbdef0243a9445ca9fcad19e7aa67300b7bb32a1b5572c6991f377b3554511abdb5048d26b355722d4e4b04e53c061edd8d6f2b97fba1c3ecdf215b08e8e3f2afb9deb0f9da9041cd7bb3abb304212f031d3bb3bf08c80871b3d4bb8626ba2db4dbb11390a17c0ae697f28f6e109ce1d2cf4f6026b18dc1d5814cfffe0b25e4ead82b8c234a96407c8122399952f2f2e3ff99de87101491120e2cd08a863e326533786b5f6c48fc3158ca792cbfeb433f3d9943a7aca0cf93467fdaf43adc80cfd75343aef280902c7d27fa4c3ef86d42e5d3317c0f20b03a7e9c59cf128e1920cf015c7473d43854b4a83e7d2aed0e87b816df80d1f0dac37598fc5e7b62ff834f51db577a9b23a3d9c2a5e5a3a28dbedef570bc1f80bce998043f71410f9d7980f7af826535a054df6303108d812b745f4691197a0b8d4d4f1ab47011ed6fa039a323bf558a976b3e9500ef0205224ce306aa5500b9eaab16d7ec76ad7f47cb6451e04fdbbd159ba675c7f54cc6635cfa7c7eaecc853fbe7fd146f146fe6a8b520cc088b47ad152c1cf856367204c4ac4954fbe558a68d718f7b7b00aed2df035bc50e99d7db08a5ed68bef8f4f6f52b7f77225eb16aaef98497cb8dda8ff5a2aa1307cdf0820fb1a2acc081a84f4b34d1bb7af0071412c79dad2c12c40f8a2fe944762155b91f7534662b542f4b2b8f3ffadbf6a7154d793e7523e8f5a4440797aa110adab97982ccca8f762b8f8a33eab1a232a9a05848980d0820b8fda2cac1a303788990aeb2b20ce175b41c5154ad415637858f508a60ec3e12f8e70346e171d3cd5704a7bebd21897349424e023e34b7e785613073e4068869fd8d1e03be54954995d63e75830bf96dede8ac27e8e6c36c1a15634d321ab1b466683196187a232033eb28e0a83b782f764dcf8fb7ea3bc297867b0731dd76e465acf0629758f294f9658e48ac4abbcd239f14b2ce87c58b2a5ef645e195db2aabc034b04ca8714a2f6fc42e127b88d54be7aceaa8bc8e10aa1dda2481a28d82dfe6fccdeda3f014641eec24fb37425b31e23f73bdc1b5876a76d9f2324d1e9f47559e6305e5f190767a3ada10c141229d29982dabc224eb17c3fdd1806c1e3d4e287d0f6825a0da4bbc783ac84cc0f7b79d1bfffde963f5839d3888885efe0a674619517a6488837b0adaab0e48beecf3d16294b4e97ee2daf34c013e83194f934187431fe3bc6199bf9eccae4250b292d97afd6aca168d45546fbeb97a200a67b580bb92e11d26b62f63698d631389d71dbe25ff2a01d3d908c01a8bef4c86f6705159b1e3ef946c0e3a546730dda7369a6b20cd4ca8fe33a416ebb763a583b1904569c0c385716c74195da260fa9780d19fec783795499e1b47b142718fe8bbf49cddb6a137c5cdbf39f72ce7d90f87a4934622e98948bae1807ba06647e13e10f59")
r4 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x193082, 0x0)
read$auto_bridges_fops_(r4, &(0x7f00000012c0), 0x0)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001300), 0x80001, 0x0)
ioctl$auto_RTC_AIE_ON(r5, 0x7001, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001340)='/dev/bus/usb/035/001\x00', 0x44c081, 0x0)
mremap$auto(0xe, 0x4, 0x0, 0xb, 0x5)
r6 = prctl$auto_PR_SET_MM_BRK(0x9, 0x7, 0x0, 0x7, 0x1)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000013c0), 0xffffffffffffffff)
waitid$auto(0x6, 0xffffffffffffffff, &(0x7f0000001400)={@siginfo_0_0={0x1, 0x1, 0x1000, @_timer={0x0, 0x7, @sival_int=0x7f, 0xf}}}, 0x7, &(0x7f0000001480)={{0x7fffffffffffffff, 0x9}, {0x2, 0x6}, 0x52, 0x6, 0x6, 0x3, 0x100000000, 0x9, 0x6, 0x7, 0x8, 0xe, 0x4, 0x2, 0x7, 0x6})
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001540)='/proc/thread-self/fail-nth\x00', 0x400000, 0x0)
shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f0000001700)={{0x37, 0x0, 0xee01, 0x9, 0x5, 0xa9d0a7e, 0x9}, 0x8, 0x3, 0x5, 0x81, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001580)="0396fe885fd2b1ebddc5f5c20bdf4b343c4ffcf5673bed145e3a8d8adb8319042dc0d9bc63cfbef1a9fa9b43f93285adb8e9a020c8a502867a3cba46fca6d290e3dfc19c42", &(0x7f0000001600)="7dd79de44cf1440de25f34295a46a1f8c5cdf0f00189b06c0432334d4066d0efed5cb8f098848b8cd89d078edf5bcdde38ac6a70462e43ccc509448d6c3aed229ef1594b6613598e0894d42a27014f1a9ae8e58ad7d197b91ab4f3e596cfab4b731dda8e0053382c249e57ab50e1aebe90a09932d359e85da8de26ad6b9ffd24382d017702a1647772d3550aab3749d886ed5005a5adf0de1f0f2c6e680fad8e462e88085e23e3ae754b8af5cdf350fcc74a08155590a8dc50e33aeda5c7152b3232cbb94e15c7dac97d66889e9c5d5bf42f8e"})
msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000001800)={{0x5, 0xee01, 0xee01, 0x8, 0x5, 0x6, 0x8}, &(0x7f0000001780)=0x81, &(0x7f00000017c0)=0x6, 0x0, 0x5, 0x4, 0x7ff, 0x5, 0x5, 0x9, 0x2c61, @raw=0xa3, @raw=0x4})
getpgrp(0x0)
r8 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/tracing/current_tracer\x00', 0x400000, 0x0)
syz_clone(0x80000, &(0x7f00000018c0)="e394ac24353db77cadab198c1c4df2e54406a59a05c7343a3fbc9f255d04c0416e2752323fe47c2c4d92b07e176729be7957dc7badb73a538561780798804617b2fb43d9d2b0e464277427f1f006b3b818e550d08bf9efe3", 0x58, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)="2487f142c701e2a2db5e6403c3f25f324631e89af02b7a797f0553900b63c79cb3962ad1e5ad4785dc494939c8783d2293988b9178")
process_mrelease$auto(r7, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000034c0)={'macvlan1\x00', <r9=>0x0})
r10 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000003500)=@bpf_attr_7={@btf_id=0x11, 0x28bc, 0x2, r2}, 0xfffff000)
bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000035c0)=@bpf_attr_3={0x0, 0x4, 0x2, 0x2bae, 0x2, 0x458, 0x10001, 0x0, 0xa45, "64d1cf728fd42d769994532e79ca2bec", r9, 0x7, r10, 0x71, 0x9, 0x6, 0xffffff37, 0x4, 0x2, 0xa9f, @attach_btf_obj_fd=r4, 0x1, 0x7, 0x7ff, 0x8, 0x10001, 0xffffffffffffffff, r8}, 0x4)
setsockopt$auto_SO_TYPE(r6, 0x8, 0x3, 0x0, 0x40000)
openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000036c0), 0x200, 0x0)

1m43.166394644s ago: executing program 2 (id=267):
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
socket(0x21, 0x809, 0xf)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/version\x00', 0x40, 0x0)
socket(0xf, 0xa, 0x1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x11, 0x3, 0x9)
close_range$auto(0x2, r1, 0x0)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4)
sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, 0x0, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x7, 0x100)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/mode\x00', 0x181002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

1m42.74512314s ago: executing program 2 (id=270):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x2000e080)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x4682c0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
mmap$auto(0x40, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x0) (async)
mmap$auto(0x40, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
sendfile$auto(0x1, r0, 0x0, 0x8fb5)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
ioctl$auto(0x3, 0x5760, 0x10000000000402)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x80000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x3, 0x2000000000000007, 0x8000000008011, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x400, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x200, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa}, 0x8000, 0x0, 0x6)
mmap$auto(0x100, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x100, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

1m27.264071011s ago: executing program 32 (id=270):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x2000e080)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x4682c0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
mmap$auto(0x40, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x0) (async)
mmap$auto(0x40, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
sendfile$auto(0x1, r0, 0x0, 0x8fb5)
dup2$auto(0x0, 0x3) (async)
dup2$auto(0x0, 0x3)
ioctl$auto(0x3, 0x5760, 0x10000000000402)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x80000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x3, 0x2000000000000007, 0x8000000008011, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x0, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x400, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x200, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa}, 0x8000, 0x0, 0x6) (async)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0xa}, 0x8000, 0x0, 0x6)
mmap$auto(0x100, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x100, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)

7.878903334s ago: executing program 1 (id=704):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0)
sendfile$auto(r3, r2, 0x0, 0x800)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r4, 0x401)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
poll$auto(&(0x7f0000000180)={r5, 0xfff7, 0x9816}, 0x7f, 0x9)
r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2)
ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0))
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x2)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0)
splice$auto(r7, &(0x7f0000000040)=0x7, r6, &(0x7f0000000080)=0x4, 0x26c4, 0x895)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9)

6.538053073s ago: executing program 4 (id=706):
mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9)
socket(0xa, 0x2, 0x0)
r0 = pidfd_open$auto(0x0, 0x3)
setns(r0, 0x2000000)
ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0)
mmap$auto(0x2000000, 0x20009, 0x4000000000e0, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x0)
setsockopt$auto_SO_RCVTIMEO_OLD(r2, 0xfadc, 0x14, &(0x7f0000000040)='/dev/tty12\x00', 0xc)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1001}, 0x10003)
r5 = socket(0x1d, 0x5, 0x0)
syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fb, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
connect$auto(0x4, 0x0, 0x10)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r6, 0x4b47, 0x1)
mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)="14768875e594b49cf4a2ec4aaa1934903cc8f8fc4df231eba334a9b0a4dc0ba48b7b5954df55c91a5ff71eae2ae6e42a5baa06732060699f8bde35e9904249e4ee797d656496c9a3c3a5ae2cea0cae015651b7d5e63cbd205e658b16bb16e1fddf21525f45380bd0d9677538d0a055f1b84ab70970320f6348530ca1ac814a7ff8cd26387f15d6dfa28d542bf4b6e0ce5137b84cf796bda9ad")
r7 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6)
sendfile$auto(r7, 0xffffffffffffffff, 0x0, 0x2)

6.388035023s ago: executing program 0 (id=707):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0)
sendfile$auto(r3, r2, 0x0, 0x800)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r4, 0x401)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
poll$auto(&(0x7f0000000180)={r5, 0xfff7, 0x9816}, 0x7f, 0x9)
r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2)
ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0))
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x2)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0)
splice$auto(r7, &(0x7f0000000040)=0x7, r6, &(0x7f0000000080)=0x4, 0x26c4, 0x895)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9)

5.72988913s ago: executing program 0 (id=709):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@in={0x2, 0x300, @local}, 0x7)
r0 = io_uring_setup$auto(0x6, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x8, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/usbtmc/unbind\x00', 0x103000, 0x0)
write$auto(r1, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0)
sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES32=r2, @ANYBLOB="01002dbd7000fbdbdf253c185b3f74000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x800)
r3 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0x2b, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0xfffffffffffffffe, 0x8, 0xdf, 0xeb1, 0x401, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
pwrite64$auto(r3, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)

5.574883864s ago: executing program 1 (id=711):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0xf, 0x801, 0x1)
setsockopt$auto_SO_RCVBUFFORCE(r1, 0x1000, 0x21, &(0x7f0000000080)='$\x00', 0xffff)
fstatfs$auto(0x3, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
fsconfig$auto(r2, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.1GB.rsvd.usage_in_bytes\x00', 0xe0244, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/21, 0x15)
r4 = fcntl$auto_F_GETOWN(r2, 0x9, 0x4)
r5 = prctl$auto(0x3e, 0xfffffffffffffffd, r4, 0x81, 0x0)
mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe)
ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r5, 0x4008bc0d, 0x0)
setreuid$auto(0xee01, 0x0)
keyctl$auto(0x5, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), r6)
sendmsg$auto_HWSIM_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2c004050}, 0x8000)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r5, 0x8000)
preadv$auto(r0, &(0x7f0000000240)={&(0x7f0000000200), 0x8}, 0x8, 0x8, 0x5)

5.429341563s ago: executing program 4 (id=712):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001580)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/byte_queue_limits/limit_max\x00', 0x2001, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x3)

5.412044301s ago: executing program 3 (id=713):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0)
sendfile$auto(r3, r2, 0x0, 0x800)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r4, 0x401)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
poll$auto(&(0x7f0000000180)={<r6=>r5, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2)
ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0))
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x2)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0)
splice$auto(r7, &(0x7f0000000040)=0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x26c4, 0x895)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9)

5.057075282s ago: executing program 4 (id=714):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x40000083, 0x400, 0xfffffffffffffffb}]})
r2 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x121100, 0x0)
mmap$auto(0x0, 0x400005, 0x6, 0x9b72, r2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xb4d3)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0x8000000)
read$auto(0xffffffffffffffff, 0x0, 0x20)

4.817602935s ago: executing program 0 (id=715):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0)
sendfile$auto(r3, r2, 0x0, 0x800)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r4, 0x401)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2)
ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0))
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x2)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0)
splice$auto(r7, &(0x7f0000000040)=0x7, r6, &(0x7f0000000080)=0x4, 0x26c4, 0x895)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9)

4.692126998s ago: executing program 1 (id=716):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800)
timer_create$auto(0x9, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
ioctl$auto(0x4000000000000c8, 0x400454c8, 0x6f)
unshare$auto(0x0)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf"})
process_mrelease$auto(0xffffffffffffffff, 0xa)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f)

4.158127999s ago: executing program 0 (id=717):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon20\x00', 0x60501, 0x0)
ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0)
listmount$auto(0x0, 0x0, 0xfffffffffffffff9, 0x0)
r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0)
writev$auto(r3, 0x0, 0x3)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0)
unshare$auto(0x40000080)
times$auto(&(0x7f0000000000)={0x69, 0x8000, 0x800, 0x10})
r4 = socket(0x2, 0x80802, 0x7)
setsockopt$auto(r4, 0x11, 0x65, 0x0, 0x8)
preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)="f4520bb20371f585a49d043c77a67a74807133dc63d9dc06da5db81962c4596363eccd94d4f4f3473d866b8a71277f64944bd864b4c3bdcea687806e6a317abcc38a2ab8c049370ea77d7c4446ad40519905557911d931940087b1dfe8071d9c98c259d3db74ae526868ef5450c29a6db8ab59e8cdaff79eb8eebefcd8aaf6d936c0192a52856463464ed877030b9745e55f22534dcbfc40d770edfc828d306bd8", 0xa}, 0x91, 0x5, 0x2)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)

4.093396574s ago: executing program 4 (id=718):
r0 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x121100, 0x0)
mmap$auto(0x0, 0x400005, 0x6, 0x9b72, r0, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x7fff)
r2 = socket(0xa, 0x2, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r3, 0x4048ae9b, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)
read$auto(r5, 0x0, 0x85)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x0)
mremap$auto(0x8, 0x7f, 0x4, 0x403, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xb4d3)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$auto_SCSI_IOCTL_GET_IDLUN(r6, 0x5382, 0xfffffffffffffffe)
r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r7)
shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000300)={{0x8, <r9=>0xffffffffffffffff, 0xee01, 0x1, 0x5, 0xfff, 0x2ff}, 0x2, 0x0, 0xffffffff, 0x2, @inferred=r1, @raw=0x7fff, 0xc, 0x0, &(0x7f00000001c0)="f1073b46d4e8f6572cdadf220324b2a502bd94c83125d7d7ded0ff80b122d1af41bb3ded57371728ed9b3be6447ec4c730a407da579f3e13a8f375e6216e3ec301903ad565631f8b892d0674b2324977f0b5e64e96e1c78a5fbe886c440dc4b7ce2440c8569891dd867a2e", &(0x7f0000000240)="6b614c4ae894da7839f13a64739d6bde2a0e027a8c837f597bd027b0702e8d7bf29c34d522230cb6ae02a86464b7cb8e259bbb41e5e9cc5c32e7b974ea67855d9d8fbd464a06a713bef33197f9b108cfe0d963fe1fc93b017d408f6f3c8a7ce402c6ff7b20c58b532cdc8512a101f863bf4f121a2893fe93ceda42f40be6170188c624cad0563962fef8c6b309"})
sendmsg$auto_OVS_FLOW_CMD_DEL(r6, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40050000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x540}, 0x1, 0x0, 0x0, 0x100}, 0x4000)
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0x8000000)
syz_clone3(&(0x7f0000000080)={0x1a6a60080, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3.75260079s ago: executing program 3 (id=719):
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = socket(0x10, 0x2, 0xf)
r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd)
bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5)
mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, 0x0)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8040)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.52724518s ago: executing program 1 (id=720):
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = prctl$auto(0x3e, 0x1ff, 0xffffffffffffffff, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\a\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccCPWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5)
socket(0x2b, 0x2, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x5044)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000000400)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x4891}, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x7ffe)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250300000006000700fe7f0000060006000100000008000300000400000a000500aaaaaaaaaa3600000a000500aaaaaaaaaabb00000a000500000000000000000008000200a7b7069505beb84d87a1360b124a7e4046fe5d6eeecef9316b3123aee2337f8ebc8d172e7b8adcb5bcecc5709e184372e97122da0049", @ANYRES32=0x0, @ANYBLOB="0600070008000000"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd00000e00000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xffff93f1}, 0x7}, 0x3, 0x8)
madvise$auto(0x0, 0x200007, 0x19)
userfaultfd$auto(0x1)

3.183736839s ago: executing program 4 (id=721):
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/max_sg_segs\x00', 0x183080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/198, 0xc6)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4}, 0xa3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19)

2.868385219s ago: executing program 3 (id=722):
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, 0x0)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8040)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x140, 0x9}, 0x7}, 0x3, 0x0)

2.678854667s ago: executing program 3 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01009d00700000dbdf25020000000c0002800000000004000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80)

2.545994535s ago: executing program 3 (id=724):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="10d76ad149059dbd13a2bcc9f982490dbd7be1c07bd58340df72db08f0386b6081aa47c460837f6a1dd9f539604bf4d66806d30de4aa41b4408d2ef359c9f2d55a76a6ff1a51d6e61d9abe396b7506dbea80d3d8668e3037359213e00cadb559301bdea980caf2bb873e1e407ed2ca2304238e3df94f62ba8f06e442fd20ae058ca4016f5060c67533c40841efbbd99f10e8dfd1568bd2b9027a775ecfb9171c68b1b4241d25f003016de8132a3c734bcde06b7dc39a7565c563bb2dbbc41da8d452f542178f6edfff81b3cdd887610dc6634b813fc65f8f7701a5d246ca00ce970cce21192b453ecb2f5b23173cb1a0452536f9d3633b7ef602c576229c9254b4027be5045c5ef86771ac4a4db6bc93f3805a03b8c057cb73f8c2da10b71930f14fd90207448f6c36e3f593ebea6a098040f6d4ba074e2d1d5a7a23c073f3aa4914f5f9921be34d0c105e7d972815f4462eb927ad94579feff605c9de20c6532e2f8a1264845fd60f7710ce750bbebf5b688d6e254d2a3f8b8182f17286857879473a09a497eb77dbe87f0ca70e9eb5d6165a88ccea0c39754a5e9019c3e0593243bd8fea1b213dc056891a55792e1a5c9ee07be2c6ff206f4f50533bfa955f9fb9ea3673acd0756bad42a2d7416b14155a026d278d51acf870aa5caae7e4a6222390476cab3a6ebc796b61ee63b572c089e5333c8d3bf60d5381eee1ac532d408de0e6d32ffbd690e60714cbfc29d12e00a8eca2659f0d0c9dd45e59884e80a83d391ea58320a95d638360f3c4d2e1d18277b4b758e5e52d93ecdf0229113513e7f56418e78d6b3761c56937c5fdaf2de276e96f55d3b6c7e302378f63ce26cbb1ff032d4a526b41abc0fe4b272e84ce10f006e7e8c43f49ea7f0007e16c4069a22dedf2a4b8471881bae33d675cee7e4c541eb4e54c2c050adcd9d69ae4f82b7d1675d9a2d029d33484ca051f9ecad9051c231d1a5256d0d43796c80bd25e363b476146d582875e8e8fcf25051d99832ef6e386d6675f7b4fef40c38647f8b917ca52cdee03847100b29a178387f58f01f5e7d23e643ce934d83b1a067f1d2375ae03592c913d63f667ab2b55f8200dab0ba3804994c1394c14c2d8e9a5fe242442bf7b11459e8ebf6aade5bb9515e4f3bf78e4051298aa0335ca2bf3936aeda0a490e0fc97b11488b6031cb3c9565b49e0c8c75466836dfcd7e806c91ab1b2a9c87a45ce4d3a27742e50ed4bf7c2a625b4b7c48416c6630386d0b664581fd4a712f74b7754fb233e7e6beb71eaec806077e7f440d2d6a293a57a563111a5037345e63a9732593d63877401eb8e2b26e5a4c30a3141bf20d9fd62eacc73cdfa641781a77df162cee0a2ada287ca2ec7c3aa6caf70140d08e17f0155ab7d96e0bd389b7b714e4248fb5c974e613b1e0f149f963cda2878cfcf91cb5df7dcb9384c91e002f47b2593734f2eb54921dcbb04f191c9584c008cb449a2a6c0b498d9f8e27f5050be006f7beeeb0444febb5926916a4dcdbd3d0f391b1494ca61b739743a2b231e74ce121664242de06654f4d3d3e11d1bf2a405967698b06fe10ae43b2fb4f7c32af76a7411a3e52f9a48b15b956adfe4db59d7fbd287d83ccb9f00e0435a3be42e7429e7647a95884629a24b5cc950305c818e0f1e8194fca6fdd376c48fce82ab093767fcdc4054e03f88795db53c0d4efa3c3f9a16d7d01159dc25e9d20e5d9c836ae0d74989195141ddea6bff696cbd3a4d4ee1a98e0ec734d1f4b19c1168b82d8fc2c4bd68b29afbe335dbec80c79e534c24d432313359679c258a79390c04fcad539a97ebfcc2b6bf546faefa554b4bf9ca09173988a85718026637664bdfab8e1b836fa8c35a37c6d0db6855b7b03a505ebbb2724c3cb7d223785f5851522f3dc1d333981bbff0b92e5b0d69885b5d02ea527f2badfd8ac9a3d62c0dae59569a6d42a1eda890eeb6efdfb0fd8c8564437f37e98c8a2ebe6cf41b117b25836a1942a9b8426d51af93bf5828604d7dd8775fb18f6d29f334c946db3cc6e7e2700945123a345e530247b43e8be4350618060f5002a65a0593e851f3a2848947756e6a908861ce92b77f91ddad5725230087f0b18eaee13925e8f0e1b676bd68e079cbb9cc1b79fb489448dba6dde33e5ac0343d1bee7a589d6f291b1684b320dbb6d499d61dbf5e7f4c41e994ab7acc24d5abb584645ecabc1bd7d5172cebb7192c9c77ab9e04b66f1ac26f16a77b59e78d0e1dd91a255a3af5fe6b56daa3faf835acf60a14ad6b4bcb72bab53980ca21ffcf8c312b75d5f83c4a0e5e02e5aeefd0521907c84c89b98fba34a0845aafe50ae30fe862a2416ae7986f2f01bc8df4df326b3c2e8a4587e5fe5e68de396293a335573e82a4258a24ceeb7c47d41c8fefdc83de70d47de7089c27f858b98ce70680ddc3aa1568373e7769364e0f2c718d17b2353241a2b7ee7dbcd38760e31f7140f269c42d6e9398c3ec189285994ce7ec6a4717f40bdb7045b932e7d33ff6ef974c4dc9c277cfbe58d8aa2888ed76c2bd117d6fcfb9e016ccdf5723d2ad5d1b51eb70a62f193ba53613f8f248fe3605acf43f9eb59fa8a787d63e84e92604670d4606b966398764cc5f807e60a8e8aa52cb858bb4213e6fd1eaec1e78f6461d09de273e6d14077155ebf4c23e7c77759966772eee2b944dacf909b44d30a7b9d969538f71a3a2bcf5f29beb64063d008e52b8acbcda073bc200c4e7b1f6dd539be4dd896a4118ab5e5db7ba3169a0547768ef5a4294deb980db5405a2321f7a415baf8b6d5e478adec935a7b20f27544822cb6c3b041e271d2866c3d3736ff0c5003fc060ff0fac098e38f80bcafd621bf835d616dd0152f0eb4c650f5e10ab997bd8700a29d4224b827f1ac944493c02d281ab1cc4bf83fde4bce02ea1f38512bfb7d87462a1320a6f63e16b471bc8acd94d3f39e798cc83e36a1d15488527b73ba321d7da8898883d4dfcecc99fd021da6180b5aecdcf40723c64bdba681de76db9ffe35290678be76ea03f54ac1ab6e0fce79ded61485aea976f8e6351232b1ecad6f8ab476b23c425f46c675c443185085745e1be652b0b9a16454b934b1e686ddd06f7cf06a619da67e1aa2b8949a6f88af4b60d8a661397378453686fe0a994652f3ad128c8dfdd39b3920271934824fb1527ed01bf7f4e9056971a0a6431856dada5ebb7964d2a2351c852a15b022fc906e7e50d0b726d725a9f6e32ba597bd9fca102cf3d6d3221829f4dec2f77ecadeef231714a44da38a6b14bc91ac57c9714540337ec3433cb0ca02f0a3848f2f87a2c511eefddf7c4c58ab95cba159e7aaecc7f5cb89b76f0b661307192fe52972cb34bcd52bb25203be3b8361d6ea323f7846d26a8ea9ac551347d262e64dc88b8c4685d47e30a414d9c6ffe0527862b00d893975c52dcdf6dc468fe186abc8076a152ce4161480e1b71cf6a8a383f6e90cd458ac4ac8afabf2ef5e517a3f422ff4567a0f19337535d28c7356871e4669ffc2762765ad5d5b4fbc801d658d78291c3887d21d2932a6a5b4bdcdbe6d7969fb7e3e3f45b6ab2979398a85d1cdd4147b5e0aeb75b35dc192e1bee86388b990b1e93436bc22c9edbfbf3e69baab3bd6eda5a82ab9273d554a1198e48de035a0c367d103a80eb8c48cd0694ece531b79c337c215f53f8063e7b90f50b770852f88ad85bad27d6038ec2edd455f0ecb558af1f70470501864ec60dc9ed6b6f5cc101d6974fd2d5ef64841fba099f1ac0e8b7076a0a64cac96745ba8fe5e63c51eb5af773cdaac4768869641bd85267c01299a5167bc670f127f2ec2039bb8c945bfe39db0c8f5e35d8ba41f044ecb8f41d5e9d85fd011148b5284bdd53d0a3d8748fadf288603376a70a437d15655881540045824c0dc96438061ff420a12fd02dd82eab4246c6ff92c79f7d61e33e1d775d1c0fef8e71b0fe2bdfb610cbfae43817bb87c792c2168645b864947ec2805018a8f95602fab0f2436bd48f2f0fe3f83f02236188cc26675712acd66cd91881fa383c8f8811412462d86ac57152de5d88ea136f897649ce911debf73b410e3add98e4cd1b9931a2fdf5a72dd0cae8565a7f5ddd7a2783259cb23c41d9195e4ff27221db2a0b7ba0af4e398086372f14ebeef49f3d30d7699750f2d8d7dfb77e3d79e651c46e8a0042c61f3176cd158c91f55db2f2b7265358647f1e8c53b947a6cc8c9631af9a1891f15f5ee70fb0788a85457097c7637c324e7a422f595c9dddedf4d592a18113170848a59c905959e798a1d528ec3629a104375edc21a5717fa6700c8a55e17061312ab5a052ceeabce8e1bc7a8831def311f75a04eef929a0b8ad1affe5203e4d7b21d678e5627d787b1f532cd8aeacbb45412d67b1a0a680bd24f5f5b33682b333ed93ae0279d065de2c97fa3ba8d5bc0b3687a2b39a933d36a26ea4659078ea7fa32483d44d2ccd2003a6faba742c96e49151e18d38c2b1dc2aef514f7b253f2afa1b44332594cc02aca1c7b75349a6433b1fb13dd362910c4e4797446f53fa8c5c6ae02ad7425798260e27c8fd4dee161b0f1d2c25c5ac013d63b37806ec602252ea8ee914ba1e3e1b5e6c20141e384cfaff79a7f76780f58faa3b612fa836c234617f8145b69450ba9f9a082aea7832e19b0c5da3f3fefe1367451a142915c13ef2eb717ca4ab5ab3006bbf2e9cb25176166d946f2d8842e5e2cdc23d5929d164c8fddd6289d692400e4d768d2b82cb91862ef93962c2fbc72c1d9011b4ccaf65e25c38df78d52bff6abcf445fe213095d1d1cb79d7ec74cdba09aa39d3b5731b018286ebb14fc4fe3431bbecd6314e1422e6032566d5c67706a0abacb8976a73c060c48677c5d53eb2bb78b7d237eb0167f55db520cc089235b309dbb6211109ac72909b5c4da47bd7bee1130070e58497acee64b5da3b6541a8596bfb429544ecda0582804409dfb78a379ea29f9d632c03ed38062c3f19456ae7c1c46d72cc8036a8bce3567495cdda12cbc6f8299a0c4036ff822f7ba17f0d24096db19763576921e934e95cb0051f6b6d6d8e94e0ca45a4b9237038f1e4b005d8bf8d12b05d251e0dfab2cdb37daa303f6fa8a4139421597a3f76ca68d2afcf89a434ca702e17885321fa63d0f01954bab3b9030e420402aa5f1f463889c09e65a72f4be536239fb636bfcd3047423b882de5accd20ef7caf8b6afcdffd1a51fa395252258c0749809de1f41aa4de4f5867fdd997db72006b0635e9ca3366f2fa6a06257faf6a6e2d1afef9a08c705bdf98c15799ab5f0c23d892ef131f3d4f59fd801409076cf91b31d6dde15ffc1c8601dfd4e7257a12c8345c6ef83006065cddcc9ab9a85f29810409d9e0e1fdbe316808a8917ebe0a0b4eefa4bc2d124a65c55255937a361879561a5689c9470b72f883cca781838fe6953626bf647e2558ce8fe07f6fb3595fd7618b975d05c424100c87112a051d858df04278eedfd9d97631dc05921567100e90316903dbdab902d715667c8bba7b521f0ecb160a2e7dcf74f8f5f9b380a655b9d246a349ef3a18f8a56253ca93cd3e78a5b0fe0a7f94b2fe4974cafe5206861eaa0b2d74a77c7c04e4d9548640ab4298a9213735f004241662bbf4135279413134548728acf01c9a9bf6507be3451a8fcbb3aa36a92f940bdd591b324bbe739d912444db29268b4c9436f00b915ff0f84ee4820ba8d51e6b539547e9008a8d099b21b3a9bdd894c9cd01ae0515494e0d9b0f93ead87452791155030e596658f26a", @ANYBLOB="01002abd7000fddbdf251400000008000300faffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x44845}, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="4f72b0", 0x3)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
fgetxattr$auto(r4, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', 0x0, 0x68)
getsockopt$auto(r4, 0x0, 0x2, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44845}, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r5)

2.108803085s ago: executing program 1 (id=725):
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2062, 0x0)
sendfile$auto(r3, r2, 0x0, 0x800)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, r4, 0x401)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2)
ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000003c0))
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x2)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0)
splice$auto(r7, &(0x7f0000000040)=0x7, r6, &(0x7f0000000080)=0x4, 0x26c4, 0x895)
prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9)

1.72973646s ago: executing program 0 (id=726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r1 = socket(0x2, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x55) (async)
io_uring_setup$auto(0x6, 0x0) (async)
connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f)
write$auto(0x3, 0x0, 0xfdef) (async)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec7\x00', 0x10b101, 0x0)
ioctl$auto_CEC_S_MODE(r2, 0x40046109, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0)
read$auto(0x3, 0x0, 0x8080) (async)
write$auto(0x3, 0x0, 0xffd8)
r3 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/projid_map\x00', 0x40, 0x0)
close_range$auto(r3, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) (async)
io_uring_setup$auto(0xdd4, 0x0) (async)
read$auto(0x3, 0x0, 0x80)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x10}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802)

1.129966415s ago: executing program 4 (id=727):
socket(0xf, 0x5, 0x2)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0)
write$auto(r0, 0x0, 0x80000000)
mmap$auto(0x0, 0xffffffffffffffff, 0x10ffb, 0x8000000008011, r0, 0x40)
timer_create$auto(0x0, 0x0, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
mmap$auto(0x9, 0x2020003, 0x6, 0xeb1, 0xfffffffffffffffa, 0x2000000000008000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socketpair$auto(0x80, 0x7361e4e2, 0xfffffbff, 0x0)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x40000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x4, 0x4400000000e3, 0x1010, 0x401, 0x300000000000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0)
read$auto(r3, 0x0, 0x20)
ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r3, r2, 0x649f)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050)
r4 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(r4, 0x0, &(0x7f0000000000), 0x3)
io_uring_register$auto(0x2, 0x1, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0)
write$auto(0x3, 0x0, 0xffd8)
setreuid$auto(0x0, 0x20000000004)
ioctl$auto_SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000001c0)="f669b48f21921a80de1beb323ce33dfa8b488cb320e9d57c1664d473f4de78c3a601331821a90da4961689f2abd0e2fadbec349df8c0b7d646b6270e79b9b6c4b445d0")

756.230645ms ago: executing program 0 (id=728):
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x80000, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x400000100, 0x3, 0x48bdd179, 0xfffffffffffffffa, 0xfe)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x10000010000, 0x4240005, 0x481)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
socket(0x1d, 0x2, 0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
madvise$auto(0x0, 0x200007, 0x19)
userfaultfd$auto(0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
madvise$auto(0x7, 0x338d, 0x6)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2f8b83, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)

349.901068ms ago: executing program 1 (id=729):
r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x8]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x20000000002, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket(0x2, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0)
write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
socket(0x2, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55)
shutdown$auto(0x200000003, 0x2)
select$auto(0xa, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0x7, 0x18, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64$auto(r4, 0x0, 0x200000000006, 0x8)
mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
semtimedop$auto(0xf598, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)

0s ago: executing program 3 (id=730):
r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/projid_map\x00', 0x94300, 0x0)
getsockopt$auto_SO_PEERNAME(r0, 0x0, 0x1c, &(0x7f0000000100)='\x00', &(0x7f0000000140)=0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = io_uring_setup$auto(0x90c, 0x0)
close_range$auto(0x2, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d)
listen$auto(0x3, 0x81)
r2 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.
[   75.958938][ T5812] cgroup: Unknown subsys name 'net'
[   76.090404][ T5812] cgroup: Unknown subsys name 'cpuset'
[   76.099735][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.591443][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.660581][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.670868][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.679499][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.688393][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.697249][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.705242][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.707789][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.713215][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.721321][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.735239][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.743191][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.743532][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.751758][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.765535][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.773741][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.774300][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.782014][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.788945][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.803240][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.804778][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.383475][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   80.414251][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   80.460432][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   80.476087][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   80.720476][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.728283][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.735599][ T5826] bridge_slave_0: entered allmulticast mode
[   80.743062][ T5826] bridge_slave_0: entered promiscuous mode
[   80.763234][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.770487][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.778228][ T5825] bridge_slave_0: entered allmulticast mode
[   80.785330][ T5825] bridge_slave_0: entered promiscuous mode
[   80.792707][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.800731][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.808004][ T5824] bridge_slave_0: entered allmulticast mode
[   80.815097][ T5824] bridge_slave_0: entered promiscuous mode
[   80.823608][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.830903][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.838158][ T5826] bridge_slave_1: entered allmulticast mode
[   80.845215][ T5826] bridge_slave_1: entered promiscuous mode
[   80.862546][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.869794][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.877023][ T5825] bridge_slave_1: entered allmulticast mode
[   80.884146][ T5825] bridge_slave_1: entered promiscuous mode
[   80.891121][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.898343][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.905481][ T5824] bridge_slave_1: entered allmulticast mode
[   80.912793][ T5824] bridge_slave_1: entered promiscuous mode
[   80.942294][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.949504][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.956785][ T5823] bridge_slave_0: entered allmulticast mode
[   80.963922][ T5823] bridge_slave_0: entered promiscuous mode
[   81.002515][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.009725][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.017647][ T5823] bridge_slave_1: entered allmulticast mode
[   81.024658][ T5823] bridge_slave_1: entered promiscuous mode
[   81.045327][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.057348][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.080970][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.093079][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.104844][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.127284][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.161658][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.204955][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.235096][ T5824] team0: Port device team_slave_0 added
[   81.243288][ T5824] team0: Port device team_slave_1 added
[   81.251455][ T5826] team0: Port device team_slave_0 added
[   81.259552][ T5826] team0: Port device team_slave_1 added
[   81.285268][ T5825] team0: Port device team_slave_0 added
[   81.293561][ T5825] team0: Port device team_slave_1 added
[   81.321697][ T5823] team0: Port device team_slave_0 added
[   81.329879][ T5823] team0: Port device team_slave_1 added
[   81.370615][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.378224][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.404697][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.438354][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.445348][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.472307][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.484424][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.491910][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.518095][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.536493][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.544140][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.570430][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.582286][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.589558][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.620993][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.632709][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.640048][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.666999][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.679461][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.686471][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.712698][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.733890][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.741692][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.767798][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.835104][ T5826] hsr_slave_0: entered promiscuous mode
[   81.842276][ T5826] hsr_slave_1: entered promiscuous mode
[   81.848869][ T5839] Bluetooth: hci0: command tx timeout
[   81.848873][ T5836] Bluetooth: hci1: command tx timeout
[   81.857285][ T5839] Bluetooth: hci2: command tx timeout
[   81.860233][ T5840] Bluetooth: hci3: command tx timeout
[   81.983048][ T5824] hsr_slave_0: entered promiscuous mode
[   81.997450][ T5824] hsr_slave_1: entered promiscuous mode
[   82.004044][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   82.016799][ T5824] Cannot create hsr debugfs directory
[   82.028803][ T5823] hsr_slave_0: entered promiscuous mode
[   82.035233][ T5823] hsr_slave_1: entered promiscuous mode
[   82.047701][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   82.053553][ T5823] Cannot create hsr debugfs directory
[   82.119451][ T5825] hsr_slave_0: entered promiscuous mode
[   82.125708][ T5825] hsr_slave_1: entered promiscuous mode
[   82.132258][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   82.138157][ T5825] Cannot create hsr debugfs directory
[   82.568981][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.593534][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.612352][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.625281][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.673848][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.700583][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.721989][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.733219][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.811325][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.827578][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.850126][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.862657][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.997658][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.013913][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.023866][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.046824][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.059037][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.114474][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   83.139187][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.157593][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.164812][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.189550][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.196789][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.219012][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   83.238798][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.255156][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.262444][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.285329][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.292578][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.352646][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   83.378213][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.385507][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.425083][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.432269][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.489258][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.649677][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.729684][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   83.770415][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.777639][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.816490][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.823691][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.927205][ T5840] Bluetooth: hci3: command tx timeout
[   83.928112][ T5836] Bluetooth: hci1: command tx timeout
[   83.932636][ T5840] Bluetooth: hci2: command tx timeout
[   83.938095][ T5839] Bluetooth: hci0: command tx timeout
[   83.998893][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.062396][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.153280][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.205609][ T5826] veth0_vlan: entered promiscuous mode
[   84.230254][ T5826] veth1_vlan: entered promiscuous mode
[   84.256610][ T5824] veth0_vlan: entered promiscuous mode
[   84.291832][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.301257][ T5824] veth1_vlan: entered promiscuous mode
[   84.349717][ T5825] veth0_vlan: entered promiscuous mode
[   84.364244][ T5826] veth0_macvtap: entered promiscuous mode
[   84.384823][ T5824] veth0_macvtap: entered promiscuous mode
[   84.392569][ T5826] veth1_macvtap: entered promiscuous mode
[   84.409754][ T5824] veth1_macvtap: entered promiscuous mode
[   84.439373][ T5825] veth1_vlan: entered promiscuous mode
[   84.466458][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.489705][ T5823] veth0_vlan: entered promiscuous mode
[   84.505810][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.516160][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.525627][ T5823] veth1_vlan: entered promiscuous mode
[   84.544641][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.561918][ T2994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.608142][ T2994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.649406][ T2994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.658413][ T2994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.680742][ T5825] veth0_macvtap: entered promiscuous mode
[   84.690465][ T2994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.699546][ T2994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.719590][ T5825] veth1_macvtap: entered promiscuous mode
[   84.726350][ T2994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.735602][ T2994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.763471][ T5823] veth0_macvtap: entered promiscuous mode
[   84.788512][ T5823] veth1_macvtap: entered promiscuous mode
[   84.858886][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.889215][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.920297][  T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.931265][  T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.957284][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.965833][ T2994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.976259][ T2994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.993912][ T2994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.003679][ T2994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.021833][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.033006][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.043404][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.061091][ T2994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.095716][ T2994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.106254][ T2994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.139311][ T2994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.149636][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.164153][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.171906][  T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.180874][  T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.285045][  T339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.305321][  T339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.339909][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.402204][  T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.450221][  T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.535492][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.554459][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.753594][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.793611][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.008894][ T5836] Bluetooth: hci1: command tx timeout
[   86.014453][ T5836] Bluetooth: hci0: command tx timeout
[   86.021777][ T5837] Bluetooth: hci2: command tx timeout
[   86.026959][ T5839] Bluetooth: hci3: command tx timeout
[   86.501957][ T5927] bond0: option mode: unable to set because the bond device is up
[   86.827352][  T797] cfg80211: failed to load regulatory.db
[   87.077063][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.175479][ T5950] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8'.
[   87.396099][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.549485][ T5959] process 'syz.3.11' launched '/dev/fd/9' with NULL argv: empty string added
[   87.570391][ T5959] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007
[   88.089663][ T5836] Bluetooth: hci2: command tx timeout
[   88.089794][ T5840] Bluetooth: hci1: command tx timeout
[   88.095134][ T5837] Bluetooth: hci3: command tx timeout
[   88.100553][ T5839] Bluetooth: hci0: command tx timeout
[   88.122497][ T5978] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   88.278048][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.367205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.607029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.732557][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'.
[   88.837176][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.896986][ T5992] Zero length message leads to an empty skb
[   88.967542][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.386892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   89.556906][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.718699][ T6010] ubi31: attaching mtd0
[   89.725785][ T6010] ubi31: scanning is finished
[   89.757969][ T6010] ubi31: empty MTD device detected
[   90.276753][ T6010] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   90.313980][ T6010] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes
[   90.408937][ T6010] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   90.416037][ T6010] ubi31: VID header offset: 514 (aligned 514), data offset: 578
[   90.467231][ T6010] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   90.474151][ T6010] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20
[   90.536015][ T6010] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1603484696
[   90.578182][ T6010] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   90.674970][ T6018] ubi31: background thread "ubi_bgt31d" started, PID 6018
[   91.244792][ T6033] netlink: 'syz.3.28': attribute type 11 has an invalid length.
[   91.253069][ T6033] netlink: 'syz.3.28': attribute type 11 has an invalid length.
[   91.261193][ T6033] netlink: 'syz.3.28': attribute type 11 has an invalid length.
[   91.278988][ T6033] netlink: 'syz.3.28': attribute type 11 has an invalid length.
[   92.197933][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'.
[   92.317077][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.735936][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.803339][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'.
[   92.823949][ T6062] team0 (unregistering): Port device team_slave_0 removed
[   92.843730][ T6062] team0 (unregistering): Port device team_slave_1 removed
[   94.076859][ T5839] Bluetooth: hci0: Unable to find connection for big 0xd2
[   94.679515][ T6096] WARNING! power/level is deprecated; use power/control instead
[   94.934895][ T6102] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.187132][ T6148] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[   98.089689][ T6146] kexec: Could not allocate control_code_buffer
[   98.835560][ T6184] =======================================================
[   98.835560][ T6184] WARNING: The mand mount option has been deprecated and
[   98.835560][ T6184]          and is ignored by this kernel. Remove the mand
[   98.835560][ T6184]          option from the mount to silence this warning.
[   98.835560][ T6184] =======================================================
[   99.388824][ T6184] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   99.772389][ T6193] netlink: 'syz.3.69': attribute type 33 has an invalid length.
[   99.816721][ T6193] netlink: 322 bytes leftover after parsing attributes in process `syz.3.69'.
[  100.126440][ T6207] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  100.162540][ T6201] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  100.162864][ T6201] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.447947][ T6201] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  100.477636][ T6201] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  100.492477][ T6201] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.559425][ T6201] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  100.589442][ T6201] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  100.604283][ T6201] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.623441][ T6201] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  100.635945][ T6201] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  100.647292][ T6201] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  100.679293][ T6201] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  101.996423][ T6203] kexec: Could not allocate control_code_buffer
[  102.167356][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  102.504636][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.646948][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.647883][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  103.500772][ T6280] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  103.664702][ T6273] can: request_module (can-proto-0) failed.
[  104.256710][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.569583][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.728050][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.736977][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.150598][ T6278] kexec: Could not allocate control_code_buffer
[  105.988946][ T6296] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.327419][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  106.647398][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.816815][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  106.829059][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.933911][ T6341] FAULT_INJECTION: forcing a failure.
[  108.933911][ T6341] name failslab, interval 1, probability 0, space 0, times 1
[  108.947031][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) 
[  108.947069][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  108.947089][ T6341] Call Trace:
[  108.947099][ T6341]  <TASK>
[  108.947109][ T6341]  dump_stack_lvl+0x100/0x190
[  108.947229][ T6341]  should_fail_ex.cold+0x5/0xa
[  108.947283][ T6341]  should_failslab+0xc2/0x120
[  108.947338][ T6341]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  108.947396][ T6341]  ? copy_process+0x48b/0x7a10
[  108.947447][ T6341]  ? mark_held_locks+0x40/0x70
[  108.947497][ T6341]  copy_process+0x48b/0x7a10
[  108.947547][ T6341]  ? __pfx_copy_process+0x10/0x10
[  108.947585][ T6341]  ? lockdep_init_map_type+0x5c/0x250
[  108.947622][ T6341]  ? lockdep_init_map_type+0x5c/0x250
[  108.947660][ T6341]  ? __pfx_vhost_run_work_list+0x10/0x10
[  108.947782][ T6341]  ? __pfx_vhost_worker_killed+0x10/0x10
[  108.947810][ T6341]  vhost_task_create+0x1db/0x370
[  108.947858][ T6341]  ? __pfx_vhost_task_create+0x10/0x10
[  108.947911][ T6341]  ? __pfx_vhost_task_fn+0x10/0x10
[  108.947962][ T6341]  ? snprintf+0xc7/0x100
[  108.948091][ T6341]  vhost_task_worker_create+0x8d/0x260
[  108.948126][ T6341]  ? __pfx_vhost_task_worker_create+0x10/0x10
[  108.948158][ T6341]  ? lockdep_init_map_type+0x5c/0x250
[  108.948192][ T6341]  ? lockdep_init_map_type+0x5c/0x250
[  108.948230][ T6341]  vhost_worker_create+0x243/0x310
[  108.948260][ T6341]  ? __pfx_vhost_worker_create+0x10/0x10
[  108.948297][ T6341]  vhost_dev_set_owner+0x719/0xa30
[  108.948338][ T6341]  vhost_net_ioctl+0xfa3/0x1910
[  108.948397][ T6341]  ? do_vfs_ioctl+0x226/0x13e0
[  108.948439][ T6341]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  108.948474][ T6341]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  108.948513][ T6341]  ? find_held_lock+0x2b/0x80
[  108.948534][ T6341]  ? __fget_files+0x215/0x3d0
[  108.948564][ T6341]  ? hook_file_ioctl_common+0x146/0x410
[  108.948761][ T6341]  ? __fget_files+0x21f/0x3d0
[  108.948789][ T6341]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  108.948824][ T6341]  __x64_sys_ioctl+0x18e/0x210
[  108.948863][ T6341]  do_syscall_64+0x106/0xf80
[  108.948891][ T6341]  ? clear_bhb_loop+0x40/0x90
[  108.948930][ T6341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.948955][ T6341] RIP: 0033:0x7f496cf9c799
[  108.948976][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.949002][ T6341] RSP: 002b:00007f496de23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.949026][ T6341] RAX: ffffffffffffffda RBX: 00007f496d216090 RCX: 00007f496cf9c799
[  108.949042][ T6341] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000008
[  108.949057][ T6341] RBP: 00007f496d032bd9 R08: 0000000000000000 R09: 0000000000000000
[  108.949072][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.949087][ T6341] R13: 00007f496d216128 R14: 00007f496d216090 R15: 00007ffe619e3678
[  108.949120][ T6341]  </TASK>
[  110.661338][ T6352] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.665402][ T6366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'.
[  111.734331][ T6366] openvswitch: netlink: IP tunnel dst address not specified
[  112.905211][ T6383] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.709800][ T6407] capability: warning: `syz.0.124' uses 32-bit capabilities (legacy support in use)
[  116.584500][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[  118.510519][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'.
[  118.617498][ T6492] netlink: 25 bytes leftover after parsing attributes in process `syz.3.143'.
[  120.033450][ T6511] mmap: syz.0.147 (6511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  120.305544][ T6521] can: request_module (can-proto-0) failed.
[  120.591982][ T6527] bond0: option mode: unable to set because the bond device is up
[  122.186133][ T6566] FAULT_INJECTION: forcing a failure.
[  122.186133][ T6566] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  122.291982][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) 
[  122.292018][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.292033][ T6566] Call Trace:
[  122.292041][ T6566]  <TASK>
[  122.292050][ T6566]  dump_stack_lvl+0x100/0x190
[  122.292107][ T6566]  should_fail_ex.cold+0x5/0xa
[  122.292148][ T6566]  _copy_to_user+0x32/0xd0
[  122.292265][ T6566]  simple_read_from_buffer+0xcb/0x170
[  122.292309][ T6566]  proc_fail_nth_read+0x1af/0x230
[  122.292369][ T6566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  122.292402][ T6566]  ? rw_verify_area+0xce/0x6d0
[  122.292438][ T6566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  122.292471][ T6566]  vfs_read+0x1e4/0xb30
[  122.292515][ T6566]  ? __pfx_vfs_read+0x10/0x10
[  122.292555][ T6566]  ? __fget_files+0x215/0x3d0
[  122.292588][ T6566]  ? __fget_files+0x21f/0x3d0
[  122.292621][ T6566]  ksys_read+0x12a/0x250
[  122.292661][ T6566]  ? __pfx_ksys_read+0x10/0x10
[  122.292709][ T6566]  do_syscall_64+0x106/0xf80
[  122.292740][ T6566]  ? clear_bhb_loop+0x40/0x90
[  122.292774][ T6566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.292802][ T6566] RIP: 0033:0x7f496cf5cfce
[  122.292829][ T6566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  122.292854][ T6566] RSP: 002b:00007f496de43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  122.292880][ T6566] RAX: ffffffffffffffda RBX: 00007f496de446c0 RCX: 00007f496cf5cfce
[  122.292899][ T6566] RDX: 000000000000000f RSI: 00007f496de440a0 RDI: 0000000000000004
[  122.292915][ T6566] RBP: 00007f496de44090 R08: 0000000000000000 R09: 0000000000000000
[  122.292931][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.292946][ T6566] R13: 00007f496d216038 R14: 00007f496d215fa0 R15: 00007ffe619e3678
[  122.292984][ T6566]  </TASK>
[  123.145919][ T6573] bond0: option mode: unable to set because the bond device is up
[  123.607745][ T6574] can: request_module (can-proto-0) failed.
[  124.266120][ T6561] kexec: Could not allocate control_code_buffer
[  124.743984][ T6607] can: request_module (can-proto-0) failed.
[  125.212286][ T6612] bond0: option mode: unable to set because the bond device is up
[  125.661995][ T6621] can: request_module (can-proto-0) failed.
[  126.600816][ T6644] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  128.264614][ T6641] kexec: Could not allocate control_code_buffer
[  128.713015][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'.
[  128.876807][ T6689] bond0: option mode: unable to set because the bond device is up
[  130.649315][ T6747] bond0: option mode: unable to set because the bond device is up
[  132.440336][ T6783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  132.751143][ T6794] random: crng reseeded on system resumption
[  132.808645][ T6794] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  132.824081][ T6794] pci 0000:00:01.3: PCI INT A: no GSI
[  132.896973][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.906328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.922220][ T6794] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  132.970110][   T30] audit: type=1800 audit(1773079989.118:2): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.226" name="trace_pipe" dev="tracefs" ino=2697 res=0 errno=0
[  133.992265][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[  134.275868][ T6833] bond0: option mode: unable to set because the bond device is up
[  134.975772][ T6851] futex_wake_op: syz.0.238 tries to shift op by -2048; fix this program
[  134.990542][ T6851] futex_wake_op: syz.0.238 tries to shift op by -2048; fix this program
[  135.684350][ T6867] can: request_module (can-proto-0) failed.
[  135.793038][ T6869] bond0: option mode: unable to set because the bond device is up
[  135.938299][ T5839] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11
[  136.178166][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  137.135382][ T6901] netlink: 342 bytes leftover after parsing attributes in process `syz.3.254'.
[  137.931533][ T6935] can: request_module (can-proto-0) failed.
[  138.115922][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  138.878176][ T6957] usbip-vudc usbip-vudc.0: gadget not bound
[  138.924673][ T6949] bond0: option mode: unable to set because the bond device is up
[  140.768919][ T6989] can: request_module (can-proto-0) failed.
[  142.056892][ T7013] bond0: option mode: unable to set because the bond device is up
[  142.315108][ T7023] can: request_module (can-proto-0) failed.
[  143.552090][ T7017] kexec: Could not allocate control_code_buffer
[  144.159815][ T7050] can: request_module (can-proto-0) failed.
[  146.287544][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[  147.833747][ T7111] futex_wake_op: syz.1.305 tries to shift op by -2048; fix this program
[  147.885017][ T7111] futex_wake_op: syz.1.305 tries to shift op by -2048; fix this program
[  147.960419][ T7111] 0x000000000001-0x000000020000 : ""
[  148.139089][ T7111] ftl_cs: FTL header corrupt!
[  151.332325][ T5836] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18
[  151.468435][ T7179] FAULT_INJECTION: forcing a failure.
[  151.468435][ T7179] name failslab, interval 1, probability 0, space 0, times 0
[  151.506639][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.3.323 Not tainted syzkaller #0 PREEMPT(full) 
[  151.506676][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  151.506692][ T7179] Call Trace:
[  151.506701][ T7179]  <TASK>
[  151.506710][ T7179]  dump_stack_lvl+0x100/0x190
[  151.506756][ T7179]  should_fail_ex.cold+0x5/0xa
[  151.506787][ T7179]  should_failslab+0xc2/0x120
[  151.506821][ T7179]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  151.506868][ T7179]  ? security_file_alloc+0x34/0x2c0
[  151.506980][ T7179]  ? trace_kmem_cache_alloc+0xf3/0x120
[  151.507016][ T7179]  security_file_alloc+0x34/0x2c0
[  151.507047][ T7179]  init_file+0x95/0x480
[  151.507081][ T7179]  alloc_empty_file+0x73/0x1c0
[  151.507117][ T7179]  alloc_file_pseudo+0x13a/0x230
[  151.507155][ T7179]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  151.507201][ T7179]  __shmem_file_setup+0x221/0x490
[  151.507252][ T7179]  ? __pfx___shmem_file_setup+0x10/0x10
[  151.507297][ T7179]  ? vm_area_alloc+0x1f/0x160
[  151.507338][ T7179]  shmem_zero_setup+0x96/0x1b0
[  151.507384][ T7179]  __mmap_region+0x2198/0x29e0
[  151.507436][ T7179]  ? __pfx___mmap_region+0x10/0x10
[  151.507474][ T7179]  ? process_measurement+0x1f4/0x2350
[  151.507572][ T7179]  ? __lock_acquire+0x4a5/0x2630
[  151.507625][ T7179]  ? sched_clock+0x38/0x60
[  151.507692][ T7179]  ? lockdep_hardirqs_on+0x78/0x100
[  151.507761][ T7179]  ? finish_task_switch.isra.0+0x205/0xb80
[  151.507793][ T7179]  ? rcu_is_watching+0x12/0xc0
[  151.507896][ T7179]  ? rcu_is_watching+0x12/0xc0
[  151.507938][ T7179]  ? cap_capable+0x107/0x460
[  151.508054][ T7179]  mmap_region+0x180/0x3e0
[  151.508105][ T7179]  do_mmap+0xc63/0x12f0
[  151.508143][ T7179]  ? __pfx_do_mmap+0x10/0x10
[  151.508174][ T7179]  ? __pfx_down_write_killable+0x10/0x10
[  151.508248][ T7179]  vm_mmap_pgoff+0x29e/0x470
[  151.508288][ T7179]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  151.508323][ T7179]  ? do_futex+0x192/0x350
[  151.508355][ T7179]  ? __pfx_do_futex+0x10/0x10
[  151.508397][ T7179]  ksys_mmap_pgoff+0xe1/0x650
[  151.508426][ T7179]  ? __x64_sys_futex+0x34f/0x4d0
[  151.508461][ T7179]  ? __x64_sys_futex+0x358/0x4d0
[  151.508497][ T7179]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  151.508527][ T7179]  ? xfd_validate_state+0x129/0x190
[  151.508575][ T7179]  __x64_sys_mmap+0x125/0x190
[  151.508620][ T7179]  do_syscall_64+0x106/0xf80
[  151.508653][ T7179]  ? clear_bhb_loop+0x40/0x90
[  151.508688][ T7179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.508718][ T7179] RIP: 0033:0x7fc57579c799
[  151.508744][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.508771][ T7179] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  151.508797][ T7179] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  151.508816][ T7179] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  151.508843][ T7179] RBP: 00007fc575832bd9 R08: 0000000000000401 R09: 0000000000008000
[  151.508860][ T7179] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  151.508877][ T7179] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  151.508916][ T7179]  </TASK>
[  153.248065][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[  154.960041][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.969877][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.978152][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.989550][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.008653][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.794807][ T7229] chnl_net:caif_netlink_parms(): no params data found
[  155.943790][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.951156][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.958563][ T7229] bridge_slave_0: entered allmulticast mode
[  155.987571][ T7229] bridge_slave_0: entered promiscuous mode
[  156.022164][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.060224][ T7238] can: request_module (can-proto-0) failed.
[  156.077271][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.084511][ T7229] bridge_slave_1: entered allmulticast mode
[  156.177870][ T7229] bridge_slave_1: entered promiscuous mode
[  156.342125][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.368264][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.492955][ T7222] kexec: Could not allocate control_code_buffer
[  156.508768][ T7229] team0: Port device team_slave_0 added
[  156.619877][ T7229] team0: Port device team_slave_1 added
[  156.807180][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.814145][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  156.956635][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.997308][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.006750][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.091356][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.127255][ T5836] Bluetooth: hci4: command tx timeout
[  157.281389][ T7229] hsr_slave_0: entered promiscuous mode
[  157.314354][ T7229] hsr_slave_1: entered promiscuous mode
[  157.334091][ T7229] debugfs: 'hsr0' already exists in 'hsr'
[  157.394608][ T7229] Cannot create hsr debugfs directory
[  158.189987][ T7229] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.321019][ T7229] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.359209][ T7229] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.407360][ T7273] can: request_module (can-proto-0) failed.
[  158.495440][ T7229] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  159.072310][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.206661][ T5836] Bluetooth: hci4: command tx timeout
[  159.272067][ T7229] 8021q: adding VLAN 0 to HW filter on device team0
[  159.345194][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.352402][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.560215][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.567463][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.335207][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.551245][ T7284] kexec: Could not allocate control_code_buffer
[  161.157326][ T7229] veth0_vlan: entered promiscuous mode
[  161.185559][ T7229] veth1_vlan: entered promiscuous mode
[  161.272173][ T7229] veth0_macvtap: entered promiscuous mode
[  161.297240][ T5836] Bluetooth: hci4: command tx timeout
[  161.322314][ T7229] veth1_macvtap: entered promiscuous mode
[  161.388151][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.403078][ T7326] can: request_module (can-proto-0) failed.
[  161.412230][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.464009][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.507662][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.720184][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.809540][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.020216][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.041402][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.164136][  T339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.184623][  T339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.448009][ T7350] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  162.477903][ T7350] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  162.694555][ T7338] netlink: 330 bytes leftover after parsing attributes in process `syz.3.360'.
[  163.366723][ T5836] Bluetooth: hci4: command tx timeout
[  163.533301][ T7344] kexec: Could not allocate control_code_buffer
[  163.615453][ T7384] vivid-007: =================  START STATUS  =================
[  163.624636][ T7384] vivid-007: Generate PTS: true
[  163.632650][ T7384] vivid-007: Generate SCR: true
[  163.637945][ T7384] tpg source WxH: 320x240 (Y'CbCr)
[  163.651965][ T7384] tpg field: 1
[  163.704112][ T7384] tpg crop: (0,0)/320x240
[  163.741382][ T7384] tpg compose: (0,0)/320x240
[  163.748430][ T7384] tpg colorspace: 8
[  163.753582][ T7384] tpg transfer function: 0/0
[  163.760059][ T7384] tpg Y'CbCr encoding: 0/0
[  163.822276][ T7384] tpg quantization: 0/0
[  163.833991][ T7384] tpg RGB range: 0/2
[  163.838216][ T7384] vivid-007: ==================  END STATUS  ==================
[  163.846014][ T7383] vivid-007: =================  START STATUS  =================
[  163.973675][ T7383] vivid-007: Generate PTS: true
[  163.994063][ T7383] vivid-007: Generate SCR: true
[  164.010714][ T7383] tpg source WxH: 320x240 (Y'CbCr)
[  164.016123][ T7383] tpg field: 1
[  164.025245][ T7383] tpg crop: (0,0)/320x240
[  164.033847][ T7383] tpg compose: (0,0)/320x240
[  164.042669][ T7383] tpg colorspace: 8
[  164.052360][ T7383] tpg transfer function: 0/0
[  164.060862][ T7383] tpg Y'CbCr encoding: 0/0
[  164.080625][ T7383] tpg quantization: 0/0
[  164.126113][ T7383] tpg RGB range: 0/2
[  164.169655][ T7383] vivid-007: ==================  END STATUS  ==================
[  164.438102][ T7401] FAULT_INJECTION: forcing a failure.
[  164.438102][ T7401] name failslab, interval 1, probability 0, space 0, times 0
[  164.487520][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.1.374 Not tainted syzkaller #0 PREEMPT(full) 
[  164.487568][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.487584][ T7401] Call Trace:
[  164.487594][ T7401]  <TASK>
[  164.487604][ T7401]  dump_stack_lvl+0x100/0x190
[  164.487652][ T7401]  should_fail_ex.cold+0x5/0xa
[  164.487684][ T7401]  ? tomoyo_realpath_from_path+0xb6/0x690
[  164.487785][ T7401]  should_failslab+0xc2/0x120
[  164.487815][ T7401]  __kmalloc_noprof+0xe0/0x850
[  164.487865][ T7401]  tomoyo_realpath_from_path+0xb6/0x690
[  164.487907][ T7401]  tomoyo_check_open_permission+0x2af/0x3c0
[  164.487982][ T7401]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  164.488065][ T7401]  ? do_raw_spin_lock+0x128/0x260
[  164.488108][ T7401]  ? path_get+0x61/0x80
[  164.488142][ T7401]  tomoyo_file_open+0x6b/0x90
[  164.488181][ T7401]  security_file_open+0xb5/0x1e0
[  164.488211][ T7401]  do_dentry_open+0x5aa/0x1660
[  164.488242][ T7401]  ? security_inode_permission+0xbf/0x250
[  164.488293][ T7401]  vfs_open+0x82/0x3f0
[  164.488333][ T7401]  path_openat+0x208c/0x31a0
[  164.488375][ T7401]  ? __pfx_path_openat+0x10/0x10
[  164.488417][ T7401]  do_file_open+0x20e/0x430
[  164.488449][ T7401]  ? __pfx_do_file_open+0x10/0x10
[  164.488505][ T7401]  ? alloc_fd+0x476/0x790
[  164.488543][ T7401]  ? do_getname+0x191/0x390
[  164.488581][ T7401]  do_sys_openat2+0x10d/0x1e0
[  164.488616][ T7401]  ? __pfx_do_sys_openat2+0x10/0x10
[  164.488666][ T7401]  __x64_sys_openat+0x12d/0x210
[  164.488704][ T7401]  ? __pfx___x64_sys_openat+0x10/0x10
[  164.488755][ T7401]  do_syscall_64+0x106/0xf80
[  164.488789][ T7401]  ? clear_bhb_loop+0x40/0x90
[  164.488823][ T7401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.488852][ T7401] RIP: 0033:0x7fabf099c799
[  164.488876][ T7401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.488903][ T7401] RSP: 002b:00007fabf18d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  164.488927][ T7401] RAX: ffffffffffffffda RBX: 00007fabf0c15fa0 RCX: 00007fabf099c799
[  164.488946][ T7401] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  164.488962][ T7401] RBP: 00007fabf0a32bd9 R08: 0000000000000000 R09: 0000000000000000
[  164.488979][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.488996][ T7401] R13: 00007fabf0c16038 R14: 00007fabf0c15fa0 R15: 00007fffa72a7b88
[  164.489029][ T7401]  </TASK>
[  164.489087][ T7401] ERROR: Out of memory at tomoyo_realpath_from_path.
[  165.056186][ T7411] random: crng reseeded on system resumption
[  165.229873][ T7419] bonding: no command found in bonding_masters - use +ifname or -ifname
[  165.467865][ T7416] zswap: compressor � not available
[  165.494969][ T7423] FAULT_INJECTION: forcing a failure.
[  165.494969][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.523602][ T7428] Console: switching to colour VGA+ 80x25
[  165.526602][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) 
[  165.526636][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  165.526652][ T7423] Call Trace:
[  165.526661][ T7423]  <TASK>
[  165.526671][ T7423]  dump_stack_lvl+0x100/0x190
[  165.526716][ T7423]  should_fail_ex.cold+0x5/0xa
[  165.526747][ T7423]  _copy_from_user+0x2e/0xd0
[  165.526776][ T7423]  copy_msghdr_from_user+0x9f/0x4f0
[  165.526922][ T7423]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  165.526970][ T7423]  ? __pfx__kstrtoull+0x10/0x10
[  165.527015][ T7423]  ___sys_sendmsg+0x106/0x1e0
[  165.527057][ T7423]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.527117][ T7423]  ? find_held_lock+0x2b/0x80
[  165.527164][ T7423]  __sys_sendmmsg+0x205/0x430
[  165.527230][ T7423]  ? __pfx___sys_sendmmsg+0x10/0x10
[  165.527273][ T7423]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  165.527323][ T7423]  ? fput+0x79/0x100
[  165.527353][ T7423]  ? ksys_write+0x1ac/0x250
[  165.527377][ T7423]  ? __pfx_ksys_write+0x10/0x10
[  165.527406][ T7423]  __x64_sys_sendmmsg+0x9c/0x100
[  165.527459][ T7423]  ? lockdep_hardirqs_on+0x78/0x100
[  165.527491][ T7423]  do_syscall_64+0x106/0xf80
[  165.527522][ T7423]  ? clear_bhb_loop+0x40/0x90
[  165.527555][ T7423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.527583][ T7423] RIP: 0033:0x7fc57579c799
[  165.527605][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.527630][ T7423] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  165.527655][ T7423] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  165.527672][ T7423] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000002
[  165.527688][ T7423] RBP: 00007fc57671e090 R08: 0000000000000000 R09: 0000000000000000
[  165.527704][ T7423] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001
[  165.527720][ T7423] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  165.527755][ T7423]  </TASK>
[  165.537580][ T7423] bond0: option mode: unable to set because the bond device is up
[  165.966396][ T7429] syz.4.378 uses obsolete (PF_INET,SOCK_PACKET)
[  166.248245][ T7443] ptrace attach of "./syz-executor exec"[5823] was attempted by "+��\x0b����+������9�
���d�t�f0P8��ۑu*\x0d��\x0a�D�1��V�2*��9�I´���g��Z2��h\x07�Q�x[�&�~�$��@����_�:q8�d�/\x09��R�)��s�\x0dKB�1�i�:���{��Pn�|F�.u8vbΨ���Pa��8��rL�A�}�'*!��w~��+�:�xl\x0d$����Z��a .�+�j�LI�/W'o?pk���Q�#�g�b*�ȕ)iT�vR�����#\x0dث���9�*����q��%����aUE�f:0�uY%!��z\x0cV��x�\x0c�?�2���/>gC�P梧U�r�;�\x22��\x5c�ã+��(�2�M���aC\x0a�@K�+�]+Fׄ�>d��HF2�J�|�'�p4���&�G�PVAby��\x07��(i�I�㹃��\x07�Z�d��z%�刭or,A]d/ـ.̇g�T�[=~$贰a��5Cz��]\x0b����l�D�9zHd���?�,�w��X�� �6tz{@�����J�+��Ef���@)}\x07������oz�=0֐�v��sT q�#���������@9��Xe���4Ɗ�\x1bbU�O\x0b1�_�m��h�b�)�Ba��\x07‘h�je�\x09�N�'�����Hm$�?�F})� �7*�_���\x5c���z<&Hx �@&W�K�؎>�����*L�c^�,_g!�CQ3��Uf�]J��\x22�g~�C�*��s�D���;���s �R��E���T.Ϸ�kuɥ�K��\x09qZer��I�{I���\x0adq+�\x07=��8�@g�n�wf\x5c�aͤ��%R)�ƼY(�Lb�'��j|�{�pg�)���z�L'�qXAl��1��Xo˃�4��`�s��'@�r����_:��ߘ����^ĩs=t,EQM��Y,�^�_�RI�1%���n
[  166.426700][ T7436] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  166.777131][ T7452] random: crng reseeded on system resumption
[  167.029187][ T7455] FAULT_INJECTION: forcing a failure.
[  167.029187][ T7455] name failslab, interval 1, probability 0, space 0, times 0
[  167.042242][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) 
[  167.042282][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  167.042299][ T7455] Call Trace:
[  167.042307][ T7455]  <TASK>
[  167.042318][ T7455]  dump_stack_lvl+0x100/0x190
[  167.042368][ T7455]  should_fail_ex.cold+0x5/0xa
[  167.042401][ T7455]  should_failslab+0xc2/0x120
[  167.042431][ T7455]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  167.042474][ T7455]  ? __anon_vma_prepare+0xae/0x5e0
[  167.042517][ T7455]  ? __pfx_filemap_map_pages+0x10/0x10
[  167.042584][ T7455]  __anon_vma_prepare+0xae/0x5e0
[  167.042618][ T7455]  ? find_held_lock+0x2b/0x80
[  167.042648][ T7455]  ? __pfx_filemap_map_pages+0x10/0x10
[  167.042688][ T7455]  __vmf_anon_prepare+0x11f/0x250
[  167.042719][ T7455]  do_fault+0x152/0x1950
[  167.042748][ T7455]  ? __pmd_alloc+0x6aa/0x9c0
[  167.042793][ T7455]  __handle_mm_fault+0x180f/0x2b60
[  167.042835][ T7455]  ? mt_find+0x45e/0x8e0
[  167.042944][ T7455]  ? __pfx___handle_mm_fault+0x10/0x10
[  167.042979][ T7455]  ? __pfx_mt_find+0x10/0x10
[  167.043058][ T7455]  handle_mm_fault+0x36d/0xa20
[  167.043104][ T7455]  __get_user_pages+0xf9c/0x34d0
[  167.043153][ T7455]  ? __pfx___get_user_pages+0x10/0x10
[  167.043196][ T7455]  populate_vma_page_range+0x267/0x3f0
[  167.043233][ T7455]  ? __pfx_populate_vma_page_range+0x10/0x10
[  167.043267][ T7455]  ? __pfx_find_vma_intersection+0x10/0x10
[  167.043297][ T7455]  ? do_mmap+0x93f/0x12f0
[  167.043331][ T7455]  __mm_populate+0x107/0x3a0
[  167.043363][ T7455]  ? __pfx___mm_populate+0x10/0x10
[  167.043398][ T7455]  ? up_write+0x290/0x4f0
[  167.043440][ T7455]  vm_mmap_pgoff+0x37f/0x470
[  167.043476][ T7455]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  167.043504][ T7455]  ? __fget_files+0x215/0x3d0
[  167.043537][ T7455]  ? __fget_files+0x21f/0x3d0
[  167.043570][ T7455]  ksys_mmap_pgoff+0x3c8/0x650
[  167.043599][ T7455]  ? __x64_sys_futex+0x34f/0x4d0
[  167.043632][ T7455]  ? __x64_sys_futex+0x358/0x4d0
[  167.043668][ T7455]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  167.043706][ T7455]  ? xfd_validate_state+0x129/0x190
[  167.043754][ T7455]  __x64_sys_mmap+0x125/0x190
[  167.043806][ T7455]  do_syscall_64+0x106/0xf80
[  167.043840][ T7455]  ? clear_bhb_loop+0x40/0x90
[  167.043877][ T7455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.043906][ T7455] RIP: 0033:0x7fc57579c799
[  167.043931][ T7455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.043958][ T7455] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  167.043985][ T7455] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  167.044003][ T7455] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000
[  167.044020][ T7455] RBP: 00007fc575832bd9 R08: 0000000000000003 R09: 0000000000008000
[  167.044037][ T7455] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000
[  167.044053][ T7455] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  167.044090][ T7455]  </TASK>
[  168.067251][ T7472] bond0: option mode: unable to set because the bond device is up
[  168.319657][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[  168.838239][ T7484] bond0: option mode: unable to set because the bond device is up
[  168.958822][ T7487] can: request_module (can-proto-0) failed.
[  169.315968][ T7496] netlink: 138 bytes leftover after parsing attributes in process `syz.4.399'.
[  170.050685][ T7518] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  170.127781][ T7518] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  170.201987][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'.
[  171.493359][ T7510] kexec: Could not allocate control_code_buffer
[  171.616307][ T7539] netlink: 13 bytes leftover after parsing attributes in process `syz.3.411'.
[  172.463245][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.416'.
[  172.516732][ T7554] hsr_slave_0 (unregistering): left promiscuous mode
[  174.105477][ T7570] can: request_module (can-proto-0) failed.
[  176.681689][ T7622] NFSD: Failed to start, no listeners configured.
[  177.151330][ T7632] zswap: compressor  not available
[  177.566257][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'.
[  178.691670][ T7653] can: request_module (can-proto-0) failed.
[  178.936789][ T7665] block nbd8: shutting down sockets
[  179.111709][ T7679] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  180.831855][ T7716] FAULT_INJECTION: forcing a failure.
[  180.831855][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.887727][ T7716] CPU: 1 UID: 0 PID: 7716 Comm: syz.1.452 Not tainted syzkaller #0 PREEMPT(full) 
[  180.887763][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  180.887779][ T7716] Call Trace:
[  180.887788][ T7716]  <TASK>
[  180.887797][ T7716]  dump_stack_lvl+0x100/0x190
[  180.887842][ T7716]  should_fail_ex.cold+0x5/0xa
[  180.887874][ T7716]  _copy_from_user+0x2e/0xd0
[  180.887901][ T7716]  copy_msghdr_from_user+0x9f/0x4f0
[  180.887945][ T7716]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  180.888011][ T7716]  ___sys_sendmsg+0x106/0x1e0
[  180.888053][ T7716]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.888136][ T7716]  __sys_sendmsg+0x170/0x220
[  180.888168][ T7716]  ? __pfx___sys_sendmsg+0x10/0x10
[  180.888229][ T7716]  do_syscall_64+0x106/0xf80
[  180.888261][ T7716]  ? clear_bhb_loop+0x40/0x90
[  180.888294][ T7716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.888322][ T7716] RIP: 0033:0x7fabf099c799
[  180.888344][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.888369][ T7716] RSP: 002b:00007fabf18d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.888395][ T7716] RAX: ffffffffffffffda RBX: 00007fabf0c15fa0 RCX: 00007fabf099c799
[  180.888413][ T7716] RDX: 0000000000000040 RSI: 0000200000004f80 RDI: 0000000000000004
[  180.888430][ T7716] RBP: 00007fabf18d4090 R08: 0000000000000000 R09: 0000000000000000
[  180.888447][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.888462][ T7716] R13: 00007fabf0c16038 R14: 00007fabf0c15fa0 R15: 00007fffa72a7b88
[  180.888498][ T7716]  </TASK>
[  181.670628][ T7719] can: request_module (can-proto-0) failed.
[  181.919602][ T7742] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  181.976806][ T7742] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  183.548462][ T7772] FAULT_INJECTION: forcing a failure.
[  183.548462][ T7772] name failslab, interval 1, probability 0, space 0, times 0
[  183.588338][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.4.467 Not tainted syzkaller #0 PREEMPT(full) 
[  183.588375][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  183.588391][ T7772] Call Trace:
[  183.588400][ T7772]  <TASK>
[  183.588409][ T7772]  dump_stack_lvl+0x100/0x190
[  183.588457][ T7772]  should_fail_ex.cold+0x5/0xa
[  183.588489][ T7772]  should_failslab+0xc2/0x120
[  183.588518][ T7772]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  183.588559][ T7772]  ? __alloc_skb+0x140/0x710
[  183.588668][ T7772]  __alloc_skb+0x140/0x710
[  183.588693][ T7772]  ? __alloc_skb+0x5b7/0x710
[  183.588721][ T7772]  ? __pfx___alloc_skb+0x10/0x10
[  183.588761][ T7772]  netlink_alloc_large_skb+0x69/0x150
[  183.588848][ T7772]  netlink_sendmsg+0x680/0xda0
[  183.588890][ T7772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.588922][ T7772]  ? __import_iovec+0x1d2/0x640
[  183.588986][ T7772]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  183.589056][ T7772]  ____sys_sendmsg+0x9e1/0xb70
[  183.589093][ T7772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.589131][ T7772]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.589186][ T7772]  ___sys_sendmsg+0x190/0x1e0
[  183.589261][ T7772]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.589346][ T7772]  __sys_sendmsg+0x170/0x220
[  183.589379][ T7772]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.589435][ T7772]  do_syscall_64+0x106/0xf80
[  183.589466][ T7772]  ? clear_bhb_loop+0x40/0x90
[  183.589499][ T7772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.589527][ T7772] RIP: 0033:0x7fc62ad9c799
[  183.589549][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.589575][ T7772] RSP: 002b:00007fc628ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.589600][ T7772] RAX: ffffffffffffffda RBX: 00007fc62b015fa0 RCX: 00007fc62ad9c799
[  183.589619][ T7772] RDX: 0000000000000040 RSI: 0000200000004f80 RDI: 0000000000000004
[  183.589635][ T7772] RBP: 00007fc628ff6090 R08: 0000000000000000 R09: 0000000000000000
[  183.589651][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.589667][ T7772] R13: 00007fc62b016038 R14: 00007fc62b015fa0 R15: 00007ffdc534b3e8
[  183.589703][ T7772]  </TASK>
[  183.973054][ T7739] kexec: Could not allocate control_code_buffer
[  184.204125][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'.
[  184.683300][ T7790] can: request_module (can-proto-0) failed.
[  184.839215][ T7793] can: request_module (can-proto-0) failed.
[  186.303375][ T7815] can: request_module (can-proto-0) failed.
[  186.522701][ T7785] kexec: Could not allocate control_code_buffer
[  186.717207][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'.
[  187.727203][ T7850] FAULT_INJECTION: forcing a failure.
[  187.727203][ T7850] name failslab, interval 1, probability 0, space 0, times 0
[  187.766230][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.3.491 Not tainted syzkaller #0 PREEMPT(full) 
[  187.766271][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.766289][ T7850] Call Trace:
[  187.766297][ T7850]  <TASK>
[  187.766308][ T7850]  dump_stack_lvl+0x100/0x190
[  187.766356][ T7850]  should_fail_ex.cold+0x5/0xa
[  187.766392][ T7850]  should_failslab+0xc2/0x120
[  187.766423][ T7850]  __kmalloc_node_noprof+0xe6/0x850
[  187.766466][ T7850]  ? __rb_allocate_pages+0x589/0xf50
[  187.766517][ T7850]  __rb_allocate_pages+0x589/0xf50
[  187.766562][ T7850]  ring_buffer_subbuf_order_set+0x3ef/0x18c0
[  187.766608][ T7850]  ? tracing_stop_tr+0xf6/0x210
[  187.766650][ T7850]  ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10
[  187.766688][ T7850]  ? __pfx___might_resched+0x10/0x10
[  187.766724][ T7850]  ? iovec_from_user+0xda/0x140
[  187.766756][ T7850]  buffer_subbuf_size_write+0x182/0x280
[  187.766812][ T7850]  ? __pfx_buffer_subbuf_size_write+0x10/0x10
[  187.766861][ T7850]  ? iov_iter_advance+0xac/0x6d0
[  187.766980][ T7850]  ? __pfx_buffer_subbuf_size_write+0x10/0x10
[  187.767020][ T7850]  vfs_writev+0x5ea/0xe10
[  187.767059][ T7850]  ? rcu_is_watching+0x12/0xc0
[  187.767108][ T7850]  ? __pfx_vfs_writev+0x10/0x10
[  187.767142][ T7850]  ? fdget_pos+0x2aa/0x380
[  187.767193][ T7850]  ? __fget_files+0x21f/0x3d0
[  187.767224][ T7850]  ? do_writev+0x13e/0x340
[  187.767258][ T7850]  do_writev+0x13e/0x340
[  187.767295][ T7850]  ? __pfx_do_writev+0x10/0x10
[  187.767342][ T7850]  do_syscall_64+0x106/0xf80
[  187.767377][ T7850]  ? clear_bhb_loop+0x40/0x90
[  187.767412][ T7850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.767439][ T7850] RIP: 0033:0x7fc57579c799
[  187.767463][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.767489][ T7850] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  187.767515][ T7850] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  187.767533][ T7850] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000006
[  187.767549][ T7850] RBP: 00007fc575832bd9 R08: 0000000000000000 R09: 0000000000000000
[  187.767566][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.767582][ T7850] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  187.767616][ T7850]  </TASK>
[  188.830918][ T7840] FAULT_INJECTION: forcing a failure.
[  188.830918][ T7840] name fail_futex, interval 1, probability 0, space 0, times 1
[  188.846425][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) 
[  188.846463][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  188.846480][ T7840] Call Trace:
[  188.846489][ T7840]  <TASK>
[  188.846500][ T7840]  dump_stack_lvl+0x100/0x190
[  188.846546][ T7840]  should_fail_ex.cold+0x5/0xa
[  188.846576][ T7840]  get_futex_key+0x1d2/0x1620
[  188.846611][ T7840]  ? __pfx_get_futex_key+0x10/0x10
[  188.846657][ T7840]  futex_wake+0xea/0x530
[  188.846701][ T7840]  ? __pfx_futex_wake+0x10/0x10
[  188.846742][ T7840]  ? perf_event_namespaces+0x1ad/0x200
[  188.846787][ T7840]  ? do_raw_spin_lock+0x128/0x260
[  188.846838][ T7840]  do_futex+0x32b/0x350
[  188.846875][ T7840]  ? __pfx_do_futex+0x10/0x10
[  188.846910][ T7840]  ? ksys_unshare+0x6c5/0xad0
[  188.846957][ T7840]  __x64_sys_futex+0x34f/0x4d0
[  188.847000][ T7840]  ? __pfx___x64_sys_futex+0x10/0x10
[  188.847052][ T7840]  do_syscall_64+0x106/0xf80
[  188.847088][ T7840]  ? clear_bhb_loop+0x40/0x90
[  188.847123][ T7840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.847152][ T7840] RIP: 0033:0x7fabf099c799
[  188.847176][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.847210][ T7840] RSP: 002b:00007fabf18b30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  188.847237][ T7840] RAX: ffffffffffffffda RBX: 00007fabf0c16098 RCX: 00007fabf099c799
[  188.847256][ T7840] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabf0c1609c
[  188.847274][ T7840] RBP: 00007fabf0c16090 R08: 0000000000000000 R09: 0000000000000000
[  188.847291][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.847308][ T7840] R13: 00007fabf0c16128 R14: 00007fffa72a7aa0 R15: 00007fffa72a7b88
[  188.847346][ T7840]  </TASK>
[  190.176642][ T7859] kexec: Could not allocate control_code_buffer
[  190.509865][ T7892] netlink: 342 bytes leftover after parsing attributes in process `syz.0.501'.
[  190.549170][ T7881] bond0: option mode: unable to set because the bond device is up
[  192.659490][ T7908] syz.0.508 (7908) used greatest stack depth: 20216 bytes left
[  192.939712][ T7930] can: request_module (can-proto-0) failed.
[  193.730888][ T7912] kexec: Could not allocate control_code_buffer
[  193.760998][ T7948] bond0: invalid ARP target specified
[  193.828208][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'.
[  193.879770][ T7948] FAULT_INJECTION: forcing a failure.
[  193.879770][ T7948] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  193.908627][ T7948] CPU: 1 UID: 0 PID: 7948 Comm: syz.4.517 Not tainted syzkaller #0 PREEMPT(full) 
[  193.908664][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  193.908680][ T7948] Call Trace:
[  193.908690][ T7948]  <TASK>
[  193.908701][ T7948]  dump_stack_lvl+0x100/0x190
[  193.908750][ T7948]  should_fail_ex.cold+0x5/0xa
[  193.908780][ T7948]  ? prepare_alloc_pages+0x16d/0x5f0
[  193.908815][ T7948]  should_fail_alloc_page+0xeb/0x140
[  193.908847][ T7948]  prepare_alloc_pages+0x1f0/0x5f0
[  193.908886][ T7948]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  193.908935][ T7948]  ? __lock_acquire+0x4a5/0x2630
[  193.908981][ T7948]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  193.909026][ T7948]  ? do_raw_spin_lock+0x128/0x260
[  193.909067][ T7948]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  193.909108][ T7948]  ? find_held_lock+0x2b/0x80
[  193.909142][ T7948]  ? __lock_acquire+0x4a5/0x2630
[  193.909174][ T7948]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  193.909219][ T7948]  ? policy_nodemask+0xed/0x4f0
[  193.909248][ T7948]  alloc_pages_mpol+0x1fb/0x550
[  193.909289][ T7948]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  193.909319][ T7948]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  193.909364][ T7948]  ? __folio_batch_add_and_move+0x5e5/0xc60
[  193.909414][ T7948]  folio_alloc_mpol_noprof+0x36/0x340
[  193.909451][ T7948]  shmem_alloc_folio+0x135/0x160
[  193.909488][ T7948]  shmem_alloc_and_add_folio+0x371/0xd40
[  193.909539][ T7948]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  193.909583][ T7948]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  193.909634][ T7948]  shmem_get_folio_gfp+0x6ab/0x1900
[  193.909685][ T7948]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  193.909729][ T7948]  ? filemap_map_pages+0xe69/0x2020
[  193.909776][ T7948]  shmem_fault+0x1f9/0xa20
[  193.909815][ T7948]  ? __lock_acquire+0x4a5/0x2630
[  193.909850][ T7948]  ? __pfx_shmem_fault+0x10/0x10
[  193.909898][ T7948]  ? __pfx_filemap_map_pages+0x10/0x10
[  193.909949][ T7948]  __do_fault+0x10d/0x550
[  193.909980][ T7948]  do_fault+0xaf9/0x1950
[  193.910017][ T7948]  __handle_mm_fault+0x180f/0x2b60
[  193.910060][ T7948]  ? mt_find+0x45e/0x8e0
[  193.910099][ T7948]  ? __pfx___handle_mm_fault+0x10/0x10
[  193.910134][ T7948]  ? __pfx_mt_find+0x10/0x10
[  193.910190][ T7948]  ? find_vma+0xbf/0x140
[  193.910215][ T7948]  ? __pfx_find_vma+0x10/0x10
[  193.910246][ T7948]  handle_mm_fault+0x36d/0xa20
[  193.910297][ T7948]  do_user_addr_fault+0x74c/0x12f0
[  193.910351][ T7948]  exc_page_fault+0x6f/0xd0
[  193.910386][ T7948]  asm_exc_page_fault+0x26/0x30
[  193.910412][ T7948] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  193.910457][ T7948] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  193.910481][ T7948] RSP: 0018:ffffc90006bafd30 EFLAGS: 00050206
[  193.910504][ T7948] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000005b84
[  193.910521][ T7948] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffffc90006b8a07c
[  193.910538][ T7948] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff52000d71f7f
[  193.910555][ T7948] R10: ffffc90006b8fbff R11: 0000000000000000 R12: 0000000000000000
[  193.910573][ T7948] R13: ffffc90006b88060 R14: 0000000000007ba0 R15: ffffc90006b88060
[  193.910614][ T7948]  _copy_from_user+0x98/0xd0
[  193.910645][ T7948]  bpf_prog_create_from_user+0x109/0x2f0
[  193.910761][ T7948]  ? __pfx_seccomp_check_filter+0x10/0x10
[  193.910800][ T7948]  do_seccomp+0x7f7/0x2740
[  193.910845][ T7948]  ? __pfx_do_seccomp+0x10/0x10
[  193.910881][ T7948]  ? __x64_sys_openat+0x12d/0x210
[  193.910918][ T7948]  ? xfd_validate_state+0x129/0x190
[  193.910967][ T7948]  do_syscall_64+0x106/0xf80
[  193.910999][ T7948]  ? clear_bhb_loop+0x40/0x90
[  193.911034][ T7948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.911063][ T7948] RIP: 0033:0x7fc62ad9c799
[  193.911084][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.911109][ T7948] RSP: 002b:00007fc628ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  193.911134][ T7948] RAX: ffffffffffffffda RBX: 00007fc62b015fa0 RCX: 00007fc62ad9c799
[  193.911151][ T7948] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001
[  193.911166][ T7948] RBP: 00007fc62ae32bd9 R08: 0000000000000000 R09: 0000000000000000
[  193.911182][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.911197][ T7948] R13: 00007fc62b016038 R14: 00007fc62b015fa0 R15: 00007ffdc534b3e8
[  193.911235][ T7948]  </TASK>
[  194.390277][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.399543][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  196.212552][ T7965] block nbd8: shutting down sockets
[  196.520714][ T7972] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input12
[  197.587859][ T8003] can: request_module (can-proto-0) failed.
[  200.636716][ T8052] can: request_module (can-proto-0) failed.
[  200.877506][ T5836] Bluetooth: hci2: Unable to find connection for big 0xd2
[  202.382303][ T8072] [U] 
[  203.429170][ T8109] can: request_module (can-proto-0) failed.
[  206.062557][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'.
[  206.150544][ T8161] netlink: 198 bytes leftover after parsing attributes in process `syz.4.569'.
[  206.330724][ T8165] FAULT_INJECTION: forcing a failure.
[  206.330724][ T8165] name failslab, interval 1, probability 0, space 0, times 0
[  206.424333][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.3.570 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  206.424393][ T8165] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  206.424407][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  206.424422][ T8165] Call Trace:
[  206.424431][ T8165]  <TASK>
[  206.424441][ T8165]  dump_stack_lvl+0x100/0x190
[  206.424488][ T8165]  should_fail_ex.cold+0x5/0xa
[  206.424522][ T8165]  should_failslab+0xc2/0x120
[  206.424551][ T8165]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  206.424592][ T8165]  ? __alloc_skb+0x140/0x710
[  206.424627][ T8165]  __alloc_skb+0x140/0x710
[  206.424654][ T8165]  ? __alloc_skb+0x5b7/0x710
[  206.424683][ T8165]  ? __pfx___alloc_skb+0x10/0x10
[  206.424712][ T8165]  ? __lock_acquire+0x4a5/0x2630
[  206.424745][ T8165]  ? __local_bh_enable_ip+0x9e/0x120
[  206.424775][ T8165]  __ip_append_data+0x2e31/0x4690
[  206.424898][ T8165]  ? __pfx_raw_getfrag+0x10/0x10
[  206.424986][ T8165]  ? find_held_lock+0x2b/0x80
[  206.425009][ T8165]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750
[  206.425096][ T8165]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[  206.425137][ T8165]  ? __pfx___ip_append_data+0x10/0x10
[  206.425178][ T8165]  ip_append_data+0x10f/0x1a0
[  206.425214][ T8165]  ? __pfx_raw_getfrag+0x10/0x10
[  206.425253][ T8165]  raw_sendmsg+0xcb6/0x35f0
[  206.425304][ T8165]  ? __pfx_raw_sendmsg+0x10/0x10
[  206.425342][ T8165]  ? __page_table_check_ptes_set+0x1b5/0x4e0
[  206.425369][ T8165]  ? find_held_lock+0x2b/0x80
[  206.425391][ T8165]  ? rcu_read_unlock+0x2d/0xb0
[  206.425425][ T8165]  ? rcu_read_unlock+0x2d/0xb0
[  206.425495][ T8165]  ? __import_iovec+0x1d2/0x640
[  206.425524][ T8165]  ? __pfx_raw_sendmsg+0x10/0x10
[  206.425566][ T8165]  inet_sendmsg+0x11c/0x140
[  206.425662][ T8165]  ____sys_sendmsg+0x98d/0xb70
[  206.425700][ T8165]  ? __pfx_inet_sendmsg+0x10/0x10
[  206.425740][ T8165]  ? __pfx_____sys_sendmsg+0x10/0x10
[  206.425782][ T8165]  ? rcu_is_watching+0x12/0xc0
[  206.425819][ T8165]  ? ___sys_sendmsg+0x19d/0x1e0
[  206.425855][ T8165]  ? kfree+0x2ec/0x6b0
[  206.425883][ T8165]  ? find_held_lock+0x2b/0x80
[  206.425906][ T8165]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  206.425952][ T8165]  ___sys_sendmsg+0x190/0x1e0
[  206.425993][ T8165]  ? __pfx____sys_sendmsg+0x10/0x10
[  206.426029][ T8165]  ? do_user_addr_fault+0x7de/0x12f0
[  206.426092][ T8165]  ? irqentry_exit+0x180/0x670
[  206.426138][ T8165]  ? __pfx___might_resched+0x10/0x10
[  206.426180][ T8165]  __sys_sendmmsg+0x205/0x430
[  206.426216][ T8165]  ? __pfx___sys_sendmmsg+0x10/0x10
[  206.426246][ T8165]  ? file_init_path+0x48e/0x670
[  206.426283][ T8165]  ? __pfx_do_futex+0x10/0x10
[  206.426328][ T8165]  ? __sys_socket+0xac/0x260
[  206.426351][ T8165]  ? xfd_validate_state+0x129/0x190
[  206.426394][ T8165]  __x64_sys_sendmmsg+0x9c/0x100
[  206.426424][ T8165]  ? lockdep_hardirqs_on+0x78/0x100
[  206.426453][ T8165]  do_syscall_64+0x106/0xf80
[  206.426482][ T8165]  ? clear_bhb_loop+0x40/0x90
[  206.426515][ T8165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.426540][ T8165] RIP: 0033:0x7fc57579c799
[  206.426561][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.426586][ T8165] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  206.426610][ T8165] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  206.426627][ T8165] RDX: 000000000000787b RSI: 0000000000000000 RDI: 0000000000000003
[  206.426643][ T8165] RBP: 00007fc575832bd9 R08: 0000000000000000 R09: 0000000000000000
[  206.426658][ T8165] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000
[  206.426672][ T8165] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  206.426708][ T8165]  </TASK>
[  210.176487][ T8240] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  210.388754][ T8238] can: request_module (can-proto-0) failed.
[  211.620139][ T8276] can: request_module (can-proto-0) failed.
[  215.451078][ T8336] can: request_module (can-proto-0) failed.
[  215.674531][ T8344] FAULT_INJECTION: forcing a failure.
[  215.674531][ T8344] name failslab, interval 1, probability 0, space 0, times 0
[  215.738142][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.3.611 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  215.738203][ T8344] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  215.738218][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.738233][ T8344] Call Trace:
[  215.738242][ T8344]  <TASK>
[  215.738252][ T8344]  dump_stack_lvl+0x100/0x190
[  215.738298][ T8344]  should_fail_ex.cold+0x5/0xa
[  215.738332][ T8344]  should_failslab+0xc2/0x120
[  215.738362][ T8344]  __kvmalloc_node_noprof+0xfa/0xa00
[  215.738403][ T8344]  ? seq_read_iter+0x819/0x1270
[  215.738452][ T8344]  seq_read_iter+0x819/0x1270
[  215.738494][ T8344]  ? aa_file_perm+0x7f3/0x14d0
[  215.738536][ T8344]  seq_read+0x33b/0x4c0
[  215.738576][ T8344]  ? __pfx_seq_read+0x10/0x10
[  215.738640][ T8344]  ? __pfx_seq_read+0x10/0x10
[  215.738678][ T8344]  proc_reg_read+0x240/0x330
[  215.738718][ T8344]  ? __pfx_proc_reg_read+0x10/0x10
[  215.738758][ T8344]  vfs_read+0x1e4/0xb30
[  215.738812][ T8344]  ? __pfx_vfs_read+0x10/0x10
[  215.738851][ T8344]  ? __fget_files+0x215/0x3d0
[  215.738885][ T8344]  ? __fget_files+0x21f/0x3d0
[  215.738922][ T8344]  ksys_read+0x12a/0x250
[  215.738961][ T8344]  ? __pfx_ksys_read+0x10/0x10
[  215.739012][ T8344]  do_syscall_64+0x106/0xf80
[  215.739046][ T8344]  ? clear_bhb_loop+0x40/0x90
[  215.739080][ T8344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.739108][ T8344] RIP: 0033:0x7fc57579c799
[  215.739131][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.739156][ T8344] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.739182][ T8344] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  215.739200][ T8344] RDX: 0000000000000085 RSI: 0000000000000000 RDI: 0000000000000004
[  215.739215][ T8344] RBP: 00007fc57671e090 R08: 0000000000000000 R09: 0000000000000000
[  215.739232][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.739247][ T8344] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  215.739285][ T8344]  </TASK>
[  216.686891][ T8346] syz.1.612 (8346) used greatest stack depth: 17560 bytes left
[  217.114224][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  217.357753][ T8378] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  217.763881][ T8386] can: request_module (can-proto-0) failed.
[  218.228194][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'.
[  218.238763][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'.
[  218.314278][ T8400] ipvlan0: entered promiscuous mode
[  218.328251][ T8400] ipvlan0: entered allmulticast mode
[  218.344041][ T8400] veth0_vlan: entered allmulticast mode
[  219.166726][ T8377] kexec: Could not allocate control_code_buffer
[  219.358467][   T30] audit: type=1800 audit(1773080075.508:3): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.630" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  220.790515][ T8455] : Can't lookup blockdev
[  221.877869][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  221.917555][ T8477] netlink: 354 bytes leftover after parsing attributes in process `syz.3.645'.

syzkaller
syzkaller login: [  222.490754][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  222.870092][ T8500] usbip-vudc usbip-vudc.0: gadget not bound
[  224.549900][ T5836] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6
[  225.121890][ T8526] binder: 8525:8526 ioctl c018620c 200000000040 returned -22
[  225.633918][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'.
[  226.054091][ T8548] bond0: option mode: unable to set because the bond device is up
[  226.083252][ T8542] bond0: option mode: unable to set because the bond device is up
[  227.118886][ T8573] netlink: 122 bytes leftover after parsing attributes in process `syz.3.669'.
[  227.122826][ T8578] netlink: 122 bytes leftover after parsing attributes in process `syz.3.669'.
[  227.722553][ T8583] can: request_module (can-proto-0) failed.
[  227.788933][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[  227.984062][ T8593] FAULT_INJECTION: forcing a failure.
[  227.984062][ T8593] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  228.017509][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.3.673 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  228.017569][ T8593] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  228.017585][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  228.017600][ T8593] Call Trace:
[  228.017609][ T8593]  <TASK>
[  228.017621][ T8593]  dump_stack_lvl+0x100/0x190
[  228.017668][ T8593]  should_fail_ex.cold+0x5/0xa
[  228.017695][ T8593]  ? prepare_alloc_pages+0x16d/0x5f0
[  228.017730][ T8593]  should_fail_alloc_page+0xeb/0x140
[  228.017762][ T8593]  prepare_alloc_pages+0x1f0/0x5f0
[  228.017800][ T8593]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  228.017846][ T8593]  ? __resched_curr+0x315/0x3b0
[  228.017897][ T8593]  ? update_cfs_rq_load_avg+0x51/0x550
[  228.017937][ T8593]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  228.017988][ T8593]  ? __lock_acquire+0x4a5/0x2630
[  228.018039][ T8593]  ? __lock_acquire+0x4a5/0x2630
[  228.018078][ T8593]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  228.018145][ T8593]  ? policy_nodemask+0xed/0x4f0
[  228.018179][ T8593]  alloc_pages_mpol+0x1fb/0x550
[  228.018210][ T8593]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  228.018250][ T8593]  alloc_pages_noprof+0x131/0x390
[  228.018283][ T8593]  __pmd_alloc+0x3b/0x9c0
[  228.018319][ T8593]  __handle_mm_fault+0xa99/0x2b60
[  228.018360][ T8593]  ? mt_find+0x45e/0x8e0
[  228.018399][ T8593]  ? __pfx___handle_mm_fault+0x10/0x10
[  228.018436][ T8593]  ? __pfx_mt_find+0x10/0x10
[  228.018491][ T8593]  ? find_vma+0xbf/0x140
[  228.018517][ T8593]  ? __pfx_find_vma+0x10/0x10
[  228.018545][ T8593]  handle_mm_fault+0x36d/0xa20
[  228.018586][ T8593]  do_user_addr_fault+0x74c/0x12f0
[  228.018637][ T8593]  exc_page_fault+0x6f/0xd0
[  228.018668][ T8593]  asm_exc_page_fault+0x26/0x30
[  228.018696][ T8593] RIP: 0010:strncpy_from_user+0xfd/0x2d0
[  228.018817][ T8593] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 d2 13 e0 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 e3 18 e0 fc <4d> 8b 24 1e e8 da 18 e0 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff
[  228.018843][ T8593] RSP: 0018:ffffc900059c7d00 EFLAGS: 00050283
[  228.018866][ T8593] RAX: 0000000000000037 RBX: 0000000000000000 RCX: ffffc9000df81000
[  228.018884][ T8593] RDX: 0000000000080000 RSI: ffffffff8527fd5d RDI: ffff8880260b0000
[  228.018903][ T8593] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007
[  228.018919][ T8593] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000
[  228.018936][ T8593] R13: ffff888028960f18 R14: 0000000000000000 R15: 00000000000000a8
[  228.018965][ T8593]  ? strncpy_from_user+0xfd/0x2d0
[  228.019019][ T8593]  do_getname+0x78/0x390
[  228.019059][ T8593]  do_sys_openat2+0xc5/0x1e0
[  228.019106][ T8593]  ? __pfx_do_sys_openat2+0x10/0x10
[  228.019158][ T8593]  __x64_sys_openat+0x12d/0x210
[  228.019197][ T8593]  ? __pfx___x64_sys_openat+0x10/0x10
[  228.019251][ T8593]  do_syscall_64+0x106/0xf80
[  228.019284][ T8593]  ? clear_bhb_loop+0x40/0x90
[  228.019318][ T8593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.019347][ T8593] RIP: 0033:0x7fc57579c799
[  228.019370][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.019396][ T8593] RSP: 002b:00007fc57671e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.019421][ T8593] RAX: ffffffffffffffda RBX: 00007fc575a15fa0 RCX: 00007fc57579c799
[  228.019439][ T8593] RDX: 0000000000048a42 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  228.019457][ T8593] RBP: 00007fc575832bd9 R08: 0000000000000000 R09: 0000000000000000
[  228.019474][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.019491][ T8593] R13: 00007fc575a16038 R14: 00007fc575a15fa0 R15: 00007fff21f0a4d8
[  228.019529][ T8593]  </TASK>
[  229.572735][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'.
[  230.631962][ T8620] kexec: Could not allocate control_code_buffer
[  232.046997][ T8661] bond0: option mode: unable to set because the bond device is up
[  232.677161][ T8668] tc_dump_action: action bad kind
[  235.535312][ T8714] can: request_module (can-proto-0) failed.
[  239.234361][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'.
[  239.235214][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'.
[  242.133654][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  242.356422][ T8819] 
[  242.358774][ T8819] ======================================================
[  242.365777][ T8819] WARNING: possible circular locking dependency detected
[  242.372784][ T8819] syzkaller #0 Tainted: G     U  W    L XTNJ
[  242.378749][ T8819] ------------------------------------------------------
[  242.385758][ T8819] syz.3.730/8819 is trying to acquire lock:
[  242.391639][ T8819] ffff888032dbc8e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0
[  242.403164][ T8819] 
[  242.403164][ T8819] but task is already holding lock:
[  242.410548][ T8819] ffff888048fa8260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620
[  242.419634][ T8819] 
[  242.419634][ T8819] which lock already depends on the new lock.
[  242.419634][ T8819] 
[  242.430045][ T8819] 
[  242.430045][ T8819] the existing dependency chain (in reverse order) is:
[  242.439070][ T8819] 
[  242.439070][ T8819] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  242.446845][ T8819]        lock_sock_nested+0x41/0xf0
[  242.452080][ T8819]        smc_listen_out+0x1f5/0x4b0
[  242.457297][ T8819]        smc_listen_work+0x4c2/0x50e0
[  242.462751][ T8819]        process_one_work+0x9d7/0x1920
[  242.468242][ T8819]        worker_thread+0x5da/0xe40
[  242.473380][ T8819]        kthread+0x370/0x450
[  242.477986][ T8819]        ret_from_fork+0x754/0xd80
[  242.483126][ T8819]        ret_from_fork_asm+0x1a/0x30
[  242.488427][ T8819] 
[  242.488427][ T8819] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  242.498695][ T8819]        __lock_acquire+0x14b8/0x2630
[  242.504083][ T8819]        lock_acquire+0x1cf/0x380
[  242.509142][ T8819]        __flush_work+0x4de/0xcb0
[  242.514176][ T8819]        cancel_work_sync+0xd1/0xf0
[  242.519394][ T8819]        smc_clcsock_release+0x5f/0xe0
[  242.524923][ T8819]        __smc_release+0x5c2/0x880
[  242.530037][ T8819]        smc_close_non_accepted+0xda/0x200
[  242.535844][ T8819]        smc_close_active+0x4ff/0x1070
[  242.541301][ T8819]        __smc_release+0x634/0x880
[  242.546412][ T8819]        smc_release+0x1fc/0x620
[  242.551440][ T8819]        __sock_release+0xb3/0x260
[  242.556561][ T8819]        sock_close+0x1c/0x30
[  242.561334][ T8819]        __fput+0x3ff/0xb40
[  242.565841][ T8819]        task_work_run+0x150/0x240
[  242.570959][ T8819]        exit_to_user_mode_loop+0x100/0x4a0
[  242.576869][ T8819]        do_syscall_64+0x668/0xf80
[  242.581984][ T8819]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.588398][ T8819] 
[  242.588398][ T8819] other info that might help us debug this:
[  242.588398][ T8819] 
[  242.598712][ T8819]  Possible unsafe locking scenario:
[  242.598712][ T8819] 
[  242.606174][ T8819]        CPU0                    CPU1
[  242.611540][ T8819]        ----                    ----
[  242.616923][ T8819]   lock(sk_lock-AF_SMC/1);
[  242.621447][ T8819]                                lock((work_completion)(&new_smc->smc_listen_work));
[  242.630905][ T8819]                                lock(sk_lock-AF_SMC/1);
[  242.638026][ T8819]   lock((work_completion)(&new_smc->smc_listen_work));
[  242.644961][ T8819] 
[  242.644961][ T8819]  *** DEADLOCK ***
[  242.644961][ T8819] 
[  242.653188][ T8819] 3 locks held by syz.3.730/8819:
[  242.658210][ T8819]  #0: ffff88805c25aa48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  242.668776][ T8819]  #1: ffff888048fa8260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620
[  242.678197][ T8819]  #2: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0
[  242.687361][ T8819] 
[  242.687361][ T8819] stack backtrace:
[  242.693273][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.3.730 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  242.693323][ T8819] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  242.693336][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  242.693363][ T8819] Call Trace:
[  242.693372][ T8819]  <TASK>
[  242.693381][ T8819]  dump_stack_lvl+0x100/0x190
[  242.693417][ T8819]  print_circular_bug.cold+0x178/0x1c7
[  242.693454][ T8819]  check_noncircular+0x146/0x160
[  242.693485][ T8819]  __lock_acquire+0x14b8/0x2630
[  242.693519][ T8819]  lock_acquire+0x1cf/0x380
[  242.693545][ T8819]  ? __flush_work+0x4ca/0xcb0
[  242.693579][ T8819]  ? mark_held_locks+0x40/0x70
[  242.693606][ T8819]  ? __flush_work+0x4ca/0xcb0
[  242.693638][ T8819]  __flush_work+0x4de/0xcb0
[  242.693670][ T8819]  ? __flush_work+0x4ca/0xcb0
[  242.693703][ T8819]  ? __pfx___flush_work+0x10/0x10
[  242.693743][ T8819]  ? __pfx_wq_barrier_func+0x10/0x10
[  242.693773][ T8819]  ? __pfx___might_resched+0x10/0x10
[  242.693809][ T8819]  cancel_work_sync+0xd1/0xf0
[  242.693832][ T8819]  smc_clcsock_release+0x5f/0xe0
[  242.693857][ T8819]  __smc_release+0x5c2/0x880
[  242.693880][ T8819]  ? __pfx_sock_def_readable+0x10/0x10
[  242.693905][ T8819]  smc_close_non_accepted+0xda/0x200
[  242.693930][ T8819]  smc_close_active+0x4ff/0x1070
[  242.693956][ T8819]  __smc_release+0x634/0x880
[  242.693979][ T8819]  smc_release+0x1fc/0x620
[  242.694000][ T8819]  __sock_release+0xb3/0x260
[  242.694028][ T8819]  ? __pfx_sock_close+0x10/0x10
[  242.694056][ T8819]  sock_close+0x1c/0x30
[  242.694083][ T8819]  __fput+0x3ff/0xb40
[  242.694110][ T8819]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.694199][ T8819]  task_work_run+0x150/0x240
[  242.694230][ T8819]  ? __pfx_task_work_run+0x10/0x10
[  242.694265][ T8819]  exit_to_user_mode_loop+0x100/0x4a0
[  242.694296][ T8819]  do_syscall_64+0x668/0xf80
[  242.694323][ T8819]  ? clear_bhb_loop+0x40/0x90
[  242.694350][ T8819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.694374][ T8819] RIP: 0033:0x7fc57579c799
[  242.694393][ T8819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.694416][ T8819] RSP: 002b:00007fff21f0a638 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  242.694442][ T8819] RAX: 0000000000000000 RBX: 00007fc575a17da0 RCX: 00007fc57579c799
[  242.694458][ T8819] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  242.694472][ T8819] RBP: 00007fc575a17da0 R08: 00007fc575a16128 R09: 0000000000000000
[  242.694487][ T8819] R10: 00000000003d70f8 R11: 0000000000000246 R12: 000000000003b43a
[  242.694502][ T8819] R13: 00007fc575a1609c R14: 000000000003b227 R15: 00007fff21f0a740
[  242.694525][ T8819]  </TASK>