last executing test programs:

10m53.679281934s ago: executing program 3 (id=1157):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80a40, 0x9e)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0)
writev$auto(r1, &(0x7f0000000340)={0x0, 0x18}, 0x8)
ioctl$auto_UI_SET_FFBIT(r1, 0x4004556b, &(0x7f0000000140)=0xc0000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
getsockopt$auto_SO_RCVLOWAT(0xffffffffffffffff, 0xe, 0x12, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x73)
socket(0xa, 0x1, 0x100)

10m53.057292626s ago: executing program 3 (id=1158):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000040)="03", 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0)
sendfile$auto(r1, r2, 0x0, 0x200000000)
ioctl$auto_FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000)

10m51.845773634s ago: executing program 3 (id=1161):
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
read$auto(r0, 0x0, 0x3ff)

10m50.323959519s ago: executing program 3 (id=1166):
socket(0x28, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0)
ioctl$auto(r0, 0x4020565b, r0)

10m50.161906863s ago: executing program 3 (id=1167):
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio2\x00', 0x0, 0x0)
ioctl$auto(r0, 0x5646, r0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000100)=""/53, 0x35)
r1 = prctl$auto(0x8e, 0x2, 0x0, 0xc23b, 0x2)
r2 = clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000)
prctl$auto(0xa134, 0x22, r2, 0x800, 0x5)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{@raw=0x4, 0x40, 0x5, 0x4, "6f47d31504626c5187dcfc7fdfa4b20172f37ec14da5f701c8a228f1c98f0e6c532bb1e91f3b4758084a9051", @inferred=r2}, 0xc2, 0x6, 0x3, @raw=0x1, @integer64={0x4, 0x92da}, "cdd3873d86e3c0cc1a6c25f1774306c913fba4d2507082801242ab13464532203546f9a3247ceb17c2990541e0be7777d52af871a4c1fc75907a2d4f8efc7716"})
ioctl$auto(0x3, 0x894b, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x2, 0x6)
setresgid$auto(0x81, 0x0, 0x8)
r3 = getegid()
setfsgid$auto(r3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x511000, 0x0)
mmap$auto(0x0, 0x20005, 0x7fffffff, 0xeb1, r4, 0x7ffe)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xffffffffffffffc0, 0x800000000006, 0x9b72, 0x2, 0x8006)
sendmmsg$auto(r5, 0x0, 0x9, 0x90)
socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
pipe2$auto(&(0x7f0000000180), 0xec7)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0)

10m47.268989703s ago: executing program 3 (id=1177):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1)

10m32.079168203s ago: executing program 32 (id=1177):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1)

3m54.027804283s ago: executing program 4 (id=2417):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x5a}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x6}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x8c}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41004}, 0x80e)
mmap$auto(0x0, 0x9, 0xffb, 0x12, 0x3, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r2, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
memfd_secret$auto(0xffffffff)
r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x2})
pipe$auto(0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4)
sendmsg$auto_NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffbc9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xa}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x168dba7e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000042}, 0x80083)

3m53.405512845s ago: executing program 4 (id=2418):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20a", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

3m49.665946221s ago: executing program 4 (id=2423):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20a", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

3m47.930158681s ago: executing program 4 (id=2426):
r0 = socket(0xa, 0x2, 0x73)
mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47)
madvise$auto(0x4, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0xc802, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x7, 0xd, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x4000000000000001, 0x4, 0x0, 0x7fffffff, 0xff}})
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc0000000, 0x8, &(0x7f0000000240)={0x7, 0x181})
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf256d00000008000300", @ANYRES32=r4, @ANYBLOB="06885cb36136f8111cee269258fd5a62f9b832990000"], 0x24}, 0x1, 0x0, 0x0, 0x40008804}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc1}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x100, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
unshare$auto(0x20000)

3m42.697278081s ago: executing program 4 (id=2427):
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8302, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(r0, 0x5423, &(0x7f0000000200)="1ec288d66e8b43e4ffc11043d5f2b2")
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop5\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c00, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026ea95f173d8973e6a00000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r3)
r7 = setfsuid$auto(0xee00)
r8 = setfsuid$auto(0xee01)
setresuid$auto(r7, r8, r7)
sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="00012abd7000ffdbdf253f000000040073000400d800be007a80cfbafd0a74db286c296414b75361dede1064635d9926c6d7c12a2cd43e752bcdf48f0d4f22aeef54ba1263e589d03e8c2c8e6e6261c3b2d4583d99d9951c6fa87580e065cc5900c2b67de7d030ae511dc8201b8de186eee2cbff57d637a52a72b0fb429a5f12a784c72b9c59e05f55d7eb887dc4182dba073d2af505fa124a04b82fdb8d22ceee3d6b517699ef8835cb455d30e4d7f203d3acee864e96a0e47f2337f0cd2dd23f5ccf870800e600", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0xdc}, 0x1, 0x0, 0x0, 0x20010000}, 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r5, 0x8000)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xb4, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0xc1}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x85, 0x129, "129128d1bd925ddd850cbdaa94b6cf8689b63f6b3735b156aa8e61094ae3cfdeb51f515de41413b67630d2ead9e36e3323bb0d5c44e26c51e4f5ea83a50969296a9c73a391b4a9e472fd0705433849f6f3864cb686c0deb2b808ef9e09979f1fc5911edefe7c5e8b6c43ebfc7cdf0c5abb0606611d00bbf2d58ae93da113b19989"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x5771}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xf8}]}, 0xb4}}, 0x4000)

3m42.173921217s ago: executing program 4 (id=2430):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x44, r5, 0xa11, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1000008}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789a}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2)

3m26.158522421s ago: executing program 33 (id=2430):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x44, r5, 0xa11, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1000008}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789a}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2)

3m22.654692439s ago: executing program 0 (id=2471):
socket(0x2, 0x3, 0xa)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, r0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x9, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0)

3m22.173220966s ago: executing program 0 (id=2473):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80)
socket(0x28, 0x5, 0x0)
r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r1)
sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
socket(0x2, 0x80002, 0x73)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VERSION={0x13, 0x1, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000)
setresgid$auto(0x0, 0x0, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0)
shmctl$auto_SHM_STAT(0x1, 0xd, 0x0)
ioctl$auto_BLKRRPART(r4, 0x125f, 0x0)
lseek$auto(r3, 0x7fff, 0x40001000)
madvise$auto(0x0, 0x400053, 0x9)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
pwritev$auto(r5, 0x0, 0x2000000003, 0xe, 0x3)

3m18.667594432s ago: executing program 0 (id=2478):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x7)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x3, 0xffffffffffffffff, 0xdf, 0xeb1, 0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x25, 0x5, 0x0)
read$auto(0x3, 0x0, 0xf34)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x10, 0x2, 0xff)
prctl$auto(0x3e, 0x1, 0x0, 0x80000000000001, 0x10001)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8811}, 0x20008891)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r3, 0x113, 0x10000, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
write$auto(0x3, 0x0, 0xffd8)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x7ff, 0x0, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
syz_genetlink_get_family_id$auto_ncsi(0x0, 0xffffffffffffffff)
syz_clone3(&(0x7f00000003c0)={0x100, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3m17.796467438s ago: executing program 0 (id=2480):
r0 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r0, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
ioprio_set$auto(0x3, 0x0, 0x4b34)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
capget$auto(0x0, 0xfffffffffffffffe)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x1, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
statx$auto(r3, 0x0, 0x6d7, 0x80000008, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto(0x3, 0x4611, r4)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x5, 0x4380, 0x1)
mlock$auto(0x112, 0x80006)
socket(0x2a, 0x4, 0x3b)

3m16.631319406s ago: executing program 0 (id=2482):
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_UI_SET_RELBIT(r3, 0x40045566, &(0x7f0000000040)=0x7fffffff)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)

3m14.714642048s ago: executing program 0 (id=2485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r2, 0x0, 0x0)
r3 = socketcall$auto_SYS_SOCKET(0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)
sendmsg$auto_NL80211_CMD_ADD_LINK(r3, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x220000, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)
msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000002600)={{0x0, 0x0, 0xee00, 0x7fffffff, 0x4, 0x8b7, 0xdf}, 0x0, 0x0, 0x8b00000000000000, 0x2, 0x5, 0x86, 0x3, 0x6, 0x401, 0x6})
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad473e74}, 0x20000000)

3m2.779370644s ago: executing program 1 (id=2518):
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2d, 0x2, 0x0)
setsockopt$auto(0x3, 0x11d, 0x81, 0x0, 0x8)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:2\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0)
ioctl$auto_USBDEVFS_BULK32(r0, 0xc0105502, 0x0)

3m2.363903771s ago: executing program 1 (id=2520):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x7352, 0x36, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x4, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x7fffffff, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x801, 0x84)
r0 = socket(0x2, 0x3, 0x1)
connect$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x2)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008)

3m1.117431178s ago: executing program 1 (id=2521):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040), 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

2m59.400374218s ago: executing program 34 (id=2485):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r2, 0x0, 0x0)
r3 = socketcall$auto_SYS_SOCKET(0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)
sendmsg$auto_NL80211_CMD_ADD_LINK(r3, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x220000, 0x0)
read$auto(r4, 0x0, 0x20)
write$auto(0x3, 0x0, 0xfffffdef)
msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000002600)={{0x0, 0x0, 0xee00, 0x7fffffff, 0x4, 0x8b7, 0xdf}, 0x0, 0x0, 0x8b00000000000000, 0x2, 0x5, 0x86, 0x3, 0x6, 0x401, 0x6})
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad473e74}, 0x20000000)

2m59.374937088s ago: executing program 1 (id=2529):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0xffffffffffffffff, 0xffffffffffff0003, 0x19)
wait4$auto(0x0, 0x0, 0x4, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mount_setattr$auto(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xe9f)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
msync$auto(0x200000, 0x3e, 0x6)
socket(0x10, 0x2, 0x0)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#\x06\x00\x00\x00,-\x00', 0x80, 0xd, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000)

2m56.276686002s ago: executing program 1 (id=2532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)="5a854caf7917d883480deff4834fb02d7f9ab5c995895f1836a75685288ada47ded6f66f35f474b9383b73afdd196ce0e7bab54289200e7e02598740d29a4afc606d182fdec0a330b29f8c025ec58eace3f3f97d5156654d0cf1cd89dfe5adc7382743a8575f818aea230bb5044677913953af7fcaaeefbbf6c26516f209", 0x7e)
r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
pread64$auto(r4, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
clock_getres$auto(0x4, &(0x7f0000000340)={0x6, 0x81})
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120079"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_IMADDTIMER(r3, 0x80044940, &(0x7f0000000140)=0x200000)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000e0400000004591ebba8b15bce57bfe4f000000000000003f84907d63637e"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socketpair$auto(0xc2, 0xe, 0x2, &(0x7f00000001c0))

2m55.703251522s ago: executing program 1 (id=2535):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000039, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0)
execveat$auto(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=&(0x7f0000000300)='\x00', &(0x7f00000003c0)=&(0x7f0000000380)='\xb0\x00', 0x1c)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0)
write$auto(r1, &(0x7f00000007c0)='f\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x181)
r2 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/fib/fail_route_offload\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83)
read$auto(r4, 0x0, 0x1)
read$auto(r4, 0x0, 0xf6c1)
r5 = ioctl$auto_TUNSETPERSIST(r4, 0x400454cb, &(0x7f0000000100)=0xffff31ae)
io_submit$auto(0x2b1, 0x7ae, &(0x7f0000000200)=&(0x7f0000000180)={0xff, 0x0, 0x8, 0x0, 0x4, r2, 0x6, 0x7, 0x6, 0x0, 0x0, r5})
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="5cf456000000", @ANYRES16=r6, @ANYBLOB="010025bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f00200100000000000000000000000000021400200000000000000000000000ffffac1414aa"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804)
mmap$auto(0x200000000000401, 0x2, 0xe3, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mtrr\x00', 0x200100, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x400, 0x0)
read$auto(r7, 0x0, 0x6)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
mprotect$auto(0x0, 0x806121, 0x8)

2m40.49939915s ago: executing program 35 (id=2535):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000039, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0)
execveat$auto(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=&(0x7f0000000300)='\x00', &(0x7f00000003c0)=&(0x7f0000000380)='\xb0\x00', 0x1c)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0)
write$auto(r1, &(0x7f00000007c0)='f\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x181)
r2 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/fib/fail_route_offload\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83)
read$auto(r4, 0x0, 0x1)
read$auto(r4, 0x0, 0xf6c1)
r5 = ioctl$auto_TUNSETPERSIST(r4, 0x400454cb, &(0x7f0000000100)=0xffff31ae)
io_submit$auto(0x2b1, 0x7ae, &(0x7f0000000200)=&(0x7f0000000180)={0xff, 0x0, 0x8, 0x0, 0x4, r2, 0x6, 0x7, 0x6, 0x0, 0x0, r5})
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="5cf456000000", @ANYRES16=r6, @ANYBLOB="010025bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000014001f00200100000000000000000000000000021400200000000000000000000000ffffac1414aa"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804)
mmap$auto(0x200000000000401, 0x2, 0xe3, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mtrr\x00', 0x200100, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x400, 0x0)
read$auto(r7, 0x0, 0x6)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0)
mprotect$auto(0x0, 0x806121, 0x8)

2m27.128170514s ago: executing program 2 (id=2578):
get_mempolicy$auto(0x0, &(0x7f0000000bc0)=0x74ef, 0x54d7, 0x1, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
pwritev$auto(r1, 0x0, 0x2000000003, 0xe, 0x3)
ioctl$auto_VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x7, <r2=>r1})
bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000040)=@bpf_attr_11={0x0, 0x80000001, 0x4, 0x1, 0x3ff, 0x6, 0x80000000, <r3=>r2}, 0xfffffffa)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r4)
fcntl$auto_F_OFD_GETLK(r4, 0x24, 0x7e)
sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x700, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r5, 0x1, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0)
statx$auto(r2, &(0x7f0000000140)='./file0\x00', 0x2, 0x4, &(0x7f00000001c0)={0x5, 0xe, 0x0, 0x9, <r6=>0xee01, 0xffffffffffffffff, 0x1ff, 0x80, 0x6, 0x100, 0x6, 0x2, {0x98d9, 0x2}, {0x3, 0xfffffff8}, {0x0, 0x6}, {0x101, 0xbf696b64}, 0x2, 0x81, 0x4, 0x9, 0x0, 0x9, 0x8001, 0x7, 0x1, 0xfffff000, 0x8, 0xffff, [0x2, 0xcd2, 0x6, 0x8, 0x5c9a, 0x2, 0x3e0, 0x5]})
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8)
r8 = getuid()
r9 = getegid()
setregid$auto(r9, r9)
statx$auto(r7, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, r8, r9, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x2}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0xffffffffffff0000]})
sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)={0x14ac, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_PEERS={0x147e, 0x8, 0x0, 0x1, [@generic="30a771aa7f92107bf736130196d1461b1764df52f3d2be1cdb9b8cf710ebd84c18e6e5770f43a3f26d7b4208ddfe070a1cc45607f779f3f7f065f21743", @typed={0x8, 0x42, 0x0, 0x0, @uid=r6}, @nested={0x2e5, 0x138, 0x0, 0x1, [@generic="2de30b1fe847a6d4fd2c0bc3bbbe692fb5885e3d5630f8e21bd02a4643c6a6fe72410b6b3b9813647fe640", @generic="3a0d6e9cbff5f41a4de5bc93d54a0af47bf820eb05d72e237482776ef37ad86e2ca43613517d8ad746e8110c10c041006d47bcecbc7a171c54bdcb94a6211ef956dba354fb81d6a9544b1eafde0c4d9442abae4ab4f755421e60e816d9d2da6cfdceeca016f9", @nested={0x4, 0x12f}, @generic="804ef92efccbd94c83287252e4d3d4d6ed3d882f805e68be4c63aea561ca658d14bde006b8930b499e1e4459034d108dff1320985e4ba74b8e31fe7e97f188e24299fd4903b52eaeb7126ef0398cf0377889fbe35db304ecce602d904333df8bc782e1ddc449d2910a472c913d4a7acc2d272677d07248f3623013ae", @generic="348d44fa79ec16465ea7a5f9f144ff2847d7250a756bbe8c70274bb11cb13fb263705d55c3bb9bdf67cf4b82f099defcc893168bc68a43c7ba3e31b43fc056ba53728cbb42259d4c4ebe3fc337bc188381539d62fae8d6d4a67c3bd76517e7c440f157c4c8c1adfe326febb05f15412f5f6f41b7946849753af887c4289aacb05b0d6fd73eeb2466681f6b9f102ffaef7222b356d1f8451029f6268b82d1ac65e8475d67cbc7facd19fdd3cb185f84971b9585a80f44e653b4f7549708c4bd545816b29779cc135bc6fdcfbe25d2991437c84b1531c57c6aab", @nested={0x4, 0x24}, @generic="91abfe0071fcc5c12d4dff6786eb0d708da56101c458111d403f011fb921e7a1d0c96629e452809a52fc544d11eccbeed37b2d30cfcc533defa7ea627c7e20345f53b9a7e49574b0f0de76c0ed2e491dfb7965fcb8c7436e6713b7d14efe86236de63c9dfdadeb4b55a78b6d6ce012f4bcb1044327531c94b81d483b3f173ae08aa973250ddcdf8dd714589d0cb8f3ad680c9b64ed6f53d3f1b82588e321e3679cbed779183687a1f681e44fac6566d567288bccaa120cc7df7feb7819640a80d1c9e07e52830f3c927c16a9d448615ba88116cc56d9d939f56ebee917c0bfb2c641381fbdb8e5dba3f3fb", @typed={0x8, 0xbe, 0x0, 0x0, @u32=0x8}]}, @nested={0x8, 0x42, 0x0, 0x1, [@nested={0x4, 0x67}]}, @typed={0x8, 0x107, 0x0, 0x0, @uid=r8}, @generic="a1f21bb38413c419e95571d3a74187f63db7a69746078aac59b114570654688cb992343aec37f7f0524d9a6c757bed1fdbde2bb83ba1b773f95cd965c2ee29ee87a3fb249b87b1ed148acbedc214582914a3504c520653b0afcc872d92c591cf47aef568a9e9de0fcb5da12724671f5230", @generic="ab6464ca2722cac998f8b137dcea2ff1c6a7cda92ef5114f0936da82701340c76c05a4f88aab11275b718eb2bd9c61b3ede15331f8528cd6ea4fcf5096399c2a4a259f6f354f77715a819b99a0f98556e86abfbc6cb3a0cdc7fb36ae5b66f0e60134134b41c6f4a82d9e8c73c6fbd00dc2b5f149625985663e4cfc8b5d6ea604e6fde5fd5f5c9e8051e9b8cfee6071e5cf0564812da3c7b3a0004c5e599ca2b54c0b97839f0b0bd93e54f057980834e47c7a6f557e0532f3aa8e7814922dd1777b5bfb984eb13766b560daba", @generic="f877ad353b4aacb1af018d3245560c14e7c323e9c424e46f4a5abc146f116983882c3affa07f45f5b55731106725c27c8437fb85072240ef881f88e7854616459789291a83d5c517f312c3471afce57c2570c5f96efa068ce5d6749d14b7bcf78b56b69a016502e516801ac676b13e04c7484ebf51c838fc1a538ca46e16c3b24768ca99c530ac02ff697aafcceda8fb093d2425cfe2f1be5e8d57abab69a1bda713d3db906ad6718d8b25bb499186d7dc2c795a27c9e2ddd994f0bb1ee161deb90e03aa1010cb869374b2595ff827c17e61db9df38de0441b970473f104ff5c9e7777a1f15e8719a1ca7961d9fe3a8cd843d62f44c6ba2e44eff3d5ca82362dfd870864dac2205ba0747f7c2bac27d48acc1ebb439e6da93232f5ffd33771c098fa873dd31996b7168ce1b25226b700ca8fb6e75851949dfc0ac0bdcafa59fd69bb2eebd855bdac64030ca8c26472ce8138409d13dfaf2ad9e23cb1cfbef70918ac22b20ef8c5f44ef92e9db1b807094991a96749ceec2f78db12ea0d25a7a7adb1265e8baf695f218273ded4732a905dabcc95c0e8fb769bf81ab28bb61c9ac1b10acd54c5f441c89567d91cbea9682aacb7cc663b7bfdccfe19d778e5f239c5bd80aa527956b8c728634051587d8b29deae73e060873ce115104cfa587d7ea9e920980aa62dae0c17ceb2ce57f5e55ed28ac2e3b7522f473f57ec27d4cf484f8e351f919e4b216d90eb7f3239283a14fb6d05c33661a1ac8a2d4e6a8b1e0ca38f31a0e9e7662049327f545870d9270ca4920bdcdf2570f66a7c394a5b5b9b7c44ff0c655e8487478a82d44ff7cbd178c4b7c73a8a8d2362c5dec7cdb5866b452e6e7ce8c0915e2b66158107dbd2dfcd3c96e6d7f268104e0b0e9dae1a3c903584914ae78fc4a287a9eb7a0fcfa12bdea8362e81cb9ff27eaa69f925eab9c11987c64f6b86ffef885e3f35ae7133420a86ab79c85a52d9173c327c91d8b634bfe046b9326921927ee7c49089b7e9ba82137dd1738a76700c54ccd157150ac4f4f47874a38d6287a65cc5dd39a25387bbcd0ef07bfb648c3b63c27a1b6f159cf831ae1a2dba29dfba6cfba07eaeacab74c8e85de8737c25b55d4c0a619417e14918a67e168fbdf4155ee38c47924c9c6d7f2c242dca2c81b84ea6705957cc789e8446836a63f9c73a70cc563885e734df527344d2208dc8773b5f4d578625c958802891895be52e98e1410a74f489113764eab21b5569c3902165e8b9799c6ada557969006daa7e9d30bd60c4661b0620ec6be99c7b2cc0ac4767b57469cd0ae60d940f843e7803f68b522c5d97b83afa5a24da2f1ab0d8d1c5100ef3a67a4bee2c38b9728d4ea1d346dae33598e1ffc669488f881f999a6d91d2d1b6305e976ba9720880ddea98f28032a14482a56770c089395c9f03fd7fc10e5194563c1538c69b62b56f3c2d21a23ddf38c5d83f48b0fe1556a9b8f6ddd444738670e87168f4733bd63e2c444e189e9d62de2041c0f78b86de9dcc9f0a26aadde5c410f6858d1736cb5b783999860074c74e3c2a4b2946293bbc934007915cf42b07ce37c2147205e21e41fa5862ba928680c13ac4c585ecc8eafc91b8c530ac9592012ca06904d39a8175b3f61075be5993a1a90e6c60564926dda0e91a6a08bc2001974b1ff9d1472003744a2f1cb7ad403a45cf9ed4cf991162dbc9d55320e1e403fe6968d70d9bc078dc3ee64618eac5864788841310abda9e9dace1e489fe7229178357b32f1f4cc12043590be2a1575b3d3fa2d8f3d41fd068425c79578bfe44bfef3610f4bf5c8e8c5cbff6bdc2c898479be43f63bd07485369541fceb7effa971f8e69307e783b36dea165ce2a702b6a85e6c6e7c64daf39981be9f6b36da31435386c2f13412572fbcf04e480394cccc4947d923130e7b39c5b001ce4dcea355cf94473e3659c4eac0232daa2d7b242ffab715a795e44f658a46d1b269d610a526a439c7c86df12ef9b51773fe22f6eabcd8d319ec6032e019d80ce15250b3f2d54efcaba42ed1810b670a28da354e0eabf63cbf1d5e87aafaa7c743ed30a93c6f8305e2a7e3ffabc0adfc7156af53a62531af362048409fda4cf00928630609c02ee137d56593bce6942a9ef19794904ef4150aa4b0c6e68ab0f804b6e62424ad4b15c314d23c6f49588d7ef44393e1913113f0f6f345f516dceea633c138773d49db2f10ca81c9a4437546799eec100681ef1501712a9c7b0731bfe88079614f7ee47c4b0e6a1bacbbc2e7858d513d5bf71c8cf173fa5340921983bbc4e859260f633026e5d0956da3a39e2bc1c33e55b0f9b1d9c5c7a22f175b94b8a491b3773e64899a6a3920ff742d0fa47df2202def1223a4826ea389a79373c50d9b5fcc303588c16009cb50211481c52505769737e2b874d82f5aa6daa9baa5bdb16f45cc446ea33d041dd6a3c02f4ff0dcf594ce4f949260ff8bfedb7745a169796a36727b474d8b87b1973622893332f3eccfd58373a5bf642553971fec9f1b0c468fdc08971adc0579d8562bcc186b431e11fa34a6d9328ed9b47b56abbf243a2a7f120ac00874c73469885b9afea849c0b87e4498c8faa54fd7fcd36c690b17218b4973d3d11385602d39214735ac54638eceac366941929fe3323482dbc17c44ae5b330245da39b642bc7e360d303e969d2c3b43a4ac2c75d76a8f228dc543cc14e8b8e1358d33a1c88bfa02976f4ce01fe5aad9648df3baef9edf63d9e5b145a6e0e05635fbb21ba3d7ef970881c9d497a55358974ca9df8b61ef6250787ac51aee76290249b2ff7dd484c735c9edac266b73da52e2a29e64a8663a0560a603a9de860802838ff941165f6578a8542633198c57b7806ba189941784e9f735d93bcc81279277407f8c5dbffa21ed19b83ccc8b25e5a286f011af9a090cb1a7a29117dcdc9ad8ee5f87a0fcbd5b02da6f6c2e483b185914a181698173fe04a219ef99b629fe5ca78be4028bc4f3fd9b5615a0542894a80a1011253de83d59d101ae9481c108a5b0dbe870a128d66fb31d85c25c3a059bdf50932152b20745b77bd0684b5c0e2665c0b95ca108c179d54a4e040dca626019bea8fa4be29300d08c5f0451f5d7cea99066b28664e12b130d3cc37dd1ca204ef2bdbd6b9b6be0daefd40ad57a4e67e217733f001b3413a6c07604904feec9fbe216d9693d6bd77d64ea8ae51e448c13920291a81aa7f780d3e2bbf22a9a61271990d48a146303f8206678a25dc7b14bbbc2ae25eca9ef6dcd012e75060fc1d1e74a361855b7d34c6f84812b3e52e9b05da3e1deea09d9a73c60e0ac6f4d9a54dd2afef69e16c47d10d1d76595b6900aabd7b3e2b4b6f1e161ef631d5be962820b12f3ef2ad000442b222e376ef49a21e2664cf146437067e2fbe34b5af3977f75474f1c605d008a223f908254aedcd038d8eebc515a51166fea25010446a3764dbd9cb91a03d89b6093b1e7deede7c046e7da31718ee7746f4b0b3acb477a5e8cd2ab3552266d6fc1687fc5c3ac03e691bf2bf378dbaa77681c1f4e8a266aedb97202519dd077dfcbb93ee5d5dd127bb47e00dbf0acb8b79d4a9564499c38470330e1f571f0694d37b4d30228165c7ccae1707b82962cd88fd5b9d139aa7180c72db200766524a478ab8747874fc2c14fbbcefd5e2fa58f72caf86b7e21057824f60a1be44abfdd410af6f8aef2cd83a5e38a547f367afaa03a6e3f2d162231844fff38ccbbeccb2d2e709aafd329d21e58d2fe0107f9b880e7bd542d017b9a43920045fe07eb2308fac8bfd633d1e6f716440c7773376fe64077cb9aadc37e51925a62ba55fc6af609904eff60fe3f5a404951ad179f2eb110e7ea8c86e807e16c15b27ecb6ff92303dccc4361084646fd83d40bb1e98af583c4a9db5f8b5479c301ddface831657d0576b4cb09c2ba716230b1307b5c22dcfb6f94835e6c114aeb9e36f017d451691ac9b3c0845d8adb5b746e6ad137689fb32b4dc48655f2a885d1bd773711cbc8abb341fa18c8904062dcd448a0bf52a7d4bd726513bb4d819150c6925ad0a69fdb006affa34978ac69e14b3dbdb83c00cfd11830019e7247a7d9ec7733e9b5118ecbbf6ee51ee042265ebe2bc19b9dc4ba376aa71a5012c447138a5e454693d1202ebb706c1d93e2560fa5fc7af2783e9a7380d6098bf11f61ce2134be04831cdb60d823ab86f4605851f29bc475e5a6926ec2861e2f9525e3f6431ad6bba40ef4846df26b8da6e2e5d6c05ef2342e5064f37cfeae07d9d9619e4211c4c1bba86161958a82fb42d687f63284bd4f3008cd16ba1f026d9e933df4d0efba32665efb795d73ff63db8fee02b725675dc9021dc67e2b666c2bb58eb097d441cd4def9c0f650d03ef70e567bc5e771ead938cbc9356a7a8f360b0657bbadcc69d7ae596311a448ccf022d8f515a911ed3a550f61f9a2e83137d86cbc10052d291348a31f2537df8ce4d8a4f5f034f45bbe711afa2656787f290bb632dc410750926563833ac67d32e4ccfb41df584b63c734357d710cbc8ef6cf484145350fa4f0227ad2562acaf43ea29c4a8c289e4680829ffce323b47c3cbf353e51cb0677648ccb03d6cf52440152254c306c3b65fc920e3365585ab0fc6c7e644b63f1022c4dbdc6256ba1d1e783d1929157687c226c3241b0c71c16815677db39c914b6db0c90cbd0cca02f812a32957c64ae1a64374dca342ccf37d799deb15ee6d25fa8e06cee2fd8eafcbdc03f2cf6cb56df026893a3ac55ec34a8ba002466847a9842b9802715f5f6a6265c2e117ab3539e87a75552bb479b19e19eeccc6427266703dbf19a9e01e8c0eefd8fa392cd1893a30e7b57eb7d9d2eb76d25b0cd63a61108492c5f09c7d301732f398387665cfc7b1fa14ab98c02220b0de207ab04f555ddb4e44c2d7b415419bd6d6d05211083750d2f9c656644b218b9103b120f5739a7a96f5bf3c17592706f2511210de4b053b02041be4864537055d36df214b094930ea4f9ea7c2a33ff21cd68c41313189615e4e5c385f450e3dda0b3b5dd37b0bde0124fd3eb8f8b6c86eb86f4e600730134238cf432bfa981df5996d729c0686b438f94a95ad599a605e73ab74e1a2534af2f94be0ac9589a43ea235e03077299888ebcfc548590521139735cb2696d98cf8aebd9061cd09f6a2b7b10766679f4675eeb29eb4dd8c2e08f083eba9d030735b8597d5478bb7c37e89910e6d9fd62acdf71a8cbac943d0dd8eba84f5e8f49c40261b97457190c8986e52143c024aad472b2ef0258f254e402f7b0ccf22faadd16edef05bc892c76698d62224a23dc181c44c444e3298abdaf1060065b15aab29385b26c30aeae26a1f152386e7715b7435b082b8b59106b97a2b63d8877c8d87c1606970b10f3476312adc3b8134b10e84b109e7a330380283cec4413c8335decf5638857cc3a91c53d51fb6d74ffdc37fa4c4676b0fbb71b9a03028fbd0a7986f4ed041bc1f6247a32aeb8504662f27555005fdca0ec7be67b7ab68f39decbda3f84186b06f6d9ec733c6179347a399b5bb889359dfac1ffa7dfce80cab142218307e92325629191edff111a45e36413d8325841268bbb64df5477c5ec6606408bc784f0554e3d324f7012e7a138c9fb2857a02a8d753a9b01a884e257cbf0272e0a8a1c4a9131b0671ed723f60bac77b4efc7d6ab76ac2a0c4a8ab5ed32476007c261739a96a07e7c841617535ec701ad5d956db3ddd7aa3967bf24e986b6f20ce70a5d9666f27332b7bb93563cb"]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x8}]}, 0x14ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000)

2m26.681888925s ago: executing program 2 (id=2581):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r2, 0x4, 0x7ff)
ptrace$auto(0xf, r2, 0x1, 0x4053)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000080)={{@raw=0x10000, 0x0, 0x6, 0x6, "86f8ffffff04ae16422a49e2a5fac5ecafc32c611fb62b6a5bf259120100", @raw=0x8}, 0xfffffff8, 0x0, 0x7fff, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x1, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"})
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x2, 0x2020009, 0x3, 0xfffffffffffff311, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x23, 0x0)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, 0x0, 0x4)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/README\x00', 0x2200, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x47c, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_IE_RIC={0x349, 0xb2, "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"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_AUTH_DATA={0x103, 0x9c, "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"}]}, 0x47c}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
read$auto_tracing_readme_fops_trace(r4, 0x0, 0x0)
select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, 0x0, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0)
getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l.  <\xb0', &(0x7f00000001c0)=0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r6, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x8, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0xa, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0x40000000000b1}})

2m25.701729115s ago: executing program 2 (id=2584):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0)
ioctl$auto_SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
shutdown$auto(0x200000003, 0x2)
write$auto(0x3, 0x0, 0xfdef)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r4, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000040)
sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, &(0x7f0000000280)={0x0, 0x5c, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x10, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0xc840)
write$auto(r2, &(0x7f0000000200)='+(@!\x00', 0x800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
setsockopt$auto(r1, 0x9, 0x4, 0x0, 0x7)
sendto$auto(0x3, 0x0, 0x2000f, 0x103, &(0x7f0000000000)=@xdp={0x2c, 0xb, 0x0, 0x2a}, 0x1000001f)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0)
sendfile$auto(r5, r5, 0x0, 0x5)

2m16.422061782s ago: executing program 2 (id=2599):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0)
write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81)
arch_prctl$auto_ARCH_SHSTK_DISABLE(0x5002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2$auto(r0, r0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500180001000000080017000800000008001200cf06a6bb"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
pipe$auto(&(0x7f0000000080)=<r4=>r1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000e0, 0x40eb1, r4, 0x300000000000)
connect$auto(r1, 0x0, 0x7)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x0, 0x2000000005, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_HPET_IRQFREQ(r5, 0x40086806, &(0x7f0000000040)=0x2)
sendmmsg$auto(0x3, 0x0, 0xff, 0x7000000)
membarrier$auto(0x1005, 0xe, 0x8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
socket(0xa, 0x3, 0x3b)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/pages_shared\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4106, 0x100a)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000002c0)="8318a3ee695913142d8b87ed7e761f751a8179b793283d754530cc4c2e61893977344d51ebf611f57ab2947f2fe98407db256fb2357ef1bd7028097f4e122a6e3c36885ee94d2396c7bb1be3e18b5b14086a9b1e5f57ba609cfe3b14c30dcf3ee1fb5c4d5b6c476de2ed9f6fcdcb37a48017cab253d6c9a32be6bd0102dfed3778add10816e6a27f590f6765388a1f8c3bd0a653ba4a18edc9ba150b23123b0276cad544da32b6508ecd37be4a81c959a8cdce0a03dcfc6de8c874cac4288e3fc4f6bddb", 0xc4)
r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0)
read$auto(r7, 0x0, 0x1f40)

2m12.567844168s ago: executing program 2 (id=2607):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = epoll_create$auto(0x4)
socket(0x2, 0x1, 0x106)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
madvise$auto_MADV_GUARD_REMOVE(0x3, 0x2, 0x67)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41)
renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/if_inet6\x00', 0x181800, 0x0)
pread64$auto(r3, 0x0, 0x3ef, 0x9)
ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000180)=0x798)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3a)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x400, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x6a)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567)
mmap$auto(0x8, 0x1, 0x3, 0x2dec7239, r2, 0x8000)

2m10.369772043s ago: executing program 2 (id=2615):
mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x9000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
socket(0x10, 0x0, 0x400)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0xf, 0x800, 0x5)
r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d206aa0ac830eaf72b626224e291a170000e4", @ANYRES16=r2, @ANYBLOB="09002cbd7000fbdbdf25020000000600010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
ioctl$auto(r1, 0x400454d0, r1)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x8, 0x7fe)
ptrace$auto_PTRACE_DETACH(0x4212, r4, 0x8, 0xd)
pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x400)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0xfce6, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130036bd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0800610002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x8, 0x2, 0x9, 0x200})
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0)

1m54.893985399s ago: executing program 36 (id=2615):
mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x9000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
socket(0x10, 0x0, 0x400)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0xf, 0x800, 0x5)
r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d206aa0ac830eaf72b626224e291a170000e4", @ANYRES16=r2, @ANYBLOB="09002cbd7000fbdbdf25020000000600010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
ioctl$auto(r1, 0x400454d0, r1)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x8, 0x7fe)
ptrace$auto_PTRACE_DETACH(0x4212, r4, 0x8, 0xd)
pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x400)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0xfce6, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130036bd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0800610002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x8, 0x2, 0x9, 0x200})
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0)

33.17110402s ago: executing program 6 (id=2812):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

29.23774153s ago: executing program 6 (id=2818):
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_UI_SET_RELBIT(r3, 0x40045566, &(0x7f0000000040)=0x7fffffff)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)

25.927114793s ago: executing program 6 (id=2824):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x4)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0x68f42, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x7f440, 0x0)
sendfile$auto(r2, r2, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x9c93c2, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x6, 0x5, 0x9)
madvise$auto(0x0, 0x8000000000000000, 0x15)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x101240, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x2004)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r4, 0x8005, 0xffffffffffffffff)
write$auto_proc_oom_score_adj_operations_base(0xffffffffffffffff, &(0x7f0000000200)="935d7ffb5a823750183d8606bfeb9ec0f46e87fe6d51338572bc525208b14c13b3d107731a6ab5e87b1465313a26cf3d60b28356389faa01da7d40bba286c2ac734307f37b614afaa023c29be261d8eb7888c15447d0d0db1d620858e3dd4c9173cebefca0ab08899b92d2d6fc7cad0d", 0xfd6347ebe52a91a6)
capget$auto(0x0, 0xfffffffffffffffe)
ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0xc)

23.498241218s ago: executing program 8 (id=2827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={0x280, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_PMSR_RESULT={0x264, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x260, 0x5, 0x0, 0x1, [{0x1c, 0x600, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x9}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}, {0x190, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xe3, 0x1, "690f7cc1ed59ac67d1ca9a9ae2c78dd89dde489f83bf6e49f42a4a8f4f8b63cc7e79ad8c9782113b51a35410472150ca520cf4e3d03cf52a917101e2159429a3005c25bd967a707611d44ae91bb7f7cebeec7164b7d1534dd61ef4170fbc6ed50f90c8d279f81ab13cb1712607cc3f7bc7deafe3c775aaba4899c0d227e3423ce3e45570ffb977c6cdf950bd7888ec171d0051ffe7ab999da7db5cde4d6f7c78f325d88355f57194ca20ab4fbe7d7681b00e2c4c9650007d6d552c9e3111d5c6d0d14d0e3fda62ca921bf6ae4878dda8b022f92678998306409d3648c5511e"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa8, 0x1, "b740a97a55f95ca616500e1b6f1e088893e0552ce853eb49730559dbddd006e9b59282e9cbceaa710100dddbb04718f0f04cf5ee08ca4de8c2e250fd51ca2c72044438ee329bb8a7f1a7a4dbf644158cb2808dbf1e970ecca1cf1a85aa532bb07ef2d17d6b08df5c9809a96f94faee2e6f4fb52d83c465864c502ce0afa4edda0732e2e257de3f675751afee6796470d90e1b01549d6aa65598e12bd8ca817b8f9309c25"}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "005d9246bf48e19bba84b43eca10bd786c49bf3130e18c74b7351d75cdd998d9733966965fb2fd5b95323685d45ef1f9700274aa07927e665c9929da583b84fdf5228f8bb5ee0d0b08897afb99752757afbb8eadfd1b824a11d3d078b69e96e1e258c3b983c09f3333efa0fdfb0db6fd4783ae44b13dad69b5ddf4f199d11089dc8571f1c8e345bc5b3034b26e2a7f792dfa473a353a7fa67e65"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880)

23.050176846s ago: executing program 8 (id=2829):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) (async, rerun: 32)
socket(0x2, 0x801, 0x106) (rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x1d, 0x2, 0x2)
connect$auto(0x5, 0x0, 0x9) (async)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRESOCT, @ANYBLOB="fc959fc988"], 0x38}, 0x1, 0x0, 0x0, 0x2c050811}, 0x10) (async)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0x80080, 0x0)
read$auto(r2, 0x0, 0x805644)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/loop12\x00', 0x101000, 0x0)
ioctl$auto_BLKSECDISCARD(r3, 0x127d, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c4b", 0x23)

22.152034711s ago: executing program 6 (id=2830):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f", &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f00000002c0)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce, 0x8}})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

19.739203007s ago: executing program 8 (id=2833):
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4d, 0x0)
fsopen$auto(0x0, 0x1)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
ioctl$auto(r2, 0x540a, 0x0)
socket(0xa, 0x5, 0x0)
timer_create$auto(0x0, 0x0, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)

19.647998411s ago: executing program 6 (id=2834):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000800)=ANY=[@ANYBLOB="18030000", @ANYRES16, @ANYBLOB="010025bd7000fedbdf2502000000040002000c000500d308000000000000f102048014004100fe8000000000000000000000000000bb08003a00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="d3011e800800b900", @ANYRES32=0xee00, @ANYBLOB="040018801727009a3a9332585c61433e77d74db5383557a346e0372ec06567dbe6e86d98885b5294af804e537cae8de2ecfdc003cbf1712b2514eebb05609a38f3fd1abdbd37473c9e67313f09967014d2917259c6b75b6b066aa6ff2a84407c984a4335d3e56bbe221e9649849341d505ffd1f33e97de2cd287b0cb575451194971b31c025634a1efd953e271a2b683021436263808003700", @ANYRES32=0x0, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x48000}, 0x8011)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.2/usb14/bMaxPower\x00', 0x121681, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x1000000ffde)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2028c2, 0x0)
writev$auto(r3, &(0x7f0000000240)={0x0, 0x80}, 0x7f)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x2415, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r2}})
poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8)
keyctl$auto_KEYCTL_SETPERM(0x5, 0x8001, 0xdbf7, 0x5, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0)
fstat$auto(0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0)
ioctl$auto(0x3, 0xc0285628, 0x8)

18.201083383s ago: executing program 6 (id=2837):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc038}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

17.815653683s ago: executing program 8 (id=2839):
r0 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x8001)
ustat$auto(0x801, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$auto(0x3, 0x400454da, r1)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r2 = io_uring_setup$auto(0x5, 0x0)
close_range$auto(0x2, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d)
listen$auto(0x3, 0x81)
accept$auto(r1, 0x0, 0x0)
r3 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000)
socket(0x2, 0x2, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/cache/index0/type\x00', 0x183142, 0x0)
getrlimit$auto(0x8, 0x0)

17.301146731s ago: executing program 8 (id=2840):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xc1})

16.641037693s ago: executing program 8 (id=2842):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc03f}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

6.228609736s ago: executing program 5 (id=2865):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x4)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0x68f42, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x7f440, 0x0)
sendfile$auto(r1, r1, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x9c93c2, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x6, 0x5, 0x9)
madvise$auto(0x0, 0x8000000000000000, 0x15)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x101240, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x8005, 0xffffffffffffffff)
write$auto_proc_oom_score_adj_operations_base(r4, &(0x7f0000000200)="935d7ffb5a823750183d8606bfeb9ec0f46e87fe6d51338572bc525208b14c13b3d107731a6ab5e87b1465313a26cf3d60b28356389faa01da7d40bba286c2ac734307f37b614afaa023c29be261d8eb7888c15447d0d0db1d620858e3dd4c9173cebefca0ab08899b92d2d6fc7cad0d", 0xfd6347ebe52a91a6)
capget$auto(0x0, 0xfffffffffffffffe)
ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0xc)

6.029606747s ago: executing program 7 (id=2866):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
fcntl$auto(0x3, 0x4, 0xa553)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0x1)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) (fail_nth: 2)

5.011783862s ago: executing program 7 (id=2867):
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_UI_SET_RELBIT(r3, 0x40045566, &(0x7f0000000040)=0x7fffffff)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)

3.812763763s ago: executing program 5 (id=2868):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xa)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
mmap$auto(0x0, 0x5, 0x4000000000df, 0x4200eb1, r1, 0x1)
unshare$auto(0x40000080)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0)
close_range$auto(r2, 0xffffffffffffffff, 0x8)
semctl$auto(0xa, 0x2, 0x13, 0xde)
r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0)
write$auto(r2, 0x0, 0x5)
r4 = socket(0x11, 0xa, 0x9)
bind$auto(r4, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyx3\x00', 0x102, 0x0)
sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRES64=r5, @ANYRES32=r3, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)
ioprio_set$auto(0x2, 0x800000000, 0x8)
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x73)

3.593078929s ago: executing program 7 (id=2869):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x3ff, 0x0)
mmap$auto(0x0, 0x8004008, 0xfffffffffffffff8, 0x2000000010011, r0, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/kernel/tainted\x00', 0xc2381, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/discard_max_bytes\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x40, 0x0)
r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x18b803, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000eb2, r1, 0x2c1)
ioctl$auto_IMDELTIMER(r2, 0x80044941, 0x0)
socket(0xa, 0x2, 0x0)
pidfd_open$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x101802, 0x0)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mprotect$auto(0x110c230000, 0xa588, 0x6)
mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0)
socketpair$auto(0x1e, 0x5, 0x9, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)

3.043733106s ago: executing program 37 (id=2837):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc038}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

3.015180729s ago: executing program 7 (id=2871):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0)
pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000042, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
shmctl$auto_IPC_RMID(0x0, 0xd00000000000000, &(0x7f0000000280)={{0x5, 0x0, 0x0, 0x20, 0x7, 0x8, 0xf8db}, 0x80000001, 0x2, 0x1, 0x8, @raw=0x5, @inferred, 0x1, 0x0, 0x0, &(0x7f0000000240)="ac8219755130ef636d23dd478c121cd62bc5b294ed8945184208d2324a860fcc60d8"})
setfsuid$auto(0xee00)
bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=@bpf_attr_3={0x81, 0x0, 0x2, 0x1000, 0x1, 0xffff, 0x10000, 0x0, 0x7, "33c214615c30299365beeafebc1fe7d8", 0x0, 0x400, r0, 0x0, 0x0, 0x7ff, 0xd, 0x0, 0x0, 0x4, @attach_btf_obj_fd=r0, 0x3, 0xf5, 0x7fffffffffffffff, 0xeb31, 0x7ef482bf, r0, r1}, 0x900)
pipe$auto(&(0x7f0000000140)=r0)

2.782632473s ago: executing program 5 (id=2872):
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040)="1e230efc6df6d124e0b31d31637a205eaf4e89e71148de42425d45225fccf8a89e46255b1b8a65838fc4089a4cfc42177df67acf90318c4e95fe5df8f6636e99f1eb872e446a3786da6f8d5169c5e38d34e145b56f4abc27675264a319ab61de6d73f1f16741b284a68a1827c418d447ee3a56b291d8d346de2aa7", 0x2, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72", &(0x7f0000000180)=0x1ff}, 0x2, 0x0})
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
socket(0x10, 0x2, 0x0)
r2 = socket(0x18, 0x1, 0x951)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0)
syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff)
socket(0x11, 0x80003, 0x300)
unshare$auto(0x40000080)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
brk$auto(0x7fffffffefff)
sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef)
write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000003c0)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401900bb713aca465c9bbc23b5d40a", 0x40)

2.747063439s ago: executing program 7 (id=2873):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x30dd41, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x7f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x7, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x2c, 0xa, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb3, 0x8000000, 0x0, 0x7, 0x3]}, 0x1fd, 0xd)
r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0))
r3 = socket(0x11, 0x80000, 0x2)
getpeername$auto(r3, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x2a, 0x2, 0x1)
connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(r4, 0x3, 0x0, 0x40000000c08)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x2, 0x8, 0x0)
r5 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r5, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
unshare$auto(0x85)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto(r1, 0x1, 0xffffffffffffffff)
fcntl$auto_F_SETOWN_EX(r1, 0xf, 0x5)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0)

1.626179079s ago: executing program 7 (id=2874):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc03e}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

1.488792183s ago: executing program 38 (id=2842):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc03f}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

1.077940394s ago: executing program 5 (id=2876):
r0 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x8001)
ustat$auto(0x801, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$auto(0x3, 0x400454da, r1)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100)
r2 = io_uring_setup$auto(0x5, 0x0)
close_range$auto(0x2, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
pidfd_open$auto(0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d)
listen$auto(0x3, 0x81)
accept$auto(r1, 0x0, 0x0)
r3 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000)
socket(0x2, 0x2, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
fcntl$auto(0x3, 0x4, 0xa553)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/cache/index0/type\x00', 0x183142, 0x0)
getrlimit$auto(0x8, 0x0)

429.659378ms ago: executing program 5 (id=2877):
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x40, 0x0)
r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x18b803, 0x0)
ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0)
ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0)

0s ago: executing program 5 (id=2878):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
epoll_create$auto(0x8800001)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0)
read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92)
read$auto(0x3, 0x0, 0x8080)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r3, r3, 0x0, 0x3)
io_uring_setup$auto(0x23, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r6, 0x0, 0x1ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0fd}, 0x20000000)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0)

kernel console output (not intermixed with test programs):

ntered allmulticast mode
[  831.268654][T17087] bridge_slave_0: entered promiscuous mode
[  831.558312][T11757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.688203][T17087] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.696015][T17087] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.736755][T17087] bridge_slave_1: entered allmulticast mode
[  831.781175][T17087] bridge_slave_1: entered promiscuous mode
[  831.907531][T11540] Bluetooth: hci2: command 0x0c1a tx timeout
[  831.983062][T17133] Process accounting resumed
[  832.152886][T11757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  832.251803][T17087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.313830][T11540] Bluetooth: hci0: command tx timeout
[  832.324332][T17087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.743358][T17087] team0: Port device team_slave_0 added
[  832.771758][T17087] team0: Port device team_slave_1 added
[  832.988162][T17087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.015079][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.106216][T17087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.459027][T17087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.486953][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.545761][T17087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.807938][T11757] bridge_slave_1: left allmulticast mode
[  833.834446][T11757] bridge_slave_1: left promiscuous mode
[  833.880075][T11757] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.015239][T11757] bridge_slave_0: left allmulticast mode
[  834.055413][T11757] bridge_slave_0: left promiscuous mode
[  834.095676][T11757] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.392371][T11540] Bluetooth: hci0: command tx timeout
[  835.016495][T11757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.080997][T11757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.122094][T11757] bond0 (unregistering): Released all slaves
[  835.311179][T11757] HfR: left promiscuous mode
[  835.481306][T17087] hsr_slave_0: entered promiscuous mode
[  835.515627][T17087] hsr_slave_1: entered promiscuous mode
[  835.574466][T17087] debugfs: 'hsr0' already exists in 'hsr'
[  835.619586][T17087] Cannot create hsr debugfs directory
[  835.625992][T11757] tipc: Left network mode
[  836.470747][T11540] Bluetooth: hci0: command tx timeout
[  836.962307][T11540] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  838.260023][T17203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2375'.
[  839.031864][T16825] Bluetooth: hci1: command 0x0c1a tx timeout
[  840.196676][T17233] ubi0: attaching mtd0
[  840.239580][T17233] ubi0: scanning is finished
[  840.302557][T17233] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  840.359831][T17087] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  840.409448][T17087] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  840.517186][T17087] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  840.663917][T17233] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  840.701343][T17087] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  840.747852][T17238] ubi0: attaching mtd0
[  840.767544][T17238] ubi0: scanning is finished
[  840.789424][T17238] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  841.003369][T11757] hsr_slave_1: left promiscuous mode
[  841.016210][T17238] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  841.038454][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.069561][T11757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.112566][T16825] Bluetooth: hci1: command 0x0c1a tx timeout
[  841.221552][T11757] veth1_macvtap: left promiscuous mode
[  841.251602][T11757] veth0_macvtap: left promiscuous mode
[  841.282201][T11757] veth0_vlan: left promiscuous mode
[  842.366468][T11757] team0 (unregistering): Port device team_slave_1 removed
[  842.470130][T11757] team0 (unregistering): Port device team_slave_0 removed
[  845.099975][T17087] 8021q: adding VLAN 0 to HW filter on device bond0
[  845.562421][T17087] 8021q: adding VLAN 0 to HW filter on device team0
[  845.795199][T17297] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.802838][T17297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  845.920421][T17297] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.927897][T17297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.491855][T17336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139
[  847.533771][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.962821][T17087] veth0_vlan: entered promiscuous mode
[  848.020268][T17087] veth1_vlan: entered promiscuous mode
[  848.080345][   T30] audit: type=1800 audit(1773333142.696:23): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2388" name="discovery_nqn" dev="configfs" ino=76880 res=0 errno=0
[  848.935591][T17087] veth0_macvtap: entered promiscuous mode
[  849.162755][T17087] veth1_macvtap: entered promiscuous mode
[  849.361874][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.409963][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  849.529511][T17360] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  849.552193][T17303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.591633][T17303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.631679][T17303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.694224][T17303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.950242][T17303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  849.982142][T17303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.115766][T17303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.166583][T17303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.171254][T17300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  851.185404][T17300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  851.194790][T17300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  851.203871][T17300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  851.212821][T17300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  851.427459][T17300] Bluetooth: hci0: unexpected event 0x22 length: 726 > 260
[  851.427495][T17300] Bluetooth: hci0: Malformed HCI Event: 0x22
[  852.619098][T17390] chnl_net:caif_netlink_parms(): no params data found
[  853.196062][T17307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.279403][T17300] Bluetooth: hci3: command tx timeout
[  853.594504][T17307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.771325][T17307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.940417][T17307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.080594][T17390] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.116025][T17390] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.141041][T17390] bridge_slave_0: entered allmulticast mode
[  854.151707][T17415] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  854.175671][T17390] bridge_slave_0: entered promiscuous mode
[  854.209776][T17390] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.218071][T17390] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.249497][T17390] bridge_slave_1: entered allmulticast mode
[  854.279470][T17390] bridge_slave_1: entered promiscuous mode
[  854.546996][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.613598][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.951343][T17390] team0: Port device team_slave_0 added
[  855.002404][T17390] team0: Port device team_slave_1 added
[  855.099042][T17307] bridge_slave_1: left allmulticast mode
[  855.105503][T17307] bridge_slave_1: left promiscuous mode
[  855.186899][T17307] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.300043][T17307] bridge_slave_0: left allmulticast mode
[  855.319156][T17307] bridge_slave_0: left promiscuous mode
[  855.359606][T17307] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.367823][T17300] Bluetooth: hci3: command tx timeout
[  855.460727][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'.
[  855.924523][T17446] FAULT_INJECTION: forcing a failure.
[  855.924523][T17446] name fail_futex, interval 1, probability 0, space 0, times 0
[  855.995896][T17446] CPU: 0 UID: 0 PID: 17446 Comm: syz.4.2409 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  855.995940][T17446] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  855.995959][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  855.995975][T17446] Call Trace:
[  855.995983][T17446]  <TASK>
[  855.995993][T17446]  dump_stack_lvl+0x100/0x190
[  855.996035][T17446]  should_fail_ex.cold+0x5/0xa
[  855.996064][T17446]  get_futex_key+0x1d2/0x1620
[  855.996099][T17446]  ? __pfx_get_futex_key+0x10/0x10
[  855.996138][T17446]  futex_wait_setup+0x83/0x510
[  855.996184][T17446]  __futex_wait+0x19f/0x300
[  855.996224][T17446]  ? __pfx___futex_wait+0x10/0x10
[  855.996260][T17446]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  855.996293][T17446]  ? lockdep_hardirqs_on+0x78/0x100
[  855.996327][T17446]  ? __pfx_futex_wake_mark+0x10/0x10
[  855.996372][T17446]  ? futex_hash+0x2c5/0x380
[  855.996409][T17446]  futex_wait+0xed/0x380
[  855.996446][T17446]  ? __pfx_futex_wait+0x10/0x10
[  855.996490][T17446]  ? do_accept+0x3e3/0x530
[  855.996516][T17446]  ? do_raw_spin_lock+0x128/0x260
[  855.996558][T17446]  do_futex+0x1ef/0x350
[  855.996590][T17446]  ? __pfx_do_futex+0x10/0x10
[  855.996622][T17446]  ? find_held_lock+0x2b/0x80
[  855.996644][T17446]  ? __sys_accept4+0x1cb/0x200
[  855.996668][T17446]  ? __sys_accept4+0x1cb/0x200
[  855.996696][T17446]  __x64_sys_futex+0x34f/0x4d0
[  855.996732][T17446]  ? __pfx___x64_sys_futex+0x10/0x10
[  855.996776][T17446]  do_syscall_64+0x106/0xf80
[  855.996805][T17446]  ? clear_bhb_loop+0x40/0x90
[  855.996835][T17446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.996861][T17446] RIP: 0033:0x7fb0ecd9c799
[  855.996881][T17446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.996906][T17446] RSP: 002b:00007fb0edbc30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  855.996929][T17446] RAX: ffffffffffffffda RBX: 00007fb0ed016098 RCX: 00007fb0ecd9c799
[  855.996950][T17446] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb0ed016098
[  855.996966][T17446] RBP: 00007fb0ed016090 R08: 0000000000000000 R09: 0000000000000000
[  855.996981][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  855.996996][T17446] R13: 00007fb0ed016128 R14: 00007fffd6fcf2a0 R15: 00007fffd6fcf388
[  855.997027][T17446]  </TASK>
[  857.442114][T17300] Bluetooth: hci3: command tx timeout
[  857.880994][T17307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.942704][T17307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.965460][T17307] bond0 (unregistering): Released all slaves
[  858.069421][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  858.107959][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.220585][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  858.270918][T17390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  858.296789][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.392948][T17390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.146877][T17390] hsr_slave_0: entered promiscuous mode
[  859.191872][T17390] hsr_slave_1: entered promiscuous mode
[  859.363378][T17474] FAULT_INJECTION: forcing a failure.
[  859.363378][T17474] name failslab, interval 1, probability 0, space 0, times 0
[  859.516118][T17474] CPU: 0 UID: 0 PID: 17474 Comm: syz.4.2410 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  859.516161][T17474] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  859.516171][T17474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  859.516186][T17474] Call Trace:
[  859.516195][T17474]  <TASK>
[  859.516206][T17474]  dump_stack_lvl+0x100/0x190
[  859.516249][T17474]  should_fail_ex.cold+0x5/0xa
[  859.516283][T17474]  should_failslab+0xc2/0x120
[  859.516310][T17474]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  859.516348][T17474]  ? seq_open+0x55/0x170
[  859.516386][T17474]  ? __pfx_stats_fop_open+0x10/0x10
[  859.516413][T17474]  seq_open+0x55/0x170
[  859.516447][T17474]  __seq_open_private+0x3e/0xd0
[  859.516484][T17474]  sc_common_open+0x6b/0x200
[  859.516512][T17474]  full_proxy_open_regular+0x1b6/0x370
[  859.516550][T17474]  do_dentry_open+0x6d8/0x1660
[  859.516579][T17474]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  859.516622][T17474]  vfs_open+0x82/0x3f0
[  859.516658][T17474]  path_openat+0x208c/0x31a0
[  859.516694][T17474]  ? __pfx_path_openat+0x10/0x10
[  859.516730][T17474]  do_file_open+0x20e/0x430
[  859.516758][T17474]  ? __pfx_do_file_open+0x10/0x10
[  859.516804][T17474]  ? alloc_fd+0x476/0x790
[  859.516831][T17474]  ? do_getname+0x191/0x390
[  859.516864][T17474]  do_sys_openat2+0x10d/0x1e0
[  859.516896][T17474]  ? __pfx_do_sys_openat2+0x10/0x10
[  859.516931][T17474]  ? __fget_files+0x21f/0x3d0
[  859.516960][T17474]  __x64_sys_openat+0x12d/0x210
[  859.517002][T17474]  ? __pfx___x64_sys_openat+0x10/0x10
[  859.517047][T17474]  do_syscall_64+0x106/0xf80
[  859.517077][T17474]  ? clear_bhb_loop+0x40/0x90
[  859.517107][T17474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.517134][T17474] RIP: 0033:0x7fb0ecd9c799
[  859.517158][T17474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.517183][T17474] RSP: 002b:00007fb0edba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  859.517207][T17474] RAX: ffffffffffffffda RBX: 00007fb0ed016180 RCX: 00007fb0ecd9c799
[  859.517224][T17474] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  859.517240][T17474] RBP: 00007fb0ece32c99 R08: 0000000000000000 R09: 0000000000000000
[  859.517255][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  859.517270][T17474] R13: 00007fb0ed016218 R14: 00007fb0ed016180 R15: 00007fffd6fcf388
[  859.517302][T17474]  </TASK>
[  860.236922][T17300] Bluetooth: hci3: command tx timeout
[  862.266348][T17505] FAULT_INJECTION: forcing a failure.
[  862.266348][T17505] name failslab, interval 1, probability 0, space 0, times 0
[  862.455035][T17505] CPU: 0 UID: 0 PID: 17505 Comm: syz.4.2413 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  862.455078][T17505] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  862.455087][T17505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  862.455103][T17505] Call Trace:
[  862.455113][T17505]  <TASK>
[  862.455122][T17505]  dump_stack_lvl+0x100/0x190
[  862.455164][T17505]  should_fail_ex.cold+0x5/0xa
[  862.455194][T17505]  ? __seq_open_private+0x22/0xd0
[  862.455236][T17505]  should_failslab+0xc2/0x120
[  862.455262][T17505]  __kmalloc_noprof+0xe0/0x850
[  862.455306][T17505]  ? __pfx_stats_fop_open+0x10/0x10
[  862.455333][T17505]  __seq_open_private+0x22/0xd0
[  862.455376][T17505]  sc_common_open+0x6b/0x200
[  862.455404][T17505]  full_proxy_open_regular+0x1b6/0x370
[  862.455447][T17505]  do_dentry_open+0x6d8/0x1660
[  862.455472][T17505]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  862.455515][T17505]  vfs_open+0x82/0x3f0
[  862.455550][T17505]  path_openat+0x208c/0x31a0
[  862.455585][T17505]  ? __pfx_path_openat+0x10/0x10
[  862.455622][T17505]  do_file_open+0x20e/0x430
[  862.455649][T17505]  ? __pfx_do_file_open+0x10/0x10
[  862.455696][T17505]  ? alloc_fd+0x476/0x790
[  862.455723][T17505]  ? do_getname+0x191/0x390
[  862.455756][T17505]  do_sys_openat2+0x10d/0x1e0
[  862.455789][T17505]  ? __pfx_do_sys_openat2+0x10/0x10
[  862.455852][T17505]  ? __fget_files+0x21f/0x3d0
[  862.455881][T17505]  __x64_sys_openat+0x12d/0x210
[  862.455915][T17505]  ? __pfx___x64_sys_openat+0x10/0x10
[  862.455960][T17505]  do_syscall_64+0x106/0xf80
[  862.455991][T17505]  ? clear_bhb_loop+0x40/0x90
[  862.456026][T17505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.456053][T17505] RIP: 0033:0x7fb0ecd9c799
[  862.456077][T17505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.456115][T17505] RSP: 002b:00007fb0edba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  862.456140][T17505] RAX: ffffffffffffffda RBX: 00007fb0ed016180 RCX: 00007fb0ecd9c799
[  862.456157][T17505] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  862.456174][T17505] RBP: 00007fb0ece32c99 R08: 0000000000000000 R09: 0000000000000000
[  862.456190][T17505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  862.456206][T17505] R13: 00007fb0ed016218 R14: 00007fb0ed016180 R15: 00007fffd6fcf388
[  862.456243][T17505]  </TASK>
[  864.260332][T17502] Process accounting paused
[  865.880352][T17307] hsr_slave_1: left promiscuous mode
[  865.899549][T17307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.925028][T17307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.965389][T17307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  866.005872][T17307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  866.059339][T17307] veth1_macvtap: left promiscuous mode
[  866.082420][T17307] veth0_macvtap: left promiscuous mode
[  866.102740][T17307] veth1_vlan: left promiscuous mode
[  866.136026][T17307] veth0_vlan: left promiscuous mode
[  866.791051][T17307] team0 (unregistering): Port device team_slave_1 removed
[  866.830707][T17307] team0 (unregistering): Port device team_slave_0 removed
[  867.381665][T17390] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  867.484768][T17390] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  867.563241][T17390] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  867.665857][T17390] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  867.917368][T17565] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  868.519660][T17390] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.677074][T17390] 8021q: adding VLAN 0 to HW filter on device team0
[  868.748117][T17354] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.755401][T17354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.858791][T17354] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.866272][T17354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.164107][T17390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.765983][T17390] veth0_vlan: entered promiscuous mode
[  870.922041][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  870.936371][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  871.509107][T17390] veth1_vlan: entered promiscuous mode
[  874.136855][T17390] veth0_macvtap: entered promiscuous mode
[  874.974781][T17390] veth1_macvtap: entered promiscuous mode
[  875.518226][T17390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.566299][T17390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.711592][T17297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.749361][T17297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  875.758741][T17297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.828021][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'.
[  875.867317][T17297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  876.096008][T17354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.159777][T17354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.329170][T17354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.364016][T17354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.058973][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'.
[  883.057822][T17742] tc_dump_action: action bad kind
[  883.195369][T17752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2444'.
[  883.282397][T17752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  883.481831][T17752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  883.545366][T17752] bond0 (unregistering): Released all slaves
[  884.240299][T17769] FAULT_INJECTION: forcing a failure.
[  884.240299][T17769] name failslab, interval 1, probability 0, space 0, times 0
[  884.370541][T17769] CPU: 0 UID: 0 PID: 17769 Comm: syz.0.2446 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  884.370585][T17769] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  884.370623][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  884.370640][T17769] Call Trace:
[  884.370650][T17769]  <TASK>
[  884.370661][T17769]  dump_stack_lvl+0x100/0x190
[  884.370706][T17769]  should_fail_ex.cold+0x5/0xa
[  884.370737][T17769]  should_failslab+0xc2/0x120
[  884.370765][T17769]  __kmalloc_cache_noprof+0x7a/0x6f0
[  884.370799][T17769]  ? sc_common_open+0x46/0x200
[  884.370826][T17769]  ? __pfx___debugfs_file_get+0x10/0x10
[  884.370858][T17769]  ? find_held_lock+0x2b/0x80
[  884.370886][T17769]  ? __pfx_stats_fop_open+0x10/0x10
[  884.370912][T17769]  sc_common_open+0x46/0x200
[  884.370940][T17769]  full_proxy_open_regular+0x1b6/0x370
[  884.370977][T17769]  do_dentry_open+0x6d8/0x1660
[  884.371001][T17769]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  884.371043][T17769]  vfs_open+0x82/0x3f0
[  884.371078][T17769]  path_openat+0x208c/0x31a0
[  884.371114][T17769]  ? __pfx_path_openat+0x10/0x10
[  884.371150][T17769]  do_file_open+0x20e/0x430
[  884.371178][T17769]  ? __pfx_do_file_open+0x10/0x10
[  884.371225][T17769]  ? alloc_fd+0x476/0x790
[  884.371252][T17769]  ? do_getname+0x191/0x390
[  884.371286][T17769]  do_sys_openat2+0x10d/0x1e0
[  884.371318][T17769]  ? __pfx_do_sys_openat2+0x10/0x10
[  884.371353][T17769]  ? __fget_files+0x21f/0x3d0
[  884.371382][T17769]  __x64_sys_openat+0x12d/0x210
[  884.371416][T17769]  ? __pfx___x64_sys_openat+0x10/0x10
[  884.371460][T17769]  do_syscall_64+0x106/0xf80
[  884.371498][T17769]  ? clear_bhb_loop+0x40/0x90
[  884.371530][T17769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.371561][T17769] RIP: 0033:0x7fc825b9c799
[  884.371581][T17769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.371606][T17769] RSP: 002b:00007fc826a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  884.371630][T17769] RAX: ffffffffffffffda RBX: 00007fc825e16180 RCX: 00007fc825b9c799
[  884.371647][T17769] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  884.371663][T17769] RBP: 00007fc825c32c99 R08: 0000000000000000 R09: 0000000000000000
[  884.371679][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  884.371695][T17769] R13: 00007fc825e16218 R14: 00007fc825e16180 R15: 00007fffe756ce78
[  884.371727][T17769]  </TASK>
[  887.404666][T17802] netlink: 'syz.0.2454': attribute type 11 has an invalid length.
[  887.443754][T17802] netlink: 'syz.0.2454': attribute type 11 has an invalid length.
[  887.473308][T17802] netlink: 'syz.0.2454': attribute type 11 has an invalid length.
[  887.503721][T17802] netlink: 'syz.0.2454': attribute type 11 has an invalid length.
[  890.590954][T17847] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  891.023959][T17853] FAULT_INJECTION: forcing a failure.
[  891.023959][T17853] name failslab, interval 1, probability 0, space 0, times 0
[  891.298178][T17853] CPU: 0 UID: 0 PID: 17853 Comm: syz.0.2461 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  891.298219][T17853] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  891.298230][T17853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  891.298246][T17853] Call Trace:
[  891.298254][T17853]  <TASK>
[  891.298263][T17853]  dump_stack_lvl+0x100/0x190
[  891.298306][T17853]  should_fail_ex.cold+0x5/0xa
[  891.298336][T17853]  ? __seq_open_private+0x22/0xd0
[  891.298372][T17853]  should_failslab+0xc2/0x120
[  891.298398][T17853]  __kmalloc_noprof+0xe0/0x850
[  891.298448][T17853]  ? __pfx_stats_fop_open+0x10/0x10
[  891.298476][T17853]  __seq_open_private+0x22/0xd0
[  891.298514][T17853]  sc_common_open+0x6b/0x200
[  891.298543][T17853]  full_proxy_open_regular+0x1b6/0x370
[  891.298581][T17853]  do_dentry_open+0x6d8/0x1660
[  891.298606][T17853]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  891.298648][T17853]  vfs_open+0x82/0x3f0
[  891.298683][T17853]  path_openat+0x208c/0x31a0
[  891.298718][T17853]  ? __pfx_path_openat+0x10/0x10
[  891.298754][T17853]  do_file_open+0x20e/0x430
[  891.298782][T17853]  ? __pfx_do_file_open+0x10/0x10
[  891.298828][T17853]  ? alloc_fd+0x476/0x790
[  891.298855][T17853]  ? do_getname+0x191/0x390
[  891.298896][T17853]  do_sys_openat2+0x10d/0x1e0
[  891.298928][T17853]  ? __pfx_do_sys_openat2+0x10/0x10
[  891.298963][T17853]  ? __fget_files+0x21f/0x3d0
[  891.298994][T17853]  __x64_sys_openat+0x12d/0x210
[  891.299028][T17853]  ? __pfx___x64_sys_openat+0x10/0x10
[  891.299073][T17853]  do_syscall_64+0x106/0xf80
[  891.299111][T17853]  ? clear_bhb_loop+0x40/0x90
[  891.299143][T17853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.299169][T17853] RIP: 0033:0x7fc825b9c799
[  891.299190][T17853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.299221][T17853] RSP: 002b:00007fc826a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  891.299245][T17853] RAX: ffffffffffffffda RBX: 00007fc825e16180 RCX: 00007fc825b9c799
[  891.299263][T17853] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  891.299279][T17853] RBP: 00007fc825c32c99 R08: 0000000000000000 R09: 0000000000000000
[  891.299295][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  891.299310][T17853] R13: 00007fc825e16218 R14: 00007fc825e16180 R15: 00007fffe756ce78
[  891.299342][T17853]  </TASK>
[  892.898696][T17391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  892.916965][T17391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  892.938011][T17391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  892.962935][T17391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  892.971869][T17391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  894.058911][T17869] serio: Serial port pty6
[  894.230686][T17862] chnl_net:caif_netlink_parms(): no params data found
[  894.382438][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'.
[  894.572665][T17881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  894.594087][T17881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  894.654463][T17881] bond0 (unregistering): Released all slaves
[  895.032089][T17890] random: crng reseeded on system resumption
[  895.059099][T17391] Bluetooth: hci1: command tx timeout
[  895.106307][T17862] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.137898][T17862] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.175841][T17862] bridge_slave_0: entered allmulticast mode
[  895.206295][T17894] hub 1-0:1.0: USB hub found
[  895.217649][T17862] bridge_slave_0: entered promiscuous mode
[  895.257028][T17894] hub 1-0:1.0: 1 port detected
[  895.387783][T17862] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.426783][T17862] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.467349][T17862] bridge_slave_1: entered allmulticast mode
[  895.506208][T17862] bridge_slave_1: entered promiscuous mode
[  895.747933][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  895.812837][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  895.963115][T17862] team0: Port device team_slave_0 added
[  896.001480][T17862] team0: Port device team_slave_1 added
[  896.320654][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.376786][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  896.540787][T17391] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13
[  896.550420][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.620372][T17904] zswap: compressor  not available
[  896.858303][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.907289][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.029957][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.140687][T17391] Bluetooth: hci1: command tx timeout
[  897.554212][T17862] hsr_slave_0: entered promiscuous mode
[  897.575899][T17862] hsr_slave_1: entered promiscuous mode
[  897.602874][T17862] debugfs: 'hsr0' already exists in 'hsr'
[  897.624578][T17862] Cannot create hsr debugfs directory
[  898.928974][T17862] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  898.956403][T17933] FAULT_INJECTION: forcing a failure.
[  898.956403][T17933] name failslab, interval 1, probability 0, space 0, times 0
[  898.995173][T17862] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  899.030749][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.1.2477 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  899.030791][T17933] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  899.030801][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  899.030818][T17933] Call Trace:
[  899.030826][T17933]  <TASK>
[  899.030839][T17933]  dump_stack_lvl+0x100/0x190
[  899.030882][T17933]  should_fail_ex.cold+0x5/0xa
[  899.030912][T17933]  should_failslab+0xc2/0x120
[  899.030938][T17933]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  899.030976][T17933]  ? __proc_create+0x2cb/0x8c0
[  899.031023][T17933]  __proc_create+0x2cb/0x8c0
[  899.031062][T17933]  ? __pfx___proc_create+0x10/0x10
[  899.031103][T17933]  ? _raw_write_unlock+0x28/0x50
[  899.031141][T17933]  proc_create_reg+0x75/0x170
[  899.031165][T17933]  ? __pfx_kcm_stats_seq_show+0x10/0x10
[  899.031290][T17933]  proc_create_net_single+0x86/0x180
[  899.031316][T17933]  ? __pfx_proc_create_net_single+0x10/0x10
[  899.031348][T17933]  ? __pfx_kcm_proc_init_net+0x10/0x10
[  899.031376][T17933]  kcm_proc_init_net+0x52/0x120
[  899.031403][T17933]  ops_init+0x1e2/0x5f0
[  899.031441][T17933]  setup_net+0x118/0x3a0
[  899.031474][T17933]  ? __pfx_setup_net+0x10/0x10
[  899.031504][T17933]  ? lockdep_init_map_type+0x5c/0x250
[  899.031546][T17933]  ? mutex_init_lockep+0x110/0x150
[  899.031585][T17933]  copy_net_ns+0x46f/0x7c0
[  899.031623][T17933]  create_new_namespaces+0x3ea/0xac0
[  899.031657][T17933]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  899.031687][T17933]  ksys_unshare+0x473/0xad0
[  899.031721][T17933]  ? __pfx_ksys_unshare+0x10/0x10
[  899.031763][T17933]  __x64_sys_unshare+0x31/0x40
[  899.031794][T17933]  do_syscall_64+0x106/0xf80
[  899.031824][T17933]  ? clear_bhb_loop+0x40/0x90
[  899.031855][T17933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.031881][T17933] RIP: 0033:0x7f593459c799
[  899.031902][T17933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.031925][T17933] RSP: 002b:00007f59353e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  899.031949][T17933] RAX: ffffffffffffffda RBX: 00007f5934816090 RCX: 00007f593459c799
[  899.031965][T17933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  899.031981][T17933] RBP: 00007f5934632c99 R08: 0000000000000000 R09: 0000000000000000
[  899.031996][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  899.032011][T17933] R13: 00007f5934816128 R14: 00007f5934816090 R15: 00007ffd6d4a55c8
[  899.032043][T17933]  </TASK>
[  899.687142][T17391] Bluetooth: hci1: command tx timeout
[  899.742566][T17862] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  899.828281][T17862] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  899.852281][T17935] FAULT_INJECTION: forcing a failure.
[  899.852281][T17935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  899.882527][T17935] CPU: 0 UID: 0 PID: 17935 Comm: syz.0.2478 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  899.882568][T17935] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  899.882578][T17935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  899.882593][T17935] Call Trace:
[  899.882601][T17935]  <TASK>
[  899.882610][T17935]  dump_stack_lvl+0x100/0x190
[  899.882652][T17935]  should_fail_ex.cold+0x5/0xa
[  899.882681][T17935]  _copy_from_user+0x2e/0xd0
[  899.882708][T17935]  copy_msghdr_from_user+0x9f/0x4f0
[  899.882751][T17935]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  899.882797][T17935]  ? futex_unqueue+0x133/0x2c0
[  899.882835][T17935]  ___sys_sendmsg+0x106/0x1e0
[  899.882876][T17935]  ? __pfx____sys_sendmsg+0x10/0x10
[  899.882915][T17935]  ? __pfx___futex_wait+0x10/0x10
[  899.882965][T17935]  ? find_held_lock+0x2b/0x80
[  899.883006][T17935]  __sys_sendmmsg+0x205/0x430
[  899.883040][T17935]  ? __pfx___sys_sendmmsg+0x10/0x10
[  899.883079][T17935]  ? __pfx_do_futex+0x10/0x10
[  899.883109][T17935]  ? do_sock_setsockopt+0x101/0x1d0
[  899.883163][T17935]  ? rcu_is_watching+0x12/0xc0
[  899.883215][T17935]  ? xfd_validate_state+0x129/0x190
[  899.883259][T17935]  __x64_sys_sendmmsg+0x9c/0x100
[  899.883289][T17935]  ? lockdep_hardirqs_on+0x78/0x100
[  899.883320][T17935]  do_syscall_64+0x106/0xf80
[  899.883350][T17935]  ? clear_bhb_loop+0x40/0x90
[  899.883380][T17935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.883406][T17935] RIP: 0033:0x7fc825b9c799
[  899.883426][T17935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.883457][T17935] RSP: 002b:00007fc826ad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  899.883481][T17935] RAX: ffffffffffffffda RBX: 00007fc825e15fa0 RCX: 00007fc825b9c799
[  899.883498][T17935] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  899.883513][T17935] RBP: 00007fc825c32c99 R08: 0000000000000000 R09: 0000000000000000
[  899.883529][T17935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  899.883544][T17935] R13: 00007fc825e16038 R14: 00007fc825e15fa0 R15: 00007fffe756ce78
[  899.883576][T17935]  </TASK>
[  900.532675][T17950] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.36.1), cmd(2)
[  900.910773][T17951] Invalid ELF header magic: != ELF
[  901.050954][T17862] 8021q: adding VLAN 0 to HW filter on device bond0
[  901.195078][T17862] 8021q: adding VLAN 0 to HW filter on device team0
[  901.206760][T17307] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.206850][T17307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.284062][T17307] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.284166][T17307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.791213][T17300] Bluetooth: hci1: command tx timeout
[  902.218105][T17974] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  902.274159][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  902.348588][T17973] ima: policy update failed
[  902.384249][   T30] audit: type=1802 audit(1773333196.979:24): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2483" res=0 errno=0
[  903.791136][T17862] veth0_vlan: entered promiscuous mode
[  903.905782][T17862] veth1_vlan: entered promiscuous mode
[  904.060715][T17862] veth0_macvtap: entered promiscuous mode
[  904.101224][T17862] veth1_macvtap: entered promiscuous mode
[  904.126675][T18005] FAULT_INJECTION: forcing a failure.
[  904.126675][T18005] name failslab, interval 1, probability 0, space 0, times 0
[  904.183270][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.233901][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.249653][T18005] CPU: 0 UID: 0 PID: 18005 Comm: syz.1.2486 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  904.249695][T18005] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  904.249705][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  904.249721][T18005] Call Trace:
[  904.249729][T18005]  <TASK>
[  904.249739][T18005]  dump_stack_lvl+0x100/0x190
[  904.249782][T18005]  should_fail_ex.cold+0x5/0xa
[  904.249811][T18005]  should_failslab+0xc2/0x120
[  904.249838][T18005]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  904.249876][T18005]  ? seq_open+0x55/0x170
[  904.249914][T18005]  ? __pfx_stats_fop_open+0x10/0x10
[  904.249941][T18005]  seq_open+0x55/0x170
[  904.249975][T18005]  __seq_open_private+0x3e/0xd0
[  904.250019][T18005]  sc_common_open+0x6b/0x200
[  904.250047][T18005]  full_proxy_open_regular+0x1b6/0x370
[  904.250086][T18005]  do_dentry_open+0x6d8/0x1660
[  904.250150][T18005]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  904.250193][T18005]  vfs_open+0x82/0x3f0
[  904.250236][T18005]  path_openat+0x208c/0x31a0
[  904.250271][T18005]  ? __pfx_path_openat+0x10/0x10
[  904.250308][T18005]  do_file_open+0x20e/0x430
[  904.250336][T18005]  ? __pfx_do_file_open+0x10/0x10
[  904.250384][T18005]  ? alloc_fd+0x476/0x790
[  904.250411][T18005]  ? do_getname+0x191/0x390
[  904.250447][T18005]  do_sys_openat2+0x10d/0x1e0
[  904.250487][T18005]  ? __pfx_do_sys_openat2+0x10/0x10
[  904.250523][T18005]  ? __fget_files+0x21f/0x3d0
[  904.250552][T18005]  __x64_sys_openat+0x12d/0x210
[  904.250586][T18005]  ? __pfx___x64_sys_openat+0x10/0x10
[  904.250631][T18005]  do_syscall_64+0x106/0xf80
[  904.250684][T18005]  ? clear_bhb_loop+0x40/0x90
[  904.250715][T18005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.250741][T18005] RIP: 0033:0x7f593459c799
[  904.250762][T18005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  904.250786][T18005] RSP: 002b:00007f59353c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  904.250810][T18005] RAX: ffffffffffffffda RBX: 00007f5934816180 RCX: 00007f593459c799
[  904.250827][T18005] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  904.250844][T18005] RBP: 00007f5934632c99 R08: 0000000000000000 R09: 0000000000000000
[  904.250859][T18005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.250874][T18005] R13: 00007f5934816218 R14: 00007f5934816180 R15: 00007ffd6d4a55c8
[  904.250906][T18005]  </TASK>
[  904.555018][T18007] kAFS: Invalid Command on /proc/fs/afs/cells file
[  904.913948][T17307] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.955986][T17297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  905.022523][T17297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  905.032237][T17306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.056185][T17306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.067834][T17297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.144729][T17839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.163562][T17839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.626989][T18018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  905.811223][T18024] netlink: 'syz.1.2490': attribute type 11 has an invalid length.
[  905.840279][T18024] netlink: 'syz.1.2490': attribute type 11 has an invalid length.
[  905.866503][T18024] netlink: 'syz.1.2490': attribute type 11 has an invalid length.
[  905.906154][T18024] netlink: 'syz.1.2490': attribute type 11 has an invalid length.
[  906.237635][T18029] vivid-007: =================  START STATUS  =================
[  906.306612][T18029] vivid-007: Enable Output Cropping: true grabbed
[  906.355048][T18029] vivid-007: Enable Output Composing: true grabbed
[  906.450091][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  906.501936][T18029] vivid-007: Enable Output Scaler: true grabbed
[  906.599510][T18029] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  906.674244][T18029] vivid-007: Transmit Mode: HDMI grabbed
[  906.735214][T18029] vivid-007: Hotplug Present: 0x00000000
[  906.767893][T18029] vivid-007: RxSense Present: 0x00000000
[  906.797321][T18029] vivid-007: EDID Present: 0x00000000
[  906.840349][T18029] vivid-007: ==================  END STATUS  ==================
[  908.515720][T18060] FAULT_INJECTION: forcing a failure.
[  908.515720][T18060] name failslab, interval 1, probability 0, space 0, times 0
[  908.627277][T18060] CPU: 0 UID: 0 PID: 18060 Comm: syz.1.2497 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  908.627320][T18060] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  908.627330][T18060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  908.627345][T18060] Call Trace:
[  908.627353][T18060]  <TASK>
[  908.627363][T18060]  dump_stack_lvl+0x100/0x190
[  908.627406][T18060]  should_fail_ex.cold+0x5/0xa
[  908.627435][T18060]  ? __seq_open_private+0x22/0xd0
[  908.627472][T18060]  should_failslab+0xc2/0x120
[  908.627498][T18060]  __kmalloc_noprof+0xe0/0x850
[  908.627541][T18060]  ? __pfx_stats_fop_open+0x10/0x10
[  908.627569][T18060]  __seq_open_private+0x22/0xd0
[  908.627606][T18060]  sc_common_open+0x6b/0x200
[  908.627634][T18060]  full_proxy_open_regular+0x1b6/0x370
[  908.627672][T18060]  do_dentry_open+0x6d8/0x1660
[  908.627702][T18060]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  908.627745][T18060]  vfs_open+0x82/0x3f0
[  908.627780][T18060]  path_openat+0x208c/0x31a0
[  908.627816][T18060]  ? __pfx_path_openat+0x10/0x10
[  908.627852][T18060]  do_file_open+0x20e/0x430
[  908.627880][T18060]  ? __pfx_do_file_open+0x10/0x10
[  908.627927][T18060]  ? alloc_fd+0x476/0x790
[  908.627953][T18060]  ? do_getname+0x191/0x390
[  908.627986][T18060]  do_sys_openat2+0x10d/0x1e0
[  908.628019][T18060]  ? __pfx_do_sys_openat2+0x10/0x10
[  908.628054][T18060]  ? __fget_files+0x21f/0x3d0
[  908.628083][T18060]  __x64_sys_openat+0x12d/0x210
[  908.628117][T18060]  ? __pfx___x64_sys_openat+0x10/0x10
[  908.628162][T18060]  do_syscall_64+0x106/0xf80
[  908.628192][T18060]  ? clear_bhb_loop+0x40/0x90
[  908.628226][T18060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  908.628252][T18060] RIP: 0033:0x7f593459c799
[  908.628273][T18060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  908.628298][T18060] RSP: 002b:00007f59353c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  908.628322][T18060] RAX: ffffffffffffffda RBX: 00007f5934816180 RCX: 00007f593459c799
[  908.628339][T18060] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  908.628355][T18060] RBP: 00007f5934632c99 R08: 0000000000000000 R09: 0000000000000000
[  908.628370][T18060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  908.628385][T18060] R13: 00007f5934816218 R14: 00007f5934816180 R15: 00007ffd6d4a55c8
[  908.628417][T18060]  </TASK>
[  916.250378][T18156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'.
[  917.580083][T18160] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  917.620618][T18160] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  917.676725][T18160] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  917.705173][T18160] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  917.768257][T18160] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  917.827848][T18160] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  917.850560][T18160] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  917.895467][T18160] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  917.949088][T18160] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  917.990072][T18160] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  918.037441][T18160] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  918.483596][T18175] vivid-007: =================  START STATUS  =================
[  918.535232][T18175] vivid-007: Enable Output Cropping: true grabbed
[  918.580846][T18175] vivid-007: Enable Output Composing: true grabbed
[  918.632007][T18175] vivid-007: Enable Output Scaler: true grabbed
[  918.655498][T18175] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  918.692240][T18175] vivid-007: Transmit Mode: HDMI grabbed
[  918.723233][T18175] vivid-007: Hotplug Present: 0x00000000
[  918.762799][T18175] vivid-007: RxSense Present: 0x00000000
[  918.789969][T18175] vivid-007: EDID Present: 0x00000000
[  918.821911][T18175] vivid-007: ==================  END STATUS  ==================
[  919.631395][T17300] Bluetooth: hci2: command 0x0c1a tx timeout
[  919.638010][T17300] Bluetooth: hci4: command 0x0c1a tx timeout
[  919.668839][T18193] FAULT_INJECTION: forcing a failure.
[  919.668839][T18193] name failslab, interval 1, probability 0, space 0, times 0
[  919.721102][T17391] Bluetooth: hci0: command 0x0c1a tx timeout
[  919.734546][T17391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  919.765510][T17391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  919.777243][T17391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  919.801762][T17391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  919.810735][T17391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  919.871519][T17391] Bluetooth: hci3: command 0x0c1a tx timeout
[  919.921994][T18193] CPU: 0 UID: 0 PID: 18193 Comm: syz.2.2530 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  919.922038][T18193] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  919.922047][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  919.922063][T18193] Call Trace:
[  919.922071][T18193]  <TASK>
[  919.922081][T18193]  dump_stack_lvl+0x100/0x190
[  919.922124][T18193]  should_fail_ex.cold+0x5/0xa
[  919.922152][T18193]  ? __seq_open_private+0x22/0xd0
[  919.922188][T18193]  should_failslab+0xc2/0x120
[  919.922214][T18193]  __kmalloc_noprof+0xe0/0x850
[  919.922259][T18193]  ? __pfx_stats_fop_open+0x10/0x10
[  919.922287][T18193]  __seq_open_private+0x22/0xd0
[  919.922324][T18193]  sc_common_open+0x6b/0x200
[  919.922352][T18193]  full_proxy_open_regular+0x1b6/0x370
[  919.922392][T18193]  do_dentry_open+0x6d8/0x1660
[  919.922417][T18193]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  919.922459][T18193]  vfs_open+0x82/0x3f0
[  919.922493][T18193]  path_openat+0x208c/0x31a0
[  919.922535][T18193]  ? __pfx_path_openat+0x10/0x10
[  919.922572][T18193]  do_file_open+0x20e/0x430
[  919.922601][T18193]  ? __pfx_do_file_open+0x10/0x10
[  919.922649][T18193]  ? alloc_fd+0x476/0x790
[  919.922675][T18193]  ? do_getname+0x191/0x390
[  919.922709][T18193]  do_sys_openat2+0x10d/0x1e0
[  919.922743][T18193]  ? __pfx_do_sys_openat2+0x10/0x10
[  919.922778][T18193]  ? __fget_files+0x21f/0x3d0
[  919.922808][T18193]  __x64_sys_openat+0x12d/0x210
[  919.922841][T18193]  ? __pfx___x64_sys_openat+0x10/0x10
[  919.922886][T18193]  do_syscall_64+0x106/0xf80
[  919.922916][T18193]  ? clear_bhb_loop+0x40/0x90
[  919.922947][T18193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.922973][T18193] RIP: 0033:0x7f797839c799
[  919.922994][T18193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.923021][T18193] RSP: 002b:00007f7979186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  919.923045][T18193] RAX: ffffffffffffffda RBX: 00007f7978616180 RCX: 00007f797839c799
[  919.923062][T18193] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  919.923078][T18193] RBP: 00007f7978432c99 R08: 0000000000000000 R09: 0000000000000000
[  919.923094][T18193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.923109][T18193] R13: 00007f7978616218 R14: 00007f7978616180 R15: 00007ffd7a1d77e8
[  919.923141][T18193]  </TASK>
[  920.613941][T17391] Bluetooth: hci1: command 0x0c1a tx timeout
[  921.792575][T17391] Bluetooth: hci0: command 0x0c1a tx timeout
[  921.881060][T17391] Bluetooth: hci5: command tx timeout
[  921.952508][T17391] Bluetooth: hci3: command 0x0c1a tx timeout
[  922.190122][T18194] chnl_net:caif_netlink_parms(): no params data found
[  922.674429][T17391] Bluetooth: hci1: command 0x0c1a tx timeout
[  922.977909][T18194] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.017950][T18194] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.059121][T18194] bridge_slave_0: entered allmulticast mode
[  923.088143][T18194] bridge_slave_0: entered promiscuous mode
[  923.144785][T18194] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.185138][T18194] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.226346][T18194] bridge_slave_1: entered allmulticast mode
[  923.259046][T18194] bridge_slave_1: entered promiscuous mode
[  923.447097][T18194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.523780][T18194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.663754][T18194] team0: Port device team_slave_0 added
[  923.710167][T18194] team0: Port device team_slave_1 added
[  923.862239][T18194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.873651][T17391] Bluetooth: hci0: command 0x0c1a tx timeout
[  923.904777][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  923.963612][T17391] Bluetooth: hci5: command tx timeout
[  924.033794][T17391] Bluetooth: hci3: command 0x0c1a tx timeout
[  924.046975][T18194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.102587][T18194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.141357][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.288197][T18194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  924.582528][T18194] hsr_slave_0: entered promiscuous mode
[  924.610651][T18194] hsr_slave_1: entered promiscuous mode
[  924.644894][T18194] debugfs: 'hsr0' already exists in 'hsr'
[  924.699039][T18194] Cannot create hsr debugfs directory
[  924.754341][T17391] Bluetooth: hci1: command 0x0c1a tx timeout
[  925.646779][T18194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  925.691110][T18194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  925.733576][T18194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  925.817996][T18194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  926.039422][T17391] Bluetooth: hci5: command tx timeout
[  926.476931][T18194] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.562106][T18194] 8021q: adding VLAN 0 to HW filter on device team0
[  926.857858][T17356] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.865753][T17356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.977223][T17356] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.984664][T17356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  928.121915][T17391] Bluetooth: hci5: command tx timeout
[  928.233544][T18194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  930.196140][T18194] veth0_vlan: entered promiscuous mode
[  930.275292][T18194] veth1_vlan: entered promiscuous mode
[  930.467907][T18194] veth0_macvtap: entered promiscuous mode
[  930.514635][T18194] veth1_macvtap: entered promiscuous mode
[  930.595515][T18194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  930.719283][T18194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  930.795499][T17356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.850838][T17356] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  930.902645][T17356] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.929599][T18298] FAULT_INJECTION: forcing a failure.
[  930.929599][T18298] name failslab, interval 1, probability 0, space 0, times 0
[  930.968214][T17356] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  931.148327][T18298] CPU: 0 UID: 0 PID: 18298 Comm: syz.2.2544 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  931.148370][T18298] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  931.148380][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  931.148395][T18298] Call Trace:
[  931.148403][T18298]  <TASK>
[  931.148413][T18298]  dump_stack_lvl+0x100/0x190
[  931.148455][T18298]  should_fail_ex.cold+0x5/0xa
[  931.148484][T18298]  ? __seq_open_private+0x22/0xd0
[  931.148519][T18298]  should_failslab+0xc2/0x120
[  931.148545][T18298]  __kmalloc_noprof+0xe0/0x850
[  931.148589][T18298]  ? __pfx_stats_fop_open+0x10/0x10
[  931.148616][T18298]  __seq_open_private+0x22/0xd0
[  931.148653][T18298]  sc_common_open+0x6b/0x200
[  931.148681][T18298]  full_proxy_open_regular+0x1b6/0x370
[  931.148719][T18298]  do_dentry_open+0x6d8/0x1660
[  931.148746][T18298]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  931.148788][T18298]  vfs_open+0x82/0x3f0
[  931.148822][T18298]  path_openat+0x208c/0x31a0
[  931.148858][T18298]  ? __pfx_path_openat+0x10/0x10
[  931.148894][T18298]  do_file_open+0x20e/0x430
[  931.148922][T18298]  ? __pfx_do_file_open+0x10/0x10
[  931.148969][T18298]  ? alloc_fd+0x476/0x790
[  931.148996][T18298]  ? do_getname+0x191/0x390
[  931.149030][T18298]  do_sys_openat2+0x10d/0x1e0
[  931.149062][T18298]  ? __pfx_do_sys_openat2+0x10/0x10
[  931.149097][T18298]  ? __fget_files+0x21f/0x3d0
[  931.149126][T18298]  __x64_sys_openat+0x12d/0x210
[  931.149161][T18298]  ? __pfx___x64_sys_openat+0x10/0x10
[  931.149205][T18298]  do_syscall_64+0x106/0xf80
[  931.149243][T18298]  ? clear_bhb_loop+0x40/0x90
[  931.149274][T18298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.149300][T18298] RIP: 0033:0x7f797839c799
[  931.149321][T18298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.149349][T18298] RSP: 002b:00007f7979186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  931.149373][T18298] RAX: ffffffffffffffda RBX: 00007f7978616180 RCX: 00007f797839c799
[  931.149389][T18298] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  931.149406][T18298] RBP: 00007f7978432c99 R08: 0000000000000000 R09: 0000000000000000
[  931.149422][T18298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  931.149436][T18298] R13: 00007f7978616218 R14: 00007f7978616180 R15: 00007ffd7a1d77e8
[  931.149468][T18298]  </TASK>
[  931.874092][T17356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.907701][T17356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.938548][T17356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.998058][T17356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  932.378027][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  932.385015][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  933.571425][T18308] FAULT_INJECTION: forcing a failure.
[  933.571425][T18308] name failslab, interval 1, probability 0, space 0, times 0
[  933.803526][T18308] CPU: 0 UID: 0 PID: 18308 Comm: syz.5.2547 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  933.803568][T18308] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  933.803579][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  933.803594][T18308] Call Trace:
[  933.803602][T18308]  <TASK>
[  933.803613][T18308]  dump_stack_lvl+0x100/0x190
[  933.803657][T18308]  should_fail_ex.cold+0x5/0xa
[  933.803686][T18308]  ? memcg_list_lru_alloc+0x4ec/0x740
[  933.803723][T18308]  should_failslab+0xc2/0x120
[  933.803750][T18308]  __kmalloc_noprof+0xe0/0x850
[  933.803787][T18308]  ? ipcget+0xee/0xf50
[  933.803885][T18308]  memcg_list_lru_alloc+0x4ec/0x740
[  933.803931][T18308]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  933.803969][T18308]  ? rcu_read_unlock+0x17/0x60
[  933.804029][T18308]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  933.804071][T18308]  __memcg_slab_post_alloc_hook+0x130/0x990
[  933.804259][T18308]  ? kasan_save_track+0x14/0x30
[  933.804302][T18308]  kmem_cache_alloc_lru_noprof+0x592/0x6e0
[  933.804342][T18308]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  933.804391][T18308]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  933.804423][T18308]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  933.804450][T18308]  alloc_inode+0x68/0x250
[  933.804483][T18308]  new_inode+0x22/0x1c0
[  933.804519][T18308]  hugetlbfs_get_inode+0x313/0x750
[  933.804554][T18308]  hugetlb_file_setup+0x3cc/0x5b0
[  933.804585][T18308]  newseg+0xabb/0xed0
[  933.804778][T18308]  ? __pfx_newseg+0x10/0x10
[  933.804831][T18308]  ? down_write+0x146/0x1f0
[  933.804868][T18308]  ? ksys_write+0x190/0x250
[  933.804890][T18308]  ? ksys_write+0x190/0x250
[  933.804917][T18308]  ipcget+0xee/0xf50
[  933.804946][T18308]  ? do_futex+0x192/0x350
[  933.804988][T18308]  ? __pfx_do_futex+0x10/0x10
[  933.805026][T18308]  ? __pfx_ipcget+0x10/0x10
[  933.805056][T18308]  ? __x64_sys_futex+0x34f/0x4d0
[  933.805088][T18308]  ? __x64_sys_futex+0x358/0x4d0
[  933.805125][T18308]  __x64_sys_shmget+0x13b/0x1b0
[  933.805156][T18308]  ? __pfx___x64_sys_shmget+0x10/0x10
[  933.805200][T18308]  do_syscall_64+0x106/0xf80
[  933.805232][T18308]  ? clear_bhb_loop+0x40/0x90
[  933.805266][T18308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.805293][T18308] RIP: 0033:0x7f984e59c799
[  933.805316][T18308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  933.805341][T18308] RSP: 002b:00007f984f43a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  933.805366][T18308] RAX: ffffffffffffffda RBX: 00007f984e816360 RCX: 00007f984e59c799
[  933.805383][T18308] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[  933.805399][T18308] RBP: 00007f984e632c99 R08: 0000000000000000 R09: 0000000000000000
[  933.805416][T18308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  933.805432][T18308] R13: 00007f984e8163f8 R14: 00007f984e816360 R15: 00007ffece403d38
[  933.805465][T18308]  </TASK>
[  937.775285][T18344] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  937.850662][T18344] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  937.906514][T18344] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  937.951786][T18344] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  938.000756][T18344] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  938.040702][T18344] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  938.046901][T18344] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  938.142759][T18344] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  938.577981][T17300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  938.594108][T17300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  938.603078][T17300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  938.612251][T17300] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  938.621213][T17300] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  939.108366][T18364] FAULT_INJECTION: forcing a failure.
[  939.108366][T18364] name failslab, interval 1, probability 0, space 0, times 0
[  939.243225][T18364] CPU: 0 UID: 0 PID: 18364 Comm: syz.5.2559 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  939.243268][T18364] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  939.243278][T18364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  939.243293][T18364] Call Trace:
[  939.243301][T18364]  <TASK>
[  939.243312][T18364]  dump_stack_lvl+0x100/0x190
[  939.243353][T18364]  should_fail_ex.cold+0x5/0xa
[  939.243382][T18364]  ? __seq_open_private+0x22/0xd0
[  939.243418][T18364]  should_failslab+0xc2/0x120
[  939.243448][T18364]  __kmalloc_noprof+0xe0/0x850
[  939.243491][T18364]  ? __pfx_stats_fop_open+0x10/0x10
[  939.243518][T18364]  __seq_open_private+0x22/0xd0
[  939.243555][T18364]  sc_common_open+0x6b/0x200
[  939.243583][T18364]  full_proxy_open_regular+0x1b6/0x370
[  939.243628][T18364]  do_dentry_open+0x6d8/0x1660
[  939.243653][T18364]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  939.243695][T18364]  vfs_open+0x82/0x3f0
[  939.243729][T18364]  path_openat+0x208c/0x31a0
[  939.243765][T18364]  ? __pfx_path_openat+0x10/0x10
[  939.243801][T18364]  do_file_open+0x20e/0x430
[  939.243828][T18364]  ? __pfx_do_file_open+0x10/0x10
[  939.243875][T18364]  ? alloc_fd+0x476/0x790
[  939.243901][T18364]  ? do_getname+0x191/0x390
[  939.243934][T18364]  do_sys_openat2+0x10d/0x1e0
[  939.243967][T18364]  ? __pfx_do_sys_openat2+0x10/0x10
[  939.244002][T18364]  ? __fget_files+0x21f/0x3d0
[  939.244032][T18364]  __x64_sys_openat+0x12d/0x210
[  939.244065][T18364]  ? __pfx___x64_sys_openat+0x10/0x10
[  939.244113][T18364]  do_syscall_64+0x106/0xf80
[  939.244144][T18364]  ? clear_bhb_loop+0x40/0x90
[  939.244175][T18364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.244201][T18364] RIP: 0033:0x7f984e59c799
[  939.244222][T18364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.244247][T18364] RSP: 002b:00007f984f47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  939.244270][T18364] RAX: ffffffffffffffda RBX: 00007f984e816180 RCX: 00007f984e59c799
[  939.244287][T18364] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  939.244303][T18364] RBP: 00007f984e632c99 R08: 0000000000000000 R09: 0000000000000000
[  939.244319][T18364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.244334][T18364] R13: 00007f984e816218 R14: 00007f984e816180 R15: 00007ffece403d38
[  939.244365][T18364]  </TASK>
[  939.887743][T17300] Bluetooth: hci4: command 0x0c1a tx timeout
[  939.897928][T17300] Bluetooth: hci2: command 0x0c1a tx timeout
[  940.025964][T18368] hub 3-0:1.0: USB hub found
[  940.061003][T17391] Bluetooth: hci3: command 0x0c1a tx timeout
[  940.069843][T17391] Bluetooth: hci0: command 0x0c1a tx timeout
[  940.077993][T17391] Bluetooth: hci1: command 0x0c1a tx timeout
[  940.109652][T18368] hub 3-0:1.0: 1 port detected
[  940.223609][T17300] Bluetooth: hci5: command 0x0c1a tx timeout
[  940.244167][T18368] usb usb3: authorized to connect
[  940.688532][T17300] Bluetooth: hci6: command tx timeout
[  941.845045][T18358] chnl_net:caif_netlink_parms(): no params data found
[  942.282789][T17300] Bluetooth: hci5: command 0x0c1a tx timeout
[  942.723126][T18358] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.782993][T17300] Bluetooth: hci6: command tx timeout
[  942.793237][T18358] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.853129][T18358] bridge_slave_0: entered allmulticast mode
[  942.898418][T18358] bridge_slave_0: entered promiscuous mode
[  942.944883][T18358] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.003588][T18358] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.053187][T18358] bridge_slave_1: entered allmulticast mode
[  943.091981][T18358] bridge_slave_1: entered promiscuous mode
[  943.508452][T18358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.620425][T18404] ptrace attach of "./syz-executor exec"[17862] was attempted by ""[18404]
[  943.996465][T18358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  944.276862][T18358] team0: Port device team_slave_0 added
[  944.363663][T17300] Bluetooth: hci5: command 0x0c1a tx timeout
[  944.382744][T18358] team0: Port device team_slave_1 added
[  944.734829][T18358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  944.783850][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  944.848896][T17300] Bluetooth: hci6: command tx timeout
[  944.925171][T18358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  945.119053][T18358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  945.178475][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  945.317160][T18358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  945.837894][T18358] hsr_slave_0: entered promiscuous mode
[  945.876359][T18358] hsr_slave_1: entered promiscuous mode
[  945.904725][T18358] debugfs: 'hsr0' already exists in 'hsr'
[  945.933412][T18358] Cannot create hsr debugfs directory
[  946.758700][T18418] tipc: Started in network mode
[  946.790014][T18418] tipc: Node identity ffffffff, cluster identity 4711
[  946.838662][T18424] FAULT_INJECTION: forcing a failure.
[  946.838662][T18424] name failslab, interval 1, probability 0, space 0, times 0
[  946.853536][T18418] tipc: Node number set to 4294967295
[  946.913002][T18426] i2c i2c-0: delete_device: Extra parameters
[  946.924891][T17300] Bluetooth: hci6: command tx timeout
[  946.954984][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.6.2570 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  946.955027][T18424] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  946.955038][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  946.955053][T18424] Call Trace:
[  946.955063][T18424]  <TASK>
[  946.955074][T18424]  dump_stack_lvl+0x100/0x190
[  946.955117][T18424]  should_fail_ex.cold+0x5/0xa
[  946.955146][T18424]  ? ima_alloc_init_template+0x19d/0x6d0
[  946.955186][T18424]  should_failslab+0xc2/0x120
[  946.955212][T18424]  __kmalloc_noprof+0xe0/0x850
[  946.955251][T18424]  ? take_dentry_name_snapshot+0x30b/0x7c0
[  946.955293][T18424]  ima_alloc_init_template+0x19d/0x6d0
[  946.955333][T18424]  ? take_dentry_name_snapshot+0x310/0x7c0
[  946.955372][T18424]  ima_store_measurement+0x1e3/0x5b0
[  946.955413][T18424]  ? __pfx_ima_store_measurement+0x10/0x10
[  946.955471][T18424]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  946.955636][T18424]  process_measurement+0x19cc/0x2350
[  946.955699][T18424]  ? stack_trace_save+0x8e/0xc0
[  946.955731][T18424]  ? __pfx_process_measurement+0x10/0x10
[  946.955768][T18424]  ? __lock_acquire+0x4a5/0x2630
[  946.955811][T18424]  ? __kasan_slab_alloc+0x89/0x90
[  946.955835][T18424]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  946.955880][T18424]  ? init_file+0x95/0x480
[  946.955907][T18424]  ? alloc_empty_file+0x73/0x1c0
[  946.955937][T18424]  ? alloc_file_pseudo+0x13a/0x230
[  946.955967][T18424]  ? ksys_mmap_pgoff+0x232/0x650
[  946.955991][T18424]  ? __x64_sys_mmap+0x125/0x190
[  946.956027][T18424]  ? do_syscall_64+0x106/0xf80
[  946.956090][T18424]  ? __pfx_aa_file_perm+0x10/0x10
[  946.956129][T18424]  ima_file_mmap+0x1c4/0x1f0
[  946.956173][T18424]  ? __pfx_ima_file_mmap+0x10/0x10
[  946.956218][T18424]  security_mmap_file+0x278/0x9b0
[  946.956248][T18424]  vm_mmap_pgoff+0xec/0x470
[  946.956280][T18424]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  946.956320][T18424]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  946.956373][T18424]  ? hugetlbfs_get_inode+0x36e/0x750
[  946.956417][T18424]  ksys_mmap_pgoff+0x273/0x650
[  946.956446][T18424]  ? __x64_sys_futex+0x358/0x4d0
[  946.956482][T18424]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  946.956512][T18424]  ? xfd_validate_state+0x129/0x190
[  946.956553][T18424]  __x64_sys_mmap+0x125/0x190
[  946.956595][T18424]  do_syscall_64+0x106/0xf80
[  946.956625][T18424]  ? clear_bhb_loop+0x40/0x90
[  946.956658][T18424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.956689][T18424] RIP: 0033:0x7fc25759c799
[  946.956715][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  946.956740][T18424] RSP: 002b:00007fc2583dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  946.956764][T18424] RAX: ffffffffffffffda RBX: 00007fc257815fa0 RCX: 00007fc25759c799
[  946.956784][T18424] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000
[  946.956808][T18424] RBP: 00007fc257632c99 R08: 0000000000000401 R09: 0000300000000000
[  946.956825][T18424] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000
[  946.956841][T18424] R13: 00007fc257816038 R14: 00007fc257815fa0 R15: 00007ffc3530f598
[  946.956878][T18424]  </TASK>
[  947.306687][   T30] audit: type=1804 audit(1773333241.527:25): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.2570" name="anon_hugepage" dev="hugetlbfs" ino=86047 res=0 errno=0
[  948.516566][T18358] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  948.584667][T18358] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  948.682779][T18358] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  948.747591][T18358] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  949.333870][T18358] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.587543][T18358] 8021q: adding VLAN 0 to HW filter on device team0
[  949.693888][T18450] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2575'.
[  949.722470][T17306] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.730227][T17306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.761937][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'.
[  949.877779][T18445] zswap: compressor  not available
[  949.949096][T17306] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.957069][T17306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.246219][T18455] program syz.2.2576 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  950.760476][T18455] zswap: compressor  not available
[  951.821526][T18358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  953.680123][T18358] veth0_vlan: entered promiscuous mode
[  953.782482][T18358] veth1_vlan: entered promiscuous mode
[  953.952203][T18358] veth0_macvtap: entered promiscuous mode
[  954.059826][T18358] veth1_macvtap: entered promiscuous mode
[  954.191836][T18358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  954.287360][T18358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  954.393215][T17303] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  954.430260][T17303] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  954.510472][T17303] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  954.557756][T17303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  954.887776][T17303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  954.939967][T17303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.084769][T17303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.144705][T17303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.505402][T18525] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  962.047173][T18568] FAULT_INJECTION: forcing a failure.
[  962.047173][T18568] name failslab, interval 1, probability 0, space 0, times 0
[  962.269470][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.6.2597 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  962.269513][T18568] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  962.269523][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  962.269539][T18568] Call Trace:
[  962.269547][T18568]  <TASK>
[  962.269557][T18568]  dump_stack_lvl+0x100/0x190
[  962.269598][T18568]  should_fail_ex.cold+0x5/0xa
[  962.269627][T18568]  ? __seq_open_private+0x22/0xd0
[  962.269666][T18568]  should_failslab+0xc2/0x120
[  962.269692][T18568]  __kmalloc_noprof+0xe0/0x850
[  962.269736][T18568]  ? __pfx_stats_fop_open+0x10/0x10
[  962.269762][T18568]  __seq_open_private+0x22/0xd0
[  962.269798][T18568]  sc_common_open+0x6b/0x200
[  962.269826][T18568]  full_proxy_open_regular+0x1b6/0x370
[  962.269865][T18568]  do_dentry_open+0x6d8/0x1660
[  962.269889][T18568]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  962.269931][T18568]  vfs_open+0x82/0x3f0
[  962.269965][T18568]  path_openat+0x208c/0x31a0
[  962.270001][T18568]  ? __pfx_path_openat+0x10/0x10
[  962.270037][T18568]  do_file_open+0x20e/0x430
[  962.270065][T18568]  ? __pfx_do_file_open+0x10/0x10
[  962.270111][T18568]  ? alloc_fd+0x476/0x790
[  962.270140][T18568]  ? do_getname+0x191/0x390
[  962.270185][T18568]  do_sys_openat2+0x10d/0x1e0
[  962.270226][T18568]  ? __pfx_do_sys_openat2+0x10/0x10
[  962.270263][T18568]  ? __fget_files+0x21f/0x3d0
[  962.270292][T18568]  __x64_sys_openat+0x12d/0x210
[  962.270326][T18568]  ? __pfx___x64_sys_openat+0x10/0x10
[  962.270372][T18568]  do_syscall_64+0x106/0xf80
[  962.270401][T18568]  ? clear_bhb_loop+0x40/0x90
[  962.270432][T18568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.270458][T18568] RIP: 0033:0x7fc25759c799
[  962.270478][T18568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  962.270504][T18568] RSP: 002b:00007fc25839b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  962.270528][T18568] RAX: ffffffffffffffda RBX: 00007fc257816180 RCX: 00007fc25759c799
[  962.270545][T18568] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  962.270561][T18568] RBP: 00007fc257632c99 R08: 0000000000000000 R09: 0000000000000000
[  962.270576][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  962.270591][T18568] R13: 00007fc257816218 R14: 00007fc257816180 R15: 00007ffc3530f598
[  962.270623][T18568]  </TASK>
[  964.959149][   T30] audit: type=1800 audit(1773333259.518:26): pid=18595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2604" name="sr0" dev="devtmpfs" ino=2824 res=0 errno=0
[  965.229054][T18590] netlink: 'syz.5.2603': attribute type 2 has an invalid length.
[  965.283608][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2603'.
[  965.844759][T18599] openvswitch: netlink: Duplicate key (type 15).
[  966.006999][T17300] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9
[  966.173297][T18602] netlink: set zone limit has 8 unknown bytes
[  966.268254][T18607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  966.359413][T18607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2609'.
[  966.509310][T18607] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.551830][T18615] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  966.599994][T18607] bridge_slave_1 (unregistering): left allmulticast mode
[  966.640910][T18607] bridge_slave_1 (unregistering): left promiscuous mode
[  966.685648][T18607] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.014954][T18633] FAULT_INJECTION: forcing a failure.
[  968.014954][T18633] name failslab, interval 1, probability 0, space 0, times 0
[  968.192388][T18633] CPU: 0 UID: 0 PID: 18633 Comm: syz.7.2611 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  968.192431][T18633] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  968.192441][T18633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  968.192456][T18633] Call Trace:
[  968.192465][T18633]  <TASK>
[  968.192475][T18633]  dump_stack_lvl+0x100/0x190
[  968.192527][T18633]  should_fail_ex.cold+0x5/0xa
[  968.192555][T18633]  ? __seq_open_private+0x22/0xd0
[  968.192592][T18633]  should_failslab+0xc2/0x120
[  968.192618][T18633]  __kmalloc_noprof+0xe0/0x850
[  968.192661][T18633]  ? __pfx_stats_fop_open+0x10/0x10
[  968.192688][T18633]  __seq_open_private+0x22/0xd0
[  968.192725][T18633]  sc_common_open+0x6b/0x200
[  968.192753][T18633]  full_proxy_open_regular+0x1b6/0x370
[  968.192791][T18633]  do_dentry_open+0x6d8/0x1660
[  968.192815][T18633]  ? __pfx_full_proxy_open_regular+0x10/0x10
[  968.192858][T18633]  vfs_open+0x82/0x3f0
[  968.192892][T18633]  path_openat+0x208c/0x31a0
[  968.192928][T18633]  ? __pfx_path_openat+0x10/0x10
[  968.192964][T18633]  do_file_open+0x20e/0x430
[  968.192992][T18633]  ? __pfx_do_file_open+0x10/0x10
[  968.193038][T18633]  ? alloc_fd+0x476/0x790
[  968.193065][T18633]  ? do_getname+0x191/0x390
[  968.193098][T18633]  do_sys_openat2+0x10d/0x1e0
[  968.193131][T18633]  ? __pfx_do_sys_openat2+0x10/0x10
[  968.193166][T18633]  ? __fget_files+0x21f/0x3d0
[  968.193195][T18633]  __x64_sys_openat+0x12d/0x210
[  968.193229][T18633]  ? __pfx___x64_sys_openat+0x10/0x10
[  968.193274][T18633]  do_syscall_64+0x106/0xf80
[  968.193308][T18633]  ? clear_bhb_loop+0x40/0x90
[  968.193339][T18633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  968.193366][T18633] RIP: 0033:0x7efe3a39c799
[  968.193386][T18633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  968.193411][T18633] RSP: 002b:00007efe3b1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  968.193435][T18633] RAX: ffffffffffffffda RBX: 00007efe3a616180 RCX: 00007efe3a39c799
[  968.193452][T18633] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  968.193468][T18633] RBP: 00007efe3a432c99 R08: 0000000000000000 R09: 0000000000000000
[  968.193484][T18633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  968.193499][T18633] R13: 00007efe3a616218 R14: 00007efe3a616180 R15: 00007ffc8a0d0a38
[  968.193536][T18633]  </TASK>
[  969.792296][T18654] netlink: 'syz.7.2616': attribute type 11 has an invalid length.
[  969.851428][T18654] netlink: 'syz.7.2616': attribute type 11 has an invalid length.
[  969.921872][T18654] netlink: 'syz.7.2616': attribute type 11 has an invalid length.
[  969.966730][T18654] netlink: 'syz.7.2616': attribute type 11 has an invalid length.
[  971.708441][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  971.756006][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  971.812193][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  971.870034][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  971.908669][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  971.952231][T18675] netlink: 'syz.7.2620': attribute type 11 has an invalid length.
[  972.273363][T18679] bond0: no command found in slaves file - use +ifname or -ifname
[  975.170221][T18701] usb usb36: usbfs: process 18701 (syz.7.2626) did not claim interface 0 before use
[  980.310065][T17303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.554796][T17303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.767902][T17303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.923959][T17303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.490575][T17303] bridge_slave_1: left allmulticast mode
[  981.554712][T18767] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  981.565894][T17303] bridge_slave_1: left promiscuous mode
[  981.572133][T17303] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.713500][T17303] bridge_slave_0: left allmulticast mode
[  981.763169][T17303] bridge_slave_0: left promiscuous mode
[  981.769364][T17303] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.783495][T17303] hsr_slave_0: left promiscuous mode
[  983.856461][T17303] hsr_slave_1: left promiscuous mode
[  983.900619][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  983.943372][T17303] batman_adv: batadv0: Removing interface: batadv_slave_0
[  983.996288][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  984.033470][T17303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  984.118378][T17303] veth1_macvtap: left promiscuous mode
[  984.144173][T17303] veth0_macvtap: left promiscuous mode
[  984.190432][T17391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  984.204616][T17391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  984.214131][T17391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  984.223037][T17391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  984.238108][T17391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  984.642257][T17303] team0 (unregistering): Port device team_slave_1 removed
[  984.662957][T17303] team0 (unregistering): Port device team_slave_0 removed
[  986.314362][T17300] Bluetooth: hci2: command tx timeout
[  986.368902][T18806] chnl_net:caif_netlink_parms(): no params data found
[  986.665965][T18833] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  986.842166][T18833] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  986.999210][T18833] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  987.153755][T18833] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  987.244850][T18833] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  987.360841][T18833] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  987.533485][T18833] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  987.725842][T18833] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  987.877623][T18833] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  987.897423][T18806] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.904965][T18806] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.933630][T18833] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  987.967223][T18806] bridge_slave_0: entered allmulticast mode
[  987.992667][T18806] bridge_slave_0: entered promiscuous mode
[  988.012733][T18833] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  988.163307][T18806] bridge0: port 2(bridge_slave_1) entered blocking state
[  988.185448][T18806] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.214255][T18806] bridge_slave_1: entered allmulticast mode
[  988.235651][T18806] bridge_slave_1: entered promiscuous mode
[  988.607591][T18806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  988.673156][T18806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  988.706584][T17300] Bluetooth: hci4: command 0x0c1a tx timeout
[  988.866211][T17300] Bluetooth: hci0: command 0x0c1a tx timeout
[  989.028643][T17300] Bluetooth: hci3: command 0x0c1a tx timeout
[  989.186361][T17300] Bluetooth: hci1: command 0x0c1a tx timeout
[  989.270383][T17300] Bluetooth: hci5: command 0x0c1a tx timeout
[  989.363021][T18806] team0: Port device team_slave_0 added
[  989.426419][T17300] Bluetooth: hci6: command 0x0c1a tx timeout
[  989.757905][T18806] team0: Port device team_slave_1 added
[  989.829054][T18880] nla_validate_range_unsigned: 4 callbacks suppressed
[  989.829078][T18880] netlink: 'syz.6.2656': attribute type 11 has an invalid length.
[  989.909632][T17300] Bluetooth: hci2: command 0x040f tx timeout
[  989.928027][T18880] netlink: 'syz.6.2656': attribute type 11 has an invalid length.
[  989.987159][T18880] netlink: 'syz.6.2656': attribute type 11 has an invalid length.
[  990.031290][T18880] netlink: 'syz.6.2656': attribute type 11 has an invalid length.
[  990.254478][T18806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  990.309945][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  990.461331][T18806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  990.525539][T18806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  990.579983][T18806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  990.704493][T18806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.480996][T18806] hsr_slave_0: entered promiscuous mode
[  991.509369][T17300] Bluetooth: hci6: command 0x0c1a tx timeout
[  991.516552][T18806] hsr_slave_1: entered promiscuous mode
[  991.552577][T18806] debugfs: 'hsr0' already exists in 'hsr'
[  991.572281][T18806] Cannot create hsr debugfs directory
[  991.992934][T17300] Bluetooth: hci2: command 0x040f tx timeout
[  993.096198][T18806] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  993.399087][T18806] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  993.529323][T18914] vivid-007: =================  START STATUS  =================
[  993.566874][T18914] vivid-007: Enable Output Cropping: true grabbed
[  993.590240][T17300] Bluetooth: hci6: command 0x0c1a tx timeout
[  993.619695][T18914] vivid-007: Enable Output Composing: true grabbed
[  993.660432][T18914] vivid-007: Enable Output Scaler: true grabbed
[  993.711489][T18914] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  993.770733][T18914] vivid-007: Transmit Mode: HDMI grabbed
[  993.806446][T18914] vivid-007: Hotplug Present: 0x00000000
[  993.822798][T18806] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  993.836144][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  993.843373][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  993.885689][T18914] vivid-007: RxSense Present: 0x00000000
[  993.948135][T18914] vivid-007: EDID Present: 0x00000000
[  993.977493][T18914] vivid-007: ==================  END STATUS  ==================
[  994.070886][T17300] Bluetooth: hci2: command 0x040f tx timeout
[  994.158742][T18806] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  994.928678][T18806] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.061546][T18806] 8021q: adding VLAN 0 to HW filter on device team0
[  995.396004][T17307] bridge0: port 1(bridge_slave_0) entered blocking state
[  995.403533][T17307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  995.673303][T17303] bridge0: port 2(bridge_slave_1) entered blocking state
[  995.681493][T17303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  996.154004][T17300] Bluetooth: hci2: command 0x040f tx timeout
[  996.263636][T18806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  997.351216][T18806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  998.231783][T17300] Bluetooth: hci2: command 0x040f tx timeout
[  999.164649][T18806] veth0_vlan: entered promiscuous mode
[  999.379762][T18806] veth1_vlan: entered promiscuous mode
[  999.579733][T18806] veth0_macvtap: entered promiscuous mode
[  999.664628][T18806] veth1_macvtap: entered promiscuous mode
[  999.788265][T18806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  999.870012][T18806] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1000.016735][T17354] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.064798][T17354] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.217967][T17354] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.260588][T17354] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.897542][T17307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1000.959026][T17307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1001.288821][T17303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1001.344408][T17303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1004.152189][T19079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1004.722997][   T30] audit: type=1807 audit(1773341099.262:27): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0
[ 1004.816183][   T30] audit: type=1802 audit(1773341099.322:28): pid=19093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.2681" res=0 errno=0
[ 1005.404431][T19089] ima: policy update failed
[ 1005.451912][   T30] audit: type=1802 audit(1773341099.991:29): pid=19089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2681" res=0 errno=0
[ 1011.382829][T19176] random: crng reseeded on system resumption
[ 1011.946881][T19180] pci 0000:00:01.3: enabling device (0000 -> 0001)
[ 1012.274167][   T30] audit: type=1800 audit(1773341106.808:30): pid=19190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2693" name="trace_pipe" dev="tracefs" ino=215 res=0 errno=0
[ 1013.183953][T19180] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[ 1013.435557][T19180] pci 0000:00:01.3: PCI INT A: no GSI
[ 1014.660644][T19217] FAULT_INJECTION: forcing a failure.
[ 1014.660644][T19217] name failslab, interval 1, probability 0, space 0, times 0
[ 1014.762741][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.6.2700 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1014.762783][T19217] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1014.762793][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1014.762809][T19217] Call Trace:
[ 1014.762817][T19217]  <TASK>
[ 1014.762827][T19217]  dump_stack_lvl+0x100/0x190
[ 1014.762880][T19217]  should_fail_ex.cold+0x5/0xa
[ 1014.762910][T19217]  ? __seq_open_private+0x22/0xd0
[ 1014.762947][T19217]  should_failslab+0xc2/0x120
[ 1014.762974][T19217]  __kmalloc_noprof+0xe0/0x850
[ 1014.763018][T19217]  ? __pfx_stats_fop_open+0x10/0x10
[ 1014.763048][T19217]  __seq_open_private+0x22/0xd0
[ 1014.763092][T19217]  sc_common_open+0x6b/0x200
[ 1014.763120][T19217]  full_proxy_open_regular+0x1b6/0x370
[ 1014.763158][T19217]  do_dentry_open+0x6d8/0x1660
[ 1014.763183][T19217]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1014.763225][T19217]  vfs_open+0x82/0x3f0
[ 1014.763259][T19217]  path_openat+0x208c/0x31a0
[ 1014.763294][T19217]  ? __pfx_path_openat+0x10/0x10
[ 1014.763331][T19217]  do_file_open+0x20e/0x430
[ 1014.763361][T19217]  ? __pfx_do_file_open+0x10/0x10
[ 1014.763415][T19217]  ? alloc_fd+0x476/0x790
[ 1014.763442][T19217]  ? do_getname+0x191/0x390
[ 1014.763476][T19217]  do_sys_openat2+0x10d/0x1e0
[ 1014.763509][T19217]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1014.763544][T19217]  ? __fget_files+0x21f/0x3d0
[ 1014.763576][T19217]  __x64_sys_openat+0x12d/0x210
[ 1014.763610][T19217]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1014.763655][T19217]  do_syscall_64+0x106/0xf80
[ 1014.763687][T19217]  ? clear_bhb_loop+0x40/0x90
[ 1014.763717][T19217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.763743][T19217] RIP: 0033:0x7fc25759c799
[ 1014.763763][T19217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.763788][T19217] RSP: 002b:00007fc25839b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1014.763812][T19217] RAX: ffffffffffffffda RBX: 00007fc257816180 RCX: 00007fc25759c799
[ 1014.763829][T19217] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1014.763845][T19217] RBP: 00007fc257632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1014.763865][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.763880][T19217] R13: 00007fc257816218 R14: 00007fc257816180 R15: 00007ffc3530f598
[ 1014.763912][T19217]  </TASK>
[ 1018.423791][T19246] netlink: 'syz.5.2704': attribute type 11 has an invalid length.
[ 1018.568364][T19246] netlink: 'syz.5.2704': attribute type 11 has an invalid length.
[ 1018.660585][T19246] netlink: 'syz.5.2704': attribute type 11 has an invalid length.
[ 1018.798640][T19246] netlink: 'syz.5.2704': attribute type 11 has an invalid length.
[ 1019.864142][T19270] futex_wake_op: syz.8.2708 tries to shift op by -2048; fix this program
[ 1019.941937][T19270] futex_wake_op: syz.8.2708 tries to shift op by -2048; fix this program
[ 1020.037949][T19270] misc userio: No port type given on /dev/userio
[ 1024.603917][T19317] syz.8.2712 (19317): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1029.379045][T19392] ptp ptp0: only physical clock in use now
[ 1030.553346][T19412] FAULT_INJECTION: forcing a failure.
[ 1030.553346][T19412] name failslab, interval 1, probability 0, space 0, times 0
[ 1030.715992][T19412] CPU: 0 UID: 0 PID: 19412 Comm: syz.8.2725 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1030.716033][T19412] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1030.716043][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1030.716058][T19412] Call Trace:
[ 1030.716066][T19412]  <TASK>
[ 1030.716075][T19412]  dump_stack_lvl+0x100/0x190
[ 1030.716117][T19412]  should_fail_ex.cold+0x5/0xa
[ 1030.716146][T19412]  ? __seq_open_private+0x22/0xd0
[ 1030.716182][T19412]  should_failslab+0xc2/0x120
[ 1030.716208][T19412]  __kmalloc_noprof+0xe0/0x850
[ 1030.716252][T19412]  ? __pfx_stats_fop_open+0x10/0x10
[ 1030.716278][T19412]  __seq_open_private+0x22/0xd0
[ 1030.716325][T19412]  sc_common_open+0x6b/0x200
[ 1030.716356][T19412]  full_proxy_open_regular+0x1b6/0x370
[ 1030.716394][T19412]  do_dentry_open+0x6d8/0x1660
[ 1030.716419][T19412]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1030.716461][T19412]  vfs_open+0x82/0x3f0
[ 1030.716495][T19412]  path_openat+0x208c/0x31a0
[ 1030.716531][T19412]  ? __pfx_path_openat+0x10/0x10
[ 1030.716567][T19412]  do_file_open+0x20e/0x430
[ 1030.716595][T19412]  ? __pfx_do_file_open+0x10/0x10
[ 1030.716645][T19412]  ? alloc_fd+0x476/0x790
[ 1030.716672][T19412]  ? do_getname+0x191/0x390
[ 1030.716706][T19412]  do_sys_openat2+0x10d/0x1e0
[ 1030.716739][T19412]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1030.716774][T19412]  ? __fget_files+0x21f/0x3d0
[ 1030.716803][T19412]  __x64_sys_openat+0x12d/0x210
[ 1030.716837][T19412]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1030.716882][T19412]  do_syscall_64+0x106/0xf80
[ 1030.716912][T19412]  ? clear_bhb_loop+0x40/0x90
[ 1030.716943][T19412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.716969][T19412] RIP: 0033:0x7fd1bf99c799
[ 1030.716989][T19412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1030.717013][T19412] RSP: 002b:00007fd1c08ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1030.717037][T19412] RAX: ffffffffffffffda RBX: 00007fd1bfc16180 RCX: 00007fd1bf99c799
[ 1030.717054][T19412] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1030.717070][T19412] RBP: 00007fd1bfa32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1030.717085][T19412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1030.717100][T19412] R13: 00007fd1bfc16218 R14: 00007fd1bfc16180 R15: 00007fffe936d918
[ 1030.717131][T19412]  </TASK>
[ 1032.934213][T19428] No such timeout policy ""
[ 1033.108022][T19428] netlink: Failed to associated timeout policy ''
[ 1033.501083][T19450] FAULT_INJECTION: forcing a failure.
[ 1033.501083][T19450] name failslab, interval 1, probability 0, space 0, times 0
[ 1033.698499][T19450] CPU: 0 UID: 0 PID: 19450 Comm: syz.6.2733 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1033.698543][T19450] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1033.698553][T19450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1033.698569][T19450] Call Trace:
[ 1033.698578][T19450]  <TASK>
[ 1033.698588][T19450]  dump_stack_lvl+0x100/0x190
[ 1033.698630][T19450]  should_fail_ex.cold+0x5/0xa
[ 1033.698662][T19450]  ? __seq_open_private+0x22/0xd0
[ 1033.698698][T19450]  should_failslab+0xc2/0x120
[ 1033.698724][T19450]  __kmalloc_noprof+0xe0/0x850
[ 1033.698767][T19450]  ? __pfx_stats_fop_open+0x10/0x10
[ 1033.698794][T19450]  __seq_open_private+0x22/0xd0
[ 1033.698831][T19450]  sc_common_open+0x6b/0x200
[ 1033.698859][T19450]  full_proxy_open_regular+0x1b6/0x370
[ 1033.698896][T19450]  do_dentry_open+0x6d8/0x1660
[ 1033.698921][T19450]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1033.698970][T19450]  vfs_open+0x82/0x3f0
[ 1033.699005][T19450]  path_openat+0x208c/0x31a0
[ 1033.699041][T19450]  ? __pfx_path_openat+0x10/0x10
[ 1033.699078][T19450]  do_file_open+0x20e/0x430
[ 1033.699112][T19450]  ? __pfx_do_file_open+0x10/0x10
[ 1033.699159][T19450]  ? alloc_fd+0x476/0x790
[ 1033.699186][T19450]  ? do_getname+0x191/0x390
[ 1033.699219][T19450]  do_sys_openat2+0x10d/0x1e0
[ 1033.699253][T19450]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1033.699288][T19450]  ? __fget_files+0x21f/0x3d0
[ 1033.699317][T19450]  __x64_sys_openat+0x12d/0x210
[ 1033.699351][T19450]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1033.699395][T19450]  do_syscall_64+0x106/0xf80
[ 1033.699425][T19450]  ? clear_bhb_loop+0x40/0x90
[ 1033.699456][T19450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.699484][T19450] RIP: 0033:0x7fc25759c799
[ 1033.699504][T19450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.699527][T19450] RSP: 002b:00007fc25839b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1033.699551][T19450] RAX: ffffffffffffffda RBX: 00007fc257816180 RCX: 00007fc25759c799
[ 1033.699568][T19450] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1033.699584][T19450] RBP: 00007fc257632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1033.699599][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1033.699614][T19450] R13: 00007fc257816218 R14: 00007fc257816180 R15: 00007ffc3530f598
[ 1033.699646][T19450]  </TASK>
[ 1037.089067][T19493] WARNING! power/level is deprecated; use power/control instead
[ 1043.445606][T19560] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1043.528200][T19560] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1043.621734][T19560] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1043.665393][T19560] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1043.671973][T19560] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1043.845910][T19560] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1043.976109][T19560] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1044.083291][T19576] vivid-007: =================  START STATUS  =================
[ 1044.098312][T17391] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1044.134287][T19576] vivid-007: Generate PTS: true
[ 1044.164328][T19576] vivid-007: Generate SCR: true
[ 1044.213521][T19576] tpg source WxH: 320x240 (Y'CbCr)
[ 1044.253153][T19576] tpg field: 1
[ 1044.259452][T19576] tpg crop: (0,0)/320x240
[ 1044.285257][T19576] tpg compose: (0,0)/320x240
[ 1044.290654][T19576] tpg colorspace: 8
[ 1044.370812][T19576] tpg transfer function: 0/0
[ 1044.410323][T19576] tpg Y'CbCr encoding: 0/0
[ 1044.449972][T19576] tpg quantization: 0/0
[ 1044.529480][T19576] tpg RGB range: 0/2
[ 1044.613635][T19576] vivid-007: ==================  END STATUS  ==================
[ 1045.537313][T17391] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1045.674307][T19597] FAULT_INJECTION: forcing a failure.
[ 1045.674307][T19597] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1045.694699][T17391] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1045.701217][T17391] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1045.708472][T17300] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1045.899414][T19597] CPU: 0 UID: 0 PID: 19597 Comm: syz.5.2765 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1045.899454][T19597] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1045.899463][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1045.899478][T19597] Call Trace:
[ 1045.899486][T19597]  <TASK>
[ 1045.899495][T19597]  dump_stack_lvl+0x100/0x190
[ 1045.899536][T19597]  should_fail_ex.cold+0x5/0xa
[ 1045.899564][T19597]  get_futex_key+0x1d2/0x1620
[ 1045.899598][T19597]  ? __pfx_get_futex_key+0x10/0x10
[ 1045.899636][T19597]  ? trace_pid_list_is_set+0x11a/0x390
[ 1045.899671][T19597]  ? trace_pid_list_is_set+0x22c/0x390
[ 1045.899712][T19597]  futex_wait_setup+0x83/0x510
[ 1045.899755][T19597]  __futex_wait+0x19f/0x300
[ 1045.899794][T19597]  ? __pfx___futex_wait+0x10/0x10
[ 1045.899829][T19597]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1045.899856][T19597]  ? lockdep_hardirqs_on+0x78/0x100
[ 1045.899889][T19597]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1045.899929][T19597]  ? find_held_lock+0x2b/0x80
[ 1045.899952][T19597]  ? futex_wake+0x456/0x530
[ 1045.899992][T19597]  futex_wait+0xed/0x380
[ 1045.900028][T19597]  ? __pfx_futex_wait+0x10/0x10
[ 1045.900070][T19597]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1045.900104][T19597]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1045.900136][T19597]  do_futex+0x1ef/0x350
[ 1045.900166][T19597]  ? __pfx_do_futex+0x10/0x10
[ 1045.900195][T19597]  ? find_held_lock+0x2b/0x80
[ 1045.900217][T19597]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1045.900256][T19597]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 1045.900302][T19597]  __x64_sys_futex+0x34f/0x4d0
[ 1045.900335][T19597]  ? exc_page_fault+0x6f/0xd0
[ 1045.900362][T19597]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1045.900403][T19597]  do_syscall_64+0x106/0xf80
[ 1045.900435][T19597]  ? clear_bhb_loop+0x40/0x90
[ 1045.900465][T19597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.900489][T19597] RIP: 0033:0x7f984e59c799
[ 1045.900508][T19597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.900531][T19597] RSP: 002b:00007f984f47c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1045.900554][T19597] RAX: ffffffffffffffda RBX: 00007f984e816188 RCX: 00007f984e59c799
[ 1045.900570][T19597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f984e816188
[ 1045.900585][T19597] RBP: 00007f984e816180 R08: 0000000000000000 R09: 0000000000000000
[ 1045.900599][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1045.900618][T19597] R13: 00007f984e816218 R14: 00007ffece403c50 R15: 00007ffece403d38
[ 1045.900649][T19597]  </TASK>
[ 1046.609420][T19599] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1046.615905][T19599] Bluetooth: hci2: command 0x040f tx timeout
[ 1046.729304][T19604] netlink: 'syz.5.2768': attribute type 11 has an invalid length.
[ 1046.759263][T19604] netlink: 'syz.5.2768': attribute type 11 has an invalid length.
[ 1046.786457][T19604] netlink: 'syz.5.2768': attribute type 11 has an invalid length.
[ 1049.157268][T19639] FAULT_INJECTION: forcing a failure.
[ 1049.157268][T19639] name failslab, interval 1, probability 0, space 0, times 0
[ 1049.586261][T19639] CPU: 0 UID: 0 PID: 19639 Comm: syz.6.2774 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1049.586303][T19639] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1049.586314][T19639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1049.586329][T19639] Call Trace:
[ 1049.586337][T19639]  <TASK>
[ 1049.586347][T19639]  dump_stack_lvl+0x100/0x190
[ 1049.586394][T19639]  should_fail_ex.cold+0x5/0xa
[ 1049.586427][T19639]  ? __seq_open_private+0x22/0xd0
[ 1049.586463][T19639]  should_failslab+0xc2/0x120
[ 1049.586489][T19639]  __kmalloc_noprof+0xe0/0x850
[ 1049.586532][T19639]  ? __pfx_stats_fop_open+0x10/0x10
[ 1049.586559][T19639]  __seq_open_private+0x22/0xd0
[ 1049.586596][T19639]  sc_common_open+0x6b/0x200
[ 1049.586623][T19639]  full_proxy_open_regular+0x1b6/0x370
[ 1049.586662][T19639]  do_dentry_open+0x6d8/0x1660
[ 1049.586686][T19639]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1049.586728][T19639]  vfs_open+0x82/0x3f0
[ 1049.586763][T19639]  path_openat+0x208c/0x31a0
[ 1049.586799][T19639]  ? __pfx_path_openat+0x10/0x10
[ 1049.586835][T19639]  do_file_open+0x20e/0x430
[ 1049.586863][T19639]  ? __pfx_do_file_open+0x10/0x10
[ 1049.586910][T19639]  ? alloc_fd+0x476/0x790
[ 1049.586936][T19639]  ? do_getname+0x191/0x390
[ 1049.586976][T19639]  do_sys_openat2+0x10d/0x1e0
[ 1049.587009][T19639]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1049.587044][T19639]  ? __fget_files+0x21f/0x3d0
[ 1049.587073][T19639]  __x64_sys_openat+0x12d/0x210
[ 1049.587107][T19639]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1049.587152][T19639]  do_syscall_64+0x106/0xf80
[ 1049.587182][T19639]  ? clear_bhb_loop+0x40/0x90
[ 1049.587213][T19639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1049.587240][T19639] RIP: 0033:0x7fc25759c799
[ 1049.587260][T19639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1049.587286][T19639] RSP: 002b:00007fc25839b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1049.587310][T19639] RAX: ffffffffffffffda RBX: 00007fc257816180 RCX: 00007fc25759c799
[ 1049.587327][T19639] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1049.587343][T19639] RBP: 00007fc257632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1049.587359][T19639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1049.587374][T19639] R13: 00007fc257816218 R14: 00007fc257816180 R15: 00007ffc3530f598
[ 1049.587421][T19639]  </TASK>
[ 1052.461086][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2780'.
[ 1055.306449][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.315027][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.324914][T19756] FAULT_INJECTION: forcing a failure.
[ 1060.324914][T19756] name failslab, interval 1, probability 0, space 0, times 0
[ 1060.423291][T19756] CPU: 0 UID: 0 PID: 19756 Comm: syz.8.2802 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1060.423343][T19756] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1060.423353][T19756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1060.423369][T19756] Call Trace:
[ 1060.423378][T19756]  <TASK>
[ 1060.423388][T19756]  dump_stack_lvl+0x100/0x190
[ 1060.423431][T19756]  should_fail_ex.cold+0x5/0xa
[ 1060.423460][T19756]  ? __register_sysctl_table+0xbe4/0x1650
[ 1060.423502][T19756]  should_failslab+0xc2/0x120
[ 1060.423528][T19756]  __kmalloc_noprof+0xe0/0x850
[ 1060.423573][T19756]  __register_sysctl_table+0xbe4/0x1650
[ 1060.423621][T19756]  ? __pfx___register_sysctl_table+0x10/0x10
[ 1060.423671][T19756]  ? is_module_address+0x69/0xf0
[ 1060.423704][T19756]  ? register_net_sysctl_sz+0x222/0x430
[ 1060.423742][T19756]  ? __asan_memcpy+0x3c/0x60
[ 1060.423781][T19756]  sctp_sysctl_net_register+0x15e/0x200
[ 1060.423894][T19756]  ? __pfx_sctp_defaults_init+0x10/0x10
[ 1060.423927][T19756]  sctp_defaults_init+0x6d2/0xd90
[ 1060.423960][T19756]  ? __pfx_sctp_defaults_init+0x10/0x10
[ 1060.423991][T19756]  ops_init+0x1e2/0x5f0
[ 1060.424029][T19756]  setup_net+0x118/0x3a0
[ 1060.424061][T19756]  ? __pfx_setup_net+0x10/0x10
[ 1060.424092][T19756]  ? lockdep_init_map_type+0x5c/0x250
[ 1060.424126][T19756]  ? mutex_init_lockep+0x110/0x150
[ 1060.424164][T19756]  copy_net_ns+0x46f/0x7c0
[ 1060.424202][T19756]  create_new_namespaces+0x3ea/0xac0
[ 1060.424236][T19756]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1060.424266][T19756]  ksys_unshare+0x473/0xad0
[ 1060.424305][T19756]  ? __pfx_ksys_unshare+0x10/0x10
[ 1060.424348][T19756]  __x64_sys_unshare+0x31/0x40
[ 1060.424378][T19756]  do_syscall_64+0x106/0xf80
[ 1060.424409][T19756]  ? clear_bhb_loop+0x40/0x90
[ 1060.424439][T19756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.424465][T19756] RIP: 0033:0x7fd1bf99c799
[ 1060.424487][T19756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1060.424511][T19756] RSP: 002b:00007fd1c08cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1060.424535][T19756] RAX: ffffffffffffffda RBX: 00007fd1bfc16090 RCX: 00007fd1bf99c799
[ 1060.424552][T19756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1060.424567][T19756] RBP: 00007fd1bfa32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1060.424583][T19756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1060.424598][T19756] R13: 00007fd1bfc16128 R14: 00007fd1bfc16090 R15: 00007fffe936d918
[ 1060.424630][T19756]  </TASK>
[ 1060.424643][T19756] sysctl could not get directory: /net/sctp -12
[ 1061.604976][T19769] ptp ptp0: only physical clock in use now
[ 1062.416380][T19767] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[ 1062.525570][T19771] ima: policy update failed
[ 1062.851642][   T30] audit: type=1802 audit(1773359501.361:31): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2805" res=0 errno=0
[ 1063.263242][T19779] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.36.1), cmd(2)
[ 1063.544796][T19792] FAULT_INJECTION: forcing a failure.
[ 1063.544796][T19792] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.684845][T19792] CPU: 0 UID: 0 PID: 19792 Comm: syz.6.2810 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1063.684886][T19792] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1063.684896][T19792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1063.684910][T19792] Call Trace:
[ 1063.684918][T19792]  <TASK>
[ 1063.684928][T19792]  dump_stack_lvl+0x100/0x190
[ 1063.684968][T19792]  should_fail_ex.cold+0x5/0xa
[ 1063.684996][T19792]  should_failslab+0xc2/0x120
[ 1063.685021][T19792]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1063.685061][T19792]  ? security_file_alloc+0x34/0x2c0
[ 1063.685087][T19792]  ? trace_kmem_cache_alloc+0xf3/0x120
[ 1063.685130][T19792]  security_file_alloc+0x34/0x2c0
[ 1063.685157][T19792]  init_file+0x95/0x480
[ 1063.685186][T19792]  alloc_empty_file+0x73/0x1c0
[ 1063.685216][T19792]  path_openat+0xe8/0x31a0
[ 1063.685239][T19792]  ? kasan_save_stack+0x3f/0x50
[ 1063.685274][T19792]  ? kasan_save_stack+0x30/0x50
[ 1063.685311][T19792]  ? kasan_save_track+0x14/0x30
[ 1063.685346][T19792]  ? __kasan_slab_alloc+0x89/0x90
[ 1063.685366][T19792]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 1063.685402][T19792]  ? do_getname+0x35/0x390
[ 1063.685430][T19792]  ? do_sys_openat2+0xc5/0x1e0
[ 1063.685459][T19792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.685488][T19792]  ? __pfx_path_openat+0x10/0x10
[ 1063.685522][T19792]  do_file_open+0x20e/0x430
[ 1063.685548][T19792]  ? __pfx_do_file_open+0x10/0x10
[ 1063.685593][T19792]  ? alloc_fd+0x476/0x790
[ 1063.685618][T19792]  ? do_getname+0x191/0x390
[ 1063.685650][T19792]  do_sys_openat2+0x10d/0x1e0
[ 1063.685680][T19792]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1063.685710][T19792]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1063.685746][T19792]  ? __fget_files+0x21f/0x3d0
[ 1063.685773][T19792]  __x64_sys_openat+0x12d/0x210
[ 1063.685813][T19792]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1063.685844][T19792]  ? ksys_write+0x1ac/0x250
[ 1063.685876][T19792]  do_syscall_64+0x106/0xf80
[ 1063.685904][T19792]  ? clear_bhb_loop+0x40/0x90
[ 1063.685933][T19792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.685958][T19792] RIP: 0033:0x7fc25759c799
[ 1063.685978][T19792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.686002][T19792] RSP: 002b:00007fc2583dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1063.686025][T19792] RAX: ffffffffffffffda RBX: 00007fc257815fa0 RCX: 00007fc25759c799
[ 1063.686048][T19792] RDX: 1a6b75d63882a792 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[ 1063.686063][T19792] RBP: 00007fc2583dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.686077][T19792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.686098][T19792] R13: 00007fc257816038 R14: 00007fc257815fa0 R15: 00007ffc3530f598
[ 1063.686129][T19792]  </TASK>
[ 1065.558386][T17667] NFSD: Failed to start, no listeners configured.
[ 1075.046831][T19887] netlink: 'syz.8.2827': attribute type 11 has an invalid length.
[ 1075.098982][T19887] netlink: 'syz.8.2827': attribute type 11 has an invalid length.
[ 1075.140507][T19887] netlink: 'syz.8.2827': attribute type 11 has an invalid length.
[ 1075.259050][T19885] FAULT_INJECTION: forcing a failure.
[ 1075.259050][T19885] name failslab, interval 1, probability 0, space 0, times 0
[ 1075.691201][T19885] CPU: 0 UID: 0 PID: 19885 Comm: syz.7.2826 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1075.691244][T19885] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1075.691254][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1075.691269][T19885] Call Trace:
[ 1075.691278][T19885]  <TASK>
[ 1075.691288][T19885]  dump_stack_lvl+0x100/0x190
[ 1075.691331][T19885]  should_fail_ex.cold+0x5/0xa
[ 1075.691361][T19885]  ? __seq_open_private+0x22/0xd0
[ 1075.691403][T19885]  should_failslab+0xc2/0x120
[ 1075.691429][T19885]  __kmalloc_noprof+0xe0/0x850
[ 1075.691472][T19885]  ? __pfx_stats_fop_open+0x10/0x10
[ 1075.691498][T19885]  __seq_open_private+0x22/0xd0
[ 1075.691535][T19885]  sc_common_open+0x6b/0x200
[ 1075.691571][T19885]  full_proxy_open_regular+0x1b6/0x370
[ 1075.691610][T19885]  do_dentry_open+0x6d8/0x1660
[ 1075.691634][T19885]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1075.691693][T19885]  vfs_open+0x82/0x3f0
[ 1075.691728][T19885]  path_openat+0x208c/0x31a0
[ 1075.691764][T19885]  ? __pfx_path_openat+0x10/0x10
[ 1075.691801][T19885]  do_file_open+0x20e/0x430
[ 1075.691829][T19885]  ? __pfx_do_file_open+0x10/0x10
[ 1075.691876][T19885]  ? alloc_fd+0x476/0x790
[ 1075.691903][T19885]  ? do_getname+0x191/0x390
[ 1075.691936][T19885]  do_sys_openat2+0x10d/0x1e0
[ 1075.691969][T19885]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1075.692003][T19885]  ? __fget_files+0x21f/0x3d0
[ 1075.692032][T19885]  __x64_sys_openat+0x12d/0x210
[ 1075.692066][T19885]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1075.692111][T19885]  do_syscall_64+0x106/0xf80
[ 1075.692141][T19885]  ? clear_bhb_loop+0x40/0x90
[ 1075.692172][T19885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1075.692198][T19885] RIP: 0033:0x7efe3a39c799
[ 1075.692219][T19885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1075.692243][T19885] RSP: 002b:00007efe3b1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1075.692267][T19885] RAX: ffffffffffffffda RBX: 00007efe3a616180 RCX: 00007efe3a39c799
[ 1075.692284][T19885] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1075.692300][T19885] RBP: 00007efe3a432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1075.692315][T19885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1075.692330][T19885] R13: 00007efe3a616218 R14: 00007efe3a616180 R15: 00007ffc8a0d0a38
[ 1075.692362][T19885]  </TASK>
[ 1080.652654][T19940] blktrace: Concurrent blktraces are not allowed on loop2
[ 1083.064753][T19954] binder: 19947:19954 ioctl c018620c 0 returned -1
[ 1088.358605][T20008] FAULT_INJECTION: forcing a failure.
[ 1088.358605][T20008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1088.429740][T20008] CPU: 0 UID: 0 PID: 20008 Comm: syz.7.2854 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1088.429780][T20008] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1088.429790][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1088.429804][T20008] Call Trace:
[ 1088.429813][T20008]  <TASK>
[ 1088.429823][T20008]  dump_stack_lvl+0x100/0x190
[ 1088.429863][T20008]  should_fail_ex.cold+0x5/0xa
[ 1088.429891][T20008]  _copy_to_iter+0x1f3/0x1720
[ 1088.430010][T20008]  ? find_held_lock+0x2b/0x80
[ 1088.430033][T20008]  ? is_bpf_text_address+0x8a/0x1a0
[ 1088.430070][T20008]  ? __pfx__copy_to_iter+0x10/0x10
[ 1088.430110][T20008]  ? __lock_acquire+0x4a5/0x2630
[ 1088.430139][T20008]  ? __lock_acquire+0x4a5/0x2630
[ 1088.430169][T20008]  ? __kernel_text_address+0xd/0x30
[ 1088.430209][T20008]  simple_copy_to_iter+0x46/0x90
[ 1088.430249][T20008]  __skb_datagram_iter+0x5c8/0x900
[ 1088.430286][T20008]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1088.430340][T20008]  skb_copy_datagram_iter+0xa1/0x270
[ 1088.430383][T20008]  mptcp_recvmsg+0x618/0x1030
[ 1088.430464][T20008]  ? __pfx_mptcp_recvmsg+0x10/0x10
[ 1088.430517][T20008]  ? __pfx_mptcp_recvmsg+0x10/0x10
[ 1088.430553][T20008]  inet_recvmsg+0x625/0x6a0
[ 1088.430592][T20008]  ? __pfx_inet_recvmsg+0x10/0x10
[ 1088.430630][T20008]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1088.430666][T20008]  ? __pfx_inet_recvmsg+0x10/0x10
[ 1088.430704][T20008]  sock_recvmsg+0x187/0x1f0
[ 1088.430742][T20008]  __sys_recvfrom+0x200/0x300
[ 1088.430771][T20008]  ? 0xffffffff81000000
[ 1088.430790][T20008]  ? __pfx___sys_recvfrom+0x10/0x10
[ 1088.430842][T20008]  ? ksys_write+0x1ac/0x250
[ 1088.430863][T20008]  ? __pfx_ksys_write+0x10/0x10
[ 1088.430889][T20008]  __x64_sys_recvfrom+0xe0/0x1c0
[ 1088.430916][T20008]  ? do_syscall_64+0x95/0xf80
[ 1088.430944][T20008]  ? lockdep_hardirqs_on+0x78/0x100
[ 1088.430973][T20008]  do_syscall_64+0x106/0xf80
[ 1088.431001][T20008]  ? clear_bhb_loop+0x40/0x90
[ 1088.431031][T20008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1088.431055][T20008] RIP: 0033:0x7efe3a39c799
[ 1088.431074][T20008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1088.431099][T20008] RSP: 002b:00007efe3b239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 1088.431122][T20008] RAX: ffffffffffffffda RBX: 00007efe3a615fa0 RCX: 00007efe3a39c799
[ 1088.431138][T20008] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 1088.431153][T20008] RBP: 00007efe3b239090 R08: 0000000000000000 R09: ffffffff81000000
[ 1088.431169][T20008] R10: 000000000000011f R11: 0000000000000246 R12: 0000000000000001
[ 1088.431184][T20008] R13: 00007efe3a616038 R14: 00007efe3a615fa0 R15: 00007ffc8a0d0a38
[ 1088.431205][T20008]  ? 0xffffffff81000000
[ 1088.431231][T20008]  </TASK>
[ 1089.311635][T20014] netlink: 'syz.7.2856': attribute type 11 has an invalid length.
[ 1089.320760][T20014] netlink: 'syz.7.2856': attribute type 11 has an invalid length.
[ 1089.331454][T20014] netlink: 'syz.7.2856': attribute type 11 has an invalid length.
[ 1089.912063][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2859'.
[ 1089.939428][T20024] netlink: 'syz.7.2859': attribute type 11 has an invalid length.
[ 1089.958571][T20024] netlink: 'syz.7.2859': attribute type 11 has an invalid length.
[ 1096.025988][T19599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1096.041823][T19599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1096.052014][T19599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1096.060483][T19599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1096.068931][T19599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1097.286983][T20085] chnl_net:caif_netlink_parms(): no params data found
[ 1097.705367][T17321] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1097.730478][T17321] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1097.748990][T17321] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1097.762412][T17321] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1097.773807][T17321] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1098.110823][T20085] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.120524][T17321] Bluetooth: hci7: command tx timeout
[ 1098.130697][T20085] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.195686][T20085] bridge_slave_0: entered allmulticast mode
[ 1098.267693][T20085] bridge_slave_0: entered promiscuous mode
[ 1098.332863][T20085] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.396315][T20085] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.460786][T20085] bridge_slave_1: entered allmulticast mode
[ 1098.500700][T20085] bridge_slave_1: entered promiscuous mode
[ 1098.887736][T20085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1098.980241][T20085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1099.192521][T20085] team0: Port device team_slave_0 added
[ 1099.243942][T20085] team0: Port device team_slave_1 added
[ 1099.375489][T20085] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1099.409704][T20085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1099.544728][T20085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1099.635029][T20085] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1099.673148][T20085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1099.761285][T20085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1099.882553][T17321] Bluetooth: hci8: command tx timeout
[ 1099.923196][T20085] hsr_slave_0: entered promiscuous mode
[ 1099.937561][T20085] hsr_slave_1: entered promiscuous mode
[ 1099.952317][T20085] debugfs: 'hsr0' already exists in 'hsr'
[ 1099.959465][T20085] Cannot create hsr debugfs directory
[ 1099.976562][T20114] chnl_net:caif_netlink_parms(): no params data found
[ 1100.154783][T20114] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.168250][T20114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1100.176749][T20114] bridge_slave_0: entered allmulticast mode
[ 1100.185679][T20114] bridge_slave_0: entered promiscuous mode
[ 1100.201580][T17321] Bluetooth: hci7: command tx timeout
[ 1100.218061][T20114] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.226389][T20114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.234702][T20114] bridge_slave_1: entered allmulticast mode
[ 1100.246309][T20114] bridge_slave_1: entered promiscuous mode
[ 1100.330169][T20114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1100.347305][T20114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1100.426276][T20114] team0: Port device team_slave_0 added
[ 1100.441421][T20114] team0: Port device team_slave_1 added
[ 1100.519796][T20114] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1100.530156][T20114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1100.561938][T20114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1100.588455][T20114] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.598547][T20114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1100.641798][T20114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1100.677933][T20085] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1100.713704][T20085] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1100.737264][T20085] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1100.768557][T20114] hsr_slave_0: entered promiscuous mode
[ 1100.777178][T20114] hsr_slave_1: entered promiscuous mode
[ 1100.785277][T20114] debugfs: 'hsr0' already exists in 'hsr'
[ 1100.791450][T20114] Cannot create hsr debugfs directory
[ 1100.798538][T20085] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1101.228170][T20085] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1101.453757][T20085] 8021q: adding VLAN 0 to HW filter on device team0
[ 1101.560185][T19223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1101.568060][T19223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1101.627834][T19223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.635756][T19223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1101.965279][T17321] Bluetooth: hci8: command tx timeout
[ 1102.043511][   T31] INFO: task syz.0.2485:17996 blocked for more than 143 seconds.
[ 1102.071763][   T31]       Tainted: G     U       L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1102.105227][T20114] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1102.124359][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1102.158366][   T31] task:syz.0.2485      state:D stack:27464 pid:17996 tgid:17995 ppid:17087  task_flags:0x400140 flags:0x00080002
[ 1102.208434][   T31] Call Trace:
[ 1102.211963][   T31]  <TASK>
[ 1102.233861][   T31]  __schedule+0xfee/0x6120
[ 1102.238459][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1102.262947][   T31]  ? __pfx___schedule+0x10/0x10
[ 1102.268212][   T31]  ? find_held_lock+0x2b/0x80
[ 1102.285032][T17321] Bluetooth: hci7: command tx timeout
[ 1102.314788][   T31]  ? schedule+0x2bf/0x390
[ 1102.319619][   T31]  schedule+0xdd/0x390
[ 1102.342625][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1102.348364][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1102.382630][   T31]  ? kasan_save_track+0x14/0x30
[ 1102.387621][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[ 1102.431459][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1102.452675][   T31]  ? netlink_rcv_skb+0x159/0x420
[ 1102.458485][   T31]  ? genl_rcv+0x28/0x40
[ 1102.480168][   T31]  ? ____sys_sendmsg+0x9e1/0xb70
[ 1102.572237][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1102.596833][   T31]  ? __asan_memset+0x23/0x50
[ 1102.602109][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[ 1102.652968][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1102.659389][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1102.675024][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1102.679901][   T31]  ? trace_kmalloc+0x101/0x130
[ 1102.696017][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1102.705541][   T31]  ? __nla_parse+0x40/0x60
[ 1102.711958][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1102.720156][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1102.731498][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[ 1102.738050][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1102.745548][   T31]  ? genl_get_cmd+0x3ef/0x720
[ 1102.750321][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1102.755584][   T31]  ? security_capable+0x80/0x260
[ 1102.760749][   T31]  genl_rcv_msg+0x560/0x800
[ 1102.774592][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1102.780145][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1102.788120][   T31]  netlink_rcv_skb+0x159/0x420
[ 1102.793466][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1102.801850][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1102.814458][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1102.820052][   T31]  genl_rcv+0x28/0x40
[ 1102.825214][   T31]  netlink_unicast+0x5aa/0x870
[ 1102.830276][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1102.838516][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1102.846155][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1102.851836][   T31]  netlink_sendmsg+0x8b0/0xda0
[ 1102.857328][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1102.863199][   T31]  ? __import_iovec+0x1d2/0x640
[ 1102.868225][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1102.874566][   T31]  ____sys_sendmsg+0x9e1/0xb70
[ 1102.879766][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1102.887701][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1102.894743][   T31]  ? try_to_wake_up+0x644/0x1a80
[ 1102.900537][   T31]  ___sys_sendmsg+0x190/0x1e0
[ 1102.909001][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1102.918627][   T31]  ? futex_private_hash_put+0x107/0x1c0
[ 1102.925813][   T31]  __sys_sendmsg+0x170/0x220
[ 1102.930637][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1102.936274][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[ 1102.941880][   T31]  do_syscall_64+0x106/0xf80
[ 1102.950622][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1102.956518][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1102.962543][   T31] RIP: 0033:0x7fc825b9c799
[ 1102.968585][   T31] RSP: 002b:00007fc826ad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1102.977808][   T31] RAX: ffffffffffffffda RBX: 00007fc825e15fa0 RCX: 00007fc825b9c799
[ 1102.986278][   T31] RDX: 0000000020008050 RSI: 00002000000050c0 RDI: 0000000000000003
[ 1102.996648][   T31] RBP: 00007fc825c32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1103.009634][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1103.019840][   T31] R13: 00007fc825e16038 R14: 00007fc825e15fa0 R15: 00007fffe756ce78
[ 1103.031453][   T31]  </TASK>
[ 1103.038052][   T31] INFO: task syz.0.2485:18002 blocked for more than 144 seconds.
[ 1103.142898][   T31]       Tainted: G     U       L      syzkaller #0
[ 1103.150008][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1103.203673][   T31] task:syz.0.2485      state:D stack:27888 pid:18002 tgid:17995 ppid:17087  task_flags:0x400140 flags:0x00080002
[ 1103.233472][   T31] Call Trace:
[ 1103.237257][   T31]  <TASK>
[ 1103.240400][   T31]  __schedule+0xfee/0x6120
[ 1103.260881][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1103.272136][   T31]  ? __pfx___schedule+0x10/0x10
[ 1103.287375][   T31]  ? find_held_lock+0x2b/0x80
[ 1103.292607][   T31]  ? schedule+0x2bf/0x390
[ 1103.314056][   T31]  schedule+0xdd/0x390
[ 1103.318620][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1103.343041][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1103.347788][   T31]  ? kasan_save_track+0x14/0x30
[ 1103.363030][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[ 1103.370403][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1103.400771][   T31]  ? netlink_rcv_skb+0x159/0x420
[ 1103.413132][   T31]  ? genl_rcv+0x28/0x40
[ 1103.427384][   T31]  ? ____sys_sendmsg+0x9e1/0xb70
[ 1103.432494][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1103.461833][   T31]  ? __asan_memset+0x23/0x50
[ 1103.469737][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[ 1103.483221][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1103.489864][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1103.511354][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1103.526265][   T31]  ? trace_kmalloc+0x101/0x130
[ 1103.539105][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1103.568048][   T31]  ? __nla_parse+0x40/0x60
[ 1103.572754][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280
[ 1103.603176][   T31]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280
[ 1103.610739][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[ 1103.632122][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1103.640193][   T31]  ? genl_get_cmd+0x3ef/0x720
[ 1103.653305][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1103.658657][   T31]  ? security_capable+0x80/0x260
[ 1103.682886][   T31]  genl_rcv_msg+0x560/0x800
[ 1103.694622][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1103.700654][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1103.730134][   T31]  netlink_rcv_skb+0x159/0x420
[ 1103.745187][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1103.750446][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1103.769215][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1103.793461][   T31]  genl_rcv+0x28/0x40
[ 1103.799635][   T31]  netlink_unicast+0x5aa/0x870
[ 1103.821265][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1103.837116][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1103.842681][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1103.863677][   T31]  netlink_sendmsg+0x8b0/0xda0
[ 1103.871645][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1103.889536][   T31]  ? __import_iovec+0x1d2/0x640
[ 1103.903549][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1103.909473][   T31]  ____sys_sendmsg+0x9e1/0xb70
[ 1103.928200][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1103.943303][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1103.949556][   T31]  ? kasan_quarantine_put+0x104/0x240
[ 1103.973361][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1103.979676][   T31]  ___sys_sendmsg+0x190/0x1e0
[ 1103.998494][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1104.013363][   T31]  ? tomoyo_path_number_perm+0x188/0x580
[ 1104.019458][   T31]  __sys_sendmsg+0x170/0x220
[ 1104.040128][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1104.046505][T17321] Bluetooth: hci8: command tx timeout
[ 1104.063455][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1104.068343][   T31]  ? kcov_ioctl+0x16a/0x720
[ 1104.083480][   T31]  do_syscall_64+0x106/0xf80
[ 1104.093619][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1104.098562][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.123521][   T31] RIP: 0033:0x7fc825b9c799
[ 1104.128238][   T31] RSP: 002b:00007fc826ab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1104.157968][   T31] RAX: ffffffffffffffda RBX: 00007fc825e16090 RCX: 00007fc825b9c799
[ 1104.177084][   T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1104.203528][   T31] RBP: 00007fc825c32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1104.211832][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1104.245707][   T31] R13: 00007fc825e16128 R14: 00007fc825e16090 R15: 00007fffe756ce78
[ 1104.263553][   T31]  </TASK>
[ 1104.298946][   T31] 
[ 1104.298946][   T31] Showing all locks held in the system:
[ 1104.390612][T17321] Bluetooth: hci7: command tx timeout
[ 1104.420288][   T31] 1 lock held by khungtaskd/31:
[ 1104.451762][   T31]  #0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1104.500754][   T31] 2 locks held by kworker/u11:1/17303:
[ 1104.554390][   T31]  #0: ffff88801f70f948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1104.608813][   T31]  #1: ffffc90003a77d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1104.691241][   T31] 2 locks held by kworker/u11:3/17307:
[ 1104.719310][   T31]  #0: ffff88801f70f948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1104.783699][   T31]  #1: ffffc90003c87d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1104.840283][   T31] 2 locks held by kworker/u11:5/17356:
[ 1104.883763][   T31]  #0: ffff88801f70f948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1104.940325][   T31]  #1: ffffc90003597d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1105.013874][   T31] 2 locks held by syz-executor/17390:
[ 1105.019702][   T31]  #0: ffff888029ce40e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[ 1105.169140][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1105.244556][   T31] 2 locks held by syz.4.2430/17667:
[ 1105.250194][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.274011][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1105.301042][   T31] 2 locks held by kworker/u11:6/17839:
[ 1105.324288][   T31]  #0: ffff88801f70f948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1105.344507][   T31]  #1: ffffc90003e37d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1105.373780][   T31] 2 locks held by syz.0.2485/17996:
[ 1105.384495][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.392988][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1105.434043][   T31] 2 locks held by syz.0.2485/18002:
[ 1105.439740][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.465232][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1105.484954][   T31] 2 locks held by getty/19455:
[ 1105.516617][   T31]  #0: ffff888039bd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1105.544303][   T31]  #1: ffffc90003e3b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1105.567893][   T31] 2 locks held by syz.6.2837/19942:
[ 1105.573426][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.604180][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1105.624891][   T31] 2 locks held by syz.8.2842/19957:
[ 1105.630507][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.658621][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1105.691754][   T31] 3 locks held by syz-executor/20085:
[ 1105.698094][   T31]  #0: ffff888091d78ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1105.724362][   T31]  #1: ffff888091d780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1105.748815][   T31]  #2: ffffffff908ab708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1105.783635][   T31] 2 locks held by syz.7.2874/20108:
[ 1105.790688][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1105.818268][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1105.845014][   T31] 5 locks held by syz-executor/20114:
[ 1105.850450][   T31]  #0: ffff8880233b0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1105.883972][   T31]  #1: ffff8880233b00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1105.925266][   T31]  #2: ffffffff908ab708 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1105.955105][   T31]  #3: ffff888026983af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770
[ 1105.983084][   T31]  #4: ffffffff8e7f3078 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1106.015087][   T31] 2 locks held by syz.5.2878/20136:
[ 1106.020481][   T31]  #0: ffffffff906bf810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1106.040481][   T31]  #1: ffffffff8ec579c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1106.067112][   T31] 1 lock held by dhcpcd-run-hook/20199:
[ 1106.073064][   T31]  #0: ffff88807c603c68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0x7de/0x1200
[ 1106.124676][T17321] Bluetooth: hci8: command tx timeout
[ 1106.131294][   T31] 1 lock held by cmp/20209:
[ 1106.136944][   T31] 
[ 1106.139480][   T31] =============================================
[ 1106.139480][   T31] 
[ 1106.312650][   T31] NMI backtrace for cpu 0
[ 1106.312675][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1106.312711][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1106.312720][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1106.312735][   T31] Call Trace:
[ 1106.312744][   T31]  <TASK>
[ 1106.312755][   T31]  dump_stack_lvl+0x100/0x190
[ 1106.312795][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1106.312834][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1106.312873][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1106.312916][   T31]  sys_info+0x141/0x190
[ 1106.312948][   T31]  watchdog+0xd25/0x1050
[ 1106.312978][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1106.313002][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1106.313031][   T31]  ? kthread+0x13a/0x450
[ 1106.313059][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1106.313080][   T31]  kthread+0x370/0x450
[ 1106.313108][   T31]  ? __pfx_kthread+0x10/0x10
[ 1106.313141][   T31]  ret_from_fork+0x754/0xd80
[ 1106.313178][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1106.313215][   T31]  ? __switch_to+0x7b4/0x1120
[ 1106.313241][   T31]  ? __pfx_kthread+0x10/0x10
[ 1106.313273][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1106.313312][   T31]  </TASK>
[ 1106.787844][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1106.794955][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1106.805943][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1106.811292][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1106.821844][   T31] Call Trace:
[ 1106.825245][   T31]  <TASK>
[ 1106.828354][   T31]  dump_stack_lvl+0x100/0x190
[ 1106.833342][   T31]  vpanic+0x552/0x970
[ 1106.837592][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1106.842850][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1106.849148][   T31]  panic+0xd1/0xe0
[ 1106.853168][   T31]  ? __pfx_panic+0x10/0x10
[ 1106.857772][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1106.864169][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1106.871415][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1106.878405][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1106.883774][   T31]  ? watchdog+0xd35/0x1050
[ 1106.888720][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1106.893438][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1106.898503][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1106.904460][   T31]  ? kthread+0x13a/0x450
[ 1106.909017][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1106.914023][   T31]  kthread+0x370/0x450
[ 1106.918354][   T31]  ? __pfx_kthread+0x10/0x10
[ 1106.923654][   T31]  ret_from_fork+0x754/0xd80
[ 1106.928599][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1106.934305][   T31]  ? __switch_to+0x7b4/0x1120
[ 1106.939733][   T31]  ? __pfx_kthread+0x10/0x10
[ 1106.944725][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1106.949899][   T31]  </TASK>
[ 1106.953084][   T31] Kernel Offset: disabled
[ 1106.957588][   T31] Rebooting in 86400 seconds..