last executing test programs:

9m25.578085282s ago: executing program 32 (id=1631):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x300, 0x0) (async)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2200c0, 0x0)
poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1ca}, 0x2, 0x7) (async)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x20882, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x301e00, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64)
mmap$auto(0xfffffffffffffffc, 0x40000d, 0x400, 0x9b72, 0xffffffffffffffff, 0x8004) (async)
migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) (async)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) (async)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto(r2, 0x0, 0x800000008) (async, rerun: 32)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x3, 0x2) (async, rerun: 64)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) (async, rerun: 64)
madvise$auto(0x110d230000, 0x1, 0x9)
openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x4589c2, 0x0) (async)
lseek$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_GET_TXSC(r3, 0x0, 0x40080c4)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x2, 0x0) (async)
mmap$auto(0xe, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async)
r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000000)={0x3, 0x1, 0x80000000, 0x70, 0x9, 0x1})

2m42.803494277s ago: executing program 33 (id=3425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setfsuid$auto(0xee00)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r2)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
keyctl$auto_KEYCTL_SEARCH(0xa, 0x31, 0x200000000000, 0x0, 0x8001)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) (async)
sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x441, 0x0) (async)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x441, 0x0)
vmsplice$auto(r5, &(0x7f0000000300)={&(0x7f0000000240)="6bdd02a9f681d7a4e462b17e8a3dcb498a8c68364c40c05f8f9a65f87dd500dc39797650c60177d9342819a457739c29c302d9399070a88b79c35d979d02666ff4f42b5f975018bb9ac6e301ba42103acf407b04660fe1abc731fbe4bccd135a8c8280c1df29eaa480cfd8a18c8737a3dd44a81d0cf5b93904136909a8aa1236ad8931a419fdc56635f946cc8f", 0x6}, 0x0, 0x7ff)

2m14.481841617s ago: executing program 34 (id=3541):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
socket(0x2, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000)
swapoff$auto(&(0x7f00000000c0)='/de\x81/Jri/card1\x00')

1m49.252378507s ago: executing program 35 (id=3668):
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x446a02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
socket(0x29, 0x2, 0x0)
setfsuid$auto(0xee00)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, r2, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r5, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r5, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m42.244999669s ago: executing program 36 (id=3705):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r1 = socket(0x11, 0x2, 0x300)
r2 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r2, 0x0, 0x2, 0x100)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240))
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4)
r3 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r3, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000000)=' ', 0x1)
settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0)
write$auto(r4, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe)
mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0)
utime$auto(&(0x7f0000000000)='}[,&*}\x00', 0x0)
writev$auto(r1, &(0x7f0000000300)={0x0, 0x10001}, 0x5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)

1m34.305652151s ago: executing program 37 (id=3740):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r0, 0x7, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x84)
pwrite64$auto(0xc8, 0x0, 0xedef, 0x3)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x66, 0x64, 0x80800020, 0x1003, 0x9, 0x1dd, 0x2, 0xd8]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x200000007}, 0x3)

1m32.42219825s ago: executing program 7 (id=3813):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r0, 0x7, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x84)
pwrite64$auto(0xc8, 0x0, 0xedef, 0x3)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptys3\x00', 0x201, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0)
pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video6\x00', 0x0, 0x0)
getdents$auto(r0, 0x0, 0x20)

1m31.401087068s ago: executing program 7 (id=3814):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x301000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = socket(0xa, 0x5, 0x84)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0xc)
close_range$auto(r4, r2, 0x5)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
r6 = open(0x0, 0x222240, 0x59)
statx$auto(r6, 0x0, 0x1003, 0x80004005, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r8, 0x4068aea3, &(0x7f0000000440)={0x81})
socket(0x25, 0x2, 0x0)

1m30.331042354s ago: executing program 5 (id=3816):
ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socketcall$auto(0xa, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(r2, 0x66a, 0xffffffffffffffff)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f0000000000)={0xdb})
mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x4, 0xffffffffffff0005, 0x16)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8a402, 0x0)
ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r3, 0x80044dfb, &(0x7f0000000300))
mmap$auto(0x1000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
munmap$auto(0x8000, 0xffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)

1m29.984108899s ago: executing program 5 (id=3817):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'})
socket(0xa, 0x1, 0x84)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400040, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/atomic_write_unit_max_bytes\x00', 0x400, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
statmount$auto(0x0, &(0x7f0000000300)={0x7, 0x8, 0x1, 0x80000003, 0x2, 0x1, 0xff, 0xbad, 0xd0, 0xae0000000000, 0x8001, 0x1e2b, 0x8, 0x7fff, 0x9, 0x46c8ace, 0x80000001, 0x400000, 0x3ff, 0x6a, 0xc2a, 0x2, 0xbf64, 0x4, 0x7, 0x4, 0x9, 0x8, 0x8001, 0x1, 0x2009, [0x101, 0xe3, 0x3, 0x1, 0x10000000007, 0x40000000000000e, 0x2000000000003, 0x6, 0xe, 0xffffffffffffa7e2, 0x2000000000000000, 0x7fffffff, 0x4b, 0x5, 0x9, 0x8, 0xffffffffffffff96, 0x7fffffff, 0xa1a4, 0xcf, 0x7fffffffffffffff, 0xffffffffffffff40, 0x2, 0x1a, 0x8001000000000000, 0x3ff, 0x9, 0xe, 0x3c, 0x9, 0x4, 0xfffffffffffefff8, 0x4, 0x3, 0x9, 0x3, 0x7fffffff, 0x100, 0x142, 0xe29, 0x2, 0x7, 0x7]}, 0x2, 0xef)
ioctl$auto(0x3, 0xae41, r0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd})
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000100)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1954ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
msgsnd$auto(0x4, 0x0, 0x11, 0x1)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000700)="12")

1m29.561525719s ago: executing program 5 (id=3818):
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x100000, 0x0)
pread64$auto(r1, &(0x7f0000000040)='],{(@&&\x00', 0xa1fb, 0x1)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x90000009)
set_mempolicy$auto(0x6, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setresgid$auto(0xffffffffffffffff, 0xee00, 0x0)
read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001)
write$auto(r2, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyd8\x00', 0x101e81, 0x0)
setsockopt$auto_SO_RCVBUFFORCE(r3, 0xb1, 0x21, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2)

1m28.603494599s ago: executing program 5 (id=3821):
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x40, 0x0)
unshare$auto(0x40000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r4], 0x1c}}, 0x4040080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0xc8, 0x401054d5, 0x0)
mmap$auto(0x0, 0x2020009, 0x7fffffff, 0x13, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, 0x0, 0x4001)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
preadv$auto(r5, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x40, 0x5)
ioctl$auto(r0, 0x5646, r0)
read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28)
sched_rr_get_interval$auto(0x0, 0x0)
connect$auto(r5, &(0x7f0000000040)=@l2={0x1f, 0x1ff, @none, 0x2}, 0x7ff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m28.216642578s ago: executing program 5 (id=3823):
prlimit64$auto(0x0, 0x1, &(0x7f00000000c0)={0x6, 0x7}, &(0x7f0000000100)={0xfffffffffffffff8, 0x2e7})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
read$auto_check_wx_fops_(r0, &(0x7f00000001c0)=""/186, 0xba)
r1 = gettid()
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x80d00, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r3 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3)
move_pages$auto(r1, 0xa, 0x0, 0x0, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x6, 0x5f3, 0x10000, 0x0, 0xd06)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)

1m27.960492141s ago: executing program 5 (id=3825):
socket$nl_generic(0x11, 0x3, 0x10)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
r0 = fsopen$auto(0x0, 0x1)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0)
ioctl$auto(r2, 0xc0585611, r2)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000040)={"73b6ff080e863c5d87496166b4be4d7753c8a88fbbac0080166ee359b218a77f", 0x4, 0x27, 0xfffffffc, 0x5b94, 0x0, <r3=>0xffffffffffffffff})
prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r3, 0x0, 0xffffffffffffffff)
get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x800000, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r4, 0x0, 0x400018)
ioctl$auto(0x3, 0x4020565a, 0x38)
r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x80000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, 0x100002, 0x7, 0x3f, 0x6, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x6})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

1m17.527597216s ago: executing program 38 (id=3809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket(0x11, 0xa, 0x9)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0)
unshare$auto(0x40000080)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x80001, 0x0)
ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0)
r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci2/rfkill29/state\x00', 0x400, 0x0)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r6, 0x100, 0x4, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "d9c9aa27ca00ab496b86ada59f56"}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "bddd0b58791c152939efb8811c09"}]}, 0x40}}, 0x4000004)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000012c0), 0xffffffffffffffff)

1m16.397706626s ago: executing program 39 (id=3814):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x301000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = socket(0xa, 0x5, 0x84)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0xc)
close_range$auto(r4, r2, 0x5)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
r6 = open(0x0, 0x222240, 0x59)
statx$auto(r6, 0x0, 0x1003, 0x80004005, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r8, 0x4068aea3, &(0x7f0000000440)={0x81})
socket(0x25, 0x2, 0x0)

1m14.195978811s ago: executing program 9 (id=3856):
mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/usb/drivers/CoreChips/remove_id\x00', 0x111082, 0x0)
mmap$auto(0x4000000000000, 0x8009a02, 0x1000000000000003, 0x9000000eb1, 0xfffffffffffffffa, 0x8)
timerfd_gettime$auto(r0, &(0x7f0000000180)={{0x2, 0x8}, {0xfff, 0x7}})
ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sda1\x00', 0xe6e43, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}, @OVS_METER_ATTR_BANDS={0x10, 0x4, 0x0, 0x1, [@typed={0x7, 0x12c, 0x0, 0x0, @u64=0xff}]}]}, 0x34}}, 0x8080)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
unshare$auto(0x40000080)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r5, 0x0)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900), 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r6 = socket(0x2, 0x1, 0x106)
bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, 0x54)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c)
write$auto(0x3, 0x0, 0x1)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r7, 0x0, 0x400000000006)

1m13.393467702s ago: executing program 9 (id=3857):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x403, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r1, 0x65, 0x8, 0x0, 0x0)
r2 = socket(0x2, 0x3, 0x100)
r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040005)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9a7400022bbd7000f8dbef250400000008000fdc24f4a226719a8ceb443d0062"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
dup$auto(0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r4, 0x0, 0x400100000001, 0x1ff)
r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x202, 0x0)
write$auto(r5, 0x0, 0x5)
unshare$auto(0x40000080)
socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, <r6=>0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103})
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1)
truncate$auto(&(0x7f0000000040)='./file0\x00', 0x4)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)

1m12.949713421s ago: executing program 9 (id=3858):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2b, 0x1, 0x0) (async)
r0 = socket(0x10, 0x2, 0xf) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0xa, 0x1, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
shutdown$auto(0x200000003, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0xd6, 0x148, "4de6c50fcf9eedadab2bd0ff786764039e1b99258e10f0eb5dfc09222d586ef878e4f9f5629f82291bb9e761575601ac963378811baefb58b4985126aeb8c808c14bcb2619cd6d6a4837d3bf8443d72426efc265d632a87850bea4b6f2fc4a72a75a46b467353f32fe439fd2cc985fb1619df4f0745a1a55fb4aa78ea2a94783bf4c6df15014492dbe28d678a176ee57b3eeade2a3eb68f4a8a93cf6bd33997572cd0cff8ca7a5e0cddf1fba9b24bca012502e38346782ad6585fa6316841e45ba6ce31c74c1519ac968b9f160ab91aeed09"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)

1m12.902790724s ago: executing program 40 (id=3825):
socket$nl_generic(0x11, 0x3, 0x10)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
r0 = fsopen$auto(0x0, 0x1)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0)
ioctl$auto(r2, 0xc0585611, r2)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000040)={"73b6ff080e863c5d87496166b4be4d7753c8a88fbbac0080166ee359b218a77f", 0x4, 0x27, 0xfffffffc, 0x5b94, 0x0, <r3=>0xffffffffffffffff})
prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r3, 0x0, 0xffffffffffffffff)
get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x800000, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r4, 0x0, 0x400018)
ioctl$auto(0x3, 0x4020565a, 0x38)
r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x80000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, 0x100002, 0x7, 0x3f, 0x6, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x6})
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

1m12.739259672s ago: executing program 9 (id=3860):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
read$auto(0x4, 0x0, 0xfdef)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, "149104f420c354afc487a55c9516288324a7ecdf4c5dcc0086b217b57e27ff08b722f1c9dd726f534298c1d287da24f3fd38c83a286095ca89cde769d299a2f907514d3939a0970fe5e1d3e1a2369b4798b424491389be280fd024aa39d924e01ad63f05f911f6bb0d50"}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x4000840)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1)
ioctl$auto(r3, 0x8004b708, 0x1)

1m12.43891652s ago: executing program 9 (id=3861):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
socket(0x11, 0x2, 0x300)
r1 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r1, 0x0, 0x2, 0x100)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) (async)
r2 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) (async)
prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) (async)
prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) (async)
r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) (async)
settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0)
write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) (async)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) (async)
mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) (async)
utime$auto(&(0x7f0000000000)='}[,&*}\x00', 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10001}, 0xc)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)

1m11.4274103s ago: executing program 9 (id=3864):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x1, 0x0)
getsockopt$auto_SO_BUF_LOCK(r0, 0xfffffff7, 0x48, &(0x7f0000000040)='#&*{\x00', &(0x7f0000000080)=0x6)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f")
mmap$auto(0x0, 0x8, 0xdf, 0x9b74, 0x2, 0x101)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0xffff}, 0x10003)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
open(&(0x7f0000000800)='./file0\x00', 0x420241, 0x1c)
execve$auto(0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(0x0, &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

1m2.779189246s ago: executing program 0 (id=3887):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x0, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@ax25={0x3, @null, 0x7}, 0x52)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
write$auto(0x3, 0x0, 0x81)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0xa}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x600401, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0)

1m1.541504844s ago: executing program 0 (id=3893):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
r0 = fanotify_init$auto(0x65, 0x2)
socket(0x1d, 0x2, 0x7fffffff)
socket(0x10, 0x3, 0x6)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x16e)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
ioctl$auto_VHOST_SET_VRING_ADDR2(r0, 0x4028af11, &(0x7f0000000040)={0x8, 0x68, 0x7818, 0x80000001, 0x72, 0x8})
ioctl$auto_USBDEVFS_RESET(r1, 0x5514, 0x0)

1m1.305946049s ago: executing program 0 (id=3896):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0)
write$auto(r1, 0x0, 0xfded)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))

1m1.047162592s ago: executing program 0 (id=3900):
mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x10000eb1, 0xffffffffffffffff, 0xfffffffffffffffb) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r0, 0x40104d0e, 0xe) (async)
read$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000000540)=""/240, 0xf0)
socket(0x2a, 0x2, 0xf45f160) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x240c8010}, 0x200440c5) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$auto(0x0, 0x0) (async)
statx$auto(0xffffff9c, 0x0, 0x1000, 0xbb, 0x0) (async)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0)
ioctl$auto(r1, 0xc0104d08, r1) (async)
bpf$auto(0x3, &(0x7f0000000300)=@link_update={<r2=>0xffffffffffffffff, @new_prog_fd, 0x2, @old_map_fd}, 0x26f0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1ac}}, 0x48040) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x100009}, 0x7}, 0x4000003, 0x0) (async)
close_range$auto(0x2, r2, 0x0) (async)
io_uring_setup$auto(0x488, 0x0)
mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) (async)
setresuid$auto(0x2, 0x7, 0x8080) (async)
prctl$auto(0x10, 0x2, 0x0, 0x20000004, 0x2) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, r0, 0x8000)

1m0.935138045s ago: executing program 0 (id=3901):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
socket(0x2a, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x4)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(r3, 0x64c8, 0xffffffffffffffff)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r2, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
mmap$auto(0x2000000000000, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r4 = epoll_create$auto(0x1)
capset$auto(0x0, 0x0)
epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
read$auto(r5, 0x0, 0x8)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x400001, 0x0)

59.544789041s ago: executing program 0 (id=3907):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa)
mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x189a41, 0x0) (async)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x189a41, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a")
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0xb, 0xd, 0x808e8, 0x0) (async)
socketpair$auto(0xb, 0xd, 0x808e8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x400053, 0x9) (async)
madvise$auto(0x0, 0x400053, 0x9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r4, 0x65, 0x3, 0x0, 0x4)
mlockall$auto(0x800000000000005) (async)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
mmap$auto(0x0, 0x8f8, 0xffffffffffffffff, 0x200000000000eb1, 0xfffffffffffffffa, 0x400000000008000)

56.190172165s ago: executing program 41 (id=3864):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/x86/topo/cpus/1\x00', 0x1, 0x0)
getsockopt$auto_SO_BUF_LOCK(r0, 0xfffffff7, 0x48, &(0x7f0000000040)='#&*{\x00', &(0x7f0000000080)=0x6)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f")
mmap$auto(0x0, 0x8, 0xdf, 0x9b74, 0x2, 0x101)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0xffff}, 0x10003)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x8, 0x2, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
open(&(0x7f0000000800)='./file0\x00', 0x420241, 0x1c)
execve$auto(0x0, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(0x0, &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004)
write$auto(0xffffffffffffffff, 0x0, 0x81)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)

46.099394607s ago: executing program 6 (id=3958):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r1], 0x184}, 0x1, 0x0, 0x0, 0x20008041}, 0x0)
unshare$auto(0x40000080)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/245, 0xf5)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
socket(0x11, 0x5, 0x100)
mmap$auto(0x0, 0x4020009, 0x4000000df, 0xeb1, r2, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="f36cf820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e)
unshare$auto(0x7f)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40444c0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x2a, 0x2, 0x403)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setrlimit$auto(0x1000000007, 0x0)
timerfd_create$auto(0x9, 0x0)
prctl$auto(0x3e, 0x7, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nfc(0x0, r4)
mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6)
socket(0x9, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r5 = socket(0x2, 0x1, 0x106)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
unshare$auto(0xa)
setsockopt$auto(r5, 0x6, 0x1e, 0x0, 0x7)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0805}, 0x40810)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0)

45.644717554s ago: executing program 6 (id=3961):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) (async, rerun: 64)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (rerun: 64)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") (async)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x98000, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x24000050) (async)
ioctl$auto(0xc8, 0x800454e1, r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) (async, rerun: 32)
unshare$auto(0x40000080)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sg0\x00', 0x1c403, 0x0) (async)
r7 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r7, &(0x7f0000000040)=""/4096, 0xfffffe82) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001180)={'wg1\x00', <r8=>0x0}) (rerun: 64)
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000011c0)=@bpf_attr_5={@target_ifindex=r8, r4, 0x9, 0x8, r2, @relative_id=0x2, 0x337}, 0x400) (async, rerun: 32)
inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32)
read$auto(0x3, 0x0, 0x8080) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ttyy5\x00', 0x400, 0x0) (async)
write$auto(0x3, 0x0, 0x100082)

44.596204625s ago: executing program 6 (id=3965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
r2 = setfsuid$auto(0xee01)
setresuid$auto(0x0, r2, 0x0)
pipe$auto(&(0x7f0000000080)=<r3=>r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003480)=ANY=[@ANYBLOB="14562052", @ANYRES16=r5, @ANYBLOB="200027bd7000fcdbdf255f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="b6a025bd7000fddbdf253e0000000800a40002000000b500c7005d80c41bb1ce9511280098ca8b98c9e2a0507aa523e17e1bb23c141ea0db4fe85cf92429a087514375accbf9badc5fdc973c1421e8c9d23750afd91ca5d3312eeddde369300180d5e5a329a0760be56e5526be3277caea6740ba5880d73d60cc08bc768cdbc4515c3b2d1061decb189b8ad04fb77ed272da1e8f089fd9a8c81380a06db8dd1440b1f8e20819a9a9eb700b05dffb4c330f7836003d9b85994dd5e077965f7d1edfdb279fa0cfb96970d083000000"], 0xd4}, 0x1, 0x0, 0x0, 0xda261b67b6b3c98b}, 0x4040000)
r7 = setfsuid$auto(0xee00)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r7, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x6, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000001300)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220008000000265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872a67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d272249f257871870a4dd4b9b2c4f3cd50dc4213674015e96a424cd97bb46607a111c53e42e0b11a63d21ed05b26a0c19389a37520abe6b3ea601753db3866ffa329e14793aeb877cee6c02bf202c8b3ae953ade534583c3a8766489b1088b78c7275f016e2893b9872f9838ee0b85800c987876a1cb931ca45ee63f378368534d2c6e3883bdbfff6cba018b5bafe2640c29ce38d47ef38de0aab4ca7e024bc3e080bcfe372dc5f8c271a74140ab51245cc9e47dc"})
sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000002500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f0000003900)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf250300000044251e802d01628008004e00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\x00\x00\b\x00o\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x257c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r8)
read$auto(r8, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x7, 0x9}, 0x7}, 0x3, 0x2)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3eb69a010329bd7000ffdbdf250a0000000c0002006e6c383032"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r9, 0x0)
socket(0x2, 0x80802, 0x0)

44.556568691s ago: executing program 42 (id=3907):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa)
mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x189a41, 0x0) (async)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x189a41, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a")
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
socket(0x2, 0x1, 0x0) (async)
socket(0x2, 0x1, 0x0)
prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0xb, 0xd, 0x808e8, 0x0) (async)
socketpair$auto(0xb, 0xd, 0x808e8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x400053, 0x9) (async)
madvise$auto(0x0, 0x400053, 0x9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r4, 0x65, 0x3, 0x0, 0x4)
mlockall$auto(0x800000000000005) (async)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
mmap$auto(0x0, 0x8f8, 0xffffffffffffffff, 0x200000000000eb1, 0xfffffffffffffffa, 0x400000000008000)

44.114968038s ago: executing program 6 (id=3971):
mmap$auto(0x0, 0x402000c, 0x10dd, 0xcb1, 0xffffffffffffffff, 0x8000)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
r1 = pidfd_open$auto(0x0, 0x8002)
move_mount$auto(0xffffffffffffffff, 0x0, r1, 0x0, 0x273)
write$auto(r0, 0x0, 0xfffffdf1)
linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xfffe)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=@bpf_attr_5={@target_fd=r2, 0xffffffffffffffff, 0x3, 0x6b, <r3=>r2, @relative_id=0xa, 0x8001}, 0x8)
r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto(r4, &(0x7f0000000700)='!=ev_vhc&\x00', 0x9)
mmap$auto(0xfffffffffffffffe, 0x8, 0x1000000005, 0x209b72, r3, 0x8000)
socket(0x23, 0x80805, 0x0)
r5 = epoll_create$auto(0x3e)
epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
mmap$auto(0x0, 0x6, 0xffb, 0x8000000008012, r6, 0x8000)
mprotect$auto(0x4, 0x401400, 0x29)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r7, 0x0, 0x5)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r1)
ptrace$auto(0x6, r7, 0x400002, 0xd00c)
open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x13f)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', 0x0, 0x0, 0x2, 0x0)
listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x86bd)
ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r3, 0xc008aec1, &(0x7f0000000700)={0x3})

44.001433931s ago: executing program 2 (id=3972):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
io_uring_setup$auto(0x4, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0) (async)
r0 = socket(0x10, 0x2, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async)
sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) (async)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0)
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080) (async)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyd8\x00', 0x101e81, 0x0)
setsockopt$auto_SO_RCVBUFFORCE(r2, 0xb1, 0x21, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x60042, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdir$auto(0x0, 0x7f) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) (async)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080) (async)
memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)

42.944369232s ago: executing program 6 (id=3973):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0)
ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)="7c182e9b3c7ce9d4cb0d3db413a9096e2a9eba66ce35c2335f7c748dd5fa3083bc738951a51dda131549ca747d8896c942048caae598d9dc61b932a6184247c9c11e9c51c20c7c66d51b05d4eb3b5a49718e99141bdd3772dc98cb48e2a80f97157a468fb1a0046226a44257")
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r0, 0x5, r3)
read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0)
ioctl$auto(r3, 0x2400000, 0xffffffffffffffff)
quotactl_fd$auto(0x0, 0x2, 0x0, 0xfffffffffffffffd)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000080)={0xce})
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
umount2$auto(&(0x7f0000000000)='.\x00', 0x4)

42.715396429s ago: executing program 2 (id=3974):
mmap$auto(0x5b, 0x80000000, 0xdf, 0xebd, 0x40000000000a5, 0x7)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
r1 = bpf$auto(0x3, &(0x7f0000000000)=@enable_stats={0x1}, 0x7fd)
mmap$auto(0x1, 0x810004, 0x1, 0x8000000008012, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(0x0)
fsopen$auto(0x0, 0x1)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0)
ioctl$auto(r2, 0xc0585605, r2)
socket(0x1e, 0x5, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/interval\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001680)=""/59, 0x3b)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r4, 0x0, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket(0x2, 0x1, 0x106)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10005, 0x3, 0xc, 0xffffffffffffffff, 0x1000000000000009, 0x800}, 0xee)
getcwd$auto(0x0, 0xffffffffffffffff)
write$auto_proc_mem_operations_base(r1, &(0x7f00000001c0)="36f38f0039ebe7174764e8402fd670f7a35a6c96322c3fa16ffbab6d83bd48f56bbcca9cbfe3388589f856e90191a74830e4884c9b1ec57113589b9e6879546f8e2aed85d3d7bc8c3e4e681ce178a871c387e9fb84c4fad6eec7", 0x5a)
openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)

42.65670475s ago: executing program 6 (id=3975):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
mmap$auto(0x4, 0xd945, 0x2, 0x40eb1, r0, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0x9)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0)
getpid()
unshare$auto(0x40000080)
prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
socket(0x10, 0x2, 0xc)
getsockopt$auto_SO_TIMESTAMP_NEW(0xffffffffffffffff, 0x4, 0x3f, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x616)
mmap$auto(0x7fffffff, 0x2000c, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x80001, 0x9, 0x7, 0x3f, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x285, 0x200, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x6, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffeffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0xe43, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x84e6, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8000000000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2645, 0x0, 0x84f1, 0x0, 0x2]}, 0x204, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="a270d670", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x4040001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

41.689630615s ago: executing program 2 (id=3977):
inotify_init1$auto(0x1ff)
poll$auto(0x0, 0x5, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
mmap$auto(0x0, 0x20009, 0xffffffff, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
close_range$auto(0x2, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0)
sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14084030}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '**\x00'}, @NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "a530674e7d5373a5d046baf9e8530f2fee26f86665af7faa0293e911da517de840e880f7622649ae253797d1706125a86ed44f48395acdb85fa3a41a3fdaeea51764f657d16f08e0a49a6262c121573472bd70e332498cd53925ab8aca890a909673f693c4af2a709f4b88322cba95652a3e68e8"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200088d0}, 0x4000000)
socket(0x25, 0x3, 0xbf)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0)
write$auto(r1, 0x0, 0x3)
unshare$auto(0x40000080)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x9, 0xa, 0x17)
r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0)
ioctl$auto_PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)={0x2, 0x6, 0xa, @raw=0x8}})
getsockopt$auto_SO_PEERPIDFD(r6, 0x9, 0x4d, &(0x7f0000000280)='*/\x00', &(0x7f0000000300)=0xfffffffa)
mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r7 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team0\x00'})

40.715567204s ago: executing program 2 (id=3979):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)

40.619557137s ago: executing program 2 (id=3980):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
socket(0x2, 0x801, 0x106)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)

39.638898258s ago: executing program 2 (id=3983):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x800000000000005)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x10001)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x8000000)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
socket(0x2a, 0x2, 0x1)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
io_setup$auto(0xffff, &(0x7f0000000580))
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9})

27.268374583s ago: executing program 43 (id=3975):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
mmap$auto(0x4, 0xd945, 0x2, 0x40eb1, r0, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0x9)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0)
getpid()
unshare$auto(0x40000080)
prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
socket(0x10, 0x2, 0xc)
getsockopt$auto_SO_TIMESTAMP_NEW(0xffffffffffffffff, 0x4, 0x3f, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x616)
mmap$auto(0x7fffffff, 0x2000c, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x80001, 0x9, 0x7, 0x3f, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x285, 0x200, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x6, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffeffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0xe43, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x84e6, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8000000000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2645, 0x0, 0x84f1, 0x0, 0x2]}, 0x204, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="a270d670", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x4040001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

24.610905736s ago: executing program 44 (id=3983):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mlockall$auto(0x800000000000005)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x10001)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x8000000)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
socket(0x2a, 0x2, 0x1)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
io_setup$auto(0xffff, &(0x7f0000000580))
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9})

22.327337374s ago: executing program 3 (id=4040):
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0xb58, 0x0, 0xe7e, 0x6) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x0, 0xe, 0x2, 0x71) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x31b9, 0xfffffffffffffff4, 0x997, 0x7ff)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x4d1b, 0x64ff, 0xe, 0x7a) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x1ff, 0x3, 0x3, 0x4) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x8, 0x9, 0xffffffff, 0x3)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x0, 0xd, 0x0, 0x8)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x2cf, 0xccd9, 0x7564, 0x800) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x8, 0x5, 0xb71, 0x4) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0xd07, 0x4, 0x10000, 0x1000) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x64b3d29b, 0xc7, 0x8, 0x9) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0xff, 0x1958, 0x60a, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x6, &(0x7f0000000100)={{0x4, 0xfffffffffffffff3}, {0x5, 0x9}, 0x4, 0x0, 0x8634, 0x6, 0x9, 0x1000, 0x1, 0x2, 0xfffffffffffffff2, 0x3, 0x63, 0x4, 0x7, 0x1})
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r1, 0x800, 0x40, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1000}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_KEY={0x42, 0x30, 0x0, 0x1, [@generic="1a2ccad6f5da8c8d30b1a11af6c3db4e644f15a97b82c1acb7449bd8a4a8b5d0f42e927bf6962a2a9b0625d62f912a8842aa3534ed71", @nested={0x8, 0xf1, 0x0, 0x1, [@nested={0x4, 0xf7}]}]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c0) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x2, 0x3, 0xde0, 0x1) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x9, 0xfffffffffffffffb, 0x3bad42bd, 0x0) (async)
ioctl$auto_X86_IOC_WRMSR_REGS(0xffffffffffffffff, 0xc02063a1, &(0x7f00000002c0)=[0x8, 0x0, 0x1, 0xfffffffd, 0x1, 0x101, 0x9, 0x8]) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x2, 0x6, 0x9, 0x7)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x5, 0x8, 0x3, 0x3) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0xffff, 0x7fffffffffffffff, 0x4, 0x2) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x100000001, 0x0, 0x1, 0x2)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x6, 0x1, 0x6, 0x400) (async)
r3 = getsockopt$auto_SO_PEERPIDFD(r0, 0x5, 0x4d, &(0x7f0000000340)=':$\x80:/\x00', &(0x7f0000000380)=0x4)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000300), r3)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x2, 0x7, 0x0, 0x1) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x4, 0x80000001, 0x4, 0xffffffffffff8954) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x1, 0x1, 0xac, 0x6) (async)
prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x4, 0x5, 0x6, 0x0)

22.1993008s ago: executing program 3 (id=4041):
r0 = socket(0x2, 0x80802, 0x0)
r1 = setfsuid$auto(0xee00)
fchown$auto(r0, r1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x51)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x1, 0x7fff, 0x5, 0x5, 0x9, 0x9, 0x5, 0x1, 0x7f93, 0x0, 0x3f, 0x7ff, 0xd, 0x8})
mmap$auto(0x3, 0x20009, 0x4000000000df, 0x810, 0xffffffffffffffff, 0x7fff)
sethostname$auto(0x0, 0x7)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0xa74066605245cf11, 0x0)
read$auto(r3, 0x0, 0x4)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
write$auto_event_inject_fops_trace(0xffffffffffffffff, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)

22.114845739s ago: executing program 3 (id=4042):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4007)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0x200, 0x3a, 0xffffffffffffffff, 0x3)
sysfs$auto(0x2, 0x10000000000002c, 0x0)
fsopen$auto(0x0, 0x1)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x44bf82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, [{0x6, 0x1, 0x5}]})
r4 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
write$auto_nvmf_dev_fops_fabrics(r4, &(0x7f0000001a40)="fb40e8", 0x3)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SNDCTL_DSP_STEREO(r5, 0xc0045003, 0x0)
r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='1\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d79300000100002006475333e1a000c00fffd0000cd1a6d4a658f0ca45a708bc4615f613c84bcb93643ef3859a39a797b8ca03ef6b682802a271f2dc286d4aedf42ea1d80aa573af4e51b472ab6f01fb8564cea6e90e9eb7f832a8bb5cc1d6201a4aa10646a683d1329317e1655c84bb6db3cb6932f797c498215c4eb2e369ba9e1b35c9b06b89afe0b78b984092bb7417eec64c034ae3451969061f72d2130ea29"], 0x30}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0)
mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff7fff, 0x17)
mmap$auto(0x8000, 0x20009, 0x10000000000df, 0x10, r1, 0x8001)
close_range$auto(r3, r0, 0x4)
inotify_init1$auto(0x3000000000000)
socket$nl_generic(0x11, 0x3, 0x10)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)

20.442561602s ago: executing program 3 (id=4045):
fstat$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x4, 0xe1, 0xfffffffe, <r0=>0xee00, 0x0, 0x0, 0x6, 0x4, 0x0, 0xfffffffffffffff8, 0x4, 0x7, 0xe9, 0x9ecf, 0x3cd, 0x9})
r1 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000000)={@siginfo_0_0={0x1, 0x7, 0x4000000, @_sigchld={<r2=>0x0, r0, 0x9, 0xf, 0x10}}}, 0x10004, &(0x7f0000000080)={{0x8000000000000000}, {0x4, 0xf84a}, 0x72, 0xd7, 0x5, 0xffff, 0x9, 0x10, 0x40, 0x8000000000000000, 0xffffffffffff0000, 0x8, 0xfffffffff1e4a5c8, 0x81, 0x0, 0x5})
r3 = pidfd_open$auto(r1, 0x33)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), 0xffffffffffffffff)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo$auto(r2, r5, 0x0, &(0x7f0000000400)={@_si_pad})
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000017c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="b4120000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf2503000000f000068005001c00000000002c001180040012800c00ae00010001000000000004003f800400598004001680040088000400778004003680b6002d8056e8bd1925fad96028b26f893bbcdbd55286ea5a9b7ee792779578c8ce8ed7292ce3978f73b26a3e27003a42bebec26f81af6a2f569bc09bc74a0e3f442fe9c97352821d3f6ebf8239b9175b116452fca9391ad38167f7dacccf200e442da7329859d3b5a5edd1e0863ce534c6b079e22bcad9de99c2b032a0110c000100c30000000000000008002d00ac14141d0800a100", @ANYRES32=r6, @ANYBLOB="08005e000a01010005002900000000000400ab800400d2800400438000000c00058008003b00", @ANYRES32, @ANYBLOB="fc000980df89a142c2a0f181110590187b15751f85467cbe76f5888566823f051f11ea70d8e8819efe39cc0c8cf44cabe6a55a0d139924005163d4529b4997c5b41e338f34bc00ce35da8e5c4248a8f270d9c0e55b3e59e47879c574de6adebb4d13343e7e4cd4d6852c692c78cae4727af1a84cf5f9beab3b8eee694ac0379b4be18c6495636eabd1f84b1514bec19b893608f0fc9cae51ab544601fe8f4a711720c61406d64e749217e68382595eb96e9bcc4d651769ac33aeeda7c05140c558ace2d7fb34f4abb56164397c3b19e27ce5a3eeadad1bc8b73a5015096920a905df3b41415e15d914002d800400b90008008e00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08000f00ac1414bb08002100", @ANYRES32, @ANYBLOB="100009800c00718008003d00", @ANYRES32=r0, @ANYBLOB="640003800800ff00", @ANYRES32, @ANYBLOB="0800bd00", @ANYRES32=r0, @ANYBLOB="f9a3132f7e6e52260b174d7e111013f8940ae9250ea4acf6ddd3153c4d9bfccc476be6781f517aaa04700e820026301455ffe2fc916458f61b7cda6a050088000000000004009e0008008000", @ANYRES32=r0, @ANYBLOB], 0x12b4}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0xe, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r7 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0xea, 0xd, 0xe}, 0x6a)
sendmmsg$auto(r7, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x2020005, 0x3, 0xeb1, r7, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketcall$auto(0x5, 0x0)

20.170584982s ago: executing program 3 (id=4048):
write$auto(0xca, &(0x7f0000000240)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99>R\xcc\x96\b\'\x02\xb0\x93l\xfc\x87\r\x88\x87\xa2(Q\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80?\x92J\xfdr\x85`\x12\v\x9f\xc6Dbpzt\xb9\xb2\xd7\r\xa72\x1d[\x18\x90\xaaS\xe1\x04i\x05', 0x37)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x83, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x0, 0x8998d60, 0x8000100, 0x7fff, 0x8000105, 0x0, 0x8d6}, {0xbfc7, 0x1, 0x52, 0x8, 0x47304, 0x3d, 0x8, 0x7, 0x8001}})
read$auto(r0, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(r2, r2, 0x0)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
ioctl$auto(r3, 0xc0046209, 0xffffffffffffffff)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, &(0x7f0000000040)="6a0d948a88cd4124fe25587c49596599eec585bffb4475ab20259d5cc08bd3aa7f93c43b0a383fbaa87e2a0cc848d3153aa0eda3c34790387de320")
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10003, 0x0)
lchown$auto(&(0x7f0000000180)='}[,&*}\x00', 0xffffffffffffffff, 0xee00)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x1, 0xecb, 0x9b72, r3, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @host}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)

19.949200112s ago: executing program 3 (id=4050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x6c, r1, 0x1, 0x70bd2d, 0x25dffbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1025}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [@nested={0x40, 0x14b, 0x0, 0x1, [@nested={0x4, 0x69, 0x0, 0x1, [@generic]}, @nested={0x10, 0x21, 0x0, 0x1, [@typed={0x4, 0x158, 0x0, 0x0, @binary}, @generic, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0x5}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040000)
bpf$auto(0x4, &(0x7f0000000000)=@iter_create={r0, 0x6}, 0x9)

15.6542633s ago: executing program 4 (id=4065):
r0 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000714af"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
fadvise64$auto(r0, 0x2, 0x7e5fd099, 0x1)

15.629765533s ago: executing program 4 (id=4066):
mmap$auto(0xc, 0x6, 0xde, 0x9b7e, 0x2, 0x10000008000)
madvise$auto(0x0, 0x3, 0x66)
io_uring_setup$auto(0x386, 0x0)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7)
prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001)
mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000dddbcfc23e16000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894)
fsopen$auto(0x0, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop11\x00', 0x14fe03, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0)
pread64$auto(r4, 0x0, 0x8, 0xffff)
sendmmsg$auto(r3, 0x0, 0x9a5, 0x2a)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x74e, 0x20000a, 0x8)

15.490042628s ago: executing program 4 (id=4067):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0)
mmap$auto(0x0, 0x7fff, 0x7fff, 0x16, 0xfffffffffffffffb, 0x1000000008002)
r0 = socketpair$auto(0x3, 0x18, 0x2400000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/209, 0xd1)
mremap$auto(0x0, 0x4, 0x6, 0xffffffffffffffff, 0x100000000)
r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x210000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd8/queue/max_hw_sectors_kb\x00', 0x80300, 0x0)
sendfile$auto(r2, r2, 0x0, 0x400000000006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40400d4}, 0x404484a)
madvise$auto(0x0, 0xffffffffffff0005, 0x109)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x1, 0x7ff)
ptrace$auto(0xc, r4, 0x6, 0x6)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye6\x00', 0x6e9e2ba8a6911087, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000640)="158f4aabebae9b3e5be44ecf8e55f13c956f60a8067d83e300009bd96a5b2dc48de7e329164a89b08ec701008d7a7ee6971e3976eedc171b68000000000000004700000072a5c88f1b46b20f9be5b6267d954f5e11aa41a8757f1c00efa91895dace005432358b796a0b69c34d5e94bd0000000000000000b7d6c77c322e69d33ee40c86c40d703cf728ea72556df8aeae6ffe1382087bf86eeb732ec32d8cd64d4b15962e61dbf6253786d17f833e3519f7f1c26076db90476d1932b4f74f7c5c19b2ecfbdae442eeb97cad7b8aa8008737752459762f4c9b7901105931c636e1c8be03006e83c830e35432e70cf1e97f0ced6fccc77f237b89616a19458e5ba470a7f4a684e934ba4f13d5118be4a88f3f594ca515f78008149509e01a1ffc6779e19688c1e6e9a1e48c70447e7116385e59d139573a11f70ff85b0917860a1553b5fc98323b3481d282589062d2d4d1de2a91c97d78455743182ccc8d53843134623c2b10d76f804cba0172f053ce8cd725f288dd759450a7e5fc712618ccb783c40f6919989e0a7a287feea860c7454af570fba474ba6183da81d19e92f95ce0d9f5ee31f80000000000000d58d8ff774f4658a4439d9b966cc63e5a6ba3f45e5d34d31b8d8ed982693fcf25d71bdb911ae803ebdc28bdcb195b984192a8b412e0c7ab42b2ed42d0baaea8a621")
memfd_create$auto(&(0x7f0000000280)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x5)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x9)
write$auto(0x3, 0x0, 0x80)
unshare$auto(0x40000080)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="006dd2d5a832d2a80c768b46fa306bed4fda724e0523d531220a104ef896b9792e38941c78f2538b47adfa853b944dbd0e44ef491bb7d333ac111657f5e6dfc8e88b044bf1b79a0ee498e97ae8203f02c3faac5f8275aea1d0288927c6d5631513dcc285db3f847ac32d0a8316b1536300257287d7f6a2e4fbc4a324260a3321fed2f8ebed6d2dec8f03390208db6c968d50a05338ab8195715e809d15b187f657a19272c628ead9786cabb33e0a4712aca0a372a9253d3b988454485b3d51e3e6c28de4cc0a7e66e8", @ANYRES32=r1, @ANYRES32=r5, @ANYRESOCT, @ANYRES8, @ANYRESDEC=r6, @ANYBLOB="0fff5472dd520e7f6e5a25f4fd58f2ed1a83edc6777fa3f5daba92773d76cffbfab10faf2bd4286c4aa40494fc12fbc4985ad77925bd68eefe5b11a94ad0bad610549b5835ec2374c9ac6eecb11fa16635ff9e9bd9cc098e4d641e08db57736ea3a55419870f07684b8e2a642a07ab0bd20f6712aedf79fb1b75ae587e25fcda56a2be8ebc52070e408d1a3b6d493d6c100e3a72aea840094e74903254082bed710e185ce5a23a1f370bc2580d45da7f39748537a8587ae1f49495fa5b2d6a2fd6527cb471960ba7e93c79be34b0d0fd4d4c3162284fe62d4f136a529cefb5cd431ec46dae8337fcbb1327cd53ff6ad95e59a18ffb2198aa"], 0x1ac}}, 0x40000)

14.201381616s ago: executing program 4 (id=4074):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macsec0/bc_forwarding\x00', 0x101201, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x4, &(0x7f0000000000)='/dev/ptyr5\x00', &(0x7f0000000040)="befe514777ef8cebdddaddea2998cbcacb80a09c10242b0df90e2033ce182890e95ad5de00a20eedd64769729e7d44190ede18e89a35522eecc99fb8aed945eda0bdbb285850f92a035296c1e11dff8252e4f10c7a79fca0d06732e7b4c903d636a7f8dc", 0x0)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
pipe$auto(0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyr5\x00', 0x5213c0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
msgctl$auto_MSG_STAT_ANY(0x9, 0xd, &(0x7f0000000b40)={{0x174bac51, <r2=>0xee01, 0xee00, 0x7ff, 0x5, 0x9b, 0x9}, &(0x7f0000000ac0)=0x1, &(0x7f0000000b00)=0x4, 0x6, 0x3, 0x4, 0x401, 0x9, 0xfffa, 0x9, 0x3ff, @raw=0x649, @inferred=0xffffffffffffffff})
fstat$auto(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x5, 0x1, 0xfff, r2, <r3=>0xee00, 0x0, 0x5d20, 0x6, 0x6, 0x8c56, 0x40, 0x5, 0xbd, 0x1000, 0x2, 0xfffffffffffffff8})
lstat$auto(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c80)={0x6, 0x1, 0x3, 0x3, r2, r3, 0x0, 0xffff, 0x79c6ed1f, 0x3e2e0e3c, 0x5, 0x0, 0x0, 0xa, 0xaa7, 0x9, 0x4})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.reset_stats\x00', 0xa801, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
io_uring_setup$auto(0x1, 0x0)
r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40603d10, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
set_tid_address$auto(&(0x7f0000000080)=0x2)
getpgid(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)

13.367934101s ago: executing program 4 (id=4076):
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r0, 0x412, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004)
ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0)
connect$auto(0x3, 0x0, 0x54)
prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyd3\x00', 0x103e81, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x84)
pwrite64$auto(0xc8, 0x0, 0xedef, 0x3)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)

12.272676641s ago: executing program 4 (id=4079):
r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x800, 0x2, 0xffffffffffffffff, 0x10000, 0x9b5)
mmap$auto(0x0, 0x400008, 0x1, 0x9b72, r0, 0x8000)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r1 = bpf$auto(0x9, &(0x7f0000000100)=@task_fd_query={0xffffffffffffffff, <r2=>0xffffffffffffffff, 0x5, 0x1, 0x1, 0x2005, 0xffffffffffffffff, 0x4, 0x4}, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000080)="a5cc5bf37cb8400100da33700f4f541b25b2e8c25a362394b212fd26fba2783de621e9b182580e746f0bfea5e9ea8efc1d2078a8b80417a390666f5e0708c6c131ca49f850f7e18bbea3edffb6d9", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x4}, 0x200}, 0x4000, 0x20000043)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
mmap$auto(0x2, 0x8, 0x2, 0x40ebf, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x62002, 0x0)
r3 = socket(0x2, 0x5, 0x0)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r4, r4, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f00000001c0), 0x10, &(0x7f00000000c0)={0x0, 0xfffd}, 0x7, 0x0, 0x5, 0xb}, 0xa}, 0x8, 0x311)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000)
r5 = epoll_create$auto(0x1)
epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0)
write$auto(0x1, 0x0, 0x80000000)
mprotect$auto(0xc, 0x5, 0x4)

6.753491412s ago: executing program 8 (id=4104):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
mmap$auto(0x0, 0x20009, 0xe2, 0x12, 0x405, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0xd) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000800000003) (async)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000800000003)
connect$auto(0x3, 0x0, 0x55)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xfffc, 0xf2cf, 0x8, 0x7a}, "6a034207c7b82d90b69a39e32176f893fba86c9dd051fcffffff610fc7996e841f3f1561d417ce726b256c36b0b2fd1678e816201cf562367fe659689a588a2e3d84ba165f08873c5000", 0xa})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
connect$auto(0x3, 0x0, 0x54) (async)
connect$auto(0x3, 0x0, 0x54)
prctl$auto_PR_SCHED_CORE_GET(0x2, 0x0, 0x0, 0x401, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f00000000c0)={0x6, &(0x7f0000000040)={0x7f, 0x37, 0x9, @raw=0x800}})

6.391293509s ago: executing program 8 (id=4105):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11)
prctl$auto_PR_SET_TIMERSLACK(0x1d, 0x0, 0x3, 0x0, 0xfa)
fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyu2/power/runtime_status\x00', 0x705680, 0x0)
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)
pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x1c)
mmap$auto(0x0, 0xffffffffffffffff, 0x8, 0x8000000008011, r3, 0x8000)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$auto_F_GETFD(r0, 0x1, 0x6)
r5 = socket(0xa, 0x3, 0x3a)
close$auto(r5)
getdents64$auto(0xffffffffffffffff, 0x0, 0xa)
io_uring_register$auto(r5, 0x8, 0x0, 0x0)
epoll_pwait2$auto(r4, 0x0, 0x3, &(0x7f0000000380)={0x400400000081, 0x8000000000002}, 0x0, 0x7ff6)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r6)
sendmsg$auto_TIPC_NL_MEDIA_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r8 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim7/ports/0/pp_hold\x00', 0x480, 0x0)
r9 = getpgid$auto(0x0)
shmctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000300)={{0x1, <r10=>0xffffffffffffffff, 0x0, 0xfffff000, 0x8, 0x2, 0x2}, 0x9, 0x3, 0x95d, 0x9, @raw=0x3424, @inferred, 0xfff5, 0x0, &(0x7f0000000240)="d5373b12dc20fb950794c7b29cc69662d6192ee8014326d86c1a4b585e30fe1242ba047b07a6f436157ed5965ed494f976928a82d15522b5f28343987c56358c3e37f6e9831d9a7646edc0ccdb37f301fc7f025d75a9fc54957f6af7220351eb4ae3db1df7deecf5f682b336b13aa0ce614e407d4025795632", &(0x7f00000002c0)="c4e9"})
sendmsg$auto_TIPC_NL_PUBL_GET(r5, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r7, @ANYBLOB="100027bd7000fcdbdf25070000000401048011003a002f6465762f7572616e646f6d0000000008003d00", @ANYRES32=r8, @ANYBLOB="0c00fc0002000000000000000400230008006000", @ANYRES32=r9, @ANYBLOB="c900328008009f00", @ANYRES32=r10, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
madvise$auto(0x801, 0x4f46, 0x6)

5.297626923s ago: executing program 8 (id=4107):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1a, 0x2, 0x0)
r0 = prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_tgids\x00', 0x0, 0x0)
close_range$auto(0x0, 0x5, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x7)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000004c0)={0x2, 0x80, 0xffff, 0x80, &(0x7f0000000240), 0xc691, 0x9, 0x80005, @stream_id=0x80007, 0xa004b, 0xc, 0x0})
r2 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x800, 0x0)
read$auto(r2, 0x0, 0xfdef)
openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4200, 0x0)
sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40002300}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xd}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x14)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
arch_prctl$auto(0x1004, 0xe735)
ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0)
writev$auto(r4, &(0x7f0000000340)={0x0, 0x18}, 0x8)
ioctl$auto_UI_SET_FFBIT(r4, 0x4004556b, 0x0)
bpf$auto(0x15, 0x0, 0x0)

5.101496116s ago: executing program 8 (id=4108):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0)
write$auto(r0, &(0x7f0000000000)='y\x8c', 0x2) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (rerun: 64)
add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd)
r1 = prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0xffffffffffffffff, 0x4, 0x7)
mmap$auto(0x0, 0x400008, 0x3, 0x17, r1, 0x8000) (async, rerun: 32)
r2 = socket(0x2b, 0x1, 0x0) (rerun: 32)
bind$auto(r2, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x6)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async)
mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) (async)
timer_create$auto(0x2, 0x0, 0x0) (async, rerun: 32)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0xfffffffffffffffd, 0x83}}, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
memfd_create$auto(0x0, 0xe) (rerun: 32)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 64)
kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) (async, rerun: 64)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
setregid$auto(0xffffffffffffffff, 0x0) (async)
setsockopt$auto(r2, 0x6, 0x22, 0x0, 0x6) (async)
r5 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/comm\x00', 0x303400, 0x0)
sendfile$auto(r1, r5, &(0x7f0000000080)=0x8, 0xd) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/10/node\x00', 0x20800, 0x0)

5.00335366s ago: executing program 8 (id=4109):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x2)
r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/setgroups\x00', 0x183200, 0x0)
pread64$auto(r0, &(0x7f0000000400)=']}%\x00', 0x4, 0x5)
r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0)
ioctl$auto_media_devnode_fops_mc_devnode(r1, 0x80047c05, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dmmidi2\x00', 0x240200, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x8, 0x8000000000000006]}, 0x0)
mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6)
mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x47c9, 0x0)
lsetxattr$auto(&(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', &(0x7f0000000180)="e3611907f681c4b5b30f62c964aa9453e130d0e3334ef1f80d83a1c80656b6b3346dd1b6bc3f5adcc19ec996cba6c109ac083cea9265a286670f4139ffac8f7448483416671177137cfeaf80478cadd8cc806e4df46687f96a3d0bcd83a8370e212c02254db6b78a8f215c7b1f2bd9f68bc9a1f961f85a26dda37969184d1425b1d7647ca3a0b1e13dbab74cafc949fa5aa106aa8f17", 0x3, 0x2)

4.977454641s ago: executing program 45 (id=4050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x6c, r1, 0x1, 0x70bd2d, 0x25dffbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1025}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [@nested={0x40, 0x14b, 0x0, 0x1, [@nested={0x4, 0x69, 0x0, 0x1, [@generic]}, @nested={0x10, 0x21, 0x0, 0x1, [@typed={0x4, 0x158, 0x0, 0x0, @binary}, @generic, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0x5}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040000)
bpf$auto(0x4, &(0x7f0000000000)=@iter_create={r0, 0x6}, 0x9)

4.152222592s ago: executing program 8 (id=4114):
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f00000001c0)={0x2, 0x3, 0x2000045}) (async)
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000280)="4c0300000000000000a36704000000000000c000861c920b5d7527fed9045368a92dd4e5dd2492ed9747eb50b11f50b952d6365e5be5d56c1d47a23d15f33c9241527d594baa84583ae3b744e122f3075c487bd98ee6f2b0be2c105d2702e96a7140fb41762de53fcf92f8cacea0134e378eb50552fb67242dc3d09e8a340667cd52f745dcd4db08a242b93882849b13b6dc4c6908324273ba1f2a982f76c5783b5117b1a41289dd413033c709837c27a6f840", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}}, 0x5, 0x100)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
r2 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x4) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) (async)
r4 = socket(0x1d, 0x2, 0x7)
bind$auto(r4, &(0x7f0000000000)=@nl=@unspec, 0x6) (async)
r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x0, 0x0)
read$auto_proc_single_file_operations_base(r5, &(0x7f0000000ac0)=""/4096, 0x1000) (async)
ioctl$auto_MEMGETOOBSEL(r1, 0x80c84d0a, 0x0)

2.687254245s ago: executing program 1 (id=4118):
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) (async)
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x9f91, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r1 = socket(0x28, 0x1, 0x0)
setsockopt$auto(r1, 0x28, 0x1, 0x0, 0x8) (async)
close_range$auto(r0, 0x8, 0x0) (async)
socket(0x2b, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x5, 0x1, 0x0) (async)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="d80c0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72000014001c0000000000000000000000ffffe000000100"], 0xcd8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0xfff, 0xa0009, 0x4000000000db, 0xeb1, r2, 0x8000) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x200, 0x0) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004894}, 0x4000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95)
sendfile$auto(r5, r5, 0x0, 0x1)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0)

2.625878452s ago: executing program 1 (id=4119):
r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
setsockopt$auto_SO_PASSPIDFD(r0, 0x1, 0x4c, &(0x7f0000000040)='}^\x00', 0x8)
mmap$auto(0xd1, 0x1, 0x553c, 0x16, r0, 0x97a)
r1 = socket(0x26, 0x2, 0x91)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = signalfd$auto(r1, &(0x7f00000000c0), 0x4)
r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000140), r2)
sendmsg$auto_NET_DM_CMD_STATS_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x7f}, @NET_DM_ATTR_HW_DROPS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
mkdir$auto(&(0x7f0000000240)='./file0\x00', 0x8)
rt_sigprocmask$auto_SIG_BLOCK(0x0, &(0x7f0000000280)={0xfffffffffffffff8}, &(0x7f00000002c0)={0x1}, 0x8)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0x1c, 0x7, "76f85c0b7217c64977963518807311d051205c1d89462193"}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x20000800)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={"478a951ed4207892e7f14620b071680ae80d8b4ca4c8931928591253ee3b6c3d", 0x100, 0x8, 0x7, 0x80000001, 0x7, <r5=>0x0})
fcntl$auto_F_SETOWN(r0, 0x8, r5)
r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/oom_adj\x00', 0x240400, 0x0)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000500), r1)
r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0)
sendfile$auto(r2, r7, &(0x7f0000000580)=0xa948, 0x4e17)
ioctl$auto_VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000005c0)={0x5, <r8=>r6})
r9 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000680)={0x4d4, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0xfa}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x400}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x401}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffff}, @NLBL_CIPSOV4_A_MLSLVL={0x27, 0x7, 0x0, 0x1, [@generic="bb8b58a6f548d805f69614ad56db0034b25ae08e3d7b2842c6f1daf005f9b6eed46776"]}, @NLBL_CIPSOV4_A_TAGLST={0x45e, 0x4, 0x0, 0x1, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0xc2}]}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0x2}, @nested={0x27c, 0x9, 0x0, 0x1, [@typed={0xc, 0x112, 0x0, 0x0, @u64=0xfffffffffffffff8}, @generic="1b0c81f40507c43de2318ef76122d8491b839b6ad30fb682a965050e2a036c34778fa65afff4b1d5849e37bf6c8e300e3e00d505399f77de3d44cb82cd322620a87a7bafcde5b3a9b3924a703fc4f9c1553f2457a660374a455e1a3f931b457bb9d793a9576cb9df2e9a4a22d827d304c819fd63e6cdc9818e20f1b559755dbe990c9363218ed63c3a2db80d0e5f7cda9134373c1316c8bc665dad192b4c4d59318f4b8f5700acfbbd7377d4b31470a7c042756dff410d5d9597c935829345d2fd7869854b68757faf650be42a15f9dc16d9f7cc38416b45b742a548eac060f13d3c0b45193a", @nested={0x4, 0x1a}, @typed={0x4, 0x9d}, @generic="0ff7abf25e914319ba2cc7a7ef74a09297e0e71ca7bf2bc69b75d26626a76848b86610dab5b7d34d16a03191f8bba0ac24ca6c068b95be16d2539a33f0c28d5d70f18ab7130be2f9bb8f516bfd787392e4f5d3a9806033228f8106656d9f36ada995399da445785f0a03ffdca1962f19d0a3d3b3f92acbd65f0a77ee21e0f2a1cf49501ea6e4688cbd2816af1d5ca806ef6318765539ddc56b1bd819512e3dc5b3664da5de4a16a9bb79458101fd4aa853965b13d0e109d5a54aac6a73ded9b1ac00684fb93d7b", @typed={0xc, 0xf2, 0x0, 0x0, @u64=0x800}, @nested={0x4, 0x1d}, @generic="8894af4a7f84acc995b23b6212ddc003aacc0c7a053cdcb09c11fff21b475827ec55b6d2afbff649f30f0ce473672356bebd4afef5725bf3340b6f0c76053bb3284c8f298e1a7c2885d5aa032b47d206d378e5d71c2dfb7d71ee14b414bc99e2ff2c94ece7530ee346d4834f33dca065b43f302538870af96898ecb9118bb2ef2b84b2594f81f13aa081b84bbc46094a868a0e6f3454303d8918c454a83797618b42ee3b862c21"]}, @nested={0x15f, 0x8a, 0x0, 0x1, [@typed={0x87, 0x70, 0x0, 0x0, @binary="4d043015996e9052956b139e98ea3d65553cd7bfc03ad890f3ffc0503b416b2b2cadcd1db0328ddc3d9779cae9ded92e31f89394e23e17d7301058df04339038a17323385349cf1740cae0d71265f85cc0b3e0fca4b013f859ecb2e75dd05038d75de17d22c57f511e9c520c4fb1de225d6fe8fca5ac385fcf3e77826322cd2e3ae9d2"}, @generic="6c4cda512d47e1fb120cf01acc57886d9f0f81cd98ddf2bc727ded0172e97e40e8e1194649cffe94d925650fc9d0d6f23e7f75adc51fba20e107d715ac279c91497f0861d0b7788aa057197ff7e939f3079193017419566027bc9f68eff4dd615485cbe03df6ae34dedd222c49b97f26e86626d53b3de56c7aac5c4caecb2abc4ca77e97225d0b13cf0b958338a43efc2aa5b043dd629c70583bb4605769f16197d2734a650d418b3725bb3f91242fab86e79771cd4766ec590f42b13ee61e", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@private2}]}, @generic="f048c5b73ed926de22094bf1009f30fe1e04a2c68d2c7d4093938c06ea79272ad90670e5e3b632f3f6618adeba0f011dcec24b7500d4cf75aa5d8c75c796ed3aa901225e8d9c87bfc9ed822a", @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xba}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@local}]}, @generic="bddad47aecce46fed8cd"]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000050)
r10 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000c40), r8)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r10, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r11 = prctl$auto(0xff, 0x0, r5, 0x288f95fe, 0xb55)
fcntl$auto_F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x5)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r11, 0xfffffffb, &(0x7f0000000d40)='+\xe3,$%-\\$}+\x00', &(0x7f0000000d80)="5fc9f4dba623557e7ef2d20be5b28b838e0e1f1fd756b8c6375f4c34004ab6e1ad4dad8f4ee35779b4cf002eda8f46121f3ed31fe55f2230c1d32c73b5900bf43a7c42b26888c1c29c29e6dea852ffae664c514977d510a38811e21e305efd6ef6478ff1ccb8a190fa77619c9ef4a1e06d0571411c523141eaac6d3af6f46573d28b991a410f5628d42d666a551d4f58d246a58e888dd28f322a19a3591005c893858d7f8be81464f53df9667f4ba3ad8863af0f5abbc806a8b78516dab4b13c893d6151", 0x80)
r12 = prctl$auto_PR_SET_VMA_ANON_NAME(0x40, 0x0, 0xffffffffffffffff, 0x2, 0x8)
ioctl$auto_X86_IOC_RDMSR_REGS(r12, 0xc02063a0, &(0x7f0000000e80)=[0xdbb, 0x80000000, 0xfffffffe, 0x8000, 0x8, 0x7, 0x40, 0x80000000])
io_uring_register$auto_IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000ec0)="79be3710417e65f23f85014cce5edd6d3b72ed28aaefed5412ccff7bd554e1a209f81f61c6fcb77affa82cb229bd2630679c3bd238c0050ba087b6f3cc12a3726ebd04570f234b50", 0x80000001)
mremap$auto(0x8001, 0xb8, 0x2, 0xa, 0x5)

2.530667515s ago: executing program 1 (id=4120):
r0 = socket(0x11, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r1)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
r3 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x13, 0x0, 0x25, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080)
r7 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(r7, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r3)
sendmmsg$auto(r0, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio27/dev_debug\x00', 0xb02, 0x0)
timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x8000)

2.256157141s ago: executing program 1 (id=4121):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0xfffffffffffffffd, 0x4, 0x2a) (async)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4) (async)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)
sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) (async)
mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) (async)
epoll_create$auto(0x4) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyyb\x00', 0x0, 0x0) (async)
socket(0x2, 0x1, 0x106) (async)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) (async)
select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x1, 0x948b, 0x2, 0x95f4da0a, 0x7f3, 0xe07, 0x8000000000000001, 0x2a61, 0x6, 0x101, 0x9, 0x6, 0x4]}, 0x0) (async)
write$auto(r3, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9)
select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff02c}}) (async)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) (async)
r4 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0)
io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r4, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)

1.547202456s ago: executing program 1 (id=4122):
io_uring_setup$auto(0x1d48, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
select$auto(0x5, 0x0, 0x0, &(0x7f00000011c0)={[0x0, 0x401, 0xdd36, 0x8fd3, 0x948b, 0xd, 0xf, 0x3, 0x2, 0x5dc5, 0x878c, 0x3, 0x1, 0x9, 0x1]}, 0x0)
r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0xfd1ab101a01c344a, 0x0)
readv$auto(r0, &(0x7f0000001180)={&(0x7f0000000000), 0x2}, 0x6)
r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x8000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
open(0x0, 0x200080, 0x80)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0)
mq_open$auto(0x0, 0x4000003, 0xfffc, 0x0)
ioctl$auto(r4, 0x3b8e, r3)
write$auto(0x3, 0x0, 0xfdef)
execve$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='[:\x00', &(0x7f00000001c0)=&(0x7f0000000180)='])\x00')

1.524517337s ago: executing program 7 (id=4110):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
mlockall$auto(0x7) (rerun: 64)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32)
shmget$auto(0x2, 0x10569, 0xffffff80) (rerun: 32)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async)
unshare$auto(0x7)

700.448914ms ago: executing program 1 (id=4123):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0xfffff03b, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l', @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x2040810}, 0x810)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x325d42, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x3, 0x8, 0xfff)
r1 = socket(0x11, 0x1, 0x106)
bind$auto(r1, 0x0, 0x6a)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x4)
r2 = open(0x0, 0x90400, 0x72)
socket(0x2, 0x801, 0xff)
read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x0)
madvise$auto(0x0, 0x600006, 0x19)
arch_prctl$auto_ARCH_GET_GS(0x1004, 0x8000000000000000)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r0, 0x4138ae84, &(0x7f0000000040)={0x7, 0x179, [{0x8, 0x6}, {0x5, 0x1, 0x4}]})
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

351.188466ms ago: executing program 7 (id=4124):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x28, 0x1, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2b, 0x1, 0x1)
arch_prctl$auto(0x4, 0x3)
r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000180)="c4484027d828120f57cd8cc438c2c390b1d5a62b57628e7351b768d6d679b450b53bd7c6fe7d4570dd878bc4bae003b2890fb024fa61c185091a73ec191acb51f29b119d2cdae76e7b3e9c07b57ddc6273a7c4d76ef780291aa3a0b2a20f7fc3b9566c962c5b059cf5ea9f7275582241979237a8509b68e26da85316283195e116c782d2545fa237e55f372445dc0a06cdde2007ede89233ad41191e32474ed0aa42ba6e834946b1964147f6cab2fed68ed88f987a7f3ded11cc41fa9952474419", 0x10, &(0x7f0000000280)="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", 0x3, &(0x7f0000000380)="d2aab14935718906c0ef5293ccbf4959deb21c90a066298d6b678dcd750e10f7e48785fb8cae4083c3edfcc3a1a6ff602a1bceaac6d7711b531803c155da9ee297ba26f83a45f399ac55076fa885f32cc8d4db38d9016d9c1950a61b3f650ffff0fd418960a18ba3bfda56e00329bdf01dfc1dfb626667fa392b629f537c5fe8", &(0x7f0000000400)=0xff}, {[0x400, 0x2, 0x100, 0x7ff]}, 0x5, 0x0, &(0x7f0000000440)="ce965c9a701746305497814fe209e1983a80cba79c9e4f3df2ebf5603221f6775a44334911d3f650e0489d1e0d56b577d1cd136d2f98889e9796b701e19847522f73e38804b1b89917"})
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x402, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x2028009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1d, 0x2, 0x2)
r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000002440)='/proc/stat\x00', 0x0, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000002480)=""/106, 0x6a)
setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8)

83.048999ms ago: executing program 7 (id=4125):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r4, 0x114, 0x2716, 0xfffffffffffffffc, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x200, 0x4}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/scsi/sg/version\x00', 0x141000, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/174, 0xae)
ioctl$auto_XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000040)={0x8, 0x9, 0x33120c7e, 0x81, 0x1, 0xfffffff5, 0x7fffffff, 0x3, 0x5, 0x7, 0xb4, 0x0, "a1b19e51b2275acbc69e7c469d352299", 0x3, 0x0, 0x4, 0xffffff6d, 0x400, 0x8, 0x8, 0x3})
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, <r6=>0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r6, 0x3, 0x81, @kprobe_multi={0x4, 0x3, 0xfffffffffffffe01, 0x6, 0x4}}, 0x81)
socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8af}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x4)

0s ago: executing program 7 (id=4126):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x100000000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, 0x0, 0x6a) (async)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x52c3, &(0x7f00000000c0)="285c3c1d5d40043d560c16c7adaeee007a46c3e7bd7c94185d7775") (async, rerun: 32)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) (async, rerun: 32)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 64)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) (rerun: 64)
pread64$auto(r3, 0x0, 0x3, 0xe9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async)
r4 = timerfd_create$auto(0x1, 0x0)
timerfd_settime$auto(r4, 0x0, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
socket(0xa, 0x2, 0x0) (async)
listmount$auto(&(0x7f0000000080)={0x8, @inferred=r1, 0x9, 0x800003, 0x8}, 0x0, 0x9, 0x4)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async)
sendmmsg$auto(0x3, 0x0, 0x986, 0xe03f)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73)

kernel console output (not intermixed with test programs):

.843696][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1137.843714][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1137.843730][T26087]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1137.843747][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1137.843767][T26087]  ? alloc_pages_mpol+0x25a/0x540
[ 1137.843785][T26087]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1137.843804][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1137.843819][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1137.843834][T26087]  __kvmalloc_node_noprof+0x3f6/0xa60
[ 1137.843848][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1137.843865][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1137.843882][T26087]  ? _copy_from_user+0x59/0xd0
[ 1137.843905][T26087]  ? copy_mnt_id_req+0x1b1/0x350
[ 1137.843920][T26087]  __do_sys_listmount+0x289/0xee0
[ 1137.843938][T26087]  ? __pfx_do_futex+0x10/0x10
[ 1137.843951][T26087]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1137.843968][T26087]  ? __pfx___do_sys_listmount+0x10/0x10
[ 1137.843990][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1137.844005][T26087]  do_syscall_64+0x115/0x840
[ 1137.844019][T26087]  ? clear_bhb_loop+0x40/0x90
[ 1137.844035][T26087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1137.844050][T26087] RIP: 0033:0x7f5e5639ce59
[ 1137.844064][T26087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1137.844079][T26087] RSP: 002b:00007f5e572e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[ 1137.844095][T26087] RAX: ffffffffffffffda RBX: 00007f5e56616090 RCX: 00007f5e5639ce59
[ 1137.844105][T26087] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100
[ 1137.844115][T26087] RBP: 00007f5e56432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1137.844124][T26087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1137.844133][T26087] R13: 00007f5e56616128 R14: 00007f5e56616090 R15: 00007ffdd8ffd448
[ 1137.844147][T26087]  </TASK>
[ 1137.845337][T26087] syz.7.3760: vmalloc error: size 6164960, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null)
[ 1138.713789][T26120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3764'.
[ 1139.390104][T13208] Bluetooth: hci6: command tx timeout
[ 1139.437903][T26087] ,cpuset=/,mems_allowed=0-1
[ 1139.464175][T26087] CPU: 0 UID: 0 PID: 26087 Comm: syz.7.3760 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1139.464201][T26087] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1139.464207][T26087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1139.464217][T26087] Call Trace:
[ 1139.464222][T26087]  <TASK>
[ 1139.464227][T26087]  dump_stack_lvl+0x100/0x190
[ 1139.464248][T26087]  warn_alloc.cold+0x94/0xa8
[ 1139.464263][T26087]  ? __pfx_warn_alloc+0x10/0x10
[ 1139.464286][T26087]  ? __get_vm_area_node+0x2cd/0x330
[ 1139.464305][T26087]  ? __get_vm_area_node+0x208/0x330
[ 1139.464323][T26087]  __vmalloc_node_range_noprof+0xccd/0x1630
[ 1139.464342][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1139.464359][T26087]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1139.464377][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1139.464396][T26087]  ? alloc_pages_mpol+0x25a/0x540
[ 1139.464414][T26087]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1139.464434][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1139.464449][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1139.464465][T26087]  __kvmalloc_node_noprof+0x3f6/0xa60
[ 1139.464480][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1139.464497][T26087]  ? __do_sys_listmount+0x289/0xee0
[ 1139.464514][T26087]  ? _copy_from_user+0x59/0xd0
[ 1139.464542][T26087]  ? copy_mnt_id_req+0x1b1/0x350
[ 1139.464558][T26087]  __do_sys_listmount+0x289/0xee0
[ 1139.464576][T26087]  ? __pfx_do_futex+0x10/0x10
[ 1139.464589][T26087]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1139.464608][T26087]  ? __pfx___do_sys_listmount+0x10/0x10
[ 1139.464630][T26087]  ? rcu_is_watching+0x12/0xc0
[ 1139.464645][T26087]  do_syscall_64+0x115/0x840
[ 1139.464661][T26087]  ? clear_bhb_loop+0x40/0x90
[ 1139.464677][T26087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.464691][T26087] RIP: 0033:0x7f5e5639ce59
[ 1139.464704][T26087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.464719][T26087] RSP: 002b:00007f5e572e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[ 1139.464734][T26087] RAX: ffffffffffffffda RBX: 00007f5e56616090 RCX: 00007f5e5639ce59
[ 1139.464744][T26087] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100
[ 1139.464753][T26087] RBP: 00007f5e56432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1139.464763][T26087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1139.464772][T26087] R13: 00007f5e56616128 R14: 00007f5e56616090 R15: 00007ffdd8ffd448
[ 1139.464786][T26087]  </TASK>
[ 1139.464806][T26087] Mem-Info:
[ 1140.012912][T26087] active_anon:65258 inactive_anon:97 isolated_anon:0
[ 1140.012912][T26087]  active_file:1956 inactive_file:58638 isolated_file:0
[ 1140.012912][T26087]  unevictable:768 dirty:495 writeback:0
[ 1140.012912][T26087]  slab_reclaimable:13071 slab_unreclaimable:105749
[ 1140.012912][T26087]  mapped:46535 shmem:29686 pagetables:1865
[ 1140.012912][T26087]  sec_pagetables:0 bounce:0
[ 1140.012912][T26087]  kernel_misc_reclaimable:0
[ 1140.012912][T26087]  free:1189130 free_pcp:24702 free_cma:0
[ 1140.224641][T26087] Node 0 active_anon:241164kB inactive_anon:388kB active_file:7824kB inactive_file:234368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:198264kB dirty:1976kB writeback:0kB shmem:96352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:7172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1140.355019][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1140.368944][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1140.376345][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1140.383767][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1140.394172][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1140.671683][T26087] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1140.923852][T26087] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1141.037223][T26087] lowmem_reserve[]: 0 2477 2478 2478 2478
[ 1141.058823][T26087] Node 0 DMA32 free:806836kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:197320kB inactive_anon:304kB active_file:7824kB inactive_file:234372kB unevictable:1536kB writepending:2016kB zspages:688kB present:3129332kB managed:2536676kB mlocked:0kB bounce:0kB free_pcp:109580kB local_pcp:109580kB free_cma:0kB
[ 1141.170294][T26087] lowmem_reserve[]: 0 0 1 1 1
[ 1141.196726][T26087] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1141.307443][T26087] lowmem_reserve[]: 0 0 0 0 0
[ 1141.329500][T26087] Node 1 Normal free:3942976kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1141.420509][T26141] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.430876][T26087] lowmem_reserve[]: 0 0 0 0 0
[ 1141.440412][T26141] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1141.449052][T26087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1141.463924][T13208] Bluetooth: hci6: command tx timeout
[ 1141.475717][T26141] bridge_slave_0: entered allmulticast mode
[ 1141.494771][T26087] Node 0 DMA32: 7216*4kB (UME) 2791*8kB (UME) 221*16kB (UM) 610*32kB (UME) 716*64kB (ME) 443*128kB (ME) 193*256kB (UME) 104*512kB (UME) 93*1024kB (UME) 3*2048kB (M) 104*4096kB (M) = 806792kB
[ 1141.516425][T26141] bridge_slave_0: entered promiscuous mode
[ 1141.529928][T26141] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1141.546347][T26141] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1141.556686][T26087] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1141.573338][T26141] bridge_slave_1: entered allmulticast mode
[ 1141.588098][T26141] bridge_slave_1: entered promiscuous mode
[ 1141.597846][T26087] Node 1 Normal: 8*4kB (UM) 10*8kB (UM) 11*16kB (UM) 9*32kB (UM) 12*64kB (UM) 8*128kB (UM) 9*256kB (UM) 6*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 959*4096kB (UM) = 3942976kB
[ 1141.643443][T26141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1141.655779][T26087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1141.676125][T26141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1141.687118][T26087] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1141.710346][T26087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1141.739182][T26141] team0: Port device team_slave_0 added
[ 1141.746318][T26087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1141.763533][T26141] team0: Port device team_slave_1 added
[ 1141.772322][T26087] 76578 total pagecache pages
[ 1141.790191][T26087] 73 pages in swap cache
[ 1141.802923][T26087] Free swap  = 111864kB
[ 1141.814988][T26141] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1141.823804][T26087] Total swap = 124996kB
[ 1141.832178][T26087] 2097051 pages RAM
[ 1141.839259][T26141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1141.866939][T26087] 0 pages HighMem/MovableOnly
[ 1141.876288][T26087] 431002 pages reserved
[ 1141.885167][T26087] 0 pages cma reserved
[ 1141.921579][T26141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1141.957419][T26141] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1142.001147][T26141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1142.084926][T26141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1142.194739][T26141] hsr_slave_0: entered promiscuous mode
[ 1142.214440][T26141] hsr_slave_1: entered promiscuous mode
[ 1142.237151][T26141] debugfs: 'hsr0' already exists in 'hsr'
[ 1142.259842][T26141] Cannot create hsr debugfs directory
[ 1142.417450][T13208] Bluetooth: hci7: command tx timeout
[ 1142.591596][T26141] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1142.620342][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1142.640585][T26141] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1142.661177][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1142.684235][T26141] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1142.712780][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1142.736971][T26141] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1142.755843][T26141] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1142.942390][T26141] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1142.994075][T26141] 8021q: adding VLAN 0 to HW filter on device team0
[ 1143.033690][T16515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1143.040834][T16515] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1143.101942][T16515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1143.109082][T16515] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1143.175332][T26141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1143.909821][T26141] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1144.486296][T13208] Bluetooth: hci7: command tx timeout
[ 1144.826816][T26141] veth0_vlan: entered promiscuous mode
[ 1144.875125][T26141] veth1_vlan: entered promiscuous mode
[ 1144.958549][T26141] veth0_macvtap: entered promiscuous mode
[ 1145.008076][T26141] veth1_macvtap: entered promiscuous mode
[ 1145.159497][T26141] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1145.208319][T26141] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1145.257383][T16510] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.278006][T16510] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.313790][T16510] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.339507][T16510] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.411230][T16510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1145.438654][T16510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1145.472202][T16510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1145.490275][T16510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1145.683656][T26292] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1145.794227][T26294] FAULT_INJECTION: forcing a failure.
[ 1145.794227][T26294] name failslab, interval 1, probability 0, space 0, times 0
[ 1145.821243][T26294] CPU: 0 UID: 0 PID: 26294 Comm: syz.7.3787 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1145.821273][T26294] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1145.821279][T26294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1145.821295][T26294] Call Trace:
[ 1145.821301][T26294]  <TASK>
[ 1145.821307][T26294]  dump_stack_lvl+0x100/0x190
[ 1145.821327][T26294]  should_fail_ex.cold+0x5/0xa
[ 1145.821345][T26294]  ? __kmalloc_cache_noprof+0x53/0x6e0
[ 1145.821372][T26294]  should_failslab+0xc2/0x120
[ 1145.821390][T26294]  __kmalloc_cache_noprof+0x7a/0x6e0
[ 1145.821411][T26294]  ? blk_alloc_queue_stats+0x3f/0x110
[ 1145.821432][T26294]  ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0
[ 1145.821447][T26294]  ? blk_alloc_queue+0x31/0x790
[ 1145.821531][T26294]  blk_alloc_queue_stats+0x3f/0x110
[ 1145.821552][T26294]  blk_alloc_queue+0xda/0x790
[ 1145.821575][T26294]  blk_mq_alloc_queue+0x174/0x290
[ 1145.821591][T26294]  ? __pfx_blk_mq_alloc_queue+0x10/0x10
[ 1145.821611][T26294]  ? blk_mq_alloc_tag_set+0xe2c/0x1330
[ 1145.821629][T26294]  __blk_mq_alloc_disk+0x29/0x120
[ 1145.821646][T26294]  loop_add+0x498/0xb60
[ 1145.821664][T26294]  ? __pfx_loop_add+0x10/0x10
[ 1145.821683][T26294]  ? rcu_is_watching+0x12/0xc0
[ 1145.821698][T26294]  ? __fget_files+0x215/0x3d0
[ 1145.821718][T26294]  loop_control_ioctl+0xae/0x620
[ 1145.821734][T26294]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1145.821752][T26294]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1145.821769][T26294]  __x64_sys_ioctl+0x18e/0x210
[ 1145.821785][T26294]  do_syscall_64+0x115/0x840
[ 1145.821802][T26294]  ? clear_bhb_loop+0x40/0x90
[ 1145.821818][T26294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.821833][T26294] RIP: 0033:0x7f5e5639ce59
[ 1145.821855][T26294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1145.821870][T26294] RSP: 002b:00007f5e57303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1145.821886][T26294] RAX: ffffffffffffffda RBX: 00007f5e56615fa0 RCX: 00007f5e5639ce59
[ 1145.821896][T26294] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008
[ 1145.821907][T26294] RBP: 00007f5e56432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1145.821917][T26294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1145.821926][T26294] R13: 00007f5e56616038 R14: 00007f5e56615fa0 R15: 00007ffdd8ffd448
[ 1145.821941][T26294]  </TASK>
[ 1146.123444][T26297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3788'.
[ 1146.383824][T26309] netlink: 'syz.8.3789': attribute type 2 has an invalid length.
[ 1146.556690][T13208] Bluetooth: hci7: command tx timeout
[ 1147.448661][T26339] openvswitch: netlink: Key type 99 is out of range max 32
[ 1147.677005][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3798'.
[ 1148.338776][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1148.347157][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1148.355411][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1148.365289][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1148.376996][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1148.626863][ T5625] Bluetooth: hci7: command tx timeout
[ 1149.889542][T26376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.917329][T26376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.956893][T26376] bridge_slave_0: entered allmulticast mode
[ 1149.979814][T26376] bridge_slave_0: entered promiscuous mode
[ 1149.999325][T26376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.030732][T26376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.053383][T26376] bridge_slave_1: entered allmulticast mode
[ 1150.073332][T26376] bridge_slave_1: entered promiscuous mode
[ 1150.132811][T26376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1150.180605][T26376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1150.247559][T26376] team0: Port device team_slave_0 added
[ 1150.277161][T26376] team0: Port device team_slave_1 added
[ 1150.341653][T26376] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1150.371049][T26376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.458384][ T5625] Bluetooth: hci8: command tx timeout
[ 1150.463897][T26376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1150.506466][T26376] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1150.531403][T26376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.623314][T26376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.729026][T26376] hsr_slave_0: entered promiscuous mode
[ 1150.750293][T26376] hsr_slave_1: entered promiscuous mode
[ 1150.776100][T26376] debugfs: 'hsr0' already exists in 'hsr'
[ 1150.798616][T26376] Cannot create hsr debugfs directory
[ 1151.116152][T26376] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1151.149852][T26376] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1151.178554][T26376] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1151.201332][T26376] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1151.224211][T26376] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1151.256361][T26376] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1151.282423][T26376] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1151.310980][T26376] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1151.450536][T26376] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.494384][T26376] 8021q: adding VLAN 0 to HW filter on device team0
[ 1151.525801][T24742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.532950][T24742] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1151.582948][T16515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.590073][T16515] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.065323][T26376] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1152.312207][T26376] veth0_vlan: entered promiscuous mode
[ 1152.332145][T26376] veth1_vlan: entered promiscuous mode
[ 1152.372607][T26376] veth0_macvtap: entered promiscuous mode
[ 1152.391598][T26376] veth1_macvtap: entered promiscuous mode
[ 1152.416207][T26376] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1152.439523][T26376] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1152.463086][T16515] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.480285][T16515] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.511392][T16515] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.526581][T16515] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.535829][ T5625] Bluetooth: hci8: command tx timeout
[ 1152.621019][T16508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1152.640020][T16508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.678911][T16508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1152.700463][T16508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1153.174486][T26478] futex_wake_op: syz.9.3801 tries to shift op by -2048; fix this program
[ 1153.192603][T26478] futex_wake_op: syz.9.3801 tries to shift op by -2048; fix this program
[ 1154.275457][T26510] blktrace: Concurrent blktraces are not allowed on nbd5
[ 1154.598419][ T5625] Bluetooth: hci8: command tx timeout
[ 1156.528853][T26536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3830'.
[ 1156.548728][T26536] virt_wifi0: entered allmulticast mode
[ 1156.669170][ T5625] Bluetooth: hci8: command tx timeout
[ 1156.683916][ T5625] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18
[ 1156.691575][ T5625] Bluetooth: hci8: Invalid handle: 0x3a4a > 0x0eff
[ 1156.716475][T26535] Process accounting resumed
[ 1157.871351][T26547] smc: net device dummy0 applied user defined pnetid DUMMY0
[ 1158.902586][T26557] random: crng reseeded on system resumption
[ 1158.927088][T26557] hub 1-0:1.0: USB hub found
[ 1158.933693][T26557] hub 1-0:1.0: 1 port detected
[ 1159.142715][T26561] sctp: [Deprecated]: syz.9.3837 (pid 26561) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1159.142715][T26561] Use struct sctp_sack_info instead
[ 1159.654419][T26566] FAULT_INJECTION: forcing a failure.
[ 1159.654419][T26566] name failslab, interval 1, probability 0, space 0, times 0
[ 1159.685603][T26566] CPU: 0 UID: 0 PID: 26566 Comm: syz.9.3838 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1159.685633][T26566] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1159.685639][T26566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1159.685656][T26566] Call Trace:
[ 1159.685661][T26566]  <TASK>
[ 1159.685667][T26566]  dump_stack_lvl+0x100/0x190
[ 1159.685688][T26566]  should_fail_ex.cold+0x5/0xa
[ 1159.685704][T26566]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1159.685720][T26566]  should_failslab+0xc2/0x120
[ 1159.685736][T26566]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1159.685751][T26566]  ? __proc_create+0x2cb/0x8c0
[ 1159.685770][T26566]  ? lock_release+0x24d/0x310
[ 1159.685791][T26566]  __proc_create+0x2cb/0x8c0
[ 1159.685811][T26566]  ? __pfx___proc_create+0x10/0x10
[ 1159.685832][T26566]  ? _raw_write_unlock+0x28/0x50
[ 1159.685846][T26566]  ? proc_register+0x559/0x8a0
[ 1159.685866][T26566]  proc_create_reg+0x75/0x170
[ 1159.685890][T26566]  proc_create_data+0x86/0x110
[ 1159.685911][T26566]  ? __pfx_proc_create_data+0x10/0x10
[ 1159.685933][T26566]  ? cache_register_net+0x137/0x5e0
[ 1159.685956][T26566]  ? lock_release+0x24d/0x310
[ 1159.685975][T26566]  cache_register_net+0x25a/0x5e0
[ 1159.685996][T26566]  gss_svc_init_net+0x98/0x640
[ 1159.686014][T26566]  ? __pfx_canbcm_pernet_init+0x10/0x10
[ 1159.686034][T26566]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1159.686052][T26566]  ops_init+0x1e2/0x5f0
[ 1159.686075][T26566]  setup_net+0x118/0x3a0
[ 1159.686095][T26566]  ? __pfx_setup_net+0x10/0x10
[ 1159.686115][T26566]  ? mutex_init_lockdep+0xf1/0x120
[ 1159.686136][T26566]  copy_net_ns+0x46f/0x7c0
[ 1159.686150][T26566]  create_new_namespaces+0x3ea/0xac0
[ 1159.686174][T26566]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1159.686196][T26566]  ksys_unshare+0x438/0xab0
[ 1159.686213][T26566]  ? __pfx_ksys_unshare+0x10/0x10
[ 1159.686231][T26566]  __x64_sys_unshare+0x31/0x40
[ 1159.686247][T26566]  do_syscall_64+0x115/0x840
[ 1159.686262][T26566]  ? clear_bhb_loop+0x40/0x90
[ 1159.686278][T26566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.686293][T26566] RIP: 0033:0x7fe8e3b9ce59
[ 1159.686306][T26566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1159.686324][T26566] RSP: 002b:00007fe8e49b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1159.686340][T26566] RAX: ffffffffffffffda RBX: 00007fe8e3e16090 RCX: 00007fe8e3b9ce59
[ 1159.686350][T26566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1159.686359][T26566] RBP: 00007fe8e3c32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1159.686369][T26566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1159.686377][T26566] R13: 00007fe8e3e16128 R14: 00007fe8e3e16090 R15: 00007fffbd9fe6a8
[ 1159.686392][T26566]  </TASK>
[ 1161.529348][T26582] can: request_module (can-proto-0) failed.
[ 1161.692740][T26588] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1161.842065][T26593] input: f�
 as /devices/virtual/input/input33
[ 1161.953402][T26597] netlink: 'syz.9.3844': attribute type 1 has an invalid length.
[ 1161.966399][T26597] netlink: 33 bytes leftover after parsing attributes in process `syz.9.3844'.
[ 1163.811148][T26620] FAULT_INJECTION: forcing a failure.
[ 1163.811148][T26620] name failslab, interval 1, probability 0, space 0, times 0
[ 1163.844870][T26620] CPU: 0 UID: 0 PID: 26620 Comm: syz.9.3849 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1163.844900][T26620] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1163.844906][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1163.844915][T26620] Call Trace:
[ 1163.844921][T26620]  <TASK>
[ 1163.844927][T26620]  dump_stack_lvl+0x100/0x190
[ 1163.844948][T26620]  should_fail_ex.cold+0x5/0xa
[ 1163.844964][T26620]  ? kmem_cache_alloc_lru_noprof+0x59/0x6e0
[ 1163.844981][T26620]  should_failslab+0xc2/0x120
[ 1163.845000][T26620]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1163.845014][T26620]  ? __d_alloc+0x35/0xa50
[ 1163.845038][T26620]  __d_alloc+0x35/0xa50
[ 1163.845059][T26620]  d_alloc_pseudo+0x1c/0xc0
[ 1163.845075][T26620]  alloc_file_pseudo+0x118/0x290
[ 1163.845098][T26620]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1163.845115][T26620]  __shmem_file_setup+0x205/0x460
[ 1163.845135][T26620]  ? __pfx___shmem_file_setup+0x10/0x10
[ 1163.845160][T26620]  ? vm_area_alloc+0x1f/0x160
[ 1163.845182][T26620]  shmem_zero_setup+0x96/0x1b0
[ 1163.845197][T26620]  __mmap_region+0x24ef/0x2db0
[ 1163.845220][T26620]  ? __pfx___mmap_region+0x10/0x10
[ 1163.845249][T26620]  ? __pfx___might_resched+0x10/0x10
[ 1163.845271][T26620]  ? process_measurement+0x4c8/0x2350
[ 1163.845292][T26620]  ? lock_release+0x24d/0x310
[ 1163.845312][T26620]  ? down_write+0x146/0x1f0
[ 1163.845333][T26620]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1163.845347][T26620]  ? rcu_is_watching+0x12/0xc0
[ 1163.845369][T26620]  ? lock_release+0x24d/0x310
[ 1163.845392][T26620]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1163.845405][T26620]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1163.845435][T26620]  ? finish_task_switch.isra.0+0x2c5/0x1010
[ 1163.845466][T26620]  ? preempt_schedule_thunk+0x16/0x40
[ 1163.845489][T26620]  mmap_region+0x35d/0x620
[ 1163.845503][T26620]  ? rcu_is_watching+0x12/0xc0
[ 1163.845517][T26620]  ? __pfx_mmap_region+0x10/0x10
[ 1163.845530][T26620]  ? cap_mmap_addr+0x4b/0x120
[ 1163.845545][T26620]  ? bpf_lsm_mmap_addr+0x9/0x30
[ 1163.845565][T26620]  ? security_mmap_addr+0x71/0x1e0
[ 1163.845584][T26620]  ? __get_unmapped_area+0x255/0x3e0
[ 1163.845602][T26620]  do_mmap+0xc63/0x12f0
[ 1163.845620][T26620]  ? __pfx_do_mmap+0x10/0x10
[ 1163.845636][T26620]  ? __pfx_down_write_killable+0x10/0x10
[ 1163.845658][T26620]  vm_mmap_pgoff+0x29e/0x470
[ 1163.845675][T26620]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1163.845692][T26620]  ? __pfx_do_futex+0x10/0x10
[ 1163.845707][T26620]  ksys_mmap_pgoff+0xe4/0x610
[ 1163.845723][T26620]  ? __x64_sys_futex+0x358/0x4d0
[ 1163.845736][T26620]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 1163.845752][T26620]  ? xfd_validate_state+0x129/0x190
[ 1163.845769][T26620]  __x64_sys_mmap+0x125/0x190
[ 1163.845785][T26620]  do_syscall_64+0x115/0x840
[ 1163.845801][T26620]  ? clear_bhb_loop+0x40/0x90
[ 1163.845817][T26620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1163.845832][T26620] RIP: 0033:0x7fe8e3b9ce59
[ 1163.845845][T26620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1163.845860][T26620] RSP: 002b:00007fe8e49d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1163.845877][T26620] RAX: ffffffffffffffda RBX: 00007fe8e3e15fa0 RCX: 00007fe8e3b9ce59
[ 1163.845887][T26620] RDX: 0000000000000003 RSI: 0000000002000009 RDI: 0000000000000000
[ 1163.845896][T26620] RBP: 00007fe8e3c32e6f R08: fffffffffffffffa R09: 0000000000008000
[ 1163.845906][T26620] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[ 1163.845915][T26620] R13: 00007fe8e3e16038 R14: 00007fe8e3e15fa0 R15: 00007fffbd9fe6a8
[ 1163.845930][T26620]  </TASK>
[ 1164.976549][T13208] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1164.987226][T13208] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1164.995236][T13208] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1165.003559][T13208] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1165.012630][T13208] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1165.496067][T26626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.514111][T26626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.529279][T26626] bridge_slave_0: entered allmulticast mode
[ 1165.549105][T26626] bridge_slave_0: entered promiscuous mode
[ 1165.559879][T26626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.576893][T26626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.594341][T26626] bridge_slave_1: entered allmulticast mode
[ 1165.607342][T26626] bridge_slave_1: entered promiscuous mode
[ 1165.648635][T26626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1165.668569][T26626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1165.708429][T26626] team0: Port device team_slave_0 added
[ 1165.725799][T26626] team0: Port device team_slave_1 added
[ 1165.762635][T26626] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1165.779910][T26626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1165.833458][T26626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1165.860606][T26626] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1165.876109][T26626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1165.944457][T26626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1166.031494][T26626] hsr_slave_0: entered promiscuous mode
[ 1166.055143][T26626] hsr_slave_1: entered promiscuous mode
[ 1166.073515][T26626] debugfs: 'hsr0' already exists in 'hsr'
[ 1166.094987][T26626] Cannot create hsr debugfs directory
[ 1166.120874][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1166.129575][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1166.140634][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1166.150887][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1166.158689][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1166.536941][T26626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1166.570477][T26626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1166.603676][T26626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1166.637866][T26626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1166.678853][T26626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1166.715944][T26626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1166.748581][T26626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1166.784509][T26626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1167.020052][ T5625] Bluetooth: hci9: command tx timeout
[ 1167.027801][T26626] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1167.082921][T26626] 8021q: adding VLAN 0 to HW filter on device team0
[ 1167.119976][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1167.127125][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1167.215321][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1167.222537][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1167.393851][T26644] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1167.407617][T26644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1167.426614][T26644] bridge_slave_0: entered allmulticast mode
[ 1167.443901][T26644] bridge_slave_0: entered promiscuous mode
[ 1167.466805][T26644] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1167.494239][T26644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1167.522594][T26644] bridge_slave_1: entered allmulticast mode
[ 1167.546469][T26644] bridge_slave_1: entered promiscuous mode
[ 1167.618443][T26644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1167.656787][T26644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1167.730311][T26644] team0: Port device team_slave_0 added
[ 1167.764481][T26644] team0: Port device team_slave_1 added
[ 1167.902327][T26644] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1167.935123][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.022534][T26644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1168.055919][T26644] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1168.094010][T26644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.176165][T26728] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3856'.
[ 1168.209396][T26644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1168.221175][ T5625] Bluetooth: hci10: command tx timeout
[ 1168.250369][T26626] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1168.329603][T26644] hsr_slave_0: entered promiscuous mode
[ 1168.349472][T26644] hsr_slave_1: entered promiscuous mode
[ 1168.364171][T26644] debugfs: 'hsr0' already exists in 'hsr'
[ 1168.388325][T26644] Cannot create hsr debugfs directory
[ 1168.479473][T26626] veth0_vlan: entered promiscuous mode
[ 1168.527765][T26626] veth1_vlan: entered promiscuous mode
[ 1168.724892][T26626] veth0_macvtap: entered promiscuous mode
[ 1168.768238][T26626] veth1_macvtap: entered promiscuous mode
[ 1168.858561][T26644] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1168.887750][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1168.917308][T26626] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1168.986990][T26644] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1169.009245][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1169.024344][T26626] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1169.038063][T26644] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1169.049944][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1169.064999][T16515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.091021][ T5625] Bluetooth: hci9: command tx timeout
[ 1169.101985][T16515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.123316][T26644] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1169.140483][T26644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1169.164360][T16515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.210235][T16515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.301912][T16515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.342527][T16515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.501666][T16510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.561214][T16510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.680327][T26644] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.784332][T26644] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.809629][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1169.819924][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1169.845150][T13208] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1169.856086][T13208] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1169.863614][T13208] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1169.871738][T13208] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1169.881585][T13208] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1169.901104][T16510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.908241][T16510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1170.010528][T16510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.017660][T16510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.285270][T13208] Bluetooth: hci10: command tx timeout
[ 1170.410038][T26805] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1171.046184][T26644] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1171.161346][T13208] Bluetooth: hci9: command tx timeout
[ 1171.187971][T26644] veth0_vlan: entered promiscuous mode
[ 1171.253396][T26644] veth1_vlan: entered promiscuous mode
[ 1171.325109][T26784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.351074][T26784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.380974][T26784] bridge_slave_0: entered allmulticast mode
[ 1171.404750][T26784] bridge_slave_0: entered promiscuous mode
[ 1171.431023][T26784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.452165][T26784] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.473393][T26784] bridge_slave_1: entered allmulticast mode
[ 1171.509782][T26784] bridge_slave_1: entered promiscuous mode
[ 1171.543663][T26644] veth0_macvtap: entered promiscuous mode
[ 1171.581224][T26644] veth1_macvtap: entered promiscuous mode
[ 1171.621737][T26784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1171.654764][T26644] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1171.674019][T26784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1171.694011][T26644] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1171.753113][T16508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.773310][T16508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.805926][T26784] team0: Port device team_slave_0 added
[ 1171.823986][T16508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.856043][T26784] team0: Port device team_slave_1 added
[ 1171.880844][T16508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.947496][T26784] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.957299][T13208] Bluetooth: hci11: command tx timeout
[ 1171.986206][T26784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1172.065810][T26784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1172.118494][T26784] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1172.148432][T26784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1172.230089][T26784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1172.358671][T13208] Bluetooth: hci10: command tx timeout
[ 1172.426722][T16508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.447286][T26784] hsr_slave_0: entered promiscuous mode
[ 1172.470140][T16508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.479298][T26784] hsr_slave_1: entered promiscuous mode
[ 1172.497885][T26784] debugfs: 'hsr0' already exists in 'hsr'
[ 1172.510097][T26784] Cannot create hsr debugfs directory
[ 1172.647195][T16508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.688287][T16508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.824982][T26890] input: f�
 as /devices/virtual/input/input35
[ 1172.836208][T26784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.996355][T26784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.087897][T26784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.165070][T13208] Bluetooth: hci9: Unexpected cc 0x7c89 with no status
[ 1173.189886][T26784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.231219][T13208] Bluetooth: hci9: command tx timeout
[ 1173.247368][T26900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1173.298529][T26900] FAULT_INJECTION: forcing a failure.
[ 1173.298529][T26900] name failslab, interval 1, probability 0, space 0, times 0
[ 1173.359421][T26900] CPU: 0 UID: 0 PID: 26900 Comm: syz.2.3868 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1173.359449][T26900] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1173.359455][T26900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1173.359465][T26900] Call Trace:
[ 1173.359470][T26900]  <TASK>
[ 1173.359477][T26900]  dump_stack_lvl+0x100/0x190
[ 1173.359497][T26900]  should_fail_ex.cold+0x5/0xa
[ 1173.359514][T26900]  ? __kmalloc_cache_noprof+0x53/0x6e0
[ 1173.359537][T26900]  should_failslab+0xc2/0x120
[ 1173.359554][T26900]  __kmalloc_cache_noprof+0x7a/0x6e0
[ 1173.359574][T26900]  ? trace_pid_list_alloc+0x232/0x480
[ 1173.359592][T26900]  ? lockdep_init_map_type+0x5c/0x250
[ 1173.359615][T26900]  trace_pid_list_alloc+0x232/0x480
[ 1173.359633][T26900]  trace_pid_write+0x110/0x460
[ 1173.359650][T26900]  ? __pfx_trace_pid_write+0x10/0x10
[ 1173.359669][T26900]  ? __pfx___might_resched+0x10/0x10
[ 1173.359690][T26900]  event_pid_write.isra.0+0x1e4/0x7d0
[ 1173.359710][T26900]  ? __pfx_event_pid_write.isra.0+0x10/0x10
[ 1173.359728][T26900]  ? lock_acquire+0x301/0x370
[ 1173.359747][T26900]  ? __pfx___might_resched+0x10/0x10
[ 1173.359767][T26900]  vfs_write+0x2aa/0x1050
[ 1173.359787][T26900]  ? __pfx_ftrace_event_npid_write+0x10/0x10
[ 1173.359806][T26900]  ? __pfx_vfs_write+0x10/0x10
[ 1173.359824][T26900]  ? rcu_is_watching+0x12/0xc0
[ 1173.359840][T26900]  ? __fget_files+0x21f/0x3d0
[ 1173.359860][T26900]  ksys_write+0x12a/0x250
[ 1173.359878][T26900]  ? __pfx_ksys_write+0x10/0x10
[ 1173.359898][T26900]  ? rcu_is_watching+0x12/0xc0
[ 1173.359912][T26900]  do_syscall_64+0x115/0x840
[ 1173.359928][T26900]  ? clear_bhb_loop+0x40/0x90
[ 1173.359944][T26900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1173.359958][T26900] RIP: 0033:0x7f59ad79ce59
[ 1173.359971][T26900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1173.359985][T26900] RSP: 002b:00007f59ae591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1173.360000][T26900] RAX: ffffffffffffffda RBX: 00007f59ada15fa0 RCX: 00007f59ad79ce59
[ 1173.360010][T26900] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[ 1173.360018][T26900] RBP: 00007f59ad832e6f R08: 0000000000000000 R09: 0000000000000000
[ 1173.360028][T26900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1173.360036][T26900] R13: 00007f59ada16038 R14: 00007f59ada15fa0 R15: 00007ffda5a13788
[ 1173.360051][T26900]  </TASK>
[ 1173.681199][T26784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1173.691404][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1173.699015][T26784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1173.707389][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1173.715047][T26784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1173.723526][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1173.731243][T26784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1173.739485][T26784] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1174.029525][T13208] Bluetooth: hci11: command tx timeout
[ 1174.084887][T26784] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1174.128750][T26784] 8021q: adding VLAN 0 to HW filter on device team0
[ 1174.162643][T16508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1174.170132][T16508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1174.219374][T16508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1174.226522][T16508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1174.440153][T26938] futex_wake_op: syz.0.3873 tries to shift op by -2048; fix this program
[ 1174.478193][T26938] futex_wake_op: syz.0.3873 tries to shift op by -2048; fix this program
[ 1174.613719][T26937] 0x000000000001-0x000000020000 : ""
[ 1174.641536][T26937] ftl_cs: FTL header corrupt!
[ 1174.963784][T26784] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.050954][T26784] veth0_vlan: entered promiscuous mode
[ 1175.139837][T26784] veth1_vlan: entered promiscuous mode
[ 1175.233425][T26784] veth0_macvtap: entered promiscuous mode
[ 1175.269496][T26784] veth1_macvtap: entered promiscuous mode
[ 1175.333645][T26784] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1175.368827][T26784] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1175.413644][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.450982][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.485549][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.554338][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1175.661111][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1175.694465][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1175.756920][T16510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1175.782604][T16510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1176.097812][T13208] Bluetooth: hci11: command tx timeout
[ 1178.168001][T13208] Bluetooth: hci11: command tx timeout
[ 1178.282816][T27006] FAULT_INJECTION: forcing a failure.
[ 1178.282816][T27006] name failslab, interval 1, probability 0, space 0, times 0
[ 1178.322164][T27006] CPU: 0 UID: 0 PID: 27006 Comm: syz.0.3883 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1178.322194][T27006] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1178.322200][T27006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1178.322209][T27006] Call Trace:
[ 1178.322214][T27006]  <TASK>
[ 1178.322220][T27006]  dump_stack_lvl+0x100/0x190
[ 1178.322241][T27006]  should_fail_ex.cold+0x5/0xa
[ 1178.322258][T27006]  ? __kmalloc_cache_node_noprof+0x57/0x760
[ 1178.322276][T27006]  should_failslab+0xc2/0x120
[ 1178.322293][T27006]  __kmalloc_cache_node_noprof+0x7d/0x760
[ 1178.322308][T27006]  ? do_kmem_cache_create+0x281/0x770
[ 1178.322324][T27006]  ? lockdep_init_map_type+0x5c/0x250
[ 1178.322347][T27006]  do_kmem_cache_create+0x281/0x770
[ 1178.322364][T27006]  ? __kmem_cache_create_args+0x366/0x420
[ 1178.322384][T27006]  ? kstrdup+0xb3/0xe0
[ 1178.322398][T27006]  __kmem_cache_create_args+0x386/0x420
[ 1178.322419][T27006]  mon_text_open+0x333/0x510
[ 1178.322438][T27006]  ? __pfx_mon_text_open+0x10/0x10
[ 1178.322454][T27006]  ? __pfx_mon_text_ctor+0x10/0x10
[ 1178.322470][T27006]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1178.322487][T27006]  ? lockdown_is_locked_down+0x3d/0x140
[ 1178.322501][T27006]  ? bpf_lsm_locked_down+0x9/0x10
[ 1178.322515][T27006]  ? __pfx_mon_text_open+0x10/0x10
[ 1178.322530][T27006]  full_proxy_open_regular+0x1b6/0x370
[ 1178.322554][T27006]  do_dentry_open+0x6ab/0x14d0
[ 1178.322574][T27006]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1178.322597][T27006]  vfs_open+0x82/0x3f0
[ 1178.322611][T27006]  path_openat+0x2873/0x4280
[ 1178.322632][T27006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.322648][T27006]  ? __pfx_path_openat+0x10/0x10
[ 1178.322670][T27006]  do_file_open+0x20e/0x430
[ 1178.322690][T27006]  ? __pfx_do_file_open+0x10/0x10
[ 1178.322724][T27006]  ? alloc_fd+0x471/0x7a0
[ 1178.322746][T27006]  ? do_getname+0x191/0x390
[ 1178.322760][T27006]  do_sys_openat2+0x10f/0x1e0
[ 1178.322776][T27006]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1178.322792][T27006]  ? __fget_files+0x21f/0x3d0
[ 1178.322811][T27006]  __x64_sys_openat+0x12d/0x210
[ 1178.322826][T27006]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1178.322843][T27006]  ? rcu_is_watching+0x12/0xc0
[ 1178.322859][T27006]  do_syscall_64+0x115/0x840
[ 1178.322875][T27006]  ? clear_bhb_loop+0x40/0x90
[ 1178.322891][T27006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.322905][T27006] RIP: 0033:0x7f1f4a39ce59
[ 1178.322918][T27006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1178.322932][T27006] RSP: 002b:00007f1f4b331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1178.322946][T27006] RAX: ffffffffffffffda RBX: 00007f1f4a615fa0 RCX: 00007f1f4a39ce59
[ 1178.322956][T27006] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1178.322966][T27006] RBP: 00007f1f4a432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1178.322975][T27006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1178.322984][T27006] R13: 00007f1f4a616038 R14: 00007f1f4a615fa0 R15: 00007ffdb0e5e058
[ 1178.322997][T27006]  </TASK>
[ 1178.323041][T27006] __kmem_cache_create_args(mon_text_ffff8880a6c08800) failed with error -22
[ 1178.717479][T27014] binder: binder_mmap: 27011 0-811000 bad vm_flags failed -1
[ 1178.896241][T27018] smc: net device dummy0 applied user defined pnetid DUMMY0
[ 1178.937535][T27018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1179.008794][T27018] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3885: iget: checksum invalid
[ 1179.036925][T27018] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1179.062830][T27018] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3885: iget: checksum invalid
[ 1179.095681][T27018] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1179.126880][T27018] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3885: iget: checksum invalid
[ 1179.156395][T27018] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1179.172471][T27018] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.3885: iget: checksum invalid
[ 1179.183817][T27018] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1179.196740][T27018] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1179.219977][T27018] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1179.238320][T27006] CPU: 0 UID: 0 PID: 27006 Comm: syz.0.3883 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1179.238348][T27006] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1179.238354][T27006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1179.238364][T27006] Call Trace:
[ 1179.238369][T27006]  <TASK>
[ 1179.238375][T27006]  dump_stack_lvl+0x100/0x190
[ 1179.238394][T27006]  __kmem_cache_create_args.cold+0x33/0x6e
[ 1179.238416][T27006]  mon_text_open+0x333/0x510
[ 1179.238434][T27006]  ? __pfx_mon_text_open+0x10/0x10
[ 1179.238450][T27006]  ? __pfx_mon_text_ctor+0x10/0x10
[ 1179.238466][T27006]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1179.238483][T27006]  ? lockdown_is_locked_down+0x3d/0x140
[ 1179.238497][T27006]  ? bpf_lsm_locked_down+0x9/0x10
[ 1179.238513][T27006]  ? __pfx_mon_text_open+0x10/0x10
[ 1179.238528][T27006]  full_proxy_open_regular+0x1b6/0x370
[ 1179.238551][T27006]  do_dentry_open+0x6ab/0x14d0
[ 1179.238571][T27006]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1179.238597][T27006]  vfs_open+0x82/0x3f0
[ 1179.238612][T27006]  path_openat+0x2873/0x4280
[ 1179.238633][T27006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.238650][T27006]  ? __pfx_path_openat+0x10/0x10
[ 1179.238674][T27006]  do_file_open+0x20e/0x430
[ 1179.238694][T27006]  ? __pfx_do_file_open+0x10/0x10
[ 1179.238720][T27006]  ? alloc_fd+0x471/0x7a0
[ 1179.238740][T27006]  ? do_getname+0x191/0x390
[ 1179.238754][T27006]  do_sys_openat2+0x10f/0x1e0
[ 1179.238769][T27006]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1179.238788][T27006]  ? __fget_files+0x21f/0x3d0
[ 1179.238808][T27006]  __x64_sys_openat+0x12d/0x210
[ 1179.238823][T27006]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1179.238841][T27006]  ? rcu_is_watching+0x12/0xc0
[ 1179.238857][T27006]  do_syscall_64+0x115/0x840
[ 1179.238874][T27006]  ? clear_bhb_loop+0x40/0x90
[ 1179.238890][T27006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1179.238905][T27006] RIP: 0033:0x7f1f4a39ce59
[ 1179.238918][T27006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1179.238932][T27006] RSP: 002b:00007f1f4b331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1179.238948][T27006] RAX: ffffffffffffffda RBX: 00007f1f4a615fa0 RCX: 00007f1f4a39ce59
[ 1179.238958][T27006] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1179.238968][T27006] RBP: 00007f1f4a432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1179.238977][T27006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1179.238986][T27006] R13: 00007f1f4a616038 R14: 00007f1f4a615fa0 R15: 00007ffdb0e5e058
[ 1179.238999][T27006]  </TASK>
[ 1179.975497][T27034] device-mapper: ioctl: Unable to rename non-existent device,  to �
[ 1180.136740][T27046] nbd: nbd4129 already in use
[ 1181.028151][T27076] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3895'.
[ 1181.062697][T27076] mac80211_hwsim hwsim69 �: renamed from wlan0 (while UP)
[ 1181.499414][T27094] FAULT_INJECTION: forcing a failure.
[ 1181.499414][T27094] name failslab, interval 1, probability 0, space 0, times 0
[ 1181.526499][T27094] CPU: 0 UID: 0 PID: 27094 Comm: syz.0.3901 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1181.526528][T27094] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1181.526535][T27094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1181.526544][T27094] Call Trace:
[ 1181.526550][T27094]  <TASK>
[ 1181.526556][T27094]  dump_stack_lvl+0x100/0x190
[ 1181.526576][T27094]  should_fail_ex.cold+0x5/0xa
[ 1181.526593][T27094]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1181.526609][T27094]  should_failslab+0xc2/0x120
[ 1181.526625][T27094]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1181.526638][T27094]  ? __proc_create+0x2cb/0x8c0
[ 1181.526659][T27094]  ? lock_release+0x24d/0x310
[ 1181.526679][T27094]  __proc_create+0x2cb/0x8c0
[ 1181.526707][T27094]  ? __pfx___proc_create+0x10/0x10
[ 1181.526729][T27094]  ? _raw_write_unlock+0x28/0x50
[ 1181.526744][T27094]  ? proc_register+0x559/0x8a0
[ 1181.526764][T27094]  proc_create_reg+0x75/0x170
[ 1181.526786][T27094]  proc_create_data+0x86/0x110
[ 1181.526810][T27094]  ? __pfx_proc_create_data+0x10/0x10
[ 1181.526831][T27094]  ? cache_register_net+0x137/0x5e0
[ 1181.526852][T27094]  ? lock_release+0x24d/0x310
[ 1181.526871][T27094]  cache_register_net+0x25a/0x5e0
[ 1181.526896][T27094]  gss_svc_init_net+0x98/0x640
[ 1181.526913][T27094]  ? __pfx_canbcm_pernet_init+0x10/0x10
[ 1181.526932][T27094]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1181.526951][T27094]  ops_init+0x1e2/0x5f0
[ 1181.526973][T27094]  setup_net+0x118/0x3a0
[ 1181.526997][T27094]  ? __pfx_setup_net+0x10/0x10
[ 1181.527018][T27094]  ? mutex_init_lockdep+0xf1/0x120
[ 1181.527040][T27094]  copy_net_ns+0x46f/0x7c0
[ 1181.527054][T27094]  create_new_namespaces+0x3ea/0xac0
[ 1181.527080][T27094]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1181.527109][T27094]  ksys_unshare+0x438/0xab0
[ 1181.527126][T27094]  ? __pfx_ksys_unshare+0x10/0x10
[ 1181.527145][T27094]  __x64_sys_unshare+0x31/0x40
[ 1181.527161][T27094]  do_syscall_64+0x115/0x840
[ 1181.527176][T27094]  ? clear_bhb_loop+0x40/0x90
[ 1181.527195][T27094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1181.527210][T27094] RIP: 0033:0x7f1f4a39ce59
[ 1181.527223][T27094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1181.527237][T27094] RSP: 002b:00007f1f4b331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1181.527252][T27094] RAX: ffffffffffffffda RBX: 00007f1f4a615fa0 RCX: 00007f1f4a39ce59
[ 1181.527263][T27094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1181.527272][T27094] RBP: 00007f1f4a432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1181.527281][T27094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1181.527290][T27094] R13: 00007f1f4a616038 R14: 00007f1f4a615fa0 R15: 00007ffdb0e5e058
[ 1181.527305][T27094]  </TASK>
[ 1182.426162][T27102] kAFS: No cell specified
[ 1182.493764][T13208] Bluetooth: hci10: unexpected event 0x2c length: 1022 > 17
[ 1182.987860][T27125] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[ 1183.120971][T27124] FAULT_INJECTION: forcing a failure.
[ 1183.120971][T27124] name failslab, interval 1, probability 0, space 0, times 0
[ 1183.180223][T27124] CPU: 0 UID: 0 PID: 27124 Comm: syz.1.3908 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1183.180250][T27124] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1183.180256][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1183.180264][T27124] Call Trace:
[ 1183.180270][T27124]  <TASK>
[ 1183.180276][T27124]  dump_stack_lvl+0x100/0x190
[ 1183.180295][T27124]  should_fail_ex.cold+0x5/0xa
[ 1183.180310][T27124]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1183.180325][T27124]  should_failslab+0xc2/0x120
[ 1183.180342][T27124]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1183.180355][T27124]  ? security_file_alloc+0x34/0x2c0
[ 1183.180375][T27124]  ? trace_kmem_cache_alloc+0xdd/0x100
[ 1183.180394][T27124]  security_file_alloc+0x34/0x2c0
[ 1183.180413][T27124]  init_file+0x95/0x480
[ 1183.180426][T27124]  alloc_empty_file+0x79/0x1c0
[ 1183.180440][T27124]  alloc_file_pseudo+0x183/0x290
[ 1183.180455][T27124]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1183.180469][T27124]  ? alloc_fd+0x471/0x7a0
[ 1183.180489][T27124]  sock_alloc_file+0x50/0x210
[ 1183.180511][T27124]  __sys_socket+0x1c0/0x260
[ 1183.180527][T27124]  ? __pfx___sys_socket+0x10/0x10
[ 1183.180544][T27124]  __x64_sys_socket+0x72/0xb0
[ 1183.180560][T27124]  do_syscall_64+0x115/0x840
[ 1183.180575][T27124]  ? clear_bhb_loop+0x40/0x90
[ 1183.180591][T27124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.180605][T27124] RIP: 0033:0x7f7d9a99ce59
[ 1183.180618][T27124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1183.180632][T27124] RSP: 002b:00007f7d9b8a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1183.180648][T27124] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa0 RCX: 00007f7d9a99ce59
[ 1183.180658][T27124] RDX: 0000000000000106 RSI: 0000000000000801 RDI: 0000000000000002
[ 1183.180666][T27124] RBP: 00007f7d9aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1183.180675][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1183.180684][T27124] R13: 00007f7d9ac16038 R14: 00007f7d9ac15fa0 R15: 00007ffc6e9d0318
[ 1183.180697][T27124]  </TASK>
[ 1183.953254][T27135] netlink: 'syz.1.3909': attribute type 27 has an invalid length.
[ 1183.973131][T27135] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3909'.
[ 1185.256290][T27154] vcan0: tx drop: invalid da for name 0x000000000000003f
[ 1185.488252][T27160] netlink: 'syz.2.3914': attribute type 4 has an invalid length.
[ 1186.197974][ T5625] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1186.205621][ T5625] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1186.213732][ T5625] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1186.224776][ T5625] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1186.236911][ T5625] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1186.503373][T27182] program syz.1.3918 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1187.261299][T27214] openvswitch: netlink: IP tunnel dst address not specified
[ 1187.339078][T27219] vivid-007: =================  START STATUS  =================
[ 1187.365872][T27219] vivid-007: Generate PTS: true
[ 1187.372179][T27172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1187.380143][T27219] vivid-007: Generate SCR: true
[ 1187.385305][T27172] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.392447][T27219] tpg source WxH: 320x240 (Y'CbCr)
[ 1187.397900][T27219] tpg field: 1
[ 1187.401497][T27172] bridge_slave_0: entered allmulticast mode
[ 1187.408471][T27219] tpg crop: (0,0)/320x240
[ 1187.412902][T27219] tpg compose: (0,0)/320x240
[ 1187.418520][T27172] bridge_slave_0: entered promiscuous mode
[ 1187.425365][T27219] tpg colorspace: 8
[ 1187.438930][T27172] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1187.450696][T27219] tpg transfer function: 0/0
[ 1187.456257][T27219] tpg Y'CbCr encoding: 0/0
[ 1187.460824][T27172] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.468157][T27219] tpg quantization: 0/0
[ 1187.472388][T27219] tpg RGB range: 0/2
[ 1187.476818][T27172] bridge_slave_1: entered allmulticast mode
[ 1187.483457][T27219] vivid-007: ==================  END STATUS  ==================
[ 1187.492007][T27172] bridge_slave_1: entered promiscuous mode
[ 1187.541690][T27172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1187.580813][T27172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1187.705402][T27172] team0: Port device team_slave_0 added
[ 1187.747471][T27172] team0: Port device team_slave_1 added
[ 1187.826845][T27172] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1187.855739][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1187.956918][T27172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1188.020977][T27172] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1188.039754][T27172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1188.081520][T27239] FAULT_INJECTION: forcing a failure.
[ 1188.081520][T27239] name failslab, interval 1, probability 0, space 0, times 0
[ 1188.094745][T27239] CPU: 0 UID: 0 PID: 27239 Comm: syz.1.3927 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1188.094772][T27239] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1188.094785][T27239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1188.094795][T27239] Call Trace:
[ 1188.094800][T27239]  <TASK>
[ 1188.094806][T27239]  dump_stack_lvl+0x100/0x190
[ 1188.094826][T27239]  should_fail_ex.cold+0x5/0xa
[ 1188.094843][T27239]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1188.094858][T27239]  should_failslab+0xc2/0x120
[ 1188.094875][T27239]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1188.094888][T27239]  ? security_file_alloc+0x34/0x2c0
[ 1188.094908][T27239]  ? trace_kmem_cache_alloc+0xdd/0x100
[ 1188.094926][T27239]  security_file_alloc+0x34/0x2c0
[ 1188.094947][T27239]  init_file+0x95/0x480
[ 1188.094960][T27239]  alloc_empty_file+0x79/0x1c0
[ 1188.094974][T27239]  alloc_file_pseudo+0x183/0x290
[ 1188.094989][T27239]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1188.095003][T27239]  ? tipc_sk_finish_conn+0x600/0x7a0
[ 1188.095030][T27239]  sock_alloc_file+0x50/0x210
[ 1188.095052][T27239]  __sys_socketpair+0x353/0x5b0
[ 1188.095068][T27239]  ? __pfx___sys_socketpair+0x10/0x10
[ 1188.095090][T27239]  ? __x64_sys_openat+0x12d/0x210
[ 1188.095106][T27239]  ? xfd_validate_state+0x129/0x190
[ 1188.095128][T27239]  __x64_sys_socketpair+0x96/0x100
[ 1188.095145][T27239]  do_syscall_64+0x115/0x840
[ 1188.095160][T27239]  ? clear_bhb_loop+0x40/0x90
[ 1188.095176][T27239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.095191][T27239] RIP: 0033:0x7f7d9a99ce59
[ 1188.095203][T27239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1188.095225][T27239] RSP: 002b:00007f7d9b8a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1188.095248][T27239] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa0 RCX: 00007f7d9a99ce59
[ 1188.095258][T27239] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
[ 1188.095267][T27239] RBP: 00007f7d9aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1188.095276][T27239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1188.095285][T27239] R13: 00007f7d9ac16038 R14: 00007f7d9ac15fa0 R15: 00007ffc6e9d0318
[ 1188.095298][T27239]  </TASK>
[ 1188.097785][T27172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1188.364738][ T5625] Bluetooth: hci12: command tx timeout
[ 1188.552587][T27244] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[26784] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[27244]
[ 1188.701383][T27172] hsr_slave_0: entered promiscuous mode
[ 1188.714415][T27172] hsr_slave_1: entered promiscuous mode
[ 1188.726524][T27172] debugfs: 'hsr0' already exists in 'hsr'
[ 1188.738716][T27172] Cannot create hsr debugfs directory
[ 1189.056453][T27172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.135548][T27172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.220405][T27172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.271334][T27172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.391414][T27172] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1189.416440][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1189.439201][T27172] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1189.477172][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1189.504982][T27172] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1189.534333][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1189.557248][T27172] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1189.583367][T27172] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1189.717705][T13208] Bluetooth: hci11: unexpected subevent 0x01 length: 123 > 18
[ 1189.796351][T27269] futex_wake_op: syz.1.3931 tries to shift op by -2048; fix this program
[ 1189.871975][T27172] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1189.885137][T27269] futex_wake_op: syz.1.3931 tries to shift op by -2048; fix this program
[ 1189.920136][T27172] 8021q: adding VLAN 0 to HW filter on device team0
[ 1189.966943][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.974094][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1190.029397][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1190.036640][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1190.430463][ T5625] Bluetooth: hci12: command tx timeout
[ 1190.610522][T27288] FAULT_INJECTION: forcing a failure.
[ 1190.610522][T27288] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1190.640798][T27288] CPU: 0 UID: 0 PID: 27288 Comm: syz.1.3934 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1190.640826][T27288] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1190.640833][T27288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1190.640842][T27288] Call Trace:
[ 1190.640847][T27288]  <TASK>
[ 1190.640853][T27288]  dump_stack_lvl+0x100/0x190
[ 1190.640873][T27288]  should_fail_ex.cold+0x5/0xa
[ 1190.640892][T27288]  get_futex_key+0x1d2/0x14f0
[ 1190.640914][T27288]  ? __pfx_get_futex_key+0x10/0x10
[ 1190.640935][T27288]  ? futex_wake+0x4ea/0x5e0
[ 1190.640951][T27288]  ? rcu_is_watching+0x12/0xc0
[ 1190.640975][T27288]  futex_wake+0xf4/0x5e0
[ 1190.640991][T27288]  ? futex_wait+0x11e/0x370
[ 1190.641007][T27288]  ? __pfx_futex_wake+0x10/0x10
[ 1190.641024][T27288]  ? percpu_counter_add_batch+0xb9/0x230
[ 1190.641046][T27288]  ? errseq_sample+0x51/0x70
[ 1190.641066][T27288]  ? file_init_path+0x48e/0x670
[ 1190.641080][T27288]  do_futex+0x2b2/0x440
[ 1190.641093][T27288]  ? __pfx_do_futex+0x10/0x10
[ 1190.641106][T27288]  ? fd_install+0x223/0x580
[ 1190.641123][T27288]  ? rcu_is_watching+0x12/0xc0
[ 1190.641139][T27288]  __x64_sys_futex+0x34f/0x4d0
[ 1190.641152][T27288]  ? __might_fault+0xc5/0x140
[ 1190.641173][T27288]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1190.641189][T27288]  ? lock_release+0x24d/0x310
[ 1190.641209][T27288]  ? rcu_is_watching+0x12/0xc0
[ 1190.641224][T27288]  do_syscall_64+0x115/0x840
[ 1190.641240][T27288]  ? clear_bhb_loop+0x40/0x90
[ 1190.641256][T27288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.641271][T27288] RIP: 0033:0x7f7d9a99ce59
[ 1190.641284][T27288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.641298][T27288] RSP: 002b:00007f7d9b8870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1190.641313][T27288] RAX: ffffffffffffffda RBX: 00007f7d9ac16098 RCX: 00007f7d9a99ce59
[ 1190.641323][T27288] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d9ac1609c
[ 1190.641332][T27288] RBP: 00007f7d9ac16090 R08: 0000000000000001 R09: 0000000000000000
[ 1190.641341][T27288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1190.641350][T27288] R13: 00007f7d9ac16128 R14: 00007ffc6e9d0230 R15: 00007ffc6e9d0318
[ 1190.641364][T27288]  </TASK>
[ 1190.874984][T27293] FAULT_INJECTION: forcing a failure.
[ 1190.874984][T27293] name failslab, interval 1, probability 0, space 0, times 0
[ 1190.887672][T27293] CPU: 0 UID: 0 PID: 27293 Comm: syz.2.3935 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1190.887700][T27293] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1190.887707][T27293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1190.887716][T27293] Call Trace:
[ 1190.887724][T27293]  <TASK>
[ 1190.887731][T27293]  dump_stack_lvl+0x100/0x190
[ 1190.887752][T27293]  should_fail_ex.cold+0x5/0xa
[ 1190.887769][T27293]  ? __kmalloc_cache_noprof+0x53/0x6e0
[ 1190.887799][T27293]  should_failslab+0xc2/0x120
[ 1190.887817][T27293]  __kmalloc_cache_noprof+0x7a/0x6e0
[ 1190.887838][T27293]  ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[ 1190.887858][T27293]  vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200
[ 1190.887875][T27293]  vidtv_mux_create_pid_ctx_once+0xe6/0x140
[ 1190.887890][T27293]  vidtv_mux_init+0x725/0xbf0
[ 1190.887907][T27293]  vidtv_start_feed+0x34e/0x500
[ 1190.887926][T27293]  ? __pfx_vidtv_start_feed+0x10/0x10
[ 1190.887943][T27293]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[ 1190.887964][T27293]  ? dmx_section_feed_allocate_filter+0x388/0x480
[ 1190.887986][T27293]  ? rcu_is_watching+0x12/0xc0
[ 1190.888003][T27293]  dmx_section_feed_start_filtering+0x3a8/0x660
[ 1190.888025][T27293]  dvb_dmxdev_filter_start+0x767/0xdd0
[ 1190.888045][T27293]  dvb_demux_do_ioctl+0xe64/0x1200
[ 1190.888064][T27293]  dvb_usercopy+0x167/0x340
[ 1190.888079][T27293]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1190.888097][T27293]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1190.888114][T27293]  ? __fget_files+0x21f/0x3d0
[ 1190.888134][T27293]  dvb_demux_ioctl+0x29/0x40
[ 1190.888149][T27293]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1190.888164][T27293]  __x64_sys_ioctl+0x18e/0x210
[ 1190.888181][T27293]  do_syscall_64+0x115/0x840
[ 1190.888196][T27293]  ? clear_bhb_loop+0x40/0x90
[ 1190.888212][T27293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.888227][T27293] RIP: 0033:0x7f59ad79ce59
[ 1190.888241][T27293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.888255][T27293] RSP: 002b:00007f59ae570028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1190.888270][T27293] RAX: ffffffffffffffda RBX: 00007f59ada16090 RCX: 00007f59ad79ce59
[ 1190.888285][T27293] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006
[ 1190.888294][T27293] RBP: 00007f59ad832e6f R08: 0000000000000000 R09: 0000000000000000
[ 1190.888303][T27293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1190.888311][T27293] R13: 00007f59ada16128 R14: 00007f59ada16090 R15: 00007ffda5a13788
[ 1190.888325][T27293]  </TASK>
[ 1191.319945][T27172] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1191.462465][T27172] veth0_vlan: entered promiscuous mode
[ 1191.484633][T27172] veth1_vlan: entered promiscuous mode
[ 1191.608117][T27172] veth0_macvtap: entered promiscuous mode
[ 1191.662290][T27172] veth1_macvtap: entered promiscuous mode
[ 1191.721526][T27172] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1191.781182][T27172] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1191.821670][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.846997][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.909128][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1191.937450][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.034691][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.061522][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.147014][T16508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.168546][T16508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.500514][ T5625] Bluetooth: hci12: command tx timeout
[ 1194.032721][   T30] audit: type=1800 audit(1843104543.022:35): pid=27370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3944" name="discovery_nqn" dev="configfs" ino=146804 res=0 errno=0
[ 1194.571801][ T5625] Bluetooth: hci12: command tx timeout
[ 1194.658868][T27381] FAULT_INJECTION: forcing a failure.
[ 1194.658868][T27381] name failslab, interval 1, probability 0, space 0, times 0
[ 1194.709241][T27381] CPU: 0 UID: 0 PID: 27381 Comm: syz.2.3946 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1194.709271][T27381] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1194.709278][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1194.709287][T27381] Call Trace:
[ 1194.709292][T27381]  <TASK>
[ 1194.709299][T27381]  dump_stack_lvl+0x100/0x190
[ 1194.709320][T27381]  should_fail_ex.cold+0x5/0xa
[ 1194.709337][T27381]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1194.709353][T27381]  should_failslab+0xc2/0x120
[ 1194.709369][T27381]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1194.709383][T27381]  ? __proc_create+0x2cb/0x8c0
[ 1194.709402][T27381]  ? lock_release+0x24d/0x310
[ 1194.709424][T27381]  __proc_create+0x2cb/0x8c0
[ 1194.709444][T27381]  ? __pfx___proc_create+0x10/0x10
[ 1194.709465][T27381]  ? _raw_write_unlock+0x28/0x50
[ 1194.709479][T27381]  ? proc_register+0x559/0x8a0
[ 1194.709499][T27381]  proc_create_reg+0x75/0x170
[ 1194.709520][T27381]  proc_create_data+0x86/0x110
[ 1194.709542][T27381]  ? __pfx_proc_create_data+0x10/0x10
[ 1194.709563][T27381]  ? cache_register_net+0x137/0x5e0
[ 1194.709584][T27381]  ? lock_release+0x24d/0x310
[ 1194.709604][T27381]  cache_register_net+0x25a/0x5e0
[ 1194.709625][T27381]  ip_map_cache_create+0x8b/0x130
[ 1194.709724][T27381]  ? __pfx_sunrpc_init_net+0x10/0x10
[ 1194.709741][T27381]  sunrpc_init_net+0x55/0x190
[ 1194.709759][T27381]  ops_init+0x1e2/0x5f0
[ 1194.709780][T27381]  setup_net+0x118/0x3a0
[ 1194.709800][T27381]  ? __pfx_setup_net+0x10/0x10
[ 1194.709819][T27381]  ? mutex_init_lockdep+0xf1/0x120
[ 1194.709842][T27381]  copy_net_ns+0x46f/0x7c0
[ 1194.709855][T27381]  create_new_namespaces+0x3ea/0xac0
[ 1194.709879][T27381]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1194.709902][T27381]  ksys_unshare+0x438/0xab0
[ 1194.709918][T27381]  ? __pfx_ksys_unshare+0x10/0x10
[ 1194.709936][T27381]  __x64_sys_unshare+0x31/0x40
[ 1194.709961][T27381]  do_syscall_64+0x115/0x840
[ 1194.709976][T27381]  ? clear_bhb_loop+0x40/0x90
[ 1194.709993][T27381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.710009][T27381] RIP: 0033:0x7f59ad79ce59
[ 1194.710021][T27381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1194.710035][T27381] RSP: 002b:00007f59ae591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1194.710051][T27381] RAX: ffffffffffffffda RBX: 00007f59ada15fa0 RCX: 00007f59ad79ce59
[ 1194.710062][T27381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1194.710071][T27381] RBP: 00007f59ad832e6f R08: 0000000000000000 R09: 0000000000000000
[ 1194.710080][T27381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1194.710089][T27381] R13: 00007f59ada16038 R14: 00007f59ada15fa0 R15: 00007ffda5a13788
[ 1194.710103][T27381]  </TASK>
[ 1195.675949][T27389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3948'.
[ 1196.417439][T27437] netlink: 'syz.1.3959': attribute type 1 has an invalid length.
[ 1196.759338][T27450] FAULT_INJECTION: forcing a failure.
[ 1196.759338][T27450] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1196.811068][T27450] CPU: 0 UID: 0 PID: 27450 Comm: syz.1.3962 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1196.811095][T27450] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1196.811101][T27450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1196.811110][T27450] Call Trace:
[ 1196.811115][T27450]  <TASK>
[ 1196.811120][T27450]  dump_stack_lvl+0x100/0x190
[ 1196.811141][T27450]  should_fail_ex.cold+0x5/0xa
[ 1196.811158][T27450]  get_futex_key+0x1d2/0x14f0
[ 1196.811180][T27450]  ? __pfx_get_futex_key+0x10/0x10
[ 1196.811200][T27450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.811216][T27450]  ? cmp_ex_search+0x8b/0xb0
[ 1196.811309][T27450]  futex_wait_setup+0x91/0x540
[ 1196.811328][T27450]  __futex_wait+0x19f/0x300
[ 1196.811345][T27450]  ? __pfx___futex_wait+0x10/0x10
[ 1196.811360][T27450]  ? futex_hash+0x311/0x400
[ 1196.811379][T27450]  ? rcu_is_watching+0x12/0xc0
[ 1196.811395][T27450]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1196.811412][T27450]  ? __pfx_futex_hash+0x10/0x10
[ 1196.811431][T27450]  ? irqentry_exit+0x24d/0xa00
[ 1196.811448][T27450]  futex_wait+0xe6/0x370
[ 1196.811464][T27450]  ? __pfx_futex_wait+0x10/0x10
[ 1196.811482][T27450]  ? video_usercopy+0x2f8/0x14c0
[ 1196.811497][T27450]  do_futex+0x265/0x440
[ 1196.811510][T27450]  ? __pfx_do_futex+0x10/0x10
[ 1196.811529][T27450]  __x64_sys_futex+0x34f/0x4d0
[ 1196.811543][T27450]  ? __fget_files+0x21f/0x3d0
[ 1196.811565][T27450]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1196.811579][T27450]  ? v4l2_ioctl+0x1c5/0x250
[ 1196.811593][T27450]  ? rcu_is_watching+0x12/0xc0
[ 1196.811608][T27450]  do_syscall_64+0x115/0x840
[ 1196.811624][T27450]  ? clear_bhb_loop+0x40/0x90
[ 1196.811639][T27450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1196.811654][T27450] RIP: 0033:0x7f7d9a99ce59
[ 1196.811665][T27450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1196.811680][T27450] RSP: 002b:00007f7d9b8a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1196.811694][T27450] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa8 RCX: 00007f7d9a99ce59
[ 1196.811704][T27450] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d9ac15fa8
[ 1196.811713][T27450] RBP: 00007f7d9ac15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1196.811722][T27450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1196.811731][T27450] R13: 00007f7d9ac16038 R14: 00007ffc6e9d0230 R15: 00007ffc6e9d0318
[ 1196.811744][T27450]  </TASK>
[ 1197.873261][T27470] netlink: 'syz.6.3965': attribute type 28 has an invalid length.
[ 1197.934699][T27470] netlink: 'syz.6.3965': attribute type 3 has an invalid length.
[ 1198.020477][T27470] netlink: 306 bytes leftover after parsing attributes in process `syz.6.3965'.
[ 1198.114372][T13208] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1198.123085][T13208] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1198.131434][T13208] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1198.142429][T13208] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1198.154360][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'.
[ 1198.163354][T13208] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1198.796846][T27495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1199.393692][T27522] random: crng reseeded on system resumption
[ 1200.032905][T27487] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.048681][T27487] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.063899][T27487] bridge_slave_0: entered allmulticast mode
[ 1200.089733][T27487] bridge_slave_0: entered promiscuous mode
[ 1200.119866][T27487] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.151528][T27487] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1200.176988][T27487] bridge_slave_1: entered allmulticast mode
[ 1200.210290][T27487] bridge_slave_1: entered promiscuous mode
[ 1200.224099][T13208] Bluetooth: hci13: command tx timeout
[ 1200.361121][T27487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1200.439966][T27487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1200.519240][T27487] team0: Port device team_slave_0 added
[ 1200.550925][T27487] team0: Port device team_slave_1 added
[ 1200.680209][T27487] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1200.708931][T27487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1200.766209][T27487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1200.803190][T27487] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1200.827241][T27487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1200.895633][T27487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1201.151237][T27487] hsr_slave_0: entered promiscuous mode
[ 1201.167096][T27487] hsr_slave_1: entered promiscuous mode
[ 1201.181757][T27487] debugfs: 'hsr0' already exists in 'hsr'
[ 1201.196980][T27487] Cannot create hsr debugfs directory
[ 1201.398911][T27487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.453865][T27487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.505580][T27487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.551379][T27487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.686744][T27487] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1201.719267][T27487] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1201.739085][T27487] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1201.759300][T27487] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1201.780496][T27487] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1201.803155][T27487] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1201.827154][T27487] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1201.845671][T27487] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1201.954073][T27487] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.984468][T27487] 8021q: adding VLAN 0 to HW filter on device team0
[ 1202.007541][T16508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1202.014647][T16508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1202.059244][T16508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1202.066373][T16508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1202.297381][ T5625] Bluetooth: hci13: command tx timeout
[ 1202.453985][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[ 1202.754069][T27487] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1202.808670][T27487] veth0_vlan: entered promiscuous mode
[ 1202.832565][T27487] veth1_vlan: entered promiscuous mode
[ 1202.879636][T27487] veth0_macvtap: entered promiscuous mode
[ 1202.899014][T27487] veth1_macvtap: entered promiscuous mode
[ 1202.919902][T27487] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1202.945988][T27487] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1202.973127][T16510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.004163][T16510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.030124][T16510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.046975][T27622] FAULT_INJECTION: forcing a failure.
[ 1203.046975][T27622] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1203.063086][T16510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.072680][T27622] CPU: 0 UID: 0 PID: 27622 Comm: syz.1.3987 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1203.072708][T27622] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1203.072715][T27622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1203.072725][T27622] Call Trace:
[ 1203.072730][T27622]  <TASK>
[ 1203.072737][T27622]  dump_stack_lvl+0x100/0x190
[ 1203.072757][T27622]  should_fail_ex.cold+0x5/0xa
[ 1203.072774][T27622]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1203.072797][T27622]  get_futex_key+0x1d2/0x14f0
[ 1203.072818][T27622]  ? __pfx_get_futex_key+0x10/0x10
[ 1203.072839][T27622]  ? rcu_is_watching+0x12/0xc0
[ 1203.072853][T27622]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[ 1203.072876][T27622]  ? locks_remove_posix+0xff/0x4d0
[ 1203.072896][T27622]  ? __pfx_locks_remove_posix+0x10/0x10
[ 1203.072916][T27622]  ? rcu_is_watching+0x12/0xc0
[ 1203.072931][T27622]  futex_wake+0xf4/0x5e0
[ 1203.072947][T27622]  ? __pfx_futex_wake+0x10/0x10
[ 1203.072966][T27622]  do_futex+0x2b2/0x440
[ 1203.072979][T27622]  ? __pfx_do_futex+0x10/0x10
[ 1203.072991][T27622]  ? do_raw_spin_lock+0x128/0x260
[ 1203.073004][T27622]  ? __x64_sys_close_range+0x2d9/0x5d0
[ 1203.073025][T27622]  ? rcu_is_watching+0x12/0xc0
[ 1203.073039][T27622]  __x64_sys_futex+0x34f/0x4d0
[ 1203.073053][T27622]  ? __x64_sys_close_range+0x30f/0x5d0
[ 1203.073073][T27622]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1203.073087][T27622]  ? __pfx___x64_sys_close_range+0x10/0x10
[ 1203.073108][T27622]  ? rcu_is_watching+0x12/0xc0
[ 1203.073123][T27622]  do_syscall_64+0x115/0x840
[ 1203.073139][T27622]  ? clear_bhb_loop+0x40/0x90
[ 1203.073154][T27622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1203.073169][T27622] RIP: 0033:0x7f7d9a99ce59
[ 1203.073181][T27622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1203.073195][T27622] RSP: 002b:00007f7d9b8a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1203.073210][T27622] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa8 RCX: 00007f7d9a99ce59
[ 1203.073220][T27622] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d9ac15fac
[ 1203.073229][T27622] RBP: 00007f7d9ac15fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1203.073237][T27622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1203.073246][T27622] R13: 00007f7d9ac16038 R14: 00007ffc6e9d0230 R15: 00007ffc6e9d0318
[ 1203.073259][T27622]  </TASK>
[ 1203.343722][T27624] ubi0: attaching mtd0
[ 1203.350480][T27624] ubi0: scanning is finished
[ 1203.355185][T27624] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1203.405392][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.414843][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.423414][T27624] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1203.470583][T27624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'.
[ 1203.482357][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.491865][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.365631][ T5625] Bluetooth: hci13: command tx timeout
[ 1204.450494][T27644] netlink: del zone limit has 4 unknown bytes
[ 1204.502590][T27651] ovs_: entered promiscuous mode
[ 1206.112191][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3994'.
[ 1206.434885][ T5625] Bluetooth: hci13: command tx timeout
[ 1207.011822][T27678] FAULT_INJECTION: forcing a failure.
[ 1207.011822][T27678] name failslab, interval 1, probability 0, space 0, times 0
[ 1207.102014][T27678] CPU: 0 UID: 0 PID: 27678 Comm: syz.1.3997 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1207.102044][T27678] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1207.102050][T27678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1207.102059][T27678] Call Trace:
[ 1207.102065][T27678]  <TASK>
[ 1207.102073][T27678]  dump_stack_lvl+0x100/0x190
[ 1207.102093][T27678]  should_fail_ex.cold+0x5/0xa
[ 1207.102109][T27678]  ? __kmalloc_cache_noprof+0x53/0x6e0
[ 1207.102133][T27678]  should_failslab+0xc2/0x120
[ 1207.102150][T27678]  __kmalloc_cache_noprof+0x7a/0x6e0
[ 1207.102170][T27678]  ? do_inotify_init+0xa4/0x5e0
[ 1207.102186][T27678]  ? mutex_init_lockdep+0xf1/0x120
[ 1207.102208][T27678]  do_inotify_init+0xa4/0x5e0
[ 1207.102224][T27678]  ? rcu_is_watching+0x12/0xc0
[ 1207.102238][T27678]  __x64_sys_inotify_init1+0x30/0x40
[ 1207.102256][T27678]  do_syscall_64+0x115/0x840
[ 1207.102271][T27678]  ? clear_bhb_loop+0x40/0x90
[ 1207.102287][T27678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.102301][T27678] RIP: 0033:0x7f7d9a99ce59
[ 1207.102313][T27678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1207.102328][T27678] RSP: 002b:00007f7d9b8a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126
[ 1207.102343][T27678] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa0 RCX: 00007f7d9a99ce59
[ 1207.102353][T27678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000
[ 1207.102362][T27678] RBP: 00007f7d9aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1207.102371][T27678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1207.102380][T27678] R13: 00007f7d9ac16038 R14: 00007f7d9ac15fa0 R15: 00007ffc6e9d0318
[ 1207.102393][T27678]  </TASK>
[ 1208.491492][T27699] hub 27-0:1.0: USB hub found
[ 1208.503718][T27699] hub 27-0:1.0: 1 port detected
[ 1208.648957][T27704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.503171][   T30] audit: type=1800 audit(1843104558.555:36): pid=27714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4005" name="version" dev="configfs" ino=149721 res=0 errno=0
[ 1209.529446][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4006'.
[ 1209.547157][T27713] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4006'.
[ 1210.085346][T27721] FAULT_INJECTION: forcing a failure.
[ 1210.085346][T27721] name failslab, interval 1, probability 0, space 0, times 0
[ 1210.128247][T27721] CPU: 0 UID: 0 PID: 27721 Comm: syz.1.4008 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1210.128275][T27721] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1210.128281][T27721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1210.128290][T27721] Call Trace:
[ 1210.128296][T27721]  <TASK>
[ 1210.128303][T27721]  dump_stack_lvl+0x100/0x190
[ 1210.128324][T27721]  should_fail_ex.cold+0x5/0xa
[ 1210.128340][T27721]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1210.128356][T27721]  should_failslab+0xc2/0x120
[ 1210.128374][T27721]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1210.128388][T27721]  ? do_getname+0x35/0x390
[ 1210.128401][T27721]  ? preempt_count_add+0x76/0x150
[ 1210.128422][T27721]  do_getname+0x35/0x390
[ 1210.128437][T27721]  do_sys_openat2+0xc7/0x1e0
[ 1210.128452][T27721]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1210.128467][T27721]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1210.128486][T27721]  __x64_sys_openat+0x12d/0x210
[ 1210.128502][T27721]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1210.128518][T27721]  ? rcu_is_watching+0x12/0xc0
[ 1210.128534][T27721]  do_syscall_64+0x115/0x840
[ 1210.128549][T27721]  ? clear_bhb_loop+0x40/0x90
[ 1210.128565][T27721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1210.128580][T27721] RIP: 0033:0x7f7d9a95d68e
[ 1210.128592][T27721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1210.128606][T27721] RSP: 002b:00007f7d9b865ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1210.128621][T27721] RAX: ffffffffffffffda RBX: 00007f7d9b8666c0 RCX: 00007f7d9a95d68e
[ 1210.128631][T27721] RDX: 0000000000000002 RSI: 00007f7d9b865f90 RDI: ffffffffffffff9c
[ 1210.128640][T27721] RBP: 00007f7d9aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1210.128649][T27721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1210.128658][T27721] R13: 00007f7d9ac16218 R14: 00007f7d9ac16180 R15: 00007ffc6e9d0318
[ 1210.128672][T27721]  </TASK>
[ 1211.305817][T27736] random: crng reseeded on system resumption
[ 1212.544492][T27744] random: crng reseeded on system resumption
[ 1212.591899][T16505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1212.886601][T27744] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input36
[ 1212.940272][T27744] hub 1-0:1.0: USB hub found
[ 1212.961512][T27744] hub 1-0:1.0: 1 port detected
[ 1213.243706][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4012'.
[ 1214.037246][T27760] can: request_module (can-proto-0) failed.
[ 1214.444937][T27770] input: f�
 as /devices/virtual/input/input37
[ 1215.238831][T13208] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1215.247331][T13208] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1215.256412][T13208] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1215.265792][T13208] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1215.276972][T13208] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1216.137661][T27777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1216.180672][T27777] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.212936][T27777] bridge_slave_0: entered allmulticast mode
[ 1216.244998][T27777] bridge_slave_0: entered promiscuous mode
[ 1216.352344][T27777] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.376836][T27777] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.416508][T27777] bridge_slave_1: entered allmulticast mode
[ 1216.443938][T27777] bridge_slave_1: entered promiscuous mode
[ 1216.527499][T27777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1216.541805][T27805] Process accounting resumed
[ 1216.576210][T27777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1216.657441][T27777] team0: Port device team_slave_0 added
[ 1216.682115][T27777] team0: Port device team_slave_1 added
[ 1216.694139][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4024'.
[ 1216.735571][T27777] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1216.758618][T27777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1216.845774][T27777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1216.882956][T27777] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1216.912253][T27777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1216.991252][T27777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1217.062271][T27777] hsr_slave_0: entered promiscuous mode
[ 1217.073794][T27777] hsr_slave_1: entered promiscuous mode
[ 1217.094407][T27777] debugfs: 'hsr0' already exists in 'hsr'
[ 1217.121440][T27777] Cannot create hsr debugfs directory
[ 1217.301602][T27825] can: request_module (can-proto-5) failed.
[ 1217.317088][T27777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.343590][T13208] Bluetooth: hci14: command tx timeout
[ 1217.380675][T27777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.427556][T27777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.477065][T27777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.565081][T27777] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1217.591135][T27777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1217.609666][T27777] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1217.633379][T27777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1217.648912][T27777] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1217.669940][T27777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1217.694561][T27777] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1217.725760][T27777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1217.926514][ T5625] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1217.936475][ T5625] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1217.945050][ T5625] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1217.953632][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1217.961421][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1218.014874][T27777] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1218.094672][T27777] 8021q: adding VLAN 0 to HW filter on device team0
[ 1218.167331][T16505] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.174486][T16505] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1218.247855][T16505] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1218.255025][T16505] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1219.168747][   T30] audit: type=1800 audit(1843104568.280:37): pid=27896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4037" name="dbroot" dev="configfs" ino=151594 res=0 errno=0
[ 1219.286369][T27777] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1219.345485][T27845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1219.368739][T27845] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1219.383047][T27845] bridge_slave_0: entered allmulticast mode
[ 1219.390977][T27845] bridge_slave_0: entered promiscuous mode
[ 1219.403303][T27845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1219.420776][ T5625] Bluetooth: hci14: command tx timeout
[ 1219.428285][T27845] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1219.441421][T27845] bridge_slave_1: entered allmulticast mode
[ 1219.460242][T27845] bridge_slave_1: entered promiscuous mode
[ 1219.512511][T27845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1219.537357][T27845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1219.578201][T27845] team0: Port device team_slave_0 added
[ 1219.589975][T27845] team0: Port device team_slave_1 added
[ 1219.603791][T27777] veth0_vlan: entered promiscuous mode
[ 1219.621745][T27845] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1219.629816][T27845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1219.662186][T27845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1219.678234][T27777] veth1_vlan: entered promiscuous mode
[ 1219.695977][T27845] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1219.714896][T27845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1219.748578][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4038'.
[ 1219.763666][T27845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1219.839141][T27845] hsr_slave_0: entered promiscuous mode
[ 1219.846005][T27845] hsr_slave_1: entered promiscuous mode
[ 1219.852972][T27845] debugfs: 'hsr0' already exists in 'hsr'
[ 1219.862545][T27845] Cannot create hsr debugfs directory
[ 1219.874625][T27777] veth0_macvtap: entered promiscuous mode
[ 1219.905206][T27777] veth1_macvtap: entered promiscuous mode
[ 1219.972511][ T5625] Bluetooth: hci15: command tx timeout
[ 1220.026123][T27777] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1220.069648][T27777] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1220.156697][T16505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.187322][T16505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.247457][T16505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.282601][T16505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.374265][T27845] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.456672][T27845] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.540498][T27845] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.583795][T27845] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.617844][T24752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.641829][T24752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.686862][T24752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.718660][T24752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.753667][T27845] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1220.791474][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1220.829244][T27845] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1220.865677][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1220.900788][T27845] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1220.938459][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1220.971122][T27845] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1221.012993][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1221.315297][T27845] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1221.378851][T27845] 8021q: adding VLAN 0 to HW filter on device team0
[ 1221.423936][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1221.431286][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1221.484145][ T5625] Bluetooth: hci14: command tx timeout
[ 1221.567702][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1221.574874][ T6256] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1221.678835][T27845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1222.046753][ T5625] Bluetooth: hci15: command tx timeout
[ 1222.219873][ T5625] Bluetooth: hci13: unexpected subevent 0x01 length: 51 > 18
[ 1222.249542][T27966] binder: 27965:27966 ioctl c0046209 ffffffffffffffff returned -22
[ 1222.593799][T27845] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1222.701974][T27970] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4049: iget: checksum invalid
[ 1222.732727][T27970] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1222.809883][T27970] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4049: iget: checksum invalid
[ 1222.933421][T27970] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1222.991021][T27845] veth0_vlan: entered promiscuous mode
[ 1223.009700][T27970] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4049: iget: checksum invalid
[ 1223.035519][T27845] veth1_vlan: entered promiscuous mode
[ 1223.082879][T27845] veth0_macvtap: entered promiscuous mode
[ 1223.111981][T27845] veth1_macvtap: entered promiscuous mode
[ 1223.127287][T27970] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1223.161932][T27845] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1223.196656][T27845] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1223.208227][T27970] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4049: iget: checksum invalid
[ 1223.238750][T24752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1223.272454][T24752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1223.310232][T27970] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1223.329791][T24752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1223.359138][T24752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1223.390410][T27970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1223.424081][T27970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1223.448012][ T6507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1223.471232][ T6507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1223.521064][ T6256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1223.548538][ T6256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1223.561351][ T5625] Bluetooth: hci14: command tx timeout
[ 1224.117774][ T5625] Bluetooth: hci15: command tx timeout
[ 1224.271329][T13208] Bluetooth: hci13: command 0x2016 tx timeout
[ 1226.141618][T28056] FAULT_INJECTION: forcing a failure.
[ 1226.141618][T28056] name failslab, interval 1, probability 0, space 0, times 0
[ 1226.184283][ T5625] Bluetooth: hci15: command tx timeout
[ 1226.196498][T28056] CPU: 0 UID: 0 PID: 28056 Comm: syz.8.4064 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1226.196527][T28056] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1226.196533][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1226.196543][T28056] Call Trace:
[ 1226.196548][T28056]  <TASK>
[ 1226.196555][T28056]  dump_stack_lvl+0x100/0x190
[ 1226.196575][T28056]  should_fail_ex.cold+0x5/0xa
[ 1226.196592][T28056]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1226.196609][T28056]  should_failslab+0xc2/0x120
[ 1226.196627][T28056]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1226.196640][T28056]  ? __pmd_alloc+0xbf/0x950
[ 1226.196661][T28056]  __pmd_alloc+0xbf/0x950
[ 1226.196679][T28056]  huge_pte_alloc+0x5ee/0x730
[ 1226.196699][T28056]  hugetlb_fault+0x369/0x1410
[ 1226.196720][T28056]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1226.196743][T28056]  ? find_vma+0xbf/0x140
[ 1226.196757][T28056]  ? __pfx_find_vma+0x10/0x10
[ 1226.196772][T28056]  handle_mm_fault+0x5ff/0xa30
[ 1226.196794][T28056]  do_user_addr_fault+0x74c/0x12f0
[ 1226.196814][T28056]  exc_page_fault+0x6f/0xd0
[ 1226.196830][T28056]  asm_exc_page_fault+0x26/0x30
[ 1226.196844][T28056] RIP: 0010:rep_movs_alternative+0x11/0xa0
[ 1226.196867][T28056] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9e 04 00 66 66 2e 0f
[ 1226.196882][T28056] RSP: 0018:ffffc90005187e78 EFLAGS: 00050206
[ 1226.196895][T28056] RAX: 0000000000000070 RBX: 0000000000000006 RCX: 0000000000000006
[ 1226.196904][T28056] RDX: 0000000000000001 RSI: ffffffff8bf6a900 RDI: 0000000000000000
[ 1226.196913][T28056] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff17ed520
[ 1226.196922][T28056] R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8bf6a900
[ 1226.196931][T28056] R13: 0000000000000006 R14: 00007ffffffff000 R15: 0000000000000000
[ 1226.196944][T28056]  _copy_to_user+0xa4/0xd0
[ 1226.196966][T28056]  fs_name+0x25e/0x4a0
[ 1226.196980][T28056]  __x64_sys_sysfs+0xe6/0x120
[ 1226.196995][T28056]  do_syscall_64+0x115/0x840
[ 1226.197013][T28056]  ? clear_bhb_loop+0x40/0x90
[ 1226.197028][T28056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.197043][T28056] RIP: 0033:0x7fd4ccf9ce59
[ 1226.197054][T28056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1226.197067][T28056] RSP: 002b:00007fd4cddfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[ 1226.197081][T28056] RAX: ffffffffffffffda RBX: 00007fd4cd215fa0 RCX: 00007fd4ccf9ce59
[ 1226.197090][T28056] RDX: 0000000000000000 RSI: 0100000000000036 RDI: 0000000000000002
[ 1226.197099][T28056] RBP: 00007fd4cd032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1226.197108][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1226.197117][T28056] R13: 00007fd4cd216038 R14: 00007fd4cd215fa0 R15: 00007ffc7c8d6cd8
[ 1226.197130][T28056]  </TASK>
[ 1226.654919][ T5625] Bluetooth: hci13: command 0x2016 tx timeout
[ 1227.248402][T28076] random: crng reseeded on system resumption
[ 1228.040817][T28097] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1228.729030][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'.
[ 1229.205918][T28120] random: crng reseeded on system resumption
[ 1230.585703][T28131] bond0: invalid ARP target specified
[ 1230.975623][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1230.983752][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1231.505996][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'.
[ 1232.417830][T28188] FAULT_INJECTION: forcing a failure.
[ 1232.417830][T28188] name failslab, interval 1, probability 0, space 0, times 0
[ 1232.480288][T28188] CPU: 0 UID: 0 PID: 28188 Comm: syz.1.4093 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1232.480317][T28188] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1232.480323][T28188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1232.480333][T28188] Call Trace:
[ 1232.480339][T28188]  <TASK>
[ 1232.480345][T28188]  dump_stack_lvl+0x100/0x190
[ 1232.480364][T28188]  should_fail_ex.cold+0x5/0xa
[ 1232.480380][T28188]  ? kmem_cache_alloc_noprof+0x54/0x6d0
[ 1232.480396][T28188]  should_failslab+0xc2/0x120
[ 1232.480412][T28188]  kmem_cache_alloc_noprof+0x7b/0x6d0
[ 1232.480426][T28188]  ? ptlock_alloc+0x1f/0x70
[ 1232.480456][T28188]  ptlock_alloc+0x1f/0x70
[ 1232.480476][T28188]  pte_alloc_one+0x82/0x3d0
[ 1232.480497][T28188]  __pte_alloc+0x6d/0x3e0
[ 1232.480512][T28188]  ? __pfx___pte_alloc+0x10/0x10
[ 1232.480527][T28188]  ? do_raw_spin_lock+0x128/0x260
[ 1232.480541][T28188]  ? __pmd_alloc+0x3f6/0x950
[ 1232.480558][T28188]  do_anonymous_page+0x13a7/0x2080
[ 1232.480580][T28188]  ? __pmd_alloc+0x3fb/0x950
[ 1232.480597][T28188]  __handle_mm_fault+0x1d2c/0x2a00
[ 1232.480619][T28188]  ? mt_find+0x45e/0x8e0
[ 1232.480637][T28188]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1232.480675][T28188]  ? __pfx_mt_find+0x10/0x10
[ 1232.480696][T28188]  ? find_vma+0xbf/0x140
[ 1232.480710][T28188]  ? __pfx_find_vma+0x10/0x10
[ 1232.480725][T28188]  handle_mm_fault+0x37b/0xa30
[ 1232.480747][T28188]  do_user_addr_fault+0x74c/0x12f0
[ 1232.480766][T28188]  exc_page_fault+0x6f/0xd0
[ 1232.480781][T28188]  asm_exc_page_fault+0x26/0x30
[ 1232.480796][T28188] RIP: 0010:copy_iovec_from_user+0xcf/0x140
[ 1232.480820][T28188] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 0b b4 0d fd 4d 85 e4 74 57 e8 21 b9 0d fd <4c> 8b 6d 08 e8 18 b9 0d fd 4c 8b 7d 00 e8 0f b9 0d fd 31 ff 4c 89
[ 1232.480835][T28188] RSP: 0018:ffffc90006457a30 EFLAGS: 00050293
[ 1232.480847][T28188] RAX: 0000000000000000 RBX: ffffc90006457c60 RCX: ffffffff84fb01eb
[ 1232.480857][T28188] RDX: ffff888030cf9f00 RSI: ffffffff84fb025f RDI: ffff888030cf9f00
[ 1232.480867][T28188] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000
[ 1232.480876][T28188] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000001
[ 1232.480885][T28188] R13: 0000000000000010 R14: dffffc0000000000 R15: 0000000000000000
[ 1232.480896][T28188]  ? copy_iovec_from_user+0x5b/0x140
[ 1232.480916][T28188]  ? copy_iovec_from_user+0xcf/0x140
[ 1232.480941][T28188]  __import_iovec+0x442/0x640
[ 1232.480965][T28188]  import_iovec+0x82/0xb0
[ 1232.480986][T28188]  copy_msghdr_from_user+0x2c6/0x4c0
[ 1232.481004][T28188]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1232.481021][T28188]  ? plist_check_list+0x1b8/0x280
[ 1232.481041][T28188]  ? plist_del+0x308/0x510
[ 1232.481061][T28188]  ___sys_sendmsg+0x106/0x1e0
[ 1232.481076][T28188]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1232.481092][T28188]  ? futex_wake+0x220/0x5e0
[ 1232.481110][T28188]  ? rcu_is_watching+0x12/0xc0
[ 1232.481131][T28188]  __sys_sendmsg+0x160/0x210
[ 1232.481151][T28188]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1232.481173][T28188]  ? rcu_is_watching+0x12/0xc0
[ 1232.481187][T28188]  do_syscall_64+0x115/0x840
[ 1232.481229][T28188]  ? clear_bhb_loop+0x40/0x90
[ 1232.481246][T28188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.481260][T28188] RIP: 0033:0x7f7d9a99ce59
[ 1232.481271][T28188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1232.481285][T28188] RSP: 002b:00007f7d9b8a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1232.481298][T28188] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa0 RCX: 00007f7d9a99ce59
[ 1232.481307][T28188] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005
[ 1232.481339][T28188] RBP: 00007f7d9aa32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1232.481348][T28188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1232.481357][T28188] R13: 00007f7d9ac16038 R14: 00007f7d9ac15fa0 R15: 00007ffc6e9d0318
[ 1232.481371][T28188]  </TASK>
[ 1233.302538][T13208] Bluetooth: hci5: command 0x0406 tx timeout
[ 1233.626468][T28202] bond0: Unable to set down delay as MII monitoring is disabled
[ 1234.366861][T28226] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4100'.
[ 1235.773912][T28250] input: jBǸ-���9�!v����l��Q����aǙn�?a��rk%l6���x� �b6�Yh�X�.=��_�<P as /devices/virtual/input/input38
[ 1237.056525][T28268] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[ 1237.129055][T28269] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input39
[ 1237.472120][T13208] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1237.480328][T13208] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1237.497446][T13208] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1237.505466][T13208] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1237.514847][T13208] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1238.086370][T28281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1238.104915][T28281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1238.114723][T28281] bridge_slave_0: entered allmulticast mode
[ 1238.121897][T28281] bridge_slave_0: entered promiscuous mode
[ 1238.133435][T28303] random: crng reseeded on system resumption
[ 1238.150869][T28281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1238.172731][T28281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1238.187772][T28281] bridge_slave_1: entered allmulticast mode
[ 1238.209103][T28281] bridge_slave_1: entered promiscuous mode
[ 1238.264226][T28281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1238.295515][T28281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1238.347425][T28281] team0: Port device team_slave_0 added
[ 1238.380706][T28281] team0: Port device team_slave_1 added
[ 1238.422436][T28281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1238.440963][T28281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1238.484452][T28281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1238.505324][T28281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1238.517994][T28281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1238.548404][T28281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1238.638142][T28281] hsr_slave_0: entered promiscuous mode
[ 1238.655099][T28281] hsr_slave_1: entered promiscuous mode
[ 1238.671413][T28281] debugfs: 'hsr0' already exists in 'hsr'
[ 1238.683387][T28281] Cannot create hsr debugfs directory
[ 1238.785306][T28310] FAULT_INJECTION: forcing a failure.
[ 1238.785306][T28310] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1238.824859][T28310] CPU: 0 UID: 0 PID: 28310 Comm: syz.1.4115 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1238.824887][T28310] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1238.824893][T28310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1238.824903][T28310] Call Trace:
[ 1238.824909][T28310]  <TASK>
[ 1238.824915][T28310]  dump_stack_lvl+0x100/0x190
[ 1238.824936][T28310]  should_fail_ex.cold+0x5/0xa
[ 1238.824954][T28310]  get_futex_key+0x1d2/0x14f0
[ 1238.824978][T28310]  ? __pfx_get_futex_key+0x10/0x10
[ 1238.825001][T28310]  futex_wake+0xf4/0x5e0
[ 1238.825017][T28310]  ? __pfx_futex_wake+0x10/0x10
[ 1238.825032][T28310]  ? trace_irq_enable.constprop.0+0x122/0x160
[ 1238.825054][T28310]  ? putname+0xb1/0x110
[ 1238.825074][T28310]  ? kmem_cache_free+0x127/0x6b0
[ 1238.825096][T28310]  do_futex+0x2b2/0x440
[ 1238.825109][T28310]  ? __pfx_do_futex+0x10/0x10
[ 1238.825122][T28310]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1238.825137][T28310]  ? lock_release+0x24d/0x310
[ 1238.825157][T28310]  __x64_sys_futex+0x34f/0x4d0
[ 1238.825171][T28310]  ? __x64_sys_openat+0x12d/0x210
[ 1238.825186][T28310]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1238.825201][T28310]  ? rcu_is_watching+0x12/0xc0
[ 1238.825216][T28310]  do_syscall_64+0x115/0x840
[ 1238.825232][T28310]  ? clear_bhb_loop+0x40/0x90
[ 1238.825249][T28310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.825263][T28310] RIP: 0033:0x7f7d9a99ce59
[ 1238.825276][T28310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1238.825290][T28310] RSP: 002b:00007f7d9b8a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1238.825305][T28310] RAX: ffffffffffffffda RBX: 00007f7d9ac15fa8 RCX: 00007f7d9a99ce59
[ 1238.825315][T28310] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d9ac15fac
[ 1238.825324][T28310] RBP: 00007f7d9ac15fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1238.825333][T28310] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1238.825341][T28310] R13: 00007f7d9ac16038 R14: 00007ffc6e9d0230 R15: 00007ffc6e9d0318
[ 1238.825355][T28310]  </TASK>
[ 1239.065793][T28281] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.126985][T28281] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.154442][T28281] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.183979][T28281] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.233531][T28281] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1239.243557][T28281] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1239.251575][T28281] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1239.259709][T28281] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1239.267536][T28281] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1239.294484][T28281] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1239.309437][T28281] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1239.330972][T28281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1239.448463][T28281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1239.486669][T28281] 8021q: adding VLAN 0 to HW filter on device team0
[ 1239.513224][T16514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1239.520570][T16514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1239.561915][ T5625] Bluetooth: hci16: command tx timeout
[ 1239.573886][T16514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1239.581021][T16514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1239.902943][T28345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4120'.
[ 1239.979609][T28345] netlink: 78 bytes leftover after parsing attributes in process `syz.1.4120'.
[ 1240.002196][T28281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1240.013912][T28340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1240.273322][T28281] veth0_vlan: entered promiscuous mode
[ 1240.302967][T28281] veth1_vlan: entered promiscuous mode
[ 1240.349723][T28281] veth0_macvtap: entered promiscuous mode
[ 1240.369607][T28281] veth1_macvtap: entered promiscuous mode
[ 1240.410597][T28281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1240.439919][T28281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1240.471167][ T6140] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.491629][ T6140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.526217][ T6140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.560767][ T6140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.630024][T16514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.661506][T16514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.729833][ T6507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.747700][ T6507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.630704][ T5625] Bluetooth: hci16: command tx timeout
[ 1241.961707][T28384] random: crng reseeded on system resumption
[ 1242.426039][   T31] INFO: task syz.1.3541:24878 blocked for more than 143 seconds.
[ 1242.445155][   T31]       Tainted: G     U       L      syzkaller #0
[ 1242.461056][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1242.487656][   T31] task:syz.1.3541      state:D stack:27784 pid:24878 tgid:24877 ppid:18518  task_flags:0x400140 flags:0x00080002
[ 1242.535758][   T31] Call Trace:
[ 1242.551741][   T31]  <TASK>
[ 1242.563272][   T31]  __schedule+0x125c/0x6730
[ 1242.595256][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1242.609324][   T31]  ? do_raw_spin_lock+0x128/0x260
[ 1242.631360][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1242.642190][   T31]  ? debug_mutex_add_waiter+0x122/0x200
[ 1242.659817][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1242.681277][   T31]  ? __pfx___schedule+0x10/0x10
[ 1242.703697][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1242.719316][   T31]  ? schedule+0x2bf/0x390
[ 1242.747351][   T31]  ? lock_release+0x24d/0x310
[ 1242.752519][   T31]  schedule+0xdd/0x390
[ 1242.764252][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1242.782116][   T31]  __mutex_lock+0xccc/0x1bd0
[ 1242.802941][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1242.821519][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[ 1242.839611][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1242.856015][   T31]  ? net_generic+0xea/0x2a0
[ 1242.870791][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1242.886071][   T31]  ? net_generic+0xea/0x2a0
[ 1242.909821][   T31]  ? lock_release+0x24d/0x310
[ 1242.926685][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1242.945074][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1242.962001][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[ 1242.980551][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1243.002286][   T31]  ? genl_get_cmd+0x3e7/0x760
[ 1243.020202][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1243.035841][   T31]  ? security_capable+0x80/0x260
[ 1243.050954][   T31]  genl_rcv_msg+0x560/0x800
[ 1243.066132][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1243.083557][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 1243.104934][   T31]  netlink_rcv_skb+0x159/0x420
[ 1243.121371][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1243.139898][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1243.157922][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1243.175063][   T31]  genl_rcv+0x28/0x40
[ 1243.188781][   T31]  netlink_unicast+0x585/0x850
[ 1243.213719][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1243.241072][   T31]  netlink_sendmsg+0x8b0/0xda0
[ 1243.259327][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1243.271599][   T31]  ? __import_iovec+0x1d2/0x640
[ 1243.281673][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1243.294714][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[ 1243.327921][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1243.375876][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1243.393620][   T31]  ___sys_sendmsg+0x190/0x1e0
[ 1243.410901][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1243.420559][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1243.427245][   T31]  __sys_sendmsg+0x160/0x210
[ 1243.432248][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1243.437395][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1243.444765][   T31]  do_syscall_64+0x115/0x840
[ 1243.449430][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1243.455360][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1243.461651][   T31] RIP: 0033:0x7fc246f9ce59
[ 1243.466252][   T31] RSP: 002b:00007fc247ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1243.475024][   T31] RAX: ffffffffffffffda RBX: 00007fc247215fa0 RCX: 00007fc246f9ce59
[ 1243.483284][   T31] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000004
[ 1243.491502][   T31] RBP: 00007fc247032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1243.499496][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1243.512289][   T31] R13: 00007fc247216038 R14: 00007fc247215fa0 R15: 00007ffdde3c2b18
[ 1243.520504][   T31]  </TASK>
[ 1243.530821][   T31] INFO: lockdep is turned off.
[ 1243.569766][   T31] NMI backtrace for cpu 0
[ 1243.569782][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1243.569804][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1243.569810][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1243.569819][   T31] Call Trace:
[ 1243.569824][   T31]  <TASK>
[ 1243.569837][   T31]  dump_stack_lvl+0x100/0x190
[ 1243.569857][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1243.569873][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1243.569890][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1243.569914][   T31]  sys_info+0x141/0x190
[ 1243.569932][   T31]  watchdog+0xcb1/0x1030
[ 1243.569953][   T31]  ? trace_irq_enable.constprop.0+0x122/0x160
[ 1243.569974][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1243.569992][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1243.570007][   T31]  ? kthread+0x13a/0x450
[ 1243.570022][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1243.570041][   T31]  kthread+0x370/0x450
[ 1243.570057][   T31]  ? __pfx_kthread+0x10/0x10
[ 1243.570074][   T31]  ret_from_fork+0x72b/0xd50
[ 1243.570089][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1243.570104][   T31]  ? __switch_to+0x800/0x10f0
[ 1243.570125][   T31]  ? __switch_to_asm+0x39/0x70
[ 1243.570142][   T31]  ? __pfx_kthread+0x10/0x10
[ 1243.570159][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1243.570180][   T31]  </TASK>
[ 1243.775341][ T5625] Bluetooth: hci16: command tx timeout
[ 1243.938075][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1243.945020][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1243.955689][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1243.960867][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1243.970913][   T31] Call Trace:
[ 1243.974185][   T31]  <TASK>
[ 1243.977141][   T31]  dump_stack_lvl+0x100/0x190
[ 1243.981988][   T31]  vpanic+0x552/0x970
[ 1243.985962][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1243.990454][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1243.996603][   T31]  panic+0xd1/0xe0
[ 1244.000312][   T31]  ? __pfx_panic+0x10/0x10
[ 1244.004735][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1244.011048][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1244.017217][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1244.023373][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1244.028139][   T31]  ? watchdog+0xcc1/0x1030
[ 1244.032551][   T31]  watchdog.cold+0x1fd/0x234
[ 1244.037130][   T31]  ? trace_irq_enable.constprop.0+0x122/0x160
[ 1244.043188][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1244.047863][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1244.052872][   T31]  ? kthread+0x13a/0x450
[ 1244.057101][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1244.061767][   T31]  kthread+0x370/0x450
[ 1244.065828][   T31]  ? __pfx_kthread+0x10/0x10
[ 1244.070405][   T31]  ret_from_fork+0x72b/0xd50
[ 1244.074980][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1244.080077][   T31]  ? __switch_to+0x800/0x10f0
[ 1244.084743][   T31]  ? __switch_to_asm+0x39/0x70
[ 1244.089491][   T31]  ? __pfx_kthread+0x10/0x10
[ 1244.094067][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1244.098861][   T31]  </TASK>
[ 1244.101936][   T31] Kernel Offset: disabled
[ 1244.106250][   T31] Rebooting in 86400 seconds..