last executing test programs:

21m55.220263006s ago: executing program 2 (id=1430):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x7180, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0xffffffffffffffff, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x107f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x18084, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x20000000007, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x4, 0x9, 0xa, 0x0, 0x2, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb1, 0x8000000, 0x10001, 0xfffffffffffffffb, 0x3]}, 0x1fe, 0x10)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
socket(0x11, 0x80000, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r2, 0x6, 0x25, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x1)
connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r4, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
unshare$auto(0x85)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto(r0, 0x1, 0xffffffffffffffff)
fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0)
mmap$auto(0x80000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0)

21m39.95171796s ago: executing program 32 (id=1430):
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x3, 0x1ff, 0x10001001, 0x1, 0x7180, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0xffffffffffffffff, 0x1ffffffffffd, 0xb5, 0x2, 0x7, 0x10002, 0x107f, 0x8, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x18084, 0x0, 0x0, 0x0, 0xfffd, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, 0x20000000007, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x4, 0x9, 0xa, 0x0, 0x2, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0xfffff7ffffffffff, 0x5eb1, 0x8000000, 0x10001, 0xfffffffffffffffb, 0x3]}, 0x1fe, 0x10)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0))
socket(0x11, 0x80000, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r2, 0x6, 0x25, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x1)
connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55)
io_uring_setup$auto(0x1, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r4, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
unshare$auto(0x85)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto(r0, 0x1, 0xffffffffffffffff)
fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x10a00, 0x0)
mmap$auto(0x80000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0)

9m52.720230379s ago: executing program 4 (id=3786):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0)
mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r0 = socket(0xa, 0x2, 0x3a)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100)
munmap$auto(0x8000, 0xffffffff)
r1 = pidfd_open$auto(0x1, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, r1, 0x0, 0x273)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xb, 0x0)
r2 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
close_range$auto(0x0, 0xffffeffe, 0x2)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
socket(0xa, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000)
bpf$auto(0x7fffffe, &(0x7f00000001c0)=@test={r3, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x40006, 0x81, 0x68198}, 0x6)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}})
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

9m52.185969848s ago: executing program 4 (id=3789):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000008000)
r0 = io_uring_setup$auto(0x2, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)={0x80040, 0x40, 0xc}, 0x18)
mmap$auto(0x80, 0x2000c, 0xdf, 0x20eb1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x0)
io_uring_setup$auto(0x1, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101c81, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0000, 0x0)
epoll_create$auto(0x1)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r3 = fcntl$auto(r2, 0x410, 0x0)
unlink$auto(&(0x7f0000000000)='./file0\x00')
r4 = pipe2$auto(0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_uhid_fops_uhid(r4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
listen$auto(r3, 0x200)
ftruncate$auto(0xffffffffffffffff, 0x8001)
mmap$auto(0xfffffffffffffffc, 0x0, 0x4, 0x1000000003135, 0xffffffffffffffff, 0x80004)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a33, &(0x7f0000000140)={0x0, 0x7f}, 0x4, 0x0, 0xfff, 0x84}, 0xfffffffb}, 0x7b, 0xdb22, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
socket(0x2, 0xa, 0x0)

9m51.724656626s ago: executing program 4 (id=3790):
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80)
socket(0x3, 0x80000, 0x0) (async, rerun: 64)
r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async, rerun: 64)
write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r1)
sendmsg$auto_SMC_PNETID_DEL(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="17146c55c6ef45", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) (async)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
unshare$auto(0x40000080) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) (rerun: 32)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async)
socket(0x2, 0x80002, 0x73)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VERSION={0x13, 0x1, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async)
memfd_create$auto(0x0, 0x40) (async, rerun: 64)
syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000380)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00', 0x3) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0)
syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000000)='&.!/@-\x00', 0x6)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async)
ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) (async)
setresgid$auto(0x0, 0x0, 0x0) (async)
ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, 0x0)
shmctl$auto_SHM_STAT(0x1, 0xd, 0x0) (async)
ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) (async)
lseek$auto(r3, 0x7fff, 0x40001000)

9m51.015907638s ago: executing program 4 (id=3792):
pwritev2$auto(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)="15c96169d0dee13c", 0x7}, 0xc4, 0x6, 0x0, 0x1ff)
r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps\x00', 0x28200, 0x0)
read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000000c0)=""/71, 0x47)
r1 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy7/hwsim/group\x00', 0x200, 0x0)
read$auto_hwsim_fops_group_(r1, &(0x7f0000000180)=""/40, 0x28)
sysfs$auto(0x20000000, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8040)
madvise$auto(0xf, 0x8, 0x8)
r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x200, 0x0)
ioctl$auto_XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000340)={{[0x800, 0xa9, 0x7, 0x230c]}, 0x1, 0x400, 0x0, 0x0, 0x4})
r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
r6 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000003c0)={@_si_pad}, 0x4, &(0x7f0000000440)={{0x2, 0x22}, {0x4, 0x9}, 0x6, 0x4, 0xede, 0xff, 0x0, 0x8, 0x3, 0x8, 0xfffffffffffffffd, 0x7, 0x5, 0xf0a, 0x1, 0x8000000000000000})
ioctl$auto_LOOP_CTL_GET_FREE(r5, 0x4c82, r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_NAPI_SET(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0x33b97d8c}, @NETDEV_A_NAPI_IRQ_SUSPEND_TIMEOUT={0xc, 0x7, 0x100}, @NETDEV_A_NAPI_GRO_FLUSH_TIMEOUT={0xc, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000810)
sysfs$auto(0x52, 0x4, 0x5a9)
sysfs$auto(0x3, 0x9, 0x1)
r8 = socket(0xa, 0x2, 0xb5c4)
r9 = fsmount$auto(r8, 0x6, 0x2)
writev$auto(r5, &(0x7f0000000680)={&(0x7f0000000640)="b6db31ccc29f964f85ddd38f1c25a641e249e5b0beec461e", 0x8001}, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/tty/tty19/dev\x00', 0x82700, 0x0)
ioctl$auto_I2C_SLAVE_FORCE(r9, 0x706, &(0x7f0000000700)="a4d5f3fb62fbbd14e8472cb1f1d122ef48ccdaad66aa193de7a65415e3fec9b5a73ae5433cfc956c77125c3fffe3407ab501ac9110d58ad1adcd3a6e11bdd49163e0b5fd91c270e2c13bf9e5d93446aafc0173a1992ee1fdfef5da9f39b5cb66893d5da2d2af95515ab59974e404e29abffc732637a2c8d3d6352d61b54171686865a44c")
getsockopt$auto_SO_TXTIME(r0, 0x0, 0x3d, &(0x7f00000007c0)='\x00', &(0x7f0000000800)=0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000840)='/dev/video8\x00', 0x10000, 0x0)
r10 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r9, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x78, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r11}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x4c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4188}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x981d6c26}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x400}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x5}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7ff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7fffffff}]}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

9m50.646523758s ago: executing program 4 (id=3794):
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8)
r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$auto(r0, 0x80a86f3d, 0x38)
mmap$auto(0x4, 0x2020009, 0x40a, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000)
capget$auto(0x0, 0xfffffffffffffffe)
socket(0x1d, 0x3, 0x1)
r1 = getsockopt$auto(r0, 0x7, 0x8, 0x0, 0x0)
keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xc, 0x2, 0x0, 0x0, 0x1)
mmap$auto(0x0, 0x1, 0x0, 0x9b75, r1, 0x8002)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x800000000008000)
openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x20001, 0x0)
capset$auto(&(0x7f0000000380)={0x2008051f, <r2=>0x0}, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.8/usb25/remove\x00', 0x5e30523b26a2a748, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b62, r3)
msync$auto(0x7, 0x7, 0xb)
mmap$auto(0x180, 0x80000001, 0x5, 0xeb1, 0xfffffffffffffffa, 0x7)
r5 = socket(0x10, 0x2, 0x14)
r6 = open(&(0x7f0000000800)='./file0\x00', 0x62241, 0x150)
execveat$auto(r6, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000)
msgctl$auto_MSG_STAT(0xc7, 0xb, &(0x7f0000000300)={{0x9, 0xee01, <r7=>0xee01, 0x4cc, 0xffffffff, 0xbb, 0x2}, &(0x7f00000003c0)=0xfd, &(0x7f0000000180)=0xf, 0x3, 0x5, 0x1, 0xa, 0x2, 0x5, 0x5, 0x0, @raw=0x2, @inferred=r2})
ioctl$auto_XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000240)={0x710, 0x7fff, 0xffffffffffffffff, r7, 0x100, 0x0, 0x7fffffff})
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
socket(0x1d, 0x2, 0x7)
unshare$auto(0x40000080)
move_mount$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x401)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sg1\x00', 0x2802, 0x0)
vmsplice$auto(0xffffffffffffffff, 0x0, 0x6, 0x1)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r5, 0x4030582b, 0x0)

9m49.852214388s ago: executing program 4 (id=3797):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto(r0, 0x0, 0x800000006)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="02")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x3fb, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="19"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
write$auto(r0, 0x0, 0x800000006) (async)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="02") (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) (async)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x3fb, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="19"], 0x1ac}}, 0x40000) (async)

9m34.64456699s ago: executing program 33 (id=3797):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
write$auto(r0, 0x0, 0x800000006)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="02")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x3fb, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="19"], 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async)
write$auto(r0, 0x0, 0x800000006) (async)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)="02") (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) (async)
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x3fb, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="19"], 0x1ac}}, 0x40000) (async)

3m56.040008378s ago: executing program 3 (id=4685):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdb, 0x9b72, 0x2, 0x40000008000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

3m51.624226397s ago: executing program 3 (id=4692):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r0, 0x0, 0x4)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
socket(0xa, 0x2, 0x3a)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

3m48.620957503s ago: executing program 3 (id=4700):
r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x4a0082, 0x0)
r1 = signalfd$auto(r0, &(0x7f00000001c0)={0x63b}, 0x4)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/217, 0xd9)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$auto(r3, 0x6a, 0x5, 0x0, 0x3)
r4 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0xfffd}]}, 0x1c}}, 0x20000810)
select$auto(0x5, 0x0, 0x0, 0x0, 0x0)
setfsgid$auto(0x9)
setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef)

3m47.030326657s ago: executing program 3 (id=4702):
r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0x4eb2, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
shutdown$auto(0x200000003, 0x2)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x58400, 0x22)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000))
r3 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r3, 0x1, r1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39)

3m45.480171721s ago: executing program 3 (id=4703):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
socket(0x2, 0x3, 0x6) (async, rerun: 32)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) (async)
r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x404000, 0x2, 0x0, 0xfffffffffffffffe, 0x2)
ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={@raw=0x4, 0x8000000, 0x6, @unused, @name="8e4d885334fb2160d8910878ad990ee2f5c819742f4586f2431c632a5576e0797486a6b6c914ba9472332569e9d9c6e9283cce5e76c90f2ed89e2921b9f2cb77b2b88ec495ee58723b076999f4cc36a0cda9a03b602bd590fd879879c9ac63410f28695a2413a74efbe4ecbe3b876e0adec864d0bbbe790265cf7a577ebae41b8a793315c649f7600553b2318684e5f2c5877fbacbccb5fd2c52c48bd62576bd0a150dcafb24c4a95323623b3933c1164ef9ed36d4ff3749114d676fd0ffd33b60083a35b514788a018481d4246191c6eff8976cb608364f398f5afb6967af5b0b5449ae4df56060a04547b58d0381d2a70d7157fb20f1f7593050800123182c1e15eea427fddf71362985ac3fe367a3f0dba45f9412c07252dff14ac02fd3455a251e74982775c96cb24443e2ad7f48612dec43cd65654e632396ff24d2513647837d9ece6a9b3fd3c2fefd9d181bb749dcd938d129df63d244858e0249b68f124c7db7edb4f260651e9332f6d98639c12220eb8548648034f23f6715365c4012b6c7b50168dd0369852f7285bf9292cfb09e18500ec7885e0625be510b751209889e8180c093d3790d4f4242d8b48df925d1c27fecff18728f72c7b86a393759f38a534779d009e5db07b3fdb001bd072250441c5cc52136ee98ad02ac9d7dc5a5339e69692db4ce8203df39fcd5e7ba78ab73a15c64295d8d65cc095b562c640ca0b90245f630caf319c152089a5506699f85702b394a56d4b0471683f15c33ba7b553dee330a850c16431fab6c7ee7a6f0ef396ed799f8e52e2d671448536b13cda673ad1bf7b431d266f85978543eed31bff9e3ccf1ea60c3787cf872aa05d2300d34f38ab7f5dabc3328112bab582bc1adfc74a6357dc849e8a9d653fac067d8eaff3fdcd6b3595b2940db1f857de1143e7f1197b5a293a7e8645137454a5e753407a881038fc8a01a8b87ac42bba9c3feac5551915a128719efa61ac4b5627ff6d6273bfafd5f4dad4f27741800bec44611c07b36d86032866de1cb8c363a37168d13bcca74e9201f31e89e6205445ffe6a1e665906930eda04afbae0fcc743a6976605b74cc0c89effcb72a526524374b9398f077d3163e9c12643fb5d409f5499e9b53aced7a8d5a9a74ae055ca27315e743d6c9adf0780aace0777d331553ee59acf78de409abb31e8e6f061dd6ac9c764a5752704b2d48a1186976a2d9158bdd954021a700d035be49c6386aa32c41ff565dd96e6257d62fb5786d176a059d4713e12e8c20c2c96281fb427acaaa64f658e40f94a5980fb91116708fa7fe3a91a506a78a0904401800981212496475ee60b53471556a2634117bf8e3961b1b39fb6b6afed447df375e0dbe6d64d043e3aa770ed3dc662e4ab6787cec873c6aeeec4e4bc07d2b845ff749a3cd5538824559c1bd199a8712aa7faa7eba3c6e0bffef2e06756d651b3b93cb305cd89c392967f7847be8780083803cb98b1a58aed894374e285e46099c2e34a1dad84bcb05e0aec296784ab8246250f868868909b8c280cef9ebe417c80b5c1ef7ea4f79a49c32c05440ca41788154bfc02966c0fbd95706841c605dc24668c0009b20283f623abd6cbb823874d40cf1d01ff70b25300eae9ad2a4429ce7a3e2dc266dac7ac0b36f816ef7341de7b8ac7f5531e546b5c4372ccb152da74e64f5439ba79c6750b3bcb3c190d3d742a0e535231cb3ae99d012e04487eb38fed6fea4fe75d265ad5347ff9d6ed544670a042bfc04d441b105bc94866073e0430e568e307f2d746a4667763f037097d44bff9b20a5a30a5592be471b433f9d7e9b651afa27235108f4df2ee6fc5f8cd7df21585c35feace917cd7956cd6a77d5004895cf7b74b68bf1bd5150b5242654e1a8555c312cf6d297ed64986b69420a92a54e586d3af02e52ea0fe79c3f03660b28933243c5da00110edcde20b70892d3c9d3f764fa69ec412a2cb2b882c1f1fc4cca05e4ceb3831f2827fa161cbd12e959944335ee4f0c09acaf12dd41331464d6f82004b749724e97793d2215b27cedd6732be1a83f9e0844824a03b63600b507de69277531b7726abd83f75f1d9d7b0b9851751c09fc634e75482aa7a0a16bee68ba9bbcf646cbdf68b256d1573fb984ded6610b2d35c0aa523c962994f6b39dfe8c6b00d28b01c0708a7f2b712fe66e390f969413cf9a0413a141874119678f0b2615612ecc73f3b376c633ad9a964c96389029a923e7eba9ef851820f041fccfd22a5a50f4d7b23a8cd5152b6008bf0d9dde8676c89fb187ebbb15d8fc894ce1ac545d1a1e24d8476502c7c2de9657f12f6b7d3dd1849ce754eeb447455c5ed43c964d9e913a798872cc54a0f6a3d71515c0fabf5255a59072b23a7f1e0b41e01d5cfea0dfdaf398832aa55c9f336cc14799b9438c42a2d8338e9a97172cbdffe9ecdd7186949c50e2a7c60caed0c5a2fe8156e76c64ef163fcc6c232a9f5b2b8f5caa4c089b0e11198ab79f44943804c657168da9b65d4e6fe674c91fec38da00bba7b0f16ced65675a3d6809fbf7399628c2518637c592015e466e22151b9155b3352de3d28a589b9c8a7618081c7d81087b0e72046381124c0a9aa79eb2489b0ce1eaaee08c620a53655b3f46d02d3f0faec4a76c5df14dfd6ce9775f93efa340d8ec0986d6ccdb2b58847461944718dfb5660eed53bf43c48faf920ffea4372e086645aefde3b4bf5699578df22e4fa15cd9905e8bda4d96e2a992af09235632c7cd474fba4e0bdbf43501b3599a4d484d1d03b9daeb24c23e0b57b7c69f151d73b9648b1f7108fa973d6ad100a554e456c9c2b0b15f196569c808ebaacb87bd34e9f6948ce92c5c898f0c7433ae617daba645b53a20fe6acdcc041b9c58097da088dc412f8a6075a8e1b6e65f54cba8fb35c935ef37692d804e2d01ca60511b5a89d3f0f55989506be3d92dad7d0661cd21913257c283433d3be20670d7193e0ec1da417d15e7f3a34a542c6d88a9a63a17ab4932b8f823f86c0ecd355c884fd229c677dcd860697e9ccfd5989376375498861d9a881e527c61ebf36cca6c79fe81da0290ca8577721a35eea6274460c73c4e2148ed68cce046eb445dc458aa0241b1529908af62b252a251ac9701eca9806cf8c7a5f911b4e0ce5e94f5feaa626b41dc014fedfc851ca1bfb8e5fa824b554df172645fcd31dc89c9b53d4ba272e7f44c49241b6e16606bd000b08c726c973fac250fab66cb979a4e5450fb501e7b81495dcd4b93c75cff60dcd3f1c2c12ccb7f2953190b0cc01e64d64941a92a71da5596d1df2f2a3f2ee2b4c8e1b802c6eec3073515f573867324493cd9a0bdd5cc9f53715d3ae271c01a0b372e2fcba878279fdd0c5cbcc3268d067e4441673b8488aeaa03359bf2580606db755a9168618c09ee36a6c790a1eb66ee56bb65487b1076261498d8947a0870edd2d77860963d93b316901229b8f8273134364b761cca935330de181f9dbb619cc4076ea9be0f43d7061c4c39b246315fe7dad8b30743c5a2c141a6294252a5adc5b4006158a59b55046d9c272c9063f01402f890f44bd52723b656896a7be804de987c1336801686cb0e07b90f64f356e3444fb3d6f9ea30ebaf9bdd4ae3e8a1a9487d12355c24728f89af1f14c5fff1e1757c25a7daf0324da03877911f0a3b2d9862fd329ba4a03738e7231ac9ae3c762691f95b7bac3381af74800aa6c2aaaa8556f38b06b041ec1b06e69d5c7214b4dea897f997b1f052b54e63a985d1c2173f87207163b017d79383b904226667f6cfd4655966d5834ea29aa0ce5f687d5013ecf67ad2d2f97951c4ba9aeadf8a2bd1a942b203538ba6b9da66562680c0e77e5df6cf5f739b87293a26ecd307f9dca62135119ae7b44084b91c0f4ad9b7973c735ec091cbe3f53db3922cbf2d0227c445ea73f96010cc8687c205c2c7b850eb3f36c23d294de4040d31ddc84040aed0ea2d65df98c5e98d60aa1aac0c05439cc4acbcae9fe34290805a2befd9e75c0ba3cefe36ac126f14a650deddabfa843ccaca172a3f5fff8f8cb231564c55dda07067497bcfc00e5d9952f31b7a3abee2cdd195807b579a5d370ece6ef7ce0ac8f0d84ce8c40be5a37806477a3073d7760b640712eacafb6f756cc88fcf136b41b1618608359f46f1c2a2abb8eb581ff996c338509bfb88c2390dd5178c321e0de9a995de4430345bd394d496220da9f78a117a41e06fe8537cf0e35c94c5124ea9d28f7df986d1132b823cf3ae8d447e0e92c11b791e6b18256b0776393062fc84fe6f36c7e07cddd22d9a9dad0fe99024dc1807bc76b0dea030ca3d040beeac614bf155806a1c0c239aed3f6514481d7a983cb9a6aee235b712e05c0be3e01c4fcbe072415134e8c9d2bcd19daf9b6c7d0c64899bb0800b3bc2f132cdcffd7ccdbf05ec4163065618f73e295b2aee59b3b6e760028ace161698c7f6726d7efea694db8fb156f7362a81e2b710a10677eb2634715b539584c29ccc476c21e9539bb33ef745387b33d7168bd2bafcabde4ef3fd3ab87cc82e14ed6c49e5617eb1f2e23ed4942daafd4233b4a7c236b7650174b05620205b3b3270e146bad6dc428f73a92c42431526c72686b52ebc04997f1b464f85c11a54dc2fb4935ba55d28e357f9a6aec7b0f5b8e3ba6ff389545ff30fc14230314241886d086a27d8d182e2e6ef7b8353308b44f6574afdeb7a4ca3209b74f107835633007df52941ba79529c23146df7239b51c66dca039320637b106dbc56469ee87af691e9d3b563d146e0f5c4aa583707dd4185b8fb2eab3ca38ffc2f3a35671387e6cf7e6a09fbd88729868025fc182eb02144d3fbb5fa43ab53436b6303f787805671cc9e6cacba36d96cd083ca783be5916a7841e05eb41da2dd7e4744c7f7e6086cc838989d2c35886fccfac6da618117f8e68494543c939862ba3c3e7ae20c10a2bc65ccffb84d5e5d845205d3c34189eb21ba824cd7b6869693e74da29a939fa655d89a0dc60b05238bdeccc2ecf777d89ffb7b9ee3ec1bb895a22789e9f39dfb46a201973e0988de0582648d15e66d032a67c1c06b945d28cfdb6bb6ad8c2842fc10103a241f229e94fbc22abed86ff41c727dbfc90c13b7ac22c90f58f6594c96fa769fb551ea4725acd314611615844ee9cd5598bd6ee8a24b5b36d738977e99c4d9db0c78a4e57c8956318abe75162492b2177660b3e33d2f0821cf41a07d50c7dbc24a1f9bd584cca7fcb15a4d280f6c39d919b6ab63089103c5b40ed6d438483f5d2c73139f1ed15d9ad0ef2431b7e326f250d32ce87257c8dce10a491e7b440392fad16f18241123649563eec7c35d7c44eaee71cfb8d7f79a96501dd15743a3d5d89ae58ddbdc527179a11f72614284684cba083fdc08a6fae7ca53c1bdf17a2d91d62af05cb34d24cc2da835bd7d5976a8b2b9defe35ddafcf86c7a3be0144144fdf4d797b12f0928dd412ed71a814b9b93f656224660616f6de8d035fc1df96a31105ca6663e3bec83ca0b930205ec682b5132c8756ef24acde1e7fbc17cb40387f9cda7c057be67bcd9fd27c753f267e3d1419e6841cac649b2c7a4f764d2b7a0293d8412452a37385af7a70f3e83f4d5a7d483bdb6b8067a7fc370bc4d01b100abc700d50c81b92f5849fcf66e36c00bc6f42c944486112b7bea2abb1eeff798a59ad1e6"})
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
io_uring_setup$auto(0x80, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x8000006, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0xcb32dd6, 0x8c48, 0x29f, 0x100, 0x77fffffe, 0x101, 0xb0d, 0x3}, {0x100, 0x1, 0x20000052, 0x1, 0x2, 0x40, 0xc4, 0xb, 0x100000000}})
epoll_create$auto(0x3e) (async)
socket(0xa, 0x5, 0x84) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32)
io_uring_setup$auto(0x2, 0x0) (rerun: 32)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)

3m44.240085954s ago: executing program 3 (id=4705):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = gettid()
getrlimit$auto(0x8, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0)
kill$auto(r1, 0x7)
syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(0x3, 0x0, 0x55)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

3m28.53564585s ago: executing program 34 (id=4705):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r1 = gettid()
getrlimit$auto(0x8, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0)
kill$auto(r1, 0x7)
syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(0x3, 0x0, 0x55)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m52.092926842s ago: executing program 1 (id=4772):
unshare$auto(0x40000080)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0xd7cdcf79, 0xfffffffffffffffc, 0x0, 0x220000000000001, 0xfe0000)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
timer_create$auto(0x8, &(0x7f0000000000)={@sival_int=0xccea, @inferred, 0x1}, &(0x7f0000000040)=0x200)
timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1002}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}})
r2 = open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xda45, &(0x7f0000000080)={0xd2, 0x4, 0x800, @raw=0x3}, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
r3 = socket(0x2, 0xa, 0xa)
sendmmsg$auto(r3, &(0x7f0000000040)={{&(0x7f0000000380), 0xff, &(0x7f0000000280)={0x0, 0x4f}, 0x7, 0x0, 0x4000, 0x3}, 0x5}, 0x9, 0xf0)
pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
setsockopt$auto_SO_BUF_LOCK(0xffffffffffffffff, 0xbcb6, 0x48, &(0x7f00000003c0)='&$^\x00', 0xf79)
unshare$auto(0x40000080)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = seccomp$auto(0x9, 0x1ff, &(0x7f0000000180)="24936d9b9c97233586e0c7733b2a5a8b25e2f5329e4f6bc509c62ace8cb26081c6dc40d671ec9a4ab431b89a011100309abbd2eef41d4cd2f1ebc0fa6d23557d7599a2b9d847c90409b455cab31989cf8c55bb640a8f909f6a83acb5a800dfaf7ec9ace013d0b608ba34fd57c7f887ed4ceeb002bd61861ff8444c6e63473f71b67689eeba2a8cfee900c1dce66055de7c1e6fbb8584b1f2d30321a75cbf21fc57e36ccaf1fcfd610d7a1ec848c3e4323af84dc079689574c36e0d35a93790202faf0257f4fa4045936606bcc744302a332e2077da3e366f16a998f6ac31b67c5da5ebe637c467ef18ae6e298bdc54e7b4535ebb0d154695d5")
fsconfig$auto_FSCONFIG_CMD_CREATE(r5, 0x6, &(0x7f0000000280)='&$^\x00', &(0x7f00000002c0)="a812f3d649456d5cc1b56cd709d737c923e1d27c7d2a551a0923e1573371b1907a1ddb197af237da5e5833746eea44e68a6389e4e6c72c5119a724573384915b66040831b43815ebd6f2cb981fb6a9", 0xa)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x2b, 0x1, 0x1)
ioctl$auto_BCH_IOCTL_DISK_GET_IDX(r2, 0x4008bc0d, &(0x7f0000000380))
socket(0x2c, 0x80003, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1112e, 0x6, 0xd, 0x8fd6, 0x948b, 0x4, 0xe, 0x100000000003, 0x3, 0x62, 0x7ffffffe, 0x40000000000007, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)

2m45.894274591s ago: executing program 1 (id=4776):
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0)
write$auto(r0, &(0x7f00000000c0)='(\x00', 0x0)
r1 = socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
unshare$auto(0x40000080)
bind$auto(r1, &(0x7f0000000140)=@generic={0x21, "b3283731ffff1c01000000118523"}, 0x8001)
r2 = socket(0x23, 0x2, 0x6333)
mmap$auto(0x100000001, 0xb, 0x2000000000000003, 0x16, r2, 0x8003)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000100)="fb", 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x5f5e00, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000680)="9729facfa507ec17e671250eb63e3b4643a15185858e1926aa9714b851b846a2d1da2df5da43982b9c23e01b488f3d0386c1568864c51e67d549333f7ded20c817a63fa0b76c502e681f3f188908bb69fd2c6abc82dab8d5178580fe430e8d4dcf164474f52dbaad3cb0e4fab7251eb597f32712537ebd3600958999b1c9be17381a7fc6eeb7d5779292b8e45150cd8b018fab763375f09bd15d7bf98c412c69aca4d718757df266a686e4f8a8cf507f21f3e04c1148782a81d6359d68bc3150edc538a69a39e4c1c845830fbc403ffe8c0de34c1421714031b288b89b957b6de556d901223a12f387ad34342a1f95d7684987834076c5e0454adab11d515d8908c593dcb1e6e3417d7e3fb7ed3276507c475a60572ea0d7bb1bb5b2681eca89e2616a601d3b784a845c1fdb366625fd76e2c9262fe5043e0005dda4e22a9892c006b336567a2205b843a2ce65ff64536d1a3fc808308214db380bd615fd1da1e10a35bf410c1bcb7ee2dd94a512240a60b3da7cc5d35504c5bf8dcb2470818607e8bcee7c35c78635a6353227dd64d5fae70e4561c6cb165737b8975c5d59f31676b1bebf68f60faee32521e6ecd97b508619b35980744e60f0060171a260604207bb8c22509fdd296fe87f13cbc4f0d52e425b0e9bd9beac5d4bc50445d0ed450f328988e43a2c6fd1c9788209bd55b96b636c53a5552fcf15d9357a57b844781af7fb0c67e4074746bb95bf051899c18d38538d937c23d1c519e0da3e8f3947702ca81ac3b69767b53915e0683bf181ad3edf72be1689bd675659c7c8f1a9c9d5b61642d71d2387e25e358fa65250f60a6789c50275b4c93b50a86123e0fb7d67e9e4d0f44869860046c2155143618b0da8414d5a32c663939a2f4decb5f6e58da8b5bf5efef228a6dbd55a627307485d5f20b49b9c9cd069e5b22048a57c7c3987c6b2b1f53435974f41a018c7561f80333499783d0e952ee1682f733aa89195fb0fe1132eb0ff45ebbd279058f853691a0f0ae0869f72b3099949d2e3fc0b54f43112e3136b5164429d16d2d0d27df08565ff797f0b8aeacb56b9af726afa9084d8e9460cfbb6b30d8104cad7da3758670944859266de7de42452f156055efa33d28d7254446855d4d621193c1b462bbc41c98c03e749f06ed4ab5bd520475bae611984b29e37f29b81785c9f59f35059f78d08b8636e61937c86ec305a158ae71870a944f33308f23ddbd7735d43d7c8411301cc0384d5b53a813f683bb2afe0e0da26c3ad93adf6c6a4b722836fd19573e92bd8aeb4d79ac39dfff8064abd00f2f5340efb93c69bd6a055df72374bb2849b1296bb0290f634c5d06d406d653fbeb9a86154407440b543bcf073c3877b547e9b5b6c11c1e23718f4708c11102da8165fe00f589644d166bc45a7e63176ada8dde31a9955f7defa6ba209fc9efb6fc5e7482eaf44cdf6882eeeb00cb143932ac3f11444dd595e946debbdb57f24642a19e2f3e58959e362bcd5c6fcf8ef16e22b33a155426e663101a1b31ad91bf206822a78b5452503b972b91368f1dd69b18f8caac702076eb481b3112715d831a11774ea4c655f721000a929f753829f86f2e74edd75aceccc16b84ce9cc7c6b11bbcd6f7fe304ca0833b9bd5193171cd15bd3028d056c0c4f621e78dc3699861cb2018fc5f7afb8e724e1573bd9645243eb3e758559c9108b6a902f1b996e9380187a809fd2853e9e4bd0b40383b68220fcdbf10f8dce737ba6508ba21173304b63290421d01fe129409a4c626b72a1b05ebd512f0c32e0590000005a06791c2a24166be04b06ed132f02f24b9cb6c2c5e5697b6248bc0b041e5dd0183c257e3bbc58ec2425f1870e93b3d77add107d5d7e83fc02ef69e082d46fdf6045cad2682681d18265e35030abecc48372b0deb5bea50f445d846922a14fd3ac1f1183b148136a6a35c1932be0af0cd870dbf390ebf1d8ee7d8d4d4a44d9a4e4ec1b206ae70131356b8d220be5b98757e78ab1496f07b152232792fceeed3c19b78263a68a1fab8755b9f9559239e00f035a8753a49aaa7eac8574c830b2e4b59a0400ec4f4e80cae74ce56b80107ce3950523dc53c3f1f06e6c277b3d6e45dcc9708e41e0aa010f31c1392d8ebccf1401462636c752449b5803b2c9d5141f68c26e44241fccb1f1af2c839096c319ba9a626212cdb8664f1e02445278b4f5fc4280a3a1d62a8f5dae9de9c6066262247b867193e2b85c92803c4f2dad05", 0x63f)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(r2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0)
r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec1\x00', 0x8800, 0x0)
ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f00000009c0), 0x102, 0x0)
write$auto(0x3, 0x0, 0x3)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x5, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000)
capset$auto(&(0x7f0000000180), 0x0)
setrlimit$auto(0x9, 0x0)

2m39.521197615s ago: executing program 1 (id=4786):
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1a9200, 0x0)
r2 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0)
read$auto_clk_dump_fops_(r2, &(0x7f00000005c0)=""/4096, 0x1000)
write$auto(r1, &(0x7f0000000080)='\x00\x1c\\\xa0\x04\xd5\x03\xc9\x12\xda\b\x1c\xad>\x99\xdez\xdb\xe7\xe9\x15P6qW\xbe8\x93\x9b\xb4_\"tVq\b\xeat{\xdc\'_\xbc\x92\xa4\x8d\\\x97\x8e3k\xa0C\xb0\xfa^G\xf0\xf3\x8f\xc6\xeb!\xe3\xb8\x8fI\x16\xb7c\xb2./\xff\x91\xf9\xc7\xde\x98\v\x7f\xe9\xefs\x80\xd4\xf5\xa2\xe1OE\xef\r', 0x7f)
unshare$auto(0x3)
getsockopt$auto(r0, 0x84, 0x6d, 0x0, 0x0)

2m39.059751507s ago: executing program 1 (id=4787):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x808000)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0)
socket(0x22, 0x3, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_macvtap/ioam6_id_wide\x00', 0x169002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree$auto(0xffffffffffffff9c, 0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)

2m38.540483267s ago: executing program 1 (id=4789):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdb, 0x9b72, 0x2, 0x40000008000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x1f00000000000000)
close_range$auto(0x2, 0x8, 0x0)

2m36.055439396s ago: executing program 1 (id=4791):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d40067ec", @ANYRESDEC=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRESOCT=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff)

2m20.48826592s ago: executing program 35 (id=4791):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d40067ec", @ANYRESDEC=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRESOCT=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff)

2m11.408070494s ago: executing program 6 (id=4829):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000480)='/Eew/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x1d:\xe2]\xba\xde\xa7\xef\x1f\x96(o\xd4\x89\xf0\xbe\x97E\x89\xe5\xe9B\xac\xc1\\\xfe\x8a\x1cm1^\xe2\x9fK\xaf\xba\xea\xa4\xad*\xe2\xe4j5\xc1\x91\xc8\xaf\xad(\xf7\xcfJ\x7f\xc1\x97\xf6\xb5*\x9c\xf6Xk', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0xfffff958)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18)
fremovexattr$auto(r0, &(0x7f0000000040)='sy\x00\x00\x00\x00\x00\x00\x00g\xca\xed*\xa0pXW\xc3v\xe6z\xcfg5\xf6\xc3\x98\xd5zH\xc8\x80o\xc9>\xb78\x7f\xc0\xe9h4@A+|\x9f&G:\x02\x13\x19\x89\xce\a\xa5\x00')
truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004)
madvise$auto(0x0, 0x200007, 0x19)
r3 = getpid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000200)={@siginfo_0_0={0x87b, 0xff, 0x8, @_sigsys={&(0x7f0000000180)="a066b8e840c6311618ee915dcba2b561883f43193d2a5631fe8489c54c2e58e828919abdaea9ede3515e3e06ef5d9e26a356338ed2792d285c9166f052064c40c858589a8fc08743324746bfd929a8d9ab975df177246f1824ee62a621dc9c9b00fe", 0xffffffff, 0x7}}}, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x8, 0x1, 0x9, 0x6, 0x69, 0x3, 0x6, 0x0, 0x2, 0x37, 0x4, 0x6})
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x5, 0x2, r3, 0x20000000005, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x810004, 0xffe, 0x800000800801f, r0, 0x1)

2m6.960126025s ago: executing program 6 (id=4835):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(r0, &(0x7f0000000080)=@ethernet={0x1, @random="50f75eee6bcf"}, 0x54)
r1 = prctl$auto(0x36, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x1, 0x2, 0xdb, 0x100000011, r0, 0x8)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0xe8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x4}, 0x38000000004)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xe0800, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x7000000000, 0x400004, 0x5, 0x10000009b72, r0, 0x8000000001)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20142, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x5, 0x40000006)
close_range$auto(0x2, 0x8, 0x0)

2m5.937740838s ago: executing program 6 (id=4836):
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0)
write$auto(r0, &(0x7f00000000c0)='(\x00', 0x0)
r1 = socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
unshare$auto(0x40000080)
bind$auto(r1, &(0x7f0000000140)=@generic={0x21, "b3283731ffff1c01000000118523"}, 0x8001)
r2 = socket(0x23, 0x2, 0x6333)
mmap$auto(0x100000001, 0xb, 0x2000000000000003, 0x16, r2, 0x8003)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000100)="fb", 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x5f5e00, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000680)="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", 0x655)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(r2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0)
r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec1\x00', 0x8800, 0x0)
ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f00000009c0), 0x102, 0x0)
write$auto(0x3, 0x0, 0x3)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x5, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000)
capset$auto(&(0x7f0000000180), 0x0)
setrlimit$auto(0x9, 0x0)

2m3.603593246s ago: executing program 6 (id=4839):
fadvise64$auto_POSIX_FADV_WILLNEED(0xffffffffffffffff, 0x8, 0x0, 0x3)
getsockopt$auto_SO_ERROR(0xffffffffffffffff, 0x5, 0x4, &(0x7f0000000000)='!\'].{&\x00', &(0x7f0000000040)=0x81) (async)
r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
getsockopt$auto_SO_OOBINLINE(r0, 0x1, 0xa, &(0x7f00000000c0)='+\x00', &(0x7f0000000100)=0x80)
mmap$auto(0x8000000000000000, 0x9, 0x2, 0x12, r0, 0xbf)
getsockopt$auto_SO_COOKIE(r0, 0xc10, 0x39, &(0x7f0000000140)='(\x00', &(0x7f0000000180)=0x19158ddd) (async)
write$auto(0xffffffffffffffff, &(0x7f00000001c0)='!\'].{&\x00', 0x0) (async)
r1 = prctl$auto_PR_SYS_DISPATCH_OFF(0x1, 0x0, 0xffffffffffffffff, 0xa, 0x7)
read$auto_proc_fault_inject_operations_base(r1, &(0x7f0000000200)=""/169, 0xa9) (async)
r2 = getsockopt$auto(r0, 0x3, 0x5, &(0x7f00000002c0)='\x8d\x00', &(0x7f0000000300)=0x1)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000340), 0x0)
r3 = ioctl$auto_TUNGETDEVNETNS(r2, 0x54e3, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ADD(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xd9a4628a43b91c09}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x25c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c2, 0x5, 0x0, 0x1, [@generic="97954a9cc74589653406c285915ef3cc7e527b40080e264d4050a103b99a84969fd2baaa5b0cc65dc9c949a986613f050b38874089bdceedb20167e5170e1cf8a96d7433c32640f7e3eb6e96d56fad310de944aabeefca8ddbfdeb4db626377ab1b856b94c5c32f3b9138dfe65357a3f3b58234281877c4fc43cf5b988deead343b3f1cb5270e670329f143398586544b6d89e2c4421b22eb0a48170eb28e5472c06fa86d2770fda44404f7a1b281d661585abf7772b5cf6a2a1ca06d5ca17b99251bc595d733e97fc1349b2b1ca1b1d6737aff76683fc", @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@broadcast}, @generic="b118d313a0dd085415758d612154a41075d25f6ee4e43b85908b524999d970a0ddc3585a091d171ff5bab75fff66590d761131df66749ee15a4d090134c9d6167cbaebcd1251e918f010707cdbe674133c4f1cbd48fbddac1dd23153286f9ece8e04c3901e36ebdf629f476a6850e25e8a546fe9c05b6e67400b2bf97e44b233ff3a4f797103ce21cd742daa6dabe2f9820521d540686cc4dc3e045fd9bb14ace5d870f7ff688e948a318a1fe21186f220bf8cf307a8c18d79b59ab0d0f138bc103d7d3ff98df17313af3ed80f6bb031725ebe", @typed={0xc, 0x32, 0x0, 0x0, @u64}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@nested={0x80, 0x78, 0x0, 0x1, [@generic="c61fb869f77563a32a0e2c8eb6578827bdb2c7625124dcbc327405981d93b52c9a2ec7e51a067cd3762b69d9cfadc4080738f163a38bf4453abc90270a500b32bdd83165ee8c6744dab35875bb414bd7843edf9e999a0fd8e826d04b32fa", @nested={0x4, 0x1d}, @generic="201115e1aa1ddae16d431a4447a2591b9400037728ff", @nested={0x4, 0x6f}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20004880}, 0x10) (async)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000006c0)={0x7, 0x5, 0xdd, 0x7, 0x80000000, <r4=>0x0})
ioctl$auto_LOOP_CTL_ADD(r1, 0x4c80, r4)
r5 = getpid()
fcntl$auto_F_GETSIG(0xffffffffffffffff, 0xb, 0x5) (async)
r6 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
inotify_init1$auto(0x7) (async)
r7 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (async)
ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r5, 0x4, 0x4) (async)
r8 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000780), r3)
sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r8, 0x22, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x2f, 0x2, '/sys/kernel/debug/page_tables/current_user\x00'}, @SMC_PNETID_ETHNAME={0x2f, 0x2, '/sys/kernel/debug/page_tables/current_user\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x28000840}, 0x0)
read$auto_page_owner_stack_operations_page_owner(r1, &(0x7f00000008c0)=""/30, 0x1e)
ioctl$auto(r1, 0x81, r6) (async)
r9 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec27/status\x00', 0x84140, 0x0)
fcntl$auto_F_GETFL(r9, 0x3, 0x9) (async)
ioctl$auto(r7, 0x0, r6) (async)
r10 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000940)='/dev/etherd/interfaces\x00', 0x40041, 0x0)
close_range$auto(r2, r10, 0x6)

2m3.2477676s ago: executing program 6 (id=4841):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/power/runtime_active_time\x00', 0x28900, 0x0)
mmap$auto(0x0, 0xa8, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2b, 0x1, 0x1)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x10)
openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
select$auto(0xa, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x5, 0xfffffffffffffff6, 0x7, 0xfffffffffffe0002, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x800000000020, 0x5, 0x3, 0x200, 0x1, 0x7]}, 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x3)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0)
write$auto(r3, 0x0, 0xfdef)

2m0.872646152s ago: executing program 6 (id=4845):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x3b7742, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000400)="6b15067d7470dcd9c77b9613dc70877cd4da599f21dd786692f180c0a68e9f11c12dfded1cfa5283cbf36aff21959f8fb61f8018658d60bb98bddfa0dbd7b16afda463c3c931cbbdb376141dbba20b2de6c5bc8c05ee8043e75f1ad9d20946bd21b8d74577c53da063c1599ba32147eb32d19e8e73da38935eaeb5beaa4f4e3b252e3f0bcf858c5aa98bc31dc22d48309155109945b24974a8823955893091639f14691604424f6fd1f9fa6988cc00000000")
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x101002, 0x0)
write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080))
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0)
write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mknod$auto(0x0, 0x20e9, 0x103)
unshare$auto(0x20000)
r5 = pidfd_open$auto(0x1, 0x0)
setns(r5, 0x60020000)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6)

1m45.699017837s ago: executing program 36 (id=4845):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x3b7742, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000400)="6b15067d7470dcd9c77b9613dc70877cd4da599f21dd786692f180c0a68e9f11c12dfded1cfa5283cbf36aff21959f8fb61f8018658d60bb98bddfa0dbd7b16afda463c3c931cbbdb376141dbba20b2de6c5bc8c05ee8043e75f1ad9d20946bd21b8d74577c53da063c1599ba32147eb32d19e8e73da38935eaeb5beaa4f4e3b252e3f0bcf858c5aa98bc31dc22d48309155109945b24974a8823955893091639f14691604424f6fd1f9fa6988cc00000000")
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x101002, 0x0)
write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080))
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0)
write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mknod$auto(0x0, 0x20e9, 0x103)
unshare$auto(0x20000)
r5 = pidfd_open$auto(0x1, 0x0)
setns(r5, 0x60020000)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6)

1m39.323677249s ago: executing program 0 (id=4888):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="543c42d073c72b0fc33322bb0c5df315b65c25", @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000240)={0x4, 0x65ff, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10002, 0x5, 0x8001, 0x9, 0x5, 0x8, 0x7, 0xffffffffffffff7f, 0x103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x29, 0xa, 0xaa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m38.065970958s ago: executing program 0 (id=4890):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x5, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x6, 0xe4, 0x9b72, 0xffffffffffffffff, 0x1) (async)
close_range$auto(0x2, 0x8, 0x2)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/227, 0xe3) (async)
migrate_pages$auto(0x0, 0x99, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0xca, 0x50, 0x4000000000df, 0x13, 0x401, 0x8100)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
socket(0x2, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10) (async)
io_uring_setup$auto(0x6, 0x0) (async)
r1 = socket(0x10, 0x80002, 0x0)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
timerfd_create$auto(0x0, 0x0) (async)
timerfd_settime$auto(r1, 0x3, 0x0, 0x0) (async)
ioctl$auto(0x3, 0x40085400, 0x38) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0xaea2, 0x0) (async)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4) (async)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async)
mmap$auto(0x4, 0x4020009, 0x6, 0x4298, 0xffffffffffffffff, 0x8000) (async)
bpf$auto(0x0, 0x0, 0xbe5) (async)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0xa0802, 0x0) (async)
read$auto(r1, &(0x7f0000000380)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\x05\x00\x00\x00\x00\x00\x00\x005u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\x03\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xcf\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>\x00\xff\xbb<\xccPV\xe5\xf2y\xcc\x15R\x9f\x90[\x89!\xc5\xd7I\xff\x91\xd1\x85$\xb1s-\xa6\x86$\x91\xd6:\xe27:;\x94\xd9\xe1\x86\xa6R\xff,\xb0\xf2\xc3\x11\x9d\xd9u\xfc\x85.\xce@LpA\xeb\xc5\xf0\xed\xe7\x03\xfb{?~R7,\xbbU$\x82h\xfc\xe3B \x86o\x1f\xe1^\xac\xa2Y.\xb3Je\xba;y\xba\xb4\xf4i\xfb+\x97`=\x9f6\xae0\xbdt\xaa}\xfa\x9b\x85{\x02\xad=\xc4x\xbd\x05\x80\xe4S\xca\xbb_\x9a\xda|\xee\xff77\x8e\xd4\xb8\xf450\x02\xd3\xdf_\x12I\x9a\x95\xeb\xfc\xb5\xc3\x11\xd2LY\xe1\xb08\x85\x7f\xff\xc6-\x1d\xd7Z\xcak\n\x10\xbf\xb7t\x1c\nK+\xbb\x04\x01\f0\x8f\x9f\x89\xaaY\xfb\x88\xebH/k\x93Q\xc4\xda?\x0e\xcd\xd2 \x9d@\xb5\x97\x95O\xf8\x8cYx\xcd\xc9I\xbf5o\xe7(W\xba\xc1\xd3\xf3\xa9\xe0f\x03\xb9ijN\xf6U\xdb\xbb3\xc7%f,\xf6\x9c\x1c\xb4\x97\xe0\xe1\xe5\xf8\xa7\x8d0\xfe\x80I\xb2\xe2\x1e\x9a\xf5\xd9M\xdf\x02\x80\x1e\xe3\x1e\xb1\xf0\x1c\x11\xa2H\xdb\x8f\xff\'\x99\xf4C\x1e;\x81_\x1d\xf9\xcf7_\xca\t\xfe\xd55\x88d\xf8\b\xcc\xd35\xa8#\x18\xa2t\x92(\xd3\x1akF6\xf6\x1f/Z2\x80\xea]\x85\xebT:K=X\x19\xd3\x94\xdbI\xe9\x1f\xc0q,\x8b\xdd\x9fX\xfbp|\x92t\x8e7\x96R\xec\x80<\x0e3\xd5\xf9\x1fl\x9d\x0e\xc1\xf8c\x8ef\xbaD\x18b\x00\x00\x00\x00', 0xe3a)

1m37.715946914s ago: executing program 0 (id=4892):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdb, 0x9b72, 0x2, 0x40000008000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00000000fbffffffffffffff00"}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf250202000006000100090000006c99b414508867268156fbf639b4c37a46f515ac700641be94fd62e86c14b8ae8a7606000000000000000994029b22ec5fc1bc5d75ca42784b9616d7b78aec8075bb12587e3b62615edaa162406cca3902196b5fa5dabe6ee8d11cf44fb7a3411c9a6bf1916e55e317051af6e29f9087e81ecae0868eb8d200c5fcd11a325a0bc0a11f2dce1f9a3c983a5a0f3d09453ac50a279edcda0d6875cc6b"], 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000004)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m32.740778353s ago: executing program 0 (id=4898):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="543c42d073c72b0fc33322bb0c5df315b65c25", @ANYRES16=r0, @ANYBLOB="010027bd7000fbdbdf25040000"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000240)={0x4, 0x65ff, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10002, 0x5, 0x8001, 0x9, 0x5, 0x8, 0x7, 0xffffffffffffff7f, 0x103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x29, 0xa, 0xaa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m31.591321229s ago: executing program 0 (id=4900):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1)
ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0x2000, 0x400004, 0x200000000040000d})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ustat$auto(0x801, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/ip_vs_stats\x00', 0x101c80, 0x0)
write$auto(r1, 0x0, 0x1)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
ioctl$auto_USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000000)={0x5, 0x6, 0x7, &(0x7f0000000440)})
fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x3)
get_robust_list$auto(0x0, 0x0, 0x0)
setxattrat$auto(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0, 0x5d8)
r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0)
ioctl$auto_IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000040)={@padding, 0xfe})
select$auto(0x80000000, &(0x7f00000002c0)={[0x8, 0x7f5f, 0x2, 0x8, 0x4, 0x800, 0x80, 0xc, 0x3e, 0x3, 0x3, 0x9, 0xc93, 0x529, 0x3, 0x3]}, &(0x7f0000000340)={[0x0, 0x6, 0x7, 0x2, 0x100, 0x2, 0x3ff, 0x1, 0x0, 0x8000000000000001, 0x3, 0x1, 0xf, 0x8, 0x1, 0x5]}, &(0x7f00000003c0)={[0xfa0b, 0xffffffffffffffff, 0x401, 0x1000, 0x6, 0x2, 0xa248, 0xff, 0x2, 0x0, 0x9, 0xfffffffffffffffa, 0x10000, 0x9, 0x4, 0x8000]}, &(0x7f0000000440)={0x7fffffff, 0x1})
ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0)
userfaultfd$auto(0xc)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
eventfd$auto(0x0)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xc8)

1m30.493265168s ago: executing program 0 (id=4902):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/uid_map\x00', 0x98007, 0x0)
read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f00000001c0)=""/35, 0x23)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d133772f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d5756a2b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3facfb2c7e1b12975c47006bebf4b434c436156ab10811c02816adfe46babd9248ab1f0d11e2"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40015)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff)

1m15.376549405s ago: executing program 37 (id=4902):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/uid_map\x00', 0x98007, 0x0)
read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f00000001c0)=""/35, 0x23)
write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d133772f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d5756a2b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3facfb2c7e1b12975c47006bebf4b434c436156ab10811c02816adfe46babd9248ab1f0d11e2"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40015)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff)

49.827149593s ago: executing program 9 (id=5001):
close_range$auto(0x2, 0xa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0)
write$auto(r0, &(0x7f00000000c0)='(\x00', 0x0)
r1 = socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
unshare$auto(0x40000080)
bind$auto(r1, &(0x7f0000000140)=@generic={0x21, "b3283731ffff1c01000000118523"}, 0x8001)
r2 = socket(0x23, 0x2, 0x6333)
mmap$auto(0x100000001, 0xb, 0x2000000000000003, 0x16, r2, 0x8003)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000100)="fb", 0x1)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x5f5e00, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000680)="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", 0x658)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(r2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000340)="e62a4e9010f6711491bc267824f51d9e9bcf7e26468c08727c900800331a08315747e87153f6eea133140c62b6057159acc9948aeecd98b3d31787a123d90b6f0734bffaeae7a4138eb2be78807d2304e89f06542151733fc0434b1debe72bc72c622d1ab884981cb713af73f6547d04919e9e06e8e0efce7cb64f3a7f2f6f623b0c8c91a9836100000000000000000000000000c4d5d95154e0382bb7d75cd64fdc02946608f6", 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0)
r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec1\x00', 0x8800, 0x0)
ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0)
openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f00000009c0), 0x102, 0x0)
write$auto(0x3, 0x0, 0x3)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap$auto(0x0, 0x2020009, 0x5, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000)
capset$auto(&(0x7f0000000180), 0x0)
setrlimit$auto(0x9, 0x0)

47.591462576s ago: executing program 9 (id=5005):
socket(0x11, 0x3, 0x9) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64a1d5) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81)
r0 = socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
socket(0xa, 0x4, 0x5) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
socket(0xa, 0x2, 0x73)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) (async)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
unshare$auto(0x20000) (async)
unshare$auto(0x20000)

45.205464033s ago: executing program 9 (id=5008):
r0 = inotify_init1$auto(0x2) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff) (async)
write$auto(r1, &(0x7f0000000440)='/dev/audi\x15\xe2}\x1b\f.a\xf0\xd0g\x9d\xaaz\xb7\xffR^#\x9f\xe2\xfa\xca\x91D6\x9bCQ\xf8Sp\x02\x84\xb0\x06\xf6K\f\x1fhe\x87\x99rF\xb3N\xd4-5EG\x1e\x8b\x9f\xce\x9c\xdd\xb6]\xbb\xcc\x9c]\xbd[\xc1\xa9\xda\x03\xf3\x10\xce\x01\x1f\x8e\xc0_\x94\xb5\xeeA\xebB,\x80\x1f\xb2\x97\xc6:\bf\xc9\x9b\"\xeeA\v\x8f\xdd\x838\x84\x1e{\xb9\xddO\xdfs\xbdAD\x02\x88\xf3\x15\xfe\xe1\xebz\x9b\xe9\x8d\xdeR\xf5\xb1\xb9{h\xdeeZ\x16\xdc\xa0he\xb9s\x16\xd1#\xae\xe4\xcd\xe3\xea4\x15|\xad\xa1\xad\x13\xdeIW,\xc7Td\xfeBH\xd2 \x7f1Y\xe1\xe5\x03\x96P\xd7f\x81\xae_.\xa5t\xc7x\r\x13!\x06\x9aR&\xf2G_\xfd\f\x8eU\xdf\xd2\xa9\x18l3\f\x1f\xf2\x9a\x06\xd0\xb2\x1d\x96\x1c\x98\"\xe5\x9b\xeaW\xc0\x1ae7\xc7\xc4dua\xcd\xbb`U\xec\xde\x16\xa7\xdee)]\x92\xb54\x9f\xe7', 0x100000a3d7) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESDEC=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c190}, 0x40000) (async)
read$auto(0xffffffffffffffff, &(0x7f0000000100)='MAC802154_HWSIM\x00', 0xfdef)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async)
prctl$auto(0x8, 0x1, 0x4, 0x5, 0x7) (async)
getcpu$auto(0x0, 0x0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe8083, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x641, 0x0) (async)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000280)='/dev/binderfs/binder1\x00', 0x0, 0x0)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
close_range$auto(0x2, r4, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r5) (async)
ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x40000010, 0x2, 0x6}]}) (async)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) (async)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000)

44.002428011s ago: executing program 9 (id=5014):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="543c42d073c72b0fc33322bb0c5df315b65c25", @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000240)={0x4, 0x65ff, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10002, 0x5, 0x8001, 0x9, 0x5, 0x8, 0x7, 0xffffffffffffff7f, 0x103})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x29, 0xa, 0xaa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

41.443301214s ago: executing program 9 (id=5018):
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mmap$auto(0x9, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = semctl$auto(0x1, 0x2, 0x13, 0xc)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r1, 0x29, 0x20, 0x0, 0x20)
r2 = socket(0x2, 0x801, 0x106)
io_uring_setup$auto(0x6, 0x0)
r3 = socket(0xf, 0x3, 0x2)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r3)
r4 = getsockopt$auto(r2, 0x11c, 0x1, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x65, 0x2)
socket(0xa, 0x1, 0x84)
socket(0x2, 0x80002, 0x73)
r5 = socket(0x15, 0x5, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r6=>r5, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6)
socket(0xa, 0x2, 0x88)
prctl$auto_PR_SCHED_CORE_CREATE(0x5341440b, 0x1, r0, 0x620, 0x1)
bpf$auto(0x10001, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x3592, 0x104, 0xfffffffffffffffa, 0x7, 0x4, 0xcc82, 0x7f8cef26, 0x2, "4d79422d84e070d9694fa2137d8d76ea", 0x0, 0x6, r6, 0x2, 0x0, 0x8a6f, 0x5, 0xfff, 0x1, 0x2, @attach_prog_fd=r6, 0x400, 0xfff, 0xfffffffffffffffc, 0x80000004, 0x4e55, r2, r4}, 0xa8)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
socket(0x10, 0x5, 0x6)
r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
ioctl$auto_TIOCMGET2(r7, 0x5415, &(0x7f00000000c0)="7fd1e529e80f915a279295f1e6e5a92aec04fb88c3ea65bcb6b1f9e12430f24ed489ec94fb0d8c85b5329d5b2655a97fcd92007b58ce40590f3a15f23ee373482ce0305de39f97e008c1785959067ae66ca4b07ba10e2ca44fcbe36cd21df9dd73a895f2270db06f53ad68c67d19cfa914e6367ee58ac6ef8d21f192e84fa8fc5b9a7d276bf8add5a26437f265c49d7adfc8131b0262")
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000000), 0x55)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)

40.96357094s ago: executing program 9 (id=5019):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
semctl$auto_SETALL(0x1, 0x200, 0x11, 0x6)

30.16197554s ago: executing program 7 (id=5041):
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) (async)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async, rerun: 64)
unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') (rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a) (async, rerun: 32)
setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async, rerun: 32)
fanotify_init$auto(0x65, 0x2) (async)
pipe$auto(0x0)
dup2$auto(0x5, 0x4) (async)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async)
write$auto(0x6, 0x0, 0x100000001) (async)
setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) (async)
readv$auto(0x3, 0x0, 0x1)
unshare$auto(0xfff)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
write$auto(0x3, 0x0, 0xffd6) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) (async)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) (async, rerun: 64)
close_range$auto(0x2, 0xffffffffffffffff, 0x0) (rerun: 64)

28.650445377s ago: executing program 7 (id=5046):
r0 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb5, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1ff}, 0x6, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket(0x1e, 0x1, 0x0)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0)
r2 = socket(0x9, 0x2, 0xa8)
write$auto(0xca, &(0x7f0000000000)='\x043\x01\x01\x00\x00\x00\x00 \x00\x96\b\'\x02\xb0\x93l\xeb\x05\xf5\x02\x00\x9d\xed\xf3\xf1\x9c\xeb\xb6,N\x8eQ9|\xd2l\x9f\xca\xac6S\xa2(Q\xcc\x7f\x14Qv\xa4\x12B\x9e\xcc\x00\x03\xdf\x9f\xb9B\xf4\xfa\xf1R\x012\f39\x9e\x8c\xdd\x97\x1fv\xb1\xd7\f\xda|\x85H \x00\xd9<\xe0C9\xb5\x8d\xe5\xf7\xbeV\x9f\x12x7\x12\x02\x00\xe4Ba\x17k\x1e\xfcEoR\xf8\xe5\x85\xc6\xc2\x80\x14\x90\"\xc0\xffZ\x103\x12\xf6a\xb4#\x93E\xd8g\xe9\xc4ij:\xed?\xc6|\xe8\x81', 0x7f)
capset$auto(0x0, &(0x7f0000000000)={0x7, 0x10000006, 0x48})
r3 = prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0)
sendfile$auto(r5, r5, 0x0, 0x1)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="02000800", @ANYRES16=r4, @ANYBLOB="00012dbd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44)
madvise$auto(0x4, 0x7ffffffffbffffff, 0xb)
r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x240482, 0x0)
write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f0000000440)="adcf5fa4e2abf25f84761928907ddcfd7863550e28ebcc19720a", 0x1a)
syz_clone(0xac2e4500, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x29, 0x2, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000180)=""/8, 0x8)
adjtimex$auto(0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

26.174176506s ago: executing program 7 (id=5051):
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x7fffd, 0x28, 0x0, 0x808)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11\x11\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r1 = socket(0xa, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400038012000100898771f1c19f1779048590828847009a00"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7)
sendmmsg$auto(r0, 0x0, 0x9, 0xfa8)
statmount$auto(0x0, &(0x7f0000000380)={0x5, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x8001, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffbfffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x3, 0x52, 0x4, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffe, 0xfc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8003, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001], "80ab49717f6257d864d9f977"}, 0xffff, 0x7d)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x3, 0x0, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2)
openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats\x00', 0x80880, 0x0)

25.809068663s ago: executing program 38 (id=5019):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0)
write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81})
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket$nl_generic(0x10, 0x3, 0x10)
semctl$auto_SETALL(0x1, 0x200, 0x11, 0x6)

22.459784337s ago: executing program 7 (id=5055):
r0 = socket(0x1d, 0x801, 0x84) (async)
r1 = timerfd_create$auto(0x100, 0x1)
write$auto_fops_atomic_t_(r1, &(0x7f0000000000)="02400ca559f0a573729ad3050d748e3e8d06e1998dafbb22b77a68b0fc3aa5", 0x1f) (async)
getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0)

21.531995586s ago: executing program 7 (id=5057):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000240)={0x4, 0x65ff, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10002, 0x5, 0x8001, 0x9, 0x5, 0x8, 0x7, 0xffffffffffffff7f, 0x103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x29, 0xa, 0xaa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

17.823978428s ago: executing program 7 (id=5060):
r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x101181, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async)
statmount$auto(0x0, &(0x7f0000000440)={0x8, 0x1, 0x7, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x81, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x1000000000000000, 0x0, 0x0, 0x0, 0xe953, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a, 0x8000000000000000], "c8213ee1f5c656d48ce08e8c8c7a6f6ac2fdb1be2fa81bf37ac3c6b6023c5b8f0d2e11ad3e6cad89c836252994936720801374b75413977a277f862e0ffd4365daa63705ed72555598fb83020a921be1e9f4ec3547b778a962"}, 0x400, 0x81) (async, rerun: 64)
writev$auto(r0, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async, rerun: 64)
r1 = ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000000)=0x6)
ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="ec8b789c09f0cc25cb7bc2d9e0f59694bf770962928529b4303ba6eda4ca6367d28bdadb3667ea41a25fd7ac545f046e1eb641ac887404d0a4b74ca42b4bd681b7160c622a78c81b2d1b1d5b3fd0d9f757c70ba83257498b51d4a34bfcc484be4ef26832")
socketpair$auto(0x8, 0xfffffffd, 0x5, &(0x7f0000000100)) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async)
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) (async)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async)
sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10080) (async, rerun: 32)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99`\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x97.\x03\x11\xc1\xbaS\x1c\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1t\xee\xc9:\xcfE\x87Z&i\xd4\x00\x00\x00\x00\x00', 0xedef, 0x3) (rerun: 32)

7.361352471s ago: executing program 2 (id=5052):
mmap$auto(0x7ffffffffffffffd, 0xb3b7, 0x4000000000e1, 0x2000000001a, 0x401, 0x7ffe)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async)
socket(0x1d, 0x2, 0x6) (async, rerun: 32)
r0 = socket(0x2, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) (async)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r2, 0x0) (async, rerun: 64)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 64)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32)
ioctl$auto(0x3, 0xae41, r3) (async, rerun: 32)
ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) (async)
socket(0x1d, 0x2, 0x6)

6.587998146s ago: executing program 2 (id=5071):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0)
mmap$auto(0xa5, 0xc04, 0xdf, 0x1fe, 0x2, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101b00, 0x0)
msgctl$auto_IPC_INFO(0x6, 0x3, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0xd)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
poll$auto(&(0x7f0000000d40)={<r2=>0x3, 0x1, 0xa}, 0x5, 0x400)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200403, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
syz_clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000080)=<r4=>0xffffffffffffffff, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000200), {}, &(0x7f0000000240)=""/154, 0x9a, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2, {r2}}, 0x58)
process_madvise$auto_MADV_GUARD_REMOVE(r4, &(0x7f0000000540)={&(0x7f0000000480)="367ba226305bd0199132efd3f567d303301a4b172f75a0a050354d974862f863a93b956636548f65431b5a5c537be4be96bc7f71bf2530c17da5d4b26d3ace89a806094823f138d3a18769456d630b27dc1201ba5f8a9da96b844bec2eeeee7a366d31cef57d1bf620de3da21b6f957b0e8ac11908421e8e09a66a295e45a5fa97f3a93868e74ef14513448a10e04ec7e50e57c48b913d477dc71da5370a6632f9cd750b65b2b2acbe9d5ece50d2a7295269b467", 0xf}, 0xfffffffffffffffd, 0x67, 0x8)
r6 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r6, 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x1, 0x8, 0xffff, 0xc, 0x2, 0x2]}, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13f62cff70000bdbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="08006100010000000800620014000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
r7 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x3)
sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000029c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="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", @ANYBLOB="201f0242dd5f0b2afbd98c47e1e90395c935db8b867995cc2a8787dabf7572351558a21dd60899b02a4781b4ac5bf0b28a2d18c5cc74eb387f855d9a359efb2751a47efd9869e6d344bf51ef6a4e286446854a027d01691270db25259c2e39daf9c2188db5c4888da99f797efd46dc71a99a2160ddff58305902cb5e4584f65ec9f08f18272e15d44eac9e147d8e8a69b0929a8655b5dc40cba82efa8b2e8cc885a57e1b2d1640ed23fa8ce0b9f36fc1602a34ae49624dde7b8fb92a1de1609926aa2c54fe7e2a4a13fbf5aea8a7e67655e743102eef735e18d93e868885068067cbcf5e9e71bbc4512c41072d", @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="b3cbad2b607ea821b38c31480e3da955cb80a0a7876fe3f43ad7cd8191adac5a0bcdcc6f109c5faa8466f64be963d3acbe8efbfbbe3756a617f954ad0919b6eb98bd84b7121fb91b1abb0d3514aedec393fd7b584a09da0d94e05ed4a40a97e43e3970a9d505bf12991fa045dc5681a96e5cc943c3cfb117101acdf3809b93024a96dc06df4f459c3c2e8dad74c80367144066cd7b9e902c75ba27ff1af2ddc3337c0c7c7bb5ace1615f2a72f8908e3b10b393d72e3c714920dfeeaa2815d4252b3d25410600eb0006000000"], 0x1624}, 0x1, 0x0, 0x0, 0x8050}, 0x4004)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e)
r8 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0)
ioctl$auto_NS_GET_PID_IN_PIDNS(r8, 0x8004b708, &(0x7f0000000040)=0x7)
write$auto(0x3, 0x0, 0x100082)

4.257731722s ago: executing program 8 (id=5075):
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1")
read$auto(r0, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x800003)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0)
ioctl$auto(0x1, 0x890b, 0x8)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$auto(r4, 0x104000000000010e, 0x4, 0x0, 0x16)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd)

3.918541193s ago: executing program 8 (id=5077):
sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0)
ioctl$auto_FS_IOC_GETFSMAP2(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)={0x4, 0x2, 0x81, 0x6, '\x00', [{0x400, 0x2, 0x1, 0x784, 0xffffffffffffffff, 0x6}, {0x0, 0x8, 0x1, 0xa, 0xfffffffffffffff7, 0xfa}], [{0x7fff, 0x80000000, 0x2608, 0x4, 0x9, 0x8}, {0xc, 0x4, 0x8000, 0x8, 0x3, 0x5}]})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

3.758846427s ago: executing program 2 (id=5078):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
getsockopt$auto_SO_RCVLOWAT(r0, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a)
ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r0, 0x40789440, &(0x7f00000000c0)={0x6754, 0x5, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"})
read$auto_nsim_pp_hold_fops_netdev(r0, &(0x7f0000000000)=""/67, 0x43)
r1 = socket(0x29, 0x5, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x2004081)

3.624032109s ago: executing program 8 (id=5079):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000fddbdf250200000008000c000200000008001700f9db19433f9662a4dfd2036240804688f0019cc1c02be51b21f51ac4f54d76175974124e0bdbc4ccaf54e204baa54cc6e65e85f13a0ee411a2", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x801) (async, rerun: 64)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqe\x00', 0x401, 0x0)
ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000000c0)="d78b50ccde") (async, rerun: 32)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (rerun: 32)
ustat$auto(0x801, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
open(0x0, 0x22240, 0x155) (async)
socket(0x2, 0x2, 0x0) (async)
r4 = socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
open(0x0, 0x22240, 0x1a2) (async, rerun: 64)
socket(0x2, 0x1, 0x106) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1)
sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90)
socket(0x2, 0x1, 0x106) (async)
listen$auto(0x3, 0x81) (async)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
close_range$auto(0x2, 0x8, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r7) (async, rerun: 64)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) (async, rerun: 64)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)

3.397804228s ago: executing program 5 (id=5080):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="e73625bd7000fddbdf250b0000000800130007000000080004009a000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x1, 0x106)
r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0)
read$auto(r4, &(0x7f0000001200)='\x00', 0x4)
bind$auto(r3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x6a)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2)
r6 = syz_clone3(&(0x7f00000003c0)={0x189300, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x3e}, &(0x7f00000002c0)=""/59, 0x3b, &(0x7f0000000340)=""/36, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x58)
r7 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$auto_IOCTL_GET_NUM_DEVICES(r7, 0x40046104, &(0x7f0000000080)=0x207f)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snd/controlC2\x00', 0x20582, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x7, r8, 0x1, 0x7ff)
shmctl$auto_SHM_STAT(0x1, 0xd, 0x0)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x62, 0x27dd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="723419d5f222397e0cb0da4df5d13600", @ANYRES32=r8], 0x1ac}}, 0x4040000)
mmap$auto(0x0, 0x5, 0x9, 0x12, 0x1, 0x1000000000008000)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="5b78fce2e920f1cdd131"], 0x3c}, 0x1, 0x0, 0x0, 0x88010}, 0xc008081)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES8=r6], 0x1ac}}, 0x20004811)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x1ac}}, 0x40000)

2.888310285s ago: executing program 5 (id=5081):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x7, 0x0)
r1 = socket(0xa, 0x5, 0x84)
getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b)
write$auto(r0, 0x0, 0x0)

2.405419615s ago: executing program 39 (id=5060):
r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x101181, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async)
statmount$auto(0x0, &(0x7f0000000440)={0x8, 0x1, 0x7, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x81, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x1000000000000000, 0x0, 0x0, 0x0, 0xe953, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a, 0x8000000000000000], "c8213ee1f5c656d48ce08e8c8c7a6f6ac2fdb1be2fa81bf37ac3c6b6023c5b8f0d2e11ad3e6cad89c836252994936720801374b75413977a277f862e0ffd4365daa63705ed72555598fb83020a921be1e9f4ec3547b778a962"}, 0x400, 0x81) (async, rerun: 64)
writev$auto(r0, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async, rerun: 64)
r1 = ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000000)=0x6)
ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="ec8b789c09f0cc25cb7bc2d9e0f59694bf770962928529b4303ba6eda4ca6367d28bdadb3667ea41a25fd7ac545f046e1eb641ac887404d0a4b74ca42b4bd681b7160c622a78c81b2d1b1d5b3fd0d9f757c70ba83257498b51d4a34bfcc484be4ef26832")
socketpair$auto(0x8, 0xfffffffd, 0x5, &(0x7f0000000100)) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async)
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) (async)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async)
sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10080) (async, rerun: 32)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99`\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x97.\x03\x11\xc1\xbaS\x1c\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1t\xee\xc9:\xcfE\x87Z&i\xd4\x00\x00\x00\x00\x00', 0xedef, 0x3) (rerun: 32)

2.389784134s ago: executing program 5 (id=5083):
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x801, 0x106)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000)
r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/available_events\x00', 0xa2787, 0x0)
r1 = socket(0x10, 0x3, 0x7)
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2b00eb41", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdd2501000000080003007d295b00"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0xc0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'})
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), r1)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0)
read$auto(r3, 0x0, 0x200001)
read$auto(r0, 0x0, 0x5)

2.389198998s ago: executing program 8 (id=5084):
mmap$auto(0x0, 0x20009, 0x5, 0xb10, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(0x0, 0x261c2, 0xf0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00'})
r1 = bpf$auto(0x4, &(0x7f00000000c0)=@iter_create={r0, 0x8f}, 0xf)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xc}, 0x54)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0)
socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
prctl$auto(0x6, 0x8, 0x0, 0x20000000003, 0x9)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2.132023727s ago: executing program 2 (id=5085):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8)
fchmod$auto(r0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
setreuid$auto(0x4, 0x8)
mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd)

2.030456894s ago: executing program 8 (id=5086):
syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0)
ioctl$auto(r0, 0x64c7, 0xffffffffffffffff) (async)
ioctl$auto(r0, 0x64c7, 0xffffffffffffffff)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000)
madvise$auto(0x110c230000, 0x1, 0x9) (async)
madvise$auto(0x110c230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0)
getrandom$auto(0x0, 0x3, 0x80000001)
r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd0b, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
mmap$auto(0x0, 0x7, 0x5, 0xeb1, 0xfffffffffffffffa, 0x7ffc)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async)
sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'tunl0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r9=>0x0})
sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000200", @ANYRES16=r6, @ANYBLOB="a1052dbd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x4e21, @loopback}, 0x2) (async)
connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x4e21, @loopback}, 0x2)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
userfaultfd$auto(0x1)
msync$auto(0x110c230000, 0x200001, 0x6) (async)
msync$auto(0x110c230000, 0x200001, 0x6)

1.839977989s ago: executing program 5 (id=5087):
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x5522, 0xf15) (async)
ioctl$auto_USBDEVFS_CONTROL32(r0, 0xc0105500, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x1343, 0x5, 0x26, 0x1}) (async)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto(r1, 0x405c5504, 0x81)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async)
mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) (async)
mmap$auto(0x0, 0x5, 0xefb, 0x8000000008011, 0x3, 0x2000000000)

1.355860078s ago: executing program 5 (id=5088):
socket(0x27, 0x3, 0xfe)
setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) (async)
setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) (async)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0)
r1 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0)
socket(0x2, 0x1, 0x0) (async)
r2 = socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
ioctl$auto(0x3, 0x8901, r2)
read$auto(r1, &(0x7f0000000000)='^^@]I%\x00', 0x8)
ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180))
r3 = prctl$auto(0x4, 0x20000000000000b, 0x0, 0x6, 0x2a5e)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
mmap$auto(0x11003, 0xa, 0xb, 0x111, 0x401, 0x8000)
socket(0x2, 0x4, 0x7) (async)
r4 = socket(0x2, 0x4, 0x7)
connect$auto(r4, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55)
bind$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x78cc}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x78cc}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
pidfd_open$auto(0x1, 0x0)
setns(r3, 0x40000000) (async)
setns(r3, 0x40000000)
r5 = socket(0x2, 0x6, 0x88)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x54)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(r5, 0x0, 0x9a6, 0xe000) (async)
sendmmsg$auto(r5, 0x0, 0x9a6, 0xe000)
write$auto(r4, 0x0, 0x400800)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

928.321734ms ago: executing program 8 (id=5089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$auto(0x3, 0x404c534a, 0x38)
io_uring_setup$auto(0x5, 0x0)
mmap$auto(0x400000, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000)
mknod$auto(0x0, 0x1081, 0x9)
mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x42, 0x0, 0x400)
open(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95)
acct$auto(0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r2)
close_range$auto(0x0, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = pidfd_open$auto(0x1, 0x0)
setns(r3, 0x2000000)
ioctl$auto_VHOST_SET_VRING_CALL2(r3, 0x4008af21, 0x0)
ioctl$auto_FIBMAP(r1, 0x1, 0x1f0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)

572.310212ms ago: executing program 2 (id=5090):
r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20540, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x0, 0x2003f0, 0x15)
memfd_create$auto(0x0, 0x80000004)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x2a, 0x2, 0x1)
r3 = gettid()
kcmp$auto_KCMP_FILES(r3, r3, 0x2, 0x800, 0x1)
connect$auto(r2, 0x0, 0x55)
mmap$auto(0x3, 0x5, 0xdd, 0x16, 0xffffffffffffffff, 0xb10a)
r4 = prctl$auto_PR_SCHED_CORE_GET(0x8, 0x0, r3, 0x7b7, 0x9)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r4)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r6, 0x4b44, 0x8000000000038)
write$auto(r5, &(0x7f00000008c0)='audio1\x00\x00\xca\n$\x89\xb8\x18P\xf0\x90\"\x98v\x93V\xb3\xeeE\f\xfflT\xdc.\x8f\xc3\xf3Q\x0f\xa9S\xa1I\a\xe8tV\xfd|=\x81\xabi\xb5\xcf\xeai\xc8\xfdy\xcdc\xbdQ\xae_\xcdk\xe6\xedn!\xc7L\x97\xc9\xf9\xb5\x00i\xdc', 0x6)
ioctl$auto(r0, 0x40046103, 0x81)

0s ago: executing program 5 (id=5091):
r0 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
r1 = socket(0x15, 0x5, 0x0)
listen$auto(r1, 0x9)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14c9237c6cd4b157780000", @ANYRES16=r3, @ANYBLOB="cf5728bd7000fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020)
read$auto(0xffffffffffffffff, 0x0, 0x7e)
mprotect$auto(0x8000, 0x8, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
read$auto(r2, 0x0, 0x3)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_init$auto(0x2, 0x8a)
process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0)
r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0xfffffffd, 0x44b, 0x7, 0x5, 0x1007181, 0xff, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x800000000fbf, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x0, 0x864, 0x6, 0x22000, 0x40200, 0xfffffffe, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x1000000000000000, 0x0, 0x0, 0x7fdf, 0x47, 0x0, 0x100, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000, 0x0, 0x6, 0x6, 0x0, 0x0, 0x6, 0x10001, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x2000000000000]}, 0xa, 0xd)
ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffffffffffd02, &(0x7f00000001c0))
wait4$auto(r7, 0x0, 0x80000001, 0x0)
msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000340)={{0xd, 0xee01, 0xffffffffffffffff, 0xf, 0x1ff, 0x3, 0x2}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x5, 0x7, 0x5, 0x91d, 0x3, 0x1000, 0x39a, @raw=0x7, @raw=0x2})
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x24040080)

kernel console output (not intermixed with test programs):

fx_kvm_dev_ioctl+0x10/0x10
[ 1492.740433][T26799]  __x64_sys_ioctl+0x18e/0x210
[ 1492.740461][T26799]  do_syscall_64+0x106/0xf80
[ 1492.740486][T26799]  ? clear_bhb_loop+0x40/0x90
[ 1492.740510][T26799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1492.740528][T26799] RIP: 0033:0x7fabfbd9c799
[ 1492.740545][T26799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1492.740563][T26799] RSP: 002b:00007fabf9ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1492.740582][T26799] RAX: ffffffffffffffda RBX: 00007fabfc016180 RCX: 00007fabfbd9c799
[ 1492.740594][T26799] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1492.740605][T26799] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1492.740616][T26799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1492.740626][T26799] R13: 00007fabfc016218 R14: 00007fabfc016180 R15: 00007fff0cd43878
[ 1492.740650][T26799]  </TASK>
[ 1493.228553][T22005] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1493.384060][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1493.430145][T26799] debugfs: out of free dentries, can not create file 'mmu_pte_write'
[ 1493.627911][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1495.276185][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1495.663338][T26842] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1495.706380][T26842] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1495.749187][T26842] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1495.790721][T26842] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1495.862174][T26839] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1496.659025][T26878] FAULT_INJECTION: forcing a failure.
[ 1496.659025][T26878] name failslab, interval 1, probability 0, space 0, times 0
[ 1496.715651][T26882] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[ 1497.066469][T26878] CPU: 0 UID: 0 PID: 26878 Comm: syz.0.4527 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1497.066517][T26878] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1497.066528][T26878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1497.066539][T26878] Call Trace:
[ 1497.066546][T26878]  <TASK>
[ 1497.066554][T26878]  dump_stack_lvl+0x100/0x190
[ 1497.066588][T26878]  should_fail_ex.cold+0x5/0xa
[ 1497.066610][T26878]  should_failslab+0xc2/0x120
[ 1497.066631][T26878]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1497.066656][T26878]  ? kvm_dev_ioctl+0x1320/0x1a50
[ 1497.066682][T26878]  kvm_dev_ioctl+0x1320/0x1a50
[ 1497.066710][T26878]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1497.066738][T26878]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1497.066760][T26878]  __x64_sys_ioctl+0x18e/0x210
[ 1497.066789][T26878]  do_syscall_64+0x106/0xf80
[ 1497.066815][T26878]  ? clear_bhb_loop+0x40/0x90
[ 1497.066838][T26878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.066857][T26878] RIP: 0033:0x7f2fbe39c799
[ 1497.066873][T26878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1497.066891][T26878] RSP: 002b:00007f2fbf2b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1497.066910][T26878] RAX: ffffffffffffffda RBX: 00007f2fbe616180 RCX: 00007f2fbe39c799
[ 1497.066922][T26878] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1497.066934][T26878] RBP: 00007f2fbe432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1497.066945][T26878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1497.066957][T26878] R13: 00007f2fbe616218 R14: 00007f2fbe616180 R15: 00007fffd9c430c8
[ 1497.066981][T26878]  </TASK>
[ 1497.673165][T26889] FAULT_INJECTION: forcing a failure.
[ 1497.673165][T26889] name failslab, interval 1, probability 0, space 0, times 0
[ 1497.744219][T26889] CPU: 0 UID: 0 PID: 26889 Comm: syz.5.4530 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1497.744261][T26889] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1497.744271][T26889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1497.744282][T26889] Call Trace:
[ 1497.744288][T26889]  <TASK>
[ 1497.744295][T26889]  dump_stack_lvl+0x100/0x190
[ 1497.744329][T26889]  should_fail_ex.cold+0x5/0xa
[ 1497.744351][T26889]  should_failslab+0xc2/0x120
[ 1497.744371][T26889]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1497.744398][T26889]  ? __d_alloc+0x34/0xa80
[ 1497.744417][T26889]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1497.744446][T26889]  __d_alloc+0x34/0xa80
[ 1497.744468][T26889]  d_alloc_parallel+0x111/0x14e0
[ 1497.744500][T26889]  ? find_held_lock+0x2b/0x80
[ 1497.744517][T26889]  ? __d_lookup+0x25c/0x4a0
[ 1497.744542][T26889]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1497.744571][T26889]  ? __d_lookup+0x266/0x4a0
[ 1497.744601][T26889]  lookup_open.isra.0+0x57c/0x11b0
[ 1497.744627][T26889]  ? __pfx_kernfs_iop_permission+0x10/0x10
[ 1497.744656][T26889]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1497.744695][T26889]  ? lookup_fast+0x2da/0x600
[ 1497.744724][T26889]  path_openat+0xa98/0x31a0
[ 1497.744749][T26889]  ? __pfx_path_openat+0x10/0x10
[ 1497.744776][T26889]  do_file_open+0x20e/0x430
[ 1497.744796][T26889]  ? __pfx_do_file_open+0x10/0x10
[ 1497.744830][T26889]  ? alloc_fd+0x476/0x790
[ 1497.744850][T26889]  ? do_getname+0x191/0x390
[ 1497.744874][T26889]  do_sys_openat2+0x10d/0x1e0
[ 1497.744898][T26889]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1497.744930][T26889]  __x64_sys_openat+0x12d/0x210
[ 1497.744954][T26889]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1497.744987][T26889]  do_syscall_64+0x106/0xf80
[ 1497.745011][T26889]  ? clear_bhb_loop+0x40/0x90
[ 1497.745041][T26889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.745060][T26889] RIP: 0033:0x7fabfbd9c799
[ 1497.745075][T26889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1497.745093][T26889] RSP: 002b:00007fabfcb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1497.745111][T26889] RAX: ffffffffffffffda RBX: 00007fabfc015fa0 RCX: 00007fabfbd9c799
[ 1497.745123][T26889] RDX: 0000000000141400 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1497.745134][T26889] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1497.745145][T26889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1497.745155][T26889] R13: 00007fabfc016038 R14: 00007fabfc015fa0 R15: 00007fff0cd43878
[ 1497.745178][T26889]  </TASK>
[ 1498.019069][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1498.025186][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1498.031254][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1498.038077][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1501.486468][T26926] FAULT_INJECTION: forcing a failure.
[ 1501.486468][T26926] name failslab, interval 1, probability 0, space 0, times 0
[ 1501.755405][T26926] CPU: 0 UID: 0 PID: 26926 Comm: syz.5.4536 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1501.755446][T26926] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1501.755457][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1501.755468][T26926] Call Trace:
[ 1501.755475][T26926]  <TASK>
[ 1501.755483][T26926]  dump_stack_lvl+0x100/0x190
[ 1501.755516][T26926]  should_fail_ex.cold+0x5/0xa
[ 1501.755538][T26926]  should_failslab+0xc2/0x120
[ 1501.755559][T26926]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1501.755587][T26926]  ? __d_alloc+0x34/0xa80
[ 1501.755611][T26926]  __d_alloc+0x34/0xa80
[ 1501.755633][T26926]  d_alloc+0x4a/0x1e0
[ 1501.755655][T26926]  lookup_one_qstr_excl+0x175/0x250
[ 1501.755681][T26926]  start_dirop+0x59/0xb0
[ 1501.755710][T26926]  simple_start_creating+0xf9/0x110
[ 1501.755740][T26926]  ? __pfx_simple_start_creating+0x10/0x10
[ 1501.755770][T26926]  ? mntput+0x70/0xa0
[ 1501.755796][T26926]  ? simple_pin_fs+0xa3/0x190
[ 1501.755823][T26926]  debugfs_start_creating.part.0+0x82/0x170
[ 1501.755845][T26926]  __debugfs_create_file+0xb3/0x4f0
[ 1501.755867][T26926]  debugfs_create_file_full+0x41/0x60
[ 1501.755888][T26926]  kvm_dev_ioctl+0x1491/0x1a50
[ 1501.755917][T26926]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1501.755945][T26926]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1501.755967][T26926]  __x64_sys_ioctl+0x18e/0x210
[ 1501.755995][T26926]  do_syscall_64+0x106/0xf80
[ 1501.756021][T26926]  ? clear_bhb_loop+0x40/0x90
[ 1501.756055][T26926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1501.756075][T26926] RIP: 0033:0x7fabfbd9c799
[ 1501.756092][T26926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1501.756111][T26926] RSP: 002b:00007fabf9ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1501.756132][T26926] RAX: ffffffffffffffda RBX: 00007fabfc016180 RCX: 00007fabfbd9c799
[ 1501.756144][T26926] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1501.756155][T26926] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1501.756166][T26926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1501.756177][T26926] R13: 00007fabfc016218 R14: 00007fabfc016180 R15: 00007fff0cd43878
[ 1501.756200][T26926]  </TASK>
[ 1503.341382][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'.
[ 1503.573290][T26957] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4541'.
[ 1505.879427][T26998] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12
[ 1506.279649][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4554'.
[ 1506.343480][T27005] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4554'.
[ 1507.367405][T27019] kAFS: Invalid Command on /proc/fs/afs/cells file
[ 1511.785676][T27071] FAULT_INJECTION: forcing a failure.
[ 1511.785676][T27071] name failslab, interval 1, probability 0, space 0, times 0
[ 1512.055330][T27071] CPU: 0 UID: 0 PID: 27071 Comm: syz.5.4576 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1512.055377][T27071] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1512.055388][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1512.055400][T27071] Call Trace:
[ 1512.055407][T27071]  <TASK>
[ 1512.055416][T27071]  dump_stack_lvl+0x100/0x190
[ 1512.055449][T27071]  should_fail_ex.cold+0x5/0xa
[ 1512.055472][T27071]  should_failslab+0xc2/0x120
[ 1512.055492][T27071]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1512.055520][T27071]  ? __d_alloc+0x34/0xa80
[ 1512.055545][T27071]  __d_alloc+0x34/0xa80
[ 1512.055568][T27071]  d_alloc+0x4a/0x1e0
[ 1512.055590][T27071]  lookup_one_qstr_excl+0x175/0x250
[ 1512.055617][T27071]  start_dirop+0x59/0xb0
[ 1512.055647][T27071]  simple_start_creating+0xf9/0x110
[ 1512.055677][T27071]  ? __pfx_simple_start_creating+0x10/0x10
[ 1512.055713][T27071]  nfsd_mkdir+0xf6/0x460
[ 1512.055734][T27071]  ? dput.part.0+0xdd/0x570
[ 1512.055759][T27071]  nfsd_fill_super+0x3f9/0x560
[ 1512.055781][T27071]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1512.055802][T27071]  get_tree_keyed+0x10e/0x1d0
[ 1512.055831][T27071]  vfs_get_tree+0x92/0x320
[ 1512.055857][T27071]  path_mount+0x7d0/0x23d0
[ 1512.055882][T27071]  ? __pfx_path_mount+0x10/0x10
[ 1512.055902][T27071]  ? lockdep_hardirqs_on+0x78/0x100
[ 1512.055942][T27071]  ? putname+0xb1/0x110
[ 1512.055960][T27071]  ? kmem_cache_free+0x124/0x6a0
[ 1512.055994][T27071]  ? __x64_sys_mount+0x293/0x310
[ 1512.056015][T27071]  __x64_sys_mount+0x293/0x310
[ 1512.056037][T27071]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1512.056067][T27071]  do_syscall_64+0x106/0xf80
[ 1512.056092][T27071]  ? clear_bhb_loop+0x40/0x90
[ 1512.056116][T27071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1512.056135][T27071] RIP: 0033:0x7fabfbd9c799
[ 1512.056152][T27071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.056173][T27071] RSP: 002b:00007fabfcb6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1512.056197][T27071] RAX: ffffffffffffffda RBX: 00007fabfc016090 RCX: 00007fabfbd9c799
[ 1512.056210][T27071] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1512.056221][T27071] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1512.056232][T27071] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[ 1512.056242][T27071] R13: 00007fabfc016128 R14: 00007fabfc016090 R15: 00007fff0cd43878
[ 1512.056266][T27071]  </TASK>
[ 1513.081445][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4577'.
[ 1515.660255][T27118] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1516.694681][T27145] netlink: 'syz.5.4586': attribute type 4 has an invalid length.
[ 1516.775480][T27145] netlink: 'syz.5.4586': attribute type 5 has an invalid length.
[ 1516.863140][T27145] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4586'.
[ 1517.463535][T27150] tc_dump_action: action bad kind
[ 1521.762561][T27181] kexec: Could not allocate control_code_buffer
[ 1522.677035][T27203] FAULT_INJECTION: forcing a failure.
[ 1522.677035][T27203] name failslab, interval 1, probability 0, space 0, times 0
[ 1522.793518][T27203] CPU: 0 UID: 0 PID: 27203 Comm: syz.0.4601 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1522.793564][T27203] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1522.793574][T27203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1522.793585][T27203] Call Trace:
[ 1522.793592][T27203]  <TASK>
[ 1522.793599][T27203]  dump_stack_lvl+0x100/0x190
[ 1522.793632][T27203]  should_fail_ex.cold+0x5/0xa
[ 1522.793653][T27203]  should_failslab+0xc2/0x120
[ 1522.793673][T27203]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1522.793701][T27203]  ? alloc_inode+0x183/0x250
[ 1522.793725][T27203]  ? find_inode_fast+0x1fa/0x910
[ 1522.793752][T27203]  alloc_inode+0x183/0x250
[ 1522.793776][T27203]  iget_locked+0x1d9/0x6d0
[ 1522.793810][T27203]  ? __pfx_iget_locked+0x10/0x10
[ 1522.793834][T27203]  ? kernfs_root+0xee/0x2a0
[ 1522.793858][T27203]  ? kernfs_root+0xee/0x2a0
[ 1522.793888][T27203]  kernfs_get_inode+0x46/0x470
[ 1522.793914][T27203]  kernfs_iop_lookup+0x1a7/0x2d0
[ 1522.793943][T27203]  lookup_open.isra.0+0x631/0x11b0
[ 1522.793975][T27203]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1522.794015][T27203]  ? lookup_fast+0x2da/0x600
[ 1522.794044][T27203]  path_openat+0xa98/0x31a0
[ 1522.794070][T27203]  ? __pfx_path_openat+0x10/0x10
[ 1522.794097][T27203]  do_file_open+0x20e/0x430
[ 1522.794117][T27203]  ? __pfx_do_file_open+0x10/0x10
[ 1522.794224][T27203]  ? alloc_fd+0x476/0x790
[ 1522.794258][T27203]  ? do_getname+0x191/0x390
[ 1522.794283][T27203]  do_sys_openat2+0x10d/0x1e0
[ 1522.794319][T27203]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1522.794350][T27203]  __x64_sys_openat+0x12d/0x210
[ 1522.794375][T27203]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1522.794408][T27203]  do_syscall_64+0x106/0xf80
[ 1522.794434][T27203]  ? clear_bhb_loop+0x40/0x90
[ 1522.794457][T27203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1522.794476][T27203] RIP: 0033:0x7f2fbe39c799
[ 1522.794493][T27203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1522.794510][T27203] RSP: 002b:00007f2fbf2f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1522.794528][T27203] RAX: ffffffffffffffda RBX: 00007f2fbe615fa0 RCX: 00007f2fbe39c799
[ 1522.794540][T27203] RDX: 0000000000141400 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1522.794551][T27203] RBP: 00007f2fbe432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1522.794562][T27203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1522.794572][T27203] R13: 00007f2fbe616038 R14: 00007f2fbe615fa0 R15: 00007fffd9c430c8
[ 1522.794595][T27203]  </TASK>
[ 1525.092992][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4604'.
[ 1525.799708][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4603'.
[ 1529.101756][T27251] futex_wake_op: syz.3.4611 tries to shift op by -2048; fix this program
[ 1529.175507][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'.
[ 1529.610604][T27273] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1530.015768][T27282] FAULT_INJECTION: forcing a failure.
[ 1530.015768][T27282] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1530.160096][T27282] CPU: 0 UID: 0 PID: 27282 Comm: syz.3.4617 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1530.160137][T27282] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1530.160148][T27282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1530.160158][T27282] Call Trace:
[ 1530.160165][T27282]  <TASK>
[ 1530.160173][T27282]  dump_stack_lvl+0x100/0x190
[ 1530.160206][T27282]  should_fail_ex.cold+0x5/0xa
[ 1530.160223][T27282]  ? __kernel_text_address+0xd/0x30
[ 1530.160253][T27282]  get_futex_key+0x1d2/0x1620
[ 1530.160278][T27282]  ? __pfx_get_futex_key+0x10/0x10
[ 1530.160300][T27282]  ? putname+0xb1/0x110
[ 1530.160320][T27282]  ? stack_trace_save+0x8e/0xc0
[ 1530.160338][T27282]  ? __pfx_stack_trace_save+0x10/0x10
[ 1530.160359][T27282]  futex_wait_setup+0x83/0x510
[ 1530.160393][T27282]  __futex_wait+0x19f/0x300
[ 1530.160423][T27282]  ? __pfx___futex_wait+0x10/0x10
[ 1530.160454][T27282]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1530.160485][T27282]  ? futex_hash+0x2c5/0x380
[ 1530.160512][T27282]  futex_wait+0xed/0x380
[ 1530.160540][T27282]  ? __pfx_futex_wait+0x10/0x10
[ 1530.160573][T27282]  ? putname+0xb1/0x110
[ 1530.160600][T27282]  ? kmem_cache_free+0x124/0x6a0
[ 1530.160629][T27282]  do_futex+0x1ef/0x350
[ 1530.160654][T27282]  ? __pfx_do_futex+0x10/0x10
[ 1530.160677][T27282]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1530.160706][T27282]  __x64_sys_futex+0x34f/0x4d0
[ 1530.160731][T27282]  ? __x64_sys_openat+0x12d/0x210
[ 1530.160756][T27282]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1530.160788][T27282]  do_syscall_64+0x106/0xf80
[ 1530.160814][T27282]  ? clear_bhb_loop+0x40/0x90
[ 1530.160836][T27282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1530.160855][T27282] RIP: 0033:0x7f4fa7f9c799
[ 1530.160871][T27282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1530.160888][T27282] RSP: 002b:00007f4fa8e9e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1530.160906][T27282] RAX: ffffffffffffffda RBX: 00007f4fa8215fa8 RCX: 00007f4fa7f9c799
[ 1530.160918][T27282] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fa8215fa8
[ 1530.160929][T27282] RBP: 00007f4fa8215fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1530.160940][T27282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1530.160950][T27282] R13: 00007f4fa8216038 R14: 00007ffe496ef370 R15: 00007ffe496ef458
[ 1530.160972][T27282]  </TASK>
[ 1534.328291][T27312] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078005c00 pfn:0x78004
[ 1534.541383][T27312] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1534.752703][T27312] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1534.905396][T27312] page_type: f5(slab)
[ 1535.065530][T27312] raw: 00fff00000000240 ffff88813fe3cb40 ffffea0000d5b990 ffffea0001e38610
[ 1535.214140][T27312] raw: ffff888078005c00 000000080010000e 00000000f5000000 0000000000000000
[ 1535.461994][T27312] head: 00fff00000000240 ffff88813fe3cb40 ffffea0000d5b990 ffffea0001e38610
[ 1535.508364][T27331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1535.564511][T27312] head: ffff888078005c00 000000080010000e 00000000f5000000 0000000000000000
[ 1535.671874][T27312] head: 00fff00000000001 ffffea0001e00101 00000000ffffffff 00000000ffffffff
[ 1535.781464][T27312] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1536.062210][T27312] page dumped because: unmovable page
[ 1536.067634][T27312] page_owner tracks the page as allocated
[ 1536.227906][T27312] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12933, tgid 12933 (syz-executor), ts 510361999408, free_ts 509352750217
[ 1536.497201][T27312]  post_alloc_hook+0x153/0x170
[ 1536.502018][T27312]  get_page_from_freelist+0x111d/0x3140
[ 1536.624500][T27312]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1536.685060][T27312]  new_slab+0xa6/0x6b0
[ 1536.689183][T27312]  refill_objects+0x26b/0x400
[ 1536.769142][T27312]  __pcs_replace_empty_main+0x1ab/0x660
[ 1536.824320][T27312]  __kmalloc_noprof+0x688/0x850
[ 1536.879702][T27312]  fib_create_info+0x5bf/0x4640
[ 1536.928242][T27312]  fib_table_insert+0x169/0x1c70
[ 1536.985506][T27312]  fib_magic+0x4d4/0x5c0
[ 1537.023138][T27312]  fib_add_ifaddr+0x3a1/0x560
[ 1537.075745][T27312]  fib_netdev_event+0x3d6/0x710
[ 1537.118801][T27312]  notifier_call_chain+0x99/0x420
[ 1537.166147][T27312]  call_netdevice_notifiers_info+0xbe/0x110
[ 1537.234986][T27312]  __dev_notify_flags+0x12c/0x2e0
[ 1537.278141][T27312]  netif_change_flags+0x108/0x160
[ 1537.337662][T27312] page last free pid 12913 tgid 12913 stack trace:
[ 1537.409673][T27312]  __free_frozen_pages+0x7e1/0x10d0
[ 1537.468416][T27312]  pgd_free+0x3eb/0x540
[ 1537.513394][T27312]  __mmdrop+0xe5/0x750
[ 1537.554618][T27312]  __mmput+0x379/0x410
[ 1537.604711][T27312]  mmput+0x67/0x80
[ 1537.608483][T27312]  do_exit+0x819/0x2b60
[ 1537.682804][T27312]  do_group_exit+0xd5/0x2a0
[ 1537.728135][T27312]  get_signal+0x1ec7/0x21e0
[ 1537.764149][T27312]  arch_do_signal_or_restart+0x91/0x770
[ 1537.812615][T27312]  irqentry_exit+0x1f8/0x670
[ 1537.819170][T27312]  asm_exc_page_fault+0x26/0x30
[ 1540.138911][T27346] FAULT_INJECTION: forcing a failure.
[ 1540.138911][T27346] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1540.198878][T27346] CPU: 0 UID: 0 PID: 27346 Comm: syz.1.4627 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1540.198921][T27346] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1540.198932][T27346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1540.198944][T27346] Call Trace:
[ 1540.198951][T27346]  <TASK>
[ 1540.198958][T27346]  dump_stack_lvl+0x100/0x190
[ 1540.198991][T27346]  should_fail_ex.cold+0x5/0xa
[ 1540.199013][T27346]  get_futex_key+0x1d2/0x1620
[ 1540.199039][T27346]  ? __pfx_get_futex_key+0x10/0x10
[ 1540.199069][T27346]  futex_wake+0xea/0x530
[ 1540.199098][T27346]  ? __pfx_futex_wake+0x10/0x10
[ 1540.199128][T27346]  ? putname+0xb1/0x110
[ 1540.199147][T27346]  ? kmem_cache_free+0x124/0x6a0
[ 1540.199177][T27346]  do_futex+0x32b/0x350
[ 1540.199200][T27346]  ? __pfx_do_futex+0x10/0x10
[ 1540.199223][T27346]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1540.199253][T27346]  __x64_sys_futex+0x34f/0x4d0
[ 1540.199278][T27346]  ? __x64_sys_openat+0x12d/0x210
[ 1540.199302][T27346]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1540.199334][T27346]  do_syscall_64+0x106/0xf80
[ 1540.199360][T27346]  ? clear_bhb_loop+0x40/0x90
[ 1540.199383][T27346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1540.199402][T27346] RIP: 0033:0x7f97b4d9c799
[ 1540.199418][T27346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1540.199436][T27346] RSP: 002b:00007f97b5c920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1540.199456][T27346] RAX: ffffffffffffffda RBX: 00007f97b5016098 RCX: 00007f97b4d9c799
[ 1540.199468][T27346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97b501609c
[ 1540.199480][T27346] RBP: 00007f97b5016090 R08: 0000000000000000 R09: 0000000000000000
[ 1540.199491][T27346] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[ 1540.199502][T27346] R13: 00007f97b5016128 R14: 00007ffe653da890 R15: 00007ffe653da978
[ 1540.199525][T27346]  </TASK>
[ 1540.621389][T27376] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1541.073643][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'.
[ 1545.155181][T27416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4642'.
[ 1545.226810][T27416] ipvlan0: entered promiscuous mode
[ 1545.362369][T27416] ipvlan0: entered allmulticast mode
[ 1545.508316][T27416] veth0_vlan: entered allmulticast mode
[ 1546.371696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.380081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.908689][T27434] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1548.968846][T27470] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4653'.
[ 1550.962487][T27497] vivid-007: =================  START STATUS  =================
[ 1551.239896][T27497] vivid-007: Generate PTS: true
[ 1551.717759][T27497] vivid-007: Generate SCR: true
[ 1551.927627][T27497] tpg source WxH: 320x240 (Y'CbCr)
[ 1552.147673][T27497] tpg field: 1
[ 1552.207068][T27497] tpg crop: (0,0)/320x240
[ 1552.339013][T27511] net_ratelimit: 47 callbacks suppressed
[ 1552.339033][T27511] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1552.400630][T27497] tpg compose: (0,0)/320x240
[ 1552.440245][T27497] tpg colorspace: 8
[ 1552.722833][T27497] tpg transfer function: 0/0
[ 1552.727515][T27497] tpg Y'CbCr encoding: 0/0
[ 1553.421690][T27497] tpg quantization: 0/0
[ 1553.815597][T27497] tpg RGB range: 0/2
[ 1553.819538][T27497] vivid-007: ==================  END STATUS  ==================
[ 1555.813614][T27533] netlink: 'syz.5.4666': attribute type 11 has an invalid length.
[ 1555.873221][T27533] netlink: 'syz.5.4666': attribute type 11 has an invalid length.
[ 1555.881075][T27533] netlink: 'syz.5.4666': attribute type 11 has an invalid length.
[ 1556.101658][T27533] netlink: 'syz.5.4666': attribute type 11 has an invalid length.
[ 1556.254309][T27538] __vm_enough_memory: pid: 27538, comm: syz.0.4667, bytes: 4398046511104 not enough memory for the allocation
[ 1556.534773][T27533] netlink: 'syz.5.4666': attribute type 11 has an invalid length.
[ 1556.671844][T27533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1556.912083][T27533] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1557.082510][T27533] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1557.482507][T27533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1557.581307][T27533] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4666'.
[ 1558.774411][T27554] netlink: 'syz.3.4669': attribute type 1 has an invalid length.
[ 1559.364600][T27552] netlink: 122 bytes leftover after parsing attributes in process `syz.3.4669'.
[ 1563.137494][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4679'.
[ 1563.369546][T27609] netlink: 'syz.3.4679': attribute type 1 has an invalid length.
[ 1563.869251][T27609] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.4679'.
[ 1565.844109][T27620] ecryptfs_parse_packet_length: Five-byte packet length not supported
[ 1566.169294][T27620] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[ 1568.299285][ T5939] Bluetooth: hci2: unexpected event for opcode 0x7c89
[ 1568.521295][ T5939] Bluetooth: hci2: unexpected event for opcode 0x7c89
[ 1574.247899][   T30] audit: type=1804 audit(4294969846.311:44): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4699" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=1768 res=1 errno=0
[ 1574.788742][   T30] audit: type=1800 audit(4294969846.860:45): pid=27712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4701" name="dbroot" dev="configfs" ino=416253 res=0 errno=0
[ 1585.244691][T27800] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1585.440744][T27804] sd 0:0:1:0: PR command failed: 1026
[ 1585.446184][T27804] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1585.863823][T27804] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1586.273897][T27807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4712'.
[ 1590.156510][T27826] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1590.468275][T27834] netlink: 'syz.1.4718': attribute type 1 has an invalid length.
[ 1591.174255][T27834] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1591.215197][T27834] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1591.324037][T27834] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1591.431317][T27834] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1592.680218][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1593.240530][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1593.400620][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1593.480772][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1596.573199][T22005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1596.604649][T22005] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1596.613229][T22005] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1596.620937][T22005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1596.628951][T22005] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1597.050106][T27884] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1598.882931][T27883] chnl_net:caif_netlink_parms(): no params data found
[ 1598.923779][T22005] Bluetooth: hci4: command tx timeout
[ 1600.058616][T27883] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1600.097121][T27883] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1600.150474][T27883] bridge_slave_0: entered allmulticast mode
[ 1600.206599][T27883] bridge_slave_0: entered promiscuous mode
[ 1600.382594][T27883] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1600.439169][T27883] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1600.525531][T27883] bridge_slave_1: entered allmulticast mode
[ 1600.583865][T27883] bridge_slave_1: entered promiscuous mode
[ 1601.008676][T22005] Bluetooth: hci4: command tx timeout
[ 1601.132730][T27883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1601.209921][T27883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1601.257908][T22005] Bluetooth: hci3: unexpected event for opcode 0x7c89
[ 1601.686456][T27883] team0: Port device team_slave_0 added
[ 1601.747712][T27883] team0: Port device team_slave_1 added
[ 1602.075104][T27883] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1602.082077][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1602.378704][T27883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1602.473816][T27883] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1602.550162][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1602.615458][T27926] FAULT_INJECTION: forcing a failure.
[ 1602.615458][T27926] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1602.757720][T27883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1602.775434][T27926] CPU: 0 UID: 0 PID: 27926 Comm: syz.5.4731 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1602.775475][T27926] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1602.775485][T27926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1602.775497][T27926] Call Trace:
[ 1602.775503][T27926]  <TASK>
[ 1602.775511][T27926]  dump_stack_lvl+0x100/0x190
[ 1602.775547][T27926]  should_fail_ex.cold+0x5/0xa
[ 1602.775570][T27926]  get_futex_key+0x1d2/0x1620
[ 1602.775597][T27926]  ? __pfx_get_futex_key+0x10/0x10
[ 1602.775620][T27926]  ? hrtimer_try_to_cancel+0x3a/0x2f0
[ 1602.775645][T27926]  ? ktime_add_safe+0x60/0x70
[ 1602.775671][T27926]  futex_wake+0xea/0x530
[ 1602.775697][T27926]  ? __pfx_futex_wait+0x10/0x10
[ 1602.775723][T27926]  ? __lock_acquire+0x4a5/0x2630
[ 1602.775765][T27926]  ? __pfx_futex_wake+0x10/0x10
[ 1602.775792][T27926]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1602.775824][T27926]  do_futex+0x32b/0x350
[ 1602.775854][T27926]  ? __pfx_do_futex+0x10/0x10
[ 1602.775877][T27926]  ? ktime_get+0x200/0x300
[ 1602.775894][T27926]  ? lockdep_hardirqs_on+0x78/0x100
[ 1602.775923][T27926]  ? read_tsc+0x9/0x20
[ 1602.775946][T27926]  __x64_sys_futex+0x34f/0x4d0
[ 1602.775973][T27926]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1602.776004][T27926]  do_syscall_64+0x106/0xf80
[ 1602.776028][T27926]  ? clear_bhb_loop+0x40/0x90
[ 1602.776050][T27926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1602.776070][T27926] RIP: 0033:0x7fabfbd9c799
[ 1602.776085][T27926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1602.776103][T27926] RSP: 002b:00007fff0cd439d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1602.776121][T27926] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fabfbd9c799
[ 1602.776133][T27926] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabfc016098
[ 1602.776144][T27926] RBP: 00000000000001de R08: 0000000000000002 R09: 0000000000000000
[ 1602.776154][T27926] R10: 00007fabfc015fa0 R11: 0000000000000246 R12: 0000000000000001
[ 1602.776165][T27926] R13: 00007fabfc01609c R14: 00007fabfc016098 R15: 00007fabfc016090
[ 1602.776186][T27926]  </TASK>
[ 1603.143746][T27943] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1603.306728][T22005] Bluetooth: hci4: command tx timeout
[ 1603.531814][T27883] hsr_slave_0: entered promiscuous mode
[ 1603.582409][T27883] hsr_slave_1: entered promiscuous mode
[ 1603.621874][T27883] debugfs: 'hsr0' already exists in 'hsr'
[ 1603.675762][T27883] Cannot create hsr debugfs directory
[ 1604.055358][T27948] sd 0:0:1:0: PR command failed: 1026
[ 1604.153153][T27948] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1604.228243][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4736'.
[ 1604.263115][T27948] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1604.275245][T27952] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4736'.
[ 1604.396688][T27950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4735'.
[ 1605.326820][T22005] Bluetooth: hci4: command tx timeout
[ 1606.969619][T27883] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1607.537462][T27883] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1607.811124][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.817434][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.287184][T27883] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1609.480826][T27883] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1610.874291][T27883] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1610.957465][T27883] 8021q: adding VLAN 0 to HW filter on device team0
[ 1611.165406][T27956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1611.172667][T27956] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1611.247411][T27956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1611.254569][T27956] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1613.027199][T27883] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1614.894788][T27883] veth0_vlan: entered promiscuous mode
[ 1614.985837][T27883] veth1_vlan: entered promiscuous mode
[ 1616.093102][T27883] veth0_macvtap: entered promiscuous mode
[ 1617.350486][T27883] veth1_macvtap: entered promiscuous mode
[ 1617.603945][T27883] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1617.931669][T27883] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1618.131359][T27749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1618.223256][T27749] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1618.231991][T27749] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1618.419098][T27749] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.071421][T27748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1619.120262][T27748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1619.370815][T27956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1619.431862][T27956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1620.881162][T28073] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1620.995378][T28073] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1621.274738][T28073] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1621.577826][T28073] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1621.822638][T28073] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1622.026514][T28073] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1622.559653][T28073] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1622.748272][ T5939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1622.762426][ T5939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1622.773397][ T5939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1622.781724][ T5939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1622.796416][ T5939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1622.936911][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1623.015836][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1623.335608][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1623.575901][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1623.656215][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1624.856484][ T5939] Bluetooth: hci5: command tx timeout
[ 1625.738100][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1626.470239][   T30] audit: type=1326 audit(4294969898.535:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.1.4761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97b4d9c799 code=0x0
[ 1626.650644][T28116] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1626.940026][ T5939] Bluetooth: hci5: command tx timeout
[ 1627.441892][T27731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1627.572644][T28083] chnl_net:caif_netlink_parms(): no params data found
[ 1627.752018][T27731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1627.817819][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1628.136199][T27731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.404482][T27731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.633483][T28083] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1628.673592][T28083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1628.715100][T28083] bridge_slave_0: entered allmulticast mode
[ 1628.759927][T28083] bridge_slave_0: entered promiscuous mode
[ 1629.012674][T28083] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1629.020008][ T5939] Bluetooth: hci5: command tx timeout
[ 1629.062583][T28083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1629.096345][T28083] bridge_slave_1: entered allmulticast mode
[ 1629.127997][T28083] bridge_slave_1: entered promiscuous mode
[ 1629.420600][T28083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1629.583135][T28083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1629.716114][T27731] bridge_slave_0: left allmulticast mode
[ 1629.741314][T27731] bridge_slave_0: left promiscuous mode
[ 1629.772233][T27731] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.102521][ T5939] Bluetooth: hci5: command tx timeout
[ 1632.604292][T28148] Invalid ELF header magic: != ELF
[ 1633.283020][T27731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1633.739772][T27731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1633.790170][T27731] bond0 (unregistering): Released all slaves
[ 1633.906526][T27731] @*!@,@: left promiscuous mode
[ 1634.037461][T28083] team0: Port device team_slave_0 added
[ 1634.103116][T28083] team0: Port device team_slave_1 added
[ 1634.362277][T28083] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1634.369814][T28083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1634.592299][T28083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1634.826119][T28083] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1634.871620][T28083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1635.101386][T28083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1635.314836][T28173] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1635.693451][   T30] audit: type=1326 audit(4294969907.740:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28174 comm="syz.5.4775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabfbd9c799 code=0x0
[ 1635.767759][T28083] hsr_slave_0: entered promiscuous mode
[ 1635.768417][T28083] hsr_slave_1: entered promiscuous mode
[ 1635.768886][T28083] debugfs: 'hsr0' already exists in 'hsr'
[ 1635.768903][T28083] Cannot create hsr debugfs directory
[ 1637.313858][T28194] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1637.660779][T27731] hsr_slave_0: left promiscuous mode
[ 1637.704272][T27731] hsr_slave_1: left promiscuous mode
[ 1637.798284][T27731] veth0_macvtap: left promiscuous mode
[ 1637.870835][T27731] veth1_vlan: left promiscuous mode
[ 1637.904803][T27731] veth0_vlan: left promiscuous mode
[ 1638.070704][T28210] QAT: Device 3 not found
[ 1638.133812][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4777'.
[ 1638.194357][T28211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4778'.
[ 1638.258724][T28215] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4778'.
[ 1638.391342][T28206] zswap: compressor  not available
[ 1639.015642][T27731] team0 (unregistering): Port device team_slave_1 removed
[ 1639.540557][T27731] team0 (unregistering): Port device team_slave_0 removed
[ 1640.319164][T28227] FAULT_INJECTION: forcing a failure.
[ 1640.319164][T28227] name failslab, interval 1, probability 0, space 0, times 0
[ 1640.416065][T28227] CPU: 0 UID: 0 PID: 28227 Comm: syz.6.4781 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1640.416107][T28227] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1640.416117][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1640.416129][T28227] Call Trace:
[ 1640.416136][T28227]  <TASK>
[ 1640.416144][T28227]  dump_stack_lvl+0x100/0x190
[ 1640.416177][T28227]  should_fail_ex.cold+0x5/0xa
[ 1640.416199][T28227]  should_failslab+0xc2/0x120
[ 1640.416221][T28227]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1640.416250][T28227]  ? __d_alloc+0x34/0xa80
[ 1640.416275][T28227]  __d_alloc+0x34/0xa80
[ 1640.416297][T28227]  d_alloc+0x4a/0x1e0
[ 1640.416318][T28227]  lookup_one_qstr_excl+0x175/0x250
[ 1640.416344][T28227]  start_dirop+0x59/0xb0
[ 1640.416374][T28227]  simple_start_creating+0xf9/0x110
[ 1640.416405][T28227]  ? __pfx_simple_start_creating+0x10/0x10
[ 1640.416436][T28227]  ? mntput+0x70/0xa0
[ 1640.416463][T28227]  ? simple_pin_fs+0xa3/0x190
[ 1640.416490][T28227]  debugfs_start_creating.part.0+0x82/0x170
[ 1640.416525][T28227]  __debugfs_create_file+0xb3/0x4f0
[ 1640.416547][T28227]  debugfs_create_file_full+0x41/0x60
[ 1640.416569][T28227]  kvm_dev_ioctl+0x1491/0x1a50
[ 1640.416599][T28227]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1640.416628][T28227]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1640.416650][T28227]  __x64_sys_ioctl+0x18e/0x210
[ 1640.416679][T28227]  do_syscall_64+0x106/0xf80
[ 1640.416704][T28227]  ? clear_bhb_loop+0x40/0x90
[ 1640.416727][T28227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1640.416746][T28227] RIP: 0033:0x7f64deb9c799
[ 1640.416762][T28227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1640.416780][T28227] RSP: 002b:00007f64df9b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1640.416799][T28227] RAX: ffffffffffffffda RBX: 00007f64dee16090 RCX: 00007f64deb9c799
[ 1640.416811][T28227] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009
[ 1640.416822][T28227] RBP: 00007f64dec32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1640.416834][T28227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1640.416844][T28227] R13: 00007f64dee16128 R14: 00007f64dee16090 R15: 00007ffe310044e8
[ 1640.416867][T28227]  </TASK>
[ 1641.363765][T28235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4783'.
[ 1642.631620][T28242] netlink: 302 bytes leftover after parsing attributes in process `syz.6.4784'.
[ 1642.693411][T28231] Invalid ELF header magic: != ELF
[ 1643.594682][T28083] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1643.690242][T28083] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1643.812983][T28083] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1643.907726][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'.
[ 1643.961585][T28083] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1644.006785][T28264] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4787'.
[ 1645.071574][T28083] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1645.232122][T28083] 8021q: adding VLAN 0 to HW filter on device team0
[ 1645.329703][T27731] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1645.336877][T27731] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1645.500093][T27731] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1645.507254][T27731] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1647.133665][T28083] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1648.303276][T28083] veth0_vlan: entered promiscuous mode
[ 1649.014276][T28318] __vm_enough_memory: pid: 28318, comm: syz.5.4794, bytes: 9223372036854775808 not enough memory for the allocation
[ 1649.056050][T28083] veth1_vlan: entered promiscuous mode
[ 1649.802332][T28083] veth0_macvtap: entered promiscuous mode
[ 1649.886304][T28083] veth1_macvtap: entered promiscuous mode
[ 1650.008025][T28083] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1650.145985][T28083] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1650.466196][T22269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.523333][T22269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.601608][T22269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.655015][T22269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.986385][T27954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1651.038792][T27954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1651.164630][T27744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1651.250123][T27744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1651.783409][T28358] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1652.126947][T28358] FAULT_INJECTION: forcing a failure.
[ 1652.126947][T28358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1652.430296][T28358] CPU: 0 UID: 0 PID: 28358 Comm: syz.0.4757 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1652.430338][T28358] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1652.430349][T28358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1652.430361][T28358] Call Trace:
[ 1652.430368][T28358]  <TASK>
[ 1652.430376][T28358]  dump_stack_lvl+0x100/0x190
[ 1652.430409][T28358]  should_fail_ex.cold+0x5/0xa
[ 1652.430431][T28358]  strncpy_from_user+0x3b/0x2d0
[ 1652.430457][T28358]  do_getname+0x78/0x390
[ 1652.430482][T28358]  do_sys_openat2+0xc5/0x1e0
[ 1652.430507][T28358]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1652.430539][T28358]  __x64_sys_openat+0x12d/0x210
[ 1652.430565][T28358]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1652.430598][T28358]  do_syscall_64+0x106/0xf80
[ 1652.430624][T28358]  ? clear_bhb_loop+0x40/0x90
[ 1652.430647][T28358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1652.430666][T28358] RIP: 0033:0x7f21f759c799
[ 1652.430682][T28358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1652.430700][T28358] RSP: 002b:00007f21f8433028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1652.430722][T28358] RAX: ffffffffffffffda RBX: 00007f21f7815fa0 RCX: 00007f21f759c799
[ 1652.430735][T28358] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1652.430746][T28358] RBP: 00007f21f7632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1652.430757][T28358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1652.430768][T28358] R13: 00007f21f7816038 R14: 00007f21f7815fa0 R15: 00007ffc09c88308
[ 1652.430792][T28358]  </TASK>
[ 1652.637029][T28367] binder: 28366:28367 ioctl 10000 ffffffffffffffff returned -22
[ 1658.018634][T28433] FAULT_INJECTION: forcing a failure.
[ 1658.018634][T28433] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.153795][T28433] CPU: 0 UID: 0 PID: 28433 Comm: syz.6.4809 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1658.153838][T28433] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1658.153850][T28433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1658.153861][T28433] Call Trace:
[ 1658.153868][T28433]  <TASK>
[ 1658.153876][T28433]  dump_stack_lvl+0x100/0x190
[ 1658.153909][T28433]  should_fail_ex.cold+0x5/0xa
[ 1658.153931][T28433]  ? process_preds+0x4c2/0x1d90
[ 1658.153959][T28433]  should_failslab+0xc2/0x120
[ 1658.153979][T28433]  __kmalloc_noprof+0xe0/0x850
[ 1658.154011][T28433]  process_preds+0x4c2/0x1d90
[ 1658.154043][T28433]  ? create_filter_start.constprop.0+0x134/0x310
[ 1658.154074][T28433]  create_filter+0x140/0x210
[ 1658.154102][T28433]  ? __pfx_create_filter+0x10/0x10
[ 1658.154132][T28433]  ? find_held_lock+0x2b/0x80
[ 1658.154158][T28433]  apply_event_filter+0x220/0x500
[ 1658.154187][T28433]  ? __pfx_apply_event_filter+0x10/0x10
[ 1658.154223][T28433]  event_filter_write+0x16d/0x290
[ 1658.154247][T28433]  vfs_write+0x2aa/0x1070
[ 1658.154276][T28433]  ? __pfx_event_filter_write+0x10/0x10
[ 1658.154300][T28433]  ? __pfx_vfs_write+0x10/0x10
[ 1658.154329][T28433]  ? __fget_files+0x215/0x3d0
[ 1658.154361][T28433]  ? __fget_files+0x21f/0x3d0
[ 1658.154385][T28433]  ksys_write+0x12a/0x250
[ 1658.154403][T28433]  ? __pfx_ksys_write+0x10/0x10
[ 1658.154427][T28433]  do_syscall_64+0x106/0xf80
[ 1658.154454][T28433]  ? clear_bhb_loop+0x40/0x90
[ 1658.154477][T28433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.154497][T28433] RIP: 0033:0x7f64deb9c799
[ 1658.154513][T28433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1658.154531][T28433] RSP: 002b:00007f64df9d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1658.154550][T28433] RAX: ffffffffffffffda RBX: 00007f64dee15fa0 RCX: 00007f64deb9c799
[ 1658.154563][T28433] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[ 1658.154575][T28433] RBP: 00007f64dec32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1658.154587][T28433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1658.154598][T28433] R13: 00007f64dee16038 R14: 00007f64dee15fa0 R15: 00007ffe310044e8
[ 1658.154623][T28433]  </TASK>
[ 1663.110884][T22005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1663.123867][T22005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1663.132426][T22005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1663.140815][T22005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1663.150093][T22005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1663.333809][T28476] Invalid ELF header magic: != ELF
[ 1664.431342][T28474] chnl_net:caif_netlink_parms(): no params data found
[ 1664.873678][T28491] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[ 1665.021773][T28474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1665.062403][T28474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1665.095662][T28474] bridge_slave_0: entered allmulticast mode
[ 1665.140489][T28474] bridge_slave_0: entered promiscuous mode
[ 1665.197448][T22005] Bluetooth: hci2: command tx timeout
[ 1665.270724][T28474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1665.326633][T28474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.333870][T28474] bridge_slave_1: entered allmulticast mode
[ 1665.401208][T28474] bridge_slave_1: entered promiscuous mode
[ 1665.680070][T28474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1665.745891][T28474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1665.783650][T28471] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4815'.
[ 1666.001358][T28474] team0: Port device team_slave_0 added
[ 1666.060575][T28474] team0: Port device team_slave_1 added
[ 1666.233564][T28474] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1666.282339][T28474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1666.447924][T28474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1666.529549][T28474] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1666.597745][T28474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1666.725933][T28497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1666.788075][T28499] kernel profiling enabled (shift: 2)
[ 1666.817264][T28474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1667.079624][T28496] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4820'.
[ 1667.277726][T22005] Bluetooth: hci2: command tx timeout
[ 1667.332501][T28474] hsr_slave_0: entered promiscuous mode
[ 1667.411069][T28474] hsr_slave_1: entered promiscuous mode
[ 1667.454917][T28474] debugfs: 'hsr0' already exists in 'hsr'
[ 1667.505894][T28474] Cannot create hsr debugfs directory
[ 1668.126678][T28513] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[ 1668.956231][T28515] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[ 1669.283692][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.301134][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.359483][T22005] Bluetooth: hci2: command tx timeout
[ 1669.934073][T28474] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1670.140472][T28474] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1670.235176][T28474] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1670.663568][T28474] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1671.439642][T22005] Bluetooth: hci2: command tx timeout
[ 1671.517158][T28474] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1671.728760][T28474] 8021q: adding VLAN 0 to HW filter on device team0
[ 1672.158021][T27749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1672.165190][T27749] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1673.320827][T27749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.327962][T27749] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1673.379347][T28564] netlink: 'syz.0.4831': attribute type 3 has an invalid length.
[ 1674.367439][T28579] Invalid ELF header magic: != ELF
[ 1674.966443][T28591] FAULT_INJECTION: forcing a failure.
[ 1674.966443][T28591] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1675.086046][T28474] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1675.124014][T28591] CPU: 0 UID: 0 PID: 28591 Comm: syz.0.4834 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1675.124057][T28591] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1675.124068][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1675.124079][T28591] Call Trace:
[ 1675.124086][T28591]  <TASK>
[ 1675.124093][T28591]  dump_stack_lvl+0x100/0x190
[ 1675.124126][T28591]  should_fail_ex.cold+0x5/0xa
[ 1675.124152][T28591]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1675.124176][T28591]  should_fail_alloc_page+0xeb/0x140
[ 1675.124198][T28591]  prepare_alloc_pages+0x1f0/0x5f0
[ 1675.124223][T28591]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[ 1675.124257][T28591]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1675.124288][T28591]  ? find_held_lock+0x2b/0x80
[ 1675.124306][T28591]  ? mm_drop_all_locks+0x390/0x4b0
[ 1675.124336][T28591]  ? mm_drop_all_locks+0x390/0x4b0
[ 1675.124367][T28591]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1675.124395][T28591]  ? mas_next_slot+0x1003/0x18b0
[ 1675.124425][T28591]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1675.124463][T28591]  ? mm_drop_all_locks+0x390/0x4b0
[ 1675.124490][T28591]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1675.124522][T28591]  ? policy_nodemask+0xed/0x4f0
[ 1675.124543][T28591]  alloc_pages_mpol+0x1fb/0x550
[ 1675.124563][T28591]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1675.124589][T28591]  alloc_pages_noprof+0x131/0x390
[ 1675.124610][T28591]  kvm_coalesced_mmio_init+0x1a/0x170
[ 1675.124637][T28591]  kvm_dev_ioctl+0xe00/0x1a50
[ 1675.124661][T28591]  ? find_held_lock+0x2b/0x80
[ 1675.124679][T28591]  ? __fget_files+0x215/0x3d0
[ 1675.124695][T28591]  ? hook_file_ioctl_common+0x146/0x410
[ 1675.124718][T28591]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1675.124741][T28591]  ? __fget_files+0x21f/0x3d0
[ 1675.124760][T28591]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1675.124782][T28591]  __x64_sys_ioctl+0x18e/0x210
[ 1675.124809][T28591]  do_syscall_64+0x106/0xf80
[ 1675.124834][T28591]  ? clear_bhb_loop+0x40/0x90
[ 1675.124856][T28591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1675.124876][T28591] RIP: 0033:0x7f21f759c799
[ 1675.124891][T28591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1675.124909][T28591] RSP: 002b:00007f21f8412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1675.124928][T28591] RAX: ffffffffffffffda RBX: 00007f21f7816090 RCX: 00007f21f759c799
[ 1675.124940][T28591] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1675.124950][T28591] RBP: 00007f21f7632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1675.124961][T28591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1675.124971][T28591] R13: 00007f21f7816128 R14: 00007f21f7816090 R15: 00007ffc09c88308
[ 1675.124994][T28591]  </TASK>
[ 1677.286785][T28474] veth0_vlan: entered promiscuous mode
[ 1677.405560][T28474] veth1_vlan: entered promiscuous mode
[ 1677.482828][T28613] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1677.875211][T28474] veth0_macvtap: entered promiscuous mode
[ 1678.097778][T28474] veth1_macvtap: entered promiscuous mode
[ 1678.229147][T28625] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1678.579256][T28474] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1678.788217][T28474] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1678.881467][T22269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1678.934319][T22269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.009360][T22269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.242029][T22269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1679.767221][T28647] FAULT_INJECTION: forcing a failure.
[ 1679.767221][T28647] name failslab, interval 1, probability 0, space 0, times 0
[ 1679.840736][T27744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1679.901479][T28647] CPU: 0 UID: 0 PID: 28647 Comm: syz.6.4841 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1679.901520][T28647] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1679.901530][T28647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1679.901542][T28647] Call Trace:
[ 1679.901549][T28647]  <TASK>
[ 1679.901557][T28647]  dump_stack_lvl+0x100/0x190
[ 1679.901601][T28647]  should_fail_ex.cold+0x5/0xa
[ 1679.901623][T28647]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1679.901646][T28647]  should_failslab+0xc2/0x120
[ 1679.901665][T28647]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1679.901693][T28647]  ? alloc_inode+0x183/0x250
[ 1679.901720][T28647]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1679.901740][T28647]  alloc_inode+0x183/0x250
[ 1679.901765][T28647]  new_inode+0x22/0x1c0
[ 1679.901790][T28647]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1679.901810][T28647]  nfsd_fill_super+0x145/0x560
[ 1679.901831][T28647]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1679.901851][T28647]  get_tree_keyed+0x10e/0x1d0
[ 1679.901879][T28647]  vfs_get_tree+0x92/0x320
[ 1679.901905][T28647]  path_mount+0x7d0/0x23d0
[ 1679.901930][T28647]  ? __pfx_path_mount+0x10/0x10
[ 1679.901949][T28647]  ? lockdep_hardirqs_on+0x78/0x100
[ 1679.901977][T28647]  ? putname+0xb1/0x110
[ 1679.901995][T28647]  ? kmem_cache_free+0x124/0x6a0
[ 1679.902027][T28647]  ? __x64_sys_mount+0x293/0x310
[ 1679.902047][T28647]  __x64_sys_mount+0x293/0x310
[ 1679.902069][T28647]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1679.902097][T28647]  do_syscall_64+0x106/0xf80
[ 1679.902122][T28647]  ? clear_bhb_loop+0x40/0x90
[ 1679.902143][T28647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1679.902162][T28647] RIP: 0033:0x7f64deb9c799
[ 1679.902178][T28647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1679.902196][T28647] RSP: 002b:00007f64df9b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1679.902215][T28647] RAX: ffffffffffffffda RBX: 00007f64dee16090 RCX: 00007f64deb9c799
[ 1679.902227][T28647] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1679.902238][T28647] RBP: 00007f64dec32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1679.902250][T28647] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[ 1679.902261][T28647] R13: 00007f64dee16128 R14: 00007f64dee16090 R15: 00007ffe310044e8
[ 1679.902283][T28647]  </TASK>
[ 1680.144468][T27744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1681.128862][T27748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1681.154063][T27748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.148674][T28683] FAULT_INJECTION: forcing a failure.
[ 1682.148674][T28683] name failslab, interval 1, probability 0, space 0, times 0
[ 1682.260622][T28683] CPU: 0 UID: 0 PID: 28683 Comm: syz.5.4844 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1682.260666][T28683] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1682.260677][T28683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1682.260688][T28683] Call Trace:
[ 1682.260696][T28683]  <TASK>
[ 1682.260703][T28683]  dump_stack_lvl+0x100/0x190
[ 1682.260736][T28683]  should_fail_ex.cold+0x5/0xa
[ 1682.260758][T28683]  should_failslab+0xc2/0x120
[ 1682.260778][T28683]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1682.260807][T28683]  ? alloc_inode+0x68/0x250
[ 1682.260831][T28683]  ? simple_start_creating+0xb0/0x110
[ 1682.260861][T28683]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1682.260893][T28683]  alloc_inode+0x68/0x250
[ 1682.260918][T28683]  new_inode+0x22/0x1c0
[ 1682.260952][T28683]  debugfs_create_dir+0xc4/0x440
[ 1682.260973][T28683]  kvm_dev_ioctl+0x11b6/0x1a50
[ 1682.260999][T28683]  ? find_held_lock+0x2b/0x80
[ 1682.261017][T28683]  ? __fget_files+0x215/0x3d0
[ 1682.261032][T28683]  ? hook_file_ioctl_common+0x146/0x410
[ 1682.261054][T28683]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1682.261083][T28683]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1682.261106][T28683]  __x64_sys_ioctl+0x18e/0x210
[ 1682.261134][T28683]  do_syscall_64+0x106/0xf80
[ 1682.261159][T28683]  ? clear_bhb_loop+0x40/0x90
[ 1682.261181][T28683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.261200][T28683] RIP: 0033:0x7fabfbd9c799
[ 1682.261217][T28683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1682.261237][T28683] RSP: 002b:00007fabfcb6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1682.261255][T28683] RAX: ffffffffffffffda RBX: 00007fabfc016090 RCX: 00007fabfbd9c799
[ 1682.261267][T28683] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1682.261278][T28683] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1682.261288][T28683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1682.261299][T28683] R13: 00007fabfc016128 R14: 00007fabfc016090 R15: 00007fff0cd43878
[ 1682.261322][T28683]  </TASK>
[ 1682.261330][T28683] debugfs: out of free dentries, can not create directory '28683-9'
[ 1683.035561][T28696] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1690.553528][   T30] audit: type=1804 audit(4294969962.583:48): pid=28799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4859" name="/newroot/254/file0" dev="tmpfs" ino=1357 res=1 errno=0
[ 1690.718756][   T30] audit: type=1804 audit(4294969962.653:49): pid=28800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4859" name="/newroot/254/file0" dev="tmpfs" ino=1357 res=1 errno=0
[ 1692.873722][T28820] Invalid ELF header magic: != ELF
[ 1693.377707][T28820] Invalid ELF header magic: != ELF
[ 1694.166680][T28836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4866'.
[ 1695.995238][T28854] FAULT_INJECTION: forcing a failure.
[ 1695.995238][T28854] name failslab, interval 1, probability 0, space 0, times 0
[ 1696.188114][T28854] CPU: 0 UID: 0 PID: 28854 Comm: syz.0.4869 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1696.188157][T28854] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1696.188167][T28854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1696.188178][T28854] Call Trace:
[ 1696.188185][T28854]  <TASK>
[ 1696.188193][T28854]  dump_stack_lvl+0x100/0x190
[ 1696.188229][T28854]  should_fail_ex.cold+0x5/0xa
[ 1696.188252][T28854]  should_failslab+0xc2/0x120
[ 1696.188276][T28854]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1696.188306][T28854]  ? alloc_inode+0x68/0x250
[ 1696.188332][T28854]  ? simple_start_creating+0xb0/0x110
[ 1696.188363][T28854]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1696.188398][T28854]  alloc_inode+0x68/0x250
[ 1696.188427][T28854]  new_inode+0x22/0x1c0
[ 1696.188461][T28854]  __debugfs_create_file+0x105/0x4f0
[ 1696.188484][T28854]  debugfs_create_file_full+0x41/0x60
[ 1696.188505][T28854]  kvm_dev_ioctl+0x1491/0x1a50
[ 1696.188534][T28854]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1696.188562][T28854]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1696.188583][T28854]  __x64_sys_ioctl+0x18e/0x210
[ 1696.188612][T28854]  do_syscall_64+0x106/0xf80
[ 1696.188639][T28854]  ? clear_bhb_loop+0x40/0x90
[ 1696.188662][T28854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.188681][T28854] RIP: 0033:0x7f21f759c799
[ 1696.188698][T28854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1696.188720][T28854] RSP: 002b:00007f21f83f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1696.188738][T28854] RAX: ffffffffffffffda RBX: 00007f21f7816180 RCX: 00007f21f759c799
[ 1696.188750][T28854] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009
[ 1696.188761][T28854] RBP: 00007f21f7632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1696.188771][T28854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1696.188782][T28854] R13: 00007f21f7816218 R14: 00007f21f7816180 R15: 00007ffc09c88308
[ 1696.188806][T28854]  </TASK>
[ 1696.640290][T28854] debugfs: out of free dentries, can not create file 'mmu_pde_zapped'
[ 1697.471761][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4873'.
[ 1697.543397][T28873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1697.554940][T28873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1697.563287][T28873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1697.579815][T28873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1697.587330][T28873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1697.635154][T28869] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[ 1698.926032][T28870] chnl_net:caif_netlink_parms(): no params data found
[ 1699.496860][T28870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.533743][T28870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1699.580010][T28870] bridge_slave_0: entered allmulticast mode
[ 1699.615610][T28870] bridge_slave_0: entered promiscuous mode
[ 1699.694076][T28873] Bluetooth: hci6: command tx timeout
[ 1699.745630][T28870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.818060][T28870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1699.845468][T28870] bridge_slave_1: entered allmulticast mode
[ 1699.892762][T28870] bridge_slave_1: entered promiscuous mode
[ 1700.105762][T28870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1700.200814][T28870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1700.417807][T28870] team0: Port device team_slave_0 added
[ 1700.486358][T28870] team0: Port device team_slave_1 added
[ 1700.803958][T28870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1700.824993][T28913] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1700.854445][T28913] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1700.874275][T28870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1700.908971][T28913] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1700.955200][T28913] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1700.995128][T28913] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1701.025548][T28913] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1701.055887][T28870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1701.149560][T28913] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1701.187045][T28913] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1701.226397][T28913] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1701.249759][T28913] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1701.279610][T28870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1701.279628][T28870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1701.279652][T28870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1701.297803][T28913] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1701.297895][T28913] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1701.360685][T28913] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1701.471498][T28870] hsr_slave_0: entered promiscuous mode
[ 1701.472280][T28870] hsr_slave_1: entered promiscuous mode
[ 1701.472747][T28870] debugfs: 'hsr0' already exists in 'hsr'
[ 1701.472766][T28870] Cannot create hsr debugfs directory
[ 1702.779382][T28870] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1702.898212][T22005] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1702.904291][T22005] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1702.979898][T22005] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1702.986072][T28873] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1703.025092][T28870] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1703.057659][T22005] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1703.167795][T28870] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1703.220562][T22005] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1703.273613][T28870] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1703.377174][T22005] Bluetooth: hci6: command 0x040f tx timeout
[ 1703.985436][T28947] FAULT_INJECTION: forcing a failure.
[ 1703.985436][T28947] name failslab, interval 1, probability 0, space 0, times 0
[ 1704.163277][T28947] CPU: 0 UID: 0 PID: 28947 Comm: syz.0.4888 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1704.163318][T28947] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1704.163328][T28947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1704.163338][T28947] Call Trace:
[ 1704.163346][T28947]  <TASK>
[ 1704.163354][T28947]  dump_stack_lvl+0x100/0x190
[ 1704.163386][T28947]  should_fail_ex.cold+0x5/0xa
[ 1704.163408][T28947]  should_failslab+0xc2/0x120
[ 1704.163428][T28947]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1704.163453][T28947]  ? kvm_dev_ioctl+0xa8d/0x1a50
[ 1704.163478][T28947]  kvm_dev_ioctl+0xa8d/0x1a50
[ 1704.163502][T28947]  ? find_held_lock+0x2b/0x80
[ 1704.163520][T28947]  ? __fget_files+0x215/0x3d0
[ 1704.163537][T28947]  ? hook_file_ioctl_common+0x146/0x410
[ 1704.163562][T28947]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1704.163586][T28947]  ? __fget_files+0x21f/0x3d0
[ 1704.163607][T28947]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1704.163630][T28947]  __x64_sys_ioctl+0x18e/0x210
[ 1704.163659][T28947]  do_syscall_64+0x106/0xf80
[ 1704.163686][T28947]  ? clear_bhb_loop+0x40/0x90
[ 1704.163718][T28947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1704.163738][T28947] RIP: 0033:0x7f21f759c799
[ 1704.163756][T28947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1704.163775][T28947] RSP: 002b:00007f21f8412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1704.163796][T28947] RAX: ffffffffffffffda RBX: 00007f21f7816090 RCX: 00007f21f759c799
[ 1704.163809][T28947] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1704.163821][T28947] RBP: 00007f21f7632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1704.163834][T28947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1704.163846][T28947] R13: 00007f21f7816128 R14: 00007f21f7816090 R15: 00007ffc09c88308
[ 1704.163869][T28947]  </TASK>
[ 1705.140120][T22005] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1705.243585][T28870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1705.299321][T22005] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1705.312610][T28950] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1705.458932][T22005] Bluetooth: hci6: command 0x040f tx timeout
[ 1705.484645][T28870] 8021q: adding VLAN 0 to HW filter on device team0
[ 1705.512738][T28970] FAULT_INJECTION: forcing a failure.
[ 1705.512738][T28970] name failslab, interval 1, probability 0, space 0, times 0
[ 1705.555846][T27747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1705.563023][T27747] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1705.635726][T27747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1705.642873][T27747] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1705.890376][T28970] CPU: 0 UID: 0 PID: 28970 Comm: syz.0.4892 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1705.890419][T28970] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1705.890430][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1705.890441][T28970] Call Trace:
[ 1705.890448][T28970]  <TASK>
[ 1705.890456][T28970]  dump_stack_lvl+0x100/0x190
[ 1705.890489][T28970]  should_fail_ex.cold+0x5/0xa
[ 1705.890511][T28970]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1705.890537][T28970]  should_failslab+0xc2/0x120
[ 1705.890558][T28970]  __kmalloc_noprof+0xe0/0x850
[ 1705.890590][T28970]  tomoyo_realpath_from_path+0xb6/0x690
[ 1705.890620][T28970]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1705.890650][T28970]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1705.890692][T28970]  ? do_raw_spin_lock+0x128/0x260
[ 1705.890721][T28970]  ? path_get+0x61/0x80
[ 1705.890744][T28970]  tomoyo_file_open+0x6b/0x90
[ 1705.890773][T28970]  security_file_open+0xb5/0x1e0
[ 1705.890797][T28970]  do_dentry_open+0x5aa/0x1660
[ 1705.890817][T28970]  ? security_inode_permission+0xbf/0x250
[ 1705.890842][T28970]  vfs_open+0x82/0x3f0
[ 1705.890867][T28970]  path_openat+0x208c/0x31a0
[ 1705.890893][T28970]  ? __pfx_path_openat+0x10/0x10
[ 1705.890920][T28970]  do_file_open+0x20e/0x430
[ 1705.890940][T28970]  ? __pfx_do_file_open+0x10/0x10
[ 1705.890974][T28970]  ? alloc_fd+0x476/0x790
[ 1705.890994][T28970]  ? do_getname+0x191/0x390
[ 1705.891020][T28970]  do_sys_openat2+0x10d/0x1e0
[ 1705.891044][T28970]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1705.891069][T28970]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 1705.891102][T28970]  __x64_sys_openat+0x12d/0x210
[ 1705.891128][T28970]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1705.891163][T28970]  do_syscall_64+0x106/0xf80
[ 1705.891189][T28970]  ? clear_bhb_loop+0x40/0x90
[ 1705.891212][T28970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1705.891237][T28970] RIP: 0033:0x7f21f759c799
[ 1705.891254][T28970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1705.891273][T28970] RSP: 002b:00007f21f83f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1705.891292][T28970] RAX: ffffffffffffffda RBX: 00007f21f7816180 RCX: 00007f21f759c799
[ 1705.891305][T28970] RDX: 00000000000e0180 RSI: 00002000000011c0 RDI: ffffffffffffff9c
[ 1705.891317][T28970] RBP: 00007f21f7632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1705.891328][T28970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1705.891339][T28970] R13: 00007f21f7816218 R14: 00007f21f7816180 R15: 00007ffc09c88308
[ 1705.891363][T28970]  </TASK>
[ 1705.891371][T28970] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1707.221500][T22005] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1707.385800][T22005] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1707.539121][T22005] Bluetooth: hci6: command 0x040f tx timeout
[ 1708.072629][T28979] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1708.513072][T28870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1708.543938][T28984] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1709.622075][ T5872] usb usb40-port2: attempt power cycle
[ 1709.627714][T22005] Bluetooth: hci6: command 0x040f tx timeout
[ 1710.085198][T28870] veth0_vlan: entered promiscuous mode
[ 1710.153728][T28870] veth1_vlan: entered promiscuous mode
[ 1710.296061][T28870] veth0_macvtap: entered promiscuous mode
[ 1710.305450][ T5872] usb usb40-port2: unable to enumerate USB device
[ 1710.401498][T28870] veth1_macvtap: entered promiscuous mode
[ 1710.522618][T28870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1710.604650][T28870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1710.705448][T22269] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.778433][T22269] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.825637][T22269] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.926056][T22269] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.319517][T27744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1711.383188][T27744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1711.591996][T29021] QAT: Stopping all acceleration devices.
[ 1711.639812][T27747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1711.674564][T27747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1711.700007][T22005] Bluetooth: hci6: command 0x040f tx timeout
[ 1712.627177][T29033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4901'.
[ 1712.988480][T29037] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1713.156690][T29038] FAULT_INJECTION: forcing a failure.
[ 1713.156690][T29038] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1713.237306][T29038] CPU: 0 UID: 0 PID: 29038 Comm: syz.8.4871 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1713.237349][T29038] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1713.237360][T29038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1713.237371][T29038] Call Trace:
[ 1713.237378][T29038]  <TASK>
[ 1713.237386][T29038]  dump_stack_lvl+0x100/0x190
[ 1713.237418][T29038]  should_fail_ex.cold+0x5/0xa
[ 1713.237440][T29038]  get_futex_key+0x1d2/0x1620
[ 1713.237467][T29038]  ? __pfx_get_futex_key+0x10/0x10
[ 1713.237496][T29038]  futex_wait_setup+0x83/0x510
[ 1713.237530][T29038]  __futex_wait+0x19f/0x300
[ 1713.237571][T29038]  ? __pfx___futex_wait+0x10/0x10
[ 1713.237603][T29038]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1713.237634][T29038]  ? futex_hash+0x2c5/0x380
[ 1713.237662][T29038]  futex_wait+0xed/0x380
[ 1713.237690][T29038]  ? __pfx_futex_wait+0x10/0x10
[ 1713.237723][T29038]  ? putname+0xb1/0x110
[ 1713.237742][T29038]  ? kmem_cache_free+0x124/0x6a0
[ 1713.237772][T29038]  do_futex+0x1ef/0x350
[ 1713.237796][T29038]  ? __pfx_do_futex+0x10/0x10
[ 1713.237818][T29038]  ? __fget_files+0x215/0x3d0
[ 1713.237840][T29038]  __x64_sys_futex+0x34f/0x4d0
[ 1713.237867][T29038]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1713.237892][T29038]  ? __sys_setsockopt+0x139/0x190
[ 1713.237927][T29038]  do_syscall_64+0x106/0xf80
[ 1713.237954][T29038]  ? clear_bhb_loop+0x40/0x90
[ 1713.237978][T29038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1713.237998][T29038] RIP: 0033:0x7f08a559c799
[ 1713.238015][T29038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1713.238035][T29038] RSP: 002b:00007f08a64a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1713.238055][T29038] RAX: ffffffffffffffda RBX: 00007f08a5816098 RCX: 00007f08a559c799
[ 1713.238067][T29038] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08a5816098
[ 1713.238079][T29038] RBP: 00007f08a5816090 R08: 0000000000000000 R09: 0000000000000000
[ 1713.238091][T29038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1713.238103][T29038] R13: 00007f08a5816128 R14: 00007ffff73a8d60 R15: 00007ffff73a8e48
[ 1713.238126][T29038]  </TASK>
[ 1713.944526][T29043] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4903'.
[ 1714.920442][T29048] wlan1: mtu less than device minimum
[ 1718.551870][T29097] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4913'.
[ 1718.650162][T29095] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4913'.
[ 1719.833684][T29115] ubi3: attaching mtd1
[ 1719.879459][T29121] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1728.029745][T28873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1728.044734][T28873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1728.052798][T28873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1728.074377][T28873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1728.082010][T28873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1729.957630][T29225] chnl_net:caif_netlink_parms(): no params data found
[ 1730.182206][T28873] Bluetooth: hci7: command tx timeout
[ 1730.636235][T29225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1730.692400][T29225] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1730.758519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.766488][T29225] bridge_slave_0: entered allmulticast mode
[ 1730.774862][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.821803][T29225] bridge_slave_0: entered promiscuous mode
[ 1730.957749][T29225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1731.015992][T29225] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1731.094183][T29225] bridge_slave_1: entered allmulticast mode
[ 1731.140259][T29225] bridge_slave_1: entered promiscuous mode
[ 1731.407718][T29225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1731.501507][T29225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1731.817471][T29225] team0: Port device team_slave_0 added
[ 1731.870343][T29225] team0: Port device team_slave_1 added
[ 1732.027162][T29225] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1732.092419][T29225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1732.262648][T28873] Bluetooth: hci7: command tx timeout
[ 1732.310342][T29225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1732.415134][T29225] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1732.466347][T29225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1732.702264][T29282] random: crng reseeded on system resumption
[ 1732.722410][T29225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1733.162417][T29225] hsr_slave_0: entered promiscuous mode
[ 1733.197999][T29225] hsr_slave_1: entered promiscuous mode
[ 1733.238799][T29225] debugfs: 'hsr0' already exists in 'hsr'
[ 1733.275317][T29225] Cannot create hsr debugfs directory
[ 1734.341923][T28873] Bluetooth: hci7: command tx timeout
[ 1735.312481][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4957'.
[ 1735.669516][T29225] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1735.950815][T29314] zswap: compressor  not available
[ 1736.150730][T29225] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1736.222542][T29225] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1736.368063][T29225] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1736.423454][T28873] Bluetooth: hci7: command tx timeout
[ 1737.255215][T29225] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1737.331004][T29225] 8021q: adding VLAN 0 to HW filter on device team0
[ 1737.475931][T27748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1737.483112][T27748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1737.558898][T27748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1737.566076][T27748] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1737.588060][T29341] FAULT_INJECTION: forcing a failure.
[ 1737.588060][T29341] name failslab, interval 1, probability 0, space 0, times 0
[ 1737.663781][T29341] CPU: 0 UID: 0 PID: 29341 Comm: syz.7.4961 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1737.663824][T29341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1737.663834][T29341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1737.663846][T29341] Call Trace:
[ 1737.663852][T29341]  <TASK>
[ 1737.663861][T29341]  dump_stack_lvl+0x100/0x190
[ 1737.663895][T29341]  should_fail_ex.cold+0x5/0xa
[ 1737.663924][T29341]  ? lsm_blob_alloc+0x68/0x90
[ 1737.663950][T29341]  should_failslab+0xc2/0x120
[ 1737.663970][T29341]  __kmalloc_noprof+0xe0/0x850
[ 1737.663997][T29341]  ? trace_kmalloc+0x101/0x130
[ 1737.664019][T29341]  lsm_blob_alloc+0x68/0x90
[ 1737.664044][T29341]  security_sk_alloc+0x2d/0x290
[ 1737.664075][T29341]  sk_prot_alloc+0x12a/0x2a0
[ 1737.664095][T29341]  sk_alloc+0x36/0xe80
[ 1737.664120][T29341]  __netlink_create+0x5e/0x2c0
[ 1737.664143][T29341]  ? __wake_up+0x3f/0x60
[ 1737.664165][T29341]  netlink_create+0x293/0x610
[ 1737.664190][T29341]  ? __pfx_rtnetlink_bind+0x10/0x10
[ 1737.664216][T29341]  __sock_create+0x339/0x860
[ 1737.664239][T29341]  __sys_socket+0x14d/0x260
[ 1737.664261][T29341]  ? __pfx___sys_socket+0x10/0x10
[ 1737.664287][T29341]  __x64_sys_socket+0x72/0xb0
[ 1737.664307][T29341]  ? lockdep_hardirqs_on+0x78/0x100
[ 1737.664333][T29341]  do_syscall_64+0x106/0xf80
[ 1737.664357][T29341]  ? clear_bhb_loop+0x40/0x90
[ 1737.664380][T29341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1737.664399][T29341] RIP: 0033:0x7f8c2d59c799
[ 1737.664416][T29341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1737.664434][T29341] RSP: 002b:00007f8c2e4c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1737.664453][T29341] RAX: ffffffffffffffda RBX: 00007f8c2d815fa0 RCX: 00007f8c2d59c799
[ 1737.664465][T29341] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010
[ 1737.664476][T29341] RBP: 00007f8c2d632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1737.664487][T29341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1737.664497][T29341] R13: 00007f8c2d816038 R14: 00007f8c2d815fa0 R15: 00007ffe6544e8c8
[ 1737.664519][T29341]  </TASK>
[ 1739.311481][T29350] FAULT_INJECTION: forcing a failure.
[ 1739.311481][T29350] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1739.453852][T29350] CPU: 0 UID: 0 PID: 29350 Comm: syz.7.4963 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1739.453894][T29350] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1739.453905][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1739.453917][T29350] Call Trace:
[ 1739.453924][T29350]  <TASK>
[ 1739.453932][T29350]  dump_stack_lvl+0x100/0x190
[ 1739.453964][T29350]  should_fail_ex.cold+0x5/0xa
[ 1739.453983][T29350]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1739.454006][T29350]  should_fail_alloc_page+0xeb/0x140
[ 1739.454029][T29350]  prepare_alloc_pages+0x1f0/0x5f0
[ 1739.454054][T29350]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[ 1739.454086][T29350]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1739.454116][T29350]  ? find_held_lock+0x2b/0x80
[ 1739.454133][T29350]  ? mm_drop_all_locks+0x390/0x4b0
[ 1739.454159][T29350]  ? mm_drop_all_locks+0x390/0x4b0
[ 1739.454190][T29350]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1739.454244][T29350]  ? mas_next_slot+0x1003/0x18b0
[ 1739.454274][T29350]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1739.454313][T29350]  ? mm_drop_all_locks+0x390/0x4b0
[ 1739.454341][T29350]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1739.454373][T29350]  ? policy_nodemask+0xed/0x4f0
[ 1739.454394][T29350]  alloc_pages_mpol+0x1fb/0x550
[ 1739.454415][T29350]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1739.454441][T29350]  alloc_pages_noprof+0x131/0x390
[ 1739.454462][T29350]  kvm_coalesced_mmio_init+0x1a/0x170
[ 1739.454490][T29350]  kvm_dev_ioctl+0xe00/0x1a50
[ 1739.454514][T29350]  ? find_held_lock+0x2b/0x80
[ 1739.454532][T29350]  ? __fget_files+0x215/0x3d0
[ 1739.454548][T29350]  ? hook_file_ioctl_common+0x146/0x410
[ 1739.454569][T29350]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1739.454592][T29350]  ? __fget_files+0x21f/0x3d0
[ 1739.454612][T29350]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1739.454634][T29350]  __x64_sys_ioctl+0x18e/0x210
[ 1739.454662][T29350]  do_syscall_64+0x106/0xf80
[ 1739.454687][T29350]  ? clear_bhb_loop+0x40/0x90
[ 1739.454710][T29350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1739.454729][T29350] RIP: 0033:0x7f8c2d59c799
[ 1739.454745][T29350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1739.454762][T29350] RSP: 002b:00007f8c2e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1739.454781][T29350] RAX: ffffffffffffffda RBX: 00007f8c2d816090 RCX: 00007f8c2d59c799
[ 1739.454793][T29350] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1739.454804][T29350] RBP: 00007f8c2d632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1739.454815][T29350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1739.454826][T29350] R13: 00007f8c2d816128 R14: 00007f8c2d816090 R15: 00007ffe6544e8c8
[ 1739.454849][T29350]  </TASK>
[ 1740.543333][T29371] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4966'.
[ 1740.728525][T29225] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1740.857954][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4967'.
[ 1742.219119][T29225] veth0_vlan: entered promiscuous mode
[ 1742.233832][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4971'.
[ 1742.303742][T29395] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4971'.
[ 1742.314843][T29225] veth1_vlan: entered promiscuous mode
[ 1742.449630][T29225] veth0_macvtap: entered promiscuous mode
[ 1742.574377][T29225] veth1_macvtap: entered promiscuous mode
[ 1742.688190][T29225] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1742.741061][T29400] FAULT_INJECTION: forcing a failure.
[ 1742.741061][T29400] name failslab, interval 1, probability 0, space 0, times 0
[ 1742.778505][T29225] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1742.843085][T29400] CPU: 0 UID: 0 PID: 29400 Comm: syz.7.4972 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1742.843127][T29400] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1742.843138][T29400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1742.843150][T29400] Call Trace:
[ 1742.843158][T29400]  <TASK>
[ 1742.843165][T29400]  dump_stack_lvl+0x100/0x190
[ 1742.843198][T29400]  should_fail_ex.cold+0x5/0xa
[ 1742.843221][T29400]  should_failslab+0xc2/0x120
[ 1742.843241][T29400]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1742.843269][T29400]  ? __d_alloc+0x34/0xa80
[ 1742.843288][T29400]  ? rcu_read_unlock+0x17/0x60
[ 1742.843308][T29400]  ? page_counter_charge+0x1d2/0x240
[ 1742.843333][T29400]  __d_alloc+0x34/0xa80
[ 1742.843351][T29400]  ? trace_mm_page_alloc+0x17a/0x1d0
[ 1742.843382][T29400]  d_alloc_parallel+0x111/0x14e0
[ 1742.843415][T29400]  ? __lock_acquire+0x4a5/0x2630
[ 1742.843442][T29400]  ? __pfx_d_alloc_parallel+0x10/0x10
[ 1742.843471][T29400]  ? lockdep_init_map_type+0x5c/0x250
[ 1742.843497][T29400]  ? lockdep_init_map_type+0x5c/0x250
[ 1742.843526][T29400]  __lookup_slow+0x193/0x460
[ 1742.843552][T29400]  ? __pfx___lookup_slow+0x10/0x10
[ 1742.843579][T29400]  ? irq_entries_start+0xd0/0xcb0
[ 1742.843603][T29400]  ? irq_entries_start+0xd0/0xcb0
[ 1742.843628][T29400]  lookup_slow+0x50/0x70
[ 1742.843651][T29400]  lookup_noperm_positive_unlocked+0xd5/0x110
[ 1742.843673][T29400]  debugfs_lookup+0xc7/0x150
[ 1742.843703][T29400]  kvm_dev_ioctl+0xf1b/0x1a50
[ 1742.843729][T29400]  ? find_held_lock+0x2b/0x80
[ 1742.843745][T29400]  ? __fget_files+0x215/0x3d0
[ 1742.843761][T29400]  ? hook_file_ioctl_common+0x146/0x410
[ 1742.843783][T29400]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1742.843811][T29400]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1742.843834][T29400]  __x64_sys_ioctl+0x18e/0x210
[ 1742.843862][T29400]  do_syscall_64+0x106/0xf80
[ 1742.843888][T29400]  ? clear_bhb_loop+0x40/0x90
[ 1742.843911][T29400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1742.843930][T29400] RIP: 0033:0x7f8c2d59c799
[ 1742.843947][T29400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1742.843966][T29400] RSP: 002b:00007f8c2e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1742.843985][T29400] RAX: ffffffffffffffda RBX: 00007f8c2d816090 RCX: 00007f8c2d59c799
[ 1742.843997][T29400] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1742.844008][T29400] RBP: 00007f8c2d632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1742.844019][T29400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1742.844029][T29400] R13: 00007f8c2d816128 R14: 00007f8c2d816090 R15: 00007ffe6544e8c8
[ 1742.844053][T29400]  </TASK>
[ 1744.283740][T22269] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.292668][T22269] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.301541][T22269] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.433347][T22269] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1744.492737][T29414] [U] ^\
[ 1744.804375][T27750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1744.873172][T27750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1745.075267][T29420] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1745.104670][T27748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1745.135538][T27748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1745.778565][T29434] hub 1-0:1.0: USB hub found
[ 1745.842650][T29434] hub 1-0:1.0: 1 port detected
[ 1747.644697][T29460] random: crng reseeded on system resumption
[ 1748.083754][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4989'.
[ 1748.152648][T29475] netlink: 25 bytes leftover after parsing attributes in process `syz.9.4989'.
[ 1748.215025][T29475] FAULT_INJECTION: forcing a failure.
[ 1748.215025][T29475] name failslab, interval 1, probability 0, space 0, times 0
[ 1748.306631][T29475] CPU: 0 UID: 0 PID: 29475 Comm: syz.9.4989 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1748.306670][T29475] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1748.306681][T29475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1748.306691][T29475] Call Trace:
[ 1748.306698][T29475]  <TASK>
[ 1748.306705][T29475]  dump_stack_lvl+0x100/0x190
[ 1748.306738][T29475]  should_fail_ex.cold+0x5/0xa
[ 1748.306759][T29475]  should_failslab+0xc2/0x120
[ 1748.306779][T29475]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1748.306808][T29475]  ? __alloc_skb+0x140/0x710
[ 1748.306836][T29475]  __alloc_skb+0x140/0x710
[ 1748.306858][T29475]  ? __alloc_skb+0x5b7/0x710
[ 1748.306881][T29475]  ? __pfx___alloc_skb+0x10/0x10
[ 1748.306910][T29475]  netlink_ack+0x117/0xb80
[ 1748.306944][T29475]  netlink_rcv_skb+0x333/0x420
[ 1748.306972][T29475]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1748.306996][T29475]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1748.307033][T29475]  ? ns_capable+0xd2/0xf0
[ 1748.307053][T29475]  nfnetlink_rcv+0x1b3/0x440
[ 1748.307074][T29475]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1748.307094][T29475]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1748.307124][T29475]  netlink_unicast+0x5aa/0x870
[ 1748.307155][T29475]  ? __pfx_netlink_unicast+0x10/0x10
[ 1748.307181][T29475]  ? __asan_memset+0x23/0x50
[ 1748.307206][T29475]  ? __build_skb_around+0x278/0x390
[ 1748.307228][T29475]  ? is_vmalloc_addr+0x86/0xa0
[ 1748.307255][T29475]  netlink_sendmsg+0x8b0/0xda0
[ 1748.307286][T29475]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1748.307324][T29475]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1748.307356][T29475]  sock_write_iter+0x524/0x5a0
[ 1748.307373][T29475]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1748.307401][T29475]  ? __pfx_sock_write_iter+0x10/0x10
[ 1748.307426][T29475]  ? bpf_lsm_file_permission+0x9/0x10
[ 1748.307454][T29475]  ? security_file_permission+0x76/0x210
[ 1748.307478][T29475]  ? rw_verify_area+0xce/0x6d0
[ 1748.307505][T29475]  vfs_write+0x6ac/0x1070
[ 1748.307534][T29475]  ? __pfx_sock_write_iter+0x10/0x10
[ 1748.307555][T29475]  ? __pfx_vfs_write+0x10/0x10
[ 1748.307581][T29475]  ? find_held_lock+0x2b/0x80
[ 1748.307612][T29475]  ksys_write+0x1f8/0x250
[ 1748.307627][T29475]  ? __pfx_ksys_write+0x10/0x10
[ 1748.307650][T29475]  do_syscall_64+0x106/0xf80
[ 1748.307678][T29475]  ? clear_bhb_loop+0x40/0x90
[ 1748.307701][T29475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.307719][T29475] RIP: 0033:0x7fe37819c799
[ 1748.307735][T29475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1748.307753][T29475] RSP: 002b:00007fe379068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1748.307771][T29475] RAX: ffffffffffffffda RBX: 00007fe378416090 RCX: 00007fe37819c799
[ 1748.307783][T29475] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002
[ 1748.307794][T29475] RBP: 00007fe379068090 R08: 0000000000000000 R09: 0000000000000000
[ 1748.307804][T29475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1748.307814][T29475] R13: 00007fe378416128 R14: 00007fe378416090 R15: 00007fff9a0fc2f8
[ 1748.307837][T29475]  </TASK>
[ 1750.230021][T29497] FAULT_INJECTION: forcing a failure.
[ 1750.230021][T29497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1750.325059][T29497] CPU: 0 UID: 0 PID: 29497 Comm: syz.9.4993 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1750.325100][T29497] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1750.325110][T29497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1750.325121][T29497] Call Trace:
[ 1750.325134][T29497]  <TASK>
[ 1750.325142][T29497]  dump_stack_lvl+0x100/0x190
[ 1750.325174][T29497]  should_fail_ex.cold+0x5/0xa
[ 1750.325195][T29497]  _copy_to_user+0x32/0xd0
[ 1750.325221][T29497]  simple_read_from_buffer+0xcb/0x170
[ 1750.325251][T29497]  proc_fail_nth_read+0x1af/0x230
[ 1750.325279][T29497]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.325303][T29497]  ? rw_verify_area+0xce/0x6d0
[ 1750.325329][T29497]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.325350][T29497]  vfs_read+0x1e4/0xb30
[ 1750.325381][T29497]  ? __pfx_vfs_read+0x10/0x10
[ 1750.325409][T29497]  ? __fget_files+0x215/0x3d0
[ 1750.325431][T29497]  ? __fget_files+0x21f/0x3d0
[ 1750.325453][T29497]  ksys_read+0x12a/0x250
[ 1750.325481][T29497]  ? __pfx_ksys_read+0x10/0x10
[ 1750.325516][T29497]  do_syscall_64+0x106/0xf80
[ 1750.325546][T29497]  ? clear_bhb_loop+0x40/0x90
[ 1750.325569][T29497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1750.325588][T29497] RIP: 0033:0x7fe37815cfce
[ 1750.325604][T29497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1750.325622][T29497] RSP: 002b:00007fe379046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1750.325640][T29497] RAX: ffffffffffffffda RBX: 00007fe3790476c0 RCX: 00007fe37815cfce
[ 1750.325652][T29497] RDX: 000000000000000f RSI: 00007fe3790470a0 RDI: 0000000000000004
[ 1750.325663][T29497] RBP: 00007fe379047090 R08: 0000000000000000 R09: 0000000000000000
[ 1750.325674][T29497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1750.325684][T29497] R13: 00007fe378416218 R14: 00007fe378416180 R15: 00007fff9a0fc2f8
[ 1750.325708][T29497]  </TASK>
[ 1751.479166][T29505] FAULT_INJECTION: forcing a failure.
[ 1751.479166][T29505] name failslab, interval 1, probability 0, space 0, times 0
[ 1751.540986][T29505] CPU: 0 UID: 0 PID: 29505 Comm: syz.5.4996 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1751.541028][T29505] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1751.541039][T29505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1751.541051][T29505] Call Trace:
[ 1751.541057][T29505]  <TASK>
[ 1751.541065][T29505]  dump_stack_lvl+0x100/0x190
[ 1751.541098][T29505]  should_fail_ex.cold+0x5/0xa
[ 1751.541118][T29505]  ? kvm_dev_ioctl+0x124f/0x1a50
[ 1751.541138][T29505]  should_failslab+0xc2/0x120
[ 1751.541159][T29505]  __kmalloc_noprof+0xe0/0x850
[ 1751.541191][T29505]  kvm_dev_ioctl+0x124f/0x1a50
[ 1751.541215][T29505]  ? find_held_lock+0x2b/0x80
[ 1751.541232][T29505]  ? __fget_files+0x215/0x3d0
[ 1751.541257][T29505]  ? hook_file_ioctl_common+0x146/0x410
[ 1751.541287][T29505]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1751.541315][T29505]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1751.541337][T29505]  __x64_sys_ioctl+0x18e/0x210
[ 1751.541365][T29505]  do_syscall_64+0x106/0xf80
[ 1751.541391][T29505]  ? clear_bhb_loop+0x40/0x90
[ 1751.541414][T29505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1751.541434][T29505] RIP: 0033:0x7fabfbd9c799
[ 1751.541449][T29505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1751.541467][T29505] RSP: 002b:00007fabfcb6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1751.541486][T29505] RAX: ffffffffffffffda RBX: 00007fabfc016090 RCX: 00007fabfbd9c799
[ 1751.541498][T29505] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1751.541509][T29505] RBP: 00007fabfbe32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1751.541520][T29505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1751.541530][T29505] R13: 00007fabfc016128 R14: 00007fabfc016090 R15: 00007fff0cd43878
[ 1751.541553][T29505]  </TASK>
[ 1752.199181][T29508] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1753.409973][T29526] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1755.756055][T29547] netlink: 218 bytes leftover after parsing attributes in process `syz.9.5005'.
[ 1757.651437][T29566] tipc: Started in network mode
[ 1757.771788][T29566] tipc: Node identity ffffffff, cluster identity 4711
[ 1757.778598][T29566] tipc: Node number set to 4294967295
[ 1759.396143][T29596] FAULT_INJECTION: forcing a failure.
[ 1759.396143][T29596] name failslab, interval 1, probability 0, space 0, times 0
[ 1759.558687][T29596] CPU: 0 UID: 0 PID: 29596 Comm: syz.9.5014 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1759.558730][T29596] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1759.558741][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1759.558752][T29596] Call Trace:
[ 1759.558759][T29596]  <TASK>
[ 1759.558766][T29596]  dump_stack_lvl+0x100/0x190
[ 1759.558798][T29596]  should_fail_ex.cold+0x5/0xa
[ 1759.558820][T29596]  ? kvm_dev_ioctl+0x124f/0x1a50
[ 1759.558841][T29596]  should_failslab+0xc2/0x120
[ 1759.558861][T29596]  __kmalloc_noprof+0xe0/0x850
[ 1759.558893][T29596]  kvm_dev_ioctl+0x124f/0x1a50
[ 1759.558918][T29596]  ? find_held_lock+0x2b/0x80
[ 1759.558935][T29596]  ? __fget_files+0x215/0x3d0
[ 1759.558952][T29596]  ? hook_file_ioctl_common+0x146/0x410
[ 1759.558974][T29596]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1759.559002][T29596]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1759.559023][T29596]  __x64_sys_ioctl+0x18e/0x210
[ 1759.559061][T29596]  do_syscall_64+0x106/0xf80
[ 1759.559088][T29596]  ? clear_bhb_loop+0x40/0x90
[ 1759.559110][T29596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.559129][T29596] RIP: 0033:0x7fe37819c799
[ 1759.559145][T29596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1759.559163][T29596] RSP: 002b:00007fe379068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1759.559183][T29596] RAX: ffffffffffffffda RBX: 00007fe378416090 RCX: 00007fe37819c799
[ 1759.559195][T29596] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1759.559206][T29596] RBP: 00007fe378232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1759.559217][T29596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1759.559228][T29596] R13: 00007fe378416128 R14: 00007fe378416090 R15: 00007fff9a0fc2f8
[ 1759.559251][T29596]  </TASK>
[ 1759.995250][T29602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5015'.
[ 1760.113264][T29597] netlink: 25 bytes leftover after parsing attributes in process `syz.8.5015'.
[ 1765.879542][T29629] program syz.8.5021 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1771.814819][T29722] vivid-007: =================  START STATUS  =================
[ 1771.862888][T29722] vivid-007: Generate PTS: true
[ 1771.905112][T29722] vivid-007: Generate SCR: true
[ 1771.910023][T29722] tpg source WxH: 320x240 (Y'CbCr)
[ 1772.003818][T29722] tpg field: 1
[ 1772.007238][T29722] tpg crop: (0,0)/320x240
[ 1772.011561][T29722] tpg compose: (0,0)/320x240
[ 1772.123653][T29722] tpg colorspace: 8
[ 1772.201330][T29722] tpg transfer function: 0/0
[ 1772.263137][T29722] tpg Y'CbCr encoding: 0/0
[ 1772.287008][T29722] tpg quantization: 0/0
[ 1772.382391][T29722] tpg RGB range: 0/2
[ 1772.386347][T29722] vivid-007: ==================  END STATUS  ==================
[ 1773.813258][T29760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5045'.
[ 1774.774012][T28873] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10
[ 1777.502920][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5051'.
[ 1777.658427][T22005] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1777.676036][T22005] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1777.684167][T22005] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1777.705689][T22005] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1777.713200][T22005] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1778.819166][T29790] chnl_net:caif_netlink_parms(): no params data found
[ 1779.317598][T29802] netlink: 326 bytes leftover after parsing attributes in process `syz.8.5054'.
[ 1779.500497][T29790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1779.591799][T29790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1779.599126][T29790] bridge_slave_0: entered allmulticast mode
[ 1779.687230][T29790] bridge_slave_0: entered promiscuous mode
[ 1779.911928][T22005] Bluetooth: hci8: command tx timeout
[ 1780.237738][T29790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1780.361375][T29790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1780.435744][T29790] bridge_slave_1: entered allmulticast mode
[ 1780.501587][T29790] bridge_slave_1: entered promiscuous mode
[ 1780.749160][T29790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1780.833600][T29790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1781.092616][T29790] team0: Port device team_slave_0 added
[ 1781.101626][T29790] team0: Port device team_slave_1 added
[ 1781.342581][T29811] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1781.521564][T29811] queue_state_write: operation too long
[ 1781.555423][T29790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1781.594019][T29790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1781.623386][T29811] queue_state_write: use 'run', 'start' or 'kick'
[ 1781.798809][T29790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1781.945344][T22005] Bluetooth: hci8: command tx timeout
[ 1782.045907][T29819] FAULT_INJECTION: forcing a failure.
[ 1782.045907][T29819] name failslab, interval 1, probability 0, space 0, times 0
[ 1782.212732][T29819] CPU: 0 UID: 0 PID: 29819 Comm: syz.7.5057 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1782.212774][T29819] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1782.212784][T29819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1782.212795][T29819] Call Trace:
[ 1782.212802][T29819]  <TASK>
[ 1782.212810][T29819]  dump_stack_lvl+0x100/0x190
[ 1782.212843][T29819]  should_fail_ex.cold+0x5/0xa
[ 1782.212866][T29819]  should_failslab+0xc2/0x120
[ 1782.212886][T29819]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1782.212914][T29819]  ? alloc_inode+0x68/0x250
[ 1782.212946][T29819]  ? simple_start_creating+0xb0/0x110
[ 1782.212975][T29819]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1782.213007][T29819]  alloc_inode+0x68/0x250
[ 1782.213031][T29819]  new_inode+0x22/0x1c0
[ 1782.213056][T29819]  __debugfs_create_file+0x105/0x4f0
[ 1782.213079][T29819]  debugfs_create_file_full+0x41/0x60
[ 1782.213103][T29819]  kvm_dev_ioctl+0x1491/0x1a50
[ 1782.213132][T29819]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1782.213160][T29819]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1782.213182][T29819]  __x64_sys_ioctl+0x18e/0x210
[ 1782.213210][T29819]  do_syscall_64+0x106/0xf80
[ 1782.213235][T29819]  ? clear_bhb_loop+0x40/0x90
[ 1782.213257][T29819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1782.213276][T29819] RIP: 0033:0x7f8c2d59c799
[ 1782.213293][T29819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1782.213310][T29819] RSP: 002b:00007f8c2e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1782.213329][T29819] RAX: ffffffffffffffda RBX: 00007f8c2d816090 RCX: 00007f8c2d59c799
[ 1782.213341][T29819] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1782.213352][T29819] RBP: 00007f8c2d632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1782.213363][T29819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1782.213374][T29819] R13: 00007f8c2d816128 R14: 00007f8c2d816090 R15: 00007ffe6544e8c8
[ 1782.213397][T29819]  </TASK>
[ 1782.213405][T29819] debugfs: out of free dentries, can not create file 'pages_2m'
[ 1783.025541][T29790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1783.064486][T29790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1783.172514][T29790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1783.794620][T29790] hsr_slave_0: entered promiscuous mode
[ 1783.837296][T29790] hsr_slave_1: entered promiscuous mode
[ 1783.871616][T29790] debugfs: 'hsr0' already exists in 'hsr'
[ 1783.907256][T29790] Cannot create hsr debugfs directory
[ 1784.023154][T22005] Bluetooth: hci8: command tx timeout
[ 1785.671575][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5062'.
[ 1786.101836][T22005] Bluetooth: hci8: command tx timeout
[ 1789.545910][T29790] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1789.679790][T29790] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1789.768934][T29790] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1789.841034][T29790] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1790.380578][T29903] FAULT_INJECTION: forcing a failure.
[ 1790.380578][T29903] name failslab, interval 1, probability 0, space 0, times 0
[ 1790.550263][T29903] CPU: 0 UID: 0 PID: 29903 Comm: syz.5.5064 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1790.550303][T29903] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1790.550313][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1790.550324][T29903] Call Trace:
[ 1790.550331][T29903]  <TASK>
[ 1790.550338][T29903]  dump_stack_lvl+0x100/0x190
[ 1790.550371][T29903]  should_fail_ex.cold+0x5/0xa
[ 1790.550392][T29903]  should_failslab+0xc2/0x120
[ 1790.550411][T29903]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1790.550438][T29903]  ? copy_process+0x7365/0x7a10
[ 1790.550459][T29903]  ? __raw_spin_lock_init+0x3a/0x110
[ 1790.550488][T29903]  copy_process+0x7365/0x7a10
[ 1790.550519][T29903]  ? __pfx_copy_process+0x10/0x10
[ 1790.550540][T29903]  ? find_held_lock+0x2b/0x80
[ 1790.550565][T29903]  kernel_clone+0xfc/0x9a0
[ 1790.550584][T29903]  ? __pfx_futex_wait+0x10/0x10
[ 1790.550612][T29903]  ? __pfx_kernel_clone+0x10/0x10
[ 1790.550644][T29903]  __do_sys_clone+0xd9/0x120
[ 1790.550665][T29903]  ? __pfx___do_sys_clone+0x10/0x10
[ 1790.550686][T29903]  ? __fget_files+0x21f/0x3d0
[ 1790.550718][T29903]  do_syscall_64+0x106/0xf80
[ 1790.550744][T29903]  ? clear_bhb_loop+0x40/0x90
[ 1790.550766][T29903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1790.550784][T29903] RIP: 0033:0x7fabfbd9c799
[ 1790.550800][T29903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1790.550817][T29903] RSP: 002b:00007fabfcb6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1790.550835][T29903] RAX: ffffffffffffffda RBX: 00007fabfc016090 RCX: 00007fabfbd9c799
[ 1790.550855][T29903] RDX: 0000000000000000 RSI: 0000000000000ffe RDI: 00000000000006d8
[ 1790.550867][T29903] RBP: 00007fabfbe32c99 R08: 000000004000000a R09: 0000000000000000
[ 1790.550878][T29903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1790.550888][T29903] R13: 00007fabfc016128 R14: 00007fabfc016090 R15: 00007fff0cd43878
[ 1790.550911][T29903]  </TASK>
[ 1791.483010][T29790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1791.638663][T29790] 8021q: adding VLAN 0 to HW filter on device team0
[ 1791.774691][T27954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1791.781861][T27954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1791.857327][T27954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1791.864503][T27954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1792.200077][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.211971][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1793.353151][T29945] FAULT_INJECTION: forcing a failure.
[ 1793.353151][T29945] name failslab, interval 1, probability 0, space 0, times 0
[ 1793.462832][T29945] CPU: 0 UID: 0 PID: 29945 Comm: syz.8.5068 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1793.462874][T29945] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1793.462885][T29945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1793.462897][T29945] Call Trace:
[ 1793.462904][T29945]  <TASK>
[ 1793.462912][T29945]  dump_stack_lvl+0x100/0x190
[ 1793.462943][T29945]  should_fail_ex.cold+0x5/0xa
[ 1793.462965][T29945]  should_failslab+0xc2/0x120
[ 1793.462986][T29945]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1793.463014][T29945]  ? security_inode_alloc+0x3b/0x2c0
[ 1793.463033][T29945]  ? lockdep_init_map_type+0x5c/0x250
[ 1793.463060][T29945]  security_inode_alloc+0x3b/0x2c0
[ 1793.463080][T29945]  inode_init_always_gfp+0xced/0x1040
[ 1793.463102][T29945]  alloc_inode+0x8e/0x250
[ 1793.463127][T29945]  new_inode+0x22/0x1c0
[ 1793.463152][T29945]  debugfs_create_dir+0xc4/0x440
[ 1793.463174][T29945]  kvm_dev_ioctl+0x11b6/0x1a50
[ 1793.463199][T29945]  ? find_held_lock+0x2b/0x80
[ 1793.463216][T29945]  ? __fget_files+0x215/0x3d0
[ 1793.463231][T29945]  ? hook_file_ioctl_common+0x146/0x410
[ 1793.463253][T29945]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1793.463282][T29945]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1793.463304][T29945]  __x64_sys_ioctl+0x18e/0x210
[ 1793.463341][T29945]  do_syscall_64+0x106/0xf80
[ 1793.463367][T29945]  ? clear_bhb_loop+0x40/0x90
[ 1793.463391][T29945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1793.463411][T29945] RIP: 0033:0x7f08a559c799
[ 1793.463429][T29945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1793.463446][T29945] RSP: 002b:00007f08a64a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1793.463466][T29945] RAX: ffffffffffffffda RBX: 00007f08a5816090 RCX: 00007f08a559c799
[ 1793.463479][T29945] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008
[ 1793.463490][T29945] RBP: 00007f08a5632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1793.463501][T29945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1793.463512][T29945] R13: 00007f08a5816128 R14: 00007f08a5816090 R15: 00007ffff73a8e48
[ 1793.463535][T29945]  </TASK>
[ 1793.463555][T29945] debugfs: out of free dentries, can not create directory '29945-9'
[ 1793.722301][T29790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1793.820859][T29790] veth0_vlan: entered promiscuous mode
[ 1793.966025][T29790] veth1_vlan: entered promiscuous mode
[ 1794.168269][T29790] veth0_macvtap: entered promiscuous mode
[ 1794.180970][T29790] veth1_macvtap: entered promiscuous mode
[ 1794.244525][T29790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1794.314593][T29790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1794.392118][T27748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1794.487974][T27748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1794.539724][T27748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1794.604528][T27748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1794.790279][T27744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1794.850224][T27744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1795.054545][T27744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1795.122621][T27744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1797.000592][T29988] FAULT_INJECTION: forcing a failure.
[ 1797.000592][T29988] name failslab, interval 1, probability 0, space 0, times 0
[ 1797.151929][T29988] CPU: 0 UID: 0 PID: 29988 Comm: syz.8.5072 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1797.151974][T29988] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1797.151985][T29988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1797.151997][T29988] Call Trace:
[ 1797.152004][T29988]  <TASK>
[ 1797.152012][T29988]  dump_stack_lvl+0x100/0x190
[ 1797.152045][T29988]  should_fail_ex.cold+0x5/0xa
[ 1797.152067][T29988]  ? iovec_from_user+0x8d/0x140
[ 1797.152091][T29988]  should_failslab+0xc2/0x120
[ 1797.152111][T29988]  __kmalloc_noprof+0xe0/0x850
[ 1797.152138][T29988]  ? futex_hash+0x2c5/0x380
[ 1797.152163][T29988]  iovec_from_user+0x8d/0x140
[ 1797.152187][T29988]  process_vm_rw+0x1e5/0x2d0
[ 1797.152218][T29988]  ? __pfx_process_vm_rw+0x10/0x10
[ 1797.152253][T29988]  ? ksys_write+0x190/0x250
[ 1797.152288][T29988]  ? xfd_validate_state+0x129/0x190
[ 1797.152318][T29988]  __x64_sys_process_vm_readv+0xe2/0x1c0
[ 1797.152348][T29988]  ? do_syscall_64+0x95/0xf80
[ 1797.152373][T29988]  ? lockdep_hardirqs_on+0x78/0x100
[ 1797.152398][T29988]  do_syscall_64+0x106/0xf80
[ 1797.152423][T29988]  ? clear_bhb_loop+0x40/0x90
[ 1797.152446][T29988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1797.152466][T29988] RIP: 0033:0x7f08a559c799
[ 1797.152482][T29988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1797.152500][T29988] RSP: 002b:00007f08a64c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[ 1797.152519][T29988] RAX: ffffffffffffffda RBX: 00007f08a5815fa0 RCX: 00007f08a559c799
[ 1797.152531][T29988] RDX: 0000040000000001 RSI: 0000200000000080 RDI: 0000000000000110
[ 1797.152542][T29988] RBP: 00007f08a5632c99 R08: 000000000000000a R09: 0000000000000000
[ 1797.152553][T29988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1797.152564][T29988] R13: 00007f08a5816038 R14: 00007f08a5815fa0 R15: 00007ffff73a8e48
[ 1797.152587][T29988]  </TASK>
[ 1797.893957][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'.
[ 1798.109457][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5073'.
[ 1799.019946][T30007] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5077'.
[ 1800.994093][T30048] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.16.0), cmd(11)
[ 1801.146734][T28873] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1801.161080][T28873] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1801.173450][T28873] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1801.182024][T28873] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1801.189429][T28873] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1802.806689][T30055] chnl_net:caif_netlink_parms(): no params data found
[ 1803.062581][   T31] INFO: task syz.1.4791:28308 blocked for more than 143 seconds.
[ 1803.070488][   T31]       Tainted: G     U  W    L XTNJ syzkaller #0
[ 1803.089277][T30095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5091'.
[ 1803.102307][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1803.110998][   T31] task:syz.1.4791      state:D stack:27464 pid:28308 tgid:28300 ppid:17362  task_flags:0x400140 flags:0x00080002
[ 1803.302026][T28873] Bluetooth: hci9: command tx timeout
[ 1803.341765][   T31] Call Trace:
[ 1803.382278][   T31]  <TASK>
[ 1803.385257][   T31]  __schedule+0xfee/0x6120
[ 1803.389702][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1803.542769][   T31]  ? kasan_save_stack+0x30/0x50
[ 1803.547693][   T31]  ? __pfx___schedule+0x10/0x10
[ 1803.652438][   T31]  ? find_held_lock+0x2b/0x80
[ 1803.657172][   T31]  ? schedule+0x2bf/0x390
[ 1803.661517][   T31]  schedule+0xdd/0x390
[ 1803.752331][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1803.757849][   T31]  __mutex_lock+0xc9a/0x1b90
[ 1803.803721][T30095] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht'
[ 1803.831243][   T31]  ? nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1803.865616][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1803.870709][   T31]  ? net_generic+0xea/0x2a0
[ 1803.933779][   T31]  ? net_generic+0xea/0x2a0
[ 1803.938347][   T31]  ? nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1804.001742][   T31]  nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1804.007343][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[ 1804.095639][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1804.135396][   T31]  ? genl_get_cmd+0x3ef/0x720
[ 1804.192319][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1804.197059][   T31]  ? security_capable+0x80/0x260
[ 1804.262418][   T31]  genl_rcv_msg+0x560/0x800
[ 1804.267071][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1804.332002][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 1804.338134][   T31]  netlink_rcv_skb+0x159/0x420
[ 1804.423443][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1804.451889][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1804.481743][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1804.487084][   T31]  genl_rcv+0x28/0x40
[ 1804.491093][   T31]  netlink_unicast+0x5aa/0x870
[ 1804.553408][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1804.558774][   T31]  netlink_sendmsg+0x8b0/0xda0
[ 1804.624128][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1804.643897][   T31]  ? __import_iovec+0x1d2/0x640
[ 1804.672015][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1804.677705][   T31]  ____sys_sendmsg+0x9e1/0xb70
[ 1804.712739][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1804.718105][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1804.773863][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1804.779217][   T31]  ___sys_sendmsg+0x190/0x1e0
[ 1804.823472][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1804.828744][   T31]  __sys_sendmsg+0x170/0x220
[ 1804.855393][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1804.860553][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[ 1804.895057][   T31]  do_syscall_64+0x106/0xf80
[ 1804.899704][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1804.942153][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1804.948092][   T31] RIP: 0033:0x7f97b4d9c799
[ 1804.988102][   T31] RSP: 002b:00007f97b5c50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1805.021761][   T31] RAX: ffffffffffffffda RBX: 00007f97b5016270 RCX: 00007f97b4d9c799
[ 1805.029774][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000006
[ 1805.101786][   T31] RBP: 00007f97b4e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1805.109914][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1805.193457][   T31] R13: 00007f97b5016308 R14: 00007f97b5016270 R15: 00007ffe653da978
[ 1805.201501][   T31]  </TASK>
[ 1805.247269][   T31] 
[ 1805.247269][   T31] Showing all locks held in the system:
[ 1805.401534][T28873] Bluetooth: hci9: command tx timeout
[ 1805.481757][   T31] 1 lock held by khungtaskd/31:
[ 1805.486645][   T31]  #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1805.652335][   T31] 2 locks held by getty/5583:
[ 1805.721832][   T31]  #0: ffff888036e290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1805.786409][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1805.872380][   T31] 2 locks held by kworker/0:0/19493:
[ 1805.941798][   T31]  #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[ 1806.042265][   T31]  #1: ffffc9000546fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[ 1806.121826][   T31] 4 locks held by kworker/u10:23/27744:
[ 1806.127409][   T31]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[ 1806.243577][   T31]  #1: ffffc9000614fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[ 1806.341991][   T31]  #2: ffffffff905fb850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1806.351473][   T31]  #3: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1806.503822][   T31] 6 locks held by kworker/u10:27/27748:
[ 1806.532022][   T31] 2 locks held by syz.3.4705/27756:
[ 1806.537252][   T31]  #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1806.583529][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 1806.632545][   T31] 2 locks held by syz-executor/27883:
[ 1806.637952][   T31]  #0: ffff88806c6620e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[ 1806.712182][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1806.748858][   T31] 2 locks held by syz.1.4791/28308:
[ 1806.781921][   T31]  #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1806.790183][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1806.872534][   T31] 2 locks held by syz.0.4902/29034:
[ 1806.877776][   T31]  #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1806.931974][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1806.982383][   T31] 2 locks held by syz.9.5019/29624:
[ 1806.992991][   T31]  #0: ffffffff906c0410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1807.001218][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00
[ 1807.074547][   T31] 4 locks held by syz-executor/29790:
[ 1807.079976][   T31]  #0: ffff88814d2c0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1807.142368][   T31]  #1: ffff88814d2c00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1807.202407][   T31]  #2: ffffffff908ac448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1807.242306][   T31]  #3: ffff888057fbe2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770
[ 1807.275731][   T31] 2 locks held by syz.7.5060/29840:
[ 1807.280998][   T31]  #0: ffff888035f740e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[ 1807.352481][   T31]  #1: ffffffff8ec58028 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 1807.383995][   T31] 3 locks held by syz-executor/30055:
[ 1807.389506][   T31]  #0: ffff888031224ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1807.462589][T28873] Bluetooth: hci9: command tx timeout
[ 1807.468014][   T31]  #1: ffff8880312240c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1807.500455][   T31]  #2: ffffffff908ac448 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280
[ 1807.540880][   T31] 2 locks held by syz.8.5089/30083:
[ 1807.604769][   T31]  #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1807.661760][   T31]  #1: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1807.711956][   T31] 1 lock held by syz.5.5091/30093:
[ 1807.717110][   T31]  #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1807.792344][   T31] 1 lock held by dhcpcd-run-hook/30133:
[ 1807.797922][   T31]  #0: ffff8880342d6468 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0x7de/0x1200
[ 1807.882126][   T31] 2 locks held by sed/30138:
[ 1807.911783][   T31] 
[ 1807.914185][   T31] =============================================
[ 1807.914185][   T31] 
[ 1808.183179][   T31] NMI backtrace for cpu 0
[ 1808.183200][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1808.183235][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1808.183245][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1808.183256][   T31] Call Trace:
[ 1808.183262][   T31]  <TASK>
[ 1808.183271][   T31]  dump_stack_lvl+0x100/0x190
[ 1808.183303][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1808.183333][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1808.183361][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1808.183386][   T31]  sys_info+0x141/0x190
[ 1808.183468][   T31]  watchdog+0xd25/0x1050
[ 1808.183492][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1808.183510][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1808.183541][   T31]  ? kthread+0x13a/0x450
[ 1808.183564][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1808.183579][   T31]  kthread+0x370/0x450
[ 1808.183602][   T31]  ? __pfx_kthread+0x10/0x10
[ 1808.183626][   T31]  ret_from_fork+0x754/0xd80
[ 1808.183654][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1808.183682][   T31]  ? __switch_to+0x7b4/0x1120
[ 1808.183702][   T31]  ? __pfx_kthread+0x10/0x10
[ 1808.183726][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1808.183754][   T31]  </TASK>
[ 1808.941944][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1808.948858][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[ 1808.959549][   T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[ 1808.969637][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1808.979711][   T31] Call Trace:
[ 1808.983082][   T31]  <TASK>
[ 1808.986024][   T31]  dump_stack_lvl+0x100/0x190
[ 1808.990733][   T31]  vpanic+0x552/0x970
[ 1808.994715][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1808.999219][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1809.005375][   T31]  panic+0xd1/0xe0
[ 1809.009094][   T31]  ? __pfx_panic+0x10/0x10
[ 1809.013514][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1809.019669][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1809.025824][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1809.032065][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1809.037038][   T31]  ? watchdog+0xd35/0x1050
[ 1809.041472][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1809.046073][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1809.050855][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1809.055888][   T31]  ? kthread+0x13a/0x450
[ 1809.060223][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1809.064898][   T31]  kthread+0x370/0x450
[ 1809.068989][   T31]  ? __pfx_kthread+0x10/0x10
[ 1809.073587][   T31]  ret_from_fork+0x754/0xd80
[ 1809.078209][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1809.083328][   T31]  ? __switch_to+0x7b4/0x1120
[ 1809.088003][   T31]  ? __pfx_kthread+0x10/0x10
[ 1809.092596][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1809.097374][   T31]  </TASK>
[ 1809.100468][   T31] Kernel Offset: disabled
[ 1809.104807][   T31] Rebooting in 86400 seconds..