last executing test programs:

2m42.836709859s ago: executing program 1 (id=680):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x3, 0x3b)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0)
socket(0x2b, 0x1, 0x1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0)
ioctl$auto(r1, 0xc0585668, r1)

2m42.520391439s ago: executing program 1 (id=682):
r0 = socket(0x23, 0x6, 0x3fffd)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0)
clone$auto(0x1, 0x5, 0x0, 0x0, 0x200)
close_range$auto(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0)
sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x1, 0x400007, 0x400001000dd, 0x1000000000010, 0xffffffffffffffff, 0x3)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20000000)
fstatfs$auto(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mprotect$auto(0x0, 0x67000000000000, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
r2 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000080)=0x1000003)
write$auto(r2, &(0x7f00000000c0)='\xd5\x05\x1b\xb4E\xb0\x97\xb8mb,\xbb\xa8M)\xb0\xb2MO\x17h\x1bX', 0x81)
ioctl$auto_NS_GET_PARENT(r2, 0xb702, 0x0)
mmap$auto(0x0, 0xffffffffffff35a5, 0xdf, 0xb50, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x27, 0x2, 0x8)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10700, 0x0, 0x0)

2m41.237067007s ago: executing program 1 (id=689):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (async)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80200, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (rerun: 32)
unshare$auto(0x40000080) (async)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r2 = open(0x0, 0x2041, 0xfa)
socket$nl_generic(0x10, 0x3, 0x10) (async)
linkat$auto(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
mmap$auto(0x0, 0x4020009, 0x8, 0xeb1, 0x401, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x20) (async)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x20200, 0x0)
preadv$auto(r3, &(0x7f0000000240)={0x0, 0x9}, 0xc, 0x9, 0x402) (async)
epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x9, 0x200}) (async)
shmget$auto(0x8, 0x14561, 0x7ff) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
shmctl$auto_SHM_LOCK(0x0, 0xb, 0x0) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r2)
sendmsg$auto_NFSD_CMD_VERSION_SET(r2, 0x0, 0x4008040)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)

2m40.898587661s ago: executing program 1 (id=691):
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x1cdc40, 0x0)

2m40.168033019s ago: executing program 1 (id=692):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0xfffffffffffffffe, 0xfffffffffffefffe, 0x115)
socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
getrlimit$auto(0x3, 0x0)
ioctl$auto(0x3, 0x400c4d05, 0xffffffffffffffff)
ioctl$auto(0x3, 0x400c4d00, 0xffffffffffffffff)

2m39.932101202s ago: executing program 1 (id=694):
landlock_create_ruleset$auto(0x0, 0x0, 0x10000)
ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
unshare$auto(0x8100000)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5100008bbdaa3684121a2f50f5209730391ac1f61fd586b606b92daaaf6bfaafbc7e9d016a6a925b3e958fdebbc7c53ccd6c97d971fa4cbc11b486367ac9dae6a4b91609d75c08b08496179ee8f674bbc8585f7a9e07a300000000daf2ffd7871da9d8aa74652297b3a7ed322470fef5ccfbc75bd5b1d372aba04212b6765d0b9f852db5b563746d8ba4e7433d0421164ee2d6e530230a00884e", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf250300000008000300060000000a000100aaaaaaaaaa3600000a00050000000000000000000800030000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c010)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x9)
sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0100800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_STA_FLAGS2={0x98, 0x43, "18c68e9c44aa05bb8d1327bb427a49c11622cb4df16171c27a1bfc4f0033f20a6b4bbeb40eb1065bca86fcace7ca04eae754bee298174567b202ce9a99605c7b207b94a6f51de9bed234b28279826be286ed6307ea4175570b50fd5a5b6d964bcf56f2f23e27a77309dd9ace56046499f1bf4795486fce27c3d5cdceff5ec72e81660d2ca67d8a3df97a11830787ae0fc01c0837"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008804)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef)

2m32.445460823s ago: executing program 2 (id=718):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r0, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
socket(0x23, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x89e0, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
io_uring_setup$auto(0x59, 0x0)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)

2m31.470152548s ago: executing program 2 (id=720):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)

2m31.299553719s ago: executing program 2 (id=722):
r0 = getsockopt$auto(0xffffffffffffffff, 0xff, 0x7, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0)
write$auto(r1, 0x0, 0x81)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x254, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x5}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_IE_RIC={0x223, 0xb2, "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"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x20004080}, 0x4)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000)
ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2)
mmap$auto(0xffffffffffffffff, 0x202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x5)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
unshare$auto(0x40000080)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r4 = io_uring_setup$auto(0x4c2, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000480), r4)
r7 = epoll_create$auto(0x3e)
r8 = socket(0x1e, 0x4, 0x0)
epoll_ctl$auto(r7, 0x1, r8, 0x0)
sendmsg$auto_NCSI_CMD_PKG_INFO(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000001300)={0x664, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0xffffffffffffff5f, 0x5, "7b7c7e7a7d97a6d0c70714af93ac410a87a2ef7d9b21a162a767ad7b82ce24b354ce2e64031b3c74620ca8430c786d752193f1d5d94bb43a31c04ad19f0ad6c457e7ee812c861013516b6e82d20d1df693b9aee5c7edec157ae9653e8f4c8c553a363654712c00ac1047f34aa09ddbc1ffb971b8b5c6b6a573a7f4f94474f147ab0d016763dc5e505b2c70b10e595fd18caaedf8ed1da8931509c0455655490325213b415c5a83b5c4f60c7b414a9e8613efdadc7e963b5ebdd5d72ec51b7f2e43349527929ec50efb67ea4a8c37e6803b36cb38708d5ec733e86f15ed61a0fafa518cad7630f5902226864a532863be8806dea6c67e1b844ded15f1536e8a90fd13b651ad7e0cd32c5424303b8b1af10224544d02e72a7cbac4a3d6ef03f2a3b1b366862777e493108b90cf7c078e413d42103bd018bfd70c334b8380cbf06185c0f85aff7b567d1be71085c80ef5eee11c343ef7fb26f4bc62c0e4f204e6aa28463c57e54580c41da8a87c631252daa193569cfce26238f01345b2a0c5b4f982fb4ada2e1d81406eb45e26fc56ab278849a44efaf33225fff2bce42716220b0b5084302ab33839edb65061de5da46c167990103c1e08bcea39fde3ab824bc4d19438b234e26861f7caff0f011844418cf5b8579cbcfc7a1abe279892967888b24cf185aeeaa66a609808a51e31e79f5db1a8674758ed01a3bd61de6012b2204004ca8d8645e07b5c90516b9d9dc9de09475801608e5a7d4ed023ae88735344e6744cf8f47e214646f98e8f3e2b40089bc29a4f5eb42fba40475eef8113e4bdd518d89a13285e3aea0587b164160b52b2d82204c8a6e19c751548dcce91c1706a5f97b2d59dccedfcd1125391340e6e4d18c3d87887a7272bcb242b4a88c6a6a9cff75ab83856c5449957512a0e3ad68c74d02326e357b300b885fd30d31b020f77cbd0d40b0783906d758ef1450cb6c4b9354c1d17c8b32352f5e0ad6ab3dea24cce024a7e424cee78eb87db08ecc34383f360f04f8e5d1b33fa0c58a78a6f357321de5efa68350cc199f305c1cb0eb1f8b038a329fe99c50f1ae14923c1a39d5034be17861ccb0c129f6feb9f269c56e4381aafe66ef38e7bb2acbd855246552eb50e7bf0df253a5a276f1080544551e1c692b218e4d16dc4b4bf9f182fadac2700f6db20eea70965682acf82d47a0ef09a468468e883c495bfad9999001986b29fa7025784d8c022b39eea4f5c1ab8b3bc9ba032d9ca03e8b90bc872771062f98f1cd71c1a6fc09685ced09f7c61729a113e4d0b26c1fc1f43b5c2ccfbffc4e651526893d8f035fc01101b919edbe65bccce59f2ff445571f9e9cae4a074bb2c498f24623580c646c91d7a0cf92bf6906712c0992e1ae939f3dc570f65200b4a636f974c14fd7355b7d07092db906b73c482bcbc9ed44b8652a92f23c987f8ebf593e42674c36a5948cd152b8c239b684f43c030ca5d5802cbf60ba89ca0b7140cd1ad465ef6a6db6c375ba82cbda6ee375b2dadd77e82ec028fb7696d56e90f42a5f3c5ca0512718e4145e4f8aa0a3c796b9378e9cdb151be698b5edd51c8de1349cef7bb2c6938e2b7a218bb466080412ee52d978c7382bc03fd9f7e175aff11ac1db41796a01cc0541ff1d1b1fb68804180ee286d2299b98996768119d688e2ed0cdfcd972c5cb6f58a5f98e8fc95f8a5e39ca2473d4dc0d988a238c507b17ff719e1b9a5ee246853a1033b66b954839aba329d0b0d3a16ec445d63ad2caf16644393b431296005c4b16316e8b179c0f261dd59cac22c8a03ee875b8eb4be68a43027707d77985454e66beee28cd56f92146b6abf42ada6374501b3672c872c92c6b390baace65fe62906b5f448428442c39fae642946204adab226e831c7cd965695e3e43f1bdf075082771e4e9947e5cef15e90152d53d865078896fa3efb90f2af44f6e050c0aa09b1fb343600f8c3303cea49a71be5a03df45e1175168fbd1ec452d2e69bf2cd8351e5d0f82192c4c40286845a54db5f6c4e9e7dd9fb5e5c616f9531d28ac3880c6bf08f0971ce6600"/1471}, @NCSI_ATTR_CHANNEL_ID={0x0, 0x4, 0x7}, @NCSI_ATTR_PACKAGE_LIST={0x0, 0x2, 0x0, 0x1, [@generic="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", @nested={0x0, 0x92, 0x0, 0x1, [@typed={0x0, 0x89, 0x0, 0x0, @u64=0xfffffffffffffff7}, @typed={0x0, 0x1c, 0x0, 0x0, @str='/dev/ttyS2\x00'}, @generic="06e089f149df42c4f65b1ba05d0dd9", @nested={0x0, 0x10a, 0x0, 0x1, [@nested={0x0, 0x19, 0x0, 0x1, [@generic="154fbae4280b4d9ce3072d9180efa6cf", @generic="57f12b9f492ffaaec3a416398beafbc932c5ab06becb2f", @generic="99500c63011b888a3c36124ce170ee27f567f0f88b750384d03d7e349646726747d4927764f0c1f5207de847db0627244cc67669228bea79917b792e77dc8631a91c88615249dd20335ac40c6caa0ccc8c82a7070242b0da7f966051ea4616093f3dcc6c59470f8700f9c8da46a6e8126de1d9ac3deed63be435ffadd8165794bdbd7d4515b5ac1b96361e183996522bd72cb1097bc1b2c5ed52f0f93d6a72a517aeb5", @typed={0x0, 0x4c, 0x0, 0x0, @str='/dev/nullb0\x00'}, @typed={0x0, 0x65, 0x0, 0x0, @u32=0xffffffff}, @typed={0x0, 0x56, 0x0, 0x0, @binary="0008d8c473f4bdcd37d5f2ce9768cff6725610369d2593a74408cb12c9060a00c2c9ef901172993c0fc2bf3dfd78e8"}, @nested={0x0, 0x83}]}, @typed={0x0, 0x5d, 0x0, 0x0, @u32=0x4}, @typed={0x0, 0xe0}, @typed={0x0, 0xce, 0x0, 0x0, @pid}, @nested={0x0, 0x3c, 0x0, 0x1, [@typed={0x0, 0xca, 0x0, 0x0, @pid}, @generic="dfabc44b5c39dd77c83a276cb211f103fd69abefffcdd15905c1d0f7d9f197f8b024ec1da2ddc66574d2b3f8e0cc62cf40b8959b4a706a48fd3fe06cda2548c926df48ca359cd1922f2fc81814e0f53d5a30f3fc6831608f17d7045e9a003921f377a41ad57056db117738cf351233fd9af33a3e3e423e6acd346ec26e133b27a2ea6beee30d86813d42e5b93df9b8f88bc4a5ba404b77689d0ecc6857407eb7b5759288454bb5bb498eb4caddcf5baea32aa0c2d15fa30f1608ca0dc40658ef285c44922171029651e5cb00f970f6432635fb72bf5ba967fea45adea24ddd7c15921df688591f093c497823e5", @typed={0x0, 0x112, 0x0, 0x0, @pid}, @nested={0x0, 0x117}, @generic="46ede255b4d7a61638415cedcdce4eb981cd5591243806691bddece2ffec9b6ccd917f4353ddf27205947d86f3fbc8383893dc89d0c73b6cd2de131dd0bac40cea3a1450324bb401a1bfd3399e00b4de2f3d161380608d9a93bf8392eae3ded6ba707018151e200032cf3fdf55f4021b1625a66d70174640e88f3b6ccf6a21457bcdbec0e1fc1aea705af9274184a339721f682b42ed17e7", @nested={0x0, 0xcd}, @typed={0x0, 0x14a, 0x0, 0x0, @str='..\'$.\xe1-},-%\xcf/&+\'*-%$\'7\x00'}]}]}, @nested={0x0, 0xda}, @nested={0x0, 0x162}, @nested={0x0, 0x10e}]}]}, @NCSI_ATTR_PACKAGE_LIST={0x72, 0x2, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="347506d72f4100264a8149d85763d126990d2937d35328c25eb184c174295eb50cc2c0ae480a40a23211bab97679190c98652036094486fe62", @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10, 0x6b, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @u32=0x7b}, @nested={0x4, 0xc1}]}, @generic="f710e6e9d88db7d5ac37d25eb196dd2f94db9689d7"]}]}, 0x664}}, 0x20042000)
ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0)
r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r9, 0x5408, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x9, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7, 0x0)
r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
write$auto(r10, 0x0, 0x200000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2m30.282283673s ago: executing program 2 (id=728):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r0, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
socket(0x23, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x89e0, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
io_uring_setup$auto(0x59, 0x0)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)

2m29.278691887s ago: executing program 2 (id=731):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
setitimer$auto_ITIMER_PROF(0x2, 0xfffffffffffffffc, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5})
timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000080)="70dc7a45a30f38adb9c53c58b84358849428774ac81031f6501c6ad2ecd433337a85bdef26543735241ecfd8260e532b03b856336100a7d4256fe1df77d8ed8e652c717220045e56190cbfd79be97c7d3148e4b3b5f72e3aecfa96ade9ccb4cdbdc8f68d9132d76f241b0c073b253d8c32c0c6cc90522735480d5eb87545a77e0be7684ca6d5c977", @inferred=r0, 0x5a5, @_sigev_thread={&(0x7f0000000180)=&(0x7f0000000140)=0xec, &(0x7f00000001c0)="ef44acbeab5d917a353ed629eede9ddaa17d70ed08b4f145"}}, &(0x7f0000000240)=0x7)

2m27.856342549s ago: executing program 2 (id=736):
r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/i915/parameters/enable_sagv\x00', 0x222100, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x10000400008, 0x5f, 0xfff, r0, 0x8000)
close_range$auto(r2, 0x8, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0)
ioctl$auto_RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x8007, 0x6e0, 0x2, 0x8000, 0x2})
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r8 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r8], 0x1}, 0x58)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032cb57000fbdbdf250a0000001e000200736e7616178b3c4556d094603c4c1cf1c95ae656b169162cda7afdb24df4063a6105177780ced530ce0000060001004002000004000100030000000800030048535200"], 0x4c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)

2m24.495014204s ago: executing program 32 (id=694):
landlock_create_ruleset$auto(0x0, 0x0, 0x10000)
ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
unshare$auto(0x8100000)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5100008bbdaa3684121a2f50f5209730391ac1f61fd586b606b92daaaf6bfaafbc7e9d016a6a925b3e958fdebbc7c53ccd6c97d971fa4cbc11b486367ac9dae6a4b91609d75c08b08496179ee8f674bbc8585f7a9e07a300000000daf2ffd7871da9d8aa74652297b3a7ed322470fef5ccfbc75bd5b1d372aba04212b6765d0b9f852db5b563746d8ba4e7433d0421164ee2d6e530230a00884e", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf250300000008000300060000000a000100aaaaaaaaaa3600000a00050000000000000000000800030000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c010)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x9)
sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0100800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_STA_FLAGS2={0x98, 0x43, "18c68e9c44aa05bb8d1327bb427a49c11622cb4df16171c27a1bfc4f0033f20a6b4bbeb40eb1065bca86fcace7ca04eae754bee298174567b202ce9a99605c7b207b94a6f51de9bed234b28279826be286ed6307ea4175570b50fd5a5b6d964bcf56f2f23e27a77309dd9ace56046499f1bf4795486fce27c3d5cdceff5ec72e81660d2ca67d8a3df97a11830787ae0fc01c0837"}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008804)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef)

2m12.760205181s ago: executing program 33 (id=736):
r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/i915/parameters/enable_sagv\x00', 0x222100, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x10000400008, 0x5f, 0xfff, r0, 0x8000)
close_range$auto(r2, 0x8, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40140, 0x0)
ioctl$auto_RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000040)={0x6d, 0x6, 0x10001, 0x6146, 0x8007, 0x6e0, 0x2, 0x8000, 0x2})
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r8 = clone$auto(0x1, 0x0, 0x0, 0x0, 0x42)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r8], 0x1}, 0x58)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032cb57000fbdbdf250a0000001e000200736e7616178b3c4556d094603c4c1cf1c95ae656b169162cda7afdb24df4063a6105177780ced530ce0000060001004002000004000100030000000800030048535200"], 0x4c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)

2m9.484045531s ago: executing program 0 (id=779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#/@\\]\\-\x00'}]}, 0x34}, 0x1, 0x300, 0x0, 0x801}, 0x0)

2m9.137244214s ago: executing program 0 (id=781):
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mbind$auto(0x4d, 0x200000000004, 0x8, &(0x7f0000000400)=0x7ffffffb, 0x7, 0x1)
sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="143206c94ad973071dd6001000000000", @ANYRES16=0x0, @ANYBLOB="010729bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0])
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2a, 0x2, 0x1)
io_setup$auto(0xffff, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0x4, 0x7ffffffd, 0x7ff, 0x7, 0x9})
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000000040))
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
close_range$auto(r0, r0, 0x0)
ioctl$auto_NS_GET_OWNER_UID(r0, 0xb704, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0xa9202, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/cgroup.freeze\x00', 0xb02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(r4, r4, 0x0, 0x2)
preadv$auto(0x40000000000003, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x8, 0x1000)
recvmmsg$auto(r4, &(0x7f0000000340)={{&(0x7f0000000040)="729bda3db54e0f3a4d39a195db2efc5ed3bc326ef8ec9d3c080ed8fa719d554fc9370a799873038cf44265b3868851284ee8da3dd93a3c37a312851501e7e423b217794027353575236b4083dc6138e30f1cfe82da2e351e7bb2be7d5bc0a07cd4afab64821dfcbb32647c728bce", 0x2, &(0x7f0000000240)={&(0x7f0000000140)="687a8e90d25aea54ae6ba227053e31ee7e47847b02c74b8bfdc67133782b472be7f588b9e61e3939aaa2a5575ccf6fb3c60a67e781c7fc8f3cd3019c9749b458240179975f53416c318d462d8e582a6947d24f5dfa7b33f3819753cd8216ce790c2752e9320abc7773cdcbc1a55bd83c54719f4b4900f71c6bfd082ed4f9d3ab756e31b0e7b42172a930bbfc5fc792eddd6d66ceafd925a64dbe3daff991ca4b576b867cc45629d0d2e0d538e55d8f701796a8d704b850fd43221725f274e3fc45f8e90f3016ee77429685290b6dda8a7659f5a4ead556200f1f826d73c28db20e9ad5baf1530c21b9caac25566e46c57bc9bc84a43f46a8", 0x5}, 0x9, &(0x7f0000000280)="63e43511170bf4b4edb5a946e2c031890901081176b82d92b28225c62ac82bb8194b0322975ce1f3a837c6bb191c6ff3da20f7f7fb1c81263de38d46590a66f57a1f731143e20f3cf6b2daf7af7ebc61e521e715d597075816008fc57dc3145ee6a1129220f5e0917f4b2f4c7100da15878bc398828a6cc0b2b32ecf21ea45edf3dbfd7b90b8e8ef624aa4df3a1939", 0xe, 0xa}, 0x8}, 0xfffffff9, 0x7, &(0x7f0000000380)={0x4, 0x8})

2m7.040794369s ago: executing program 0 (id=785):
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (fail_nth: 7)

2m6.160569686s ago: executing program 0 (id=788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x1f00, 0x4050}, 0x20008004)

2m6.074598535s ago: executing program 0 (id=789):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0xffffffffffffffff, 0x8001)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x80, 0x0)
syz_clone(0x0, &(0x7f0000000200)="8aff97fb7ddae167f7f65d74134a4a140cb1c653d9dcad1361d148497d9d9b269c71221c577622435c107b266c2908fb0852cbf61a6c6beedff97c3b9e40f6c064f3ad9b2c08e78cddefe6c0f2ff9327a25557dc782ed1215fde030cc8aa83cbcd15f5a9eded4a1bba78699a2727be2187b02cadab33a7c95d95943757fc363ecc3ab234bbac25f8a3fc41dc0cb8b390dfc6cd3c1fc2babf7c559d41620783f395b6139b22a57736530ece229355350e317e6ab3d4e32501e2be3c0530b1997a220c1685e323f0c544b61db1724c3baa194466cd75319888614f76f815b35f1326ec70b6c739701d063ca9cd1194a2739cc38c921f6c71", 0xf7, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="155b0a7840b96f2f6193c89e3d64833e4a9ea6b93bf6ce876dd670ea440f84ada784bf0aaa27253012946117f2233bdc6c551c9060c1212d8a867c893d64e1287cf06e5ef4cec38d3dab6c9920eec4531a64a2c3c611afc9f2534dc11b7cae36ff317f90bda3737ee49034104c6e05514fcc0c97018b5da9e4b2de4cafd2f9902787bcd53a60ca654c46ca1cb1cdbcbbde23a5adfc311ccf994e41e59ba07150ecf7ad49cf3dfaa100dea16298f6f280fa161ceca3190268d281ea26dfa656")
preadv$auto(r0, &(0x7f0000000000)={0x0, 0x2}, 0x6, 0xa, 0x3)
unshare$auto(0x40000080)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

2m3.44374676s ago: executing program 0 (id=801):
mmap$auto(0x7, 0x2020009, 0x6, 0x7d3, 0xffffffffffffffff, 0x8003)
r0 = socket(0x15, 0x5, 0x0)
r1 = getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f402, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
fstatfs$auto(0x3, 0x0)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r3, 0x0, 0x10, 0xccbd5d)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x800, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000001c0)=""/249, 0xf9)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r5, 0x1, 0x7ff)
ptrace$auto(0x1, r5, 0x8, 0x9)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r5, 0x9, 0x100000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(0x2, 0x11, 0x1000000000000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x8010)
ioctl$auto_posix_clock_file_operations_posix_clock(r7, 0x40383d03, 0x0)
r10 = socket(0x10, 0x1, 0x0)
fcntl$auto_F_DUPFD(r10, 0x0, r7)
r11 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000000c0), r2)
sendmsg$auto_NET_DM_CMD_CONFIG_GET(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, r11, 0x410, 0x70bd2d, 0x25dfdbfe, {}, [@NET_DM_ATTR_UNSPEC={0x33, 0x0, "5d8ee8a02420be7bce977b90bfd36dea7bb1f8252db38a563ef860cedebe899d55d52a25bfdca395a054d6f6a143cc"}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x15)

1m48.051596386s ago: executing program 34 (id=801):
mmap$auto(0x7, 0x2020009, 0x6, 0x7d3, 0xffffffffffffffff, 0x8003)
r0 = socket(0x15, 0x5, 0x0)
r1 = getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f402, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
fstatfs$auto(0x3, 0x0)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r3, 0x0, 0x10, 0xccbd5d)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x800, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000001c0)=""/249, 0xf9)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r5, 0x1, 0x7ff)
ptrace$auto(0x1, r5, 0x8, 0x9)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r5, 0x9, 0x100000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(0x2, 0x11, 0x1000000000000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x8010)
ioctl$auto_posix_clock_file_operations_posix_clock(r7, 0x40383d03, 0x0)
r10 = socket(0x10, 0x1, 0x0)
fcntl$auto_F_DUPFD(r10, 0x0, r7)
r11 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f00000000c0), r2)
sendmsg$auto_NET_DM_CMD_CONFIG_GET(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, r11, 0x410, 0x70bd2d, 0x25dfdbfe, {}, [@NET_DM_ATTR_UNSPEC={0x33, 0x0, "5d8ee8a02420be7bce977b90bfd36dea7bb1f8252db38a563ef860cedebe899d55d52a25bfdca395a054d6f6a143cc"}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x15)

1m1.443639879s ago: executing program 6 (id=936):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), r2)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x10001}, 0x400040000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x200000000)
sendmsg$auto_NCSI_CMD_SEND_CMD(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x811)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
socket(0x1e, 0x80000, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
write$auto_dev_fops_plock(0xffffffffffffffff, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1", 0x73)
r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf8f)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r5, r4, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
unshare$auto(0x40000080)
ioctl$auto(r0, 0x5522, 0xf15)

1m0.211675794s ago: executing program 6 (id=947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0)
mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x560d, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd)
sendmsg$auto_OVS_DP_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x0, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008)

58.377476901s ago: executing program 6 (id=942):
socket(0x10, 0x2, 0xc)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim6/ports/1/pp_hold\x00', 0x2000, 0x0)
write$auto_nsim_pp_hold_fops_netdev(r0, 0x0, 0x0)
sysfs$auto(0x46e7, 0x5, 0x0)
sysfs$auto(0x5, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x5, 0x1)
r1 = socket(0x2b, 0x1, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c)
timerfd_create$auto(0x9, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r6, @ANYBLOB="db04000021000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4006)
recvmmsg$auto(r1, 0x0, 0x80000401, 0x7fe, 0x0)
r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0)
ioctl$auto_BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0)
ioctl$auto_BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712fcd917fee796")
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400)

57.994660028s ago: executing program 6 (id=944):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="e5b725bd7000fcfbdd2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r0)
mmap$auto(0x6, 0x408008, 0x5, 0x10, 0x2, 0x8000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon10\x00', 0x2400, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0xa, 0x9, 0x6, 0x8001}, 0x101)
sendmsg$auto_IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100025bd7000fdc9632cb9000000060008000480d9672513d851b4e5f000e36a000005003600060000006dcc56f4a281c1ec00000000050020000900000005001b00060000000500803aec81977fc61f6d3248dbcaf5c72248bac67e4b0447be33c368e6ee574e9708000000000000001c05b9a57ed53a9bdc00"/134], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40005080)
ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000002c0)=0x80c)
close_range$auto(0x2, 0x8, 0x0)
write$auto(r3, 0x0, 0x100082)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0xa, 0x0)
syslog$auto(0x46, 0x0, 0x4)
r5 = prctl$auto_PR_SET_MM_START_BRK(0x1, 0x6, 0xffffffffffffffff, 0x7, 0x4)
fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r5, 0x6, &(0x7f0000000080)='\x00\x00\x00\x00\x00', &(0x7f00000001c0)="a7b12e45cb7d60bf57fe32debebfdb353978bd967d663eaed4f6a66f22948a79c954d133a8fe25fa5e163fd6d14680473fded345540b378923e549fc9a990bdba50f4083c952fc1a03a17f1c737e5593f1066daef30cfbc4bf0ae56c305e1250f8b650be8ea224c526bec38eef1a8f5a918d53ab10393825ffe872717e442bd2e8bfd734c113ba5fce9b9aaa7a30", 0x2)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)

56.427092294s ago: executing program 6 (id=950):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = open(0x0, 0xa22c0, 0x155)
prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001)
setreuid$auto(0x15, 0x5)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000440)={{&(0x7f00000000c0)="7d2bcd8b3b10f927eba501768c2063bd2f114149b5bf4a756d1b418ed9068fe8a04883c1eeb527822436dbf59d3bef5fb6032dd83b250a6989b565c4828316556dfe2e5818effda9db06eb6d60211ef1e7aef47a31c0cab41439635e761e811eca877c9bc6b9913ff47432734d637d168aa6a62b40088021849f214fb7b04718b7a508c2700786488ae5f32fc7748af44c89fe342f623d4038f45cff4859c78e8df7886b1360f984e6684db8095e52c927708c96355dd524e6d1a8c45205206c", 0x4, &(0x7f0000000340)={&(0x7f0000000300)="ff7c4e7830e4", 0x10000}, 0x2, &(0x7f0000000380)="193788ff4b50abefd8e100060ffbe052403db03ad764e10c9a7b432e6ebad7f28a4459e2d96cf20cc2407a8628d628ac243925dd83cf48ce92b16dc03e080bbf0507bbc2af80189fcfc49bb11481d07e2285f5b8111dfb0373881142abf2ab90294337e2defe8d73dd83a85fe233188ae88e38b82eb2ba8bde3c3b278dbf8086966ec5bd68688291a106ee2f6233b64591ad51fff6c89c", 0x100000000, 0x7}, 0xfffffffb}, 0x7, 0x3ff, &(0x7f00000004c0)={0x3, 0x8})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0xc18400000, 0x0, 0x8000008489)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/pfkey\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000640)=""/189, 0xbd)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
getxattr$auto(0x0, 0x0, 0x0, 0x5)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0)
mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x113d01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x6)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0xad85, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x80001, 0x0)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
close_range$auto(0x2, 0x8, 0x0)

55.632293264s ago: executing program 6 (id=953):
r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x2302, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x3)
r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
write$auto_ftrace_event_filter_fops_trace_events(r1, &(0x7f0000000300)="2baf82c1a5bc872318c266c40109c6b2b8e16198d96732ec3515702f77291f", 0x1f)
r2 = socket(0x2, 0x3, 0xa)
mmap$auto(0x1, 0x7, 0x1000df, 0x8216, 0xffffffffffffffff, 0x8000)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x801, 0x0)
ioctl$auto_USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba2")
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, r0, 0x120000000)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDRV_PCM_IOCTL_INFO2(0xffffffffffffffff, 0x81204101, &(0x7f0000000280)={0x3, 0x8001, 0x4, 0x0, "8ae984f59ad56b41628d5ce9d7e8509b5967fbfaeacb8d14b00c0effa6eff1c9bbc3de6bc0e87cae64fc94e1e73af322af1fc3330217dc7315eceb81671b5307", "f26087d90f39ef2715449a676612aa63d1229bfb5df2181f72919b51608d6dd7bf0793e003b6d1c2d6ba4551f19d44d0061fe47d742381fbdea19e01f10af002d023cf7851bbeaa163b8c98aacb98c49", "07bfdd649515caa087cbd691cbeb27f55a8beda3e933e252089a4abd4633aef7", 0x9b58, 0x5, 0x1, 0x9a, '\x00', "029b411bc31b3e0b801d22d72268831b6b48389cbd28c10350eb4fedd57919887772e8952f2605b3f0b4b17fdf3ad1bfde0ddb3c38c734d3990c2f45dbf64f73"})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
fchdir$auto(r4)
mount$auto(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@J\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
getegid()
socket(0x2, 0x1, 0x106)
sendfile$auto(r4, r2, &(0x7f00000000c0)=0x3ff, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0x0)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2)
setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2)
mmap$auto(0x10001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

50.807814301s ago: executing program 4 (id=964):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0xfffffffffffffffe, 0xfffffffffffefffe, 0x115)
socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @local}, 0x54)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x521202, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zram0\x00', 0x6e642, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c)
write$auto(0x3, 0x0, 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r3, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0)
sysfs$auto(0x2, 0x3c, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
read$auto(0x3, 0x0, 0x80)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@inferred, 0x1000, 0x202000b, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x963, 0x3, @inferred, @integer64={0x400000009, 0x1007, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3372a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
unshare$auto(0x40000080)
mmap$auto(0x0, 0x200104, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

50.095068295s ago: executing program 4 (id=967):
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyu8\x00', 0x1af342, 0x0)
socket(0x11, 0x5, 0x100)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
poll$auto(&(0x7f0000000340)={r1, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write$auto(r2, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x0, 0x28, 0x0, 0xc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0)

48.54878538s ago: executing program 4 (id=970):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x6, 0x7fc, 0x400007fb, &(0x7f0000000440)})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x2a081, 0x0)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80)
epoll_create$auto(0x15)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000)
ioprio_set$auto(0x9, 0xee00, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0)
fcntl$auto(r4, 0x0, 0xa8)
r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$auto_VHOST_SET_MEM_TABLE(r5, 0x4001af84, 0x0)

48.159406581s ago: executing program 4 (id=971):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
read$auto(r0, &(0x7f0000000000)='./cgroup.cpu/tasks\x00', 0x6)

47.822421685s ago: executing program 4 (id=974):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}})
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0)
pread64$auto(r0, 0x0, 0x8, 0x10000000000)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98)
r2 = open_by_handle_at$auto(r1, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6)
getsockopt$auto_SO_NO_CHECK(r2, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000)
mprotect$auto(0x0, 0x806121, 0x6)
prctl$auto(0x241, 0x3, 0x0, 0x0, 0x4)
mmap$auto(0x80000000, 0x8, 0x6, 0xfb72, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1)
sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025000c0007800400018004005f6c0c00020006000000000000000000000000000000000058113b773317e3799b26813031dabbb09b885b708d2f61290eba0dfde7424f2e"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
r5 = socket(0x18, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x40047452, 0x0)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)

47.083419239s ago: executing program 4 (id=978):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
close_range$auto(r0, r0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000140)="1aa3c20829efdce928654fc1911c020aacf7f4782eda2c121c5d49ada89328f540f630d082f4a9e707582e606d545b1faecb49bf07f0a847d78982db6781cdf94e4f5c336bb4514e21be40a0d0d94900a49310a5dd8bda9a4e64b658a3403a57f9268d39f9d825aa832d335aaa27fe6b6d53538466acac757caf38a70ad66eb0cebb15245d87b0568c5ba9be3410a621d8f72cfb533b0bd44970d4949f9d0597d968948eb4a278", 0xc5d3, &(0x7f0000000300)={&(0x7f0000000280)="fcb97dc88e999917c8ad7ff399e2b844d49ce528a17906c34e486e33b1f53daf52051a82a001b27fc4a1a1b85268000199fff60310", 0x800}, 0x9, &(0x7f0000000340)="e839ee7a468877bf79681a", 0x3, 0x21f7}, 0xe9c}, 0x4, 0xe890) (async)
socket(0x10, 0x3, 0x6) (async, rerun: 32)
socket(0x2, 0x2, 0x0) (async, rerun: 32)
socket(0x10, 0x3, 0x0)
openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy17/hwsim/dfs_simulate_radar\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket(0x10, 0x2, 0x4) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x68, 0x0) (async)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8001, 0x9}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
socket(0x11, 0x3, 0x2) (async, rerun: 64)
socket(0x10, 0x4, 0x6) (rerun: 64)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)

41.385270396s ago: executing program 5 (id=996):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101681, 0x0)
poll$auto(&(0x7f0000000200)={<r1=>r0, 0x1, 0xa}, 0x25, 0x109)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x2f, 0x4, 0x7fffffffefff, 0x0, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4802, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0)
r4 = pipe$auto(0x0)
write$auto(r3, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEu<K\x02\xfc\xa0M\xfas\x87\xd0\x96\xc8\x9f\x84\x8d0\xb6\x98K\xec\x80\xcdb\xc8\xffFw\xaf\xdd\xe1\xf7\xe6\xfd\xe4xH\xe1\x94`c\b\xa3\x99\xea\x15\xf3j:|\x8cjVX\xbbZe\xb3g\xe9=o\xbeQ6\xf7\x13=C\x8c:\xc5m>Zy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000300, 0x9, 0xa, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f0000000100)="e182c8f854caa51cb3a7f2b1cf48a8c2dcd4967f024b31168093450e698e9bf5d318c58bc12f06b0df81e5e0924e08a07a20c06d4f37e90f692c8fc00be3b6bc4102a23fb2ba2569ae9bcf0cab9807776d58c2e056321589870b23d6ce2c8b781a11addcfb235bc57a61ee5647eb3f50", 0x1)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x2000a0c2)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, r2, 0x8)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121102, 0x0)
write$auto(r5, 0x0, 0x2)

40.425292937s ago: executing program 35 (id=953):
r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x2302, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x3)
r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
write$auto_ftrace_event_filter_fops_trace_events(r1, &(0x7f0000000300)="2baf82c1a5bc872318c266c40109c6b2b8e16198d96732ec3515702f77291f", 0x1f)
r2 = socket(0x2, 0x3, 0xa)
mmap$auto(0x1, 0x7, 0x1000df, 0x8216, 0xffffffffffffffff, 0x8000)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x801, 0x0)
ioctl$auto_USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba2")
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, r0, 0x120000000)
read$auto(0x3, 0x0, 0x8080)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDRV_PCM_IOCTL_INFO2(0xffffffffffffffff, 0x81204101, &(0x7f0000000280)={0x3, 0x8001, 0x4, 0x0, "8ae984f59ad56b41628d5ce9d7e8509b5967fbfaeacb8d14b00c0effa6eff1c9bbc3de6bc0e87cae64fc94e1e73af322af1fc3330217dc7315eceb81671b5307", "f26087d90f39ef2715449a676612aa63d1229bfb5df2181f72919b51608d6dd7bf0793e003b6d1c2d6ba4551f19d44d0061fe47d742381fbdea19e01f10af002d023cf7851bbeaa163b8c98aacb98c49", "07bfdd649515caa087cbd691cbeb27f55a8beda3e933e252089a4abd4633aef7", 0x9b58, 0x5, 0x1, 0x9a, '\x00', "029b411bc31b3e0b801d22d72268831b6b48389cbd28c10350eb4fedd57919887772e8952f2605b3f0b4b17fdf3ad1bfde0ddb3c38c734d3990c2f45dbf64f73"})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
fchdir$auto(r4)
mount$auto(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@J\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
getegid()
socket(0x2, 0x1, 0x106)
sendfile$auto(r4, r2, &(0x7f00000000c0)=0x3ff, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(0x0, 0x0)
setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2)
setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2)
mmap$auto(0x10001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

40.117465546s ago: executing program 5 (id=999):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0xfffffffffffffffe, 0xfffffffffffefffe, 0x115)
socket(0x2, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(0x3, 0x400c4d05, r0)
ioctl$auto(0x3, 0x400c4d07, r0)

39.791600975s ago: executing program 5 (id=1001):
semctl$auto(0x12, 0x9, 0x0, 0x2)

39.588529573s ago: executing program 5 (id=1002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd0900ff06df2501000000280005000c000000080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="070001002e5e0000080005000200000008000700"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)

39.396598772s ago: executing program 5 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
setpriority$auto(0x7, 0x8, 0x8)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001)
mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r1, 0x3)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket(0x29, 0x5, 0x0)
setfsuid$auto(0xee00)
write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x0, 0x1)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r6, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

37.271887631s ago: executing program 5 (id=1006):
mmap$auto(0xfffffffffffffffe, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000180)={0x19980330, <r0=>0x0}, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages\x00', 0xa0862, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000)
semtimedop$auto(0x5, 0x0, 0x72, &(0x7f0000000080)={0x7fb, 0xfffffffffffffffd})
capset$auto(&(0x7f0000000000)={0x180, r0}, &(0x7f0000000040)={0x0, 0x2, 0x8})
select$auto(0xf, &(0x7f00000000c0)={[0x4, 0x8d, 0x6, 0x6, 0x8, 0x100000000, 0x7, 0x8, 0x268e, 0xa9b, 0x8000000000000000, 0x2, 0xffffffffffff0a66, 0x67a5, 0xa, 0x8]}, &(0x7f0000000200)={[0x82b0, 0x5, 0xdf, 0x6, 0x3ff, 0x2, 0x8, 0x7ff, 0x3, 0xed, 0xe8, 0xcea, 0x6, 0x8, 0x4, 0x4]}, &(0x7f0000000280)={[0xdb50, 0x1, 0x0, 0x80, 0x9, 0x2, 0x4, 0x4, 0x80000001, 0x2, 0x5d, 0x4, 0x371c, 0x4, 0x4, 0x8]}, &(0x7f0000000300)={0xfffffffffffffffa, 0x9})

31.909774274s ago: executing program 36 (id=978):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
close_range$auto(r0, r0, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x8800) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000140)="1aa3c20829efdce928654fc1911c020aacf7f4782eda2c121c5d49ada89328f540f630d082f4a9e707582e606d545b1faecb49bf07f0a847d78982db6781cdf94e4f5c336bb4514e21be40a0d0d94900a49310a5dd8bda9a4e64b658a3403a57f9268d39f9d825aa832d335aaa27fe6b6d53538466acac757caf38a70ad66eb0cebb15245d87b0568c5ba9be3410a621d8f72cfb533b0bd44970d4949f9d0597d968948eb4a278", 0xc5d3, &(0x7f0000000300)={&(0x7f0000000280)="fcb97dc88e999917c8ad7ff399e2b844d49ce528a17906c34e486e33b1f53daf52051a82a001b27fc4a1a1b85268000199fff60310", 0x800}, 0x9, &(0x7f0000000340)="e839ee7a468877bf79681a", 0x3, 0x21f7}, 0xe9c}, 0x4, 0xe890) (async)
socket(0x10, 0x3, 0x6) (async, rerun: 32)
socket(0x2, 0x2, 0x0) (async, rerun: 32)
socket(0x10, 0x3, 0x0)
openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy17/hwsim/dfs_simulate_radar\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket(0x10, 0x2, 0x4) (async, rerun: 64)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x68, 0x0) (async)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8001, 0x9}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) (async)
socket(0x11, 0x3, 0x2) (async, rerun: 64)
socket(0x10, 0x4, 0x6) (rerun: 64)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)

21.940209575s ago: executing program 37 (id=1006):
mmap$auto(0xfffffffffffffffe, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000180)={0x19980330, <r0=>0x0}, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages\x00', 0xa0862, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)
mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000)
semtimedop$auto(0x5, 0x0, 0x72, &(0x7f0000000080)={0x7fb, 0xfffffffffffffffd})
capset$auto(&(0x7f0000000000)={0x180, r0}, &(0x7f0000000040)={0x0, 0x2, 0x8})
select$auto(0xf, &(0x7f00000000c0)={[0x4, 0x8d, 0x6, 0x6, 0x8, 0x100000000, 0x7, 0x8, 0x268e, 0xa9b, 0x8000000000000000, 0x2, 0xffffffffffff0a66, 0x67a5, 0xa, 0x8]}, &(0x7f0000000200)={[0x82b0, 0x5, 0xdf, 0x6, 0x3ff, 0x2, 0x8, 0x7ff, 0x3, 0xed, 0xe8, 0xcea, 0x6, 0x8, 0x4, 0x4]}, &(0x7f0000000280)={[0xdb50, 0x1, 0x0, 0x80, 0x9, 0x2, 0x4, 0x4, 0x80000001, 0x2, 0x5d, 0x4, 0x371c, 0x4, 0x4, 0x8]}, &(0x7f0000000300)={0xfffffffffffffffa, 0x9})

8.215883732s ago: executing program 7 (id=1069):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x6, 0x7fc, 0x400007fb, &(0x7f0000000440)})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x2a081, 0x0)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80)
epoll_create$auto(0x15)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000)
ioprio_set$auto(0x9, 0xee00, 0x6)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0)
fcntl$auto(r4, 0x0, 0xa8)

7.582372072s ago: executing program 7 (id=1071):
r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4000, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x30)
ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000300)="642d4bc531fbc9b6ae274c81056058232b9987736f2215e1fb73f49ef386b337777183d40bcc4921d2108a39dc213ec59cc073890db5e1ce7c7ebb2fc78f4ec888f74088319542dfb0f5b4a1b6fba534bbefa144eff227b4cabbc4351950a06115c2b723736ca58057a4048a0c6d7d56ce7877aafdd82d0b05ff870a815c76fbc32cb20a9fa6ce2cda992314578c1ce9c79abf43c400d1443699c03f16cfe877f58bc1fc73597f36fb02b8d1fc6ea7102a0359d3fbf6a9f3d8176855a89adcffeeb3354545c053f27ff0a98eb0b64dfc609ae5153481877e5c", 0x0, &(0x7f0000000400)="725493d79d3c4980f5bac397414e4c5078732e751cad399094d6c633a821ff39816f8580942ac7c58c37", 0x571, &(0x7f0000000440)="45997e142e1b12a81f92876086b2c380343824329328e18e021592bc6f83d792aaeced4f6ee553a5174b1a41bebf28d1d5005f86bdb6bfc2dfa87bca6ccdcd67e9ded28c86a412209aa3432c78ad3e19cd2ff695a859483481e361ee4693b85995502b4fb8b8ca354fb4b000294cbcae23c2eb8745b2ad0b43e1c131e0cefc20a491ca9e8a366c", &(0x7f0000000500)=0x2})
r1 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={r1, 0x0, 0xa3b, 0x3, 0x9, 0xea})
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0c\x00', 0x2000, 0x0)
r3 = setfsuid$auto(0xee00)
setreuid$auto(r3, 0x0)
shmctl$auto_SHM_INFO(0x7fffffff, 0xe, &(0x7f00000007c0)={{0x5, <r4=>0xee00, 0xffffffffffffffff, 0x6, 0xc6, 0x2, 0x8}, 0x7, 0x1, 0x7, 0x31, @raw=0x3, @raw=0x56d6, 0xfffa, 0x0, &(0x7f00000006c0)="b6640129b1969a9f2972efa1c70b2163378cf484d8e17a0c3406e04389d0dace9cc528a13b8ab8e0dcd3b21e06417e6e82731ad870b3644c2ee7a54ff78f44dc5acdf513d70622db4ed7c950c5113d5408fc866e84042ea726155b20c898095e38846f9e6b652864a965019298b104fa2aa2b228cd45981e10a304481a75d2c14c1e2b73321026bbcefc3feb0f3c1a6468aba46aea77b4276d032047f64f9cae8ba641bfdc44a8021046", &(0x7f0000000780)="c19cfe0396d00690554b7842911c88598e97680f82bb5426922f1da1e9f4d7368d1c83fd0d3504851e5d2050a55d1b814c3fb54c43f0472d2875"})
shmctl$auto_SHM_INFO(0xc48, 0xe, &(0x7f0000000940)={{0x5, <r5=>0xffffffffffffffff, 0xee00, 0x3, 0x7, 0xfffffffd, 0x7}, 0x8, 0x0, 0x0, 0x1, @inferred, @inferred, 0x4, 0x0, &(0x7f0000000840)="4e16a629a8d5bc8a6c136185d5a25538d19b7ec1c7", &(0x7f0000000880)="6ce23e94d2d5ec7fea3e89f96b920c6d1bd9c2531acb99e20553f8471342fb25f22f5110b312e5a09572624dc7009eca24e5f1190684efc254588a61cc667b696a189a8147c1879185f00c6e9b4303e75a18762a8e6c1bedef7053b0b6f6c23878326ef98ee289b661a5133ce80d52f8cedb73860b0af16b3ae5b19a0ca7ef2c677f5598"})
setresuid$auto(r3, r4, r5)
ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r2, 0x40084146, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r6 = io_uring_setup$auto(0x5, 0x0)
close_range$auto(0x2, r6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x6, 0x0)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000200)=""/203, 0xcb)
setsockopt$auto_SO_DEBUG(r7, 0x60fdf648, 0x1, &(0x7f00000009c0)='-\x00', 0xec0)

7.208779054s ago: executing program 8 (id=1074):
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0)
read$auto(r1, &(0x7f0000000040)='\x00', 0x3)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008)
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r2 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
write$auto_fops_ulong_ro_(r2, &(0x7f0000000140)="fd431621ccbca98f5c996225a134b16056b3ce0bd797d80a62f9b2fc819f46234c365b98f0989c3894a8cc05fb5856c5ba117bdfef2763c7b0a2d41e9f386676822b865146d3b9509cdffe95ecf419bbdede12b5b1", 0x55)
io_uring_enter$auto(r2, 0xf777, 0x7ffffffa, 0x3, 0x0, 0x3)
move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)

6.627133705s ago: executing program 8 (id=1075):
mlockall$auto(0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$auto(r0, 0x6a, 0x1, 0x0, 0x0) (fail_nth: 3)

6.476784942s ago: executing program 7 (id=1076):
mmap$auto(0x0, 0xe983, 0xe3, 0xeb1, 0x401, 0x8000)
shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba)
unshare$auto(0x8000400)
r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x8480, 0x0)
read$auto_percpu_stats_fops_(r0, 0x0, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x189002, 0x0)
io_submit$auto(0x2, 0x7f, 0x0)
mmap$auto(0xfffffffffffffffd, 0xb, 0x4000000000e2, 0xeb1, 0x401, 0x7fff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x10001)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0)
writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0)
unshare$auto(0x8000000)
mkdir$auto(0x0, 0x8cd)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x101402, 0x0)
openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, 0x0, 0x593ac3, 0x0)
unshare$auto(0x40000080)

5.7899069s ago: executing program 3 (id=1077):
unshare$auto(0x40000080)
r0 = socket(0x2, 0x5, 0x0)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff)
connect$auto(0x3, 0x0, 0x6)
setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x23, 0x0)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0)
write$auto(0x3, 0x0, 0x100082)
r1 = socket(0xa, 0x3, 0x6)
getsockopt$auto(r1, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
sysfs$auto(0x7f, 0x80000001, 0xfffffffffffffc01)
madvise$auto(0x0, 0x200007, 0x19)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)
sendmmsg$auto(r2, 0x0, 0x4, 0x4008)
r3 = socket(0x29, 0x2, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r3, 0x89f2, 0x24)

5.652687383s ago: executing program 8 (id=1078):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0xffffffffffffffff, 0x8001)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x80, 0x0)
syz_clone(0x0, &(0x7f0000000200), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="155b0a7840b96f2f6193c89e3d64833e4a9ea6b93bf6ce876dd670ea440f84ada784bf0aaa27253012946117f2233bdc6c551c9060c1212d8a867c893d64e1287cf06e5ef4cec38d3dab6c9920eec4531a64a2c3c611afc9f2534dc11b7cae36ff317f90bda3737ee49034104c6e05514fcc0c97018b5da9e4b2de4cafd2f9902787bcd53a60ca654c46ca1cb1cdbcbbde23a5adfc311ccf994e41e59ba07150ecf7ad49cf3dfaa100dea16298f6f280fa161ceca3190268d281ea26dfa656")
preadv$auto(r0, &(0x7f0000000000)={0x0, 0x2}, 0x6, 0xa, 0x3)
unshare$auto(0x40000080)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

4.82031826s ago: executing program 3 (id=1079):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x6, 0x7fc, 0x400007fb, &(0x7f0000000440)})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x2a081, 0x0)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80)
epoll_create$auto(0x15)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000)
ioprio_set$auto(0x9, 0xee00, 0x6)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0)
fcntl$auto(r4, 0x0, 0xa8)

4.819695311s ago: executing program 7 (id=1086):
getsockopt$auto(0xffffffffffffffff, 0xff, 0x7, 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0)
write$auto(r0, 0x0, 0x81)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2)
mmap$auto(0xffffffffffffffff, 0x202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x5)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
unshare$auto(0x40000080)
modify_ldt$auto(0x807ff0000000000, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r3, 0x802c542a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x9, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x7, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
write$auto(r4, 0x0, 0x200000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

4.662243221s ago: executing program 9 (id=1035):
close_range$auto(0x2, 0xffffffffffffffff, 0x200)
socket(0x10, 0x2, 0xc)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0xab02, 0x0)
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}})
open(0x0, 0x0, 0x6f)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8040)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
timer_create$auto(0x9, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram6\x00', 0x4000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x10000000000007, 0xfffffffffffffffb, 0xc40, 0x4, 0x4, 0x3, 0x3, 0x3, 0x9, 0x8000000000400000, 0x2, 0x6d3c, 0x1000000000000003, 0x2, 0x8000000000000006]}, 0x0)
io_uring_setup$auto(0x59, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, 0x0, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x56b)
io_uring_setup$auto(0x9, 0x0)

4.401406404s ago: executing program 8 (id=1080):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd0900ff06df2501000000280005000c00000008000500", @ANYRES32=0x0, @ANYBLOB="070001002e5e0000080005000200000008000700"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)

3.992841455s ago: executing program 3 (id=1081):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x6, 0x7fc, 0x400007fb, &(0x7f0000000440)})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x2a081, 0x0)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80)
epoll_create$auto(0x15)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0)
fcntl$auto(r4, 0x0, 0xa8)

3.770553258s ago: executing program 8 (id=1082):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
open$dir(0x0, 0x10000, 0x6)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
io_setup$auto(0x7ffe, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon8\x00', 0x0, 0x0)
read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x30)
ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0)
ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x1f000000], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x4}, {0x6, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c7, 0x8, 0x100000000}})
rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8)

3.512677443s ago: executing program 3 (id=1083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0)
mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd)
r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r5, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008)

3.219634227s ago: executing program 9 (id=1084):
close_range$auto(0x2, 0xffffffffffffffff, 0x200)
socket(0x10, 0x2, 0xc)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0xab02, 0x0)
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}})
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x8040)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
timer_create$auto(0x9, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram6\x00', 0x4000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x10000000000007, 0xfffffffffffffffb, 0xc40, 0x4, 0x4, 0x3, 0x3, 0x3, 0x9, 0x8000000000400000, 0x2, 0x6d3c, 0x1000000000000003, 0x2, 0x8000000000000006]}, 0x0)
io_uring_setup$auto(0x59, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, 0x0, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x56b)
io_uring_setup$auto(0x9, 0x0)

2.840340491s ago: executing program 7 (id=1085):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x1e9a02, 0x0)
write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r2 = io_uring_setup$auto(0x59, 0x0)
getpid()
unshare$auto(0x40000080)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r1, 0x7)
write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2)
unshare$auto(0x40000080)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES64=r5, @ANYBLOB="00000a00004e8f0bc0c6e581f300"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x22000000)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
set_mempolicy$auto(0x2, 0x0, 0x4)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x8}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x80)
mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000)

2.313002242s ago: executing program 3 (id=1087):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0)
writev$auto(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x8}, 0x7)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x301000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram7/queue/add_random\x00', 0x400000, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
r2 = socket(0x10, 0x2, 0x0)
r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000040)="ca04", 0x2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0xca502, 0x155)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x4, 0x3e, 0x0, 0xc)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8001, 0x9}, 0x8}, 0x1, 0x9)
sendmmsg$auto(r1, &(0x7f00000001c0)={{0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x1, 0x3}, 0xed71390}, 0x182f, 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)

1.806145564s ago: executing program 9 (id=1088):
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00\x00\x02\x81\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2)
ftruncate$auto(0xffffffffffffffff, 0x778f)
r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000040)={@sival_int=0x2, @inferred=r0, 0x2df}, &(0x7f0000000080)=0x2)

1.568313351s ago: executing program 9 (id=1089):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0)
mmap$auto(0x40000, 0x2000c, 0xde, 0x20eb1, 0xffffffffffffffff, 0x8001)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x80, 0x0)
syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)="155b0a7840b96f2f6193c89e3d64833e4a9ea6b93bf6ce876dd670ea440f84ada784bf0aaa27253012946117f2233bdc6c551c9060c1212d8a867c893d64e1287cf06e5ef4cec38d3dab6c9920eec4531a64a2c3c611afc9f2534dc11b7cae36ff317f90bda3737ee49034104c6e05514fcc0c97018b5da9e4b2de4cafd2f9902787bcd53a60ca654c46ca1cb1cdbcbbde23a5adfc311ccf994e41e59ba07150ecf7ad49cf3dfaa100dea16298f6f280fa161ceca3190268d281ea26dfa656")
preadv$auto(r0, &(0x7f0000000000)={0x0, 0x2}, 0x6, 0xa, 0x3)
unshare$auto(0x40000080)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

756.0198ms ago: executing program 7 (id=1090):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), r2)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0x10001}, 0x400040000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x200000000)
sendmsg$auto_NCSI_CMD_SEND_CMD(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f00000009c0)={0x630, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NCSI_ATTR_PACKAGE_LIST={0x245, 0x2, 0x0, 0x1, [@typed={0xb4, 0x116, 0x0, 0x0, @binary="026c47db5c9783a00552bf620e858dfb1bc04eb805514cd1f724865552bf3315404f8c406145bded10f139819dc0cebfda3b7c970e8e55a09652b0f4d8d1aae4a2f2ba8540f904d72b57b5600050716762397945e8d951fc65b52cf05de1096c1ee9f8ab1717842dd3a179513fbf27ee4dd0bab06bf942ce769bd2c6bcf3e03ef9cc4d197c5eb5970cd455bb7a08b392a321e821d3b38bfc4ff078c9ce2e4fa2e9991a5c3b2a5862fe93e6f6e6be9df2"}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r4}, @generic="8d839b04032c1f677776804c34d4a502a008a3e53fd471ef51900be2f2eb8e6d71d7d83903661a9b80a28e3b7eba2854ee8f3840d04a33b629e94276f04c91c1cf6488a10ff11e9a5e1a779ed86d42078f3f7e26042eed36130d8c3612c4005c0abd37e24902a45040bba6e7ed4fdbe8f502879b89e5336df086e6ebb2ad37c5c6d78e932729489d39824f369211de6a968a9c28b5ab2ae0e49e726b4591903b55fc01013dbf8757407eaa2d4054e61f9fa41a8fa36eb01a54848198882b7abbf63bc962f6b7aeae4c7807f0cdd7831c87", @typed={0xb3, 0xfb, 0x0, 0x0, @binary="c27af9e84690d71aed7c17150f9cab7adeae205966073a5caecbf58597c38c93b68c79891016547576c78b89e515a2d085cdb77ed0448a07af361c949ac83a39cc13667632426024331858d06ac7a5e5f5fea965c340a9cbbe31453a2121e70077e7b6ec1793e26573515f08246bf508840b71242918d494e9bdb75215e065b3221c81752ca92c4a95a142c777e30fb881dbe6e87e4bd1716f54f0b0d5b2369001757e66cf6982a1017f69514cea13"}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3ba67bd8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb49}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x3bf, 0x5, "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"}]}, 0x630}, 0x1, 0x0, 0x0, 0x4010}, 0x811)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
socket(0x1e, 0x80000, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
write$auto_dev_fops_plock(0xffffffffffffffff, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1", 0x73)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf8f)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r6, r5, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
unshare$auto(0x40000080)
ioctl$auto(r0, 0x5522, 0xf15)

596.490342ms ago: executing program 3 (id=1091):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
semget$auto(0x0, 0x13c, 0x1ff)
recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f)
sendmsg$auto_IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a)
r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), r2)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0x10001}, 0x400040000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x200000000)
sendmsg$auto_NCSI_CMD_SEND_CMD(r2, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f00000009c0)={0x630, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NCSI_ATTR_PACKAGE_LIST={0x245, 0x2, 0x0, 0x1, [@typed={0xb4, 0x116, 0x0, 0x0, @binary="026c47db5c9783a00552bf620e858dfb1bc04eb805514cd1f724865552bf3315404f8c406145bded10f139819dc0cebfda3b7c970e8e55a09652b0f4d8d1aae4a2f2ba8540f904d72b57b5600050716762397945e8d951fc65b52cf05de1096c1ee9f8ab1717842dd3a179513fbf27ee4dd0bab06bf942ce769bd2c6bcf3e03ef9cc4d197c5eb5970cd455bb7a08b392a321e821d3b38bfc4ff078c9ce2e4fa2e9991a5c3b2a5862fe93e6f6e6be9df2"}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r4}, @generic="8d839b04032c1f677776804c34d4a502a008a3e53fd471ef51900be2f2eb8e6d71d7d83903661a9b80a28e3b7eba2854ee8f3840d04a33b629e94276f04c91c1cf6488a10ff11e9a5e1a779ed86d42078f3f7e26042eed36130d8c3612c4005c0abd37e24902a45040bba6e7ed4fdbe8f502879b89e5336df086e6ebb2ad37c5c6d78e932729489d39824f369211de6a968a9c28b5ab2ae0e49e726b4591903b55fc01013dbf8757407eaa2d4054e61f9fa41a8fa36eb01a54848198882b7abbf63bc962f6b7aeae4c7807f0cdd7831c87", @typed={0xb3, 0xfb, 0x0, 0x0, @binary="c27af9e84690d71aed7c17150f9cab7adeae205966073a5caecbf58597c38c93b68c79891016547576c78b89e515a2d085cdb77ed0448a07af361c949ac83a39cc13667632426024331858d06ac7a5e5f5fea965c340a9cbbe31453a2121e70077e7b6ec1793e26573515f08246bf508840b71242918d494e9bdb75215e065b3221c81752ca92c4a95a142c777e30fb881dbe6e87e4bd1716f54f0b0d5b2369001757e66cf6982a1017f69514cea13"}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3ba67bd8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb49}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x3bf, 0x5, "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"}]}, 0x630}, 0x1, 0x0, 0x0, 0x4010}, 0x811)
ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
socket(0x1e, 0x80000, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0)
write$auto_dev_fops_plock(0xffffffffffffffff, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1", 0x73)
r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf8f)
prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5)
sendfile$auto(r6, r5, 0x0, 0x1fff5)
close_range$auto(0x2, 0x8, 0x0)
semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4)
io_uring_setup$auto(0x4bf15e08, 0x0)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
unshare$auto(0x40000080)
ioctl$auto(r0, 0x5522, 0xf15)

0s ago: executing program 8 (id=1092):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x8000000000000eb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x4, 0x6, 0x7fc, 0x400007fb, &(0x7f0000000440)})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/queue/iosched/read_expire\x00', 0x2a081, 0x0)
write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80)
epoll_create$auto(0x15)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0)
fcntl$auto(r4, 0x0, 0xa8)

kernel console output (not intermixed with test programs):

80]  ? exc_page_fault+0x6f/0xd0
[  291.468121][ T8480]  ? asm_exc_page_fault+0x26/0x30
[  291.468138][ T8480]  ? _copy_from_user+0x98/0xd0
[  291.468161][ T8480]  ? __x64_sys_bpf+0x7b/0xc0
[  291.468177][ T8480]  ? do_syscall_64+0x115/0x840
[  291.468200][ T8480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.468226][ T8480]  ? __lock_acquire+0x4a5/0x2630
[  291.468254][ T8480]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  291.468280][ T8480]  ? policy_nodemask+0xed/0x4f0
[  291.468302][ T8480]  alloc_pages_mpol+0x1fb/0x540
[  291.468324][ T8480]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  291.468345][ T8480]  ? __thp_vma_allowable_orders+0x1d9/0xce0
[  291.468369][ T8480]  ? do_raw_spin_lock+0x128/0x260
[  291.468391][ T8480]  alloc_pages_noprof+0x1a/0x160
[  291.468414][ T8480]  pte_alloc_one+0x1c/0x3d0
[  291.468438][ T8480]  do_fault+0x86c/0x1750
[  291.468459][ T8480]  ? __pmd_alloc+0x3fb/0x950
[  291.468483][ T8480]  __handle_mm_fault+0x187d/0x2a00
[  291.468513][ T8480]  ? mt_find+0x45e/0x8e0
[  291.468539][ T8480]  ? __pfx___handle_mm_fault+0x10/0x10
[  291.468563][ T8480]  ? __pfx_mt_find+0x10/0x10
[  291.468601][ T8480]  ? find_vma+0xbf/0x140
[  291.468619][ T8480]  ? __pfx_find_vma+0x10/0x10
[  291.468640][ T8480]  handle_mm_fault+0x37b/0xa30
[  291.468671][ T8480]  do_user_addr_fault+0x74c/0x12f0
[  291.468693][ T8480]  ? trace_page_fault_kernel+0x7a/0x200
[  291.468715][ T8480]  exc_page_fault+0x6f/0xd0
[  291.468740][ T8480]  asm_exc_page_fault+0x26/0x30
[  291.468757][ T8480] RIP: 0010:rep_movs_alternative+0x30/0x90
[  291.468776][ T8480] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  291.468794][ T8480] RSP: 0018:ffffc90003b9fbf8 EFLAGS: 00050216
[  291.468809][ T8480] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000026
[  291.468819][ T8480] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003b9fd90
[  291.468829][ T8480] RBP: 0000000000000026 R08: 0000000000000001 R09: fffff52000773fb6
[  291.468839][ T8480] R10: ffffc90003b9fdb5 R11: 0000000000000000 R12: 0000000000000000
[  291.468850][ T8480] R13: ffffc90003b9fd90 R14: 0000000000000026 R15: ffffc90003b9fd90
[  291.468872][ T8480]  _copy_from_user+0x98/0xd0
[  291.468897][ T8480]  __sys_bpf+0x243/0x4b90
[  291.468916][ T8480]  ? __pfx___sys_bpf+0x10/0x10
[  291.468931][ T8480]  ? proc_fail_nth_write+0x9f/0x220
[  291.468958][ T8480]  ? find_held_lock+0x2b/0x80
[  291.468983][ T8480]  ? find_held_lock+0x2b/0x80
[  291.469003][ T8480]  ? ksys_write+0x190/0x250
[  291.469022][ T8480]  ? ksys_write+0x190/0x250
[  291.469066][ T8480]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  291.469091][ T8480]  ? __pfx_vfs_write+0x3/0x10
[  291.469110][ T8480]  ? __fget_files+0x215/0x3d0
[  291.469142][ T8480]  ? fput+0x79/0x100
[  291.469165][ T8480]  ? ksys_write+0x1ac/0x250
[  291.469184][ T8480]  ? __pfx_ksys_write+0x10/0x10
[  291.469208][ T8480]  __x64_sys_bpf+0x7b/0xc0
[  291.469225][ T8480]  ? lockdep_hardirqs_on+0x78/0x100
[  291.469249][ T8480]  do_syscall_64+0x115/0x840
[  291.469272][ T8480]  ? clear_bhb_loop+0x40/0x90
[  291.469293][ T8480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.469311][ T8480] RIP: 0033:0x7f83f799ce59
[  291.469325][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.469342][ T8480] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  291.469357][ T8480] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  291.469368][ T8480] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000012
[  291.469378][ T8480] RBP: 00007f83f88b5090 R08: 0000000000000000 R09: 0000000000000000
[  291.469388][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.469398][ T8480] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  291.469420][ T8480]  </TASK>
[  292.246837][ T8483] netlink: 326 bytes leftover after parsing attributes in process `syz.1.559'.
[  292.500950][ T8491] i2c i2c-0: new_device: Can't parse I2C address
[  297.844675][ T8566] .^: entered promiscuous mode
[  297.970018][ T8569] FAULT_INJECTION: forcing a failure.
[  297.970018][ T8569] name failslab, interval 1, probability 0, space 0, times 0
[  298.091744][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.3.576 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  298.091778][ T8569] Tainted: [U]=USER
[  298.091784][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  298.091795][ T8569] Call Trace:
[  298.091801][ T8569]  <TASK>
[  298.091809][ T8569]  dump_stack_lvl+0x100/0x190
[  298.091853][ T8569]  should_fail_ex.cold+0x5/0xa
[  298.091878][ T8569]  should_failslab+0xc2/0x120
[  298.091901][ T8569]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  298.091922][ T8569]  ? nf_log_net_init+0x9f/0x450
[  298.091950][ T8569]  ? __pfx_nf_log_net_init+0x10/0x10
[  298.091976][ T8569]  kmemdup_noprof+0x29/0x60
[  298.091997][ T8569]  nf_log_net_init+0x9f/0x450
[  298.092025][ T8569]  ? __pfx_nf_log_net_init+0x10/0x10
[  298.092051][ T8569]  ops_init+0x1e2/0x5f0
[  298.092075][ T8569]  setup_net+0x118/0x3a0
[  298.092096][ T8569]  ? __pfx_setup_net+0x10/0x10
[  298.092117][ T8569]  ? mutex_init_lockdep+0xf1/0x120
[  298.092139][ T8569]  copy_net_ns+0x46f/0x7c0
[  298.092164][ T8569]  create_new_namespaces+0x3ea/0xac0
[  298.092193][ T8569]  unshare_nsproxy_namespaces+0xf2/0x220
[  298.092219][ T8569]  ksys_unshare+0x438/0xab0
[  298.092247][ T8569]  ? __pfx_ksys_unshare+0x10/0x10
[  298.092273][ T8569]  ? xfd_validate_state+0x129/0x190
[  298.092299][ T8569]  __x64_sys_unshare+0x31/0x40
[  298.092326][ T8569]  do_syscall_64+0x115/0x840
[  298.092353][ T8569]  ? clear_bhb_loop+0x40/0x90
[  298.092376][ T8569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.092396][ T8569] RIP: 0033:0x7f83f799ce59
[  298.092414][ T8569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.092432][ T8569] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  298.092451][ T8569] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  298.092464][ T8569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  298.092475][ T8569] RBP: 00007f83f7a32d6f R08: 0000000000000000 R09: 0000000000000000
[  298.092486][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.092496][ T8569] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  298.092519][ T8569]  </TASK>
[  302.151649][   T30] audit: type=1800 audit(1781277901.419:11): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="features" dev="configfs" ino=24291 res=0 errno=0
[  302.729758][ T8621] i2c i2c-0: new_device: Can't parse I2C address
[  302.928747][ T8632] deleting an unspecified loop device is not supported.
[  304.753341][ T8648] FAULT_INJECTION: forcing a failure.
[  304.753341][ T8648] name failslab, interval 1, probability 0, space 0, times 0
[  304.825535][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.3.591 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  304.825567][ T8648] Tainted: [U]=USER
[  304.825573][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  304.825584][ T8648] Call Trace:
[  304.825590][ T8648]  <TASK>
[  304.825598][ T8648]  dump_stack_lvl+0x100/0x190
[  304.825632][ T8648]  should_fail_ex.cold+0x5/0xa
[  304.825654][ T8648]  should_failslab+0xc2/0x120
[  304.825676][ T8648]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  304.825704][ T8648]  ? posix_lock_inode+0x5b2/0x2420
[  304.825727][ T8648]  ? lockdep_init_map_type+0x5c/0x250
[  304.825759][ T8648]  posix_lock_inode+0x5b2/0x2420
[  304.825793][ T8648]  ? __pfx_posix_lock_inode+0x10/0x10
[  304.825823][ T8648]  vfs_lock_file+0xfb/0x150
[  304.825848][ T8648]  fcntl_setlk+0x768/0xe20
[  304.825875][ T8648]  ? __pfx_fcntl_setlk+0x10/0x10
[  304.825903][ T8648]  ? __might_fault+0xc5/0x140
[  304.825929][ T8648]  ? __might_fault+0xc5/0x140
[  304.825964][ T8648]  do_fcntl+0xf39/0x1670
[  304.825991][ T8648]  ? __pfx_do_fcntl+0x10/0x10
[  304.826016][ T8648]  ? __fget_files+0x215/0x3d0
[  304.826044][ T8648]  ? tomoyo_file_fcntl+0x6c/0xc0
[  304.826065][ T8648]  __x64_sys_fcntl+0x163/0x200
[  304.826094][ T8648]  do_syscall_64+0x115/0x840
[  304.826119][ T8648]  ? clear_bhb_loop+0x40/0x90
[  304.826141][ T8648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.826159][ T8648] RIP: 0033:0x7f83f799ce59
[  304.826175][ T8648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.826193][ T8648] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  304.826211][ T8648] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  304.826222][ T8648] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 000000000000000e
[  304.826233][ T8648] RBP: 00007f83f7a32d6f R08: 0000000000000000 R09: 0000000000000000
[  304.826243][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.826253][ T8648] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  304.826276][ T8648]  </TASK>
[  305.905577][ T8666] mmap: syz.3.594 (8666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  307.202958][ T8689] .^: entered promiscuous mode
[  310.289714][ T8746] FAULT_INJECTION: forcing a failure.
[  310.289714][ T8746] name failslab, interval 1, probability 0, space 0, times 0
[  310.460989][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.1.614 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  310.461022][ T8746] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  310.461029][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  310.461040][ T8746] Call Trace:
[  310.461047][ T8746]  <TASK>
[  310.461054][ T8746]  dump_stack_lvl+0x100/0x190
[  310.461090][ T8746]  should_fail_ex.cold+0x5/0xa
[  310.461112][ T8746]  should_failslab+0xc2/0x120
[  310.461135][ T8746]  __kvmalloc_node_noprof+0xfa/0xa00
[  310.461154][ T8746]  ? io_alloc_cache_init+0x38/0x170
[  310.461177][ T8746]  ? lockdep_set_lock_cmp_fn+0xc0/0xe0
[  310.461209][ T8746]  io_alloc_cache_init+0x38/0x170
[  310.461232][ T8746]  io_uring_setup.cold+0x3eb/0x1c6e
[  310.461263][ T8746]  ? __pfx_io_uring_setup+0x10/0x10
[  310.461292][ T8746]  ? do_futex+0x192/0x350
[  310.461312][ T8746]  ? __pfx_do_futex+0x10/0x10
[  310.461338][ T8746]  ? xfd_validate_state+0x129/0x190
[  310.461355][ T8746]  ? ksys_write+0x1ac/0x250
[  310.461381][ T8746]  __x64_sys_io_uring_setup+0xc2/0x170
[  310.461409][ T8746]  do_syscall_64+0x115/0x840
[  310.461433][ T8746]  ? clear_bhb_loop+0x40/0x90
[  310.461455][ T8746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.461473][ T8746] RIP: 0033:0x7fecca39ce59
[  310.461488][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.461506][ T8746] RSP: 002b:00007feccb230028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  310.461524][ T8746] RAX: ffffffffffffffda RBX: 00007fecca616090 RCX: 00007fecca39ce59
[  310.461535][ T8746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[  310.461545][ T8746] RBP: 00007fecca432d6f R08: 0000000000000000 R09: 0000000000000000
[  310.461555][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.461566][ T8746] R13: 00007fecca616128 R14: 00007fecca616090 R15: 00007ffe9b85b008
[  310.461587][ T8746]  </TASK>
[  312.157775][ T8771] FAULT_INJECTION: forcing a failure.
[  312.157775][ T8771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.258774][ T8771] CPU: 0 UID: 0 PID: 8771 Comm: syz.1.618 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  312.258806][ T8771] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  312.258812][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  312.258823][ T8771] Call Trace:
[  312.258829][ T8771]  <TASK>
[  312.258836][ T8771]  dump_stack_lvl+0x100/0x190
[  312.258869][ T8771]  should_fail_ex.cold+0x5/0xa
[  312.258892][ T8771]  _copy_from_iter+0x1f4/0x1690
[  312.258919][ T8771]  ? _copy_from_iter+0x270/0x1690
[  312.258944][ T8771]  ? __pfx__copy_from_iter+0x10/0x10
[  312.258971][ T8771]  ? __pfx__copy_from_iter+0x10/0x10
[  312.259000][ T8771]  copy_page_from_iter+0x238/0x300
[  312.259027][ T8771]  skb_copy_datagram_from_iter+0x399/0x720
[  312.259060][ T8771]  tun_get_user+0x1889/0x3c20
[  312.259088][ T8771]  ? __pfx_tun_get_user+0x10/0x10
[  312.259108][ T8771]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  312.259131][ T8771]  ? find_held_lock+0x2b/0x80
[  312.259153][ T8771]  ? tun_get+0x191/0x370
[  312.259167][ T8771]  ? tun_get+0x191/0x370
[  312.259188][ T8771]  tun_chr_write_iter+0xdc/0x200
[  312.259208][ T8771]  vfs_write+0x6ac/0x1070
[  312.259229][ T8771]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  312.259250][ T8771]  ? __pfx_vfs_write+0x10/0x10
[  312.259268][ T8771]  ? find_held_lock+0x2b/0x80
[  312.259301][ T8771]  __x64_sys_pwrite64+0x1eb/0x250
[  312.259327][ T8771]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  312.259350][ T8771]  ? rcu_is_watching+0x12/0xc0
[  312.259379][ T8771]  do_syscall_64+0x115/0x840
[  312.259404][ T8771]  ? clear_bhb_loop+0x40/0x90
[  312.259426][ T8771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.259443][ T8771] RIP: 0033:0x7fecca39ce59
[  312.259459][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  312.259477][ T8771] RSP: 002b:00007feccb230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  312.259494][ T8771] RAX: ffffffffffffffda RBX: 00007fecca616090 RCX: 00007fecca39ce59
[  312.259505][ T8771] RDX: 000000000008fdef RSI: 0000200000000340 RDI: 00000000000000c8
[  312.259516][ T8771] RBP: 00007feccb230090 R08: 0000000000000000 R09: 0000000000000000
[  312.259526][ T8771] R10: 4000000000000007 R11: 0000000000000246 R12: 0000000000000002
[  312.259536][ T8771] R13: 00007fecca616128 R14: 00007fecca616090 R15: 00007ffe9b85b008
[  312.259558][ T8771]  </TASK>
[  312.859201][ T8775] i2c i2c-0: new_device: Can't parse I2C address
[  314.058795][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'.
[  315.294896][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  315.451332][ T8832] HfR: entered promiscuous mode
[  316.331864][ T8849] hub 1-0:1.0: USB hub found
[  316.394743][ T8849] hub 1-0:1.0: 1 port detected
[  317.439639][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  317.448569][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  319.108059][ T8900] FAULT_INJECTION: forcing a failure.
[  319.108059][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.187327][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.3.644 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  319.187359][ T8900] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  319.187365][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  319.187375][ T8900] Call Trace:
[  319.187381][ T8900]  <TASK>
[  319.187388][ T8900]  dump_stack_lvl+0x100/0x190
[  319.187423][ T8900]  should_fail_ex.cold+0x5/0xa
[  319.187446][ T8900]  _copy_to_user+0x32/0xd0
[  319.187473][ T8900]  simple_read_from_buffer+0xcb/0x170
[  319.187496][ T8900]  proc_fail_nth_read+0x1af/0x230
[  319.187524][ T8900]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  319.187554][ T8900]  ? rw_verify_area+0xce/0x6d0
[  319.187572][ T8900]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  319.187599][ T8900]  vfs_read+0x1e4/0xb30
[  319.187621][ T8900]  ? __pfx_vfs_read+0x10/0x10
[  319.187640][ T8900]  ? __fget_files+0x215/0x3d0
[  319.187665][ T8900]  ? __fget_files+0x21f/0x3d0
[  319.187691][ T8900]  ksys_read+0x12a/0x250
[  319.187710][ T8900]  ? __pfx_ksys_read+0x10/0x10
[  319.187731][ T8900]  ? rcu_is_watching+0x12/0xc0
[  319.187754][ T8900]  do_syscall_64+0x115/0x840
[  319.187786][ T8900]  ? clear_bhb_loop+0x40/0x90
[  319.187807][ T8900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.187825][ T8900] RIP: 0033:0x7f83f795d68e
[  319.187840][ T8900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  319.187857][ T8900] RSP: 002b:00007f83f88b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  319.187875][ T8900] RAX: ffffffffffffffda RBX: 00007f83f88b56c0 RCX: 00007f83f795d68e
[  319.187886][ T8900] RDX: 000000000000000f RSI: 00007f83f88b50a0 RDI: 0000000000000003
[  319.187896][ T8900] RBP: 00007f83f88b5090 R08: 0000000000000000 R09: 0000000000000000
[  319.187906][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.187916][ T8900] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  319.187938][ T8900]  </TASK>
[  319.835525][ T8913] netlink: 202 bytes leftover after parsing attributes in process `syz.0.646'.
[  320.256581][ T8922] zero sized request
[  320.295608][ T8922] zero sized request
[  321.231714][ T8943] FAULT_INJECTION: forcing a failure.
[  321.231714][ T8943] name failslab, interval 1, probability 0, space 0, times 0
[  321.368156][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.2.654 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  321.368192][ T8943] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  321.368199][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  321.368211][ T8943] Call Trace:
[  321.368217][ T8943]  <TASK>
[  321.368225][ T8943]  dump_stack_lvl+0x100/0x190
[  321.368262][ T8943]  should_fail_ex.cold+0x5/0xa
[  321.368286][ T8943]  should_failslab+0xc2/0x120
[  321.368309][ T8943]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  321.368339][ T8943]  ? security_inode_alloc+0x3b/0x2c0
[  321.368360][ T8943]  ? lockdep_init_map_type+0x5c/0x250
[  321.368394][ T8943]  security_inode_alloc+0x3b/0x2c0
[  321.368416][ T8943]  inode_init_always_gfp+0xc77/0xfb0
[  321.368443][ T8943]  alloc_inode+0x8e/0x250
[  321.368473][ T8943]  sock_alloc+0x44/0x280
[  321.368493][ T8943]  ? security_socket_create+0x7f/0x250
[  321.368513][ T8943]  sock_create_lite+0x82/0x120
[  321.368537][ T8943]  __netlink_kernel_create+0xbd/0x750
[  321.368564][ T8943]  ? __pfx___netlink_kernel_create+0x10/0x10
[  321.368595][ T8943]  ? __pfx_genl_pernet_init+0x10/0x10
[  321.368622][ T8943]  genl_pernet_init+0xbd/0x160
[  321.368649][ T8943]  ? __pfx_genl_pernet_init+0x10/0x10
[  321.368676][ T8943]  ? lockdep_init_map_type+0x5c/0x250
[  321.368734][ T8943]  ? __pfx_genl_rcv+0x10/0x10
[  321.368761][ T8943]  ? __pfx_genl_bind+0x10/0x10
[  321.368786][ T8943]  ? __pfx_genl_unbind+0x10/0x10
[  321.368811][ T8943]  ? __pfx_genl_release+0x10/0x10
[  321.368840][ T8943]  ? mutex_init_lockdep+0xf1/0x120
[  321.368860][ T8943]  ops_init+0x1e2/0x5f0
[  321.368883][ T8943]  setup_net+0x118/0x3a0
[  321.368904][ T8943]  ? __pfx_setup_net+0x10/0x10
[  321.368924][ T8943]  ? mutex_init_lockdep+0xf1/0x120
[  321.368946][ T8943]  copy_net_ns+0x46f/0x7c0
[  321.368971][ T8943]  create_new_namespaces+0x3ea/0xac0
[  321.369000][ T8943]  unshare_nsproxy_namespaces+0xf2/0x220
[  321.369026][ T8943]  ksys_unshare+0x438/0xab0
[  321.369055][ T8943]  ? __pfx_ksys_unshare+0x10/0x10
[  321.369081][ T8943]  ? xfd_validate_state+0x129/0x190
[  321.369108][ T8943]  __x64_sys_unshare+0x31/0x40
[  321.369134][ T8943]  do_syscall_64+0x115/0x840
[  321.369165][ T8943]  ? clear_bhb_loop+0x40/0x90
[  321.369188][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.369208][ T8943] RIP: 0033:0x7fc5f0b9ce59
[  321.369225][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.369243][ T8943] RSP: 002b:00007fc5f1b02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  321.369262][ T8943] RAX: ffffffffffffffda RBX: 00007fc5f0e15fa0 RCX: 00007fc5f0b9ce59
[  321.369274][ T8943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  321.369286][ T8943] RBP: 00007fc5f0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  321.369297][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  321.369307][ T8943] R13: 00007fc5f0e16038 R14: 00007fc5f0e15fa0 R15: 00007ffca12dc628
[  321.369332][ T8943]  </TASK>
[  322.763087][ T8955] FAULT_INJECTION: forcing a failure.
[  322.763087][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.845263][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.0.658 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  322.845296][ T8955] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  322.845302][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  322.845312][ T8955] Call Trace:
[  322.845319][ T8955]  <TASK>
[  322.845326][ T8955]  dump_stack_lvl+0x100/0x190
[  322.845360][ T8955]  should_fail_ex.cold+0x5/0xa
[  322.845382][ T8955]  _copy_to_user+0x32/0xd0
[  322.845412][ T8955]  simple_read_from_buffer+0xcb/0x170
[  322.845435][ T8955]  proc_fail_nth_read+0x1af/0x230
[  322.845465][ T8955]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.845494][ T8955]  ? rw_verify_area+0xce/0x6d0
[  322.845511][ T8955]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.845538][ T8955]  vfs_read+0x1e4/0xb30
[  322.845560][ T8955]  ? __pfx_vfs_read+0x10/0x10
[  322.845579][ T8955]  ? __fget_files+0x215/0x3d0
[  322.845604][ T8955]  ? __fget_files+0x21f/0x3d0
[  322.845629][ T8955]  ksys_read+0x12a/0x250
[  322.845648][ T8955]  ? __pfx_ksys_read+0x10/0x10
[  322.845670][ T8955]  ? rcu_is_watching+0x12/0xc0
[  322.845693][ T8955]  do_syscall_64+0x115/0x840
[  322.845717][ T8955]  ? clear_bhb_loop+0x40/0x90
[  322.845739][ T8955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.845757][ T8955] RIP: 0033:0x7f777a55d68e
[  322.845772][ T8955] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  322.845789][ T8955] RSP: 002b:00007f777b414fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  322.845807][ T8955] RAX: ffffffffffffffda RBX: 00007f777b4156c0 RCX: 00007f777a55d68e
[  322.845818][ T8955] RDX: 000000000000000f RSI: 00007f777b4150a0 RDI: 0000000000000004
[  322.845828][ T8955] RBP: 00007f777b415090 R08: 0000000000000000 R09: 0000000000000000
[  322.845839][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.845855][ T8955] R13: 00007f777a816038 R14: 00007f777a815fa0 R15: 00007ffd239ee478
[  322.845877][ T8955]  </TASK>
[  324.416168][ T8961] zero sized request
[  324.430088][ T8961] zero sized request
[  324.878137][ T8971] netlink: 202 bytes leftover after parsing attributes in process `syz.2.663'.
[  325.106512][ T8974] .^: entered promiscuous mode
[  326.547583][ T8998] zero sized request
[  326.566576][ T8998] zero sized request
[  327.067145][ T9007] MTRR 0 not used
[  328.199921][ T9035] random: crng reseeded on system resumption
[  329.982289][ T9077] FAULT_INJECTION: forcing a failure.
[  329.982289][ T9077] name failslab, interval 1, probability 0, space 0, times 0
[  330.067573][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: syz.0.690 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  330.067609][ T9077] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  330.067615][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  330.067625][ T9077] Call Trace:
[  330.067632][ T9077]  <TASK>
[  330.067639][ T9077]  dump_stack_lvl+0x100/0x190
[  330.067680][ T9077]  should_fail_ex.cold+0x5/0xa
[  330.067703][ T9077]  ? iter_file_splice_write+0x1d8/0x10a0
[  330.067726][ T9077]  should_failslab+0xc2/0x120
[  330.067747][ T9077]  __kmalloc_noprof+0xe0/0x850
[  330.067780][ T9077]  iter_file_splice_write+0x1d8/0x10a0
[  330.067806][ T9077]  ? copy_splice_read+0x690/0xb90
[  330.067827][ T9077]  ? copy_splice_read+0x734/0xb90
[  330.067855][ T9077]  ? __pfx_iter_file_splice_write+0x10/0x10
[  330.067878][ T9077]  ? __lock_acquire+0x4a5/0x2630
[  330.067908][ T9077]  ? __pfx_copy_splice_read+0x10/0x10
[  330.067941][ T9077]  ? __pfx_iter_file_splice_write+0x10/0x10
[  330.067966][ T9077]  direct_splice_actor+0x192/0x6c0
[  330.067991][ T9077]  splice_direct_to_actor+0x345/0xa30
[  330.068016][ T9077]  ? __pfx_direct_splice_actor+0x10/0x10
[  330.068042][ T9077]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  330.068072][ T9077]  do_splice_direct+0x174/0x240
[  330.068095][ T9077]  ? __pfx_do_splice_direct+0x10/0x10
[  330.068118][ T9077]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  330.068144][ T9077]  ? rw_verify_area+0xce/0x6d0
[  330.068163][ T9077]  do_sendfile+0xadc/0xe20
[  330.068188][ T9077]  ? __pfx_do_sendfile+0x10/0x10
[  330.068207][ T9077]  ? __fget_files+0x21f/0x3d0
[  330.068234][ T9077]  __x64_sys_sendfile64+0x1d8/0x220
[  330.068257][ T9077]  ? ksys_write+0x1ac/0x250
[  330.068277][ T9077]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  330.068304][ T9077]  ? rcu_is_watching+0x12/0xc0
[  330.068326][ T9077]  do_syscall_64+0x115/0x840
[  330.068351][ T9077]  ? clear_bhb_loop+0x40/0x90
[  330.068373][ T9077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.068391][ T9077] RIP: 0033:0x7f777a59ce59
[  330.068406][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.068424][ T9077] RSP: 002b:00007f777b415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  330.068441][ T9077] RAX: ffffffffffffffda RBX: 00007f777a815fa0 RCX: 00007f777a59ce59
[  330.068452][ T9077] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  330.068462][ T9077] RBP: 00007f777b415090 R08: 0000000000000000 R09: 0000000000000000
[  330.068472][ T9077] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001
[  330.068482][ T9077] R13: 00007f777a816038 R14: 00007f777a815fa0 R15: 00007ffd239ee478
[  330.068505][ T9077]  </TASK>
[  331.241987][   T30] audit: type=1107 audit(1781277930.439:12): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  331.294515][   T30] audit: type=1107 audit(1781277930.509:13): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  332.790641][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'.
[  333.641101][ T9121] futex_wake_op: syz.2.701 tries to shift op by -2048; fix this program
[  333.753012][ T9124] 0x000000000001-0x000000020000 : ""
[  334.154949][ T9124] ftl_cs: FTL header corrupt!
[  334.338725][ T9119] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[9119]
[  334.480137][ T9131] FAULT_INJECTION: forcing a failure.
[  334.480137][ T9131] name failslab, interval 1, probability 0, space 0, times 0
[  334.576284][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.3.704 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  334.576319][ T9131] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  334.576325][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  334.576336][ T9131] Call Trace:
[  334.576343][ T9131]  <TASK>
[  334.576350][ T9131]  dump_stack_lvl+0x100/0x190
[  334.576390][ T9131]  should_fail_ex.cold+0x5/0xa
[  334.576414][ T9131]  should_failslab+0xc2/0x120
[  334.576435][ T9131]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  334.576463][ T9131]  ? posix_lock_inode+0x427/0x2420
[  334.576487][ T9131]  ? locks_get_lock_context+0x34f/0x620
[  334.576510][ T9131]  posix_lock_inode+0x427/0x2420
[  334.576542][ T9131]  ? __pfx_posix_lock_inode+0x10/0x10
[  334.576572][ T9131]  vfs_lock_file+0xfb/0x150
[  334.576597][ T9131]  fcntl_setlk+0x768/0xe20
[  334.576631][ T9131]  ? __pfx_fcntl_setlk+0x10/0x10
[  334.576665][ T9131]  ? rep_movs_alternative+0x30/0x90
[  334.576688][ T9131]  do_fcntl+0xf39/0x1670
[  334.576716][ T9131]  ? __pfx_do_fcntl+0x10/0x10
[  334.576742][ T9131]  ? __fget_files+0x215/0x3d0
[  334.576769][ T9131]  ? tomoyo_file_fcntl+0x6c/0xc0
[  334.576790][ T9131]  __x64_sys_fcntl+0x163/0x200
[  334.576820][ T9131]  do_syscall_64+0x115/0x840
[  334.576844][ T9131]  ? clear_bhb_loop+0x40/0x90
[  334.576865][ T9131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.576884][ T9131] RIP: 0033:0x7f83f799ce59
[  334.576899][ T9131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.576917][ T9131] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  334.576935][ T9131] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  334.576947][ T9131] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003
[  334.576957][ T9131] RBP: 00007f83f7a32d6f R08: 0000000000000000 R09: 0000000000000000
[  334.576968][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.576978][ T9131] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  334.577002][ T9131]  </TASK>
[  335.514571][ T9145] netlink: 202 bytes leftover after parsing attributes in process `syz.0.707'.
[  339.328652][ T9191] ima: policy update failed
[  339.358260][   T30] audit: type=1802 audit(1781277938.629:14): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.717" res=0 errno=0
[  340.339878][ T9221] random: crng reseeded on system resumption
[  341.823942][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'.
[  342.004086][ T9234] Process accounting resumed
[  342.496732][ T9251] FAULT_INJECTION: forcing a failure.
[  342.496732][ T9251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.555366][ T9251] CPU: 0 UID: 0 PID: 9251 Comm: syz.0.734 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  342.555399][ T9251] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  342.555406][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  342.555416][ T9251] Call Trace:
[  342.555422][ T9251]  <TASK>
[  342.555429][ T9251]  dump_stack_lvl+0x100/0x190
[  342.555463][ T9251]  should_fail_ex.cold+0x5/0xa
[  342.555493][ T9251]  _copy_to_iter+0x1f3/0x1720
[  342.555519][ T9251]  ? aa_file_perm+0x7f3/0x14d0
[  342.555548][ T9251]  ? __pfx__copy_to_iter+0x10/0x10
[  342.555574][ T9251]  ? __pfx_aa_file_perm+0x10/0x10
[  342.555607][ T9251]  seq_read_iter+0x691/0x1270
[  342.555625][ T9251]  ? lock_acquire+0x1b1/0x370
[  342.555660][ T9251]  kernfs_fop_read_iter+0x46c/0x610
[  342.555688][ T9251]  ? rw_verify_area+0xce/0x6d0
[  342.555705][ T9251]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  342.555733][ T9251]  vfs_read+0x825/0xb30
[  342.555755][ T9251]  ? __pfx_vfs_read+0x10/0x10
[  342.555788][ T9251]  ksys_read+0x12a/0x250
[  342.555807][ T9251]  ? __pfx_ksys_read+0x10/0x10
[  342.555829][ T9251]  ? rcu_is_watching+0x12/0xc0
[  342.555852][ T9251]  do_syscall_64+0x115/0x840
[  342.555878][ T9251]  ? clear_bhb_loop+0x40/0x90
[  342.555899][ T9251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.555917][ T9251] RIP: 0033:0x7f777a59ce59
[  342.555932][ T9251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.555950][ T9251] RSP: 002b:00007f777b415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.555968][ T9251] RAX: ffffffffffffffda RBX: 00007f777a815fa0 RCX: 00007f777a59ce59
[  342.555979][ T9251] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000003
[  342.555989][ T9251] RBP: 00007f777b415090 R08: 0000000000000000 R09: 0000000000000000
[  342.555999][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.556009][ T9251] R13: 00007f777a816038 R14: 00007f777a815fa0 R15: 00007ffd239ee478
[  342.556032][ T9251]  </TASK>
[  344.011869][ T9276] FAULT_INJECTION: forcing a failure.
[  344.011869][ T9276] name failslab, interval 1, probability 0, space 0, times 0
[  344.131108][ T9276] CPU: 0 UID: 0 PID: 9276 Comm: syz.3.739 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  344.131140][ T9276] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  344.131148][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  344.131158][ T9276] Call Trace:
[  344.131164][ T9276]  <TASK>
[  344.131171][ T9276]  dump_stack_lvl+0x100/0x190
[  344.131205][ T9276]  should_fail_ex.cold+0x5/0xa
[  344.131229][ T9276]  should_failslab+0xc2/0x120
[  344.131252][ T9276]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  344.131280][ T9276]  ? alloc_inode+0x68/0x250
[  344.131307][ T9276]  ? simple_start_creating+0xb0/0x110
[  344.131329][ T9276]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  344.131363][ T9276]  alloc_inode+0x68/0x250
[  344.131390][ T9276]  new_inode+0x22/0x1c0
[  344.131419][ T9276]  debugfs_create_symlink+0xd1/0x220
[  344.131440][ T9276]  drm_debugfs_clients_add+0x199/0x210
[  344.131464][ T9276]  drm_file_alloc+0x5c6/0xb40
[  344.131491][ T9276]  drm_open_helper+0x1fc/0x540
[  344.131517][ T9276]  drm_open+0x1a0/0x3e0
[  344.131539][ T9276]  ? __pfx_drm_open+0x10/0x10
[  344.131562][ T9276]  drm_stub_open+0x20f/0x380
[  344.131594][ T9276]  ? __pfx_drm_stub_open+0x10/0x10
[  344.131617][ T9276]  chrdev_open+0x234/0x6a0
[  344.131639][ T9276]  ? __pfx_apparmor_file_open+0x10/0x10
[  344.131660][ T9276]  ? __pfx_chrdev_open+0x10/0x10
[  344.131683][ T9276]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  344.131712][ T9276]  do_dentry_open+0x6ab/0x14d0
[  344.131734][ T9276]  ? __pfx_chrdev_open+0x10/0x10
[  344.131763][ T9276]  vfs_open+0x82/0x3f0
[  344.131792][ T9276]  path_openat+0x208c/0x31a0
[  344.131822][ T9276]  ? __pfx_path_openat+0x10/0x10
[  344.131853][ T9276]  do_file_open+0x20e/0x430
[  344.131877][ T9276]  ? __pfx_do_file_open+0x10/0x10
[  344.131916][ T9276]  ? alloc_fd+0x476/0x790
[  344.131939][ T9276]  ? do_getname+0x191/0x390
[  344.131968][ T9276]  do_sys_openat2+0x10d/0x1e0
[  344.131995][ T9276]  ? __pfx_do_sys_openat2+0x10/0x10
[  344.132024][ T9276]  ? __fget_files+0x21f/0x3d0
[  344.132050][ T9276]  __x64_sys_openat+0x12d/0x210
[  344.132078][ T9276]  ? __pfx___x64_sys_openat+0x10/0x10
[  344.132109][ T9276]  ? rcu_is_watching+0x12/0xc0
[  344.132133][ T9276]  do_syscall_64+0x115/0x840
[  344.132158][ T9276]  ? clear_bhb_loop+0x40/0x90
[  344.132180][ T9276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.132215][ T9276] RIP: 0033:0x7f83f799ce59
[  344.132230][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.132248][ T9276] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  344.132266][ T9276] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  344.132278][ T9276] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  344.132288][ T9276] RBP: 00007f83f7a32d6f R08: 0000000000000000 R09: 0000000000000000
[  344.132299][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.132309][ T9276] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  344.132332][ T9276]  </TASK>
[  344.742849][ T9276] debugfs: out of free dentries, can not create symlink 'device'
[  346.839762][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.850556][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.860952][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.870491][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.882253][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  348.562224][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.587108][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.608498][ T9303] bridge_slave_0: entered allmulticast mode
[  348.638236][ T9303] bridge_slave_0: entered promiscuous mode
[  348.668717][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.696053][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.724349][ T9303] bridge_slave_1: entered allmulticast mode
[  348.756993][ T9303] bridge_slave_1: entered promiscuous mode
[  348.868959][ T9303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.913935][ T9303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.943054][ T5636] Bluetooth: hci4: command tx timeout
[  349.045364][ T9303] team0: Port device team_slave_0 added
[  349.074501][ T9303] team0: Port device team_slave_1 added
[  349.222938][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.250114][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.351781][ T9303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.402530][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.437274][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.560698][ T9303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.679366][ T9340] ima: policy update failed
[  349.724493][   T30] audit: type=1802 audit(1781277948.999:15): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.751" res=0 errno=0
[  349.784775][ T9303] hsr_slave_0: entered promiscuous mode
[  349.812740][ T9303] hsr_slave_1: entered promiscuous mode
[  349.836912][ T9303] debugfs: 'hsr0' already exists in 'hsr'
[  349.865103][ T9303] Cannot create hsr debugfs directory
[  350.320384][ T9351] netlink: 174 bytes leftover after parsing attributes in process `syz.0.753'.
[  350.759333][ T9303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  350.809030][ T9303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  350.835414][ T9303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  350.898768][ T9303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  350.921730][ T9303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  350.964510][ T9303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  350.993362][ T9303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  351.023378][ T5636] Bluetooth: hci4: command tx timeout
[  351.033703][ T9303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  351.299075][ T9303] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.368243][ T9303] 8021q: adding VLAN 0 to HW filter on device team0
[  351.401249][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.408445][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.467300][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.474625][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.577588][ T9303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.103885][ T5636] Bluetooth: hci4: command tx timeout
[  353.344315][ T9303] veth0_vlan: entered promiscuous mode
[  353.406475][ T9303] veth1_vlan: entered promiscuous mode
[  353.525871][ T9303] veth0_macvtap: entered promiscuous mode
[  353.559268][ T9303] veth1_macvtap: entered promiscuous mode
[  353.621156][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.660602][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.704310][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.736348][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.772698][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.803863][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.023658][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.064470][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.146945][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.178462][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.183174][ T5636] Bluetooth: hci4: command tx timeout
[  357.057997][ T9438] netlink: 202 bytes leftover after parsing attributes in process `syz.3.764'.
[  357.814689][ T9454] MTRR 0 not used
[  358.683125][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  358.687821][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  358.688514][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  358.689996][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  358.691240][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.703207][ T5645] Bluetooth: hci5: command tx timeout
[  361.542696][ T9466] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.604861][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.635239][ T9466] bridge_slave_0: entered allmulticast mode
[  361.669125][ T9466] bridge_slave_0: entered promiscuous mode
[  361.712372][ T9466] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.747719][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.781550][ T9466] bridge_slave_1: entered allmulticast mode
[  361.815244][ T9466] bridge_slave_1: entered promiscuous mode
[  361.948932][ T9466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.162172][ T9466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.337701][ T9466] team0: Port device team_slave_0 added
[  362.391263][ T9466] team0: Port device team_slave_1 added
[  362.564982][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.615191][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.782055][ T9466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.793845][ T5645] Bluetooth: hci5: command tx timeout
[  362.929762][ T9466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.960086][ T9466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.024439][ T9521] ACPI: Can not change Invalid GPE/Fixed Event status
[  363.074432][ T9466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.345640][ T9466] hsr_slave_0: entered promiscuous mode
[  363.377603][ T9466] hsr_slave_1: entered promiscuous mode
[  363.400162][ T9466] debugfs: 'hsr0' already exists in 'hsr'
[  363.422689][ T9466] Cannot create hsr debugfs directory
[  363.555608][ T9515] hub 1-0:1.0: USB hub found
[  363.613933][ T9515] hub 1-0:1.0: 1 port detected
[  363.978620][ T9529] FAULT_INJECTION: forcing a failure.
[  363.978620][ T9529] name failslab, interval 1, probability 0, space 0, times 0
[  364.037168][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.0.785 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  364.037199][ T9529] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  364.037205][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  364.037221][ T9529] Call Trace:
[  364.037263][ T9529]  <TASK>
[  364.037285][ T9529]  dump_stack_lvl+0x100/0x190
[  364.037372][ T9529]  should_fail_ex.cold+0x5/0xa
[  364.037415][ T9529]  ? iter_file_splice_write+0x1d8/0x10a0
[  364.037469][ T9529]  should_failslab+0xc2/0x120
[  364.037503][ T9529]  __kmalloc_noprof+0xe0/0x850
[  364.037540][ T9529]  iter_file_splice_write+0x1d8/0x10a0
[  364.037565][ T9529]  ? copy_splice_read+0x690/0xb90
[  364.037585][ T9529]  ? copy_splice_read+0x734/0xb90
[  364.037612][ T9529]  ? __pfx_iter_file_splice_write+0x10/0x10
[  364.037635][ T9529]  ? __lock_acquire+0x4a5/0x2630
[  364.037680][ T9529]  ? __pfx_copy_splice_read+0x10/0x10
[  364.037713][ T9529]  ? __pfx_iter_file_splice_write+0x10/0x10
[  364.037737][ T9529]  direct_splice_actor+0x192/0x6c0
[  364.037761][ T9529]  splice_direct_to_actor+0x345/0xa30
[  364.037785][ T9529]  ? __pfx_direct_splice_actor+0x10/0x10
[  364.037811][ T9529]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  364.037840][ T9529]  do_splice_direct+0x174/0x240
[  364.037862][ T9529]  ? __pfx_do_splice_direct+0x10/0x10
[  364.037885][ T9529]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  364.037910][ T9529]  ? rw_verify_area+0xce/0x6d0
[  364.037934][ T9529]  do_sendfile+0xadc/0xe20
[  364.037958][ T9529]  ? __pfx_do_sendfile+0x10/0x10
[  364.037978][ T9529]  ? __fget_files+0x21f/0x3d0
[  364.038004][ T9529]  __x64_sys_sendfile64+0x1d8/0x220
[  364.038027][ T9529]  ? ksys_write+0x1ac/0x250
[  364.038047][ T9529]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  364.038073][ T9529]  ? rcu_is_watching+0x12/0xc0
[  364.038095][ T9529]  do_syscall_64+0x115/0x840
[  364.038181][ T9529]  ? clear_bhb_loop+0x40/0x90
[  364.038211][ T9529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.038230][ T9529] RIP: 0033:0x7f777a59ce59
[  364.038245][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.038262][ T9529] RSP: 002b:00007f777b415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  364.038285][ T9529] RAX: ffffffffffffffda RBX: 00007f777a815fa0 RCX: 00007f777a59ce59
[  364.038296][ T9529] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  364.038306][ T9529] RBP: 00007f777b415090 R08: 0000000000000000 R09: 0000000000000000
[  364.038316][ T9529] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001
[  364.038327][ T9529] R13: 00007f777a816038 R14: 00007f777a815fa0 R15: 00007ffd239ee478
[  364.038350][ T9529]  </TASK>
[  364.897776][ T5645] Bluetooth: hci5: command tx timeout
[  366.598331][ T9466] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  366.640122][ T9466] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  366.667900][ T9466] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  366.704725][ T9466] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  366.736340][ T9466] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  366.803500][ T9466] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  366.843408][ T9466] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  366.910763][ T9466] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  366.943232][ T5645] Bluetooth: hci5: command tx timeout
[  367.236050][ T9466] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.297365][ T9466] 8021q: adding VLAN 0 to HW filter on device team0
[  367.333057][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.340275][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.417821][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.425178][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.192596][ T9575] FAULT_INJECTION: forcing a failure.
[  368.192596][ T9575] name failslab, interval 1, probability 0, space 0, times 0
[  368.255588][ T9575] CPU: 0 UID: 0 PID: 9575 Comm: syz.3.795 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  368.255620][ T9575] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  368.255626][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  368.255636][ T9575] Call Trace:
[  368.255643][ T9575]  <TASK>
[  368.255649][ T9575]  dump_stack_lvl+0x100/0x190
[  368.255684][ T9575]  should_fail_ex.cold+0x5/0xa
[  368.255707][ T9575]  should_failslab+0xc2/0x120
[  368.255728][ T9575]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  368.255757][ T9575]  ? __alloc_skb+0x140/0x710
[  368.255849][ T9575]  ? __alloc_skb+0x5b7/0x710
[  368.255868][ T9575]  __alloc_skb+0x140/0x710
[  368.255890][ T9575]  ? __alloc_skb+0x5b7/0x710
[  368.255905][ T9575]  ? __pfx___alloc_skb+0x10/0x10
[  368.255922][ T9575]  ? __pfx___might_resched+0x10/0x10
[  368.255946][ T9575]  ? __lock_acquire+0x4a5/0x2630
[  368.255977][ T9575]  netlink_alloc_large_skb+0x69/0x150
[  368.256035][ T9575]  netlink_sendmsg+0x680/0xda0
[  368.256062][ T9575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.256085][ T9575]  ? __import_iovec+0x1d2/0x640
[  368.256178][ T9575]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  368.256230][ T9575]  ____sys_sendmsg+0x9e1/0xb70
[  368.256273][ T9575]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.256298][ T9575]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.256330][ T9575]  ___sys_sendmsg+0x190/0x1e0
[  368.256355][ T9575]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.256402][ T9575]  __sys_sendmsg+0x170/0x220
[  368.256421][ T9575]  ? __pfx___sys_sendmsg+0x10/0x10
[  368.256448][ T9575]  ? rcu_is_watching+0x12/0xc0
[  368.256474][ T9575]  do_syscall_64+0x115/0x840
[  368.256499][ T9575]  ? clear_bhb_loop+0x40/0x90
[  368.256520][ T9575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.256538][ T9575] RIP: 0033:0x7f83f799ce59
[  368.256554][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.256572][ T9575] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.256589][ T9575] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  368.256601][ T9575] RDX: 00000000140080e4 RSI: 0000200000000100 RDI: 0000000000000003
[  368.256611][ T9575] RBP: 00007f83f88b5090 R08: 0000000000000000 R09: 0000000000000000
[  368.256621][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.256632][ T9575] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  368.256654][ T9575]  </TASK>
[  369.447876][ T9466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.221844][ T9466] veth0_vlan: entered promiscuous mode
[  370.277901][ T9466] veth1_vlan: entered promiscuous mode
[  370.392608][ T9466] veth0_macvtap: entered promiscuous mode
[  370.436167][ T9466] veth1_macvtap: entered promiscuous mode
[  370.511240][ T9466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.565506][ T9466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.620126][  T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.658706][  T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.701716][  T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.740553][  T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.956233][ T9579] Process accounting resumed
[  371.021628][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.101887][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.228593][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.271630][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.680789][ T9606] random: crng reseeded on system resumption
[  376.404460][ T9661] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  377.017719][ T9540] Process accounting paused
[  378.874790][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  378.881177][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  379.132326][ T9673] netlink: 202 bytes leftover after parsing attributes in process `syz.3.815'.
[  380.249729][ T9688] program syz.3.817 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  380.289703][ T9689] program syz.3.817 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  383.148147][ T9727] FAULT_INJECTION: forcing a failure.
[  383.148147][ T9727] name failslab, interval 1, probability 0, space 0, times 0
[  383.237635][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: syz.5.829 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  383.237668][ T9727] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  383.237676][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  383.237686][ T9727] Call Trace:
[  383.237692][ T9727]  <TASK>
[  383.237700][ T9727]  dump_stack_lvl+0x100/0x190
[  383.237739][ T9727]  should_fail_ex.cold+0x5/0xa
[  383.237764][ T9727]  ? __register_sysctl_table+0xbe4/0x1650
[  383.237814][ T9727]  should_failslab+0xc2/0x120
[  383.237837][ T9727]  __kmalloc_noprof+0xe0/0x850
[  383.237871][ T9727]  __register_sysctl_table+0xbe4/0x1650
[  383.237905][ T9727]  ? __pfx___register_sysctl_table+0x10/0x10
[  383.237928][ T9727]  ? is_module_address+0x69/0xf0
[  383.237960][ T9727]  ? register_net_sysctl_sz+0x222/0x430
[  383.238064][ T9727]  ? __asan_memcpy+0x3c/0x60
[  383.238094][ T9727]  nf_log_net_init+0x109/0x450
[  383.238159][ T9727]  ? __pfx_nf_log_net_init+0x10/0x10
[  383.238184][ T9727]  ops_init+0x1e2/0x5f0
[  383.238232][ T9727]  setup_net+0x118/0x3a0
[  383.238252][ T9727]  ? __pfx_setup_net+0x10/0x10
[  383.238272][ T9727]  ? mutex_init_lockdep+0xf1/0x120
[  383.238297][ T9727]  copy_net_ns+0x46f/0x7c0
[  383.238321][ T9727]  create_new_namespaces+0x3ea/0xac0
[  383.238365][ T9727]  unshare_nsproxy_namespaces+0xf2/0x220
[  383.238390][ T9727]  ksys_unshare+0x438/0xab0
[  383.238422][ T9727]  ? __pfx_ksys_unshare+0x10/0x10
[  383.238446][ T9727]  ? xfd_validate_state+0x129/0x190
[  383.238478][ T9727]  ? exit_to_user_mode_loop+0xf3/0x670
[  383.238514][ T9727]  __x64_sys_unshare+0x31/0x40
[  383.238540][ T9727]  do_syscall_64+0x115/0x840
[  383.238565][ T9727]  ? clear_bhb_loop+0x40/0x90
[  383.238588][ T9727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.238606][ T9727] RIP: 0033:0x7f3db579ce59
[  383.238623][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.238640][ T9727] RSP: 002b:00007f3db65d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  383.238658][ T9727] RAX: ffffffffffffffda RBX: 00007f3db5a16090 RCX: 00007f3db579ce59
[  383.238670][ T9727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  383.238681][ T9727] RBP: 00007f3db5832d6f R08: 0000000000000000 R09: 0000000000000000
[  383.238691][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.238701][ T9727] R13: 00007f3db5a16128 R14: 00007f3db5a16090 R15: 00007fff2ec27468
[  383.238726][ T9727]  </TASK>
[  383.768737][ T9727] sysctl could not get directory: /net/netfilter/nf_log -12
[  384.069045][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.146630][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.220058][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.242066][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.263220][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  386.382946][ T5636] Bluetooth: hci6: command tx timeout
[  387.555920][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.591413][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.620752][ T9731] bridge_slave_0: entered allmulticast mode
[  387.639762][ T9731] bridge_slave_0: entered promiscuous mode
[  387.674853][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.708693][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.737897][ T9731] bridge_slave_1: entered allmulticast mode
[  387.777622][ T9731] bridge_slave_1: entered promiscuous mode
[  387.892507][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.936905][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.079963][ T9731] team0: Port device team_slave_0 added
[  388.113855][ T9731] team0: Port device team_slave_1 added
[  388.295605][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.327155][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.389294][ T9793] FAULT_INJECTION: forcing a failure.
[  388.389294][ T9793] name failslab, interval 1, probability 0, space 0, times 0
[  388.427379][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.5.839 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  388.427412][ T9793] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  388.427420][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  388.427430][ T9793] Call Trace:
[  388.427436][ T9793]  <TASK>
[  388.427444][ T9793]  dump_stack_lvl+0x100/0x190
[  388.427479][ T9793]  should_fail_ex.cold+0x5/0xa
[  388.427502][ T9793]  should_failslab+0xc2/0x120
[  388.427524][ T9793]  __kmalloc_cache_noprof+0x7a/0x6f0
[  388.427550][ T9793]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  388.427640][ T9793]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  388.427668][ T9793]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  388.427703][ T9793]  ? trace_contention_end+0x122/0x170
[  388.427721][ T9793]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  388.427748][ T9793]  ? __pfx___mutex_lock+0x10/0x10
[  388.427819][ T9793]  ? __mutex_lock+0x26d/0x1b10
[  388.427847][ T9793]  ? find_held_lock+0x2b/0x80
[  388.427868][ T9793]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  388.427906][ T9793]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  388.427942][ T9793]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  388.427969][ T9793]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  388.427999][ T9793]  snd_pcm_oss_poll+0x417/0xb00
[  388.428023][ T9793]  ? __pfx___pollwait+0x10/0x10
[  388.428045][ T9793]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  388.428068][ T9793]  ? __fget_files+0x21f/0x3d0
[  388.428093][ T9793]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  388.428118][ T9793]  do_select+0xd54/0x1850
[  388.428137][ T9793]  ? do_raw_spin_lock+0x128/0x260
[  388.428174][ T9793]  ? __pfx_do_select+0x10/0x10
[  388.428195][ T9793]  ? __pfx___pollwait+0x10/0x10
[  388.428216][ T9793]  ? __pfx_pollwake+0x10/0x10
[  388.428237][ T9793]  ? __pfx_pollwake+0x10/0x10
[  388.428287][ T9793]  ? find_held_lock+0x2b/0x80
[  388.428307][ T9793]  ? __might_fault+0xc5/0x140
[  388.428333][ T9793]  ? __might_fault+0xc5/0x140
[  388.428367][ T9793]  ? core_sys_select+0x55b/0xbb0
[  388.428386][ T9793]  core_sys_select+0x55b/0xbb0
[  388.428412][ T9793]  ? __pfx_core_sys_select+0x10/0x10
[  388.428437][ T9793]  ? futex_hash_put+0x43/0x50
[  388.428486][ T9793]  ? do_futex+0x192/0x350
[  388.428505][ T9793]  ? __pfx_do_futex+0x10/0x10
[  388.428526][ T9793]  kern_select+0x1d0/0x280
[  388.428548][ T9793]  ? __pfx_kern_select+0x10/0x10
[  388.428569][ T9793]  ? xfd_validate_state+0x129/0x190
[  388.428593][ T9793]  __x64_sys_select+0xbd/0x160
[  388.428612][ T9793]  ? do_syscall_64+0x90/0x840
[  388.428635][ T9793]  ? lockdep_hardirqs_on+0x78/0x100
[  388.428659][ T9793]  do_syscall_64+0x115/0x840
[  388.428683][ T9793]  ? clear_bhb_loop+0x40/0x90
[  388.428704][ T9793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.428722][ T9793] RIP: 0033:0x7f3db579ce59
[  388.428738][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.428756][ T9793] RSP: 002b:00007f3db65d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  388.428774][ T9793] RAX: ffffffffffffffda RBX: 00007f3db5a16090 RCX: 00007f3db579ce59
[  388.428785][ T9793] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  388.428796][ T9793] RBP: 00007f3db5832d6f R08: 0000000000000000 R09: 0000000000000000
[  388.428812][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.428823][ T9793] R13: 00007f3db5a16128 R14: 00007f3db5a16090 R15: 00007fff2ec27468
[  388.428847][ T9793]  </TASK>
[  388.431931][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.798873][ T5636] Bluetooth: hci6: command tx timeout
[  389.829038][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.853450][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.942123][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.318437][ T9731] hsr_slave_0: entered promiscuous mode
[  390.340367][ T9731] hsr_slave_1: entered promiscuous mode
[  390.360567][ T9731] debugfs: 'hsr0' already exists in 'hsr'
[  390.378863][ T9731] Cannot create hsr debugfs directory
[  390.863882][ T5636] Bluetooth: hci6: command tx timeout
[  391.814994][ T9731] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  391.849876][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  391.925267][ T9731] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  391.976121][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  392.014700][ T9731] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  392.050759][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  392.095459][ T9731] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  392.126598][ T9731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  392.257032][ T9826] FAULT_INJECTION: forcing a failure.
[  392.257032][ T9826] name failslab, interval 1, probability 0, space 0, times 0
[  392.400293][ T9835] ubi9: attaching mtd2
[  392.472385][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.4.845 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  392.472417][ T9826] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  392.472424][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  392.472434][ T9826] Call Trace:
[  392.472440][ T9826]  <TASK>
[  392.472447][ T9826]  dump_stack_lvl+0x100/0x190
[  392.472483][ T9826]  should_fail_ex.cold+0x5/0xa
[  392.472505][ T9826]  should_failslab+0xc2/0x120
[  392.472527][ T9826]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  392.472556][ T9826]  ? __d_alloc+0x34/0xa40
[  392.472579][ T9826]  ? lockdep_init_map_type+0x5c/0x250
[  392.472611][ T9826]  __d_alloc+0x34/0xa40
[  392.472636][ T9826]  d_alloc_pseudo+0x1c/0xc0
[  392.472653][ T9826]  alloc_file_pseudo+0xcf/0x230
[  392.472682][ T9826]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  392.472709][ T9826]  ? alloc_fd+0x476/0x790
[  392.472737][ T9826]  sock_alloc_file+0x50/0x210
[  392.472759][ T9826]  __sys_socket+0x1c0/0x260
[  392.472784][ T9826]  ? __pfx___sys_socket+0x10/0x10
[  392.472810][ T9826]  ? ksys_write+0x1ac/0x250
[  392.472836][ T9826]  __x64_sys_socket+0x72/0xb0
[  392.472859][ T9826]  ? lockdep_hardirqs_on+0x78/0x100
[  392.472884][ T9826]  do_syscall_64+0x115/0x840
[  392.472914][ T9826]  ? clear_bhb_loop+0x40/0x90
[  392.472936][ T9826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.472954][ T9826] RIP: 0033:0x7f90fff9ce59
[  392.472970][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.472987][ T9826] RSP: 002b:00007f9100d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  392.473004][ T9826] RAX: ffffffffffffffda RBX: 00007f9100215fa0 RCX: 00007f90fff9ce59
[  392.473016][ T9826] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018
[  392.473026][ T9826] RBP: 00007f9100032d6f R08: 0000000000000000 R09: 0000000000000000
[  392.473036][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.473045][ T9826] R13: 00007f9100216038 R14: 00007f9100215fa0 R15: 00007ffe41470618
[  392.473068][ T9826]  </TASK>
[  392.988324][ T5636] Bluetooth: hci6: command tx timeout
[  393.326494][ T9835] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74)
[  393.432211][ T9731] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.805545][ T9731] 8021q: adding VLAN 0 to HW filter on device team0
[  393.861020][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.868224][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.947716][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.954968][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.973803][ T9731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.497773][ T9731] veth0_vlan: entered promiscuous mode
[  397.955010][ T9731] veth1_vlan: entered promiscuous mode
[  398.005905][ T9857] FAULT_INJECTION: forcing a failure.
[  398.005905][ T9857] name failslab, interval 1, probability 0, space 0, times 0
[  398.125307][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.5.849 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  398.125341][ T9857] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  398.125348][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  398.125359][ T9857] Call Trace:
[  398.125365][ T9857]  <TASK>
[  398.125372][ T9857]  dump_stack_lvl+0x100/0x190
[  398.125406][ T9857]  should_fail_ex.cold+0x5/0xa
[  398.125430][ T9857]  should_failslab+0xc2/0x120
[  398.125452][ T9857]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  398.125480][ T9857]  ? posix_lock_inode+0x5b2/0x2420
[  398.125522][ T9857]  ? lockdep_init_map_type+0x5c/0x250
[  398.125553][ T9857]  posix_lock_inode+0x5b2/0x2420
[  398.125585][ T9857]  ? __pfx_posix_lock_inode+0x10/0x10
[  398.125615][ T9857]  vfs_lock_file+0xfb/0x150
[  398.125641][ T9857]  fcntl_setlk+0x768/0xe20
[  398.125667][ T9857]  ? __pfx_fcntl_setlk+0x10/0x10
[  398.125696][ T9857]  ? __might_fault+0xc5/0x140
[  398.125721][ T9857]  ? __might_fault+0xc5/0x140
[  398.125756][ T9857]  do_fcntl+0xf39/0x1670
[  398.125782][ T9857]  ? __pfx_do_fcntl+0x10/0x10
[  398.125807][ T9857]  ? __fget_files+0x215/0x3d0
[  398.125833][ T9857]  ? tomoyo_file_fcntl+0x6c/0xc0
[  398.125894][ T9857]  __x64_sys_fcntl+0x163/0x200
[  398.125923][ T9857]  do_syscall_64+0x115/0x840
[  398.125949][ T9857]  ? clear_bhb_loop+0x40/0x90
[  398.125971][ T9857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.125990][ T9857] RIP: 0033:0x7f3db579ce59
[  398.126005][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.126023][ T9857] RSP: 002b:00007f3db65f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  398.126041][ T9857] RAX: ffffffffffffffda RBX: 00007f3db5a15fa0 RCX: 00007f3db579ce59
[  398.126052][ T9857] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000005
[  398.126063][ T9857] RBP: 00007f3db5832d6f R08: 0000000000000000 R09: 0000000000000000
[  398.126074][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.126084][ T9857] R13: 00007f3db5a16038 R14: 00007f3db5a15fa0 R15: 00007fff2ec27468
[  398.126106][ T9857]  </TASK>
[  399.474593][ T9731] veth0_macvtap: entered promiscuous mode
[  399.536087][ T9731] veth1_macvtap: entered promiscuous mode
[  399.551196][ T9902] netlink: 202 bytes leftover after parsing attributes in process `syz.5.853'.
[  399.625506][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.687357][ T9731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.751556][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.795438][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.861624][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.910462][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.496855][  T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.535063][  T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.127746][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.161429][ T9910] tipc: can't start tipc receive workqueue
[  401.180062][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.981190][ T9932] FAULT_INJECTION: forcing a failure.
[  401.981190][ T9932] name failslab, interval 1, probability 0, space 0, times 0
[  402.021777][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.4.859 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  402.021811][ T9932] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  402.021818][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  402.021829][ T9932] Call Trace:
[  402.021835][ T9932]  <TASK>
[  402.021843][ T9932]  dump_stack_lvl+0x100/0x190
[  402.021878][ T9932]  should_fail_ex.cold+0x5/0xa
[  402.021902][ T9932]  ? constrain_params_by_rules+0x175/0xcc0
[  402.021999][ T9932]  should_failslab+0xc2/0x120
[  402.022022][ T9932]  __kmalloc_noprof+0xe0/0x850
[  402.022058][ T9932]  ? unwind_get_return_address+0x59/0xa0
[  402.022091][ T9932]  constrain_params_by_rules+0x175/0xcc0
[  402.022123][ T9932]  ? stack_trace_save+0x8e/0xc0
[  402.022149][ T9932]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  402.022182][ T9932]  ? __kasan_kmalloc+0xaa/0xb0
[  402.022199][ T9932]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[  402.022224][ T9932]  ? snd_pcm_oss_make_ready+0xeb/0x1b0
[  402.022248][ T9932]  ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  402.022280][ T9932]  ? rcu_is_watching+0x12/0xc0
[  402.022300][ T9932]  ? snd_interval_refine+0x2d0/0x580
[  402.022321][ T9932]  snd_pcm_hw_refine+0x7e7/0xad0
[  402.022352][ T9932]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  402.022385][ T9932]  ? __asan_memset+0x23/0x50
[  402.022411][ T9932]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  402.022438][ T9932]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[  402.022472][ T9932]  ? trace_contention_end+0x122/0x170
[  402.022489][ T9932]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  402.022515][ T9932]  ? __pfx___mutex_lock+0x10/0x10
[  402.022541][ T9932]  ? __mutex_lock+0x26d/0x1b10
[  402.022565][ T9932]  ? find_held_lock+0x2b/0x80
[  402.022585][ T9932]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  402.022608][ T9932]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  402.022643][ T9932]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  402.022669][ T9932]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  402.022699][ T9932]  snd_pcm_oss_poll+0x417/0xb00
[  402.022726][ T9932]  ? __pfx___pollwait+0x10/0x10
[  402.022748][ T9932]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  402.022772][ T9932]  ? __fget_files+0x21f/0x3d0
[  402.022796][ T9932]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  402.022827][ T9932]  do_select+0xd54/0x1850
[  402.022863][ T9932]  ? __pfx_do_select+0x10/0x10
[  402.022884][ T9932]  ? hrtimer_start_range_ns+0x860/0x1a50
[  402.022904][ T9932]  ? __pfx___pollwait+0x10/0x10
[  402.022925][ T9932]  ? __pfx_pollwake+0x10/0x10
[  402.022946][ T9932]  ? __pfx_pollwake+0x10/0x10
[  402.022996][ T9932]  ? find_held_lock+0x2b/0x80
[  402.023016][ T9932]  ? __might_fault+0xc5/0x140
[  402.023042][ T9932]  ? __might_fault+0xc5/0x140
[  402.023081][ T9932]  ? core_sys_select+0x55b/0xbb0
[  402.023101][ T9932]  core_sys_select+0x55b/0xbb0
[  402.023126][ T9932]  ? __pfx_core_sys_select+0x10/0x10
[  402.023170][ T9932]  ? do_futex+0x192/0x350
[  402.023188][ T9932]  ? __pfx_do_futex+0x10/0x10
[  402.023210][ T9932]  kern_select+0x1d0/0x280
[  402.023232][ T9932]  ? __pfx_kern_select+0x10/0x10
[  402.023254][ T9932]  ? xfd_validate_state+0x129/0x190
[  402.023277][ T9932]  __x64_sys_select+0xbd/0x160
[  402.023297][ T9932]  ? do_syscall_64+0x90/0x840
[  402.023320][ T9932]  ? lockdep_hardirqs_on+0x78/0x100
[  402.023345][ T9932]  do_syscall_64+0x115/0x840
[  402.023368][ T9932]  ? clear_bhb_loop+0x40/0x90
[  402.023389][ T9932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.023408][ T9932] RIP: 0033:0x7f90fff9ce59
[  402.023425][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.023442][ T9932] RSP: 002b:00007f90fe1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  402.023460][ T9932] RAX: ffffffffffffffda RBX: 00007f9100216090 RCX: 00007f90fff9ce59
[  402.023472][ T9932] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  402.023482][ T9932] RBP: 00007f9100032d6f R08: 0000000000000000 R09: 0000000000000000
[  402.023493][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.023503][ T9932] R13: 00007f9100216128 R14: 00007f9100216090 R15: 00007ffe41470618
[  402.023527][ T9932]  </TASK>
[  403.148708][ T9921] Process accounting paused
[  403.398806][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'.
[  403.751056][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.862'.
[  405.930585][ T9971] netlink: 202 bytes leftover after parsing attributes in process `syz.4.868'.
[  408.349663][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'.
[  408.629976][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'.
[  409.590377][T10023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  410.754523][T10032] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  411.407617][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.888'.
[  411.689433][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.6.888'.
[  412.689670][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'.
[  412.728624][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'.
[  414.930412][T10109] netlink: 'syz.3.902': attribute type 5 has an invalid length.
[  414.965032][T10109] netlink: 'syz.3.902': attribute type 1 has an invalid length.
[  415.003031][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'.
[  415.337747][T10117] FAULT_INJECTION: forcing a failure.
[  415.337747][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.480439][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.3.904 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  415.480470][T10117] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  415.480477][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  415.480487][T10117] Call Trace:
[  415.480500][T10117]  <TASK>
[  415.480507][T10117]  dump_stack_lvl+0x100/0x190
[  415.480541][T10117]  should_fail_ex.cold+0x5/0xa
[  415.480563][T10117]  _copy_from_iter+0x1f4/0x1690
[  415.480593][T10117]  ? _copy_from_iter+0x270/0x1690
[  415.480617][T10117]  ? __pfx__copy_from_iter+0x10/0x10
[  415.480648][T10117]  ? __pfx__copy_from_iter+0x10/0x10
[  415.480678][T10117]  copy_page_from_iter+0x238/0x300
[  415.480705][T10117]  skb_copy_datagram_from_iter+0x399/0x720
[  415.480740][T10117]  tun_get_user+0x1889/0x3c20
[  415.480831][T10117]  ? __pfx_tun_get_user+0x10/0x10
[  415.480850][T10117]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  415.480897][T10117]  ? find_held_lock+0x2b/0x80
[  415.480919][T10117]  ? tun_get+0x191/0x370
[  415.480933][T10117]  ? tun_get+0x191/0x370
[  415.480954][T10117]  tun_chr_write_iter+0xdc/0x200
[  415.480975][T10117]  vfs_write+0x6ac/0x1070
[  415.480996][T10117]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  415.481017][T10117]  ? __pfx_vfs_write+0x10/0x10
[  415.481035][T10117]  ? find_held_lock+0x2b/0x80
[  415.481069][T10117]  __x64_sys_pwrite64+0x1eb/0x250
[  415.481092][T10117]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  415.481115][T10117]  ? rcu_is_watching+0x12/0xc0
[  415.481137][T10117]  do_syscall_64+0x115/0x840
[  415.481163][T10117]  ? clear_bhb_loop+0x40/0x90
[  415.481184][T10117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.481202][T10117] RIP: 0033:0x7f83f799ce59
[  415.481218][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.481235][T10117] RSP: 002b:00007f83f8894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  415.481252][T10117] RAX: ffffffffffffffda RBX: 00007f83f7c16090 RCX: 00007f83f799ce59
[  415.481264][T10117] RDX: 000000000008fdef RSI: 0000200000000340 RDI: 00000000000000c8
[  415.481274][T10117] RBP: 00007f83f8894090 R08: 0000000000000000 R09: 0000000000000000
[  415.481284][T10117] R10: 4000000000000007 R11: 0000000000000246 R12: 0000000000000002
[  415.481295][T10117] R13: 00007f83f7c16128 R14: 00007f83f7c16090 R15: 00007fffe186bc78
[  415.481317][T10117]  </TASK>
[  415.780648][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'.
[  415.983616][T10119] i2c i2c-0: new_device: Can't parse I2C address
[  416.151349][T10126] FAULT_INJECTION: forcing a failure.
[  416.151349][T10126] name failslab, interval 1, probability 0, space 0, times 0
[  416.195874][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.6.906 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  416.195907][T10126] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  416.195914][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  416.195925][T10126] Call Trace:
[  416.195932][T10126]  <TASK>
[  416.195939][T10126]  dump_stack_lvl+0x100/0x190
[  416.195974][T10126]  should_fail_ex.cold+0x5/0xa
[  416.195997][T10126]  should_failslab+0xc2/0x120
[  416.196019][T10126]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  416.196047][T10126]  ? security_inode_alloc+0x3b/0x2c0
[  416.196124][T10126]  ? lockdep_init_map_type+0x5c/0x250
[  416.196156][T10126]  security_inode_alloc+0x3b/0x2c0
[  416.196176][T10126]  inode_init_always_gfp+0xc77/0xfb0
[  416.196202][T10126]  alloc_inode+0x8e/0x250
[  416.196230][T10126]  sock_alloc+0x44/0x280
[  416.196249][T10126]  ? security_socket_create+0x7f/0x250
[  416.196285][T10126]  __sock_create+0xc2/0x860
[  416.196313][T10126]  __sys_socket+0x14d/0x260
[  416.196338][T10126]  ? __pfx___sys_socket+0x10/0x10
[  416.196368][T10126]  __x64_sys_socket+0x72/0xb0
[  416.196392][T10126]  ? lockdep_hardirqs_on+0x78/0x100
[  416.196417][T10126]  do_syscall_64+0x115/0x840
[  416.196442][T10126]  ? clear_bhb_loop+0x40/0x90
[  416.196464][T10126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.196482][T10126] RIP: 0033:0x7f66d759ce59
[  416.196497][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.196515][T10126] RSP: 002b:00007f66d8428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  416.196533][T10126] RAX: ffffffffffffffda RBX: 00007f66d7815fa0 RCX: 00007f66d759ce59
[  416.196546][T10126] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  416.196556][T10126] RBP: 00007f66d7632d6f R08: 0000000000000000 R09: 0000000000000000
[  416.196566][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.196576][T10126] R13: 00007f66d7816038 R14: 00007f66d7815fa0 R15: 00007ffd28cf61f8
[  416.196598][T10126]  </TASK>
[  416.196624][T10126] socket: no more sockets
[  418.454378][T10145] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  418.479822][T10145] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  418.615273][T10145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  418.638234][T10145] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  418.697962][T10145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  418.718722][T10145] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  418.752696][T10145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  418.781864][T10145] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  418.822412][T10145] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  418.841323][T10145] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  418.885482][T10145] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  418.948465][T10145] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  418.972245][T10145] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  419.023227][T10145] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  419.060346][T10145] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  419.092377][T10145] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  419.167164][T10145] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  419.983523][ T5645] Bluetooth: hci0: command 0x0406 tx timeout
[  420.622977][ T5645] Bluetooth: hci1: command 0x0406 tx timeout
[  420.702935][ T5645] Bluetooth: hci2: command 0x0406 tx timeout
[  420.782843][ T5645] Bluetooth: hci3: command 0x0406 tx timeout
[  420.854242][T10172] FAULT_INJECTION: forcing a failure.
[  420.854242][T10172] name failslab, interval 1, probability 0, space 0, times 0
[  420.869532][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  420.934027][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.5.916 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  420.934067][T10172] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  420.934074][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  420.934086][T10172] Call Trace:
[  420.934092][T10172]  <TASK>
[  420.934100][T10172]  dump_stack_lvl+0x100/0x190
[  420.934178][T10172]  should_fail_ex.cold+0x5/0xa
[  420.934218][T10172]  ? constrain_params_by_rules+0x175/0xcc0
[  420.934275][T10172]  should_failslab+0xc2/0x120
[  420.934313][T10172]  __kmalloc_noprof+0xe0/0x850
[  420.934344][T10172]  ? unwind_get_return_address+0x59/0xa0
[  420.934387][T10172]  constrain_params_by_rules+0x175/0xcc0
[  420.934420][T10172]  ? stack_trace_save+0x8e/0xc0
[  420.934456][T10172]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  420.934492][T10172]  ? __kasan_kmalloc+0xaa/0xb0
[  420.934509][T10172]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[  420.934544][T10172]  ? snd_pcm_oss_make_ready+0xeb/0x1b0
[  420.934567][T10172]  ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  420.934599][T10172]  ? rcu_is_watching+0x12/0xc0
[  420.934626][T10172]  ? snd_interval_refine+0x2d0/0x580
[  420.934648][T10172]  snd_pcm_hw_refine+0x7e7/0xad0
[  420.934679][T10172]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  420.934714][T10172]  ? __asan_memset+0x23/0x50
[  420.934740][T10172]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  420.934767][T10172]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[  420.934802][T10172]  ? trace_contention_end+0x122/0x170
[  420.934819][T10172]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  420.934845][T10172]  ? __pfx___mutex_lock+0x10/0x10
[  420.934872][T10172]  ? __mutex_lock+0x26d/0x1b10
[  420.934896][T10172]  ? find_held_lock+0x2b/0x80
[  420.934917][T10172]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  420.934940][T10172]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  420.934976][T10172]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  420.935003][T10172]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  420.935033][T10172]  snd_pcm_oss_poll+0x417/0xb00
[  420.935062][T10172]  ? __pfx___pollwait+0x10/0x10
[  420.935094][T10172]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  420.935117][T10172]  ? __fget_files+0x21f/0x3d0
[  420.935142][T10172]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  420.935167][T10172]  do_select+0xd54/0x1850
[  420.935203][T10172]  ? __pfx_do_select+0x10/0x10
[  420.935224][T10172]  ? hrtimer_start_range_ns+0x860/0x1a50
[  420.935245][T10172]  ? __pfx___pollwait+0x10/0x10
[  420.935268][T10172]  ? __pfx_pollwake+0x10/0x10
[  420.935289][T10172]  ? __pfx_pollwake+0x10/0x10
[  420.935339][T10172]  ? find_held_lock+0x2b/0x80
[  420.935359][T10172]  ? __might_fault+0xc5/0x140
[  420.935385][T10172]  ? __might_fault+0xc5/0x140
[  420.935419][T10172]  ? core_sys_select+0x55b/0xbb0
[  420.935438][T10172]  core_sys_select+0x55b/0xbb0
[  420.935464][T10172]  ? __pfx_core_sys_select+0x10/0x10
[  420.935507][T10172]  ? do_futex+0x192/0x350
[  420.935530][T10172]  ? __pfx_do_futex+0x10/0x10
[  420.935552][T10172]  kern_select+0x1d0/0x280
[  420.935574][T10172]  ? __pfx_kern_select+0x10/0x10
[  420.935595][T10172]  ? xfd_validate_state+0x129/0x190
[  420.935629][T10172]  __x64_sys_select+0xbd/0x160
[  420.935648][T10172]  ? do_syscall_64+0x90/0x840
[  420.935672][T10172]  ? lockdep_hardirqs_on+0x78/0x100
[  420.935697][T10172]  do_syscall_64+0x115/0x840
[  420.935720][T10172]  ? clear_bhb_loop+0x40/0x90
[  420.935748][T10172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.935766][T10172] RIP: 0033:0x7f3db579ce59
[  420.935783][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.935800][T10172] RSP: 002b:00007f3db65d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  420.935818][T10172] RAX: ffffffffffffffda RBX: 00007f3db5a16090 RCX: 00007f3db579ce59
[  420.935830][T10172] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  420.935840][T10172] RBP: 00007f3db5832d6f R08: 0000000000000000 R09: 0000000000000000
[  420.935850][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.935860][T10172] R13: 00007f3db5a16128 R14: 00007f3db5a16090 R15: 00007fff2ec27468
[  420.935884][T10172]  </TASK>
[  421.896187][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  421.902262][ T5645] Bluetooth: hci6: command 0x0c1a tx timeout
[  422.148863][ T5636] Bluetooth: hci0: command 0x0406 tx timeout
[  422.703097][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  422.785590][ T5636] Bluetooth: hci2: command 0x0406 tx timeout
[  422.864032][ T5636] Bluetooth: hci3: command 0x0406 tx timeout
[  422.950584][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout
[  423.157806][T10178] FAULT_INJECTION: forcing a failure.
[  423.157806][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.208975][T10178] CPU: 0 UID: 0 PID: 10178 Comm: syz.3.917 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  423.209008][T10178] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  423.209014][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  423.209025][T10178] Call Trace:
[  423.209031][T10178]  <TASK>
[  423.209038][T10178]  dump_stack_lvl+0x100/0x190
[  423.209073][T10178]  should_fail_ex.cold+0x5/0xa
[  423.209095][T10178]  _copy_to_user+0x32/0xd0
[  423.209153][T10178]  simple_read_from_buffer+0xcb/0x170
[  423.209176][T10178]  proc_fail_nth_read+0x1af/0x230
[  423.209212][T10178]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  423.209242][T10178]  ? rw_verify_area+0xce/0x6d0
[  423.209263][T10178]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  423.209290][T10178]  vfs_read+0x1e4/0xb30
[  423.209313][T10178]  ? __pfx_vfs_read+0x10/0x10
[  423.209332][T10178]  ? __fget_files+0x215/0x3d0
[  423.209357][T10178]  ? __fget_files+0x21f/0x3d0
[  423.209383][T10178]  ksys_read+0x12a/0x250
[  423.209403][T10178]  ? __pfx_ksys_read+0x10/0x10
[  423.209424][T10178]  ? rcu_is_watching+0x12/0xc0
[  423.209448][T10178]  do_syscall_64+0x115/0x840
[  423.209476][T10178]  ? clear_bhb_loop+0x40/0x90
[  423.209497][T10178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.209515][T10178] RIP: 0033:0x7f83f795d68e
[  423.209530][T10178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  423.209547][T10178] RSP: 002b:00007f83f88b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  423.209565][T10178] RAX: ffffffffffffffda RBX: 00007f83f88b56c0 RCX: 00007f83f795d68e
[  423.209576][T10178] RDX: 000000000000000f RSI: 00007f83f88b50a0 RDI: 0000000000000004
[  423.209586][T10178] RBP: 00007f83f88b5090 R08: 0000000000000000 R09: 0000000000000000
[  423.209597][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.209607][T10178] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  423.209629][T10178]  </TASK>
[  423.988483][ T5636] Bluetooth: hci6: command 0x0c1a tx timeout
[  423.996553][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  425.023418][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout
[  426.063687][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  426.069896][ T5636] Bluetooth: hci6: command 0x0c1a tx timeout
[  426.954945][T10221] hub 1-0:1.0: USB hub found
[  427.038238][T10221] hub 1-0:1.0: 1 port detected

syzkaller
syzkaller login: [  430.341841][T10260] kAFS: No cell specified
[  432.706171][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.942'.
[  434.252489][T10307] Process accounting resumed
[  434.499022][T10310] random: crng reseeded on system resumption
[  434.696114][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'.
[  434.942351][T10317] .^: entered promiscuous mode
[  435.162390][T10315] zswap: compressor  not available
[  435.718691][T10336] kAFS: No cell specified
[  440.308883][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  440.315714][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  443.020482][T10415] .^: entered promiscuous mode
[  443.322016][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'.
[  443.356368][T10422] nbd: must specify at least one socket
[  443.385264][T10422] =======================================================
[  443.385264][T10422] WARNING: The mand mount option has been deprecated and
[  443.385264][T10422]          and is ignored by this kernel. Remove the mand
[  443.385264][T10422]          option from the mount to silence this warning.
[  443.385264][T10422] =======================================================
[  444.711636][T10441] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  446.138306][T10459] mtrr: base(0x1000000000000000) is not aligned on a size(0x0000) boundary
[  446.337256][T10463] openvswitch: .^: Dropping previously announced user features
[  446.828026][T10465] zswap: compressor  not available
[  449.656559][T10516] FAULT_INJECTION: forcing a failure.
[  449.656559][T10516] name failslab, interval 1, probability 0, space 0, times 0
[  449.669807][T10516] CPU: 0 UID: 0 PID: 10516 Comm: syz.5.996 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  449.669840][T10516] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  449.669865][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  449.669875][T10516] Call Trace:
[  449.669881][T10516]  <TASK>
[  449.669889][T10516]  dump_stack_lvl+0x100/0x190
[  449.669924][T10516]  should_fail_ex.cold+0x5/0xa
[  449.669948][T10516]  should_failslab+0xc2/0x120
[  449.669970][T10516]  __kmalloc_cache_noprof+0x7a/0x6f0
[  449.669996][T10516]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  449.670023][T10516]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  449.670051][T10516]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  449.670085][T10516]  ? trace_contention_end+0x122/0x170
[  449.670103][T10516]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  449.670129][T10516]  ? __pfx___mutex_lock+0x10/0x10
[  449.670155][T10516]  ? __mutex_lock+0x26d/0x1b10
[  449.670180][T10516]  ? find_held_lock+0x2b/0x80
[  449.670201][T10516]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  449.670224][T10516]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  449.670260][T10516]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  449.670287][T10516]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  449.670317][T10516]  snd_pcm_oss_poll+0x417/0xb00
[  449.670341][T10516]  ? __pfx___pollwait+0x10/0x10
[  449.670365][T10516]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  449.670389][T10516]  ? __fget_files+0x21f/0x3d0
[  449.670413][T10516]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  449.670438][T10516]  do_select+0xd54/0x1850
[  449.670473][T10516]  ? __pfx_do_select+0x10/0x10
[  449.670491][T10516]  ? __lock_acquire+0x4a5/0x2630
[  449.670520][T10516]  ? __pfx___pollwait+0x10/0x10
[  449.670542][T10516]  ? __pfx_pollwake+0x10/0x10
[  449.670562][T10516]  ? __pfx_pollwake+0x10/0x10
[  449.670609][T10516]  ? find_held_lock+0x2b/0x80
[  449.670629][T10516]  ? __might_fault+0xc5/0x140
[  449.670655][T10516]  ? __might_fault+0xc5/0x140
[  449.670689][T10516]  ? core_sys_select+0x55b/0xbb0
[  449.670708][T10516]  core_sys_select+0x55b/0xbb0
[  449.670733][T10516]  ? __pfx_core_sys_select+0x10/0x10
[  449.670758][T10516]  ? futex_hash_put+0x43/0x50
[  449.670806][T10516]  ? do_futex+0x192/0x350
[  449.670825][T10516]  ? __pfx_do_futex+0x10/0x10
[  449.670852][T10516]  kern_select+0x1d0/0x280
[  449.670875][T10516]  ? __pfx_kern_select+0x10/0x10
[  449.670896][T10516]  ? xfd_validate_state+0x129/0x190
[  449.670920][T10516]  __x64_sys_select+0xbd/0x160
[  449.670940][T10516]  ? do_syscall_64+0x90/0x840
[  449.670963][T10516]  ? lockdep_hardirqs_on+0x78/0x100
[  449.670988][T10516]  do_syscall_64+0x115/0x840
[  449.671013][T10516]  ? clear_bhb_loop+0x40/0x90
[  449.671035][T10516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.671053][T10516] RIP: 0033:0x7f3db579ce59
[  449.671068][T10516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.671086][T10516] RSP: 002b:00007f3db65d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  449.671104][T10516] RAX: ffffffffffffffda RBX: 00007f3db5a16090 RCX: 00007f3db579ce59
[  449.671116][T10516] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  449.671126][T10516] RBP: 00007f3db5832d6f R08: 0000000000000000 R09: 0000000000000000
[  449.671136][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.671146][T10516] R13: 00007f3db5a16128 R14: 00007f3db5a16090 R15: 00007fff2ec27468
[  449.671169][T10516]  </TASK>
[  450.855260][ T5645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  450.867679][ T5645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  450.877843][ T5645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  450.886275][ T5645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  450.897647][ T5645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  450.982240][T10531] zero sized request
[  451.003291][T10531] MTRR 0 not used
[  451.171297][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'.
[  451.400248][T10540] openvswitch: .^: Dropping previously announced user features
[  452.510567][T10535] bond0: option slaves: interface -��]���=,D�o does not exist!
[  452.942966][ T5645] Bluetooth: hci7: command tx timeout
[  453.020795][T10528] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.045032][T10528] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.069565][T10528] bridge_slave_0: entered allmulticast mode
[  453.126943][T10528] bridge_slave_0: entered promiscuous mode
[  453.162288][T10528] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.191824][T10528] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.220165][T10528] bridge_slave_1: entered allmulticast mode
[  453.243045][T10528] bridge_slave_1: entered promiscuous mode
[  453.347713][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.393817][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.492509][T10528] team0: Port device team_slave_0 added
[  453.518230][T10528] team0: Port device team_slave_1 added
[  453.625518][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.652834][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.719303][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.761635][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.785693][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.851250][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.913183][T10573] FAULT_INJECTION: forcing a failure.
[  453.913183][T10573] name failslab, interval 1, probability 0, space 0, times 0
[  453.941239][T10528] hsr_slave_0: entered promiscuous mode
[  453.958271][T10528] hsr_slave_1: entered promiscuous mode
[  453.972016][T10528] debugfs: 'hsr0' already exists in 'hsr'
[  453.982365][T10573] CPU: 0 UID: 0 PID: 10573 Comm: syz.3.1007 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  453.982399][T10573] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  453.982406][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  453.982416][T10573] Call Trace:
[  453.982423][T10573]  <TASK>
[  453.982431][T10573]  dump_stack_lvl+0x100/0x190
[  453.982467][T10573]  should_fail_ex.cold+0x5/0xa
[  453.982490][T10573]  should_failslab+0xc2/0x120
[  453.982514][T10573]  __kmalloc_cache_noprof+0x7a/0x6f0
[  453.982540][T10573]  ? drm_atomic_state_alloc+0xb8/0x120
[  453.982649][T10573]  drm_atomic_state_alloc+0xb8/0x120
[  453.982680][T10573]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  453.982740][T10573]  ? rcu_is_watching+0x12/0xc0
[  453.982762][T10573]  ? trace_contention_end+0x122/0x170
[  453.982782][T10573]  ? __mutex_lock+0x26d/0x1b10
[  453.982810][T10573]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  453.982842][T10573]  ? drm_master_internal_acquire+0x21/0x80
[  453.982890][T10573]  drm_client_modeset_commit_locked+0x14d/0x580
[  453.982936][T10573]  drm_client_modeset_commit+0x4f/0x80
[  453.982962][T10573]  __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160
[  453.983033][T10573]  drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0
[  453.983061][T10573]  drm_fbdev_client_restore+0x1b/0x30
[  453.983094][T10573]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  453.983114][T10573]  drm_client_dev_restore+0x205/0x2a0
[  453.983145][T10573]  drm_release+0x2c6/0x360
[  453.983194][T10573]  ? __pfx_drm_release+0x10/0x10
[  453.983217][T10573]  __fput+0x3ff/0xb50
[  453.983247][T10573]  task_work_run+0x150/0x240
[  453.983271][T10573]  ? __pfx_task_work_run+0x10/0x10
[  453.983291][T10573]  ? rcu_is_watching+0x12/0xc0
[  453.983314][T10573]  exit_to_user_mode_loop+0x157/0x670
[  453.983341][T10573]  ? rcu_is_watching+0x12/0xc0
[  453.983364][T10573]  do_syscall_64+0x652/0x840
[  453.983389][T10573]  ? clear_bhb_loop+0x40/0x90
[  453.983411][T10573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.983430][T10573] RIP: 0033:0x7f83f799ce59
[  453.983445][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.983463][T10573] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  453.983482][T10573] RAX: 0000000000000000 RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  453.983494][T10573] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  453.983503][T10573] RBP: 00007f83f7a32d6f R08: 0000000000000000 R09: 0000000000000000
[  453.983514][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.983524][T10573] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  453.983548][T10573]  </TASK>
[  454.256260][T10528] Cannot create hsr debugfs directory
[  454.409601][T10528] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  454.437142][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.445223][T10528] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  454.454909][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.462571][T10528] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  454.476725][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.484591][T10528] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  454.494968][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.608315][T10528] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.661476][T10528] 8021q: adding VLAN 0 to HW filter on device team0
[  454.689312][  T363] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.696488][  T363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.720387][  T363] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.727574][  T363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.025592][ T5645] Bluetooth: hci7: command tx timeout
[  455.470813][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.324060][T10528] veth0_vlan: entered promiscuous mode
[  456.367809][T10528] veth1_vlan: entered promiscuous mode
[  456.592260][T10528] veth0_macvtap: entered promiscuous mode
[  456.632113][T10528] veth1_macvtap: entered promiscuous mode
[  456.655809][T10604] zero sized request
[  456.683261][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.691687][T10604] MTRR 0 not used
[  456.705200][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.740690][  T363] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.771504][  T363] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.802494][  T363] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.853387][  T363] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.952483][  T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.984373][  T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.040372][  T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.062531][  T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.103359][ T5645] Bluetooth: hci7: command tx timeout
[  459.183116][ T5645] Bluetooth: hci7: command tx timeout
[  459.406364][ T5636] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  459.417152][ T5636] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  459.431948][ T5636] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  459.442110][ T5636] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  459.451223][ T5636] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  460.235748][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'.
[  461.137119][T10636] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.168422][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.190382][T10636] bridge_slave_0: entered allmulticast mode
[  461.216697][T10636] bridge_slave_0: entered promiscuous mode
[  461.360940][T10636] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.401960][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.436998][T10636] bridge_slave_1: entered allmulticast mode
[  461.471084][T10636] bridge_slave_1: entered promiscuous mode
[  461.503065][ T5636] Bluetooth: hci8: command tx timeout
[  461.591990][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.644683][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.900411][T10636] team0: Port device team_slave_0 added
[  461.950800][T10636] team0: Port device team_slave_1 added
[  462.094489][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.104109][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.184754][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.229650][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.250952][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.334632][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.519933][T10636] hsr_slave_0: entered promiscuous mode
[  462.541736][T10636] hsr_slave_1: entered promiscuous mode
[  462.565348][T10636] debugfs: 'hsr0' already exists in 'hsr'
[  462.583877][T10636] Cannot create hsr debugfs directory
[  463.259351][T10636] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  463.280434][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.301176][T10636] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  463.326884][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.345925][T10636] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  463.365315][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.380867][T10636] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  463.414706][T10636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.555027][T10697] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  463.583548][ T5636] Bluetooth: hci8: command tx timeout
[  463.632435][T10636] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.696538][T10636] 8021q: adding VLAN 0 to HW filter on device team0
[  463.738570][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.745763][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.808243][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.815479][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  465.279132][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.311546][T10699] Process accounting paused
[  465.664342][ T5636] Bluetooth: hci8: command tx timeout
[  466.023550][T10636] veth0_vlan: entered promiscuous mode
[  466.105069][T10636] veth1_vlan: entered promiscuous mode
[  466.321734][T10636] veth0_macvtap: entered promiscuous mode
[  466.345223][T10636] veth1_macvtap: entered promiscuous mode
[  466.410507][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.458983][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.507851][  T363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.536895][  T363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.577093][  T363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.622017][  T363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.760483][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.795493][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.073902][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.120679][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.180657][T10746] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  467.393934][T10748] FAULT_INJECTION: forcing a failure.
[  467.393934][T10748] name failslab, interval 1, probability 0, space 0, times 0
[  467.442393][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.3.1032 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  467.442428][T10748] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  467.442434][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  467.442444][T10748] Call Trace:
[  467.442451][T10748]  <TASK>
[  467.442458][T10748]  dump_stack_lvl+0x100/0x190
[  467.442495][T10748]  should_fail_ex.cold+0x5/0xa
[  467.442520][T10748]  should_failslab+0xc2/0x120
[  467.442544][T10748]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  467.442573][T10748]  ? skb_clone+0x190/0x400
[  467.442615][T10748]  skb_clone+0x190/0x400
[  467.442634][T10748]  netlink_deliver_tap+0xaed/0xcc0
[  467.442675][T10748]  netlink_unicast+0x62b/0x850
[  467.442702][T10748]  ? __pfx_netlink_unicast+0x10/0x10
[  467.442732][T10748]  netlink_sendmsg+0x8b0/0xda0
[  467.442759][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  467.442781][T10748]  ? __import_iovec+0x1d2/0x640
[  467.442811][T10748]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  467.442852][T10748]  ____sys_sendmsg+0x9e1/0xb70
[  467.442877][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  467.442903][T10748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  467.442936][T10748]  ___sys_sendmsg+0x190/0x1e0
[  467.442962][T10748]  ? __pfx____sys_sendmsg+0x10/0x10
[  467.443029][T10748]  __sys_sendmsg+0x170/0x220
[  467.443048][T10748]  ? __pfx___sys_sendmsg+0x10/0x10
[  467.443076][T10748]  ? rcu_is_watching+0x12/0xc0
[  467.443101][T10748]  do_syscall_64+0x115/0x840
[  467.443126][T10748]  ? clear_bhb_loop+0x40/0x90
[  467.443148][T10748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.443166][T10748] RIP: 0033:0x7f83f799ce59
[  467.443181][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.443198][T10748] RSP: 002b:00007f83f88b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  467.443215][T10748] RAX: ffffffffffffffda RBX: 00007f83f7c15fa0 RCX: 00007f83f799ce59
[  467.443227][T10748] RDX: 00000000140080e4 RSI: 0000200000000100 RDI: 0000000000000003
[  467.443237][T10748] RBP: 00007f83f88b5090 R08: 0000000000000000 R09: 0000000000000000
[  467.443247][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.443257][T10748] R13: 00007f83f7c16038 R14: 00007f83f7c15fa0 R15: 00007fffe186bc78
[  467.443279][T10748]  </TASK>
[  467.875870][ T5636] Bluetooth: hci8: command tx timeout
[  469.411633][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1037'.
[  469.468174][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  469.479317][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  469.493549][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  469.509072][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  469.517097][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  470.912408][T10768] bond0: option slaves: interface -��]���=,D�o does not exist!
[  471.584248][ T5645] Bluetooth: hci9: command tx timeout
[  472.259010][T10771] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.292942][T10771] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.350306][T10771] bridge_slave_0: entered allmulticast mode
[  472.406453][T10771] bridge_slave_0: entered promiscuous mode
[  472.476695][T10771] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.510316][T10771] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.537005][T10771] bridge_slave_1: entered allmulticast mode
[  472.568627][T10771] bridge_slave_1: entered promiscuous mode
[  472.725854][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.791474][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.533941][T10771] team0: Port device team_slave_0 added
[  473.563729][T10771] team0: Port device team_slave_1 added
[  473.664716][ T5645] Bluetooth: hci9: command tx timeout
[  473.931385][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.956689][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.061285][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.314204][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.341585][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.437423][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.913259][T10771] hsr_slave_0: entered promiscuous mode
[  474.942947][T10771] hsr_slave_1: entered promiscuous mode
[  474.969824][T10771] debugfs: 'hsr0' already exists in 'hsr'
[  474.986152][T10771] Cannot create hsr debugfs directory
[  475.442180][T10851] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  475.745709][ T5645] Bluetooth: hci9: command tx timeout
[  476.347789][T10771] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  476.403595][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  476.442831][T10771] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  476.480701][T10861] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by "v��+�qġ*=�$td����U�̿{�[���oZ?F���\x5ck�z�\x0dz��6v�@���(U��\x0a�2�w��Q��+�;k!���뙘��T����1Ø�\x0a���P�/�Y�*�uЃ�c8�x�5�n뇤�t�\x1b��/0eR�.��/��DC�����ڍv��g��^�8aeD6�ݔ����R��
Sik�P��'\x0c�?�٥��I�ں/#_K,�>G^<[�6���k�lRd�δ� �%�ގ���ŏ�KJԜk�:!�:�3�P��5���������?���\x22ʋ��Z�reT&��9�\x07���j���)\x0aN��<eb��x�Q��EW�$����Z~5�o�F�m�n�(G����HӸ�akS:��$�Q`���]�V���0���Ĕ)*2 � �\x1b�<=?i/�S�/��\x09�����;a������,r!�u�h�?��KI�]���yX֊⽿?2M�����5KzҢݓ�������'V�A�>��t�6�����\x5cYgWm��^K�G��?��S��j�ڹC���-�y\x0bD��L�$�\x07e��U\x0b�BiJ[�Ef?�mɼ_�!�䢛ŭ�ͻ;sn����Bp�?�����\x0dTTi>��r�A;�F��:����Q����@�%�ھ��J􃣕��D���\x0d�hrQ�5u�nzƼW�-5�Sd�������z�X����)J�<�Q�O�SF��^���1�\x0c���N�f��~\x1b��� �M�$�ٍ:�]J�:�q����kB��u3f,�/+�.��\x5c�X�S���(�j��j�X?]�!��g��Y�(}\x07FC�VL$9}�p�t׮�u��$�C��\x22�(�I1C9�\x1b����9���sۄ��������p�\x0bA�V�+���D���8-$yl���y`8�
[  476.505149][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  476.650609][T10863] random: crng reseeded on system resumption
[  476.944534][T10771] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  477.009548][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  477.068380][T10771] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  477.147314][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  477.731610][T10771] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.784716][T10771] 8021q: adding VLAN 0 to HW filter on device team0
[  477.811701][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.818903][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.826929][ T5645] Bluetooth: hci9: command tx timeout
[  477.873274][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.880606][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.180374][T10894] FAULT_INJECTION: forcing a failure.
[  478.180374][T10894] name failslab, interval 1, probability 0, space 0, times 0
[  478.245346][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.7.1059 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  478.245379][T10894] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  478.245386][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  478.245397][T10894] Call Trace:
[  478.245403][T10894]  <TASK>
[  478.245410][T10894]  dump_stack_lvl+0x100/0x190
[  478.245444][T10894]  should_fail_ex.cold+0x5/0xa
[  478.245468][T10894]  should_failslab+0xc2/0x120
[  478.245490][T10894]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  478.245517][T10894]  ? posix_lock_inode+0x5b2/0x2420
[  478.245552][T10894]  ? lockdep_init_map_type+0x5c/0x250
[  478.245584][T10894]  posix_lock_inode+0x5b2/0x2420
[  478.245616][T10894]  ? __pfx_posix_lock_inode+0x10/0x10
[  478.245645][T10894]  vfs_lock_file+0xfb/0x150
[  478.245670][T10894]  fcntl_setlk+0x768/0xe20
[  478.245697][T10894]  ? __pfx_fcntl_setlk+0x10/0x10
[  478.245725][T10894]  ? __might_fault+0xc5/0x140
[  478.245751][T10894]  ? __might_fault+0xc5/0x140
[  478.245786][T10894]  do_fcntl+0xf39/0x1670
[  478.245814][T10894]  ? __pfx_do_fcntl+0x10/0x10
[  478.245838][T10894]  ? __fget_files+0x215/0x3d0
[  478.245865][T10894]  ? tomoyo_file_fcntl+0x6c/0xc0
[  478.245890][T10894]  __x64_sys_fcntl+0x163/0x200
[  478.245920][T10894]  do_syscall_64+0x115/0x840
[  478.245948][T10894]  ? clear_bhb_loop+0x40/0x90
[  478.245997][T10894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.246016][T10894] RIP: 0033:0x7f8f7399ce59
[  478.246032][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.246049][T10894] RSP: 002b:00007f8f748fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  478.246068][T10894] RAX: ffffffffffffffda RBX: 00007f8f73c15fa0 RCX: 00007f8f7399ce59
[  478.246080][T10894] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003
[  478.246091][T10894] RBP: 00007f8f73a32d6f R08: 0000000000000000 R09: 0000000000000000
[  478.246102][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.246113][T10894] R13: 00007f8f73c16038 R14: 00007f8f73c15fa0 R15: 00007fff57754ac8
[  478.246136][T10894]  </TASK>
[  478.589448][T10898] FAULT_INJECTION: forcing a failure.
[  478.589448][T10898] name failslab, interval 1, probability 0, space 0, times 0
[  478.602289][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.8.1060 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  478.602321][T10898] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  478.602328][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  478.602340][T10898] Call Trace:
[  478.602347][T10898]  <TASK>
[  478.602355][T10898]  dump_stack_lvl+0x100/0x190
[  478.602401][T10898]  should_fail_ex.cold+0x5/0xa
[  478.602424][T10898]  ? constrain_params_by_rules+0x175/0xcc0
[  478.602460][T10898]  should_failslab+0xc2/0x120
[  478.602484][T10898]  __kmalloc_noprof+0xe0/0x850
[  478.602512][T10898]  ? unwind_get_return_address+0x59/0xa0
[  478.602545][T10898]  constrain_params_by_rules+0x175/0xcc0
[  478.602578][T10898]  ? stack_trace_save+0x8e/0xc0
[  478.602606][T10898]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  478.602640][T10898]  ? __kasan_kmalloc+0xaa/0xb0
[  478.602658][T10898]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[  478.602684][T10898]  ? snd_pcm_oss_make_ready+0xeb/0x1b0
[  478.602709][T10898]  ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  478.602741][T10898]  ? rcu_is_watching+0x12/0xc0
[  478.602763][T10898]  ? snd_interval_refine+0x2d0/0x580
[  478.602786][T10898]  snd_pcm_hw_refine+0x7e7/0xad0
[  478.602818][T10898]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  478.602858][T10898]  ? __asan_memset+0x23/0x50
[  478.602888][T10898]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  478.602916][T10898]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[  478.602949][T10898]  ? trace_contention_end+0x122/0x170
[  478.602967][T10898]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  478.602993][T10898]  ? __pfx___mutex_lock+0x10/0x10
[  478.603019][T10898]  ? __mutex_lock+0x26d/0x1b10
[  478.603044][T10898]  ? find_held_lock+0x2b/0x80
[  478.603065][T10898]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  478.603089][T10898]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  478.603124][T10898]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  478.603151][T10898]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  478.603182][T10898]  snd_pcm_oss_poll+0x417/0xb00
[  478.603206][T10898]  ? __pfx___pollwait+0x10/0x10
[  478.603227][T10898]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  478.603250][T10898]  ? __fget_files+0x21f/0x3d0
[  478.603274][T10898]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  478.603299][T10898]  do_select+0xd54/0x1850
[  478.603335][T10898]  ? __pfx_do_select+0x10/0x10
[  478.603355][T10898]  ? hrtimer_start_range_ns+0x860/0x1a50
[  478.603375][T10898]  ? __pfx___pollwait+0x10/0x10
[  478.603404][T10898]  ? __pfx_pollwake+0x10/0x10
[  478.603425][T10898]  ? __pfx_pollwake+0x10/0x10
[  478.603474][T10898]  ? find_held_lock+0x2b/0x80
[  478.603498][T10898]  ? __might_fault+0xc5/0x140
[  478.603524][T10898]  ? __might_fault+0xc5/0x140
[  478.603558][T10898]  ? core_sys_select+0x55b/0xbb0
[  478.603577][T10898]  core_sys_select+0x55b/0xbb0
[  478.603602][T10898]  ? __pfx_core_sys_select+0x10/0x10
[  478.603644][T10898]  ? do_futex+0x192/0x350
[  478.603662][T10898]  ? __pfx_do_futex+0x10/0x10
[  478.603684][T10898]  kern_select+0x1d0/0x280
[  478.603706][T10898]  ? __pfx_kern_select+0x10/0x10
[  478.603731][T10898]  ? xfd_validate_state+0x129/0x190
[  478.603755][T10898]  __x64_sys_select+0xbd/0x160
[  478.603775][T10898]  ? do_syscall_64+0x90/0x840
[  478.603799][T10898]  ? lockdep_hardirqs_on+0x78/0x100
[  478.603824][T10898]  do_syscall_64+0x115/0x840
[  478.603848][T10898]  ? clear_bhb_loop+0x40/0x90
[  478.603870][T10898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.603891][T10898] RIP: 0033:0x7f553099ce59
[  478.603908][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.603925][T10898] RSP: 002b:00007f55318e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  478.603943][T10898] RAX: ffffffffffffffda RBX: 00007f5530c16090 RCX: 00007f553099ce59
[  478.603955][T10898] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000005
[  478.603965][T10898] RBP: 00007f5530a32d6f R08: 0000000000000000 R09: 0000000000000000
[  478.603975][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.603985][T10898] R13: 00007f5530c16128 R14: 00007f5530c16090 R15: 00007ffde7739918
[  478.604008][T10898]  </TASK>
[  480.127691][T10916] mtrr: base(0x1000000000000000) is not aligned on a size(0x0000) boundary
[  480.194813][T10906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.126190][ T5645] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18
[  481.379823][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.081465][T10771] veth0_vlan: entered promiscuous mode
[  483.308463][T10771] veth1_vlan: entered promiscuous mode
[  483.499343][T10771] veth0_macvtap: entered promiscuous mode
[  483.506412][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'.
[  483.665800][T10771] veth1_macvtap: entered promiscuous mode
[  483.848484][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  483.885569][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  483.924872][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.961586][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.058806][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.115729][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.202097][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.223494][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.336347][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  484.388611][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  484.488117][T10982] FAULT_INJECTION: forcing a failure.
[  484.488117][T10982] name failslab, interval 1, probability 0, space 0, times 0
[  484.576605][T10982] CPU: 0 UID: 0 PID: 10982 Comm: syz.8.1075 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  484.576637][T10982] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  484.576644][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  484.576654][T10982] Call Trace:
[  484.576660][T10982]  <TASK>
[  484.576668][T10982]  dump_stack_lvl+0x100/0x190
[  484.576703][T10982]  should_fail_ex.cold+0x5/0xa
[  484.576726][T10982]  should_failslab+0xc2/0x120
[  484.576747][T10982]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  484.576775][T10982]  ? __pmd_alloc+0xbf/0x950
[  484.576802][T10982]  __pmd_alloc+0xbf/0x950
[  484.576826][T10982]  __handle_mm_fault+0xa9c/0x2a00
[  484.576856][T10982]  ? mt_find+0x45e/0x8e0
[  484.576941][T10982]  ? __pfx___handle_mm_fault+0x10/0x10
[  484.576966][T10982]  ? __pfx_mt_find+0x10/0x10
[  484.577003][T10982]  ? find_vma+0xbf/0x140
[  484.577021][T10982]  ? __pfx_find_vma+0x10/0x10
[  484.577042][T10982]  handle_mm_fault+0x37b/0xa30
[  484.577072][T10982]  do_user_addr_fault+0x74c/0x12f0
[  484.577096][T10982]  ? trace_page_fault_kernel+0x7a/0x200
[  484.577118][T10982]  exc_page_fault+0x6f/0xd0
[  484.577143][T10982]  asm_exc_page_fault+0x26/0x30
[  484.577160][T10982] RIP: 0010:rep_movs_alternative+0xf/0x90
[  484.577179][T10982] Code: c4 10 e9 04 9d 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66
[  484.577197][T10982] RSP: 0018:ffffc90005927bd0 EFLAGS: 00050202
[  484.577212][T10982] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004
[  484.577222][T10982] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005927cf0
[  484.577233][T10982] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000b24f9e
[  484.577242][T10982] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  484.577252][T10982] R13: ffffc90005927cf0 R14: 0000000000000000 R15: 000000000000006a
[  484.577273][T10982]  _copy_from_user+0x98/0xd0
[  484.577299][T10982]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  484.577326][T10982]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  484.577357][T10982]  do_sock_getsockopt+0x530/0x6e0
[  484.577378][T10982]  ? __lock_acquire+0x4a5/0x2630
[  484.577407][T10982]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  484.577429][T10982]  ? find_held_lock+0x2b/0x80
[  484.577449][T10982]  ? ksys_write+0x190/0x250
[  484.577481][T10982]  ? find_held_lock+0x2b/0x80
[  484.577508][T10982]  ? __fget_files+0x21f/0x3d0
[  484.577533][T10982]  __sys_getsockopt+0x133/0x1d0
[  484.577553][T10982]  ? __pfx_ksys_write+0x10/0x10
[  484.577576][T10982]  ? __x64_sys_getsockopt+0xbd/0x160
[  484.577592][T10982]  __x64_sys_getsockopt+0xbd/0x160
[  484.577608][T10982]  ? do_syscall_64+0x90/0x840
[  484.577635][T10982]  ? lockdep_hardirqs_on+0x78/0x100
[  484.577659][T10982]  do_syscall_64+0x115/0x840
[  484.577682][T10982]  ? clear_bhb_loop+0x40/0x90
[  484.577704][T10982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.577721][T10982] RIP: 0033:0x7f553099ce59
[  484.577735][T10982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.577752][T10982] RSP: 002b:00007f5531902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  484.577772][T10982] RAX: ffffffffffffffda RBX: 00007f5530c15fa0 RCX: 00007f553099ce59
[  484.577783][T10982] RDX: 0000000000000001 RSI: 000000000000006a RDI: 0000000000000003
[  484.577796][T10982] RBP: 00007f5531902090 R08: 0000000000000000 R09: 0000000000000000
[  484.577806][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.577816][T10982] R13: 00007f5530c16038 R14: 00007f5530c15fa0 R15: 00007ffde7739918
[  484.577839][T10982]  </TASK>
[  486.308027][T11002] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  486.845535][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1080'.
[  487.945077][T11029] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  490.874562][   T31] INFO: task syz.2.736:9257 blocked for more than 143 seconds.
[  490.882404][   T31]       Tainted: G     U       L      syzkaller #0
[  490.908745][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  490.957504][   T31] task:syz.2.736       state:D stack:27496 pid:9257  tgid:9256  ppid:5642   task_flags:0x400140 flags:0x00080002
[  491.022911][   T31] Call Trace:
[  491.040350][   T31]  <TASK>
[  491.052272][   T31]  __schedule+0x1295/0x67a0
[  491.080901][   T31]  ? __pfx___schedule+0x10/0x10
[  491.104036][   T31]  ? find_held_lock+0x2b/0x80
[  491.128944][   T31]  ? schedule+0x2bf/0x390
[  491.150488][   T31]  schedule+0xdd/0x390
[  491.169457][   T31]  schedule_preempt_disabled+0x13/0x30
[  491.199313][   T31]  __mutex_lock+0xced/0x1b10
[  491.221630][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  491.250770][   T31]  ? __nla_validate_parse+0x1e7/0x28b0
[  491.290093][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  491.312082][   T31]  ? net_generic+0xea/0x2a0
[  491.338548][   T31]  ? net_generic+0xea/0x2a0
[  491.366342][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  491.398616][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[  491.424342][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  491.452159][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  491.479344][   T31]  ? genl_get_cmd+0x3e7/0x760
[  491.506572][   T31]  ? bpf_lsm_capable+0x9/0x10
[  491.536536][   T31]  ? security_capable+0x80/0x260
[  491.558919][   T31]  genl_rcv_msg+0x560/0x800
[  491.581936][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  491.611305][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  491.641400][   T31]  netlink_rcv_skb+0x159/0x420
[  491.663298][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  491.688788][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  491.717746][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  491.741335][   T31]  genl_rcv+0x28/0x40
[  491.762212][   T31]  netlink_unicast+0x585/0x850
[  491.786764][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  491.812946][   T31]  netlink_sendmsg+0x8b0/0xda0
[  491.837243][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.861614][   T31]  ? __import_iovec+0x1d2/0x640
[  491.885764][   T31]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  491.916943][   T31]  ____sys_sendmsg+0x9e1/0xb70
[  491.937915][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.963497][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  491.988833][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  492.018362][   T31]  ? try_to_wake_up+0x5f6/0x1900
[  492.039788][   T31]  ___sys_sendmsg+0x190/0x1e0
[  492.057205][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  492.075654][   T31]  ? futex_private_hash_put+0x107/0x1c0
[  492.093662][   T31]  __sys_sendmsg+0x170/0x220
[  492.117073][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  492.135054][   T31]  ? __x64_sys_futex+0x34f/0x4d0
[  492.150192][   T31]  ? rcu_is_watching+0x12/0xc0
[  492.173901][   T31]  do_syscall_64+0x115/0x840
[  492.191119][   T31]  ? clear_bhb_loop+0x40/0x90
[  492.212434][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.234687][   T31] RIP: 0033:0x7fc5f0b9ce59
[  492.248894][   T31] RSP: 002b:00007fc5f1b02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.278731][   T31] RAX: ffffffffffffffda RBX: 00007fc5f0e15fa0 RCX: 00007fc5f0b9ce59
[  492.309481][   T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000006
[  492.339518][   T31] RBP: 00007fc5f0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  492.366652][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.392554][   T31] R13: 00007fc5f0e16038 R14: 00007fc5f0e15fa0 R15: 00007ffca12dc628
[  492.433063][   T31]  </TASK>
[  492.445681][   T31] 
[  492.445681][   T31] Showing all locks held in the system:
[  492.521233][   T31] 1 lock held by khungtaskd/31:
[  492.548493][   T31]  #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  492.600934][   T31] 4 locks held by kworker/u8:3/48:
[  492.632051][   T31]  #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  492.690827][   T31]  #1: ffffc90000b97d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  492.742052][   T31]  #2: ffffffff905edf88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  492.776235][   T31]  #3: ffffffff8e7f0d78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  492.811964][   T31] 2 locks held by syz.1.694/9088:
[  492.834239][   T31]  #0: ffffffff906b51e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  492.863355][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  492.905386][   T31] 2 locks held by syz.2.736/9257:
[  492.918759][   T31]  #0: ffffffff906b51e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  492.943401][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  492.965552][   T31] 2 locks held by syz-executor/9303:
[  492.977136][   T31]  #0: ffff888049b760d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  493.001493][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  493.027964][   T31] 2 locks held by syz-executor/9466:
[  493.039471][   T31]  #0: ffff8880341320d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  493.061764][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  493.084166][   T31] 2 locks held by syz.0.801/9565:
[  493.098153][   T31]  #0: ffffffff906b51e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  493.116961][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  493.142986][   T31] 2 locks held by getty/10255:
[  493.153968][   T31]  #0: ffff888037f810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  493.177841][   T31]  #1: ffffc900037932e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  493.199520][   T31] 2 locks held by syz.6.953/10331:
[  493.212480][   T31]  #0: ffff8880597e20d8 (&type->s_umount_key#56){++++}-{4:4}, at: deactivate_super+0xdf/0x110
[  493.240623][   T31]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  493.261444][   T31] 2 locks held by syz.9.1089/11047:
[  493.272634][   T31]  #0: ffffffff905edf88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  493.295757][   T31]  #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  493.319005][   T31] 2 locks held by syz.3.1091/11060:
[  493.336362][   T31]  #0: ffffffff905edf88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  493.356089][   T31]  #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  493.379222][   T31] 
[  493.420188][   T31] =============================================
[  493.420188][   T31] 
[  493.469328][   T31] NMI backtrace for cpu 0
[  493.469346][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  493.469373][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  493.469379][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  493.469389][   T31] Call Trace:
[  493.469395][   T31]  <TASK>
[  493.469403][   T31]  dump_stack_lvl+0x100/0x190
[  493.469437][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  493.469458][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  493.469477][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  493.469500][   T31]  sys_info+0x141/0x190
[  493.469566][   T31]  watchdog+0xcb1/0x1030
[  493.469601][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  493.469642][   T31]  ? __pfx_watchdog+0x10/0x10
[  493.469666][   T31]  ? __kthread_parkme+0x18c/0x230
[  493.469691][   T31]  ? kthread+0x13a/0x450
[  493.469715][   T31]  ? __pfx_watchdog+0x10/0x10
[  493.469737][   T31]  kthread+0x370/0x450
[  493.469762][   T31]  ? __pfx_kthread+0x10/0x10
[  493.469788][   T31]  ret_from_fork+0x72b/0xd50
[  493.469807][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  493.469826][   T31]  ? __switch_to+0x800/0x1100
[  493.469855][   T31]  ? __switch_to_asm+0x39/0x70
[  493.469878][   T31]  ? __pfx_kthread+0x10/0x10
[  493.469909][   T31]  ret_from_fork_asm+0x1a/0x30
[  493.469941][   T31]  </TASK>
[  493.939110][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  493.946026][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  493.956894][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  493.962172][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  493.972229][   T31] Call Trace:
[  493.975513][   T31]  <TASK>
[  493.978446][   T31]  dump_stack_lvl+0x100/0x190
[  493.983163][   T31]  vpanic+0x552/0x970
[  493.987208][   T31]  ? __pfx_vpanic+0x10/0x10
[  493.992252][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  493.998423][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  494.004608][   T31]  panic+0xd1/0xe0
[  494.008367][   T31]  ? __pfx_panic+0x10/0x10
[  494.012827][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  494.019001][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  494.025284][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  494.031561][   T31]  ? watchdog.cold+0x1ec/0x234
[  494.036347][   T31]  ? watchdog+0xcc1/0x1030
[  494.040810][   T31]  watchdog.cold+0x1fd/0x234
[  494.045430][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  494.051277][   T31]  ? __pfx_watchdog+0x10/0x10
[  494.056004][   T31]  ? __kthread_parkme+0x18c/0x230
[  494.061061][   T31]  ? kthread+0x13a/0x450
[  494.065345][   T31]  ? __pfx_watchdog+0x10/0x10
[  494.070107][   T31]  kthread+0x370/0x450
[  494.074213][   T31]  ? __pfx_kthread+0x10/0x10
[  494.079095][   T31]  ret_from_fork+0x72b/0xd50
[  494.083698][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  494.088834][   T31]  ? __switch_to+0x800/0x1100
[  494.093536][   T31]  ? __switch_to_asm+0x39/0x70
[  494.098336][   T31]  ? __pfx_kthread+0x10/0x10
[  494.102945][   T31]  ret_from_fork_asm+0x1a/0x30
[  494.107824][   T31]  </TASK>
[  494.110936][   T31] Kernel Offset: disabled
[  494.115374][   T31] Rebooting in 86400 seconds..