last executing test programs:

2m41.303977438s ago: executing program 32 (id=832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0)
ioctl$auto(r3, 0x4004550d, r3)
write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000)
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen$auto(0x0, 0x1)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r4 = socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x420c0, 0x0)

2m30.425473755s ago: executing program 4 (id=934):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x82`\x00\x00\x00\x00\x00\x00w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\xebs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x100000001)
mlockall$auto(0x7)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x20140, 0x0)
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r3, [], {0x6, 0x20000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x83, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0x11, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xb, 0x400001, 0x200948d, 0x3, 0x4, 0xe, 0x7, 0x5, 0x8000001f, 0x8, 0x4d3e, 0x200000002, 0x2, 0xffffffffffffffff]}, 0x0)

2m28.878781459s ago: executing program 4 (id=941):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r0, 0x1, 0xb, 0x0, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1000008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/ip_vti0/dev_id\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25120023000800070001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x800)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x4, 0x2)
r4 = socketcall$auto(0xffe, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_DEV_GET2(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto(0x3, 0xc008ae67, r4)

2m28.103783394s ago: executing program 4 (id=948):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x2, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
r0 = socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="bfcd4738b564a2ff3b160bbe43260aec9633"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4)
renameat2$auto(r1, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r2 = socket(0x10, 0x2, 0xf)
r3 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r2, 0xffffffff}, 0xd)
bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r3, 0x98}, 0x5)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0))
unshare$auto(0x40000080)
socketpair$auto(0x1e, 0x4, 0xffffff7f, 0x0)
timer_create$auto(0x0, 0x0, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x40900, 0x0)

2m26.866777171s ago: executing program 4 (id=958):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000004f202536a748cf154", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25020000000800030080004000080002007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x2404c810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000340)={0x0, 0xc4}, 0x1000004, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "06f8ffb9", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]})
mmap$auto(0x8000005c, 0x2000d, 0x86, 0xeb0, r1, 0x8000)
io_uring_setup$auto(0xa, 0x0)
unshare$auto(0x40000080)
socket(0x2, 0x1, 0x106)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/event1\x00', 0x408880, 0x0)
mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
mmap$auto(0x6, 0x2020007, 0x3, 0x200000000004e7c, r2, 0x7)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x4a901, 0x0)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440))
getsockopt$auto(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', &(0x7f0000000080)=0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0x11, 0xffffffffffffffff, 0x8000)
ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]})
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/026/001\x00', 0xa901, 0x0)

2m26.09671036s ago: executing program 4 (id=962):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram13\x00', 0x666a02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1a3002, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x10b586, 0x0)
ioctl$auto(0x3, 0xc0045540, r0)

2m25.79299069s ago: executing program 4 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8342, 0x0)
writev$auto(r1, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
setreuid$auto(0x80000000, 0x7fffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0x5c8)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0)
sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0xe}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002200)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x48084)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014)

2m24.000390768s ago: executing program 0 (id=975):
close_range$auto(0x2, 0xa, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
sendfile$auto(r0, r1, 0x0, 0x800048)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
ioctl$auto(0xc8, 0x400454d4, 0xe)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/irq/0/smp_affinity_list\x00', 0x81, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x8081)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r5)
sendmsg$auto_OVS_VPORT_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010)
r6 = fsopen$auto(0x0, 0x1)
ioctl$auto_TIOCSBRK2(r6, 0x5427, &(0x7f0000000040))
mmap$auto(0x0, 0x4020009, 0x4, 0x198, 0x401, 0x30)
madvise$auto(0x2, 0xb8, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
geteuid()
mmap$auto(0x2, 0x400000004020009, 0xdf, 0x7a9837b, r4, 0x8000)

2m21.143829916s ago: executing program 0 (id=983):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x12b901, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare$auto(0x40000080) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
ioctl$auto_TUNGETIFF2(r1, 0x800454d2, &(0x7f0000000040))
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(r2, 0x6) (async)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084)
arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x1ff80000000000) (async)
socket(0x2, 0x1, 0x0)
pipe$auto(0x0) (async)
setsockopt$auto_SO_REUSEADDR(r0, 0x6, 0x2, &(0x7f0000000180)='&^^\x00', 0xa8) (async)
fanotify_init$auto(0x65, 0x2)

2m19.180618569s ago: executing program 0 (id=991):
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x80, 0x0)
ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)="60bf7f01ebef70963ebcf27550da78025d58b4f1d554ce6c0af47d4323db43be7633f9573dbc635a2518c20486039d2461a780b8d78b602f202281cb39553d887bdee99bf0f03167b4f11443095f4f6efbc9f0a3d028e5e05be0a4e02dd8ec0f323d6384f87f26f6a4f668ada381743654f61b1fcdb574dd9aa1d0f09440e02f448b9278976131e0e4489edf62d8001ed5dfaf072c6d2abbb8e25424e604ccb5ab29fbf9ff4fc60a961d04c425e79dd3092ee5f9084e54b9852d8221916744b158d08dd5f4f594d451ea727460b9d98599f84958516ad0e73bf4b5aa29dd5db47fc52f717c4078") (async, rerun: 64)
select$auto(0xfffffffb, &(0x7f0000000140)={[0x8000000000000000, 0x4, 0x4, 0x650, 0xfff, 0x5, 0x7, 0xcc5b, 0x6ec, 0x7, 0x1, 0x7fff, 0x8000000000000000, 0xfff, 0x0, 0xaeba]}, &(0x7f00000001c0)={[0xe, 0x7, 0x2, 0xffffffffffff7072, 0xf934, 0x1, 0x0, 0x80000000, 0x400, 0x9, 0xef8, 0x31, 0x400, 0x8, 0x5, 0x3]}, &(0x7f0000000240)={[0xf09, 0x7, 0x5, 0x3, 0x9, 0x80000001, 0x2, 0x7, 0x0, 0x4, 0x8, 0x100, 0x9, 0x5, 0x8, 0x401]}, &(0x7f00000002c0)={0x9, 0x4}) (async, rerun: 64)
r1 = prctl$auto_PR_SET_MM_START_STACK(0xf, 0x5, 0xffffffffffffffff, 0x80000001, 0x930f)
ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r1, 0x81204101, &(0x7f0000000300)={0x1, 0x1, 0xffff8000, 0x6, "0662716abad1ee4d01556596530d47a061a0acdcb1d6b3e8f292dbe1474bc059bf7df173138cac976d6db160b50e40a69ec35354990b0c560ed7f741748512b7", "45fa7a8d4d555c3916b9844e6158340796f24f3e3cad9da8bcc468a3e3e33ff4b85b8ffc2ca0c764307612e2d2a134c4b3a23a30ba3e183caa9ea1128ef8420b167ab23f28f4918b631c93fa160f9bb3", "acf2df2a576af30fd35c9b4546fcae03d2a86ad46e83f36ad29187ef74d30b2f", 0x6, 0x7, 0xb, 0x6, '\x00', "e1d99db0f1ce2b6db7c2487f94fd9cf1098861a9d5fe439bb49e07f6839ceee0d0d02bd9af42fd54d8340e37bb1e3e5461de86f109df4e5e7b4df9b22d909cca"})
fallocate$auto(r1, 0x9, 0x2, 0x0) (async, rerun: 32)
getsockopt$auto_SO_INCOMING_NAPI_ID(r1, 0x81, 0x38, &(0x7f0000000440)='/dev/binderfs/binder0\x00', &(0x7f0000000480)=0x7c5f) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r1)
sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a0, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_HE_OBSS_PD={0x17c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xf}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xf0, 0x4, "aefd8eb76cede92a287efa19ab6109916768b30d534e23c7165ba007ff30dd70a21be31735ada8d1f0ce896781bb5228bb23ff5990335e571441f7884fb4577202611139ae8be9120dee2a9f423befe511f44a30fc74374c86247fd39406e7f8ebfe93a5ed5b1bf3adff6dc398f0bcc0fc7b12528c3d9f8377a61f8205f6f58964ba6546c49f0a91d1f24be127cf64205e3aa0cac0ab6cd20e3812940cfa124078965b51ab7e2aa93e4c5851b72896dc2aecdfc68e8397767e58f60deb25adc4aca009a3c72b62ae621694615771c95e2a9264a2ee957ab790de113b328530ed71afcfccf96bf0da7278341b"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x65, 0x4, "637e6fe97f9c4476ab719b725ca1091710604791402c12ab87d31601534cfa86f4cf2cf200a1be32ec3f1426ee57e6c3a2cac6d89d841f4b6336f94e6f1a1e3fc49fdc9d518bb530c242c211b77ec883882fcfa31531f94806ab2b8ae411b01b9d"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xf, 0x5, "50fa411af47a17daa37fae"}]}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
kexec_load$auto(0x81, 0x3, &(0x7f00000007c0)={@buf=&(0x7f0000000780)="4a9186235a33b84a8d308c6a2340e2a28c456fbf29e0c079b1d489f82a59ee9d87b20be722569452dd35e4206f7cb56f5368a25707380a3ffee2", 0x4, 0x100000001, 0x7fffffffffffffff}, 0x8) (async)
r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000840), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x71c88fadb524ccc9)
close$auto(r2) (async)
settimeofday$auto(&(0x7f0000000940)={0x9, 0x2}, &(0x7f0000000980)={0x7, 0x1000}) (async, rerun: 32)
r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000a40), r1)
shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000001ac0)={{0x80000000, <r7=>0xffffffffffffffff, 0x0, 0x7, 0x2a0b9f10, 0x0, 0x3}, 0x6, 0x0, 0x7, 0x6, @inferred, @inferred, 0x8, 0x0, &(0x7f0000000a80)="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", &(0x7f0000001a80)="2df03ad4b957fbef3a096a1c96233c6eca02ff7a3e2bc6767f431fd6f5585d87b5a08e33d8fa30349b9c6b8e3037cb"}) (async, rerun: 64)
shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000001c00)={{0x3, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x800, 0x7, 0x8}, 0x6e9, 0x4, 0x5, 0x5, @raw=0x200, @raw=0x2, 0x9, 0x0, &(0x7f0000001b40)="239a66a9582cb2e6dc61529d4f86cf22e0a09e2caf33858fe764be17562a15d895a17fdb304e1dd476354ba39e5b761f85199d4626c5a6c2fc95924637dd109ff5f9cb7c6a", &(0x7f0000001bc0)}) (rerun: 64)
r9 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000001c80)={@siginfo_0_0={0x4a9, 0xfffff801, 0x2, @_rt={<r10=>0x0, 0xee01, @sival_int=0x56}}}, 0x37b0, &(0x7f0000001d00)={{0x2, 0x7f}, {0x101, 0x6}, 0x7, 0xfffffffffffffff7, 0x8, 0x3ff, 0xff, 0x2, 0x8, 0x9, 0x7, 0x8000000000000001, 0x8, 0x80000000, 0x749, 0x9})
r11 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000001dc0)={@_si_pad}, 0xf2e5, &(0x7f0000001e40)={{0x7, 0x8}, {0x1}, 0x8, 0x8, 0x8, 0xc2, 0x1, 0xffffffff868a591e, 0x0, 0x5, 0x83a, 0x5, 0x8000000000000000, 0x8, 0x6, 0x3})
sendmsg$auto_ETHTOOL_MSG_STATS_GET(r2, &(0x7f00000026c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000001f00)={0x758, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_HEADER={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STATS_GROUPS={0x58, 0x3, 0x0, 0x1, [@typed={0x4e, 0x67, 0x0, 0x0, @binary="50f8a8809fab8b1ffed2b271eb717526aea080631751706b36ae63b4165a37a0c7cc1f932eb182f7f4bac2b3f61dae8c2bef62bbd52d59591a1fb0da4ccd596979f61fd91d10a00d5b52"}, @nested={0x4, 0xfc}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x400}, @ETHTOOL_A_STATS_GROUPS={0x526, 0x3, 0x0, 0x1, [@nested={0x1c0, 0x98, 0x0, 0x1, [@generic="285c9c708228aaec4cdcfd466e7119030efffda96239f9e2457ecb917b6da5225777ab9af477d20d322125ae914794ba5a0a28fecc834f0a5a1bd9dd428c011059f91edfd6486d78ae1bf58bf757c90a60e0edeee258a87af3dd91e9bf0942a385e7b025674a3442fd2c769a8149b3281b3514e4821f27f8e31e5609b53eaa9a8db9f4ca85fe312ab56841da0a5c318bfcab5a117d33828db4ed91d04563b573398a222cf1fbde28b372eb9d46ff1ed8f96f019e047c535805f706f38f1cc13749d4028219254efbf3ccf3f400826f871744d7626e8eae3992619038e4b14739ea5e922ed6602bc0432a12d5", @nested={0x4, 0x132}, @typed={0xc9, 0xcd, 0x0, 0x0, @binary="7a801b89c3953dfbda54756d96f40693740d772dc751d73b2d00ee038ba4e87925a3c8a384c73362da3d890f22ca78951000d5990b98070fec3403fc1cb9294a49123706b34ce8873e1f54171c894f35de3cc13474a13d6c1e06979c1509a268b4d85e121f960217cb3f97f477825707ac11465c1a3da49fef7704e1b3c876e203c93780bf09e21a883d68d415575d43eff70121955c4ee98877013a284c16a86afde546292395c16f6a3a5193efa4113f5bea70e69a1a5c3a181cbcf0ae7991d3b6f5ff13"}]}, @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x9}, @generic="de3184c1a20fe381d576678335aaefb9890a1e4dd533de322f9c88fb7887b7144061990481dfd19e45988785ea74ef39e00567bc6e3bde3cb9b3ec870544d8286c2160ed8e2d2707131f30a5a6f70ddda8b5888780f69380ab79d569d2ce72718d2c53f0fe424e8e7be1c2868c3a3dd46997e5b10a045c59ce9b563db70c7c73b8fad15d89280e1071e7acde370aa59b12b205a1aebba491eb277d847061ef6b231c4b7e7e1f", @generic="eb36e784315febdcc6436652d3919c99e625a68a4ec2ce3337348c5d70b03c8be745405182621b153bf8011377d823bb0c54cbb10ec03843150b5b739de79d5c", @nested={0x4, 0x1d}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1ad, 0x30, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r7}, @generic="b386104053c010acdf9aa94d81ff0f5dcef76060d4ae93e8d1f71986fad27c92918b9442a2759e8d6b2d26617a32d0f44a3ae09ae9eb7fce81fd87ce898a7e6f1d5531eb81c17e42696226c2", @generic="18157ebaae187254dcf4760a4a79bc401822f7e43c9a72a6447335579085894bd0f99559ee9a0258118141214d77f7f536af3b8e663d562ba32469f09ffe5c65fbe7bcdf3d36d5f5378a2252038398e98d3339caf948cbe6bff9b6a3c079fb6d4b631da5f5f8afd7a46fd3b88383bb0c5642ab14c3c05f8d4c4506de7347b9e0055c75633ee3978c9e66a99ff4875b82a449d8c5e46f4d1296719c10f28cb9208ee41ca8a31666182de8389ce6044d4ade90112d302d0411cb29dcde1dcccf4bb0c76d5e2f30b43ae823ac040e4cb759fdc763a922", @typed={0x69, 0x120, 0x0, 0x0, @binary="6b8ddecff41494f13cefc50124a50cbb09adc5aaa73db2e4c84e5cb15411a4c1828c8d984e685171e65ac0736f45e05232401245890c23dad4bb650c009962e47ced60aaa3f85298fa0f482b13a9c5b2d136c7bba5a061fbe1e43511fed5f29717cbb70f25"}]}, @nested={0xaa, 0x13d, 0x0, 0x1, [@generic="62415398e2dfc453fdd343e3eb8eb22b14341ac35745140f63022826a8bd225d3be1adcb5393c1a1d95503d098bb0514648488a3f89acc907575b7aeefae58476e67ffb866af209f3574ba2270ef7247309ae2c2c4bc8ceb51bc1a6ae2336099c1ee71b2fb700987c390fb16607b97f477e9e4918c5a49f99bf425aebbf3b50bacb518519c3fe3050f54", @typed={0x1a, 0xde, 0x0, 0x0, @str='/dev/binderfs/binder0\x00'}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x1000}, @ETHTOOL_A_STATS_GROUPS={0x172, 0x3, 0x0, 0x1, [@typed={0xc, 0x9e, 0x0, 0x0, @str='#,*[%&+\x00'}, @nested={0x18, 0xa7, 0x0, 0x1, [@nested={0x4, 0x15c}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}]}, @typed={0xc, 0x113, 0x0, 0x0, @u64=0xa6}, @nested={0x6a, 0x78, 0x0, 0x1, [@typed={0x14, 0xed, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x21}, @typed={0x8, 0x140, 0x0, 0x0, @uid=r8}, @generic="b9f1a1ff2fe297804de02517b333c2ad8a229668699fa7bcb25b78ee59093732551906d0403ec79c7ae104a122151df2c2ffdcc7cad917d8dccda86fa6da3c131d6ae3f5fee9"]}, @typed={0x8, 0xe5, 0x0, 0x0, @pid=r10}, @generic="897a4f82fb081f696c8007f417818a2b8b9aa06f40cb47bf83524b860f85a5acb43edf579208a68f4c06e4944f63d7a138eb9e6b9c2e988759685b3962b55421ae9b04715b697922aa79c3c1c5649bac2a557c496021f159f83d2df10503", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x414}, @nested={0x62, 0xfe, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @u32=0x7}, @generic="453074c9ce86a964a9976c1e14285355f69242859af72e7894e1f0c43efda6db3cba13e147aff88ffe730baadd11edc89641a3de5503f0e6d14e927eba92", @typed={0x8, 0x13d, 0x0, 0x0, @pid=r11}, @typed={0xd, 0x12d, 0x0, 0x0, @str='\'*{@/[%]\x00'}]}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0xf9f6}]}, 0x758}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) (async)
read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000002700)=""/112, 0x70) (async)
kexec_load$auto(0x7, 0x3, &(0x7f00000027c0)={@kbuf=&(0x7f0000002780)="aaa76174f67c949b2a81c4fee8e4471568751ce20cfd101b98a2d0804ab44d", 0x6, 0x4, 0x6}, 0x2)
kcmp$auto_KCMP_FILE(r9, r10, 0x0, r5, r5) (async)
socket(0x28, 0x0, 0x6)
write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000002800)="483368b49591fd02bbd6f2b0e3f54870f0e5e84480a3458de8c6147a3219e7c0f06d994e29dfc8926d32140776ac81d08b065c423f0d1d54a2e8ed5e4b7c078b3747c0023bc4f25f72ca4ae67bfd200531e50a7b186796532c63158ac2", 0x5d) (async, rerun: 64)
bpf$auto(0x5, &(0x7f0000002880)=@batch={0x2, 0x1ff, 0x89, 0x6, 0xc2, <r12=>r2, 0x5, 0x7}, 0x8000) (rerun: 64)
getsockopt$auto_SO_ERROR(r2, 0x5, 0x4, &(0x7f0000002940)='$}+:\x00', &(0x7f0000002980)=0x1) (async)
read$auto_snd_pcm_oss_f_reg_pcm_oss(r12, &(0x7f00000029c0)=""/106, 0x6a)

2m18.906217134s ago: executing program 0 (id=992):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x1d, 0x3, 0x1)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyqe\x00', 0x201, 0x0)
socket(0x2, 0x1, 0x0) (async)
write$auto_tty_fops_tty_io(r1, &(0x7f00000009c0)="8939cc4d36227fdb35e4a7779345a4d999cb1552f41b34b4003355454e96e6647b34e58345a013e46d9380cd77dcd9b5804ab378df5b19fd93b23d547b6a39e0563f1da27d880a0c7a41ada96f5899128a2f138a38855f3a0e5090cfcb022a807fd8d8410e21962aea3354ff7d28917ad17443189afcba863b21eedff9ef8944e15848033f30ec1ce206287db0755992c3d95fa6c7a2ecb44696ce661038bdc304c775605215501e237d8713947274ff5249f4fefe090d0581a07ac675fdc5da272124ae5975977941ead35326b8dd9ef2562c730a1df311", 0xd8) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x9, 0x0, 0x0, &(0x7f00000001c0)={[0x1fe, 0x7, 0x3, 0x9, 0x9488, 0x800000000009, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
close_range$auto(0x2, r2, 0x673)

2m18.72035577s ago: executing program 0 (id=994):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$auto_NS_GET_OWNER_UID(r0, 0xb704, 0x0)
r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto(0x3, 0x4611, r1)

2m18.717910299s ago: executing program 0 (id=995):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2201, r0)
setgroups$auto(0xa1, &(0x7f0000000000)=0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000180)="999cd79be38ed37355a4da7bff947ce33d23443faa5aaf333a32f71b402f5ec795d7abd5e15a341c3316d6af2cd759b024447a5b233471bef44f95ca4e880e0b05973fc6ab6a73144af50a5568cf5a8c30c1cd7bbc9015f9f20a68f27a40e1607bd6fc2144b121ac1593b0edf7f44b496f6e68c86749daef77101b7bc10ebb441ae692b6b6d49f1019aef5976cd3fe9c925d7f50", 0x0, &(0x7f0000000300)={&(0x7f0000000240)="edf756e98d095db07356d5244bdeef16665f331b354766ee3e291f3f76f33b1410ce12309e527d64fc8d0023793cda46349fa950af6ad67cbf46e3ee52652daa6e0081cd5e09fe30323562cf7341a4ea47717f968899807376c4bb1dd0cec275b339aa2fc49db2170337c6e5c63bbf4e2ff826d15c6618b83bc52b32088a26990d04a1c3789870177cb05056cad34ba0f45b30ed9dec448ddbd40eb24d72286992e23ef91f04c7200cca942c1d"}, 0xe, &(0x7f0000000340)="5bbdd38c021b9410752d7b5c3a59299a8ede1395dccf9e0dfa65d07298ed0b67682ebde728f8d307775cb72f6f9e92c7c8dfde664a73673164fbb7df5848d7cf8fc53eeec5a6141cd66660d3478e6ac3c1e6563c22d35b473c51a40159b5316aa39a6e186212714585d6efb46f2f326f04d496e0192934545c7a941ed6d24c4d252af39ea65431", 0x8, 0x100}, 0xa1}, 0x9, 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)

2m10.70618853s ago: executing program 33 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8342, 0x0)
writev$auto(r1, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
setreuid$auto(0x80000000, 0x7fffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
lsm_list_modules$auto(0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0x5c8)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000000c0), r0)
sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0xe}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002200)={0x14, r4, 0x1, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x48084)
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014)

2m9.228869192s ago: executing program 1 (id=1024):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r0, 0x1, 0xb, 0x0, 0x4)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1000008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/ip_vti0/dev_id\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25120023000800070001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x800)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x4, 0x2)
r4 = socketcall$auto(0xffe, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_DEV_GET2(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto(0x3, 0xc008ae67, r4)

2m8.659690519s ago: executing program 1 (id=1027):
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = epoll_create$auto(0x20009)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x2)
r1 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=0x0, @ANYBLOB="06000600050000000600060037000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r1, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x800, 0x0)
mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000540)='!', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES64=r2, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0)
write$auto(r4, &(0x7f0000000040)='\\\x00', 0x2)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
unshare$auto(0x40000080)

2m8.240090308s ago: executing program 1 (id=1028):
close_range$auto(0x2, 0xa, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
sendfile$auto(r0, r1, 0x0, 0x800048)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xc0684608, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/irq/0/smp_affinity_list\x00', 0x81, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="d3c809ab0000fedbdf2502000000040002000400048008000100f8ffffff04000600"], 0x28}}, 0x8080)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r6)
sendmsg$auto_OVS_VPORT_CMD_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18004300", @ANYRES16=r7, @ANYBLOB="030329bd7000fbdbdf250300000004000500", @ANYRESDEC=r2], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010)
r8 = fsopen$auto(0x0, 0x1)
ioctl$auto_TIOCSBRK2(r8, 0x5427, &(0x7f0000000040))
mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
geteuid()
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setrlimit$auto(0x9, 0x0)

2m6.97309579s ago: executing program 1 (id=1033):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x82`\x00\x00\x00\x00\x00\x00w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\xebs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x100000001)
mlockall$auto(0x7)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x20140, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r3, [], {0x6, 0x20000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x83, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0x11, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xb, 0x400001, 0x200948d, 0x3, 0x4, 0xe, 0x7, 0x5, 0x8000001f, 0x8, 0x4d3e, 0x200000002, 0x2, 0xffffffffffffffff]}, 0x0)

2m5.995334454s ago: executing program 1 (id=1035):
mmap$auto(0x0, 0x7, 0xdf, 0xeb2, 0x401, 0x8000)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x40000, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x40000, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880)
ioctl$auto(0xc8, 0x800454e1, 0x5c8d)
mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0)
ioctl$auto(r4, 0x540b, 0x0)
unshare$auto(0x40000080)
read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000100), 0x610040, 0x0)
read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000002140)=""/4104, 0x1008)
write$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000180)="926486b20d5afe08e5f92eb9c6b08cdc6c80baefcf065a92e92ce0997146783271424c90bae16ddcfa59ea30d2cdf88e27aaf0b20f6ee0a2381033c1c7cfa9998b6e4aa78435c1bd3f7f9dc0e162", 0x4e)
r5 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f00000010c0)=0x1)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r5, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084)
wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0)
inotify_add_watch$auto(r3, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
timer_create$auto(0x9, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001040)='/dev/ttyy5\x00', 0x400, 0x0)
write$auto(0x3, 0x0, 0x100082)

2m5.054330183s ago: executing program 1 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20004080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram13\x00', 0x666a02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
getxattr$auto(0x0, 0x0, 0x0, 0x5)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1a3002, 0x0)
rmdir$auto(&(0x7f0000004840)='.\x00')
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0xc}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0)
ioctl$auto(r3, 0x4b3a, 0x1)

2m3.575065298s ago: executing program 34 (id=995):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2201, r0)
setgroups$auto(0xa1, &(0x7f0000000000)=0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000180)="999cd79be38ed37355a4da7bff947ce33d23443faa5aaf333a32f71b402f5ec795d7abd5e15a341c3316d6af2cd759b024447a5b233471bef44f95ca4e880e0b05973fc6ab6a73144af50a5568cf5a8c30c1cd7bbc9015f9f20a68f27a40e1607bd6fc2144b121ac1593b0edf7f44b496f6e68c86749daef77101b7bc10ebb441ae692b6b6d49f1019aef5976cd3fe9c925d7f50", 0x0, &(0x7f0000000300)={&(0x7f0000000240)="edf756e98d095db07356d5244bdeef16665f331b354766ee3e291f3f76f33b1410ce12309e527d64fc8d0023793cda46349fa950af6ad67cbf46e3ee52652daa6e0081cd5e09fe30323562cf7341a4ea47717f968899807376c4bb1dd0cec275b339aa2fc49db2170337c6e5c63bbf4e2ff826d15c6618b83bc52b32088a26990d04a1c3789870177cb05056cad34ba0f45b30ed9dec448ddbd40eb24d72286992e23ef91f04c7200cca942c1d"}, 0xe, &(0x7f0000000340)="5bbdd38c021b9410752d7b5c3a59299a8ede1395dccf9e0dfa65d07298ed0b67682ebde728f8d307775cb72f6f9e92c7c8dfde664a73673164fbb7df5848d7cf8fc53eeec5a6141cd66660d3478e6ac3c1e6563c22d35b473c51a40159b5316aa39a6e186212714585d6efb46f2f326f04d496e0192934545c7a941ed6d24c4d252af39ea65431", 0x8, 0x100}, 0xa1}, 0x9, 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)

1m55.884547222s ago: executing program 5 (id=1063):
bpf$auto(0x5, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0xa, 0xa, 0x7fffffff, 0x108800000, 0xff, 0x6, 0x2be2b3fd, 0x8000, 0x10000, 0x2, 0x7, 0xfffff890, 0x1, 0x2}, 0x80)
socket(0x2, 0x3, 0xa)
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0)
read$auto_bm_entry_operations_binfmt_misc(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x30, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x0, 0x53, 0x10}, @NL80211_ATTR_CH_SWITCH_COUNT={0x3f, 0xb7, 0x200005}, @NL80211_ATTR_OFFCHANNEL_TX_OK]}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="1f00a9ced5ac9e1de52053000000080042fa49000000"], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x4000040)
ioctl$auto(r0, 0x64c6, 0x1e2)
r6 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r6, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r6, &(0x7f0000000000)='\\*)A\x00', 0x1, 0x2, 0x0)
ioctl$auto_BLKSECDISCARD(r6, 0x127d, 0x0)
sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="100027bd7000ffdbdf258300000017000700960b0000007ec37efe49d59a9bab6b7e3ed35f00080061000000000008003500060000005a00fd007d2e2ffc7773fbaa56726fb4dd13d511ceb83d13452fd213f8d1f32234f8747fa6f839fc7ccef156fcb77b565e4a317f9b54c160e06c2fd55283befc264ddbb73cd0ad7c8c575e1c42d1942ab6a1113714fe58d282d200004b007300060066004e220000060066004e230000"], 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x24044080)
close_range$auto(0x2, 0x8, 0x0)
r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), r1)
sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000076d3f6330c8e52621b82970ba1de70461dcaa68e231db32f1e77ea652fdc8b651520ec479ea78b4016d54ccb33b4777c57b08871330cafb16c94855f992d172355af9e0f383d6b0ff68ca17193e4d4f48ceaa1e140db40ed5fc0f43b4baa27c78ee67", @ANYRES16=r7, @ANYBLOB="000127bd7000fe9bdf250300000008002b0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
fcntl$auto_F_GETSIG(r3, 0xb, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

1m55.290194625s ago: executing program 5 (id=1065):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(r0, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7)
r2 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x311000, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000805}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB='f'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6)
r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0)
setsockopt$auto_SO_RESERVE_MEM(r1, 0x8, 0x49, &(0x7f0000000080)='/sys/kernel/security/lockdown\x00', 0x3b)
write$auto_lockdown_ops_lockdown(r3, 0x0, 0x0)
socket(0x2, 0xa, 0x800)
listen$auto(r0, 0xf52e)

1m54.852465215s ago: executing program 5 (id=1068):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0)
readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0xc)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x7, 0x1ff, 0x4, 0x15, r2, 0x4e1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0)
read$auto(r3, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, 0x0, 0x6a)
connect$auto(0x3, 0x0, 0x54)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r4, 0x0, 0x4)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0x3)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)

1m53.459772525s ago: executing program 5 (id=1071):
mmap$auto(0x59, 0x2000d, 0x4000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
mmap$auto(0xfffffffffffffffe, 0x0, 0x1, 0x11, 0x2, 0x4)
unshare$auto(0x40000080)
bpf$auto(0x5, &(0x7f0000001180)=@link_update={0xffffffffffffffff, @new_prog_fd=<r0=>0xffffffffffffffff, 0xf, @old_map_fd}, 0x80000007)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0x200, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x8000009, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x9, 0x400300000000000, 0xdb, 0x3, 0x6, 0x3, [0xfffffffffffffffe, 0x4, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc6f, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x1, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d)
write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147)
readv$auto(0x3, 0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000)
kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x8000, 0x403000}, 0x4)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='\x00', &(0x7f00000001c0)="3b4ec31ec0f99f7204157cf35a18ec5deee46d8199213352d586fa8f5221aba1444d24903f49bc1dae1d817f5dcd6aa4ecd33b62cc5abe6ef526851713c0cffa477ac0f9c3a30e7adf8bcbbfb8c0b164dfc1c5c35a14dce07e769daa726b15cbfbefc1c4a262de7b4141b435c73f4b47ede2e0369ce0edab9f7d3b2e1c35b8f3eff4e58144bdfb99e2956f8b262b81bce85d444857ba046847ea751e661795273ce6e1d428f028647118e3f94cdc3c3e8cc3db83a9362f6551e64476b7ae65cc1aab7b59e5206a", 0x0)
r2 = semctl$auto_GETPID(0x5, 0x80000001, 0xb, 0x5)
msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000013c0)={{0x1ff, 0x0, 0x0, 0x6, 0x9, 0x1, 0x7}, &(0x7f0000001340)=0x9, &(0x7f0000001380)=0x40, 0x8, 0x1, 0x5, 0x7, 0xb, 0x101, 0x7ff, 0x2, @raw=0x5, @inferred=r2})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x100, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000880)='/dev/binderfs/binder0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
write$auto(r3, 0x0, 0xfffffdf1)

1m52.03427659s ago: executing program 5 (id=1075):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0)
sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, r1, 0x300, 0x70bd29, 0x6, {}, [@NFC_ATTR_LLC_SDP={0x104, 0x13, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @u32=0x6}, @typed={0xf6, 0x140, 0x0, 0x0, @binary="3aff29ee7c14fc65328ba8c7171dec9cff63a246080698ae77b83bbd997f4c1f5578527d12f9579168b89c96a9b21a5f177b19ef7c7ed83c41c011ab6453f35c295d2acd5bbc1d1cef41129ddb565d7ca1c966ed8bf13c8de4414720878220a5ed2d4c37c204d908e441bc171a094ee2b0de67ca6527dc93a2a2b4a93dcd1472d4478f0cfb66732182d95ee3089dd33e3db9bd8d92b48e3546ee7c7c23bebfeafd4239cd88de5752ab16f9a7d2a1d7c1681d2c181f22e9dd653e585a9ee8fcd4cf05400695dc3270c1519665ae3afeeca35152df9de5526a13b82e438750204d4bbe4341ba1d03205d6986fcdec8f5124e02"}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
write$auto(r0, 0x0, 0xfffffdf1)
linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000001c0)={0xb4, r3, 0xc0dce8a66cb0a7ff, 0x170bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f9"]}, @IPVS_CMD_ATTR_DEST={0x97, 0x2, 0x0, 0x1, [@nested={0xc, 0x12a, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @fd=r2}]}, @generic="ba0d2e9ad17b4eda9a3474b926bc256d8576ea3c486dcedae70788f5c63c71af7027b4c01b2de062ed760c8a57fe5efda81d15da2d56ffd0d36263bf55485cadeb19b1b9e66c2032a318f801335044e0429bb5328b231ca9d8b6fbe29c74b81f3515fa1eddad4a54f1b092758d82bb6612696bad8287ca7048c64a808a2fd8a1c93aaa0edc176f"]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040011}, 0x44014)
getcwd$auto(0x0, 0xffffffffffffffff)
unlinkat$auto(0xffffffffffffffff, 0x0, 0x200)
mprotect$auto(0x0, 0x8000000000000001, 0x8)

1m51.349521474s ago: executing program 5 (id=1077):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f00000003c0)={&(0x7f0000000240)="d4b5bb306511155bfb41ecd8ebb5e4b961745c2534544b85fe0e8813a22720f31c7aa7acb40128235f25c75e840ab8efc67789f002505b23edc2b8e5c7c816d0a8a3459f24b3f786d34d965a33c52f78ff956ef1", 0xf9}, 0x3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
socket(0xa, 0x3, 0x3b)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0)
wait4$auto(r2, 0x0, 0x80000001, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
prctl$auto_PR_SCHED_CORE_CREATE(0x0, 0x1, 0xffffffffffffffff, 0x4, 0x7)
close_range$auto(0x2, 0x8, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)

1m49.956479486s ago: executing program 35 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20004080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram13\x00', 0x666a02, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0)
mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
getxattr$auto(0x0, 0x0, 0x0, 0x5)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1a3002, 0x0)
rmdir$auto(&(0x7f0000004840)='.\x00')
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0xc}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0)
ioctl$auto(r3, 0x4b3a, 0x1)

1m35.86074128s ago: executing program 36 (id=1077):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
writev$auto(r0, &(0x7f00000003c0)={&(0x7f0000000240)="d4b5bb306511155bfb41ecd8ebb5e4b961745c2534544b85fe0e8813a22720f31c7aa7acb40128235f25c75e840ab8efc67789f002505b23edc2b8e5c7c816d0a8a3459f24b3f786d34d965a33c52f78ff956ef1", 0xf9}, 0x3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3b)
socket(0xa, 0x3, 0x3b)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0)
wait4$auto(r2, 0x0, 0x80000001, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
prctl$auto_PR_SCHED_CORE_CREATE(0x0, 0x1, 0xffffffffffffffff, 0x4, 0x7)
close_range$auto(0x2, 0x8, 0x0)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)

1m10.785027577s ago: executing program 3 (id=1207):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0xca, &(0x7f00000004c0)='\x04>2\x18!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5BV\xb1\x92l\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\t\x13K\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbcn\x8d\xf3\f\xbe\x9f\xed\xc1k\xcf\x0f`6\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}*\xce\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\x8e\x06h\xc0\x8f\x04\xceB\x03\xda\x89\x8f\xf3g\x1a\xb8\x1a\x18\xf2\x93DRSO\x97\xb1\xc3\xa8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\vu\xc9\xef\x0f\xbd(y8@\xca\xec(\xe8\x91\xf8$<\x81\x85\xac\xd7\x878\xd9\xce%\xcf\xab\xdb\xaf{\x82\x83\x8d\xce\xc0\r\xb6\xe4$\xd0<\xf8\xeay \xf1\x19\xb3Ta~*&\xd8\xc8\x00%\xdc\xbc;\x9f\xcf\xf0\xd8\xd7 \xa5\x8b\x10o \x13s}{\xe5\xb2\xd9;_\xec\xdef\xb1<\x18qg\x1e{\xba\xb0\xf7\xbb\xca\x00'/323, 0x7f)
readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)="d0e0be72e7b882c1", 0x2}, 0xf23)
ptrace$auto(0x8, 0x0, 0xffffffffffffffb5, 0x2)
getpid()
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb3, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)

1m10.638295426s ago: executing program 3 (id=1209):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x0) (async)
r0 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000000c0)={0x7, &(0x7f0000000000)={0x6, 0x5, 0x8, @raw=0xa}})
ioctl$auto_RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)={0x0, 0x6, {0x2ff6, 0x2, 0x9, 0xae18, 0xaa, 0x80, 0x1, 0x101}}) (async)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0)
preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x8, 0x80000005, 0x3) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, <r4=>r3}, 0x6a)
sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x3, 0x2, 0x42, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
getgroups$auto(0x1, 0x0)
shutdown$auto(0x200000003, 0x2) (async)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async)
socket(0x2, 0x3, 0xa) (async)
connect$auto(0x3, 0x0, 0x54) (async)
prctl$auto_PR_SET_IO_FLUSHER(0x39, 0x4, 0x8000000000000000, 0x5, 0x8) (async)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)

1m9.973086476s ago: executing program 3 (id=1212):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0)
socket(0x10, 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xa)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x80000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/open_files\x00', 0xd00, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x7ff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff)
write$auto(0x0, 0x0, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x2c, r2, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x9, 0x4, 0x0, 0x1, [@generic="ac00fc008f"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x541c, r3)

1m8.597717285s ago: executing program 3 (id=1214):
ioctl$auto(0xffffffffffffffff, 0x92106408, 0xffffffffffffffff)
mmap$auto(0x59, 0x2000d, 0x4000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
mmap$auto(0xfffffffffffffffe, 0x0, 0x1, 0x11, 0x2, 0x4)
unshare$auto(0x40000080)
bpf$auto(0x5, &(0x7f0000001180)=@link_update={0xffffffffffffffff, @new_prog_fd=<r0=>0xffffffffffffffff, 0xf, @old_map_fd}, 0x80000007)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0x200, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x8000009, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x9, 0x400300000000000, 0xdb, 0x3, 0x6, 0x3, [0xfffffffffffffffe, 0x4, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc6f, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x1, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d)
write$auto(r1, 0x0, 0x10001)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147)
readv$auto(0x3, 0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000)
kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x8000, 0x403000}, 0x4)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='\x00', &(0x7f00000001c0)="3b4ec31ec0f99f7204157cf35a18ec5deee46d8199213352d586fa8f5221aba1444d24903f49bc1dae1d817f5dcd6aa4ecd33b62cc5abe6ef526851713c0cffa477ac0f9c3a30e7adf8bcbbfb8c0b164dfc1c5c35a14dce07e769daa726b15cbfbefc1c4a262de7b4141b435c73f4b47ede2e0369ce0edab9f7d3b2e1c35b8f3eff4e58144bdfb99e2956f8b262b81bce85d444857ba046847ea751e661795273ce6e1d428f028647118e3f94cdc3c3e8cc3db83a9362f6551e64476b7ae65cc1aab7b59e5206a", 0x0)
r2 = semctl$auto_GETPID(0x5, 0x80000001, 0xb, 0x5)
msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000013c0)={{0x1ff, 0x0, 0x0, 0x6, 0x9, 0x1, 0x7}, &(0x7f0000001340)=0x9, &(0x7f0000001380)=0x40, 0x8, 0x1, 0x5, 0x7, 0xb, 0x101, 0x7ff, 0x2, @raw=0x5, @inferred=r2})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x100, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000880)='/dev/binderfs/binder0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
write$auto(r3, 0x0, 0xfffffdf1)

1m6.369305651s ago: executing program 3 (id=1220):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0xe9882, 0x0)
write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
io_uring_setup$auto(0x59, 0x0)
getpid()
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0xaa, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
io_uring_setup$auto(0xa, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'})
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f50128a10923a7860219476651059216ec842c7ba4df"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
madvise$auto(0x0, 0x200007, 0x19)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)

1m4.898335777s ago: executing program 3 (id=1225):
timer_settime$auto(0x1, 0x3, 0x0, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
statx$auto(r1, 0x0, 0x1003, 0xf, 0x0)
r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0)
writev$auto(r2, 0x0, 0xb)
socket(0xa, 0x3, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38)
r3 = fcntl$getown(r0, 0x9)
prctl$auto(0x79, 0x7, r3, 0x4d, 0x1)
getrlimit$auto(0x3, 0x0)
r4 = ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4)
waitid$auto_P_PID(0x1, r3, &(0x7f0000000200)={@siginfo_0_0={0x6, 0x7f, 0x1, @_sigfault={&(0x7f00000001c0)="816385706eef35c97ebde84ec4f85324ec7a758e440c693a3252da493a30a645520d6bee476f565c82d309604d3e06dc285d91a7b837c5266c62", @_addr_pkey={"6be20eec325592ca", 0x4}}}}, 0x5, &(0x7f0000000280)={{0x0, 0x4}, {0x8cd, 0x3}, 0x8, 0xffff, 0x2, 0x91, 0x2, 0x5, 0x25d, 0x3, 0x10, 0x0, 0xc, 0x9, 0x6})
r7 = getpid()
socket(0x1a, 0x1, 0x9)
process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="cfe482d7", @ANYRES16=r6, @ANYBLOB="00022dbd7000fedbdf251d00000008002100ffffffff08000d0007000000c8102f8008008900", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000f00e000000208000e000800000008001c00", @ANYRES32=r3, @ANYBLOB="08001600040000000600090004000000"], 0x110c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x6)
ioctl$auto_SCSI_IOCTL_STOP_UNIT(r5, 0x6, &(0x7f0000000040)="908f4f794ba14154eacfb89f7fa13931bb9d847f2a8286f6c49bef6b507ba008073387473a06a2e6785b109d3c42f123a2422b7a776c9a515b7332a0ae1cfae0774924c8c14c09d78881da1573f30fc3bf4fb3d0fc659151888cd00794e1f80e941f260db7211f783b2dcfabe3606fccf1b39c2bd8440ba61aeaa13635bbb63ed682fe98e4f1f452b4fe47b397f763c70cf95ce4c9eaacdca8a170bcc718eabfc0bc5d06b2494bee543f123da4a25c96fd90b507a7582ffec5b52b62b1485a776d4c366c7f8a467845449fb8ecd1bdc5e49e69c3ff93b43446d90bb2da075950417efbb3852f88bdf1256ab56e")
setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3)

58.420962936s ago: executing program 8 (id=1238):
mmap$auto(0x0, 0x400008, 0xdf, 0x89b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x5, 0x0)
r0 = epoll_create$auto(0x4)
write$auto_random_fops_random(r0, &(0x7f0000000040)="08e3e07dbe30c77080249933698f92250e5f4fb93d9677d42f9681f8466441e6c322aa0c7f3f8c4a22672fd71d5612f3f0a5d7ca7202f3", 0x37)
sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x69}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x2}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x8000}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xffff}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x29fc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x44000)
r1 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800)
capset$auto(0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
epoll_ctl$auto(0x5, 0x3, r2, 0x0)
r3 = socket(0x18, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r5 = socket(0x18, 0x5, 0x1)
connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x40047459, 0x0)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0)
sendfile$auto(r7, r7, 0x0, 0x1048)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_LINK_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000f40)={0x14, r6, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000015}, 0x40004)

57.81606422s ago: executing program 8 (id=1241):
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0)
getrlimit$auto(0x3, 0x0)
ioctl$auto(0x3, 0x400c4d05, r0)
ioctl$auto(0x3, 0x400c4d09, r0)
close_range$auto(0x2, 0xa, 0x0)

57.300033423s ago: executing program 8 (id=1243):
clock_gettime$auto(0xb, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0)
write$auto(r0, 0x0, 0x81)
io_setup$auto(0x7ffe, &(0x7f0000000000))

56.942448604s ago: executing program 8 (id=1244):
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
epoll_create$auto(0x20009)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x2)
r0 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

56.509354237s ago: executing program 8 (id=1247):
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
listmount$auto(&(0x7f0000000080)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffff7, 0xf}, 0x0, 0xb22, 0x1)
mmap$auto(0x0, 0x2, 0x3, 0xffffffff, 0xfffffffffffffffa, 0x7ffc)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mmap$auto(0x0, 0x3, 0xb, 0x55becab1, 0x5, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x400, 0xe31, 0x401, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0xa042, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000002c0), 0x0)
socket(0xa, 0x2, 0x73)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
msgget$auto(0x4, 0x5)
r1 = userfaultfd$auto(0x5)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r1)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x6b)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x5c)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

54.545222869s ago: executing program 8 (id=1250):
r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x40, 0x0)
read$auto_proc_setgroups_operations_base(r0, &(0x7f0000000080)=""/173, 0xad) (async)
r1 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x100) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4802004}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "38754830374feeee504f7bdf021e94684368e9181e8b967ca396"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24040890)
mmap$auto(0x0, 0x400008, 0x204, 0x9b72, 0xffffffffffffffff, 0x800000000008000) (async)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x401, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek$auto(r5, 0x9, 0x0)
getdents$auto(r5, &(0x7f00000004c0)={0x100, 0xa, 0x4}, 0x62d4) (async)
write$auto_proc_mem_operations_base(r5, &(0x7f0000000240)="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"/420, 0x1a4)
r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
getsockopt$auto_SO_MARK(r6, 0xcd0, 0x24, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x651)

49.476400162s ago: executing program 37 (id=1225):
timer_settime$auto(0x1, 0x3, 0x0, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
statx$auto(r1, 0x0, 0x1003, 0xf, 0x0)
r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0)
writev$auto(r2, 0x0, 0xb)
socket(0xa, 0x3, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r0, 0x400454ca, 0x38)
r3 = fcntl$getown(r0, 0x9)
prctl$auto(0x79, 0x7, r3, 0x4d, 0x1)
getrlimit$auto(0x3, 0x0)
r4 = ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4)
waitid$auto_P_PID(0x1, r3, &(0x7f0000000200)={@siginfo_0_0={0x6, 0x7f, 0x1, @_sigfault={&(0x7f00000001c0)="816385706eef35c97ebde84ec4f85324ec7a758e440c693a3252da493a30a645520d6bee476f565c82d309604d3e06dc285d91a7b837c5266c62", @_addr_pkey={"6be20eec325592ca", 0x4}}}}, 0x5, &(0x7f0000000280)={{0x0, 0x4}, {0x8cd, 0x3}, 0x8, 0xffff, 0x2, 0x91, 0x2, 0x5, 0x25d, 0x3, 0x10, 0x0, 0xc, 0x9, 0x6})
r7 = getpid()
socket(0x1a, 0x1, 0x9)
process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="cfe482d7", @ANYRES16=r6, @ANYBLOB="00022dbd7000fedbdf251d00000008002100ffffffff08000d0007000000c8102f8008008900", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000f00e000000208000e000800000008001c00", @ANYRES32=r3, @ANYBLOB="08001600040000000600090004000000"], 0x110c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x6)
ioctl$auto_SCSI_IOCTL_STOP_UNIT(r5, 0x6, &(0x7f0000000040)="908f4f794ba14154eacfb89f7fa13931bb9d847f2a8286f6c49bef6b507ba008073387473a06a2e6785b109d3c42f123a2422b7a776c9a515b7332a0ae1cfae0774924c8c14c09d78881da1573f30fc3bf4fb3d0fc659151888cd00794e1f80e941f260db7211f783b2dcfabe3606fccf1b39c2bd8440ba61aeaa13635bbb63ed682fe98e4f1f452b4fe47b397f763c70cf95ce4c9eaacdca8a170bcc718eabfc0bc5d06b2494bee543f123da4a25c96fd90b507a7582ffec5b52b62b1485a776d4c366c7f8a467845449fb8ecd1bdc5e49e69c3ff93b43446d90bb2da075950417efbb3852f88bdf1256ab56e")
setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3)

38.900550758s ago: executing program 38 (id=1250):
r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x40, 0x0)
read$auto_proc_setgroups_operations_base(r0, &(0x7f0000000080)=""/173, 0xad) (async)
r1 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x100) (async)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4802004}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "38754830374feeee504f7bdf021e94684368e9181e8b967ca396"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24040890)
mmap$auto(0x0, 0x400008, 0x204, 0x9b72, 0xffffffffffffffff, 0x800000000008000) (async)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x401, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek$auto(r5, 0x9, 0x0)
getdents$auto(r5, &(0x7f00000004c0)={0x100, 0xa, 0x4}, 0x62d4) (async)
write$auto_proc_mem_operations_base(r5, &(0x7f0000000240)="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"/420, 0x1a4)
r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
getsockopt$auto_SO_MARK(r6, 0xcd0, 0x24, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x651)

10.344183901s ago: executing program 7 (id=1398):
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x28, 0x80000, 0x7ffffdfc)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="10000d7d478fb0f83cbb590c68f52d96d8"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x3c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
msync$auto(0x200000, 0x2000000005, 0x6)

9.607502328s ago: executing program 7 (id=1402):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0)
readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0xc)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x7, 0x1ff, 0x4, 0x15, r2, 0x4e1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0)
read$auto(r3, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x54)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r4, 0x0, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6e, 0x0, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0x3)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)

8.956544632s ago: executing program 7 (id=1406):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(r0, r0, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="010026bd7000fd038008000180045f22b1b1576a0f"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0)
socket(0x2, 0x80802, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f00000000c0)="f610c902de8017189f2454d0f342848189e268aa2b5ac3508442e24392d3c23c62be5a4a40afd7", 0x11, 0x0, 0xb, 0x0, 0x1f, 0x84c}, 0x800089}, 0x7, 0x6)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x68982, 0x0)
ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0xe8d})
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0)
recvfrom$auto(0x3, 0x0, 0x77aa619b, 0x102, 0x0, 0xfffffffffffffffd)
mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000054c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005480)={&(0x7f0000003080)=ANY=[@ANYBLOB='\x00$\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2400}, 0x1, 0x0, 0x0, 0x1000}, 0x40004)
mmap$auto(0x8000000000000000, 0xe983, 0x7f, 0x1000000eb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/nfsfs/servers\x00', 0x400, 0x0)
pread64$auto(r3, 0x0, 0x1ff, 0x8800000000)
mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400007, 0x0, 0x9b72, 0xffffffffffffffff, 0x0)

7.786391884s ago: executing program 7 (id=1414):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0)
readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0xc)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x7, 0x1ff, 0x4, 0x15, r2, 0x4e1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0)
read$auto(r3, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x54)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r4, 0x0, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6e, 0x0, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0x3)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)

4.629270612s ago: executing program 9 (id=1424):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f00000001c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4)
r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
getsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x3, 0x41, &(0x7f0000000000)=':\xac\x00', &(0x7f0000000140)=0x401)

4.503801619s ago: executing program 9 (id=1425):
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
epoll_create$auto(0x20009)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x2)
r0 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=0x0, @ANYBLOB="06000600050000000600060037"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.379989154s ago: executing program 7 (id=1426):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
r0 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0)
read$auto_bm_entry_operations_binfmt_misc(r0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x22a01, 0x0)
io_uring_setup$auto(0x0, 0x0)
getpid()
unshare$auto(0x40000080)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x20000080)
fcntl$auto_F_GETSIG(r1, 0xb, 0x61754066)
syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000ca858c4e1e6aa90920080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0)
futex_waitv$auto(&(0x7f0000000140)={0xf, 0x5d97, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x11)
write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef)
r4 = socket(0x15, 0x5, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
r5 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r5, 0x114, 0x2715, 0xfffffffffffffffc, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4.229246136s ago: executing program 9 (id=1428):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x82`\x00\x00\x00\x00\x00\x00w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\xebs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x100000001)
mlockall$auto(0x7)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x20140, 0x0)
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r3, [], {0x6, 0x20000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x83, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0x11, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xb, 0x400001, 0x200948d, 0x3, 0x4, 0xe, 0x7, 0x5, 0x8000001f, 0x8, 0x4d3e, 0x200000002, 0x2, 0xffffffffffffffff]}, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0x2003f2, 0x15)

4.041216176s ago: executing program 2 (id=1429):
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = epoll_create$auto(0x20009)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
r1 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=0x0, @ANYBLOB="06000600050000000600060037000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r1, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x800, 0x0)
mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0)
r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000540)='!', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES64=r2, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0)
write$auto(r5, &(0x7f0000000040)='\\\x00', 0x2)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
unshare$auto(0x40000080)

3.387298945s ago: executing program 6 (id=1431):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = memfd_create$auto(0x0, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
sysfs$auto(0x2, 0x2a, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
mmap$auto(0x0, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000)
ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(r5, 0x1, 0x0, 0x5)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="612436eb", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf252b000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0)
sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r7, @ANYRESDEC], 0x3c}}, 0x0)
writev$auto(r7, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x408100, 0x0)
mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000)
r8 = socket(0x2b, 0x1, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_wakeup_irq\x00', 0x8000, 0x0)
getsockopt$auto(r8, 0x0, 0x80, 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, 0x0, 0x24084005)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)

2.887235087s ago: executing program 6 (id=1432):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0)
socket(0x10, 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0xa)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/open_files\x00', 0xd00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x541c, r0)

2.441149512s ago: executing program 7 (id=1433):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
msgctl$auto(0xfffffffd, 0x2003, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
futex$auto(0x0, 0x6, 0x7f, 0x0, 0x0, 0xdd)
futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6)
setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0x6)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000040)=@batch={0x96, 0x5, 0x4, 0x80000001, 0x3ff, r1, 0x363c, 0x5}, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a78599870000000800030085000000080001"], 0xa8}}, 0x4000)
close_range$auto(0x0, r2, 0x7)

2.241411642s ago: executing program 9 (id=1434):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7ffff000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
sync_file_range$auto(r1, 0x7, 0x80000000, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0xfffffffffffffffd, 0xff7fffffffff0002, 0x19)
pselect6$auto(0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0)

2.092190711s ago: executing program 2 (id=1435):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/ssb/uevent\x00', 0x200100, 0x0)
fanotify_init$auto(0x65, 0x2)
r3 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x1700)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x202000e, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x175)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x4001}, 0x90)
syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)

1.642923861s ago: executing program 2 (id=1436):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0)
readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0xc)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x7, 0x1ff, 0x4, 0x15, r2, 0x4e1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0)
read$auto(r3, 0x0, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x54)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r4, 0x0, 0x4)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x6e, 0x0, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0x3)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)

1.622439716s ago: executing program 6 (id=1437):
mmap$auto(0x0, 0x40000b, 0xdf, 0x1012, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0)
sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fd038008000180045f22b1a5006c80"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0)
r2 = socket(0x2, 0x80802, 0x0)
bind$auto(0x3, &(0x7f0000001140)=@rc={0x1f, @any, 0x2}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000001200)="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", 0x9, 0x0, 0xb, 0x0, 0x1f, 0x3ff}, 0x6}, 0xa, 0x1ffffffe)
setsockopt$auto(0x3, 0x9, 0xabf1, 0x0, 0x40000009)
setsockopt$auto(0x3, 0x3, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x8803, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x68982, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000013c0)={0x2, 0x0, [{0x8000, 0xf0, 0x5}, {0x1, 0x1, 0xfffffffffffffff5}, {0x8, 0x5, 0x6}, {0x3, 0x11, 0x685}]})
r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x60200, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000000040)=""/4080, 0x1036)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x20005, 0x5, 0xebe, 0xffffffffffffffff, 0x8200)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x7, 0x800, 0x91e, 0xeb1, r2, 0x5)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x9)
mmap$auto(0x1, 0x202000c, 0x9, 0xeb1, 0xfffffffffffffffa, 0x4)
mmap$auto(0x0, 0x400007, 0xe1, 0x9b7d, 0xffffffffffffffff, 0x0)
ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000001040)="721548a6cc7a4d2930e2e3b9c19d8f9e4d74b6624f71d3169ecf7c89bfd0c83af20b097edd337338c593634952ed02da646173408d4da16676d97423759382c6d1242055c6a86fcdc7905af4aa09d3c34458e8ae0986e3332396aea009b6243f993ae3e4c31cb849b9c21c068ff35e50e2e0ff5b653bc77afda0539b93a394ce807e3f06e0617f558d0d834026618031b92e1b2cbd7ade57b1f52101da03f065370e6625ae2ef6adebd31f96a29044150739ecb2c1e812c6e8c2c27599c55589ce8ef8115be46ae1")
mprotect$auto(0x0, 0x806121, 0x8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0)
read$auto(r6, &(0x7f0000000140)='\x00\xd8\x1ed.\x0e\x92\x19\xa0\xedP\xaf\xce-\xa9\x86\xc5\x97\xdc_\xd8`K\xf9\xa0\xff\x8e\xa8\x11N\xdcLG\xb7\x85L\xd3\x98\x18l\x9d\xddv\xa1\fM\x92\x89\xe71j\x8b\xdf\xcd%\x9fQ\x8f\x91\xd8\b\a\xf3\xe2\xd8<\xe4\x94\xa9\xb3\xff54\xec\x1b>\xce\x95\x9a\xe3-\xfdP\xcc\'\xccoN\xe3\xe7\xe8', 0x200)
socket$nl_generic(0x10, 0x3, 0x10)

973.822867ms ago: executing program 6 (id=1438):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0)
readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0xc)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
mmap$auto(0x7, 0x1ff, 0x4, 0x15, r2, 0x4e1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, 0x0, 0x6a)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0)
read$auto(r3, 0x0, 0x4)
socket(0x2, 0x5, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0x3)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)

971.219454ms ago: executing program 2 (id=1439):
clock_gettime$auto(0xb, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
select$auto(0x6, &(0x7f0000000080)={[0x9, 0xc1, 0x9, 0x3, 0x4, 0x8, 0x9, 0x2, 0x9, 0xd15, 0x4, 0x7fffffffffffffff, 0x8001, 0x1, 0xfffffffeffffffff]}, &(0x7f0000000100)={[0x80, 0x3, 0x0, 0x31f7, 0x4, 0x4, 0x12, 0xf, 0x8, 0x0, 0x8, 0x7fff, 0xfffffffffffffffd, 0x6, 0x7fff]}, &(0x7f0000000180)={[0x3, 0x7fffffff, 0x4, 0x3000000000000000, 0x4, 0x7, 0x4, 0x0, 0xfffffffffffffc01, 0x6c96, 0xffffffffffffffff, 0x0, 0x6, 0xa1b, 0x1, 0x3]}, &(0x7f0000000200)={0x2, 0x52})

928.666434ms ago: executing program 2 (id=1440):
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0)
getrlimit$auto(0x3, 0x0)
ioctl$auto(0x3, 0x400c4d05, r0)
setrlimit$auto(0x3, &(0x7f0000000040)={0x4, 0x7fffffffffffffff})
ioctl$auto(0x3, 0x64, r0)
close_range$auto(0x2, 0xa, 0x0)

853.59362ms ago: executing program 2 (id=1441):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async)
mmap$auto(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
setresuid$auto(0x8, 0x8, 0x0)
setfsuid$auto(0x0)
write$auto(0xffffffffffffffff, 0x0, 0x2) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$auto_FIOCLEX(r2, 0x5451, 0x3)
r4 = socket(0x2, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) (async, rerun: 64)
ptrace$auto(0x8, r3, 0xfffffffffffffffb, 0x4000000000800) (async, rerun: 64)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x5aa02, 0x0)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x222002, 0x0)
ioctl$auto_PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000080)=0x3) (async)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0)
read$auto(r6, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000568b94ab71a9e3a717b41a10c680917160968139ca5aaa5fba67418cb157e39103ddb57753dfbac28202c54db71782f74592ce920baac4f8ace68760cf9f11d94e6343d0162ca254a37db39639ded0385db7706bb44c5bd8594efde76cfca5627d202b26a726e6360ff5c4c4324d6c06612b35f4fa88ab8c6194a8df35e252e6cd5b610ca91113e70f7f6fd46bef19b973c4f6649766adb294bff056fb1a342fc40b0637239095beae4c5686a6879cee471cc084c0e60fb4fc6720c829d47809e0be0c21a27696338e4747b065c6cad6182d5a8a6d5d74c01e54d5337d1b2a6a080a2febcc00"/249, @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253f00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800)

619.303267ms ago: executing program 6 (id=1442):
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x6, 0x2, 0x8, 0x97b, r0, 0x2)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)

273.305784ms ago: executing program 9 (id=1443):
mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
epoll_create$auto(0x20009)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
epoll_create$auto(0x3e)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x2)
r0 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYBLOB="0600060005000000060006003700"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

89.500122ms ago: executing program 6 (id=1444):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(r0, 0x1, 0xb, 0x0, 0x4)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1000008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/net/ip_vti0/dev_id\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x800)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0)
pread64$auto(r3, 0x0, 0x4, 0x2)
r4 = socketcall$auto(0xffe, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_DEV_GET2(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'})
ioctl$auto(0x3, 0xc008ae67, r4)

0s ago: executing program 9 (id=1445):
ioctl$auto(0xffffffffffffffff, 0x92106408, 0xffffffffffffffff)
mmap$auto(0x59, 0x2000d, 0x4000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
mmap$auto(0xfffffffffffffffe, 0x0, 0x1, 0x11, 0x2, 0x4)
unshare$auto(0x40000080)
bpf$auto(0x5, &(0x7f0000001180)=@link_update={0xffffffffffffffff, @new_prog_fd=<r0=>0xffffffffffffffff, 0xf, @old_map_fd}, 0x80000007)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0x200, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x8000009, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x9, 0x400300000000000, 0xdb, 0x3, 0x6, 0x3, [0xfffffffffffffffe, 0x4, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc6f, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x1, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d)
write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147)
readv$auto(0x3, 0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40000)
kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x8000, 0x403000}, 0x4)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='\x00', &(0x7f00000001c0)="3b4ec31ec0f99f7204157cf35a18ec5deee46d8199213352d586fa8f5221aba1444d24903f49bc1dae1d817f5dcd6aa4ecd33b62cc5abe6ef526851713c0cffa477ac0f9c3a30e7adf8bcbbfb8c0b164dfc1c5c35a14dce07e769daa726b15cbfbefc1c4a262de7b4141b435c73f4b47ede2e0369ce0edab9f7d3b2e1c35b8f3eff4e58144bdfb99e2956f8b262b81bce85d444857ba046847ea751e661795273ce6e1d428f028647118e3f94cdc3c3e8cc3db83a9362f6551e64476b7ae65cc1aab7b59e5206a", 0x0)
r2 = semctl$auto_GETPID(0x5, 0x80000001, 0xb, 0x5)
msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000013c0)={{0x1ff, 0x0, 0x0, 0x6, 0x9, 0x1, 0x7}, &(0x7f0000001340)=0x9, &(0x7f0000001380)=0x40, 0x8, 0x1, 0x5, 0x7, 0xb, 0x101, 0x7ff, 0x2, @raw=0x5, @inferred=r2})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x100, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000880)='/dev/binderfs/binder0\x00', 0x100, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
write$auto(r3, 0x0, 0xfffffdf1)

kernel console output (not intermixed with test programs):

pcode 0x0c03 failed: -110
[  277.245515][ T9750] netlink: 330 bytes leftover after parsing attributes in process `syz.3.886'.
[  277.255777][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  277.854114][ T9769] netlink: 330 bytes leftover after parsing attributes in process `syz.3.890'.
[  278.504102][ T9767] kexec: Could not allocate control_code_buffer
[  278.945985][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.956947][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.966389][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.974288][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  278.981741][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  279.406069][ T9798] random: crng reseeded on system resumption
[  280.993342][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.013757][ T9853] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input7
[  281.026522][ T5622] Bluetooth: hci4: command tx timeout
[  281.048125][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.080790][ T9793] bridge_slave_0: entered allmulticast mode
[  281.113476][ T9793] bridge_slave_0: entered promiscuous mode
[  281.158504][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.197402][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.224683][ T9793] bridge_slave_1: entered allmulticast mode
[  281.255628][ T9793] bridge_slave_1: entered promiscuous mode
[  281.271038][   T29] audit: type=1800 audit(1777848747.459:11): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.901" name="sr0" dev="devtmpfs" ino=2848 res=0 errno=0
[  281.537136][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.593071][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.729972][ T9793] team0: Port device team_slave_0 added
[  281.754263][ T9793] team0: Port device team_slave_1 added
[  281.854670][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.871728][ T9865] kexec: Could not allocate control_code_buffer
[  281.888182][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.974918][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.991957][ T5637] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  282.064809][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.095091][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.200989][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.232456][ T9777] Process accounting resumed
[  282.576786][ T9793] hsr_slave_0: entered promiscuous mode
[  282.604414][ T9793] hsr_slave_1: entered promiscuous mode
[  282.627041][ T9793] debugfs: 'hsr0' already exists in 'hsr'
[  282.647615][ T9793] Cannot create hsr debugfs directory
[  282.898735][ T9877] netlink: 330 bytes leftover after parsing attributes in process `syz.1.907'.
[  283.101555][ T5637] Bluetooth: hci4: command tx timeout
[  283.514433][ T9793] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  283.557337][ T9793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  283.620703][ T9793] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  283.653922][ T9793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  283.688758][ T9793] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  283.721184][ T9793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  283.770798][ T9793] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  283.793857][ T9793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  284.667513][ T9793] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.863468][ T9793] 8021q: adding VLAN 0 to HW filter on device team0
[  284.928351][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.935479][ T9834] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.029626][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.036743][ T9834] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.074325][ T9911] Process accounting paused
[  285.181068][ T5637] Bluetooth: hci4: command tx timeout
[  286.925586][ T9793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.263440][ T5637] Bluetooth: hci4: command tx timeout
[  287.385491][ T9980] netlink: 330 bytes leftover after parsing attributes in process `syz.0.922'.
[  287.923622][ T9793] veth0_vlan: entered promiscuous mode
[  287.981272][ T9793] veth1_vlan: entered promiscuous mode
[  288.182229][ T9793] veth0_macvtap: entered promiscuous mode
[  288.226723][ T9793] veth1_macvtap: entered promiscuous mode
[  288.288060][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.352690][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.404511][ T9833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.447212][ T9833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.502041][ T9833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.539790][ T9833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.564083][T10000] zero sized request
[  288.578480][T10000] MTRR 0 not used
[  288.769491][ T9833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.811963][ T9833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.926010][ T9834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.959096][ T9834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.407394][ T5637] Bluetooth: hci4: unexpected subevent 0x18 length: 123 > 19
[  289.415232][ T5637] Bluetooth: hci4: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  291.360745][ T5637] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19
[  291.368423][ T5637] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  291.392017][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'.
[  291.434966][T10064] netlink: 'syz.0.942': attribute type 1 has an invalid length.
[  291.474226][T10064] netlink: 13 bytes leftover after parsing attributes in process `syz.0.942'.
[  292.429031][ T5637] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19
[  292.438823][ T5637] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  294.141610][T10142] netlink: 330 bytes leftover after parsing attributes in process `syz.3.964'.
[  294.349592][T10150] zswap: compressor  not available
[  296.721953][T10202] random: crng reseeded on system resumption
[  296.802323][T10202] hub 1-0:1.0: USB hub found
[  296.831632][T10202] hub 1-0:1.0: 1 port detected
[  298.233898][T10224] netlink: 'syz.3.981': attribute type 64 has an invalid length.
[  298.271379][T10224] netlink: 74 bytes leftover after parsing attributes in process `syz.3.981'.
[  300.615129][T10265] FAULT_INJECTION: forcing a failure.
[  300.615129][T10265] name failslab, interval 1, probability 0, space 0, times 0
[  300.666725][T10265] CPU: 0 UID: 0 PID: 10265 Comm: syz.3.990 Not tainted syzkaller #0 PREEMPT(full) 
[  300.666747][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  300.666756][T10265] Call Trace:
[  300.666761][T10265]  <TASK>
[  300.666766][T10265]  dump_stack_lvl+0x100/0x190
[  300.666788][T10265]  should_fail_ex.cold+0x5/0xa
[  300.666806][T10265]  ? tomoyo_realpath_from_path+0xb6/0x690
[  300.666824][T10265]  should_failslab+0xc2/0x120
[  300.666841][T10265]  __kmalloc_noprof+0xe0/0x850
[  300.666863][T10265]  ? kfree+0x1dd/0x6c0
[  300.666885][T10265]  tomoyo_realpath_from_path+0xb6/0x690
[  300.666907][T10265]  tomoyo_path_number_perm+0x23c/0x580
[  300.666921][T10265]  ? tomoyo_path_number_perm+0x22e/0x580
[  300.666936][T10265]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  300.666968][T10265]  ? find_held_lock+0x2b/0x80
[  300.666987][T10265]  ? __fget_files+0x215/0x3d0
[  300.667002][T10265]  ? hook_file_ioctl_common+0x149/0x410
[  300.667016][T10265]  ? __fget_files+0x215/0x3d0
[  300.667035][T10265]  ? __fget_files+0x21f/0x3d0
[  300.667054][T10265]  security_file_ioctl+0xd3/0x230
[  300.667069][T10265]  __x64_sys_ioctl+0xb7/0x210
[  300.667084][T10265]  do_syscall_64+0x10b/0xf80
[  300.667103][T10265]  ? clear_bhb_loop+0x40/0x90
[  300.667120][T10265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.667135][T10265] RIP: 0033:0x7f0ed3f9cdd9
[  300.667147][T10265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.667159][T10265] RSP: 002b:00007f0ed4e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  300.667173][T10265] RAX: ffffffffffffffda RBX: 00007f0ed4215fa0 RCX: 00007f0ed3f9cdd9
[  300.667182][T10265] RDX: 0000000000000004 RSI: 00000000c0045540 RDI: 0000000000000003
[  300.667191][T10265] RBP: 00007f0ed4e92090 R08: 0000000000000000 R09: 0000000000000000
[  300.667199][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.667206][T10265] R13: 00007f0ed4216038 R14: 00007f0ed4215fa0 R15: 00007ffc5bcbafe8
[  300.667225][T10265]  </TASK>
[  300.667230][T10265] ERROR: Out of memory at tomoyo_realpath_from_path.
[  301.386403][T10285] netlink: zone id is out of range
[  301.392540][T10285] netlink: zone id is out of range
[  301.399824][T10285] netlink: zone id is out of range
[  301.414174][T10285] netlink: set zone limit has 8 unknown bytes
[  301.436723][T10285] netlink: zone id is out of range
[  301.444228][T10285] netlink: zone id is out of range
[  301.450330][T10285] netlink: zone id is out of range
[  301.455513][T10285] netlink: zone id is out of range
[  301.460900][T10285] netlink: zone id is out of range
[  301.466071][T10285] netlink: zone id is out of range
[  305.041300][T10333] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1007'.
[  305.571922][T10344] FAULT_INJECTION: forcing a failure.
[  305.571922][T10344] name failslab, interval 1, probability 0, space 0, times 0
[  305.584862][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(full) 
[  305.584882][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  305.584891][T10344] Call Trace:
[  305.584896][T10344]  <TASK>
[  305.584902][T10344]  dump_stack_lvl+0x100/0x190
[  305.584923][T10344]  should_fail_ex.cold+0x5/0xa
[  305.584943][T10344]  should_failslab+0xc2/0x120
[  305.584960][T10344]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  305.584982][T10344]  ? fuse_request_alloc+0x22/0x200
[  305.585008][T10344]  fuse_request_alloc+0x22/0x200
[  305.585030][T10344]  fuse_get_req+0x74a/0xfe0
[  305.585056][T10344]  ? __pfx_fuse_get_req+0x10/0x10
[  305.585087][T10344]  fuse_simple_background+0x464/0x5e0
[  305.585101][T10344]  ? kasan_save_track+0x14/0x30
[  305.585117][T10344]  cuse_channel_open+0x561/0x7f0
[  305.585135][T10344]  ? __pfx_cuse_channel_open+0x10/0x10
[  305.585154][T10344]  misc_open+0x26d/0x450
[  305.585172][T10344]  ? __pfx_misc_open+0x10/0x10
[  305.585188][T10344]  chrdev_open+0x234/0x6a0
[  305.585205][T10344]  ? __pfx_apparmor_file_open+0x10/0x10
[  305.585228][T10344]  ? __pfx_chrdev_open+0x10/0x10
[  305.585247][T10344]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  305.585270][T10344]  do_dentry_open+0x6d8/0x1660
[  305.585287][T10344]  ? __pfx_chrdev_open+0x10/0x10
[  305.585309][T10344]  vfs_open+0x82/0x3f0
[  305.585332][T10344]  path_openat+0x208c/0x31a0
[  305.585357][T10344]  ? __pfx_path_openat+0x10/0x10
[  305.585381][T10344]  do_file_open+0x20e/0x430
[  305.585400][T10344]  ? __pfx_do_file_open+0x10/0x10
[  305.585431][T10344]  ? alloc_fd+0x476/0x790
[  305.585450][T10344]  ? do_getname+0x191/0x390
[  305.585473][T10344]  do_sys_openat2+0x10d/0x1e0
[  305.585495][T10344]  ? __pfx_do_sys_openat2+0x10/0x10
[  305.585517][T10344]  ? __fget_files+0x21f/0x3d0
[  305.585538][T10344]  __x64_sys_openat+0x12d/0x210
[  305.585560][T10344]  ? __pfx___x64_sys_openat+0x10/0x10
[  305.585585][T10344]  ? rcu_is_watching+0x12/0xc0
[  305.585605][T10344]  do_syscall_64+0x10b/0xf80
[  305.585624][T10344]  ? clear_bhb_loop+0x40/0x90
[  305.585642][T10344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.585657][T10344] RIP: 0033:0x7f9e1899cdd9
[  305.585670][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.585684][T10344] RSP: 002b:00007f9e198d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  305.585699][T10344] RAX: ffffffffffffffda RBX: 00007f9e18c15fa0 RCX: 00007f9e1899cdd9
[  305.585708][T10344] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  305.585718][T10344] RBP: 00007f9e18a32d69 R08: 0000000000000000 R09: 0000000000000000
[  305.585727][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.585735][T10344] R13: 00007f9e18c16038 R14: 00007f9e18c15fa0 R15: 00007ffed926e7c8
[  305.585755][T10344]  </TASK>
[  307.970713][T10383] FAULT_INJECTION: forcing a failure.
[  307.970713][T10383] name failslab, interval 1, probability 0, space 0, times 0
[  308.042879][T10383] CPU: 0 UID: 0 PID: 10383 Comm: syz.1.1015 Not tainted syzkaller #0 PREEMPT(full) 
[  308.042902][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  308.042911][T10383] Call Trace:
[  308.042916][T10383]  <TASK>
[  308.042922][T10383]  dump_stack_lvl+0x100/0x190
[  308.042942][T10383]  should_fail_ex.cold+0x5/0xa
[  308.042962][T10383]  should_failslab+0xc2/0x120
[  308.042979][T10383]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  308.043003][T10383]  ? __d_alloc+0x34/0xa40
[  308.043021][T10383]  ? __sys_socket+0x14d/0x260
[  308.043041][T10383]  ? do_syscall_64+0x10b/0xf80
[  308.043060][T10383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.043078][T10383]  __d_alloc+0x34/0xa40
[  308.043098][T10383]  d_alloc_pseudo+0x1c/0xc0
[  308.043112][T10383]  alloc_file_pseudo+0xcf/0x230
[  308.043135][T10383]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  308.043156][T10383]  ? alloc_fd+0x476/0x790
[  308.043176][T10383]  sock_alloc_file+0x50/0x210
[  308.043193][T10383]  __sys_socket+0x1c0/0x260
[  308.043214][T10383]  ? __pfx___sys_socket+0x10/0x10
[  308.043239][T10383]  __x64_sys_socket+0x72/0xb0
[  308.043258][T10383]  ? lockdep_hardirqs_on+0x78/0x100
[  308.043276][T10383]  do_syscall_64+0x10b/0xf80
[  308.043293][T10383]  ? clear_bhb_loop+0x40/0x90
[  308.043311][T10383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.043325][T10383] RIP: 0033:0x7f9e1899cdd9
[  308.043338][T10383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.043352][T10383] RSP: 002b:00007f9e198b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  308.043366][T10383] RAX: ffffffffffffffda RBX: 00007f9e18c16090 RCX: 00007f9e1899cdd9
[  308.043376][T10383] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  308.043384][T10383] RBP: 00007f9e18a32d69 R08: 0000000000000000 R09: 0000000000000000
[  308.043393][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.043401][T10383] R13: 00007f9e18c16128 R14: 00007f9e18c16090 R15: 00007ffed926e7c8
[  308.043424][T10383]  </TASK>
[  308.825952][T10391] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1017'.
[  309.571889][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.583423][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.593255][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.601948][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.612277][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.995873][T10406] futex_wake_op: syz.3.1021 tries to shift op by -2048; fix this program
[  310.037893][T10406] futex_wake_op: syz.3.1021 tries to shift op by -2048; fix this program
[  310.091497][T10406] 0x000000000001-0x000000020000 : ""
[  310.222721][T10406] ftl_cs: FTL header corrupt!
[  310.816291][T10433] FAULT_INJECTION: forcing a failure.
[  310.816291][T10433] name failslab, interval 1, probability 0, space 0, times 0
[  310.867530][T10433] CPU: 0 UID: 0 PID: 10433 Comm: syz.3.1025 Not tainted syzkaller #0 PREEMPT(full) 
[  310.867552][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.867561][T10433] Call Trace:
[  310.867567][T10433]  <TASK>
[  310.867573][T10433]  dump_stack_lvl+0x100/0x190
[  310.867594][T10433]  should_fail_ex.cold+0x5/0xa
[  310.867615][T10433]  should_failslab+0xc2/0x120
[  310.867632][T10433]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  310.867654][T10433]  ? security_inode_alloc+0x3b/0x2c0
[  310.867677][T10433]  ? lockdep_init_map_type+0x5c/0x250
[  310.867695][T10433]  security_inode_alloc+0x3b/0x2c0
[  310.867718][T10433]  inode_init_always_gfp+0xcc0/0x1000
[  310.867740][T10433]  alloc_inode+0x8e/0x250
[  310.867762][T10433]  alloc_anon_inode+0x2a/0x3e0
[  310.867782][T10433]  ioctx_alloc+0x4dc/0x21a0
[  310.867809][T10433]  ? find_held_lock+0x2b/0x80
[  310.867828][T10433]  ? __pfx_ioctx_alloc+0x10/0x10
[  310.867852][T10433]  __x64_sys_io_setup+0xc9/0x220
[  310.867874][T10433]  do_syscall_64+0x10b/0xf80
[  310.867892][T10433]  ? clear_bhb_loop+0x40/0x90
[  310.867910][T10433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.867925][T10433] RIP: 0033:0x7f0ed3f9cdd9
[  310.867937][T10433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.867952][T10433] RSP: 002b:00007f0ed4e92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  310.867967][T10433] RAX: ffffffffffffffda RBX: 00007f0ed4215fa0 RCX: 00007f0ed3f9cdd9
[  310.867977][T10433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe
[  310.867985][T10433] RBP: 00007f0ed4032d69 R08: 0000000000000000 R09: 0000000000000000
[  310.867994][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.868003][T10433] R13: 00007f0ed4216038 R14: 00007f0ed4215fa0 R15: 00007ffc5bcbafe8
[  310.868021][T10433]  </TASK>
[  311.299067][T10443] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1027'.
[  311.679569][ T5622] Bluetooth: hci5: command tx timeout
[  312.005841][T10408] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.036173][T10408] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.060840][T10408] bridge_slave_0: entered allmulticast mode
[  312.078471][T10408] bridge_slave_0: entered promiscuous mode
[  312.104264][T10408] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.127227][T10408] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.149464][T10408] bridge_slave_1: entered allmulticast mode
[  312.173117][T10408] bridge_slave_1: entered promiscuous mode
[  312.275990][T10408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.318920][T10408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.409289][T10408] team0: Port device team_slave_0 added
[  312.449189][T10408] team0: Port device team_slave_1 added
[  312.519875][T10408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.540725][T10408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.623350][T10408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.675551][T10408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.705020][T10408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.737152][T10451] Process accounting paused
[  312.805876][T10408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.948867][T10408] hsr_slave_0: entered promiscuous mode
[  312.976982][T10408] hsr_slave_1: entered promiscuous mode
[  312.995701][T10408] debugfs: 'hsr0' already exists in 'hsr'
[  313.015790][T10408] Cannot create hsr debugfs directory
[  313.526140][T10408] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  313.543578][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  313.557901][T10408] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  313.582119][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  313.606296][T10408] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  313.616789][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  313.638989][T10408] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  313.649034][T10408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  313.761183][ T5622] Bluetooth: hci5: command tx timeout
[  313.966625][T10493] FAULT_INJECTION: forcing a failure.
[  313.966625][T10493] name failslab, interval 1, probability 0, space 0, times 0
[  314.014719][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.3.1034 Not tainted syzkaller #0 PREEMPT(full) 
[  314.014742][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  314.014751][T10493] Call Trace:
[  314.014756][T10493]  <TASK>
[  314.014762][T10493]  dump_stack_lvl+0x100/0x190
[  314.014783][T10493]  should_fail_ex.cold+0x5/0xa
[  314.014803][T10493]  should_failslab+0xc2/0x120
[  314.014821][T10493]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  314.014843][T10493]  ? do_getname+0x35/0x390
[  314.014865][T10493]  ? __lock_acquire+0x4a5/0x2630
[  314.014881][T10493]  do_getname+0x35/0x390
[  314.014903][T10493]  do_sys_openat2+0xc5/0x1e0
[  314.014925][T10493]  ? __pfx_do_sys_openat2+0x10/0x10
[  314.014953][T10493]  __x64_sys_openat+0x12d/0x210
[  314.014975][T10493]  ? __pfx___x64_sys_openat+0x10/0x10
[  314.015006][T10493]  ? rcu_is_watching+0x12/0xc0
[  314.015027][T10493]  do_syscall_64+0x10b/0xf80
[  314.015046][T10493]  ? clear_bhb_loop+0x40/0x90
[  314.015063][T10493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.015078][T10493] RIP: 0033:0x7f0ed3f9cdd9
[  314.015091][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.015105][T10493] RSP: 002b:00007f0ed4e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  314.015119][T10493] RAX: ffffffffffffffda RBX: 00007f0ed4215fa0 RCX: 00007f0ed3f9cdd9
[  314.015129][T10493] RDX: 0000000000000542 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  314.015138][T10493] RBP: 00007f0ed4032d69 R08: 0000000000000000 R09: 0000000000000000
[  314.015147][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.015155][T10493] R13: 00007f0ed4216038 R14: 00007f0ed4215fa0 R15: 00007ffc5bcbafe8
[  314.015174][T10493]  </TASK>
[  314.279708][T10408] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.293085][T10408] 8021q: adding VLAN 0 to HW filter on device team0
[  314.320340][T10408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  314.382112][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.389251][ T9835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.437618][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.444733][ T9835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.539341][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'.
[  315.146516][T10408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.689402][T10408] veth0_vlan: entered promiscuous mode
[  315.715980][T10408] veth1_vlan: entered promiscuous mode
[  315.784302][T10408] veth0_macvtap: entered promiscuous mode
[  315.802660][T10408] veth1_macvtap: entered promiscuous mode
[  315.835050][T10408] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.843099][ T5622] Bluetooth: hci5: command tx timeout
[  315.867975][T10408] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.898807][ T9835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.920652][ T9835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.949333][ T9835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.043468][ T9835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.179918][ T9832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.207516][ T9832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.374040][ T9832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.395898][ T5620] Process accounting resumed
[  316.427535][ T9832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.695735][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.706868][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.714983][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.724144][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.733140][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.204220][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  317.210684][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  317.917466][ T5637] Bluetooth: hci5: command tx timeout
[  317.958090][T10535] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.981650][T10535] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.012208][T10535] bridge_slave_0: entered allmulticast mode
[  318.041233][T10535] bridge_slave_0: entered promiscuous mode
[  318.069632][T10535] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.095196][T10535] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.129024][T10535] bridge_slave_1: entered allmulticast mode
[  318.147742][T10535] bridge_slave_1: entered promiscuous mode
[  318.293443][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.317014][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.374459][T10535] team0: Port device team_slave_0 added
[  318.405706][T10535] team0: Port device team_slave_1 added
[  318.611067][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.646228][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.756998][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.801673][ T5637] Bluetooth: hci6: command tx timeout
[  318.810104][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.836468][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.934405][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.999989][T10587] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �11!phy1!netdev:wlan1!rc_rateid
[  319.072127][T10535] hsr_slave_0: entered promiscuous mode
[  319.092346][T10535] hsr_slave_1: entered promiscuous mode
[  319.106687][T10535] debugfs: 'hsr0' already exists in 'hsr'
[  319.122565][T10535] Cannot create hsr debugfs directory
[  319.481974][T10590] sysfs: cannot create duplicate filename '/class/ieee80211/�11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  319.537758][T10590] CPU: 0 UID: 0 PID: 10590 Comm: syz.5.1047 Not tainted syzkaller #0 PREEMPT(full) 
[  319.537780][T10590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  319.537789][T10590] Call Trace:
[  319.537795][T10590]  <TASK>
[  319.537801][T10590]  dump_stack_lvl+0x100/0x190
[  319.537822][T10590]  sysfs_warn_dup.cold+0x1c/0x28
[  319.537845][T10590]  sysfs_do_create_link_sd+0x113/0x140
[  319.537864][T10590]  sysfs_create_link+0x61/0xc0
[  319.537880][T10590]  device_add+0x675/0x1950
[  319.537901][T10590]  ? __pfx_device_add+0x10/0x10
[  319.537918][T10590]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  319.537942][T10590]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  319.537969][T10590]  wiphy_register+0x1edd/0x2d90
[  319.537985][T10590]  ? __rtnl_unlock+0xb9/0xf0
[  319.538009][T10590]  ? __pfx_wiphy_register+0x10/0x10
[  319.538026][T10590]  ? __asan_memset+0x23/0x50
[  319.538048][T10590]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  319.538077][T10590]  ieee80211_register_hw+0x3055/0x4570
[  319.538108][T10590]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  319.538128][T10590]  ? __pfx___debug_object_init+0x10/0x10
[  319.538154][T10590]  ? find_held_lock+0x2b/0x80
[  319.538174][T10590]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  319.538195][T10590]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  319.538215][T10590]  ? __hrtimer_setup+0x208/0x330
[  319.538233][T10590]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  319.538261][T10590]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  319.538279][T10590]  ? __asan_memcpy+0x3c/0x60
[  319.538302][T10590]  hwsim_new_radio_nl+0xc5f/0x1370
[  319.538317][T10590]  ? rcu_is_watching+0x12/0xc0
[  319.538336][T10590]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.538356][T10590]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  319.538379][T10590]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  319.538406][T10590]  genl_family_rcv_msg_doit+0x214/0x300
[  319.538430][T10590]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.538452][T10590]  ? genl_get_cmd+0x3e7/0x760
[  319.538476][T10590]  ? bpf_lsm_capable+0x9/0x10
[  319.538492][T10590]  ? security_capable+0x80/0x260
[  319.538514][T10590]  ? ns_capable+0xd2/0xf0
[  319.538533][T10590]  genl_rcv_msg+0x560/0x800
[  319.538557][T10590]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.538579][T10590]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  319.538600][T10590]  netlink_rcv_skb+0x159/0x420
[  319.538619][T10590]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.538641][T10590]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.538669][T10590]  ? netlink_deliver_tap+0x1ae/0xcc0
[  319.538690][T10590]  genl_rcv+0x28/0x40
[  319.538719][T10590]  netlink_unicast+0x585/0x850
[  319.538743][T10590]  ? __pfx_netlink_unicast+0x10/0x10
[  319.538768][T10590]  netlink_sendmsg+0x8b0/0xda0
[  319.538791][T10590]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.538810][T10590]  ? __import_iovec+0x1d2/0x640
[  319.538827][T10590]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  319.538852][T10590]  ____sys_sendmsg+0x9e1/0xb70
[  319.538870][T10590]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.538892][T10590]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.538915][T10590]  ? rcu_is_watching+0x12/0xc0
[  319.538932][T10590]  ? ___sys_sendmsg+0x19d/0x1e0
[  319.538950][T10590]  ? kfree+0x1dd/0x6c0
[  319.538973][T10590]  ___sys_sendmsg+0x190/0x1e0
[  319.538995][T10590]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.539033][T10590]  ? __pfx___might_resched+0x10/0x10
[  319.539053][T10590]  __sys_sendmmsg+0x205/0x430
[  319.539071][T10590]  ? __pfx___sys_sendmmsg+0x10/0x10
[  319.539103][T10590]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  319.539124][T10590]  ? kcov_ioctl+0x16a/0x720
[  319.539146][T10590]  __x64_sys_sendmmsg+0x9c/0x100
[  319.539161][T10590]  ? lockdep_hardirqs_on+0x78/0x100
[  319.539179][T10590]  do_syscall_64+0x10b/0xf80
[  319.539197][T10590]  ? clear_bhb_loop+0x40/0x90
[  319.539216][T10590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.539231][T10590] RIP: 0033:0x7f97e759cdd9
[  319.539244][T10590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.539259][T10590] RSP: 002b:00007f97e53b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  319.539274][T10590] RAX: ffffffffffffffda RBX: 00007f97e7816270 RCX: 00007f97e759cdd9
[  319.539284][T10590] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  319.539293][T10590] RBP: 00007f97e7632d69 R08: 0000000000000000 R09: 0000000000000000
[  319.539301][T10590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.539310][T10590] R13: 00007f97e7816308 R14: 00007f97e7816270 R15: 00007ffc9a5283f8
[  319.539330][T10590]  </TASK>

syzkaller
syzkaller login: [  320.242973][T10535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  320.281511][T10535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  320.291667][T10535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  320.300521][T10535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  320.459422][T10535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  320.469408][T10535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  320.497907][T10535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  320.528359][T10535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  320.734237][T10535] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.873128][T10535] 8021q: adding VLAN 0 to HW filter on device team0
[  320.881456][ T5637] Bluetooth: hci6: command tx timeout
[  320.932993][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.940137][ T9835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.070821][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.077953][ T9834] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.256284][T10622] FAULT_INJECTION: forcing a failure.
[  321.256284][T10622] name fail_futex, interval 1, probability 0, space 0, times 0
[  321.294979][T10622] CPU: 0 UID: 0 PID: 10622 Comm: syz.3.1055 Not tainted syzkaller #0 PREEMPT(full) 
[  321.295002][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  321.295012][T10622] Call Trace:
[  321.295018][T10622]  <TASK>
[  321.295024][T10622]  dump_stack_lvl+0x100/0x190
[  321.295047][T10622]  should_fail_ex.cold+0x5/0xa
[  321.295066][T10622]  get_futex_key+0x1d2/0x1510
[  321.295085][T10622]  ? __pfx_get_futex_key+0x10/0x10
[  321.295105][T10622]  futex_wake+0xea/0x530
[  321.295124][T10622]  ? rcu_is_watching+0x12/0xc0
[  321.295142][T10622]  ? __pfx_futex_wake+0x10/0x10
[  321.295162][T10622]  ? putname+0xb1/0x110
[  321.295180][T10622]  ? kmem_cache_free+0x127/0x6c0
[  321.295206][T10622]  do_futex+0x32b/0x350
[  321.295223][T10622]  ? __pfx_do_futex+0x10/0x10
[  321.295243][T10622]  ? __pfx_do_sys_openat2+0x10/0x10
[  321.295266][T10622]  ? __fget_files+0x21f/0x3d0
[  321.295286][T10622]  __x64_sys_futex+0x34f/0x4d0
[  321.295303][T10622]  ? __x64_sys_openat+0x12d/0x210
[  321.295325][T10622]  ? __pfx___x64_sys_futex+0x10/0x10
[  321.295345][T10622]  ? rcu_is_watching+0x12/0xc0
[  321.295368][T10622]  do_syscall_64+0x10b/0xf80
[  321.295387][T10622]  ? clear_bhb_loop+0x40/0x90
[  321.295406][T10622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.295422][T10622] RIP: 0033:0x7f0ed3f9cdd9
[  321.295435][T10622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.295449][T10622] RSP: 002b:00007f0ed4e710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  321.295464][T10622] RAX: ffffffffffffffda RBX: 00007f0ed4216098 RCX: 00007f0ed3f9cdd9
[  321.295474][T10622] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0ed421609c
[  321.295484][T10622] RBP: 00007f0ed4216090 R08: 0000000000000001 R09: 0000000000000000
[  321.295493][T10622] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[  321.295501][T10622] R13: 00007f0ed4216128 R14: 00007ffc5bcbaf00 R15: 00007ffc5bcbafe8
[  321.295521][T10622]  </TASK>
[  321.604008][T10535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.351518][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.724750][T10535] veth0_vlan: entered promiscuous mode
[  322.738517][T10535] veth1_vlan: entered promiscuous mode
[  322.766239][T10535] veth0_macvtap: entered promiscuous mode
[  322.796305][T10535] veth1_macvtap: entered promiscuous mode
[  322.851382][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.875117][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.898422][ T9832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.931198][ T9832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.960207][ T5637] Bluetooth: hci6: command tx timeout
[  322.983144][ T9832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.002785][ T9832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.221665][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.263595][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.373796][ T9835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.397920][ T9835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.113159][ T5637] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19
[  324.120630][ T5637] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  324.923437][T10684] syz.5.1065 uses obsolete (PF_INET,SOCK_PACKET)
[  325.042065][ T5637] Bluetooth: hci6: command tx timeout
[  325.408904][T10705] FAULT_INJECTION: forcing a failure.
[  325.408904][T10705] name fail_futex, interval 1, probability 0, space 0, times 0
[  325.497379][T10705] CPU: 0 UID: 0 PID: 10705 Comm: syz.5.1068 Not tainted syzkaller #0 PREEMPT(full) 
[  325.497402][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  325.497414][T10705] Call Trace:
[  325.497420][T10705]  <TASK>
[  325.497426][T10705]  dump_stack_lvl+0x100/0x190
[  325.497448][T10705]  should_fail_ex.cold+0x5/0xa
[  325.497468][T10705]  get_futex_key+0x1d2/0x1510
[  325.497485][T10705]  ? __pfx_get_futex_key+0x10/0x10
[  325.497506][T10705]  futex_wake+0xea/0x530
[  325.497524][T10705]  ? rcu_is_watching+0x12/0xc0
[  325.497543][T10705]  ? __pfx_futex_wake+0x10/0x10
[  325.497563][T10705]  ? putname+0xb1/0x110
[  325.497581][T10705]  ? kmem_cache_free+0x127/0x6c0
[  325.497606][T10705]  do_futex+0x32b/0x350
[  325.497622][T10705]  ? __pfx_do_futex+0x10/0x10
[  325.497636][T10705]  ? __pfx_do_sys_openat2+0x10/0x10
[  325.497659][T10705]  ? __fget_files+0x21f/0x3d0
[  325.497677][T10705]  __x64_sys_futex+0x34f/0x4d0
[  325.497694][T10705]  ? __x64_sys_openat+0x12d/0x210
[  325.497716][T10705]  ? __pfx___x64_sys_futex+0x10/0x10
[  325.497735][T10705]  ? rcu_is_watching+0x12/0xc0
[  325.497754][T10705]  do_syscall_64+0x10b/0xf80
[  325.497773][T10705]  ? clear_bhb_loop+0x40/0x90
[  325.497790][T10705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.497806][T10705] RIP: 0033:0x7f97e759cdd9
[  325.497818][T10705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.497833][T10705] RSP: 002b:00007f97e57f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  325.497847][T10705] RAX: ffffffffffffffda RBX: 00007f97e7816098 RCX: 00007f97e759cdd9
[  325.497857][T10705] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97e781609c
[  325.497875][T10705] RBP: 00007f97e7816090 R08: 0000000000000001 R09: 0000000000000000
[  325.497884][T10705] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[  325.497893][T10705] R13: 00007f97e7816128 R14: 00007ffc9a528310 R15: 00007ffc9a5283f8
[  325.497912][T10705]  </TASK>
[  330.188849][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  330.201223][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  330.210108][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  330.217877][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  330.227439][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  330.920228][T10787] MTRR 0 not used
[  331.601451][T10771] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.631112][T10771] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.650194][T10771] bridge_slave_0: entered allmulticast mode
[  331.676313][T10771] bridge_slave_0: entered promiscuous mode
[  331.698953][T10771] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.722953][T10771] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.746640][T10771] bridge_slave_1: entered allmulticast mode
[  331.768348][T10771] bridge_slave_1: entered promiscuous mode
[  331.849967][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.886895][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.977039][T10771] team0: Port device team_slave_0 added
[  332.003530][T10771] team0: Port device team_slave_1 added
[  332.074050][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.098241][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.183482][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.225902][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.248316][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.334131][ T5622] Bluetooth: hci7: command tx timeout
[  332.350034][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.641538][T10771] hsr_slave_0: entered promiscuous mode
[  332.664494][T10771] hsr_slave_1: entered promiscuous mode
[  332.689329][T10771] debugfs: 'hsr0' already exists in 'hsr'
[  332.706909][T10771] Cannot create hsr debugfs directory
[  333.429279][T10771] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  333.490338][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  333.517921][T10771] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  333.554231][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  333.658753][T10771] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  333.701272][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  333.732616][T10771] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  333.790950][T10771] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  333.928041][T10822] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input8
[  334.005177][T10771] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.058191][T10771] 8021q: adding VLAN 0 to HW filter on device team0
[  334.082321][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.089427][ T9834] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.136385][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.143490][ T9834] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.405715][ T5622] Bluetooth: hci7: command tx timeout
[  334.944723][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.808660][T10771] veth0_vlan: entered promiscuous mode
[  335.950349][T10771] veth1_vlan: entered promiscuous mode
[  336.081696][T10771] veth0_macvtap: entered promiscuous mode
[  336.135860][T10771] veth1_macvtap: entered promiscuous mode
[  336.193525][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.241236][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.288755][ T9832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.314034][ T9832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.351401][ T9832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.396392][ T9832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.487015][ T5622] Bluetooth: hci7: command tx timeout
[  336.551817][ T9832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.584297][ T9832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.654159][ T9832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.685905][ T9832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.636563][T10862] kexec: Could not allocate control_code_buffer
[  337.956605][T10884] MTRR 0 not used
[  338.156565][T10896] FAULT_INJECTION: forcing a failure.
[  338.156565][T10896] name failslab, interval 1, probability 0, space 0, times 0
[  338.174541][T10897] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.7.1099: 7
[  338.207365][T10896] CPU: 0 UID: 0 PID: 10896 Comm: syz.3.1098 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  338.207390][T10896] Tainted: [L]=SOFTLOCKUP
[  338.207399][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  338.207408][T10896] Call Trace:
[  338.207413][T10896]  <TASK>
[  338.207420][T10896]  dump_stack_lvl+0x100/0x190
[  338.207441][T10896]  should_fail_ex.cold+0x5/0xa
[  338.207461][T10896]  should_failslab+0xc2/0x120
[  338.207479][T10896]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  338.207508][T10896]  ? security_inode_alloc+0x3b/0x2c0
[  338.207532][T10896]  ? lockdep_init_map_type+0x5c/0x250
[  338.207551][T10896]  security_inode_alloc+0x3b/0x2c0
[  338.207575][T10896]  inode_init_always_gfp+0xcc0/0x1000
[  338.207596][T10896]  alloc_inode+0x8e/0x250
[  338.207618][T10896]  alloc_anon_inode+0x2a/0x3e0
[  338.207638][T10896]  ioctx_alloc+0x4dc/0x21a0
[  338.207665][T10896]  ? find_held_lock+0x2b/0x80
[  338.207684][T10896]  ? __pfx_ioctx_alloc+0x10/0x10
[  338.207709][T10896]  __x64_sys_io_setup+0xc9/0x220
[  338.207731][T10896]  do_syscall_64+0x10b/0xf80
[  338.207749][T10896]  ? clear_bhb_loop+0x40/0x90
[  338.207766][T10896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.207781][T10896] RIP: 0033:0x7f0ed3f9cdd9
[  338.207795][T10896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.207809][T10896] RSP: 002b:00007f0ed4e92028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  338.207824][T10896] RAX: ffffffffffffffda RBX: 00007f0ed4215fa0 RCX: 00007f0ed3f9cdd9
[  338.207833][T10896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe
[  338.207842][T10896] RBP: 00007f0ed4032d69 R08: 0000000000000000 R09: 0000000000000000
[  338.207851][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.207860][T10896] R13: 00007f0ed4216038 R14: 00007f0ed4215fa0 R15: 00007ffc5bcbafe8
[  338.207879][T10896]  </TASK>
[  338.584992][ T5622] Bluetooth: hci7: command tx timeout
[  339.575248][T10930] MTRR 0 not used
[  340.861532][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'.
[  340.998254][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.034761][T10958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.065191][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.107745][T10958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.135602][   T29] audit: type=1800 audit(1777848807.299:12): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1115" name="lu_gp_id" dev="configfs" ino=40227 res=0 errno=0
[  341.165154][T10961] kstrtoul() returned -22 for lu_gp_id
[  341.643936][T10979] MTRR 0 not used
[  343.053809][T11012] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1126'.
[  344.847761][T11048] FAULT_INJECTION: forcing a failure.
[  344.847761][T11048] name failslab, interval 1, probability 0, space 0, times 0
[  344.886398][T11033] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  344.917002][T11033] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  344.947905][T11033] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  344.989299][T11033] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  344.997862][T11048] CPU: 0 UID: 0 PID: 11048 Comm: syz.7.1132 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.997885][T11048] Tainted: [L]=SOFTLOCKUP
[  344.997890][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  344.997898][T11048] Call Trace:
[  344.997904][T11048]  <TASK>
[  344.997909][T11048]  dump_stack_lvl+0x100/0x190
[  344.997929][T11048]  should_fail_ex.cold+0x5/0xa
[  344.997948][T11048]  should_failslab+0xc2/0x120
[  344.997966][T11048]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  344.997988][T11048]  ? do_getname+0x35/0x390
[  344.998008][T11048]  ? find_held_lock+0x2b/0x80
[  344.998026][T11048]  ? ksys_write+0x190/0x250
[  344.998044][T11048]  do_getname+0x35/0x390
[  344.998067][T11048]  do_sys_openat2+0xc5/0x1e0
[  344.998089][T11048]  ? __pfx_do_sys_openat2+0x10/0x10
[  344.998109][T11048]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  344.998132][T11048]  ? __fget_files+0x21f/0x3d0
[  344.998152][T11048]  __x64_sys_openat+0x12d/0x210
[  344.998174][T11048]  ? __pfx___x64_sys_openat+0x10/0x10
[  344.998196][T11048]  ? ksys_write+0x1ac/0x250
[  344.998213][T11048]  ? rcu_is_watching+0x12/0xc0
[  344.998233][T11048]  do_syscall_64+0x10b/0xf80
[  344.998251][T11048]  ? clear_bhb_loop+0x40/0x90
[  344.998268][T11048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.998282][T11048] RIP: 0033:0x7eff4ab9cdd9
[  344.998295][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.998309][T11048] RSP: 002b:00007eff48df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  344.998322][T11048] RAX: ffffffffffffffda RBX: 00007eff4ae16090 RCX: 00007eff4ab9cdd9
[  344.998332][T11048] RDX: 0000000000020200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  344.998340][T11048] RBP: 00007eff48df6090 R08: 0000000000000000 R09: 0000000000000000
[  344.998349][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.998357][T11048] R13: 00007eff4ae16128 R14: 00007eff4ae16090 R15: 00007ffc7b00d1c8
[  344.998375][T11048]  </TASK>
[  345.411203][T11033] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  345.424661][T11033] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  345.650931][T11033] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  345.666590][T11033] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  345.690445][T11033] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  345.754015][T11033] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  345.799494][T11033] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  345.810108][T11033] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  345.834734][T11033] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  345.886522][T11033] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  345.909534][T11033] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  345.938752][T11033] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  346.002719][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  346.032218][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  346.039801][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  346.048096][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  346.055632][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  346.732419][ T5622] Bluetooth: hci0: command 0x2016 tx timeout
[  346.972170][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  346.978302][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  347.052366][ T5622] Bluetooth: hci3: command 0x0406 tx timeout
[  347.534040][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  347.692237][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  347.852631][ T5622] Bluetooth: hci6: command 0x0c1a tx timeout
[  347.946012][ T5622] Bluetooth: hci7: command 0x0c1a tx timeout
[  348.093377][ T5622] Bluetooth: hci8: command tx timeout
[  348.859092][T11114] MTRR 0 not used
[  349.448099][T11127] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1145'.
[  349.578527][T11042] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.578621][T11042] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.578722][T11042] bridge_slave_0: entered allmulticast mode
[  349.584257][T11042] bridge_slave_0: entered promiscuous mode
[  349.612500][T11042] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.612559][T11042] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.612653][T11042] bridge_slave_1: entered allmulticast mode
[  349.613983][T11042] bridge_slave_1: entered promiscuous mode
[  349.622029][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  349.715776][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.724145][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.775759][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  349.822249][T11042] team0: Port device team_slave_0 added
[  349.881721][T11042] team0: Port device team_slave_1 added
[  349.933526][ T5622] Bluetooth: hci6: command 0x0c1a tx timeout
[  349.999054][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.999067][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.999086][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.013575][ T5622] Bluetooth: hci7: command 0x0c1a tx timeout
[  350.024016][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.024027][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.024046][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.173759][ T5622] Bluetooth: hci8: command tx timeout
[  350.227906][T11042] hsr_slave_0: entered promiscuous mode
[  350.228631][T11042] hsr_slave_1: entered promiscuous mode
[  350.230596][T11042] debugfs: 'hsr0' already exists in 'hsr'
[  350.230612][T11042] Cannot create hsr debugfs directory
[  350.615645][T11135] cgroup: fork rejected by pids controller in /syz3
[  350.940616][T11248] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1149'.
[  351.626710][T11042] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  351.660835][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  351.680752][T11042] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  351.694828][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout
[  351.706823][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  351.793390][T11042] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  351.822561][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  351.856451][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  351.869698][T11042] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  351.910189][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  352.015148][ T5637] Bluetooth: hci6: command 0x0c1a tx timeout
[  352.094884][ T5637] Bluetooth: hci7: command 0x0c1a tx timeout
[  352.247964][T11042] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.255156][ T5637] Bluetooth: hci8: command tx timeout
[  352.449502][T11042] 8021q: adding VLAN 0 to HW filter on device team0
[  352.503715][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.510846][ T9835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.566948][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.574063][ T9835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.535246][ T5622] Bluetooth: hci9: Opcode 0x0c03 failed: -110
[  353.881898][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.336665][ T5622] Bluetooth: hci8: command tx timeout
[  355.052955][T11042] veth0_vlan: entered promiscuous mode
[  355.272280][T11042] veth1_vlan: entered promiscuous mode
[  355.457496][T11318] kexec: Could not allocate control_code_buffer
[  355.501272][T11042] veth0_macvtap: entered promiscuous mode
[  355.547334][T11042] veth1_macvtap: entered promiscuous mode
[  355.633631][T11042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.686917][T11042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.737142][ T9832] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.754962][ T5622] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18
[  355.764837][ T5622] Bluetooth: hci6: Invalid handle: 0x3a4a > 0x0eff
[  355.792870][ T9832] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.830792][ T9832] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.862285][ T9832] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.163415][T11344] Process accounting resumed
[  356.285142][T11351] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  356.326223][ T9833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.381602][ T9833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.517702][ T9834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.571033][ T9834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.252237][T11373] FAULT_INJECTION: forcing a failure.
[  358.252237][T11373] name fail_futex, interval 1, probability 0, space 0, times 0
[  358.323615][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.6.1171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  358.323640][T11373] Tainted: [L]=SOFTLOCKUP
[  358.323645][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  358.323654][T11373] Call Trace:
[  358.323659][T11373]  <TASK>
[  358.323664][T11373]  dump_stack_lvl+0x100/0x190
[  358.323685][T11373]  should_fail_ex.cold+0x5/0xa
[  358.323706][T11373]  get_futex_key+0x1d2/0x1510
[  358.323724][T11373]  ? __pfx_get_futex_key+0x10/0x10
[  358.323744][T11373]  futex_wake+0xea/0x530
[  358.323762][T11373]  ? rcu_is_watching+0x12/0xc0
[  358.323780][T11373]  ? __pfx_futex_wake+0x10/0x10
[  358.323801][T11373]  ? putname+0xb1/0x110
[  358.323818][T11373]  ? kmem_cache_free+0x127/0x6c0
[  358.323844][T11373]  do_futex+0x32b/0x350
[  358.323860][T11373]  ? __pfx_do_futex+0x10/0x10
[  358.323874][T11373]  ? __pfx_do_sys_openat2+0x10/0x10
[  358.323900][T11373]  __x64_sys_futex+0x34f/0x4d0
[  358.323916][T11373]  ? __x64_sys_openat+0x12d/0x210
[  358.323938][T11373]  ? __pfx___x64_sys_futex+0x10/0x10
[  358.323953][T11373]  ? ksys_read+0x1ac/0x250
[  358.323971][T11373]  ? rcu_is_watching+0x12/0xc0
[  358.323990][T11373]  do_syscall_64+0x10b/0xf80
[  358.324009][T11373]  ? clear_bhb_loop+0x40/0x90
[  358.324026][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.324041][T11373] RIP: 0033:0x7f11e4f9cdd9
[  358.324053][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.324067][T11373] RSP: 002b:00007f11e31f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  358.324081][T11373] RAX: ffffffffffffffda RBX: 00007f11e5216098 RCX: 00007f11e4f9cdd9
[  358.324090][T11373] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f11e521609c
[  358.324099][T11373] RBP: 00007f11e5216090 R08: 0000000000000001 R09: 0000000000000000
[  358.324107][T11373] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  358.324115][T11373] R13: 00007f11e5216128 R14: 00007ffcc94bb560 R15: 00007ffcc94bb648
[  358.324133][T11373]  </TASK>
[  361.305054][T11420] FAULT_INJECTION: forcing a failure.
[  361.305054][T11420] name failslab, interval 1, probability 0, space 0, times 0
[  361.348834][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.6.1183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.348861][T11420] Tainted: [L]=SOFTLOCKUP
[  361.348867][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  361.348876][T11420] Call Trace:
[  361.348882][T11420]  <TASK>
[  361.348888][T11420]  dump_stack_lvl+0x100/0x190
[  361.348909][T11420]  should_fail_ex.cold+0x5/0xa
[  361.348930][T11420]  should_failslab+0xc2/0x120
[  361.348947][T11420]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  361.348974][T11420]  ? security_inode_alloc+0x3b/0x2c0
[  361.348997][T11420]  ? lockdep_init_map_type+0x5c/0x250
[  361.349015][T11420]  security_inode_alloc+0x3b/0x2c0
[  361.349038][T11420]  inode_init_always_gfp+0xcc0/0x1000
[  361.349060][T11420]  alloc_inode+0x8e/0x250
[  361.349081][T11420]  alloc_anon_inode+0x2a/0x3e0
[  361.349102][T11420]  ioctx_alloc+0x4dc/0x21a0
[  361.349135][T11420]  ? find_held_lock+0x2b/0x80
[  361.349156][T11420]  ? __pfx_ioctx_alloc+0x10/0x10
[  361.349181][T11420]  __x64_sys_io_setup+0xc9/0x220
[  361.349203][T11420]  do_syscall_64+0x10b/0xf80
[  361.349222][T11420]  ? clear_bhb_loop+0x40/0x90
[  361.349241][T11420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.349256][T11420] RIP: 0033:0x7f11e4f9cdd9
[  361.349269][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.349284][T11420] RSP: 002b:00007f11e5d6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  361.349298][T11420] RAX: ffffffffffffffda RBX: 00007f11e5215fa0 RCX: 00007f11e4f9cdd9
[  361.349308][T11420] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe
[  361.349317][T11420] RBP: 00007f11e5032d69 R08: 0000000000000000 R09: 0000000000000000
[  361.349326][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.349334][T11420] R13: 00007f11e5216038 R14: 00007f11e5215fa0 R15: 00007ffcc94bb648
[  361.349353][T11420]  </TASK>
[  362.488577][ T5622] Bluetooth: hci7: unexpected event 0x14 length: 16 > 6
[  363.094554][ T5622] Bluetooth: hci7: unexpected subevent 0x18 length: 123 > 19
[  363.109985][ T5622] Bluetooth: hci7: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  363.723949][T11481] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  366.118115][ T5622] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19
[  366.125640][ T5622] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  367.073110][T11598] FAULT_INJECTION: forcing a failure.
[  367.073110][T11598] name failslab, interval 1, probability 0, space 0, times 0
[  367.185944][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.8.1202 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.185971][T11598] Tainted: [L]=SOFTLOCKUP
[  367.185977][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  367.185986][T11598] Call Trace:
[  367.185991][T11598]  <TASK>
[  367.185997][T11598]  dump_stack_lvl+0x100/0x190
[  367.186019][T11598]  should_fail_ex.cold+0x5/0xa
[  367.186039][T11598]  should_failslab+0xc2/0x120
[  367.186056][T11598]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  367.186080][T11598]  ? __d_alloc+0x34/0xa40
[  367.186099][T11598]  ? lockdep_init_map_type+0x5c/0x250
[  367.186117][T11598]  __d_alloc+0x34/0xa40
[  367.186138][T11598]  d_alloc_pseudo+0x1c/0xc0
[  367.186152][T11598]  alloc_file_pseudo+0xcf/0x230
[  367.186174][T11598]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  367.186197][T11598]  ? alloc_fd+0x476/0x790
[  367.186217][T11598]  sock_alloc_file+0x50/0x210
[  367.186234][T11598]  __sys_socket+0x1c0/0x260
[  367.186255][T11598]  ? __pfx___sys_socket+0x10/0x10
[  367.186275][T11598]  ? ksys_write+0x1ac/0x250
[  367.186295][T11598]  __x64_sys_socket+0x72/0xb0
[  367.186314][T11598]  ? lockdep_hardirqs_on+0x78/0x100
[  367.186333][T11598]  do_syscall_64+0x10b/0xf80
[  367.186351][T11598]  ? clear_bhb_loop+0x40/0x90
[  367.186369][T11598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.186383][T11598] RIP: 0033:0x7fcf2f39cdd9
[  367.186397][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.186411][T11598] RSP: 002b:00007fcf302e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  367.186426][T11598] RAX: ffffffffffffffda RBX: 00007fcf2f616090 RCX: 00007fcf2f39cdd9
[  367.186436][T11598] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  367.186445][T11598] RBP: 00007fcf2f432d69 R08: 0000000000000000 R09: 0000000000000000
[  367.186454][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.186462][T11598] R13: 00007fcf2f616128 R14: 00007fcf2f616090 R15: 00007fff55ef0ec8
[  367.186482][T11598]  </TASK>
[  367.948285][T11616] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1204'.
[  368.794078][T11622] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1205'.
[  369.149877][ T5622] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19
[  369.159807][ T5622] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  370.875312][T11757] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  370.907560][T11757] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  370.945070][T11757] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  370.973699][T11757] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  371.004563][T11757] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  371.029291][T11757] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  371.053988][T11757] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  371.077323][T11757] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  371.100049][T11757] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  371.120246][T11757] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  371.159911][T11757] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  372.345760][ T5622] Bluetooth: hci0: command 0x2016 tx timeout
[  372.792375][T11790] mmap: syz.8.1217 (11790) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  372.985078][ T5622] Bluetooth: hci3: command 0x0406 tx timeout
[  372.991106][ T5637] Bluetooth: hci2: command 0x0406 tx timeout
[  372.997126][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  373.065215][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  373.071238][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  373.077315][ T5637] Bluetooth: hci6: command 0x0c1a tx timeout
[  373.145109][ T5637] Bluetooth: hci8: command 0x0c1a tx timeout
[  373.151809][ T5622] Bluetooth: hci7: command 0x0c1a tx timeout
[  375.094146][T11830] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552].
[  375.230437][ T5637] Bluetooth: hci8: command 0x0c1a tx timeout
[  377.307063][ T5637] Bluetooth: hci8: command 0x0c1a tx timeout
[  378.673978][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  378.680376][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  382.378663][T11917] MTRR 0 not used
[  383.063738][T11934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  383.165530][T11934] netlink: 330 bytes leftover after parsing attributes in process `syz.8.1244'.
[  383.644381][T11945] FAULT_INJECTION: forcing a failure.
[  383.644381][T11945] name failslab, interval 1, probability 0, space 0, times 0
[  383.854451][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.6.1246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.854478][T11945] Tainted: [L]=SOFTLOCKUP
[  383.854483][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  383.854493][T11945] Call Trace:
[  383.854498][T11945]  <TASK>
[  383.854504][T11945]  dump_stack_lvl+0x100/0x190
[  383.854526][T11945]  should_fail_ex.cold+0x5/0xa
[  383.854546][T11945]  ? iter_file_splice_write+0x1d8/0x10a0
[  383.854565][T11945]  should_failslab+0xc2/0x120
[  383.854583][T11945]  __kmalloc_noprof+0xe0/0x850
[  383.854610][T11945]  iter_file_splice_write+0x1d8/0x10a0
[  383.854630][T11945]  ? copy_splice_read+0x6a0/0xb90
[  383.854647][T11945]  ? copy_splice_read+0x734/0xb90
[  383.854670][T11945]  ? __pfx_iter_file_splice_write+0x10/0x10
[  383.854689][T11945]  ? __lock_acquire+0x4a5/0x2630
[  383.854705][T11945]  ? __pfx_copy_splice_read+0x10/0x10
[  383.854733][T11945]  ? __pfx_iter_file_splice_write+0x10/0x10
[  383.854753][T11945]  direct_splice_actor+0x192/0x6c0
[  383.854773][T11945]  splice_direct_to_actor+0x345/0xa30
[  383.854799][T11945]  ? __pfx_direct_splice_actor+0x10/0x10
[  383.854822][T11945]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  383.854847][T11945]  do_splice_direct+0x174/0x240
[  383.854866][T11945]  ? __pfx_do_splice_direct+0x10/0x10
[  383.854886][T11945]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  383.854907][T11945]  ? rw_verify_area+0xce/0x6d0
[  383.854924][T11945]  do_sendfile+0xadc/0xe20
[  383.854944][T11945]  ? __pfx_do_sendfile+0x10/0x10
[  383.854960][T11945]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  383.854987][T11945]  __x64_sys_sendfile64+0x1d8/0x220
[  383.855008][T11945]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  383.855027][T11945]  ? rcu_is_watching+0x12/0xc0
[  383.855044][T11945]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  383.855062][T11945]  ? rcu_is_watching+0x12/0xc0
[  383.855082][T11945]  do_syscall_64+0x10b/0xf80
[  383.855101][T11945]  ? clear_bhb_loop+0x40/0x90
[  383.855119][T11945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.855134][T11945] RIP: 0033:0x7f11e4f9cdd9
[  383.855147][T11945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.855162][T11945] RSP: 002b:00007f11e31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  383.855178][T11945] RAX: ffffffffffffffda RBX: 00007f11e5216090 RCX: 00007f11e4f9cdd9
[  383.855188][T11945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009
[  383.855197][T11945] RBP: 00007f11e5032d69 R08: 0000000000000000 R09: 0000000000000000
[  383.855206][T11945] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000000
[  383.855216][T11945] R13: 00007f11e5216128 R14: 00007f11e5216090 R15: 00007ffcc94bb648
[  383.855235][T11945]  </TASK>
[  384.615651][T11952] net_ratelimit: 5 callbacks suppressed
[  384.615668][T11952] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  384.664518][T11947] nfsd: Unknown parameter ''
[  385.104030][T11945] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  385.192009][T11945] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  385.266969][T11945] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  385.326558][T11945] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  385.403020][T11945] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  385.475975][T11945] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  385.533666][T11945] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  385.598426][T11945] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  385.663131][T11945] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  386.639153][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1254'.
[  387.030916][T11966] Process accounting paused
[  387.152901][ T5637] Bluetooth: hci0: command 0x2016 tx timeout
[  387.232927][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  387.312622][ T5637] Bluetooth: hci2: command 0x0406 tx timeout
[  387.392204][ T5637] Bluetooth: hci3: command 0x0406 tx timeout
[  387.472226][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout
[  387.479664][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  387.491186][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1257'.
[  387.553142][ T5622] Bluetooth: hci6: command 0x0c1a tx timeout
[  387.634844][ T5637] Bluetooth: hci7: command 0x0c1a tx timeout
[  387.713037][ T5622] Bluetooth: hci8: command 0x0c1a tx timeout
[  390.630359][ T5622] Bluetooth: hci7: unexpected subevent 0x18 length: 123 > 19
[  390.641220][ T5622] Bluetooth: hci7: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  390.817250][ T5637] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  390.833042][ T5637] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  390.845406][ T5637] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  390.859275][ T5637] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  390.876328][ T5637] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  390.947249][T11997] MTRR 0 not used
[  392.126320][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1266'.
[  392.239905][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1266'.
[  392.752839][T12041] kernel profiling enabled (shift: 0)
[  392.918128][ T5637] Bluetooth: hci9: command tx timeout
[  393.514813][T12000] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.551340][T12000] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.586650][T12000] bridge_slave_0: entered allmulticast mode
[  393.616817][T12000] bridge_slave_0: entered promiscuous mode
[  393.671319][T12000] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.708143][T12000] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.737415][T12000] bridge_slave_1: entered allmulticast mode
[  393.777841][T12000] bridge_slave_1: entered promiscuous mode
[  393.999865][T12000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.064490][T12000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.306184][T12000] team0: Port device team_slave_0 added
[  394.340074][T12000] team0: Port device team_slave_1 added
[  394.439392][T12000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.477664][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.582969][T12000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.638718][T12000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.667464][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.756399][T12000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.880044][T12000] hsr_slave_0: entered promiscuous mode
[  394.900974][T12000] hsr_slave_1: entered promiscuous mode
[  394.921070][T12000] debugfs: 'hsr0' already exists in 'hsr'
[  394.942301][T12000] Cannot create hsr debugfs directory
[  394.996869][ T5637] Bluetooth: hci9: command tx timeout
[  395.330413][ T5637] Bluetooth: hci7: unexpected subevent 0x18 length: 123 > 19
[  395.337950][ T5637] Bluetooth: hci7: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  395.704080][T12000] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  395.746534][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  395.779626][T12000] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  395.809280][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  395.833654][T12000] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  395.879276][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  395.911994][T12000] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  395.942285][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.154448][T12000] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.210318][T12000] 8021q: adding VLAN 0 to HW filter on device team0
[  396.252179][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.259301][ T9834] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.326446][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.333578][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.078418][ T5637] Bluetooth: hci9: command tx timeout
[  397.368850][T12090] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1273'.
[  397.438528][T12000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.994181][T12105] netlink: Conntrack attr has 5 unknown bytes
[  398.095702][T12000] veth0_vlan: entered promiscuous mode
[  398.141576][T12000] veth1_vlan: entered promiscuous mode
[  398.238920][T12000] veth0_macvtap: entered promiscuous mode
[  398.266837][T12000] veth1_macvtap: entered promiscuous mode
[  398.334518][T12000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.383617][T12000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.430876][ T9835] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.477112][ T9835] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.533530][ T9835] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.570825][ T9835] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.595385][T12112] futex_wake_op: syz.6.1278 tries to shift op by -2048; fix this program
[  398.670417][T12112] futex_wake_op: syz.6.1278 tries to shift op by -2048; fix this program
[  398.733179][ T9835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.775529][ T9835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.871842][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.895922][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.163706][ T5637] Bluetooth: hci9: command tx timeout
[  399.959712][T12138] FAULT_INJECTION: forcing a failure.
[  399.959712][T12138] name failslab, interval 1, probability 0, space 0, times 0
[  400.010575][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.6.1283 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  400.010600][T12138] Tainted: [L]=SOFTLOCKUP
[  400.010605][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  400.010614][T12138] Call Trace:
[  400.010619][T12138]  <TASK>
[  400.010624][T12138]  dump_stack_lvl+0x100/0x190
[  400.010645][T12138]  should_fail_ex.cold+0x5/0xa
[  400.010664][T12138]  ? tomoyo_realpath_from_path+0xb6/0x690
[  400.010682][T12138]  should_failslab+0xc2/0x120
[  400.010699][T12138]  __kmalloc_noprof+0xe0/0x850
[  400.010721][T12138]  ? kfree+0x1dd/0x6c0
[  400.010743][T12138]  tomoyo_realpath_from_path+0xb6/0x690
[  400.010766][T12138]  tomoyo_check_open_permission+0x2af/0x3c0
[  400.010781][T12138]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  400.010803][T12138]  ? hook_file_open+0x24e/0x7a0
[  400.010828][T12138]  ? lock_acquire+0x1b1/0x370
[  400.010847][T12138]  tomoyo_file_open+0x6b/0x90
[  400.010868][T12138]  security_file_open+0xb5/0x1e0
[  400.010885][T12138]  do_dentry_open+0x5aa/0x1660
[  400.010908][T12138]  vfs_open+0x82/0x3f0
[  400.010935][T12138]  path_openat+0x208c/0x31a0
[  400.010958][T12138]  ? __pfx_path_openat+0x10/0x10
[  400.010983][T12138]  do_file_open+0x20e/0x430
[  400.011002][T12138]  ? __pfx_do_file_open+0x10/0x10
[  400.011027][T12138]  ? __pfx_kfree_link+0x10/0x10
[  400.011047][T12138]  ? alloc_fd+0x476/0x790
[  400.011066][T12138]  ? do_getname+0x191/0x390
[  400.011088][T12138]  do_sys_openat2+0x10d/0x1e0
[  400.011110][T12138]  ? __pfx_do_sys_openat2+0x10/0x10
[  400.011139][T12138]  __x64_sys_openat+0x12d/0x210
[  400.011162][T12138]  ? __pfx___x64_sys_openat+0x10/0x10
[  400.011183][T12138]  ? ksys_write+0x1ac/0x250
[  400.011201][T12138]  ? rcu_is_watching+0x12/0xc0
[  400.011221][T12138]  do_syscall_64+0x10b/0xf80
[  400.011240][T12138]  ? clear_bhb_loop+0x40/0x90
[  400.011258][T12138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.011272][T12138] RIP: 0033:0x7f11e4f5d60e
[  400.011284][T12138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  400.011298][T12138] RSP: 002b:00007f11e5d6ef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  400.011313][T12138] RAX: ffffffffffffffda RBX: 00007f11e5d6f6c0 RCX: 00007f11e4f5d60e
[  400.011322][T12138] RDX: 0000000000000002 RSI: 00007f11e5032670 RDI: ffffffffffffff9c
[  400.011331][T12138] RBP: 00007f11e5032d69 R08: 0000000000000000 R09: 0000000000000000
[  400.011339][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.011348][T12138] R13: 00007f11e5216038 R14: 00007f11e5215fa0 R15: 00007ffcc94bb648
[  400.011366][T12138]  </TASK>
[  400.011388][T12138] ERROR: Out of memory at tomoyo_realpath_from_path.
[  401.616650][ T5622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  401.643377][ T5622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  401.652778][ T5622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  401.668120][ T5622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  401.675796][ T5622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  402.385462][T12176] ubi31: attaching mtd0
[  402.426122][T12176] ubi31: scanning is finished
[  402.455345][T12176] ubi31: empty MTD device detected
[  402.783767][T12176] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  402.820980][T12176] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes
[  402.870474][T12176] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  402.935150][T12176] ubi31: VID header offset: 514 (aligned 514), data offset: 578
[  402.982627][T12176] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  403.075773][T12176] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20
[  403.147723][T12176] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3783987084
[  403.216544][T12176] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  403.281341][T12182] ubi31: background thread "ubi_bgt31d" started, PID 12182
[  403.720819][ T5622] Bluetooth: hci10: command tx timeout
[  404.455375][T12199] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  404.709482][T12155] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.741609][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.771531][T12155] bridge_slave_0: entered allmulticast mode
[  404.827351][T12155] bridge_slave_0: entered promiscuous mode
[  404.870225][T12155] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.904597][T12155] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.952225][T12155] bridge_slave_1: entered allmulticast mode
[  404.986916][T12155] bridge_slave_1: entered promiscuous mode
[  405.120286][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.194936][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.363012][T12155] team0: Port device team_slave_0 added
[  405.394428][T12155] team0: Port device team_slave_1 added
[  405.555265][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.575006][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.636353][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.689485][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.718405][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.802078][ T5622] Bluetooth: hci10: command tx timeout
[  405.840969][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.168524][T12155] hsr_slave_0: entered promiscuous mode
[  406.215949][T12155] hsr_slave_1: entered promiscuous mode
[  406.253456][T12155] debugfs: 'hsr0' already exists in 'hsr'
[  406.280217][T12155] Cannot create hsr debugfs directory
[  406.428319][T12232] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  406.600150][T12234] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  407.361247][T12155] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  407.401842][T12155] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  407.447869][T12155] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  407.497390][T12155] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  407.581373][T12155] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  407.615437][T12155] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  407.660466][T12155] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  407.695790][T12155] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  407.882394][ T5622] Bluetooth: hci10: command tx timeout
[  408.001986][T12260] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  408.083613][T12260] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1305'.
[  408.286268][T12155] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.397692][T12155] 8021q: adding VLAN 0 to HW filter on device team0
[  408.447381][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.454495][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.549013][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.556137][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.712336][T12155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  409.047546][T12283] FAULT_INJECTION: forcing a failure.
[  409.047546][T12283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.109275][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.6.1310 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.109301][T12283] Tainted: [L]=SOFTLOCKUP
[  409.109306][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  409.109315][T12283] Call Trace:
[  409.109324][T12283]  <TASK>
[  409.109330][T12283]  dump_stack_lvl+0x100/0x190
[  409.109352][T12283]  should_fail_ex.cold+0x5/0xa
[  409.109372][T12283]  core_sys_select+0x938/0xbb0
[  409.109394][T12283]  ? __pfx_core_sys_select+0x10/0x10
[  409.109429][T12283]  ? ktime_get_ts64+0x306/0x420
[  409.109452][T12283]  ? ktime_get_ts64+0x318/0x420
[  409.109472][T12283]  ? ktime_get_ts64+0x257/0x420
[  409.109496][T12283]  kern_select+0x20c/0x270
[  409.109514][T12283]  ? __pfx_kern_select+0x10/0x10
[  409.109531][T12283]  ? xfd_validate_state+0x129/0x190
[  409.109550][T12283]  __x64_sys_select+0xbd/0x160
[  409.109566][T12283]  ? do_syscall_64+0x90/0xf80
[  409.109585][T12283]  ? lockdep_hardirqs_on+0x78/0x100
[  409.109603][T12283]  do_syscall_64+0x10b/0xf80
[  409.109621][T12283]  ? clear_bhb_loop+0x40/0x90
[  409.109639][T12283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.109654][T12283] RIP: 0033:0x7f11e4f9cdd9
[  409.109667][T12283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.109681][T12283] RSP: 002b:00007f11e5d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  409.109696][T12283] RAX: ffffffffffffffda RBX: 00007f11e5215fa0 RCX: 00007f11e4f9cdd9
[  409.109706][T12283] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000006
[  409.109715][T12283] RBP: 00007f11e5032d69 R08: 0000200000000200 R09: 0000000000000000
[  409.109724][T12283] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  409.109732][T12283] R13: 00007f11e5216038 R14: 00007f11e5215fa0 R15: 00007ffcc94bb648
[  409.109751][T12283]  </TASK>
[  409.318721][T12281] MTRR 0 not used
[  409.725830][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.966290][ T5622] Bluetooth: hci10: command tx timeout
[  410.112219][T12155] veth0_vlan: entered promiscuous mode
[  410.226891][T12155] veth1_vlan: entered promiscuous mode
[  410.392624][T12155] veth0_macvtap: entered promiscuous mode
[  410.450057][T12155] veth1_macvtap: entered promiscuous mode
[  410.535062][T12155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.724928][T12155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.832497][ T9835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.901609][ T9835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.001767][ T9835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.052600][ T9835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.717309][ T9836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.749419][ T9836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.995489][ T5622] Bluetooth: hci9: unexpected subevent 0x18 length: 123 > 19
[  412.002902][ T5622] Bluetooth: hci9: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  412.077323][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.115011][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.743730][T12356] FAULT_INJECTION: forcing a failure.
[  412.743730][T12356] name fail_futex, interval 1, probability 0, space 0, times 0
[  412.807552][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.2.1323 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  412.807580][T12356] Tainted: [L]=SOFTLOCKUP
[  412.807585][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  412.807595][T12356] Call Trace:
[  412.807600][T12356]  <TASK>
[  412.807606][T12356]  dump_stack_lvl+0x100/0x190
[  412.807628][T12356]  should_fail_ex.cold+0x5/0xa
[  412.807648][T12356]  get_futex_key+0x1d2/0x1510
[  412.807665][T12356]  ? __pfx_get_futex_key+0x10/0x10
[  412.807687][T12356]  futex_wake+0xea/0x530
[  412.807706][T12356]  ? rcu_is_watching+0x12/0xc0
[  412.807725][T12356]  ? __pfx_futex_wake+0x10/0x10
[  412.807746][T12356]  ? putname+0xb1/0x110
[  412.807764][T12356]  ? kmem_cache_free+0x127/0x6c0
[  412.807789][T12356]  do_futex+0x32b/0x350
[  412.807805][T12356]  ? __pfx_do_futex+0x10/0x10
[  412.807819][T12356]  ? __pfx_do_sys_openat2+0x10/0x10
[  412.807848][T12356]  ? __fget_files+0x21f/0x3d0
[  412.807867][T12356]  __x64_sys_futex+0x34f/0x4d0
[  412.807884][T12356]  ? __x64_sys_openat+0x12d/0x210
[  412.807907][T12356]  ? __pfx___x64_sys_futex+0x10/0x10
[  412.807927][T12356]  ? rcu_is_watching+0x12/0xc0
[  412.807946][T12356]  do_syscall_64+0x10b/0xf80
[  412.807965][T12356]  ? clear_bhb_loop+0x40/0x90
[  412.807982][T12356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.807998][T12356] RIP: 0033:0x7fd3ef79cdd9
[  412.808011][T12356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.808026][T12356] RSP: 002b:00007fd3f06960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  412.808041][T12356] RAX: ffffffffffffffda RBX: 00007fd3efa16098 RCX: 00007fd3ef79cdd9
[  412.808051][T12356] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd3efa1609c
[  412.808060][T12356] RBP: 00007fd3efa16090 R08: 0000000000000001 R09: 0000000000000000
[  412.808069][T12356] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[  412.808077][T12356] R13: 00007fd3efa16128 R14: 00007ffce87aa020 R15: 00007ffce87aa108
[  412.808096][T12356]  </TASK>
[  413.332076][T12360] FAULT_INJECTION: forcing a failure.
[  413.332076][T12360] name failslab, interval 1, probability 0, space 0, times 0
[  413.373803][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.6.1324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.373830][T12360] Tainted: [L]=SOFTLOCKUP
[  413.373836][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  413.373845][T12360] Call Trace:
[  413.373850][T12360]  <TASK>
[  413.373856][T12360]  dump_stack_lvl+0x100/0x190
[  413.373878][T12360]  should_fail_ex.cold+0x5/0xa
[  413.373898][T12360]  should_failslab+0xc2/0x120
[  413.373916][T12360]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  413.373939][T12360]  ? fuse_request_alloc+0x22/0x200
[  413.373965][T12360]  fuse_request_alloc+0x22/0x200
[  413.373988][T12360]  fuse_get_req+0x74a/0xfe0
[  413.374014][T12360]  ? __pfx_fuse_get_req+0x10/0x10
[  413.374045][T12360]  fuse_simple_background+0x464/0x5e0
[  413.374059][T12360]  ? kasan_save_track+0x14/0x30
[  413.374075][T12360]  cuse_channel_open+0x561/0x7f0
[  413.374093][T12360]  ? __pfx_cuse_channel_open+0x10/0x10
[  413.374113][T12360]  misc_open+0x26d/0x450
[  413.374131][T12360]  ? __pfx_misc_open+0x10/0x10
[  413.374148][T12360]  chrdev_open+0x234/0x6a0
[  413.374165][T12360]  ? __pfx_apparmor_file_open+0x10/0x10
[  413.374188][T12360]  ? __pfx_chrdev_open+0x10/0x10
[  413.374207][T12360]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  413.374231][T12360]  do_dentry_open+0x6d8/0x1660
[  413.374248][T12360]  ? __pfx_chrdev_open+0x10/0x10
[  413.374270][T12360]  vfs_open+0x82/0x3f0
[  413.374293][T12360]  path_openat+0x208c/0x31a0
[  413.374318][T12360]  ? __pfx_path_openat+0x10/0x10
[  413.374343][T12360]  do_file_open+0x20e/0x430
[  413.374362][T12360]  ? __pfx_do_file_open+0x10/0x10
[  413.374393][T12360]  ? alloc_fd+0x476/0x790
[  413.374413][T12360]  ? do_getname+0x191/0x390
[  413.374436][T12360]  do_sys_openat2+0x10d/0x1e0
[  413.374458][T12360]  ? __pfx_do_sys_openat2+0x10/0x10
[  413.374481][T12360]  ? __fget_files+0x21f/0x3d0
[  413.374501][T12360]  __x64_sys_openat+0x12d/0x210
[  413.374524][T12360]  ? __pfx___x64_sys_openat+0x10/0x10
[  413.374553][T12360]  ? rcu_is_watching+0x12/0xc0
[  413.374573][T12360]  do_syscall_64+0x10b/0xf80
[  413.374592][T12360]  ? clear_bhb_loop+0x40/0x90
[  413.374610][T12360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.374626][T12360] RIP: 0033:0x7f11e4f9cdd9
[  413.374639][T12360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.374654][T12360] RSP: 002b:00007f11e31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  413.374669][T12360] RAX: ffffffffffffffda RBX: 00007f11e5216090 RCX: 00007f11e4f9cdd9
[  413.374679][T12360] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  413.374689][T12360] RBP: 00007f11e5032d69 R08: 0000000000000000 R09: 0000000000000000
[  413.374698][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.374707][T12360] R13: 00007f11e5216128 R14: 00007f11e5216090 R15: 00007ffcc94bb648
[  413.374727][T12360]  </TASK>
[  414.865580][ T5622] Bluetooth: hci9: unexpected subevent 0x18 length: 123 > 19
[  414.873058][ T5622] Bluetooth: hci9: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  416.463858][T12404] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1335'.
[  417.435383][T12410] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  417.461077][T12410] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  417.494243][T12410] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  417.523891][T12410] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  417.549955][T12410] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  417.592921][T12410] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  417.648308][T12410] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  417.674412][T12410] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  417.721114][T12410] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  417.754263][T12410] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  417.779048][T12410] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  417.863544][T12410] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  417.900414][T12410] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  417.934683][T12410] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  417.991272][T12410] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  418.126239][T12418] Process accounting resumed
[  418.162322][ T5622] Bluetooth: hci7: unexpected subevent 0x18 length: 123 > 19
[  418.170012][ T5622] Bluetooth: hci7: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  418.851444][ T5622] Bluetooth: hci0: command 0x2016 tx timeout
[  419.151516][T12455] MTRR 1 not used
[  419.457350][T12465] FAULT_INJECTION: forcing a failure.
[  419.457350][T12465] name fail_futex, interval 1, probability 0, space 0, times 0
[  419.488481][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  419.568812][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  419.574881][ T5637] Bluetooth: hci3: command 0x0406 tx timeout
[  419.581543][ T5630] Bluetooth: hci2: command 0x0406 tx timeout
[  419.590444][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.9.1348 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.590468][T12465] Tainted: [L]=SOFTLOCKUP
[  419.590473][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  419.590483][T12465] Call Trace:
[  419.590488][T12465]  <TASK>
[  419.590494][T12465]  dump_stack_lvl+0x100/0x190
[  419.590515][T12465]  should_fail_ex.cold+0x5/0xa
[  419.590536][T12465]  get_futex_key+0x1d2/0x1510
[  419.590554][T12465]  ? __pfx_get_futex_key+0x10/0x10
[  419.590574][T12465]  futex_wake+0xea/0x530
[  419.590593][T12465]  ? rcu_is_watching+0x12/0xc0
[  419.590611][T12465]  ? __pfx_futex_wake+0x10/0x10
[  419.590633][T12465]  ? putname+0xb1/0x110
[  419.590651][T12465]  ? kmem_cache_free+0x127/0x6c0
[  419.590676][T12465]  do_futex+0x32b/0x350
[  419.590692][T12465]  ? __pfx_do_futex+0x10/0x10
[  419.590706][T12465]  ? __pfx_do_sys_openat2+0x10/0x10
[  419.590729][T12465]  ? __fget_files+0x21f/0x3d0
[  419.590748][T12465]  __x64_sys_futex+0x34f/0x4d0
[  419.590765][T12465]  ? __x64_sys_openat+0x12d/0x210
[  419.590787][T12465]  ? __pfx___x64_sys_futex+0x10/0x10
[  419.590806][T12465]  ? rcu_is_watching+0x12/0xc0
[  419.590825][T12465]  do_syscall_64+0x10b/0xf80
[  419.590844][T12465]  ? clear_bhb_loop+0x40/0x90
[  419.590862][T12465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.590878][T12465] RIP: 0033:0x7f844dd9cdd9
[  419.590891][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.590905][T12465] RSP: 002b:00007f844ecc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  419.590920][T12465] RAX: ffffffffffffffda RBX: 00007f844e016098 RCX: 00007f844dd9cdd9
[  419.590930][T12465] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f844e01609c
[  419.590939][T12465] RBP: 00007f844e016090 R08: 0000000000000001 R09: 0000000000000000
[  419.590948][T12465] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000
[  419.590957][T12465] R13: 00007f844e016128 R14: 00007ffd6e64c6e0 R15: 00007ffd6e64c7c8
[  419.590976][T12465]  </TASK>
[  419.869992][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  419.876025][ T5630] Bluetooth: hci8: command 0x0c1a tx timeout
[  419.882027][ T5630] Bluetooth: hci7: command 0x0c1a tx timeout
[  419.887995][ T5630] Bluetooth: hci6: command 0x0c1a tx timeout
[  419.894630][ T5630] Bluetooth: hci9: command 0x0c1a tx timeout
[  420.029249][ T5630] Bluetooth: hci10: command 0x0c1a tx timeout
[  420.246847][T12479] .^: entered promiscuous mode
[  420.268866][ T5622] Bluetooth: hci9: unexpected subevent 0x18 length: 123 > 19
[  420.276271][ T5622] Bluetooth: hci9: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00
[  420.622624][T12479] zswap: compressor 000 not available
[  421.528513][T12508] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1359'.
[  421.591086][T12494] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  421.601276][T12494] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  421.607369][T12494] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  421.615638][T12494] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  421.622021][T12494] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  421.628192][T12494] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  421.634530][T12494] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  421.643470][T12494] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  421.652011][T12494] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  421.658157][T12494] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  421.664794][T12494] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  421.672914][T12500] FAULT_INJECTION: forcing a failure.
[  421.672914][T12500] name fail_futex, interval 1, probability 0, space 0, times 0
[  421.726318][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.9.1357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.726342][T12500] Tainted: [L]=SOFTLOCKUP
[  421.726348][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  421.726357][T12500] Call Trace:
[  421.726363][T12500]  <TASK>
[  421.726369][T12500]  dump_stack_lvl+0x100/0x190
[  421.726390][T12500]  should_fail_ex.cold+0x5/0xa
[  421.726411][T12500]  get_futex_key+0x1d2/0x1510
[  421.726428][T12500]  ? __pfx_get_futex_key+0x10/0x10
[  421.726449][T12500]  futex_wake+0xea/0x530
[  421.726468][T12500]  ? rcu_is_watching+0x12/0xc0
[  421.726487][T12500]  ? __pfx_futex_wake+0x10/0x10
[  421.726508][T12500]  ? putname+0xb1/0x110
[  421.726526][T12500]  ? kmem_cache_free+0x127/0x6c0
[  421.726551][T12500]  do_futex+0x32b/0x350
[  421.726571][T12500]  ? __pfx_do_futex+0x10/0x10
[  421.726586][T12500]  ? __pfx_do_sys_openat2+0x10/0x10
[  421.726609][T12500]  ? __fget_files+0x21f/0x3d0
[  421.726629][T12500]  __x64_sys_futex+0x34f/0x4d0
[  421.726647][T12500]  ? __pfx___x64_sys_futex+0x10/0x10
[  421.726667][T12500]  ? rcu_is_watching+0x12/0xc0
[  421.726687][T12500]  do_syscall_64+0x10b/0xf80
[  421.726706][T12500]  ? clear_bhb_loop+0x40/0x90
[  421.726724][T12500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.726739][T12500] RIP: 0033:0x7f844dd9cdd9
[  421.726752][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.726766][T12500] RSP: 002b:00007f844ecc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  421.726781][T12500] RAX: ffffffffffffffda RBX: 00007f844e016098 RCX: 00007f844dd9cdd9
[  421.726791][T12500] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f844e01609c
[  421.726800][T12500] RBP: 00007f844e016090 R08: 0000000000000001 R09: 0000000000000000
[  421.726809][T12500] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  421.726818][T12500] R13: 00007f844e016128 R14: 00007ffd6e64c6e0 R15: 00007ffd6e64c7c8
[  421.726836][T12500]  </TASK>
[  422.348345][ T5630] Bluetooth: hci6: unexpected event 0x3e length: 508 > 260
[  422.348369][ T5630] Bluetooth: hci6: unexpected subevent 0x02 length: 507 > 260
[  422.366843][ T5630] Bluetooth: hci6: Dropping invalid advertising data
[  422.376196][ T5630] Bluetooth: hci6: unknown advertising packet type: 0xe9
[  422.376221][ T5630] Bluetooth: hci6: unknown advertising packet type: 0x14
[  422.383503][ T5630] Bluetooth: hci6: Dropping invalid advertising data
[  422.399585][ T5630] Bluetooth: hci6: Malformed LE Event: 0x02
[  422.930399][ T5630] Bluetooth: hci0: command 0x2016 tx timeout
[  423.224886][T12549] random: crng reseeded on system resumption
[  423.651550][ T5630] Bluetooth: hci7: command 0x0c1a tx timeout
[  423.658240][ T5622] Bluetooth: hci6: command 0x0c1a tx timeout
[  423.665667][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout
[  423.671750][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout
[  423.677749][ T5637] Bluetooth: hci3: command 0x0406 tx timeout
[  423.683840][ T4942] Bluetooth: hci2: command 0x0406 tx timeout
[  423.690358][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  423.730496][ T5622] Bluetooth: hci10: command 0x0c1a tx timeout
[  423.736589][ T4942] Bluetooth: hci9: command 0x0c1a tx timeout
[  423.743937][ T5637] Bluetooth: hci8: command 0x0c1a tx timeout
[  424.626653][T12571] kafs: addr_prefs: Invalid Command
[  424.637964][T12570] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1372'.
[  424.653416][T12572] netlink: 146 bytes leftover after parsing attributes in process `syz.9.1374'.
[  424.749576][T12574] random: crng reseeded on system resumption
[  425.811579][ T5622] Bluetooth: hci10: command 0x0c1a tx timeout
[  425.817839][ T4942] Bluetooth: hci9: command 0x0c1a tx timeout
[  426.127454][T12605] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1382'.
[  426.859253][T12629] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1387'.
[  427.111444][T12634] FAULT_INJECTION: forcing a failure.
[  427.111444][T12634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.204876][T12634] CPU: 0 UID: 0 PID: 12634 Comm: syz.9.1388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  427.204903][T12634] Tainted: [L]=SOFTLOCKUP
[  427.204909][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  427.204919][T12634] Call Trace:
[  427.204924][T12634]  <TASK>
[  427.204930][T12634]  dump_stack_lvl+0x100/0x190
[  427.204952][T12634]  should_fail_ex.cold+0x5/0xa
[  427.204972][T12634]  core_sys_select+0x938/0xbb0
[  427.204994][T12634]  ? __pfx_core_sys_select+0x10/0x10
[  427.205030][T12634]  ? ktime_get_ts64+0x306/0x420
[  427.205053][T12634]  ? ktime_get_ts64+0x318/0x420
[  427.205074][T12634]  ? ktime_get_ts64+0x257/0x420
[  427.205098][T12634]  kern_select+0x20c/0x270
[  427.205116][T12634]  ? __pfx_kern_select+0x10/0x10
[  427.205133][T12634]  ? xfd_validate_state+0x129/0x190
[  427.205153][T12634]  __x64_sys_select+0xbd/0x160
[  427.205169][T12634]  ? do_syscall_64+0x90/0xf80
[  427.205187][T12634]  ? lockdep_hardirqs_on+0x78/0x100
[  427.205205][T12634]  do_syscall_64+0x10b/0xf80
[  427.205223][T12634]  ? clear_bhb_loop+0x40/0x90
[  427.205242][T12634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.205257][T12634] RIP: 0033:0x7f844dd9cdd9
[  427.205270][T12634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.205285][T12634] RSP: 002b:00007f844ecea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  427.205299][T12634] RAX: ffffffffffffffda RBX: 00007f844e015fa0 RCX: 00007f844dd9cdd9
[  427.205309][T12634] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000006
[  427.205319][T12634] RBP: 00007f844de32d69 R08: 0000200000000200 R09: 0000000000000000
[  427.205328][T12634] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  427.205336][T12634] R13: 00007f844e016038 R14: 00007f844e015fa0 R15: 00007ffd6e64c7c8
[  427.205361][T12634]  </TASK>
[  427.663906][T12638] FAULT_INJECTION: forcing a failure.
[  427.663906][T12638] name fail_futex, interval 1, probability 0, space 0, times 0
[  427.732762][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.2.1389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  427.732789][T12638] Tainted: [L]=SOFTLOCKUP
[  427.732795][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  427.732804][T12638] Call Trace:
[  427.732809][T12638]  <TASK>
[  427.732815][T12638]  dump_stack_lvl+0x100/0x190
[  427.732837][T12638]  should_fail_ex.cold+0x5/0xa
[  427.732856][T12638]  get_futex_key+0x1d2/0x1510
[  427.732875][T12638]  ? __pfx_get_futex_key+0x10/0x10
[  427.732896][T12638]  futex_wake+0xea/0x530
[  427.732915][T12638]  ? rcu_is_watching+0x12/0xc0
[  427.732933][T12638]  ? __pfx_futex_wake+0x10/0x10
[  427.732954][T12638]  ? putname+0xb1/0x110
[  427.732972][T12638]  ? kmem_cache_free+0x127/0x6c0
[  427.732997][T12638]  do_futex+0x32b/0x350
[  427.733014][T12638]  ? __pfx_do_futex+0x10/0x10
[  427.733028][T12638]  ? __pfx_do_sys_openat2+0x10/0x10
[  427.733051][T12638]  ? __fget_files+0x21f/0x3d0
[  427.733069][T12638]  __x64_sys_futex+0x34f/0x4d0
[  427.733087][T12638]  ? __x64_sys_openat+0x12d/0x210
[  427.733109][T12638]  ? __pfx___x64_sys_futex+0x10/0x10
[  427.733128][T12638]  ? rcu_is_watching+0x12/0xc0
[  427.733148][T12638]  do_syscall_64+0x10b/0xf80
[  427.733166][T12638]  ? clear_bhb_loop+0x40/0x90
[  427.733184][T12638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.733199][T12638] RIP: 0033:0x7fd3ef79cdd9
[  427.733212][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.733227][T12638] RSP: 002b:00007fd3f06960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  427.733243][T12638] RAX: ffffffffffffffda RBX: 00007fd3efa16098 RCX: 00007fd3ef79cdd9
[  427.733252][T12638] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd3efa1609c
[  427.733262][T12638] RBP: 00007fd3efa16090 R08: 0000000000000001 R09: 0000000000000000
[  427.733270][T12638] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  427.733279][T12638] R13: 00007fd3efa16128 R14: 00007ffce87aa020 R15: 00007ffce87aa108
[  427.733306][T12638]  </TASK>
[  428.259905][T12646] ubi: mtd0 is already attached to ubi31
[  429.885081][T12677] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1398'.
[  430.081924][T12686] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  430.171843][T12686] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1401'.
[  430.482332][T12696] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1403'.
[  430.882391][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  431.010159][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  431.858959][T12744] zswap: compressor �qN����d��El��6����/��T~��ܼ[�(�K8 B��~�B�
��"���I)TY~�b��U�i۞v���
[  431.858959][T12744] 5r3?���恰E�� not available
[  432.137148][T12744] FAULT_INJECTION: forcing a failure.
[  432.137148][T12744] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  432.416730][T12744] CPU: 0 UID: 0 PID: 12744 Comm: syz.2.1411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  432.416757][T12744] Tainted: [L]=SOFTLOCKUP
[  432.416763][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  432.416772][T12744] Call Trace:
[  432.416778][T12744]  <TASK>
[  432.416783][T12744]  dump_stack_lvl+0x100/0x190
[  432.416805][T12744]  should_fail_ex.cold+0x5/0xa
[  432.416822][T12744]  ? fs_reclaim_acquire+0x70/0x100
[  432.416842][T12744]  should_fail_alloc_page+0xeb/0x140
[  432.416861][T12744]  prepare_alloc_pages+0x1f0/0x5f0
[  432.416882][T12744]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  432.416906][T12744]  ? trace_kmem_cache_alloc+0x41/0x100
[  432.416933][T12744]  ? kmem_cache_alloc_lru_noprof+0x297/0x6e0
[  432.416956][T12744]  ? xas_alloc+0x350/0x460
[  432.416981][T12744]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  432.417004][T12744]  ? xas_create+0x1f4/0x14e0
[  432.417029][T12744]  ? xas_store+0x409/0x1a30
[  432.417051][T12744]  ? __lock_acquire+0x4a5/0x2630
[  432.417064][T12744]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  432.417087][T12744]  ? policy_nodemask+0xed/0x4f0
[  432.417105][T12744]  alloc_pages_mpol+0x1fb/0x540
[  432.417122][T12744]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  432.417140][T12744]  ? find_held_lock+0x2b/0x80
[  432.417158][T12744]  ? brd_submit_bio+0x593/0x1cd0
[  432.417178][T12744]  alloc_pages_noprof+0x1a/0x160
[  432.417198][T12744]  brd_submit_bio+0xded/0x1cd0
[  432.417224][T12744]  ? __pfx_brd_submit_bio+0x10/0x10
[  432.417245][T12744]  ? submit_bio_noacct_nocheck+0x730/0xbf0
[  432.417262][T12744]  ? submit_bio_noacct_nocheck+0x730/0xbf0
[  432.417278][T12744]  ? blk_try_enter_queue+0x1c5/0x4d0
[  432.417294][T12744]  __submit_bio+0x419/0x6c0
[  432.417310][T12744]  ? __pfx___submit_bio+0x10/0x10
[  432.417334][T12744]  ? submit_bio_noacct_nocheck+0x730/0xbf0
[  432.417350][T12744]  submit_bio_noacct_nocheck+0x730/0xbf0
[  432.417370][T12744]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  432.417388][T12744]  ? __pfx___might_resched+0x10/0x10
[  432.417409][T12744]  submit_bio_noacct+0xd18/0x2000
[  432.417428][T12744]  blkdev_direct_IO+0x16be/0x1fb0
[  432.417453][T12744]  ? __pfx_blkdev_direct_IO+0x10/0x10
[  432.417478][T12744]  blkdev_write_iter+0x703/0xd70
[  432.417499][T12744]  vfs_write+0x6ac/0x1070
[  432.417516][T12744]  ? __pfx_blkdev_write_iter+0x10/0x10
[  432.417535][T12744]  ? __pfx_vfs_write+0x10/0x10
[  432.417550][T12744]  ? find_held_lock+0x2b/0x80
[  432.417579][T12744]  ksys_write+0x12a/0x250
[  432.417595][T12744]  ? __pfx_ksys_write+0x10/0x10
[  432.417613][T12744]  ? rcu_is_watching+0x12/0xc0
[  432.417633][T12744]  do_syscall_64+0x10b/0xf80
[  432.417651][T12744]  ? clear_bhb_loop+0x40/0x90
[  432.417669][T12744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.417684][T12744] RIP: 0033:0x7fd3ef79cdd9
[  432.417697][T12744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.417712][T12744] RSP: 002b:00007fd3f06b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  432.417726][T12744] RAX: ffffffffffffffda RBX: 00007fd3efa15fa0 RCX: 00007fd3ef79cdd9
[  432.417737][T12744] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000006
[  432.417746][T12744] RBP: 00007fd3ef832d69 R08: 0000000000000000 R09: 0000000000000000
[  432.417758][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.417767][T12744] R13: 00007fd3efa16038 R14: 00007fd3efa15fa0 R15: 00007ffce87aa108
[  432.417786][T12744]  </TASK>
[  432.882486][T12766] FAULT_INJECTION: forcing a failure.
[  432.882486][T12766] name failslab, interval 1, probability 0, space 0, times 0
[  432.895667][T12766] CPU: 0 UID: 0 PID: 12766 Comm: syz.9.1417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  432.895692][T12766] Tainted: [L]=SOFTLOCKUP
[  432.895697][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  432.895707][T12766] Call Trace:
[  432.895712][T12766]  <TASK>
[  432.895718][T12766]  dump_stack_lvl+0x100/0x190
[  432.895739][T12766]  should_fail_ex.cold+0x5/0xa
[  432.895767][T12766]  should_failslab+0xc2/0x120
[  432.895785][T12766]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  432.895808][T12766]  ? vm_area_alloc+0x1f/0x160
[  432.895833][T12766]  vm_area_alloc+0x1f/0x160
[  432.895853][T12766]  __mmap_region+0x104d/0x2da0
[  432.895879][T12766]  ? __pfx___mmap_region+0x10/0x10
[  432.895903][T12766]  ? __lock_acquire+0x4a5/0x2630
[  432.895919][T12766]  ? find_held_lock+0x2b/0x80
[  432.895937][T12766]  ? process_measurement+0x4c8/0x2350
[  432.895958][T12766]  ? process_measurement+0x4c8/0x2350
[  432.895986][T12766]  ? __lock_acquire+0x4a5/0x2630
[  432.896000][T12766]  ? do_raw_spin_unlock+0x145/0x1e0
[  432.896017][T12766]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  432.896043][T12766]  ? find_held_lock+0x2b/0x80
[  432.896062][T12766]  ? rcu_is_watching+0x12/0xc0
[  432.896087][T12766]  ? rcu_is_watching+0x12/0xc0
[  432.896104][T12766]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  432.896123][T12766]  ? lockdep_hardirqs_on+0x78/0x100
[  432.896171][T12766]  mmap_region+0x35d/0x620
[  432.896185][T12766]  ? rcu_is_watching+0x12/0xc0
[  432.896203][T12766]  ? __pfx_mmap_region+0x10/0x10
[  432.896218][T12766]  ? cap_mmap_addr+0x4b/0x120
[  432.896238][T12766]  ? bpf_lsm_mmap_addr+0x9/0x30
[  432.896252][T12766]  ? security_mmap_addr+0x71/0x1e0
[  432.896268][T12766]  ? __get_unmapped_area+0x255/0x3e0
[  432.896288][T12766]  do_mmap+0xc63/0x12f0
[  432.896309][T12766]  ? __pfx_do_mmap+0x10/0x10
[  432.896326][T12766]  ? __pfx_down_write_killable+0x10/0x10
[  432.896351][T12766]  vm_mmap_pgoff+0x29e/0x470
[  432.896373][T12766]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  432.896392][T12766]  ? do_futex+0x192/0x350
[  432.896408][T12766]  ? __pfx_do_futex+0x10/0x10
[  432.896428][T12766]  ksys_mmap_pgoff+0xe4/0x610
[  432.896445][T12766]  ? __x64_sys_futex+0x358/0x4d0
[  432.896461][T12766]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  432.896478][T12766]  ? xfd_validate_state+0x129/0x190
[  432.896498][T12766]  __x64_sys_mmap+0x125/0x190
[  432.896516][T12766]  do_syscall_64+0x10b/0xf80
[  432.896534][T12766]  ? clear_bhb_loop+0x40/0x90
[  432.896552][T12766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.896567][T12766] RIP: 0033:0x7f844dd9cdd9
[  432.896581][T12766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.896596][T12766] RSP: 002b:00007f844ecc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  432.896611][T12766] RAX: ffffffffffffffda RBX: 00007f844e016090 RCX: 00007f844dd9cdd9
[  432.896621][T12766] RDX: 00000000000000df RSI: 0000000000000004 RDI: 0000000000000000
[  432.896631][T12766] RBP: 00007f844de32d69 R08: 0000000000000003 R09: 0000000000000000
[  432.896640][T12766] R10: 0080000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  432.896649][T12766] R13: 00007f844e016128 R14: 00007f844e016090 R15: 00007ffd6e64c7c8
[  432.896669][T12766]  </TASK>
[  434.480691][T12773] MTRR 0 not used
[  435.175824][T12788] random: crng reseeded on system resumption
[  435.508154][T12795] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1425'.
[  435.841794][T12808] FAULT_INJECTION: forcing a failure.
[  435.841794][T12808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.920744][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.6.1427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  435.920770][T12808] Tainted: [L]=SOFTLOCKUP
[  435.920776][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  435.920785][T12808] Call Trace:
[  435.920791][T12808]  <TASK>
[  435.920796][T12808]  dump_stack_lvl+0x100/0x190
[  435.920817][T12808]  should_fail_ex.cold+0x5/0xa
[  435.920836][T12808]  core_sys_select+0x938/0xbb0
[  435.920860][T12808]  ? __pfx_core_sys_select+0x10/0x10
[  435.920895][T12808]  ? ktime_get_ts64+0x306/0x420
[  435.920919][T12808]  ? ktime_get_ts64+0x318/0x420
[  435.920939][T12808]  ? ktime_get_ts64+0x257/0x420
[  435.920963][T12808]  kern_select+0x20c/0x270
[  435.920981][T12808]  ? __pfx_kern_select+0x10/0x10
[  435.920998][T12808]  ? xfd_validate_state+0x129/0x190
[  435.921018][T12808]  __x64_sys_select+0xbd/0x160
[  435.921033][T12808]  ? do_syscall_64+0x90/0xf80
[  435.921052][T12808]  ? lockdep_hardirqs_on+0x78/0x100
[  435.921070][T12808]  do_syscall_64+0x10b/0xf80
[  435.921087][T12808]  ? clear_bhb_loop+0x40/0x90
[  435.921106][T12808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.921121][T12808] RIP: 0033:0x7f11e4f9cdd9
[  435.921134][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.921149][T12808] RSP: 002b:00007f11e5d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  435.921165][T12808] RAX: ffffffffffffffda RBX: 00007f11e5215fa0 RCX: 00007f11e4f9cdd9
[  435.921175][T12808] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000006
[  435.921184][T12808] RBP: 00007f11e5032d69 R08: 0000200000000200 R09: 0000000000000000
[  435.921193][T12808] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  435.921201][T12808] R13: 00007f11e5216038 R14: 00007f11e5215fa0 R15: 00007ffcc94bb648
[  435.921220][T12808]  </TASK>
[  436.459773][T12816] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1429'.
[  436.679989][T12822] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  437.916758][T12831] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  437.945511][T12831] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  437.969155][T12831] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  438.012536][T12831] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  438.050597][T12831] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  438.078562][T12831] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  438.108772][T12831] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  438.122663][T12831] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  438.139129][T12831] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  438.151498][T12831] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  438.166405][T12831] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  438.475228][T12852] FAULT_INJECTION: forcing a failure.
[  438.475228][T12852] name fail_futex, interval 1, probability 0, space 0, times 0
[  438.520138][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.2.1436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.520164][T12852] Tainted: [L]=SOFTLOCKUP
[  438.520170][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  438.520185][T12852] Call Trace:
[  438.520190][T12852]  <TASK>
[  438.520196][T12852]  dump_stack_lvl+0x100/0x190
[  438.520218][T12852]  should_fail_ex.cold+0x5/0xa
[  438.520238][T12852]  get_futex_key+0x1d2/0x1510
[  438.520256][T12852]  ? __pfx_get_futex_key+0x10/0x10
[  438.520278][T12852]  futex_wake+0xea/0x530
[  438.520297][T12852]  ? rcu_is_watching+0x12/0xc0
[  438.520315][T12852]  ? __pfx_futex_wake+0x10/0x10
[  438.520335][T12852]  ? putname+0xb1/0x110
[  438.520353][T12852]  ? kmem_cache_free+0x127/0x6c0
[  438.520379][T12852]  do_futex+0x32b/0x350
[  438.520395][T12852]  ? __pfx_do_futex+0x10/0x10
[  438.520409][T12852]  ? __pfx_do_sys_openat2+0x10/0x10
[  438.520432][T12852]  ? __fget_files+0x21f/0x3d0
[  438.520451][T12852]  __x64_sys_futex+0x34f/0x4d0
[  438.520468][T12852]  ? __x64_sys_openat+0x12d/0x210
[  438.520490][T12852]  ? __pfx___x64_sys_futex+0x10/0x10
[  438.520509][T12852]  ? rcu_is_watching+0x12/0xc0
[  438.520529][T12852]  do_syscall_64+0x10b/0xf80
[  438.520547][T12852]  ? clear_bhb_loop+0x40/0x90
[  438.520565][T12852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.520580][T12852] RIP: 0033:0x7fd3ef79cdd9
[  438.520593][T12852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.520608][T12852] RSP: 002b:00007fd3f06960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  438.520623][T12852] RAX: ffffffffffffffda RBX: 00007fd3efa16098 RCX: 00007fd3ef79cdd9
[  438.520633][T12852] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd3efa1609c
[  438.520642][T12852] RBP: 00007fd3efa16090 R08: 0000000000000001 R09: 0000000000000000
[  438.520650][T12852] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[  438.520659][T12852] R13: 00007fd3efa16128 R14: 00007ffce87aa020 R15: 00007ffce87aa108
[  438.520678][T12852]  </TASK>
[  439.097626][T12866] FAULT_INJECTION: forcing a failure.
[  439.097626][T12866] name failslab, interval 1, probability 0, space 0, times 0
[  439.097665][T12866] CPU: 0 UID: 0 PID: 12866 Comm: syz.6.1438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  439.097686][T12866] Tainted: [L]=SOFTLOCKUP
[  439.097692][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.097701][T12866] Call Trace:
[  439.097706][T12866]  <TASK>
[  439.097712][T12866]  dump_stack_lvl+0x100/0x190
[  439.097732][T12866]  should_fail_ex.cold+0x5/0xa
[  439.097753][T12866]  should_failslab+0xc2/0x120
[  439.097770][T12866]  __kmalloc_cache_noprof+0x7a/0x6f0
[  439.097791][T12866]  ? cuse_channel_open+0x1de/0x7f0
[  439.097814][T12866]  cuse_channel_open+0x1de/0x7f0
[  439.097832][T12866]  ? __pfx_cuse_channel_open+0x10/0x10
[  439.097851][T12866]  misc_open+0x26d/0x450
[  439.097869][T12866]  ? __pfx_misc_open+0x10/0x10
[  439.097885][T12866]  chrdev_open+0x234/0x6a0
[  439.097904][T12866]  ? __pfx_apparmor_file_open+0x10/0x10
[  439.097927][T12866]  ? __pfx_chrdev_open+0x10/0x10
[  439.097946][T12866]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  439.097970][T12866]  do_dentry_open+0x6d8/0x1660
[  439.097986][T12866]  ? __pfx_chrdev_open+0x10/0x10
[  439.098009][T12866]  vfs_open+0x82/0x3f0
[  439.098032][T12866]  path_openat+0x208c/0x31a0
[  439.098056][T12866]  ? __pfx_path_openat+0x10/0x10
[  439.098081][T12866]  do_file_open+0x20e/0x430
[  439.098100][T12866]  ? __pfx_do_file_open+0x10/0x10
[  439.098140][T12866]  ? alloc_fd+0x476/0x790
[  439.098160][T12866]  ? do_getname+0x191/0x390
[  439.098184][T12866]  do_sys_openat2+0x10d/0x1e0
[  439.098206][T12866]  ? __pfx_do_sys_openat2+0x10/0x10
[  439.098230][T12866]  ? __fget_files+0x21f/0x3d0
[  439.098250][T12866]  __x64_sys_openat+0x12d/0x210
[  439.098273][T12866]  ? __pfx___x64_sys_openat+0x10/0x10
[  439.098299][T12866]  ? rcu_is_watching+0x12/0xc0
[  439.098319][T12866]  do_syscall_64+0x10b/0xf80
[  439.098338][T12866]  ? clear_bhb_loop+0x40/0x90
[  439.098356][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.098371][T12866] RIP: 0033:0x7f11e4f9cdd9
[  439.098384][T12866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.098398][T12866] RSP: 002b:00007f11e31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  439.098413][T12866] RAX: ffffffffffffffda RBX: 00007f11e5216090 RCX: 00007f11e4f9cdd9
[  439.098423][T12866] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  439.098432][T12866] RBP: 00007f11e5032d69 R08: 0000000000000000 R09: 0000000000000000
[  439.098442][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  439.098451][T12866] R13: 00007f11e5216128 R14: 00007f11e5216090 R15: 00007ffcc94bb648
[  439.098471][T12866]  </TASK>
[  439.336743][ T5622] Bluetooth: hci0: command 0x2016 tx timeout
[  439.762619][T12876] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1443'.
[  439.978869][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  439.978898][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  440.053162][ T4942] Bluetooth: hci4: command 0x0c1a tx timeout
[  440.053188][ T4942] Bluetooth: hci3: command 0x0406 tx timeout
[  440.142892][   T30] INFO: task syz.4.965:10147 blocked for more than 143 seconds.
[  440.142914][   T30]       Tainted: G             L      syzkaller #0
[  440.142923][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  440.142929][   T30] task:syz.4.965       state:D stack:27496 pid:10147 tgid:10146 ppid:9793   task_flags:0x400140 flags:0x00080002
[  440.142976][   T30] Call Trace:
[  440.142981][   T30]  <TASK>
[  440.142990][   T30]  __schedule+0x10e9/0x6820
[  440.143845][   T30]  ? __pfx___schedule+0x10/0x10
[  440.143864][   T30]  ? find_held_lock+0x2b/0x80
[  440.143886][   T30]  ? schedule+0x2bf/0x390
[  440.143906][   T30]  schedule+0xdd/0x390
[  440.143923][   T30]  schedule_preempt_disabled+0x13/0x30
[  440.143941][   T30]  __mutex_lock+0xced/0x1b10
[  440.143962][   T30]  ? nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.143982][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  440.144009][   T30]  ? net_generic+0xea/0x2a0
[  440.144037][   T30]  ? net_generic+0xea/0x2a0
[  440.144062][   T30]  ? nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.144078][   T30]  nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.144097][   T30]  genl_family_rcv_msg_doit+0x214/0x300
[  440.144123][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  440.144146][   T30]  ? genl_get_cmd+0x3e7/0x760
[  440.144172][   T30]  ? bpf_lsm_capable+0x9/0x10
[  440.144189][   T30]  ? security_capable+0x80/0x260
[  440.144215][   T30]  genl_rcv_msg+0x560/0x800
[  440.144240][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  440.144263][   T30]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  440.144289][   T30]  netlink_rcv_skb+0x159/0x420
[  440.144310][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  440.144333][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  440.144361][   T30]  ? netlink_deliver_tap+0x1ae/0xcc0
[  440.144383][   T30]  genl_rcv+0x28/0x40
[  440.144404][   T30]  netlink_unicast+0x585/0x850
[  440.144426][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  440.144452][   T30]  netlink_sendmsg+0x8b0/0xda0
[  440.144475][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.144512][   T30]  ? __import_iovec+0x1d2/0x640
[  440.144530][   T30]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  440.144556][   T30]  ____sys_sendmsg+0x9e1/0xb70
[  440.144576][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.144598][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  440.144617][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  440.144644][   T30]  ? try_to_wake_up+0x5f6/0x1900
[  440.144668][   T30]  ___sys_sendmsg+0x190/0x1e0
[  440.144690][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  440.144712][   T30]  ? futex_private_hash_put+0x107/0x1c0
[  440.144749][   T30]  __sys_sendmsg+0x170/0x220
[  440.144766][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  440.144782][   T30]  ? __x64_sys_futex+0x34f/0x4d0
[  440.144805][   T30]  ? rcu_is_watching+0x12/0xc0
[  440.144827][   T30]  do_syscall_64+0x10b/0xf80
[  440.144846][   T30]  ? clear_bhb_loop+0x40/0x90
[  440.144866][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.144882][   T30] RIP: 0033:0x7f797059cdd9
[  440.144895][   T30] RSP: 002b:00007f796e7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.144910][   T30] RAX: ffffffffffffffda RBX: 00007f7970815fa0 RCX: 00007f797059cdd9
[  440.144921][   T30] RDX: 0000000020000014 RSI: 0000200000000b80 RDI: 0000000000000003
[  440.144931][   T30] RBP: 00007f7970632d69 R08: 0000000000000000 R09: 0000000000000000
[  440.144940][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.144950][   T30] R13: 00007f7970816038 R14: 00007f7970815fa0 R15: 00007ffe9dea57e8
[  440.144970][   T30]  </TASK>
[  440.145015][   T30] 
[  440.145015][   T30] Showing all locks held in the system:
[  440.145028][   T30] 2 locks held by kworker/0:0/9:
[  440.145037][   T30]  #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  440.145077][   T30]  #1: ffffc900000e7d08 (console_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  440.145115][   T30] 1 lock held by khungtaskd/30:
[  440.145124][   T30]  #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  440.145196][   T30] 2 locks held by syz.2.832/9503:
[  440.145205][   T30]  #0: ffffffff906bc788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.145246][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.145287][   T30] 2 locks held by syz.4.965/10147:
[  440.145295][   T30]  #0: ffffffff906bc788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.145336][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.145372][   T30] 2 locks held by syz.0.995/10281:
[  440.145380][   T30]  #0: ffffffff906bc788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.145421][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.145456][   T30] 2 locks held by syz-executor/10408:
[  440.145465][   T30]  #0: ffff888036f3a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  440.145505][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  440.145548][   T30] 2 locks held by syz.1.1037/10512:
[  440.145557][   T30]  #0: ffffffff906bc788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.145597][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0
[  440.145634][   T30] 2 locks held by getty/10597:
[  440.145642][   T30]  #0: ffff8880380e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  440.145682][   T30]  #1: ffffc90002ee72e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  440.145721][   T30] 2 locks held by syz-executor/11042:
[  440.145730][   T30]  #0: ffff888034c8e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  440.145769][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  440.145811][   T30] 2 locks held by syz.3.1225/11833:
[  440.145819][   T30]  #0: ffff88802c8f80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  440.145859][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  440.145901][   T30] 2 locks held by syz.7.1433/12835:
[  440.145909][   T30]  #0: ffffffff906bc788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  440.145950][   T30]  #1: ffffffff8ec61aa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0
[  440.145986][   T30] 6 locks held by syz.2.1441/12864:
[  440.145995][   T30] 1 lock held by syz.6.1444/12880:
[  440.146004][   T30] 3 locks held by syz.9.1445/12883:
[  440.146012][   T30] 3 locks held by syz.9.1445/12884:
[  440.146020][   T30] 
[  440.146029][   T30] =============================================
[  440.146029][   T30] 
[  440.146039][   T30] NMI backtrace for cpu 0
[  440.146050][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.146069][   T30] Tainted: [L]=SOFTLOCKUP
[  440.146074][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.146082][   T30] Call Trace:
[  440.146087][   T30]  <TASK>
[  440.146092][   T30]  dump_stack_lvl+0x100/0x190
[  440.146108][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  440.146125][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  440.146141][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  440.146167][   T30]  sys_info+0x141/0x190
[  440.146188][   T30]  watchdog+0xcb1/0x1030
[  440.146212][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  440.146229][   T30]  ? __pfx_watchdog+0x10/0x10
[  440.146249][   T30]  ? __kthread_parkme+0x18c/0x230
[  440.146271][   T30]  ? kthread+0x13a/0x450
[  440.146284][   T30]  ? __pfx_watchdog+0x10/0x10
[  440.146304][   T30]  kthread+0x370/0x450
[  440.146315][   T30]  ? __pfx_kthread+0x10/0x10
[  440.146328][   T30]  ret_from_fork+0x72b/0xd50
[  440.146344][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  440.146361][   T30]  ? __switch_to+0x800/0x1100
[  440.146380][   T30]  ? __switch_to_asm+0x39/0x70
[  440.146398][   T30]  ? __pfx_kthread+0x10/0x10
[  440.146411][   T30]  ret_from_fork_asm+0x1a/0x30
[  440.146438][   T30]  </TASK>
[  440.146454][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  440.146464][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.146483][   T30] Tainted: [L]=SOFTLOCKUP
[  440.146488][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.146496][   T30] Call Trace:
[  440.146501][   T30]  <TASK>
[  440.146506][   T30]  dump_stack_lvl+0x100/0x190
[  440.146522][   T30]  vpanic+0x552/0x970
[  440.146536][   T30]  ? __pfx_vpanic+0x10/0x10
[  440.146549][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  440.146573][   T30]  ? rcu_is_watching+0x12/0xc0
[  440.146590][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  440.146616][   T30]  panic+0xd1/0xe0
[  440.146629][   T30]  ? __pfx_panic+0x10/0x10
[  440.146644][   T30]  ? nmi_cpu_backtrace+0x79/0x200
[  440.146668][   T30]  ? nmi_trigger_cpumask_backtrace+0x1be/0x230
[  440.146691][   T30]  ? watchdog.cold+0x1ec/0x234
[  440.146707][   T30]  ? watchdog+0xcc1/0x1030
[  440.146728][   T30]  watchdog.cold+0x1fd/0x234
[  440.146748][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  440.146765][   T30]  ? __pfx_watchdog+0x10/0x10
[  440.146786][   T30]  ? __kthread_parkme+0x18c/0x230
[  440.146807][   T30]  ? kthread+0x13a/0x450
[  440.146818][   T30]  ? __pfx_watchdog+0x10/0x10
[  440.146837][   T30]  kthread+0x370/0x450
[  440.146849][   T30]  ? __pfx_kthread+0x10/0x10
[  440.146863][   T30]  ret_from_fork+0x72b/0xd50
[  440.146879][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  440.146896][   T30]  ? __switch_to+0x800/0x1100
[  440.146915][   T30]  ? __switch_to_asm+0x39/0x70
[  440.146934][   T30]  ? __pfx_kthread+0x10/0x10
[  440.146947][   T30]  ret_from_fork_asm+0x1a/0x30
[  440.146974][   T30]  </TASK>
[  440.147031][   T30] Kernel Offset: disabled