last executing test programs:

2m42.974760833s ago: executing program 32 (id=2391):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x83a, 0x1, 0x0, 0x1, 0x8)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
mmap$auto(0x0, 0x8, 0x4, 0x9b72, 0x2, 0x8000)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x18bc00, 0x0)
r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r1, 0x0, 0xc3)

2m40.890837708s ago: executing program 0 (id=2399):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r2, 0x0, 0x80000000006)
signalfd$auto(r2, 0x0, 0x8)

2m25.05508249s ago: executing program 33 (id=2399):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r2, 0x0, 0x80000000006)
signalfd$auto(r2, 0x0, 0x8)

2m19.539776884s ago: executing program 34 (id=2410):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
signalfd$auto(r2, 0x0, 0x8)

2m18.249341674s ago: executing program 35 (id=2411):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r2, 0x0, 0x80000000006)
signalfd$auto(r2, 0x0, 0x8)

2m12.91821576s ago: executing program 36 (id=2417):
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x801, 0x100)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/92, 0x5c)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r1, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
read$auto(0x3, 0x0, 0x80)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000400)=""/217, 0xd9) (fail_nth: 3)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9})
ioctl$auto(0x3, 0x5411, 0x38)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000)

2m1.578413406s ago: executing program 37 (id=2426):
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810)
socket(0x10, 0x2, 0x0)
sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, 0x0, 0x1c)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
socketpair$auto(0x0, 0x5, 0x8000000000000000, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/inode-state\x00', 0x0, 0x0)
mmap$auto(0x6, 0x100000000000004, 0x8000000003, 0x9b72, 0x7, 0x28000)
r0 = socket(0x10, 0x2, 0x6)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
r3 = socket(0x2, 0x3, 0xa)
r4 = openat2$auto(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x3)
io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x6)
ioctl$auto_FS_IOC_FSSETXATTR(r4, 0x401c5820, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
write$auto(0x3, 0x0, 0x800)
r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
sendmsg$auto_NL80211_CMD_SET_KEY(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003100)=ANY=[@ANYBLOB="44170000", @ANYRES16=r5, @ANYRES32=r2], 0x1744}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000054)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x200004400008, 0xe, 0x200009b72, 0x2, 0x8000)

1m51.812707969s ago: executing program 7 (id=2477):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r0, 0x6, 0x1, &(0x7f0000000000)=',#+!\\\x00', 0x9)
mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff)
msgctl$auto_MSG_STAT(0x6, 0xb, &(0x7f00000001c0)={{0x7ff, <r2=>0xee00, 0x0, 0x8, 0x8, 0x6, 0x127}, &(0x7f0000000140)=0xff, &(0x7f0000000180)=0x9, 0x518, 0x7, 0x0, 0x100, 0x9, 0xfffe, 0x8, 0xc58a, @raw=0xf2e3})
sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="00082dbd7000fcdbdf251b0000003a001f000774bb5340b769dca50c50a6cf95a91d11e1be8daa89b3cf92c5aace86e26f57e7ea7183085d03f19fca8f0383d38cb6bc892437088f0000240013801400e88008001b00070000000800fc00", @ANYRES32=r2, @ANYBLOB="0c000000070000000000000008000d00070000dd040014002700000086d38b5d5e2818622870cda1a59501a46dcdb71c11118ea27781af4780d485635138b406ba6fd6a0636569dd07ac1633eb8ebe0dee8018faa03611b8e836bcfdaca8d68f3a522d5255565506a28f812c306163fc1b2219c493271b22871570"], 0x84}, 0x1, 0x0, 0x0, 0x400c801}, 0x8014)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x200000001000, 0xfffffffffffffffd, 0x37, 0x4, 0x110c230000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x101, 0x0)
io_uring_setup$auto(0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

1m51.571758897s ago: executing program 7 (id=2479):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0)
r2 = socket(0x28, 0x5, 0x0) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000740), r2)
sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r3, 0x203, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1) (async)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0400}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x21c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0x72, 0x136, "ac151c58c3bb3c738eea12f51a737869344c39ac3f4d8489e940da3393f09bd85a1d6f472920ccd2464f86530cb8489e1d5576b9fef236ddc77f836c6220a0017120f83144662ae4fcfa7ae5052eaa465807c4c1b4f1a7723dbbcbc5ca0d0cc755542c185bdba9445713ed6d3f28"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0xb2, 0xfd, "36e24fa5ca7efde35f54a314bba90bc8643c0c27629d8f2f63dd0719f139db329c8877d32d88aff379467a159eb4db45bac940c2a7b73212c5cb6a8133bc56f119c59078abe247b801c00ef7ff1e782ea6ec5406f3917daa9456d09c5953f9853e15459df712a7d1cc71845f4bb7e126c7b29d5d509fc3a5006061e7b74224b5ade0f68daeb6a440286aca0ba5f7e4b2f575e071b8d1480f37fc09be09171182cc5dd8fc2af9919890228188737c"}, @NL80211_ATTR_SAR_SPEC={0xcc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS={0xc0, 0x2, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd0}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6d0a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x800}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xf, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) (async)
syz_clone(0x52000080, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000d40)="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") (async)
mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x2)
r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r6, 0x4, 0x70bd29, 0x25dfdc00, {}, "7a87b7426eb80af8483cdbc50586ff08a64dca344bda4bd90490b70bccfeef03d9ff48c1eccf7e0f8313aecb87d2ca6eb5b6cb3a3c5bcfce7deea5a48eb8b42e8ea4cb95b82d9578e8701a2af34b1b7c7cbea1a1619fe85e70ce515904adef3791911fcf524cbc4b2b99086c5cc2980a16e067c2a962017fd7388baabe10e4863d8943050f4a16cc6e28e8319b173c05e0046e77c518efeb6f7efd137154bc039018"}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
socket(0x25, 0x5, 0x73) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x61ed, 0x4) (async)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
semctl$auto_IPC_STAT(0xf7, 0x140, 0x2, 0xd3c7)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"})
setrlimit$auto(0x5, &(0x7f0000000000)={0x3, 0x4}) (async)
clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)

1m50.496451713s ago: executing program 7 (id=2480):
r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40400, 0x0)
read$auto_dfs_global_fops_debug(r0, 0x0, 0x0)
close_range$auto(0x2, r0, 0x534)
socket(0xa, 0x5, 0x84)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x7)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
munmap$auto(0x1775387, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0)
fcntl$auto_F_SETOWN_EX(r3, 0xf, 0x9)
r4 = memfd_secret$auto(0x0)
ftruncate$auto(r4, 0x1)
ftruncate$auto(0x3, 0x700)

1m42.664746279s ago: executing program 6 (id=2499):
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21e50cbd70c031cd0ce411"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r0 = socket(0x10, 0x2, 0x4)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)

1m42.225631361s ago: executing program 6 (id=2500):
socket(0x2, 0x3, 0xa)
unshare$auto(0x4)
r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="d54770602b99e575984510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
read$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000340)=""/145, 0x91)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000)
write$auto(0x0, 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x400101, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17)
llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7)
ioprio_set$auto(0x3, 0xffffffffffffffff, 0x72e2f0a)
writev$auto(r4, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r6=>r5, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0)

1m41.208630646s ago: executing program 6 (id=2506):
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000480)=""/189, 0xbd)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
mmap$auto(0xf, 0x4400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd)
mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0)
r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
signalfd$auto(r0, 0x0, 0x8)
socket(0xa, 0x1, 0x84)
setsockopt$auto(0xffffffffffffffff, 0x10, 0x1, 0x0, 0x88)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="04040000030000000900000007000000ffffff7f070000000000008003000000ff00000000000000020000000d000000ff0100004000000000000000720000000500000008000000090000000500000001000000080000007f000000008000000700000002000000dc040000070000000a000000000000000200000003000000060600006d00000008000000"])
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xa0666, 0x0)
write$auto(r3, &(0x7f0000000680)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\xdf\xf3\xeed\xc5\xec\xa0\x90%n\xcd\x1a!\xe5\x00\x00\x00\x00\x9e\x9a#\xba<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILp\xcf\xa9lM\xf5\x88J\x01\xff\xff\xff\xdd\x89^T@d\xa3_\xfcb8yA\x11\xba\xef\xe1L\x8aE}\xa7\x05\b\x01\x00\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x00\x00\x00\x00>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xf3\'\x1aS?\xa4(!\xbdj\xd2\xd3g\xec\x13\x15&nv\xc1}\xfcD\x00\x00\x00\x00\x00\x00.\x00\x00iNo\xbal\x97\xcb\xb2\xde\x05\x00-#\x88Q\x00\x00\x00\x00\x00\x00\x97\xd4j\x8a\xa8\xbd\"\xe8*{\xdf\x9c\x010\xcf\'\x95\"\xb2@\xc3=\xc2\x14^\xce\xcd\a\x93\xdf\x10\xccvm\xa4U\x9e*o\xd5d\x9b\x03\x8d\xc1>\xf3\x95\x17\'\x04\x03\xb5t@^\x82\xf0O\t\x01l\x0e\xe4\x9f>nq\xc4\"\xedTScz0\x04W\fPH\xac\x9c\x83\xac-\x93D\xb4\xf9\x8b\xc4\xc2m\x7f\x14\x1d\xd4\xcc\xee#y\xb4W\xb1\xab\xc5\xaa\x8f\xec;\x86\xe2\"\"\xb7\x06\xa1\xe8q\xf1\x91\xe8\x9d\xb7<\xeeV\xf0e\xf2P%$\xd5\xc3\x18F~|\x9a\xd3\'\x8b\xa0sg\xdf\xb63}pSV8\xc1:3i\xf4s\x05\xe8\x1f\xcb\x16\xa9\xe4\xde\x00\xfeU}\xb3\xb6\xa0\xfa\xd1\xaa`\xcb\xad\xa6\\\xf7\x13g\x9e\x15\xb3\a<\xdaJgE\xae\x1f\xf9\xbc#\x9e\x8a\x035\xea\x17', 0x20000000013a5)
read$auto(0x3, 0x0, 0x8080)
seccomp$auto(0x2, 0x100000000, 0xfffffffffffffffc)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
socket(0x2, 0x1, 0x106)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000200)='+(**\x00', &(0x7f0000000240)="428bed624d5ff2203024d6b1e3781eea6a0b40bd01e2175e6f4144bdb0a8148e70fb0e966276e0f1c18888b9247275c2673516ee0fa9003d12d2ad6ead9f6e41968ce0c9c6a5bdbbb81e9da3f0627297abc2c2918d9131a9d9872abac88e6f455afdecf37328d51c0d6d38c571e725420cfbd78a4b5cc83e34e6a63e2201cab3797943b22f17b69f235d55b265c8c840ff154a75d3de6087e0b59b73b097535ecb82a88747ed516c2d7923eb20b63fe148d968af48dd017057d65912a5b7f0df61548fd9105b65fdbcd7fda2", 0x6)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x10101, 0x0)
write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000040)="804acfe1a2", 0x5)
r5 = syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind$auto(0x0, 0x100000004, 0x10000f5ff, 0x0, 0x6, 0x2)
mmap$auto(0xffffffffffffffff, 0x8000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_XFS_IOC_FREESP64(r2, 0x40305825, &(0x7f00000001c0)={0x800, 0x2, 0x8000000000000000, 0x7ff, 0xe, r5})

1m40.166459475s ago: executing program 6 (id=2508):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
unshare$auto(0x40000080) (rerun: 32)
ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=[0xfff, 0x2688]) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
write$auto(r0, 0x0, 0xfffffdf1) (async)
fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) (async)
r1 = socket(0x1a, 0x3, 0x2) (async)
mmap$auto(0x0, 0x20009, 0x400, 0xeb1, 0x401, 0x8000) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 32)
r2 = io_uring_setup$auto(0x1, 0x0) (rerun: 32)
write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x0) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) (async)
mmap$auto(0x0, 0x4000c, 0x3, 0x9b72, 0x7, 0x28000) (async, rerun: 32)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) (rerun: 32)
fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) (async, rerun: 32)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) (async, rerun: 32)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/stack\x00', 0x501080, 0x0) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r5)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c8b3b4583d1d87547bdd84b0f7a0baf920000000a8a9783cad91539b5581019b38833e2e865223e4f70478baa6a5f2b7f43f33ce3bd8b5ccb65d50a2483abae7b4ca96d6fabf60a35ae100607c2bb303aa0efecb16f2db74f8d21de032473e4c3922d9d7abe617d5954573a6114f27010af", @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25050000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
read$auto_proc_single_file_operations_base(r4, &(0x7f0000000ac0)=""/4096, 0x1000) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) (async)
r7 = socket(0x15, 0x5, 0x0)
recvmmsg$auto(r7, &(0x7f0000001180)={{0x0, 0x80003, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x5, 0xff, &(0x7f00000011c0)={0x0, 0x7})
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x4000840)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0)

1m39.585560705s ago: executing program 6 (id=2510):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
syncfs$auto(0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\n\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8802, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

1m38.45537663s ago: executing program 6 (id=2514):
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0)
sendfile$auto(0x3, r0, 0x0, 0x101400000000006)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0xffffffffffffffa2, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m35.439251639s ago: executing program 38 (id=2480):
r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40400, 0x0)
read$auto_dfs_global_fops_debug(r0, 0x0, 0x0)
close_range$auto(0x2, r0, 0x534)
socket(0xa, 0x5, 0x84)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x7)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
munmap$auto(0x1775387, 0x5)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0)
fcntl$auto_F_SETOWN_EX(r3, 0xf, 0x9)
r4 = memfd_secret$auto(0x0)
ftruncate$auto(r4, 0x1)
ftruncate$auto(0x3, 0x700)

1m29.757628603s ago: executing program 9 (id=2539):
r0 = socket(0x11, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0)
mseal$auto(0x1000, 0xb47, 0x5)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="fb", 0x1)
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
unshare$auto(0x40000080)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0xb02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7ff)
sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fd64fe9b59e7678f895d"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a})
mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x7ff)
r5 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r6 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0)
pread64$auto(r6, 0x0, 0x7, 0x0)
copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=0x0, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r5)
sendmmsg$auto(r0, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)

1m28.614008099s ago: executing program 9 (id=2541):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
socket(0x23, 0x5, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884)
lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x88f80, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

1m28.116254914s ago: executing program 9 (id=2542):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
select$auto(0x5, 0x0, &(0x7f0000000080)={[0x209c, 0x6bd, 0x9, 0x7ffe, 0x9, 0x100000004, 0x6, 0x9, 0x4, 0xdfdffdff, 0x4, 0xd59, 0xfb, 0x1, 0x775f, 0x7]}, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40890)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x141d40, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x560a, r4)
r5 = pidfd_open$auto(0x1, 0x0)
readahead$auto(r5, 0x418642b8, 0x5)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0)

1m26.779889921s ago: executing program 9 (id=2544):
open(&(0x7f0000000380)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x801, 0x106)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
clock_adjtime$auto(0x5, &(0x7f0000000240)={0x958, 0x0, 0x3, 0x3, 0x200, 0x1, 0x1, 0x0, 0xe7, 0x449, 0x8, {0x5, 0x2}, 0x7, 0xd, 0x7fff, 0xf, 0x0, 0x5, 0x7ff, 0x7, 0x87, 0x1ff, 0x2000000})
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0xc)
mmap$auto(0x0, 0x3, 0xde, 0x8000000000000011, 0x2, 0x800008000)
sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x140, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x12c, 0x2, 0x0, 0x1, [@nested={0x99, 0xf0, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd}, @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="a3de16065a7591e49d65142d71a7d089039b955449bacbe9b8c10a2d62e2e359199d44c2f522c057cf50a59eae8b2bd1139e815473d9056fd4b74c3bc8297208706d296d39b2edefbecf71fb0557da35bdcc25bbda6d8159717ab6877946bdd4d463e815a3cc799d60034c3d4c2fb56d9a34e350ee6c8754be6ec46a6a5a05a4dfc8eb12f0"]}, @nested={0x89, 0x2, 0x0, 0x1, [@generic="17a7095d9cad683dc191795782f8f5c627b6e77daf22a2c623baa0298950595b03b3645d65975751189a5095eead659ef3195174f18babe137b326f26be28ee844b4b754c3ca1e95c65ec5bc0180523acc97ef39e885951b1606d45bf5f0f415e6d0a12bc10b75fad9a30e2bdbf03ce7c2f7665a35", @typed={0x7, 0xb0, 0x0, 0x0, @str=',@\x00'}, @typed={0x8, 0xdd, 0x0, 0x0, @pid}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x84}, 0x400000d9)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mlock$auto(0x112, 0x80006)
mlockall$auto(0x800000000000005)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x5, 0x6, 0x9)
bind$auto(r3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0xfff)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4)
sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="08002bbd7000ffdb00"], 0x14}, 0x1, 0x0, 0x0, 0x24044080}, 0x4000)
getsockopt$auto_SO_DOMAIN(r2, 0x1ff, 0x27, 0x0, &(0x7f0000000040)=0x4)
bind$auto(0xffffffffffffffff, 0x0, 0x5)

1m25.682119771s ago: executing program 9 (id=2548):
fchown$auto(0x2, 0xffffffff, 0xa1a9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)
read$auto(r0, 0x0, 0x10001)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2)
write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200800, 0x0)
r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
write$auto(r2, 0x0, 0xfffffdf1)
linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\x89I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
mknod$auto(0x0, 0xcb, 0x6862)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x58)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m24.766805498s ago: executing program 9 (id=2551):
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)={0x28b5, 0x81})
r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000000080)={r1, 0xffff, 0x4}, 0xffff0000, 0x3ff)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="d2892df93914cb1efdef2c3bf9f6311200"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800)

1m23.453992146s ago: executing program 39 (id=2514):
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0)
sendfile$auto(0x3, r0, 0x0, 0x101400000000006)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0xffffffffffffffa2, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m12.340711043s ago: executing program 0 (id=2554):
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x560a, r1)
r2 = pidfd_open$auto(0x1, 0x0)
readahead$auto(r2, 0x418642b8, 0x5)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x101, 0x103)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/029/001\x00', 0x501240, 0x0)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0)
acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00')
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c800)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(r0, 0xfffffffffffff000, 0x9)
r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0)
pwritev$auto(r4, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5)

1m11.417090267s ago: executing program 0 (id=2580):
socket(0x2, 0x3, 0xa)
unshare$auto(0x4)
r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="d54770602b99e575984510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
read$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000340)=""/145, 0x91)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0)
ioctl$auto(r3, 0x541d, r3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000)
write$auto(0x0, 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x400101, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17)
llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7)
ioprio_set$auto(0x3, 0xffffffffffffffff, 0x72e2f0a)
writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
r6 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r7=>r6, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x0)

1m10.159735919s ago: executing program 0 (id=2584):
socket(0x2, 0x3, 0xa)
unshare$auto(0x4)
r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
read$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000340)=""/145, 0x91)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0)
ioctl$auto(r2, 0x541d, r2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000)
write$auto(0x0, 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x400101, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17)
llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7)
ioprio_set$auto(0x3, 0xffffffffffffffff, 0x72e2f0a)
writev$auto(r4, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r6=>r5, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0)

1m9.79111799s ago: executing program 40 (id=2551):
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)={0x28b5, 0x81})
r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000000080)={r1, 0xffff, 0x4}, 0xffff0000, 0x3ff)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="d2892df93914cb1efdef2c3bf9f6311200"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800)

1m9.284956557s ago: executing program 0 (id=2587):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
pread64$auto(0xffffffffffffffff, 0x0, 0x300000002, 0x100000001)
socket(0x10, 0x2, 0x1)
sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="b553e8f400000000", @ANYRES16=0x0, @ANYBLOB="0001a5000000fbdbdf2510000000050007000600000008001c00", @ANYRES32=0x0, @ANYBLOB='\b\x00\r\x00\a\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x2400008d}, 0x24004040)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x29, 0x5, 0x0)
write$auto(r1, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)

1m7.96081749s ago: executing program 0 (id=2590):
mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
read$auto(0x3, 0x0, 0x0)
getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0)
setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8)
ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0)
madvise$auto(0x0, 0x8000000000000001, 0x15)
r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000040)=""/4080, 0x1036)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r3 = socket(0x29, 0x2, 0x0)
process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000001100)={&(0x7f0000001080)="7f9a9ab787472abba2b2358ca47c48ec9aebf22ee221c7e7efed199f6c6ef47fef3dd39494a8beed313cb385553627cefeff7042e820eb45d52de332ff278629e09a82a6f87221c4", 0x4cec}, 0x8, 0x15, 0x6)
setsockopt$auto(r3, 0x119, 0xfffffffe, 0x0, 0x8)

53.685347237s ago: executing program 8 (id=2625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0)
sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x66}]}]}, 0x24}}, 0x4002)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x8, 0x7, 0x101, 0x25, 0x68, <r3=>0x0})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw, 0x4, 0x1, 0xe945, "3112d585005a614d19e22af9ffe3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d00", @inferred=r3}, 0x3, 0x5, 0x3, @inferred, @enumerated={0x0, 0x800, "c8320fbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50090000000000000092e8fcdcec86d900", 0x400, 0x8}, "7a9fc199a16a2311eecf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"})

52.922145663s ago: executing program 41 (id=2590):
mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
read$auto(0x3, 0x0, 0x0)
getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0)
setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8)
ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0)
madvise$auto(0x0, 0x8000000000000001, 0x15)
r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r1, &(0x7f0000000040)=""/4080, 0x1036)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r3 = socket(0x29, 0x2, 0x0)
process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000001100)={&(0x7f0000001080)="7f9a9ab787472abba2b2358ca47c48ec9aebf22ee221c7e7efed199f6c6ef47fef3dd39494a8beed313cb385553627cefeff7042e820eb45d52de332ff278629e09a82a6f87221c4", 0x4cec}, 0x8, 0x15, 0x6)
setsockopt$auto(r3, 0x119, 0xfffffffe, 0x0, 0x8)

52.550249851s ago: executing program 8 (id=2629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80802, 0x0)
ioctl$auto_FIOASYNC(r2, 0x5452, 0x6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10)
r4 = socket(0x10, 0x2, 0x4)
close_range$auto(r4, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x7, 0x28000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r5 = getpid()
process_vm_readv$auto(r5, &(0x7f00000000c0)={0x0, 0xfff}, 0x8, &(0x7f0000000280)={0x0, 0xffffffff}, 0x5, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000080))
write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef)

52.184511862s ago: executing program 8 (id=2630):
r0 = socket(0x10, 0x2, 0x4)
close_range$auto(r0, 0x8, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef)

52.011654921s ago: executing program 8 (id=2631):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x8, 0x6, 0x2, 0x40eb0, 0xffffffffffffffff, 0x308000000000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c5803, 0x0)
getrandom$auto(0x0, 0xa, 0x3)
io_uring_setup$auto(0x59, 0x0)
r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000100)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1824ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0x38)
mprotect$auto(0x110c238000, 0x1, 0x3)
unshare$auto(0x40000080)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/irq/3/smp_affinity\x00', 0x101402, 0x0)
write$auto(r2, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x200000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x110c230000, 0x2, 0x0)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x6)
fcntl$getown(r0, 0x9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptywf\x00', 0x20080, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r3, r3, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r3, 0x1)
rmdir$auto(&(0x7f0000000300)='./cgroup\x00')
ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0)
open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22240, 0x8e)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x109043, 0x0)

50.515486622s ago: executing program 8 (id=2636):
mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) (async)
unshare$auto(0x40000080) (async)
setfsuid$auto(0x0) (async, rerun: 32)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) (async, rerun: 32)
ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x7, 0x46, 0x10}) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async)
r2 = socket(0x2, 0x801, 0x106)
sendmsg$auto_NL80211_CMD_REMOVE_LINK(r2, 0x0, 0x200408c0)
getsockopt$auto(r2, 0x11c, 0x3, 0x0, 0x0) (async)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001080), 0x2b2d40, 0x0)
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f00000001c0)='}[,&*}\x00', 0x2d4102, 0x8e) (async)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) (async)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
write$auto(r3, 0x0, 0x4100000a3d7) (async, rerun: 32)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x6, 0x100000ffff, 0xdf, 0x10, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
madvise$auto(0x2, 0x1bb7, 0x19)

49.581470077s ago: executing program 8 (id=2640):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cgroup\x00', 0x0, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r1, 0x40000000113, 0x9, 0xfffffffffffffffc, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f00000000c0))
mmap$auto(0x80000000000000, 0x1, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80802, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r3 = socket(0xa, 0x3, 0x3b)
connect$auto(r2, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c)
syz_genetlink_get_family_id$auto_batadv(0x0, r3)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0xff, 0x0, 0x1, 0x3, 0x80000001, 0xfffffffffffffe01, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x100000000400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xff]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8044}, 0x44004)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x8, 0xcde}, 0x800}, 0x7, 0x4008)

41.396891416s ago: executing program 1 (id=2664):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto_SO_MAX_PACING_RATE(r0, 0x1, 0x2f, &(0x7f0000000000)=':-\x00', 0x5)
madvise$auto(0x110c230000, 0x1fffffe, 0x9)
r1 = socket(0x10, 0x2, 0x4)
close_range$auto(r1, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0)
fsmount$auto(0x4, 0x0, 0xa7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0)
write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef)

41.149614836s ago: executing program 1 (id=2666):
socket(0x2, 0x3, 0xa)
unshare$auto(0x4)
r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="d54770602b99e575984510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
read$auto_safesetid_gid_file_fops_securityfs(r0, &(0x7f0000000340)=""/145, 0x91)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0)
ioctl$auto(r2, 0x541d, r2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000)
write$auto(0x0, 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x400101, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17)
llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7)
ioprio_set$auto(0x3, 0xffffffffffffffff, 0x72e2f0a)
writev$auto(r4, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
poll$auto(&(0x7f0000000180)={<r6=>r5, 0xfff7, 0x9816}, 0x7f, 0x9)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0)

40.219439219s ago: executing program 1 (id=2670):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r0, 0x6, 0x1, &(0x7f0000000000)=',#+!\\\x00', 0x9)
mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff)
msgctl$auto_MSG_STAT(0x6, 0xb, &(0x7f00000001c0)={{0x7ff, <r2=>0xee00, 0x0, 0x8, 0x8, 0x6, 0x127}, &(0x7f0000000140)=0xff, &(0x7f0000000180)=0x9, 0x518, 0x7, 0x0, 0x100, 0x9, 0xfffe, 0x8, 0xc58a, @raw=0xf2e3})
sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0c000000070000000000000008000d00070000dd040014002700000086d38b5d5e2818622870cda1a59501a46dcdb71c11118ea27781af4780d485635138b406ba6fd6a0636569dd07ac1633eb8ebe0dee8018faa03611b8e836bcfdaca8d68f3a522d5255565506a28f812c306163fc1b2219c493271b22871570502015d03b7ec383694006741751c92ee1aa3ad5041c0556b1e39df18b2b99924a988ecb7842a429"], 0x84}, 0x1, 0x0, 0x0, 0x400c801}, 0x8014)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x200000001000, 0xfffffffffffffffd, 0x37, 0x4, 0x110c230000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x101, 0x0)
io_uring_setup$auto(0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

40.064406062s ago: executing program 1 (id=2671):
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13fd2bbd14c7323c91bb1844000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
close_range$auto(r1, r1, 0x2002)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x102400, 0x0)
userfaultfd$auto(0x1)
socket(0x2, 0x1, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x241, 0x0)
select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x40001fd, 0x9, 0x7, 0x9, 0x949b, 0x2, 0x95f4da0a, 0x7f3, 0x79, 0x8000000000000001, 0x2a61, 0x7, 0x8, 0x1209, 0xe09, 0x4]}, 0x0)
socket(0x23, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x7, 0x0, 0x0, 0xfffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
io_setup$auto(0x7ffe, 0x0)
fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
epoll_create$auto(0x70c)

39.323035849s ago: executing program 1 (id=2674):
socket(0x10, 0x2, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/video7/dev_debug\x00', 0x400, 0x0)
write$auto(r0, &(0x7f0000000100)='%\x00', 0x38f)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25020001000800030080004000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x3ffffe, 0x40eb1, 0x602, 0x300000000000)
socket(0x10, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0)
r2 = socket(0x28, 0x5, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
select$auto(0x200, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xffd, 0x3, 0x0, 0x948b, 0x9, 0x4, 0x6, 0x2000002, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
syz_clone(0x52000080, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000d40)="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")
mmap$auto(0x0, 0x2020009, 0x1, 0x1a, r2, 0x6)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), 0xffffffffffffffff)

38.640731489s ago: executing program 1 (id=2676):
mmap$auto(0xbb, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1)
sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0xf0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r2, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xfffffefe, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x3fffffffffffe000, 0x0, 0x4040011}, 0x40010)
r3 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f00000002c0)=0x100000001)
sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x620, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1fa7}, @IPVS_CMD_ATTR_DEST={0x603, 0x2, 0x0, 0x1, [@nested={0x114, 0x4, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x2}, @typed={0x4, 0xea}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x5}, @typed={0xfa, 0xed, 0x0, 0x0, @binary="6f04c104e3ecaaace8569200bad8d290345d9a0497820e528f66e354691eada21ef4e9eda3c93cd56efb7a3b4c3d22ff19fe373713e81f87e3513e12d5828e3dd44a4b51743774b62a98c64f6e80994f48b8d3815316d8cf8b67b4f930f44b76b745d39cd7555031e4b2dcb5d0e08c3ffc8a3fcad6e9be008344e263eb061ab8093ee3c05b3418bb953943dc57e75bd6afeb8bf49d99feb0b5320a14306aabdf389f24b78fb9f76d32c0241016a7b0a26ba5a6809fda8d45d930045413e167f416f344deb3658803683d0302118939e23fd579f3628560ba80acc9d155432b0f4170f7740a79fa48db422d3ffda89c759ffd70b7df26"}]}, @generic="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", @nested={0x1d5, 0xce, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x60}, @typed={0xce, 0x1a, 0x0, 0x0, @binary="58421b2149dc683f5bf828edbe078b31e12a4cb5ae7cbfb2c55483d53fbfa925db9cdd87be922553d28e6d3b48b06de85d7b8b7cac34c4cf8684d9cb3a8feb33375b933531186bea1b01e673ddb844ee517abe9bbb1ff4fcf4789b8d121adf69741f5c4f5f53a334667b027fc961c52da8df661cc02cd2118ae49bdf6ab2ad4899367966312d0a0f521e40bef090cb2e4c28dee7d8db7640cdef7d738216ff181934cdee6215b15358936f9d4c27d2d2db4289afd45252df88fa288eab94b9b9948b87e0899e8021950e"}, @generic="20172e9e1901bb4a2b818a3788778894bcf1f25ec16a2ea251fc44a8578dd0dab03f6c57d3df78614e2bd28ee1b0d08e2fb504cd441b2324502071d56b644df63253c51b7af6cc5645e230e8c258bcf207835b2b56131fb405f4136230a9719792af48b4da73d2c004c4dae725545c1041c6c79196c345cda7e41bbcd306be7733d6e71b396e86a7663f9173c656d11ce91da193d70d6bacba6e3f7c51f1cafff68be4094158c41f206372f0518c5239595acbf6793a71e503adbb2a28dc4db6a162623485141468ab375b5a07d5bbc1bb5b5953479d50a0130ec22552af647f431664a291171f2457a5692613", @typed={0x8, 0x128, 0x0, 0x0, @u32=0xfffffff9}]}, @generic="d15a4a95f718a10d2e27a4560e5239592542b86dfc16ec3e4ac4422743528bf664761c65e8f86dc7eb2fbf6b5714b72544f986ec3ec4e61063218f817b21e32bd88c67608ea5cdfbb1ad639e5b311e11b9b65509a353d03ee5c4e3139e49ce36e7dc7ade2b4a368a29e9df89f1534f30a8d391406194f5f7b790ea424f5da70dfd79b3faab32bff1e8cfd3960c3b3408e0d5da855b21c191c50766fb893f02ae7cb12b5e53a8070e163b1709177ae883a188", @generic="4104601cd8a1ffec8442e27ec1fa9d180312851205983d82cd6aef33775c9c2b1fad07baa01718646f5600f169fb53eb9cb95bd87463187bc454341f46259035830df33856bc8f264e9cac0cedf6a0a99f4e54fe6c7ba6368133932759fbe9e7d6d8abd34b22312d39aacdc4176d1b2d6d9433c78acc78f070699e1345dc81df80685461a538af9e3d6958f924235e0814c675af18239f03c4b639725bfa461f5cff7baca636551d34aa97f8d16f40e6a12d9d0b038e3b56ba6b1713501bd5d65338f591b51ac1b33e08fdac67865694e56934b660b5c6df2de465a0", @generic="89186d07a255b8301298b7e13ca5a5600a35ecfb20b13b9e571d7434c7e89c465f391ce4c75a296884d616a4a29685874477cf177bfc42151f48d4a23622f660181b83dce7d732401ce9e92a1c0689e780c7fe18b968e8b04fded5872efb784e712b5baaeca3a3b04059ac2d0f9686f280b3f79009386ed6c4f33cffc1be404f34183d9a7bd0"]}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010)
socket(0x29, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xd05, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0xbc8, 0x49, 0x0, 0x1, [@typed={0x6, 0xe8, 0x0, 0x0, @str='\xff\xff'}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xba8, 0x33, 0x0, 0x1, [@nested={0xe5, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x51, 0x6e, 0x0, 0x1, [@generic="97c1adf8155e9688b4ca6ac9e137e5376f78505fe3b6a3d8ce0a3d7d9a29b3ac74273ac069a86cf427d67539ee0f1256eb7474a5f75c34c62e6d420b9c4324a452c456709150609e4d8fb6feb5"]}, @nested={0x4, 0x85}, @generic="c3b86e9f07b4587d50822f680957d52b180fb7811d339272b6c252371124a40b40e80b9888e86f8c76e43eed1ca8810ff9f142188a9f0dc0fb73d59caeaa99a117825e73afa8d57c0dba2f1c9961e96a8b87d0a2bf4e06c01e6a8f5cfeb15757560914ff2ef35b6401c29c544a8f04c4a1502aa69a"]}, @nested={0xab9, 0x29, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x80053d}, @generic="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"]}]}]}]}]}, 0xd1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r4)
msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2})
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
r5 = clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r5, 0x80)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x8, 0x1, 0x200001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)
read$auto(r6, 0x0, 0x7)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x200400, 0x0)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000003c80)='/proc/self/ns/cgroup\x00', 0x88500, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000000180)={0xa3, 0x0, 0xf610, 0x6, 0x7b, 0x0, r4, [0x7, 0x7, 0x3ff], {0x10000, 0x8001, 0x1, 0x6, 0x0, 0xffffffff, 0x9, 0x3, 0x7fffffff}, {0x1000, 0x8, 0x7, 0xff, 0xfffffff7, 0xffff, 0x0, 0x2, 0x800}})

36.333409664s ago: executing program 2 (id=2688):
r0 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
read$auto_rfcomm_sock_debugfs_fops_(r0, &(0x7f00000000c0)=""/118, 0x76)

36.189944724s ago: executing program 2 (id=2689):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x1000, 0x400008, 0xdb, 0x9b72, 0x2, 0x0)
socket(0x28, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000040), 0x12000, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
write$auto(r0, &(0x7f0000000080)='/dev/audio\x00', 0x80000000)
ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000005c0)="2f34b2626eecd5d362d4f4ce77bca69ad3688b505465bfaf70eab515d26037f246bc757eb69b598f9e3b8ce5561ea5dd5ecb155f037b8bdf05587605acb72a4d69bc65e839af8687af6579daff7aa45e71ad3552d1108e48179c611c01074603283470c0cf725831b934ed9034a04c1c9d15cf99b59a51d609b7e294d6834d2437d866705a6aa63a3b289971a673a9d6c0b315b6dee8df7f7d22d0d4bab624af8a897b7bd03a66e6")
ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f0000000500)="abea1d71a22c2fb47a06ba2bf74770129de95f60df18198cbb6b7c63d1dc26560bf6d396320c7c001b03e8532e8cc9fded75360724716eab7bb45d899f44452bf543d452757a01dc0526e09ad69a34b6ea5b450e0a502f5c8d7fd9ab35c18a010984f5c84b24c94090f029f95ed37dbf4c1036ad0d41847ace2f390aea14004cebc87293069ac84bec173366d2f85305b4b5347443eb925aaa34d0726444e36d0231d2f287ad90b7c6851144")
listen$auto(r0, 0x6)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000)
r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/ports/2/pp_hold\x00', 0x200000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r1, 0x8000)

35.953165769s ago: executing program 2 (id=2690):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r0, 0x6, 0x1, &(0x7f0000000000)=',#+!\\\x00', 0x9)
mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff)
msgctl$auto_MSG_STAT(0x6, 0xb, &(0x7f00000001c0)={{0x7ff, <r2=>0xee00, 0x0, 0x8, 0x8, 0x6, 0x127}, &(0x7f0000000140)=0xff, &(0x7f0000000180)=0x9, 0x518, 0x7, 0x0, 0x100, 0x9, 0xfffe, 0x8, 0xc58a, @raw=0xf2e3})
sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c000000070000000000000008000d00070000dd040014002700000086d38b5d5e2818622870cda1a59501a46dcdb71c11118ea27781af4780d485635138b406ba6fd6a0636569dd07ac1633eb8ebe0dee8018faa03611b8e836bcfdaca8d68f3a522d5255565506a28f812c306163fc1b2219c493271b22871570502015d03b7ec383694006741751c92ee1aa3ad5041c0556b1e39df18b2b99924a988ecb7842a429"], 0x84}, 0x1, 0x0, 0x0, 0x400c801}, 0x8014)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x200000001000, 0xfffffffffffffffd, 0x37, 0x4, 0x110c230000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
io_uring_setup$auto(0x101, 0x0)
io_uring_setup$auto(0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x2, 0x2, 0x1)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

35.848075012s ago: executing program 2 (id=2691):
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21e50cbd70c031cd0ce4"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r0 = socket(0x10, 0x2, 0x4)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)

35.778475114s ago: executing program 2 (id=2692):
r0 = socket(0x1d, 0x3, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x400840, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.7/udc/dummy_udc.7/soft_connect\x00', 0x2062, 0x0)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3)
sysfs$auto(0x2, 0x100000000000027, 0x0)
r3 = fsopen$auto(0x0, 0x1)
socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f00000005c0)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xdfffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x80, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x80000000000000f, 0xe34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000400", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0)
sendfile$auto(r5, r4, 0x0, 0x40002000000a)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r3)
fchmod$auto(r3, 0x8)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')

34.407852351s ago: executing program 42 (id=2640):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cgroup\x00', 0x0, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r1, 0x40000000113, 0x9, 0xfffffffffffffffc, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f00000000c0))
mmap$auto(0x80000000000000, 0x1, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80802, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r3 = socket(0xa, 0x3, 0x3b)
connect$auto(r2, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c)
syz_genetlink_get_family_id$auto_batadv(0x0, r3)
statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0xff, 0x0, 0x1, 0x3, 0x80000001, 0xfffffffffffffe01, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x100000000400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xff]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8044}, 0x44004)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x8, 0xcde}, 0x800}, 0x7, 0x4008)

34.277792288s ago: executing program 2 (id=2697):
read$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/118, 0x76)

23.339200935s ago: executing program 43 (id=2676):
mmap$auto(0xbb, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1)
sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0xf0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r2, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xfffffefe, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x3fffffffffffe000, 0x0, 0x4040011}, 0x40010)
r3 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f00000002c0)=0x100000001)
sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)={0x620, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1fa7}, @IPVS_CMD_ATTR_DEST={0x603, 0x2, 0x0, 0x1, [@nested={0x114, 0x4, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x2}, @typed={0x4, 0xea}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x5}, @typed={0xfa, 0xed, 0x0, 0x0, @binary="6f04c104e3ecaaace8569200bad8d290345d9a0497820e528f66e354691eada21ef4e9eda3c93cd56efb7a3b4c3d22ff19fe373713e81f87e3513e12d5828e3dd44a4b51743774b62a98c64f6e80994f48b8d3815316d8cf8b67b4f930f44b76b745d39cd7555031e4b2dcb5d0e08c3ffc8a3fcad6e9be008344e263eb061ab8093ee3c05b3418bb953943dc57e75bd6afeb8bf49d99feb0b5320a14306aabdf389f24b78fb9f76d32c0241016a7b0a26ba5a6809fda8d45d930045413e167f416f344deb3658803683d0302118939e23fd579f3628560ba80acc9d155432b0f4170f7740a79fa48db422d3ffda89c759ffd70b7df26"}]}, @generic="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", @nested={0x1d5, 0xce, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x60}, @typed={0xce, 0x1a, 0x0, 0x0, @binary="58421b2149dc683f5bf828edbe078b31e12a4cb5ae7cbfb2c55483d53fbfa925db9cdd87be922553d28e6d3b48b06de85d7b8b7cac34c4cf8684d9cb3a8feb33375b933531186bea1b01e673ddb844ee517abe9bbb1ff4fcf4789b8d121adf69741f5c4f5f53a334667b027fc961c52da8df661cc02cd2118ae49bdf6ab2ad4899367966312d0a0f521e40bef090cb2e4c28dee7d8db7640cdef7d738216ff181934cdee6215b15358936f9d4c27d2d2db4289afd45252df88fa288eab94b9b9948b87e0899e8021950e"}, @generic="20172e9e1901bb4a2b818a3788778894bcf1f25ec16a2ea251fc44a8578dd0dab03f6c57d3df78614e2bd28ee1b0d08e2fb504cd441b2324502071d56b644df63253c51b7af6cc5645e230e8c258bcf207835b2b56131fb405f4136230a9719792af48b4da73d2c004c4dae725545c1041c6c79196c345cda7e41bbcd306be7733d6e71b396e86a7663f9173c656d11ce91da193d70d6bacba6e3f7c51f1cafff68be4094158c41f206372f0518c5239595acbf6793a71e503adbb2a28dc4db6a162623485141468ab375b5a07d5bbc1bb5b5953479d50a0130ec22552af647f431664a291171f2457a5692613", @typed={0x8, 0x128, 0x0, 0x0, @u32=0xfffffff9}]}, @generic="d15a4a95f718a10d2e27a4560e5239592542b86dfc16ec3e4ac4422743528bf664761c65e8f86dc7eb2fbf6b5714b72544f986ec3ec4e61063218f817b21e32bd88c67608ea5cdfbb1ad639e5b311e11b9b65509a353d03ee5c4e3139e49ce36e7dc7ade2b4a368a29e9df89f1534f30a8d391406194f5f7b790ea424f5da70dfd79b3faab32bff1e8cfd3960c3b3408e0d5da855b21c191c50766fb893f02ae7cb12b5e53a8070e163b1709177ae883a188", @generic="4104601cd8a1ffec8442e27ec1fa9d180312851205983d82cd6aef33775c9c2b1fad07baa01718646f5600f169fb53eb9cb95bd87463187bc454341f46259035830df33856bc8f264e9cac0cedf6a0a99f4e54fe6c7ba6368133932759fbe9e7d6d8abd34b22312d39aacdc4176d1b2d6d9433c78acc78f070699e1345dc81df80685461a538af9e3d6958f924235e0814c675af18239f03c4b639725bfa461f5cff7baca636551d34aa97f8d16f40e6a12d9d0b038e3b56ba6b1713501bd5d65338f591b51ac1b33e08fdac67865694e56934b660b5c6df2de465a0", @generic="89186d07a255b8301298b7e13ca5a5600a35ecfb20b13b9e571d7434c7e89c465f391ce4c75a296884d616a4a29685874477cf177bfc42151f48d4a23622f660181b83dce7d732401ce9e92a1c0689e780c7fe18b968e8b04fded5872efb784e712b5baaeca3a3b04059ac2d0f9686f280b3f79009386ed6c4f33cffc1be404f34183d9a7bd0"]}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010)
socket(0x29, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xd05, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0xbc8, 0x49, 0x0, 0x1, [@typed={0x6, 0xe8, 0x0, 0x0, @str='\xff\xff'}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xba8, 0x33, 0x0, 0x1, [@nested={0xe5, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x51, 0x6e, 0x0, 0x1, [@generic="97c1adf8155e9688b4ca6ac9e137e5376f78505fe3b6a3d8ce0a3d7d9a29b3ac74273ac069a86cf427d67539ee0f1256eb7474a5f75c34c62e6d420b9c4324a452c456709150609e4d8fb6feb5"]}, @nested={0x4, 0x85}, @generic="c3b86e9f07b4587d50822f680957d52b180fb7811d339272b6c252371124a40b40e80b9888e86f8c76e43eed1ca8810ff9f142188a9f0dc0fb73d59caeaa99a117825e73afa8d57c0dba2f1c9961e96a8b87d0a2bf4e06c01e6a8f5cfeb15757560914ff2ef35b6401c29c544a8f04c4a1502aa69a"]}, @nested={0xab9, 0x29, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x80053d}, @generic="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"]}]}]}]}]}, 0xd1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r4)
msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2})
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
r5 = clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9)
ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r5, 0x80)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x8, 0x1, 0x200001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)
read$auto(r6, 0x0, 0x7)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x200400, 0x0)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000003c80)='/proc/self/ns/cgroup\x00', 0x88500, 0x0)
io_uring_setup$auto(0x6, &(0x7f0000000180)={0xa3, 0x0, 0xf610, 0x6, 0x7b, 0x0, r4, [0x7, 0x7, 0x3ff], {0x10000, 0x8001, 0x1, 0x6, 0x0, 0xffffffff, 0x9, 0x3, 0x7fffffff}, {0x1000, 0x8, 0x7, 0xff, 0xfffffff7, 0xffff, 0x0, 0x2, 0x800}})

19.166681717s ago: executing program 44 (id=2697):
read$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/118, 0x76)

9.574056082s ago: executing program 3 (id=2766):
mmap$auto(0x2, 0x10000000000001ff, 0x2, 0x14, 0xffffffffffffffff, 0x100018000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop6\x00', 0x800000, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/sit0/accept_dad\x00', 0x2, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r3 = prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x8)
write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x6)
set_mempolicy$auto(0x2, 0x0, 0x4)
mmap$auto(0x0, 0xd561, 0x9, 0x13, 0xffffffffffffffff, 0x8000)
timer_create$auto(0x2, 0x0, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4000026b, 0x4}, {0x0, 0x81}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0x416d80, 0x0)
socket(0xf, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
setsockopt$auto(r4, 0x10000000084, 0x4, 0x0, 0x8)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000440)=""/4063, 0x9e)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
open(0x0, 0x22240, 0x154)
r6 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$auto_FIONREAD(r6, 0x541b, 0x8)
socket(0xa, 0x801, 0x2)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000)

8.471190499s ago: executing program 4 (id=2767):
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3180, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000012c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0xc, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0)
ioctl$auto(0x3, 0x6f51, 0xffffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0xa9202, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
write$auto(r0, 0x0, 0xfffffdf1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
open$dir(0x0, 0x10000, 0x6)
prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
msgget$auto(0xc, 0x77d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1)
sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c)
ioctl$auto(0x3, 0x541b, 0x38)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)

8.142129121s ago: executing program 4 (id=2768):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x8000400)
socket(0x2b, 0x1, 0x0)
r0 = socket(0x10, 0x2, 0xf)
bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210)
statx$auto(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x1000, 0x10000, &(0x7f00000002c0)={0x7, 0x4, 0x42, 0xe, 0xffffffffffffffff, 0x0, 0x1000, 0x1816, 0x1, 0x9, 0xfa8e, 0xfd1, {0x7, 0x9}, {0x4, 0x8001}, {0x8, 0x9}, {0xffffffffffffffff, 0x9}, 0x3, 0x8, 0x7fff, 0x9, 0x2, 0x7, 0x6, 0x68362bdf, 0x2, 0x5, 0x6, 0x3, [0xd33, 0x0, 0x9, 0x400, 0x4, 0x4000000000000008, 0xb0, 0x849, 0x7ff]})
socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0)
setsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0x2, 0x26, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x9)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
adjtimex$auto(0x0)
ioctl$auto(0x3, 0x540d, r2)
write$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa9202, 0x0)
io_uring_setup$auto(0x2, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

7.230102797s ago: executing program 3 (id=2769):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x400403, 0x0)
ioctl$auto_TIOCGETD2(r0, 0x5424, &(0x7f0000000040))
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3)
fcntl$auto(0xff80000000000000, 0x409, 0x13)
mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x12, 0x8000000000000000, 0x8000)

7.059186179s ago: executing program 3 (id=2770):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2c, 0x800, 0xffffff45)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = socket(0xa, 0x2, 0x0)
r2 = set_tid_address$auto(0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000002c0)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x240400c0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21e50cbd70c031cd0ce411"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r4 = socket(0x10, 0x2, 0x4)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
setsockopt$auto_SO_RESERVE_MEM(r1, 0x7, 0x49, &(0x7f0000000240)=']\x00', 0x80000001)
waitid$auto_P_PID(0x1, r2, 0x0, 0x7, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70)
write$auto(0x3, 0x0, 0x1)
setsockopt$auto(r1, 0x83, 0x4, &(0x7f0000000280)='\x00', 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
setresuid$auto(0x0, 0x0, 0xee01)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
r5 = fanotify_init$auto(0x5, 0x0)
fanotify_mark$auto(r5, 0x205, 0xa, 0x4, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
statx$auto(r5, &(0x7f00000000c0)='./file0\x00', 0x39, 0x9, &(0x7f0000000140)={0x7, 0x1, 0x7, 0x3, 0xee00, 0x0, 0xf, 0x1, 0x5, 0x7fff, 0x8, 0x4, {0x9, 0x400}, {0x2, 0x7}, {0x95, 0x2}, {0x80, 0x3}, 0x5, 0x0, 0x200, 0xf, 0x5, 0x8, 0x3, 0x7, 0x37, 0xb612bc4, 0x7fff, 0x3f5, [0x93f, 0xfffffffffffffffb, 0x9, 0x9, 0x81, 0x3, 0x5, 0xf, 0x1]})
r6 = geteuid()
keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x7, 0x0, r6, 0xee00, 0xffffffffffffffff)
r7 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0)
read$auto_bdi_debug_stats_fops_(r7, &(0x7f0000000040)=""/69, 0x45)

6.485189436s ago: executing program 3 (id=2771):
io_submit$auto(0x8000000000000001, 0x8, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) (async)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) (async)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x560a, r1) (async)
r2 = pidfd_open$auto(0x1, 0x0)
readahead$auto(r2, 0x418642b8, 0x5) (async, rerun: 32)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x4000000) (rerun: 32)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32)
connect$auto(0x3, 0x0, 0x54) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x101, 0x103) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
unshare$auto(0x40000080) (async)
r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x7, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0)

5.973685616s ago: executing program 5 (id=2772):
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="21e50cbd70c031cd0ce411"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r0 = socket(0x10, 0x2, 0x4)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)

5.818451629s ago: executing program 5 (id=2773):
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x3)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x101880, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d03, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
syz_clone3(&(0x7f0000000100)={0x103908000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r1, 0x1b00, 0x1)
unshare$auto(0x8000000)
shmget$auto(0x7, 0x8000000000000002, 0x76f1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r0, r1, 0x0)
mmap$auto(0x7ffffffd, 0x3, 0x4000000000df, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffc, 0x14)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000)
unshare$auto(0x40000080)
io_uring_setup$auto(0x7, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0)

4.736014507s ago: executing program 4 (id=2774):
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
write$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000)
r1 = getsid$auto(0x0)
getpid()
sched_rr_get_interval$auto(r1, &(0x7f0000000080)={0x7ce9, 0xa49})
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x3}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x1e}, @VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x9}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x3f3}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x1}, @VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0xf}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x2f, 0x1, '/sys/module/block2mtd/parameters/block2mtd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3)
sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000003d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
close_range$auto(0x2, 0x8, 0x0)

4.381551477s ago: executing program 3 (id=2775):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11)
timer_create$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0)
mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0x2000000df, 0x40000009b72, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/dri/vgem/clients\x00', 0x0, 0x0)
semctl$auto(0x1000, 0x10, 0x3, 0x5)
ioctl$auto(r1, 0x40246f4c, r2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99`\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x97.\x03\x11\xc1\xbaS\x1c\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1t\xee\xc9:\xcfE\x87Z&i\xd4\x00\x00\x00\x00\x00', 0xedef, 0x3)
r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000080)="299da7fc53b0355396455d3de80e9eaf352e8e4cea83ad1148fbc8c85bba4d72859fb4f8bcf18c5fb33820b56a08bc519518dd322ebd622e74dd2fa242c71acf7042b2db2b202d1141f922902544efd49c99a8eecee75c458b11f66403c6563933de7dec66131d841359", 0x7111}, 0x8)
memfd_create$auto(0x0, 0x7)
setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

4.325446518s ago: executing program 4 (id=2776):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000000140)=0x1, 0x0, 0x2)
r0 = epoll_create$auto(0x1)
r1 = socket(0x11, 0x2, 0xf)
r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd)
capset$auto(0x0, 0x0)
epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
read$auto(r3, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x10000, 0x0)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100085)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
statmount$auto(0x0, &(0x7f0000000380)={0x3, 0x1, 0x9, 0x7352, 0x10000, 0x65f, 0x4, 0x7, 0xf0, 0x1, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x200, 0x4, 0x3, 0x84, 0x4, 0x0, 0x7, 0x22000, 0x203, 0x0, 0xf, 0x2, 0x0, 0x1, 0x0, 0xfffffff9, [0x7, 0xfffffffffffffffe, 0x801, 0xfffffffffffffffe, 0x3, 0x7, 0x0, 0x1c00000000, 0xfffffffffffffffe, 0x4, 0x0, 0x7ffffffffffff, 0x800, 0x100000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0x7, 0x920, 0xfffffffffffffffe, 0x108001, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x800000000000000, 0x8]}, 0xffffffffffffffff, 0xf)
ioctl$auto_XFS_IOC_ERROR_CLEARALL(r2, 0x40085875, &(0x7f0000000180)={r4, 0x3c59})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto_P_ALL(0x0, 0x7, 0x0, 0x5, 0x0)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000)
fdatasync$auto(r5)
madvise$auto(0x0, 0x400053, 0x9)
futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
unshare$auto(0x40000080)

3.887607658s ago: executing program 5 (id=2777):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
wait4$auto(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)={{0xfffffffffffffffc, 0x1000}, {0x2, 0x96}, 0x20000000002, 0xffffffffffff5cd8, 0x504, 0x4, 0xc301, 0x8000000000000000, 0x7, 0x10000, 0x6, 0x4, 0x0, 0x2, 0x3, 0x3})
socket(0x10, 0x2, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r0, 0x5646, r0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x24880, 0x0)
read$auto(0x3, 0x0, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0)
lseek$auto(0x3, 0x0, 0x2)
madvise$auto(0x0, 0x2003f2, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008)
r1 = socket(0x29, 0x2, 0x0)
r2 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10010, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x0, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4)
mprotect$auto(0x200000000000, 0x806121, 0x4)
bpf$auto(0x18, 0x0, 0x92)
setfsuid$auto(0xee01)
ioctl$auto(r1, 0x89f2, 0x24)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)

2.137530869s ago: executing program 7 (id=2739):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
read$auto(0xffffffffffffffff, 0x0, 0x20) (async)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0) (async)
r1 = socket(0x2, 0x3, 0x100) (async)
capget$auto(&(0x7f00000000c0)={0x4, <r2=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4}) (async)
r3 = getuid()
waitid$auto_P_PID(0x1, r2, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r3, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0) (async)
syz_genetlink_get_family_id$auto_thermal(0x0, r1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
copy_file_range$auto(r4, &(0x7f0000000040)=0xd52, r4, 0x0, 0xb1, 0x0) (async)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r1, 0x0, 0x4048005) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) (async)
capset$auto(&(0x7f00000001c0)={0x5, r2}, &(0x7f00000003c0)={0x9, 0x4, 0x35}) (async)
shmctl$auto_IPC_SET(0x1, 0x1, 0x0) (async)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000) (async)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) (async)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x2) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0xc3, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x80002, 0x0) (async)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.628205953s ago: executing program 5 (id=2778):
mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/oom_adj\x00', 0x1110c0, 0x0)
read$auto(r0, 0x0, 0x4)
unshare$auto(0x6c000000)
socket(0x5, 0x80000, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x14, 0x401, 0x8000)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"})
poll$auto(&(0x7f0000000340)={0x3, 0x9, 0x4}, 0xfffffffe, 0x80000000)
io_uring_setup$auto(0x406, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYBLOB="f204c45fb55ca4af8678388adeecf95da51f669269b78af204ca6fd5a0bdec3b9b1739f8bc55c486c2810dd613c28dc0264549c20fdd165f9af44f135e3856e26f61f5d8cd4e", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="72010000dc2f14ad9bc687968840df98aa6c8ce43371a6b2a4dcde703a0c4865bc820a2d5acfc5632e99a955f5bc835af1b69df1c09ee33234bed7277f69b9b7c5e84187b6455e9bd244cd3042339683dc55720d89ab5b9e3621cee657d1f495412b7f0fd5b55c93231bb6ffffffff000000009e75c44fbad2ddfa24be4e422e210b0b", @ANYBLOB="11"], 0x1ac}}, 0x4048804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x8}, 0x1, 0x0, 0x400, 0x9}, 0x4}, 0x3, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xa, 0x8, 0x9}, 0x1000000000b, 0x0)
landlock_restrict_self$auto(r2, 0x0)
r3 = socket(0xa, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
io_uring_setup$auto(0x6, 0x0)
setfsuid$auto(0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aa7c)
fcntl$auto(r4, 0x400, 0x1)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x10802, 0x0)

1.263944436s ago: executing program 3 (id=2779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9cca2e1196e5d16434355712", @ANYRES16=r1, @ANYBLOB="00012cbd7000fcdbdf251100000008002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
mmap$auto(0xffffffffffffffda, 0x3000000000000, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
madvise$auto(0x1000, 0x400050, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)

1.133622237s ago: executing program 7 (id=2780):
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="21e50cbd70c031cd0ce411"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r0 = socket(0x10, 0x2, 0x4)
write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb)

933.057691ms ago: executing program 7 (id=2781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0)
sendfile$auto(r0, r1, 0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pipe2$auto(0x0, 0x80)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x1}, 0x54)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x7}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x0)
r5 = socket(0x11, 0x80003, 0x8)
setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/loop15/hctx0/sched_tags\x00', 0x169100, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r3)

801.875417ms ago: executing program 4 (id=2782):
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0xb9, 0x44f, 0xa, 0xffffffff, 0x1007181, 0x8a0d, 0x5, 0xb9, 0x247, 0xd081, 0x29, 0x4, 0x1ffffffffffe, 0x1, 0xfffffffffffffff5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x8401, 0x22402, 0x9, 0x0, 0x84, 0x0, 0x0, 0x710, 0x0, 0x1ff, [0x70e2, 0x9, 0x3, 0xb7, 0x0, 0x0, 0xc, 0x1ff, 0xb, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x5, 0x10000000000002, 0x100000000000000, 0x4, 0x146, 0x8000, 0x3a, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6312, 0x0, 0x400000000, 0x0, 0x2, 0x80000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x1, 0x0, 0x80, 0x6, 0xfffffffffffffffd]}, 0x7, 0xd)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async)
r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd04, &(0x7f00000001c0))
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) (async)
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x59) (async)
connect$auto(0x3, 0x0, 0x59)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x1, 0x0, 0x80000000) (async)
write$auto(0x1, 0x0, 0x80000000)
munmap$auto(0x8000, 0xffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0xe8e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x7, 0x7, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x1, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffff6, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x7ffe, 0xe, 0x3, 0x6, 0x9, 0x14f3, 0x1ff, 0x7f, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x0, 0x9, 0x0, 0x83, 0x9, 0x6, 0x100000001, 0x1000000ffffffff, 0x801, 0x401, 0x5, 0x5ed4, 0x1, 0x7, 0x6, 0x962, 0x5, 0xfff, 0x8, 0xfffffffffffffff7, 0x401, 0x4, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x1, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"})
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000), 0x0) (async)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000), 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r3, 0x0, 0xa3d9)
mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000)
sysfs$auto(0x2, 0x2, 0x0) (async)
sysfs$auto(0x2, 0x2, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x0, 0x5, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x13f)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000004c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x14\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xda{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G\x00'/515, &(0x7f0000001340), 0x2, 0x0)
r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
bpf$auto(0x16, 0xffffffffffffffff, 0x0) (async)
bpf$auto(0x16, 0xffffffffffffffff, 0x0)
write$auto_ecryptfs_miscdev_fops_miscdev(r4, &(0x7f0000000180)="58a3373c92", 0x5)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)

429.723605ms ago: executing program 5 (id=2783):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/system/node/has_memory\x00', 0x800, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/system/node/has_memory\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0)
timerfd_settime$auto(r0, 0x3, &(0x7f0000000000)={{0x4, 0x7}, {0x3, 0x1}}, &(0x7f0000000040)={{0x0, 0x9}, {0x2, 0x81}})

105.541583ms ago: executing program 4 (id=2784):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC2\x00', 0x149081, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0)
write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
mkdir$auto(&(0x7f0000000400)='./file0\x00', 0x8000)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') (async)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4)
lsetxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='/sys/devices/netdevsim0/del_port\x00', &(0x7f0000000280)="122a9240ab6a3c67b7aa52b244b507eac7ca77ca91ef6fbc857290863caba4e9d8bd92183a5b9b1bff", 0x6, 0x3)
renameat2$auto(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0xd, 0xc, 0x3e)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0xb, 0x1, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0xce7, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
madvise$auto(0x4, 0x200005, 0x19) (async)
madvise$auto(0x4, 0x200005, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x400008, 0x5, 0x1010, 0x2, 0x1) (async)
mmap$auto(0x0, 0x400008, 0x5, 0x1010, 0x2, 0x1)
sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0)
madvise$auto(0x800000000002, 0x6, 0x19)
socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3)

0s ago: executing program 5 (id=2785):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = socket(0xa, 0xa, 0xff)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000884)
lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb})
mmap$auto(0xfffffffffffffffe, 0x102, 0x2, 0x18, 0xffffffffffffffff, 0x7ffd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0x29, 0x2, 0x0)
sendmmsg$auto(r1, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x3, 0x202000a, 0x8000000000000001, 0x10, r0, 0x800000008004)
r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0)
r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0)
ioctl$auto(r3, 0xc05c5340, 0x38)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x8a801, 0x0)
write$auto(r5, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xc00caee0, r4)
close_range$auto(0x2, 0x8, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
r8 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
read$auto_check_wx_fops_(r8, &(0x7f0000000100)=""/192, 0xc0)

kernel console output (not intermixed with test programs):

[  630.346823][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  630.906377][ T3675] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  631.688648][ T3768] zswap: compressor 000 not available
[  632.643667][ T3786] FAULT_INJECTION: forcing a failure.
[  632.643667][ T3786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.717849][ T3786] CPU: 0 UID: 0 PID: 3786 Comm: syz.2.2324 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  632.717877][ T3786] Tainted: [L]=SOFTLOCKUP
[  632.717883][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  632.717893][ T3786] Call Trace:
[  632.717898][ T3786]  <TASK>
[  632.717907][ T3786]  dump_stack_lvl+0x100/0x190
[  632.717930][ T3786]  should_fail_ex.cold+0x5/0xa
[  632.717949][ T3786]  _copy_from_user+0x2e/0xd0
[  632.717973][ T3786]  do_pages_stat+0x194/0x7f0
[  632.718008][ T3786]  ? __pfx_do_pages_stat+0x10/0x10
[  632.718030][ T3786]  ? __lock_acquire+0x49f/0x1a40
[  632.718071][ T3786]  ? kernel_move_pages+0x1c2/0x14a0
[  632.718092][ T3786]  ? do_raw_spin_unlock+0x145/0x1e0
[  632.718115][ T3786]  kernel_move_pages+0xf11/0x14a0
[  632.718140][ T3786]  ? __pfx_do_futex+0x10/0x10
[  632.718154][ T3786]  ? __do_sys_clone+0xd9/0x120
[  632.718172][ T3786]  ? __pfx_kernel_move_pages+0x10/0x10
[  632.718192][ T3786]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  632.718253][ T3786]  ? __x64_sys_futex+0x34f/0x4d0
[  632.718268][ T3786]  ? __x64_sys_futex+0x358/0x4d0
[  632.718285][ T3786]  ? xfd_validate_state+0x129/0x190
[  632.718305][ T3786]  __x64_sys_move_pages+0xe0/0x1c0
[  632.718327][ T3786]  ? do_syscall_64+0x90/0x840
[  632.718343][ T3786]  ? lockdep_hardirqs_on+0x78/0x100
[  632.718365][ T3786]  do_syscall_64+0x115/0x840
[  632.718378][ T3786]  ? clear_bhb_loop+0x40/0x90
[  632.718398][ T3786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.718414][ T3786] RIP: 0033:0x7f1b3639de99
[  632.718433][ T3786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.718447][ T3786] RSP: 002b:00007f1b371b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  632.718462][ T3786] RAX: ffffffffffffffda RBX: 00007f1b36626090 RCX: 00007f1b3639de99
[  632.718473][ T3786] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 000000000000003c
[  632.718481][ T3786] RBP: 00007f1b36433eaf R08: 0000000000000000 R09: 0000000000000002
[  632.718498][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  632.718510][ T3786] R13: 00007f1b36626128 R14: 00007f1b36626090 R15: 00007fff55961e88
[  632.718531][ T3786]  </TASK>
[  634.042151][ T3771] Process accounting paused
[  634.599660][ T3809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'.
[  634.627575][ T3819] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  634.737126][ T3809] bond0: (slave bond_slave_0): Releasing backup interface
[  636.204434][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'.
[  637.224453][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'.
[  640.579103][   T30] audit: type=1326 audit(4294979681.637:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3940 comm="syz.3.2358" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1e119de99 code=0x0
[  648.667862][ T4191] random: crng reseeded on system resumption
[  649.545804][ T8090] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4
[  651.380986][  T892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  651.397902][  T892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  651.412911][  T892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  651.434818][  T892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  651.444197][  T892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  651.679375][T21266] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.231734][T21266] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.512008][T21266] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.739456][T21266] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.473392][ T8090] Bluetooth: hci0: command tx timeout
[  653.949531][T21266] bridge_slave_1: left allmulticast mode
[  653.984394][T21266] bridge_slave_1: left promiscuous mode
[  654.013446][T21266] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.065104][T21266] bridge_slave_0: left allmulticast mode
[  654.100818][T21266] bridge_slave_0: left promiscuous mode
[  654.130426][T21266] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.986411][T21266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.062727][T21266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.131177][T21266] bond0 (unregistering): Released all slaves
[  655.375053][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  655.554190][ T8090] Bluetooth: hci0: command tx timeout
[  656.553448][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.581484][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.607544][ T4329] bridge_slave_0: entered allmulticast mode
[  656.629717][ T4329] bridge_slave_0: entered promiscuous mode
[  656.682660][T21266] hsr_slave_0: left promiscuous mode
[  656.701675][T21266] hsr_slave_1: left promiscuous mode
[  656.725700][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.754704][T21266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  656.781233][T21266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  656.809380][T21266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.854787][T21266] veth1_macvtap: left promiscuous mode
[  656.881901][T21266] veth0_macvtap: left promiscuous mode
[  656.907668][T21266] veth1_vlan: left promiscuous mode
[  656.923488][T21266] veth0_vlan: left promiscuous mode
[  657.577666][T21266] team0 (unregistering): Port device team_slave_1 removed
[  657.612501][ T8090] Bluetooth: hci0: command tx timeout
[  657.634683][T21266] team0 (unregistering): Port device team_slave_0 removed
[  657.885638][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.912184][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.941796][ T4329] bridge_slave_1: entered allmulticast mode
[  657.955404][ T4329] bridge_slave_1: entered promiscuous mode
[  658.013708][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3
[  658.134930][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.225209][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.380518][ T4329] team0: Port device team_slave_0 added
[  658.403464][ T4329] team0: Port device team_slave_1 added
[  658.588324][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.613282][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.715788][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.775319][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.817887][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.913555][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.202003][ T4329] hsr_slave_0: entered promiscuous mode
[  659.228747][ T4329] hsr_slave_1: entered promiscuous mode
[  659.248475][ T4329] debugfs: 'hsr0' already exists in 'hsr'
[  659.271359][ T4329] Cannot create hsr debugfs directory
[  659.649919][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6
[  659.681757][ T8090] Bluetooth: hci0: command tx timeout
[  660.443435][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  660.476392][ T4329] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  660.495121][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  660.528047][ T4329] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  660.547995][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  660.575077][ T4329] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  660.590802][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  660.611908][ T4329] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  660.623025][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5
[  660.809231][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.869840][ T4329] 8021q: adding VLAN 0 to HW filter on device team0
[  660.898827][T10219] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.906173][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.958635][T10219] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.965822][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.370170][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.584384][ T4329] veth0_vlan: entered promiscuous mode
[  661.597100][ T4329] veth1_vlan: entered promiscuous mode
[  661.631589][ T4329] veth0_macvtap: entered promiscuous mode
[  661.641805][ T4329] veth1_macvtap: entered promiscuous mode
[  661.660328][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  661.680134][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  661.695510][T10225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  661.707929][T10225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  661.725179][T10225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  661.764596][T10225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  661.860542][T10225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  661.882233][T10225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  661.913416][T10225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  661.924415][T10225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.457156][ T4504] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  663.159662][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'.
[  668.900284][ T5625] Process accounting resumed
[  669.077520][  T892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  669.095048][  T892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  669.103897][  T892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  669.114418][  T892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  669.123324][  T892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  669.774310][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.782895][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.790767][ T4528] bridge_slave_0: entered allmulticast mode
[  669.798203][ T4528] bridge_slave_0: entered promiscuous mode
[  669.806173][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.813673][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.822923][ T4528] bridge_slave_1: entered allmulticast mode
[  669.830463][ T4528] bridge_slave_1: entered promiscuous mode
[  669.862288][ T4528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.877076][ T4528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.911419][ T4528] team0: Port device team_slave_0 added
[  669.919532][ T4528] team0: Port device team_slave_1 added
[  669.945265][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.956361][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.984696][ T4528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.996968][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  670.005418][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.033676][ T4528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.079741][ T4528] hsr_slave_0: entered promiscuous mode
[  670.086089][ T4528] hsr_slave_1: entered promiscuous mode
[  670.093245][ T4528] debugfs: 'hsr0' already exists in 'hsr'
[  670.099279][ T4528] Cannot create hsr debugfs directory
[  670.281455][ T4528] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  670.291052][ T4528] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  670.299727][ T4528] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  670.309772][ T4528] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  670.318119][ T4528] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  670.330417][ T4528] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  670.338466][ T4528] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  670.348608][ T4528] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  670.382142][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.390783][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.398275][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.405408][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.470624][ T4528] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.489403][T10228] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.498249][T10228] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.511572][ T4528] 8021q: adding VLAN 0 to HW filter on device team0
[  670.527451][T10219] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.534601][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.549706][T10219] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.556885][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.918435][ T4528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.221351][  T892] Bluetooth: hci1: command tx timeout
[  671.345534][ T4528] veth0_vlan: entered promiscuous mode
[  671.378243][ T4528] veth1_vlan: entered promiscuous mode
[  671.438467][ T4528] veth0_macvtap: entered promiscuous mode
[  671.457480][ T4528] veth1_macvtap: entered promiscuous mode
[  671.497051][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.523446][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.557963][T10228] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.581967][T10228] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.644427][T10228] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.664422][T10228] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.820564][T10219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.849661][T10219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.922413][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.942209][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.290241][  T892] Bluetooth: hci1: command tx timeout
[  674.721058][ T8090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  674.736212][ T8090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  674.748979][ T8090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  674.767939][ T8090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  674.783722][ T8090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  675.360350][ T8090] Bluetooth: hci1: command tx timeout
[  675.746744][ T5624] Process accounting resumed
[  675.919462][ T4665] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  676.101446][  T892] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  676.117995][  T892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  676.129062][  T892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  676.140278][  T892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  676.151312][  T892] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  676.543590][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.575475][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.612334][ T4644] bridge_slave_0: entered allmulticast mode
[  676.641975][ T4644] bridge_slave_0: entered promiscuous mode
[  676.675880][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.718564][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.750500][ T4644] bridge_slave_1: entered allmulticast mode
[  676.784989][ T4644] bridge_slave_1: entered promiscuous mode
[  676.872846][  T892] Bluetooth: hci5: command tx timeout
[  676.973321][ T4644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  677.022868][ T4644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.169209][ T4644] team0: Port device team_slave_0 added
[  677.188378][ T4644] team0: Port device team_slave_1 added
[  677.324471][ T4644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.335077][ T4644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.390514][ T4644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.415327][ T4644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.424285][ T4644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.452755][  T892] Bluetooth: hci1: command tx timeout
[  677.458815][ T4644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.536794][ T4644] hsr_slave_0: entered promiscuous mode
[  677.543959][ T4644] hsr_slave_1: entered promiscuous mode
[  677.550661][ T4644] debugfs: 'hsr0' already exists in 'hsr'
[  677.556557][ T4644] Cannot create hsr debugfs directory
[  677.893613][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.901489][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.910485][ T4667] bridge_slave_0: entered allmulticast mode
[  677.921921][ T4667] bridge_slave_0: entered promiscuous mode
[  677.949859][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.957306][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.964653][ T4667] bridge_slave_1: entered allmulticast mode
[  677.972255][ T4667] bridge_slave_1: entered promiscuous mode
[  678.044900][ T4644] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  678.059768][ T4644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  678.070686][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.081159][ T4644] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  678.092635][ T4644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  678.102095][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.117665][ T4644] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  678.127786][ T4644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  678.150016][ T4644] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  678.163042][ T4644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  678.191505][ T4667] team0: Port device team_slave_0 added
[  678.199495][ T4667] team0: Port device team_slave_1 added
[  678.224971][  T892] Bluetooth: hci6: command tx timeout
[  678.248638][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  678.255881][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.284641][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.300705][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.317568][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.348208][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.419100][ T4667] hsr_slave_0: entered promiscuous mode
[  678.427733][ T4667] hsr_slave_1: entered promiscuous mode
[  678.434856][ T4667] debugfs: 'hsr0' already exists in 'hsr'
[  678.440618][ T4667] Cannot create hsr debugfs directory
[  678.576957][ T4644] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.618367][ T4644] 8021q: adding VLAN 0 to HW filter on device team0
[  678.649714][T21266] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.656872][T21266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  678.706428][T21266] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.713607][T21266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  678.826083][ T4667] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  678.840433][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  678.858235][ T4667] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  678.868640][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  678.891846][ T4667] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  678.910198][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  678.932636][ T4667] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  678.942598][  T892] Bluetooth: hci5: command tx timeout
[  678.964038][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  679.125252][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.180953][ T4667] 8021q: adding VLAN 0 to HW filter on device team0
[  679.197565][T10225] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.204793][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.240068][T10228] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.247263][T10228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.565499][ T4644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.001368][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.016945][ T4644] veth0_vlan: entered promiscuous mode
[  680.039369][ T4644] veth1_vlan: entered promiscuous mode
[  680.109813][ T4644] veth0_macvtap: entered promiscuous mode
[  680.133420][ T4644] veth1_macvtap: entered promiscuous mode
[  680.178669][ T4644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.208329][ T4644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.246997][T10219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.271334][T10219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.297190][  T892] Bluetooth: hci6: command tx timeout
[  680.311860][T10219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.350157][T10219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.526361][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.557363][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.626391][T10228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.640092][ T4667] veth0_vlan: entered promiscuous mode
[  680.646625][T10228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.674716][ T4667] veth1_vlan: entered promiscuous mode
[  680.737947][ T4667] veth0_macvtap: entered promiscuous mode
[  680.759595][ T4667] veth1_macvtap: entered promiscuous mode
[  680.830463][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.868921][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.904818][T10225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.938221][T10225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.959197][T10225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.989469][T10225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.010949][  T892] Bluetooth: hci5: command tx timeout
[  681.267889][T10219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.309421][T10219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.419593][T10223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  681.439324][T10223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.501456][ T8090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  681.516865][ T8090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  681.530630][ T8090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  681.540381][ T8090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  681.556839][ T8090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  681.899680][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2424'.
[  682.366434][ T8090] Bluetooth: hci6: command tx timeout
[  683.079479][ T8090] Bluetooth: hci5: command tx timeout
[  683.421011][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  683.427469][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  683.615511][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.639184][ T8090] Bluetooth: hci7: command tx timeout
[  683.651712][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.667316][ T4740] bridge_slave_0: entered allmulticast mode
[  683.682049][ T4740] bridge_slave_0: entered promiscuous mode
[  683.717086][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.734936][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.752045][ T4740] bridge_slave_1: entered allmulticast mode
[  683.770250][ T4740] bridge_slave_1: entered promiscuous mode
[  683.895729][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.933025][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.031381][ T4740] team0: Port device team_slave_0 added
[  684.052793][ T4740] team0: Port device team_slave_1 added
[  684.129182][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.137849][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.175563][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.298882][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.344003][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.443883][ T8090] Bluetooth: hci6: command tx timeout
[  684.456440][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.660363][ T4740] hsr_slave_0: entered promiscuous mode
[  684.688414][ T4740] hsr_slave_1: entered promiscuous mode
[  684.719035][ T4740] debugfs: 'hsr0' already exists in 'hsr'
[  684.756465][ T4740] Cannot create hsr debugfs directory
[  685.034610][ T4790] FAULT_INJECTION: forcing a failure.
[  685.034610][ T4790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.152579][ T4790] CPU: 0 UID: 0 PID: 4790 Comm: syz.6.2434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  685.152607][ T4790] Tainted: [L]=SOFTLOCKUP
[  685.152613][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  685.152622][ T4790] Call Trace:
[  685.152627][ T4790]  <TASK>
[  685.152633][ T4790]  dump_stack_lvl+0x100/0x190
[  685.152661][ T4790]  should_fail_ex.cold+0x5/0xa
[  685.152680][ T4790]  _copy_from_user+0x2e/0xd0
[  685.152705][ T4790]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  685.152733][ T4790]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  685.152761][ T4790]  do_sock_getsockopt+0x2d0/0x6e0
[  685.152784][ T4790]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  685.152811][ T4790]  ? find_held_lock+0x2b/0x80
[  685.152835][ T4790]  ? __fget_files+0x21f/0x3d0
[  685.152862][ T4790]  __sys_getsockopt+0x133/0x1d0
[  685.152884][ T4790]  ? __x64_sys_getsockopt+0xbd/0x160
[  685.152900][ T4790]  __x64_sys_getsockopt+0xbd/0x160
[  685.152915][ T4790]  ? do_syscall_64+0x90/0x840
[  685.152931][ T4790]  ? lockdep_hardirqs_on+0x78/0x100
[  685.152953][ T4790]  do_syscall_64+0x115/0x840
[  685.152966][ T4790]  ? clear_bhb_loop+0x40/0x90
[  685.152985][ T4790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.153001][ T4790] RIP: 0033:0x7fcccaf9de99
[  685.153014][ T4790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.153032][ T4790] RSP: 002b:00007fcccbdd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  685.153047][ T4790] RAX: ffffffffffffffda RBX: 00007fcccb226090 RCX: 00007fcccaf9de99
[  685.153077][ T4790] RDX: 000000000000002b RSI: 000000000000068c RDI: 0000000000000006
[  685.153086][ T4790] RBP: 00007fcccb033eaf R08: 0000000000000000 R09: 0000000000000000
[  685.153096][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  685.153105][ T4790] R13: 00007fcccb226128 R14: 00007fcccb226090 R15: 00007fffd1361f58
[  685.153126][ T4790]  </TASK>
[  685.707221][ T8090] Bluetooth: hci7: command tx timeout
[  686.585344][ T4740] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  686.615732][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  686.659640][ T4740] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  686.690034][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  686.706810][ T4740] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  686.721727][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  686.766399][ T4740] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  686.779502][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  687.030516][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.224611][ T4740] 8021q: adding VLAN 0 to HW filter on device team0
[  687.297004][T10223] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.304310][T10223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.688287][T10225] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.695522][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.775102][ T8090] Bluetooth: hci7: command tx timeout
[  689.093881][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  689.822115][ T4740] veth0_vlan: entered promiscuous mode
[  689.844567][ T8090] Bluetooth: hci7: command tx timeout
[  689.876825][ T4740] veth1_vlan: entered promiscuous mode
[  689.980314][ T4740] veth0_macvtap: entered promiscuous mode
[  690.014136][ T4740] veth1_macvtap: entered promiscuous mode
[  690.084127][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.128985][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.154313][T10225] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1328 with max blocks 16 with error 117
[  690.197656][T10219] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.231144][T10225] EXT4-fs (sda1): This should not happen!! Data will be lost
[  690.231144][T10225] 
[  690.253962][T10219] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.296275][T10219] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.380998][T10219] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.555095][T10219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.581625][T10219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.652538][T10225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.680612][T10225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.034892][ T4864] FAULT_INJECTION: forcing a failure.
[  691.034892][ T4864] name failslab, interval 1, probability 0, space 0, times 0
[  691.056247][ T4864] CPU: 0 UID: 0 PID: 4864 Comm: syz.8.2427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.056275][ T4864] Tainted: [L]=SOFTLOCKUP
[  691.056280][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  691.056290][ T4864] Call Trace:
[  691.056295][ T4864]  <TASK>
[  691.056301][ T4864]  dump_stack_lvl+0x100/0x190
[  691.056323][ T4864]  should_fail_ex.cold+0x5/0xa
[  691.056341][ T4864]  should_failslab+0xc2/0x120
[  691.056369][ T4864]  __kmalloc_noprof+0xfc/0x820
[  691.056387][ T4864]  ? get_callchain_buffers+0x123/0x380
[  691.056410][ T4864]  get_callchain_buffers+0x123/0x380
[  691.056428][ T4864]  ? bpf_lsm_capable+0x9/0x10
[  691.056442][ T4864]  ? security_capable+0x80/0x260
[  691.056468][ T4864]  stack_map_alloc+0x316/0x610
[  691.056485][ T4864]  map_create+0x874/0x3120
[  691.056511][ T4864]  ? __lock_acquire+0x49f/0x1a40
[  691.056535][ T4864]  ? __pfx_map_create+0x10/0x10
[  691.056561][ T4864]  ? __might_fault+0xc5/0x140
[  691.056583][ T4864]  __sys_bpf+0x2a6e/0x4e80
[  691.056603][ T4864]  ? __pfx___sys_bpf+0x10/0x10
[  691.056616][ T4864]  ? __pfx_futex_hash+0x10/0x10
[  691.056639][ T4864]  ? get_pid_task+0xfc/0x250
[  691.056655][ T4864]  ? get_pid_task+0xfc/0x250
[  691.056675][ T4864]  ? futex_wait+0x11e/0x370
[  691.056693][ T4864]  ? __pfx_futex_wait+0x10/0x10
[  691.056715][ T4864]  ? rcu_read_lock_any_held+0x6a/0xa0
[  691.056748][ T4864]  ? __x64_sys_futex+0x34f/0x4d0
[  691.056761][ T4864]  ? __x64_sys_futex+0x358/0x4d0
[  691.056778][ T4864]  ? xfd_validate_state+0x129/0x190
[  691.056796][ T4864]  ? __x64_sys_bpf+0xce/0x140
[  691.056810][ T4864]  __x64_sys_bpf+0xce/0x140
[  691.056825][ T4864]  ? do_syscall_64+0x90/0x840
[  691.056841][ T4864]  do_syscall_64+0x115/0x840
[  691.056854][ T4864]  ? clear_bhb_loop+0x40/0x90
[  691.056872][ T4864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.056887][ T4864] RIP: 0033:0x7f7bf139de99
[  691.056901][ T4864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.056915][ T4864] RSP: 002b:00007f7bf2348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  691.056930][ T4864] RAX: ffffffffffffffda RBX: 00007f7bf1625fa0 RCX: 00007f7bf139de99
[  691.056940][ T4864] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000
[  691.056949][ T4864] RBP: 00007f7bf1433eaf R08: 0000000000000000 R09: 0000000000000000
[  691.056958][ T4864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.056966][ T4864] R13: 00007f7bf1626038 R14: 00007f7bf1625fa0 R15: 00007fffd6a28668
[  691.056987][ T4864]  </TASK>
[  691.512169][ T4870] futex_wake_op: syz.6.2449 tries to shift op by -2048; fix this program
[  691.525498][ T4870] 0x000000000001-0x000000020000 : ""
[  691.556361][ T4870] ftl_cs: FTL header corrupt!
[  691.838748][ T4872] random: crng reseeded on system resumption
[  692.880592][  T892] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  692.899994][  T892] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  692.909575][  T892] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  692.922786][  T892] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  692.931994][  T892] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  693.140842][ T4870] synth uevent: /devices/platform/vivid.0/video4linux/swradio15: unknown uevent action string
[  693.198756][ T4869] FAULT_INJECTION: forcing a failure.
[  693.198756][ T4869] name fail_futex, interval 1, probability 0, space 0, times 0
[  693.270874][ T4870] video4linux swradio15: uevent: failed to send synthetic uevent: -22
[  693.318603][ T4869] CPU: 0 UID: 0 PID: 4869 Comm: syz.6.2449 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.318630][ T4869] Tainted: [L]=SOFTLOCKUP
[  693.318635][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  693.318644][ T4869] Call Trace:
[  693.318650][ T4869]  <TASK>
[  693.318656][ T4869]  dump_stack_lvl+0x100/0x190
[  693.318677][ T4869]  should_fail_ex.cold+0x5/0xa
[  693.318694][ T4869]  get_futex_key+0x1d2/0x14f0
[  693.318722][ T4869]  ? __pfx_get_futex_key+0x10/0x10
[  693.318744][ T4869]  ? fault_dirty_shared_page+0x16e/0x5a0
[  693.318760][ T4869]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  693.318902][ T4869]  ? __pfx_filemap_map_pages+0x10/0x10
[  693.318924][ T4869]  ? do_fault+0x644/0x1750
[  693.318944][ T4869]  futex_wake+0xf4/0x5e0
[  693.318963][ T4869]  ? __pfx_futex_wake+0x10/0x10
[  693.318982][ T4869]  ? __pfx___handle_mm_fault+0x10/0x10
[  693.319004][ T4869]  ? __pfx___css_rstat_updated+0x10/0x10
[  693.319029][ T4869]  do_futex+0x2b2/0x440
[  693.319043][ T4869]  ? __pfx_do_futex+0x10/0x10
[  693.319056][ T4869]  ? find_held_lock+0x2b/0x80
[  693.319072][ T4869]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  693.319089][ T4869]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  693.319110][ T4869]  __x64_sys_futex+0x34f/0x4d0
[  693.319127][ T4869]  ? __pfx___x64_sys_futex+0x10/0x10
[  693.319148][ T4869]  do_syscall_64+0x115/0x840
[  693.319170][ T4869]  ? clear_bhb_loop+0x40/0x90
[  693.319188][ T4869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.319203][ T4869] RIP: 0033:0x7fcccaf9de99
[  693.319216][ T4869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.319230][ T4869] RSP: 002b:00007fffd13620b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  693.319244][ T4869] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fcccaf9de99
[  693.319254][ T4869] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcccb226098
[  693.319263][ T4869] RBP: 0000000000001132 R08: 0000000000000004 R09: 0000000000000000
[  693.319272][ T4869] R10: 00007fcccb225fa0 R11: 0000000000000246 R12: 0000000000000001
[  693.319281][ T4869] R13: 00007fcccb22609c R14: 00007fcccb226098 R15: 00007fcccb226090
[  693.319300][ T4869]  </TASK>
[  695.016396][  T892] Bluetooth: hci8: command tx timeout
[  696.230291][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.284532][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.329857][ T4889] bridge_slave_0: entered allmulticast mode
[  696.386498][ T4889] bridge_slave_0: entered promiscuous mode
[  696.436859][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.478438][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.513755][ T4889] bridge_slave_1: entered allmulticast mode
[  696.544778][ T4889] bridge_slave_1: entered promiscuous mode
[  696.720865][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.749078][ T4956] FAULT_INJECTION: forcing a failure.
[  696.749078][ T4956] name failslab, interval 1, probability 0, space 0, times 0
[  696.780141][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  696.798948][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.8.2461 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  696.798976][ T4956] Tainted: [L]=SOFTLOCKUP
[  696.798982][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  696.798991][ T4956] Call Trace:
[  696.798997][ T4956]  <TASK>
[  696.799003][ T4956]  dump_stack_lvl+0x100/0x190
[  696.799026][ T4956]  should_fail_ex.cold+0x5/0xa
[  696.799043][ T4956]  should_failslab+0xc2/0x120
[  696.799064][ T4956]  kmem_cache_alloc_noprof+0x91/0x6a0
[  696.799081][ T4956]  ? trace_kmem_cache_alloc+0xdd/0x100
[  696.799100][ T4956]  ? security_file_alloc+0x34/0x2c0
[  696.799121][ T4956]  security_file_alloc+0x34/0x2c0
[  696.799139][ T4956]  init_file+0x95/0x480
[  696.799155][ T4956]  alloc_empty_file+0x79/0x1c0
[  696.799174][ T4956]  path_openat+0xe7/0x4280
[  696.799197][ T4956]  ? __kasan_slab_alloc+0x89/0x90
[  696.799212][ T4956]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  696.799228][ T4956]  ? do_getname+0x35/0x390
[  696.799243][ T4956]  ? do_sys_openat2+0xc7/0x1e0
[  696.799259][ T4956]  ? __x64_sys_openat+0x12d/0x210
[  696.799275][ T4956]  ? do_syscall_64+0x115/0x840
[  696.799288][ T4956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.799309][ T4956]  ? __pfx_path_openat+0x10/0x10
[  696.799336][ T4956]  do_file_open+0x20e/0x430
[  696.799363][ T4956]  ? __pfx_do_file_open+0x10/0x10
[  696.799398][ T4956]  ? alloc_fd+0x471/0x7a0
[  696.799421][ T4956]  ? do_getname+0x191/0x390
[  696.799446][ T4956]  do_sys_openat2+0x10f/0x1e0
[  696.799465][ T4956]  ? __pfx_do_sys_openat2+0x10/0x10
[  696.799485][ T4956]  ? find_held_lock+0x2b/0x80
[  696.799506][ T4956]  __x64_sys_openat+0x12d/0x210
[  696.799525][ T4956]  ? __pfx___x64_sys_openat+0x10/0x10
[  696.799550][ T4956]  do_syscall_64+0x115/0x840
[  696.799563][ T4956]  ? clear_bhb_loop+0x40/0x90
[  696.799580][ T4956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.799595][ T4956] RIP: 0033:0x7f7bf139de99
[  696.799608][ T4956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.799622][ T4956] RSP: 002b:00007f7bf2348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  696.799637][ T4956] RAX: ffffffffffffffda RBX: 00007f7bf1625fa0 RCX: 00007f7bf139de99
[  696.799647][ T4956] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  696.799656][ T4956] RBP: 00007f7bf1433eaf R08: 0000000000000000 R09: 0000000000000000
[  696.799665][ T4956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.799674][ T4956] R13: 00007f7bf1626038 R14: 00007f7bf1625fa0 R15: 00007fffd6a28668
[  696.799695][ T4956]  </TASK>
[  697.206372][ T4957] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  697.342051][  T892] Bluetooth: hci8: command tx timeout
[  697.500946][ T4889] team0: Port device team_slave_0 added
[  697.573402][ T4889] team0: Port device team_slave_1 added
[  697.659712][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.693319][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  697.765930][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  697.908829][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  697.944716][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  698.009045][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  698.237979][ T4889] hsr_slave_0: entered promiscuous mode
[  698.274761][ T4889] hsr_slave_1: entered promiscuous mode
[  698.300345][ T4889] debugfs: 'hsr0' already exists in 'hsr'
[  698.333017][ T4889] Cannot create hsr debugfs directory
[  698.659233][ T4993] random: crng reseeded on system resumption
[  699.390947][ T8090] Bluetooth: hci8: command tx timeout
[  699.974100][ T4889] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  700.006332][ T4889] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  700.051967][ T4889] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  700.090893][ T4889] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  700.121334][ T4889] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  700.157375][ T4889] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  700.185876][ T4889] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  700.234381][ T4889] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  700.249789][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2471'.
[  700.425046][ T8090] Bluetooth: hci9: command 0x1003 tx timeout
[  700.433188][  T892] Bluetooth: hci9: Opcode 0x1003 failed: -110
[  700.635966][ T5019] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2471'.
[  700.724504][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.459166][  T892] Bluetooth: hci8: command tx timeout
[  701.514402][ T4889] 8021q: adding VLAN 0 to HW filter on device team0
[  701.655887][T10225] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.663088][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.888250][T10225] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.895429][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  704.908701][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.239674][ T5138] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  706.887184][ T5138] netlink: 346 bytes leftover after parsing attributes in process `syz.6.2483'.
[  706.985249][ T4889] veth0_vlan: entered promiscuous mode
[  707.025781][ T4889] veth1_vlan: entered promiscuous mode
[  707.160659][ T4889] veth0_macvtap: entered promiscuous mode
[  707.198140][ T4889] veth1_macvtap: entered promiscuous mode
[  707.347698][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.389852][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.461019][ T8034] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.502381][ T8034] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.546279][ T8034] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.581229][ T8034] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.780301][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.810053][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.885410][T10223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.909822][T10223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.388851][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2487'.
[  709.088250][ T5176] FAULT_INJECTION: forcing a failure.
[  709.088250][ T5176] name failslab, interval 1, probability 0, space 0, times 0
[  709.134892][ T5176] CPU: 0 UID: 0 PID: 5176 Comm: syz.9.2489 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  709.134922][ T5176] Tainted: [L]=SOFTLOCKUP
[  709.134927][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  709.134937][ T5176] Call Trace:
[  709.134944][ T5176]  <TASK>
[  709.134950][ T5176]  dump_stack_lvl+0x100/0x190
[  709.134973][ T5176]  should_fail_ex.cold+0x5/0xa
[  709.134991][ T5176]  should_failslab+0xc2/0x120
[  709.135018][ T5176]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  709.135036][ T5176]  ? find_held_lock+0x2b/0x80
[  709.135054][ T5176]  ? alloc_inode+0x183/0x250
[  709.135074][ T5176]  alloc_inode+0x183/0x250
[  709.135091][ T5176]  path_from_stashed+0x25b/0x750
[  709.135106][ T5176]  ? do_raw_spin_unlock+0x145/0x1e0
[  709.135125][ T5176]  ns_get_path+0x60/0x80
[  709.135139][ T5176]  proc_ns_get_link+0x25b/0x2e0
[  709.135160][ T5176]  ? __pfx_proc_ns_get_link+0x10/0x10
[  709.135182][ T5176]  ? atime_needs_update+0x8b/0x6b0
[  709.135202][ T5176]  pick_link+0xd17/0x13c0
[  709.135221][ T5176]  ? __pfx_proc_ns_get_link+0x10/0x10
[  709.135243][ T5176]  step_into_slowpath+0x9ba/0xf90
[  709.135265][ T5176]  ? rcu_is_watching+0x12/0xc0
[  709.135281][ T5176]  ? __pfx_step_into_slowpath+0x10/0x10
[  709.135299][ T5176]  ? find_held_lock+0x2b/0x80
[  709.135322][ T5176]  path_openat+0x13b5/0x4280
[  709.135353][ T5176]  ? __pfx_path_openat+0x10/0x10
[  709.135380][ T5176]  do_file_open+0x20e/0x430
[  709.135404][ T5176]  ? __pfx_do_file_open+0x10/0x10
[  709.135439][ T5176]  ? alloc_fd+0x471/0x7a0
[  709.135462][ T5176]  ? do_getname+0x191/0x390
[  709.135481][ T5176]  do_sys_openat2+0x10f/0x1e0
[  709.135499][ T5176]  ? __pfx_do_sys_openat2+0x10/0x10
[  709.135517][ T5176]  ? __fget_files+0x21f/0x3d0
[  709.135542][ T5176]  __x64_sys_openat+0x12d/0x210
[  709.135560][ T5176]  ? __pfx___x64_sys_openat+0x10/0x10
[  709.135585][ T5176]  do_syscall_64+0x115/0x840
[  709.135600][ T5176]  ? clear_bhb_loop+0x40/0x90
[  709.135618][ T5176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.135633][ T5176] RIP: 0033:0x7f0f4115e6ce
[  709.135647][ T5176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  709.135661][ T5176] RSP: 002b:00007f0f42122ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  709.135676][ T5176] RAX: ffffffffffffffda RBX: 00007f0f421236c0 RCX: 00007f0f4115e6ce
[  709.135686][ T5176] RDX: 0000000000000002 RSI: 00007f0f42122f90 RDI: ffffffffffffff9c
[  709.135696][ T5176] RBP: 00007f0f41233eaf R08: 0000000000000000 R09: 0000000000000000
[  709.135705][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.135714][ T5176] R13: 00007f0f41426128 R14: 00007f0f41426090 R15: 00007ffc12f39068
[  709.135734][ T5176]  </TASK>
[  712.066297][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2502'.
[  713.120488][ T5248] WARNING! power/level is deprecated; use power/control instead
[  713.194936][ T5248] ubi0: attaching mtd0
[  713.224824][ T5248] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1
[  713.273890][ T5248] eraseblock attaching information dump:
[  713.294642][ T5248] 	ec       1
[  713.317156][ T5248] 	pnum     0
[  713.325507][ T5248] 	lnum     0
[  713.337604][ T5248] 	scrub    0
[  713.363492][ T5248] 	sqnum    1
[  713.376188][ T5248] Volume identifier header dump:
[  713.390994][ T5248] 	magic     55424921
[  713.405897][ T5248] 	version   1
[  713.418087][ T5248] 	vol_type  1
[  713.431762][ T5248] 	copy_flag 0
[  713.441258][ T5248] 	compat    5
[  713.451860][ T5248] 	vol_id    2147479551
[  713.470335][ T5248] 	lnum      0
[  713.483358][ T5248] 	data_size 0
[  713.493006][ T5248] 	used_ebs  0
[  713.502845][ T5248] 	data_pad  0
[  713.516786][ T5248] 	sqnum     1
[  713.529096][ T5248] 	hdr_crc   65b3bd2d
[  713.543762][ T5248] Volume identifier header hexdump:
[  713.700344][ T5248] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  714.483004][ T5274] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1330 with max blocks 14 with error 117
[  714.496823][ T5274] EXT4-fs (sda1): This should not happen!! Data will be lost
[  714.496823][ T5274] 
[  716.661401][ T5309] FAULT_INJECTION: forcing a failure.
[  716.661401][ T5309] name failslab, interval 1, probability 0, space 0, times 0
[  716.692131][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.9.2519 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.692166][ T5309] Tainted: [L]=SOFTLOCKUP
[  716.692172][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  716.692182][ T5309] Call Trace:
[  716.692188][ T5309]  <TASK>
[  716.692194][ T5309]  dump_stack_lvl+0x100/0x190
[  716.692217][ T5309]  should_fail_ex.cold+0x5/0xa
[  716.692235][ T5309]  should_failslab+0xc2/0x120
[  716.692256][ T5309]  __kmalloc_cache_noprof+0x91/0x6c0
[  716.692281][ T5309]  ? proc_self_get_link+0x189/0x1f0
[  716.692306][ T5309]  proc_self_get_link+0x189/0x1f0
[  716.692326][ T5309]  pick_link+0xac2/0x13c0
[  716.692345][ T5309]  ? __pfx_proc_self_get_link+0x10/0x10
[  716.692369][ T5309]  step_into_slowpath+0x9ba/0xf90
[  716.692396][ T5309]  ? __pfx_step_into_slowpath+0x10/0x10
[  716.692418][ T5309]  ? lookup_fast+0x2da/0x600
[  716.692435][ T5309]  ? inode_permission+0x374/0x620
[  716.692454][ T5309]  link_path_walk+0xf28/0x1cc0
[  716.692481][ T5309]  path_openat+0x1c9/0x4280
[  716.692502][ T5309]  ? __kasan_slab_alloc+0x89/0x90
[  716.692518][ T5309]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  716.692533][ T5309]  ? do_getname+0x35/0x390
[  716.692549][ T5309]  ? __x64_sys_openat+0x12d/0x210
[  716.692572][ T5309]  ? __pfx_path_openat+0x10/0x10
[  716.692600][ T5309]  do_file_open+0x20e/0x430
[  716.692624][ T5309]  ? __pfx_do_file_open+0x10/0x10
[  716.692660][ T5309]  ? alloc_fd+0x471/0x7a0
[  716.692683][ T5309]  ? do_getname+0x191/0x390
[  716.692702][ T5309]  do_sys_openat2+0x10f/0x1e0
[  716.692720][ T5309]  ? __pfx_do_sys_openat2+0x10/0x10
[  716.692738][ T5309]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  716.692760][ T5309]  __x64_sys_openat+0x12d/0x210
[  716.692777][ T5309]  ? __pfx___x64_sys_openat+0x10/0x10
[  716.692802][ T5309]  do_syscall_64+0x115/0x840
[  716.692815][ T5309]  ? clear_bhb_loop+0x40/0x90
[  716.692834][ T5309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.692849][ T5309] RIP: 0033:0x7f0f4119de99
[  716.692862][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.692877][ T5309] RSP: 002b:00007f0f42144028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  716.692893][ T5309] RAX: ffffffffffffffda RBX: 00007f0f41425fa0 RCX: 00007f0f4119de99
[  716.692902][ T5309] RDX: 0000000000002582 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  716.692912][ T5309] RBP: 00007f0f41233eaf R08: 0000000000000000 R09: 0000000000000000
[  716.692920][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  716.692930][ T5309] R13: 00007f0f41426038 R14: 00007f0f41425fa0 R15: 00007ffc12f39068
[  716.692950][ T5309]  </TASK>
[  717.469482][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2520'.
[  718.867433][ T8090] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  718.881761][ T8090] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  718.896808][ T8090] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  718.912292][ T8090] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  718.920334][ T8090] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  719.419469][ T5381] FAULT_INJECTION: forcing a failure.
[  719.419469][ T5381] name failslab, interval 1, probability 0, space 0, times 0
[  719.580345][ T5381] CPU: 0 UID: 0 PID: 5381 Comm: syz.9.2525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  719.580374][ T5381] Tainted: [L]=SOFTLOCKUP
[  719.580380][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  719.580389][ T5381] Call Trace:
[  719.580394][ T5381]  <TASK>
[  719.580401][ T5381]  dump_stack_lvl+0x100/0x190
[  719.580424][ T5381]  should_fail_ex.cold+0x5/0xa
[  719.580442][ T5381]  should_failslab+0xc2/0x120
[  719.580462][ T5381]  __kmalloc_cache_noprof+0x91/0x6c0
[  719.580485][ T5381]  ? down_write_killable+0x152/0x250
[  719.580502][ T5381]  ? alloc_ldt_struct+0x5d/0x1b0
[  719.580524][ T5381]  alloc_ldt_struct+0x5d/0x1b0
[  719.580542][ T5381]  write_ldt+0x62b/0xd40
[  719.580566][ T5381]  ? __pfx_write_ldt+0x10/0x10
[  719.580586][ T5381]  ? xfd_validate_state+0x129/0x190
[  719.580607][ T5381]  __x64_sys_modify_ldt+0xb1/0x170
[  719.580627][ T5381]  do_syscall_64+0x115/0x840
[  719.580640][ T5381]  ? clear_bhb_loop+0x40/0x90
[  719.580658][ T5381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.580674][ T5381] RIP: 0033:0x7f0f4119de99
[  719.580687][ T5381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.580701][ T5381] RSP: 002b:00007f0f42123028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  719.580716][ T5381] RAX: ffffffffffffffda RBX: 00007f0f41426090 RCX: 00007f0f4119de99
[  719.580726][ T5381] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001
[  719.580735][ T5381] RBP: 00007f0f41233eaf R08: 0000000000000000 R09: 0000000000000000
[  719.580744][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.580752][ T5381] R13: 00007f0f41426128 R14: 00007f0f41426090 R15: 00007ffc12f39068
[  719.580772][ T5381]  </TASK>
[  719.972269][ T8090] Bluetooth: hci8: unexpected event 0x3e length: 726 > 260
[  719.972296][ T8090] Bluetooth: hci8: unexpected subevent 0x0e length: 725 > 15
[  719.988285][ T8090] Bluetooth: hci8: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  720.678595][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'.
[  721.031029][ T8090] Bluetooth: hci9: command tx timeout
[  721.111463][ T8090] Bluetooth: hci4: command 0x0406 tx timeout
[  721.564632][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.593488][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.625568][ T5372] bridge_slave_0: entered allmulticast mode
[  721.636660][ T5372] bridge_slave_0: entered promiscuous mode
[  721.671896][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.693120][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.715608][ T5372] bridge_slave_1: entered allmulticast mode
[  721.728345][ T5372] bridge_slave_1: entered promiscuous mode
[  721.777240][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.790155][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.881687][ T5372] team0: Port device team_slave_0 added
[  721.899207][ T5372] team0: Port device team_slave_1 added
[  721.958961][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.973805][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.017666][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.035504][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.044925][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.079265][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.167357][ T5372] hsr_slave_0: entered promiscuous mode
[  722.174194][ T5372] hsr_slave_1: entered promiscuous mode
[  722.181251][ T5372] debugfs: 'hsr0' already exists in 'hsr'
[  722.187099][ T5372] Cannot create hsr debugfs directory
[  723.063724][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2535'.
[  723.095639][  T892] Bluetooth: hci9: command tx timeout
[  724.596510][ T5464] zswap: compressor û not available
[  725.060768][ T5372] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  725.116095][ T5372] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  725.151118][ T5372] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  725.167531][  T892] Bluetooth: hci9: command tx timeout
[  725.207953][ T5372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  725.415538][ T5372] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  725.478363][ T5372] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  725.519944][ T5372] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  725.648893][ T5372] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  726.191973][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.426238][ T5372] 8021q: adding VLAN 0 to HW filter on device team0
[  726.522367][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.529538][ T8038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.717045][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.724199][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.018037][ T5515] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  727.232433][  T892] Bluetooth: hci9: command tx timeout
[  727.465479][ T5538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  727.547521][ T5533] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2545'.
[  727.663720][ T5533] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2545'.
[  727.951764][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  728.414034][ T5560] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2548'.
[  728.675421][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.885100][ T5372] veth0_vlan: entered promiscuous mode
[  728.946038][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  728.955867][ T5372] veth1_vlan: entered promiscuous mode
[  729.058130][ T5372] veth0_macvtap: entered promiscuous mode
[  729.094931][ T5372] veth1_macvtap: entered promiscuous mode
[  729.175697][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.215735][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.285424][ T8547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.322054][ T8547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.373170][ T8547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.415706][ T8547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.634194][ T8547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.670176][ T8547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.765050][T21263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.806160][T21263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.940370][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  730.822598][ T8090] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  730.836487][ T8090] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  730.845661][ T8090] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  730.863474][ T8090] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  730.873732][ T8090] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  730.934671][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  731.933128][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  732.923347][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  732.959817][ T8090] Bluetooth: hci10: command tx timeout
[  733.066903][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.084964][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.104441][ T5617] bridge_slave_0: entered allmulticast mode
[  733.130895][ T5617] bridge_slave_0: entered promiscuous mode
[  733.168214][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.202972][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.248584][ T5617] bridge_slave_1: entered allmulticast mode
[  733.283491][ T5617] bridge_slave_1: entered promiscuous mode
[  733.467060][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.533503][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.683261][ T5617] team0: Port device team_slave_0 added
[  733.729345][ T5617] team0: Port device team_slave_1 added
[  733.917683][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  733.956366][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'.
[  734.033726][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  734.067797][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  734.207598][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  734.274775][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.299220][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  734.449582][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.686710][ T5617] hsr_slave_0: entered promiscuous mode
[  734.738898][ T5617] hsr_slave_1: entered promiscuous mode
[  734.771384][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[  734.794419][ T5617] Cannot create hsr debugfs directory
[  734.912008][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  735.031333][ T8090] Bluetooth: hci10: command tx timeout
[  735.906372][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  735.990084][ T5763] netlink: 86 bytes leftover after parsing attributes in process `syz.1.2567'.
[  736.424519][ T5617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.768146][ T5617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.900673][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  736.979427][ T5617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.099079][ T8090] Bluetooth: hci10: command tx timeout
[  737.385422][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2569'.
[  737.895124][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  738.166944][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.215305][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  738.264104][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.304083][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  738.385119][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  738.424718][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  738.457547][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  738.492587][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  738.889333][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  738.912721][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.968012][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[  739.003104][T21263] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.010308][T21263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  739.099547][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.106726][ T8038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  739.165164][ T8090] Bluetooth: hci10: command tx timeout
[  739.883702][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  740.125646][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  740.227633][ T5617] veth0_vlan: entered promiscuous mode
[  740.269732][ T5617] veth1_vlan: entered promiscuous mode
[  740.368197][ T5617] veth0_macvtap: entered promiscuous mode
[  740.401615][ T5617] veth1_macvtap: entered promiscuous mode
[  740.465354][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.508957][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.557798][ T5348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.594611][ T5348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.655074][ T5348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.690212][ T5348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  740.878126][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  740.955886][ T8038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.988221][ T8038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.074375][ T5855] blktrace: Concurrent blktraces are not allowed on loop2
[  741.100410][ T5855] FAULT_INJECTION: forcing a failure.
[  741.100410][ T5855] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  741.127630][ T8547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.156214][ T8547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.205200][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.8.2576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  741.205228][ T5855] Tainted: [L]=SOFTLOCKUP
[  741.205233][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  741.205243][ T5855] Call Trace:
[  741.205248][ T5855]  <TASK>
[  741.205255][ T5855]  dump_stack_lvl+0x100/0x190
[  741.205278][ T5855]  should_fail_ex.cold+0x5/0xa
[  741.205293][ T5855]  ? prepare_alloc_pages+0x16d/0x5f0
[  741.205315][ T5855]  should_fail_alloc_page+0xeb/0x140
[  741.205336][ T5855]  prepare_alloc_pages+0x1f0/0x5f0
[  741.205358][ T5855]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  741.205374][ T5855]  ? vfs_write+0x6ac/0x1050
[  741.205398][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.205423][ T5855]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  741.205450][ T5855]  ? trace_kmalloc+0xeb/0x110
[  741.205467][ T5855]  ? __kasan_kmalloc+0xaa/0xb0
[  741.205484][ T5855]  ? __kmalloc_node_track_caller_noprof+0x34f/0x830
[  741.205503][ T5855]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  741.205524][ T5855]  ? policy_nodemask+0xed/0x4f0
[  741.205545][ T5855]  alloc_pages_mpol+0x1fb/0x540
[  741.205564][ T5855]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  741.205581][ T5855]  ? __alloc_skb+0x5b7/0x710
[  741.205666][ T5855]  ? __pfx___alloc_skb+0x10/0x10
[  741.205686][ T5855]  alloc_pages_noprof+0x1a/0x160
[  741.205715][ T5855]  alloc_skb_with_frags+0x4e7/0x760
[  741.205740][ T5855]  sock_alloc_send_pskb+0x801/0x980
[  741.205763][ T5855]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  741.205788][ T5855]  tun_get_user+0x904/0x3c20
[  741.205858][ T5855]  ? __pfx_tun_get_user+0x10/0x10
[  741.205875][ T5855]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  741.205930][ T5855]  ? find_held_lock+0x2b/0x80
[  741.205947][ T5855]  ? tun_get+0x191/0x370
[  741.205990][ T5855]  ? tun_get+0x191/0x370
[  741.206018][ T5855]  tun_chr_write_iter+0xdc/0x200
[  741.206034][ T5855]  vfs_write+0x6ac/0x1050
[  741.206057][ T5855]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  741.206073][ T5855]  ? __pfx_vfs_write+0x10/0x10
[  741.206093][ T5855]  ? find_held_lock+0x2b/0x80
[  741.206120][ T5855]  __x64_sys_pwrite64+0x1eb/0x250
[  741.206143][ T5855]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  741.206170][ T5855]  do_syscall_64+0x115/0x840
[  741.206185][ T5855]  ? clear_bhb_loop+0x40/0x90
[  741.206202][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.206218][ T5855] RIP: 0033:0x7f7bf139de99
[  741.206233][ T5855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.206247][ T5855] RSP: 002b:00007f7bf2327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  741.206263][ T5855] RAX: ffffffffffffffda RBX: 00007f7bf1626090 RCX: 00007f7bf139de99
[  741.206273][ T5855] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8
[  741.206282][ T5855] RBP: 00007f7bf1433eaf R08: 0000000000000000 R09: 0000000000000000
[  741.206291][ T5855] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  741.206299][ T5855] R13: 00007f7bf1626128 R14: 00007f7bf1626090 R15: 00007fffd6a28668
[  741.206319][ T5855]  </TASK>
[  741.872376][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  742.866668][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  743.341134][ T5883] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  743.363613][ T5883] FAULT_INJECTION: forcing a failure.
[  743.363613][ T5883] name failslab, interval 1, probability 0, space 0, times 0
[  743.405674][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.1.2582 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  743.405702][ T5883] Tainted: [L]=SOFTLOCKUP
[  743.405708][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  743.405717][ T5883] Call Trace:
[  743.405723][ T5883]  <TASK>
[  743.405730][ T5883]  dump_stack_lvl+0x100/0x190
[  743.405752][ T5883]  should_fail_ex.cold+0x5/0xa
[  743.405770][ T5883]  should_failslab+0xc2/0x120
[  743.405789][ T5883]  __kmalloc_noprof+0xfc/0x820
[  743.405807][ T5883]  ? __pfx_trace_seq_printf+0x10/0x10
[  743.405822][ T5883]  ? tracing_log_err+0x4b4/0x6a0
[  743.405843][ T5883]  tracing_log_err+0x4b4/0x6a0
[  743.405865][ T5883]  append_filter_err+0x399/0x620
[  743.405887][ T5883]  apply_subsystem_event_filter+0x711/0x17a0
[  743.405913][ T5883]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  743.405937][ T5883]  ? _copy_from_user+0x59/0xd0
[  743.405960][ T5883]  subsystem_filter_write+0x95/0x120
[  743.405981][ T5883]  vfs_write+0x2aa/0x1050
[  743.406004][ T5883]  ? __pfx_subsystem_filter_write+0x10/0x10
[  743.406026][ T5883]  ? __pfx_vfs_write+0x10/0x10
[  743.406046][ T5883]  ? __fget_files+0x215/0x3d0
[  743.406071][ T5883]  ? __fget_files+0x21f/0x3d0
[  743.406097][ T5883]  ksys_write+0x12a/0x250
[  743.406118][ T5883]  ? __pfx_ksys_write+0x10/0x10
[  743.406145][ T5883]  do_syscall_64+0x115/0x840
[  743.406159][ T5883]  ? clear_bhb_loop+0x40/0x90
[  743.406178][ T5883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.406194][ T5883] RIP: 0033:0x7f9cf3f9de99
[  743.406208][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.406222][ T5883] RSP: 002b:00007f9cf4dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  743.406238][ T5883] RAX: ffffffffffffffda RBX: 00007f9cf4225fa0 RCX: 00007f9cf3f9de99
[  743.406248][ T5883] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000006
[  743.406257][ T5883] RBP: 00007f9cf4033eaf R08: 0000000000000000 R09: 0000000000000000
[  743.406265][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  743.406274][ T5883] R13: 00007f9cf4226038 R14: 00007f9cf4225fa0 R15: 00007ffd86df1c68
[  743.406294][ T5883]  </TASK>
[  743.862112][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  744.426647][  T892] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  744.442749][ T5917] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  744.451659][ T5917] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  744.472083][ T5917] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  744.483936][ T5917] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  744.518261][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  744.529526][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  744.855353][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  745.505955][ T5933] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2588'.
[  745.850563][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  746.564237][ T5917] Bluetooth: hci11: command tx timeout
[  746.788544][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.829100][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.844305][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  746.867417][ T5914] bridge_slave_0: entered allmulticast mode
[  746.888204][ T5914] bridge_slave_0: entered promiscuous mode
[  746.914047][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.929764][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.942934][ T5914] bridge_slave_1: entered allmulticast mode
[  746.967075][ T5914] bridge_slave_1: entered promiscuous mode
[  747.094490][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.123640][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.210559][ T5914] team0: Port device team_slave_0 added
[  747.232067][ T5914] team0: Port device team_slave_1 added
[  747.398419][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.421477][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.486151][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.534171][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.559459][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.654606][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.841239][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  748.007545][ T5914] hsr_slave_0: entered promiscuous mode
[  748.036941][ T5914] hsr_slave_1: entered promiscuous mode
[  748.060898][ T5914] debugfs: 'hsr0' already exists in 'hsr'
[  748.090002][ T5914] Cannot create hsr debugfs directory
[  748.630510][ T5917] Bluetooth: hci11: command tx timeout
[  748.832716][   T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  749.355610][ T5914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.733386][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'.
[  749.794085][ T5914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  749.941451][ T5914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.125619][ T5914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.412943][ T5979] netlink: 334 bytes leftover after parsing attributes in process `syz.8.2598'.
[  750.698184][ T5917] Bluetooth: hci11: command tx timeout
[  750.823197][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  751.319494][ T5914] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  751.343813][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  751.366418][ T5914] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  751.390474][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  751.423638][ T5914] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  751.461646][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  751.493187][ T5914] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  751.542449][ T5914] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  751.648895][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'.
[  751.664466][ T5990] zswap: compressor  not available
[  751.816626][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  751.959708][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.091790][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[  752.172549][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.179831][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  752.267361][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.274664][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.769861][ T5917] Bluetooth: hci11: command tx timeout
[  752.811302][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  752.911869][ T6024] FAULT_INJECTION: forcing a failure.
[  752.911869][ T6024] name failslab, interval 1, probability 0, space 0, times 0
[  753.023284][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.1.2605 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.023311][ T6024] Tainted: [L]=SOFTLOCKUP
[  753.023317][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  753.023326][ T6024] Call Trace:
[  753.023333][ T6024]  <TASK>
[  753.023339][ T6024]  dump_stack_lvl+0x100/0x190
[  753.023362][ T6024]  should_fail_ex.cold+0x5/0xa
[  753.023380][ T6024]  should_failslab+0xc2/0x120
[  753.023400][ T6024]  __kmalloc_noprof+0xfc/0x820
[  753.023418][ T6024]  ? tomoyo_encode2+0xfb/0x3c0
[  753.023443][ T6024]  tomoyo_encode2+0xfb/0x3c0
[  753.023464][ T6024]  tomoyo_encode+0x29/0x50
[  753.023483][ T6024]  tomoyo_realpath_from_path+0x18c/0x690
[  753.023508][ T6024]  tomoyo_path2_perm+0x29f/0x700
[  753.023525][ T6024]  ? tomoyo_path2_perm+0x291/0x700
[  753.023542][ T6024]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[  753.023568][ T6024]  ? do_raw_spin_unlock+0x145/0x1e0
[  753.023593][ T6024]  ? do_raw_spin_unlock+0x145/0x1e0
[  753.023610][ T6024]  ? simple_lookup+0xfc/0x1d0
[  753.023640][ T6024]  tomoyo_path_link+0xae/0x100
[  753.023663][ T6024]  ? __pfx_tomoyo_path_link+0x10/0x10
[  753.023683][ T6024]  ? make_vfsgid+0xf1/0x140
[  753.023702][ T6024]  ? __pfx_make_vfsgid+0x10/0x10
[  753.023726][ T6024]  security_path_link+0x12f/0x2a0
[  753.023744][ T6024]  filename_linkat+0x33a/0x640
[  753.023764][ T6024]  ? __pfx_filename_linkat+0x10/0x10
[  753.023785][ T6024]  ? do_getname+0x191/0x390
[  753.023803][ T6024]  __x64_sys_linkat+0xf6/0x150
[  753.023819][ T6024]  do_syscall_64+0x115/0x840
[  753.023834][ T6024]  ? clear_bhb_loop+0x40/0x90
[  753.023852][ T6024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.023868][ T6024] RIP: 0033:0x7f9cf3f9de99
[  753.023882][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.023896][ T6024] RSP: 002b:00007f9cf4d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  753.023911][ T6024] RAX: ffffffffffffffda RBX: 00007f9cf4226180 RCX: 00007f9cf3f9de99
[  753.023921][ T6024] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000005
[  753.023930][ T6024] RBP: 00007f9cf4033eaf R08: 0000000000001000 R09: 0000000000000000
[  753.023939][ T6024] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  753.023948][ T6024] R13: 00007f9cf4226218 R14: 00007f9cf4226180 R15: 00007ffd86df1c68
[  753.023968][ T6024]  </TASK>
[  753.023988][ T6024] ERROR: Out of memory at tomoyo_realpath_from_path.
[  753.476896][ T6026] net_ratelimit: 30 callbacks suppressed
[  753.476913][ T6026] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  753.769813][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.804340][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  754.066217][ T5914] veth0_vlan: entered promiscuous mode
[  754.131414][ T5914] veth1_vlan: entered promiscuous mode
[  754.238145][ T5914] veth0_macvtap: entered promiscuous mode
[  754.281092][ T5914] veth1_macvtap: entered promiscuous mode
[  754.367665][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.423753][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.476010][ T8038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.510661][ T8038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.563164][ T8038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.600698][ T8038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.809937][ T3231] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  755.013142][ T8038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.042980][ T8038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.205238][ T8038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.234817][ T8038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.793256][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  756.789281][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  757.785270][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  758.777008][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  759.817532][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  760.764678][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  760.935766][ T5917] Bluetooth: hci11: unexpected subevent 0x01 length: 123 > 18
[  760.968842][ T6121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.239052][ T6128] netlink: 'syz.8.2625': attribute type 1 has an invalid length.
[  761.451980][ T8037] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  761.467317][ T8037] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  761.479054][ T8037] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  761.488472][ T8037] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  761.509415][ T8037] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  761.758983][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  762.753319][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  762.965790][ T8090] Bluetooth: hci11: command 0x2016 tx timeout
[  763.011685][   T30] audit: type=1800 audit(4294996188.751:65): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2631" name="filter" dev="tracefs" ino=19680823 res=0 errno=0
[  763.252083][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'.
[  763.467553][ T6167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  763.594799][ T8090] Bluetooth: hci12: command tx timeout
[  763.748498][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  764.742002][ T5708] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  764.914910][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.930423][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.947746][ T6134] bridge_slave_0: entered allmulticast mode
[  764.963647][ T6134] bridge_slave_0: entered promiscuous mode
[  764.988801][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.996369][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.006146][ T6134] bridge_slave_1: entered allmulticast mode
[  765.016756][ T8090] Bluetooth: hci11: command 0x2016 tx timeout
[  765.041479][ T6134] bridge_slave_1: entered promiscuous mode
[  765.099192][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  765.131830][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  765.191086][ T6134] team0: Port device team_slave_0 added
[  765.200786][ T6134] team0: Port device team_slave_1 added
[  765.253896][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.274218][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.314029][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.331973][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.355166][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.449813][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.558392][ T6221] FAULT_INJECTION: forcing a failure.
[  765.558392][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  765.590408][ T6221] CPU: 0 UID: 0 PID: 6221 Comm: syz.1.2645 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  765.590436][ T6221] Tainted: [L]=SOFTLOCKUP
[  765.590441][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  765.590450][ T6221] Call Trace:
[  765.590455][ T6221]  <TASK>
[  765.590462][ T6221]  dump_stack_lvl+0x100/0x190
[  765.590484][ T6221]  should_fail_ex.cold+0x5/0xa
[  765.590501][ T6221]  _copy_from_user+0x2e/0xd0
[  765.590539][ T6221]  copy_msghdr_from_user+0x9f/0x4c0
[  765.590563][ T6221]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  765.590594][ T6221]  ? __pfx__kstrtoull+0x10/0x10
[  765.590612][ T6221]  ___sys_sendmsg+0x106/0x1e0
[  765.590635][ T6221]  ? __pfx____sys_sendmsg+0x10/0x10
[  765.590666][ T6221]  ? find_held_lock+0x2b/0x80
[  765.590694][ T6221]  __sys_sendmmsg+0x20c/0x440
[  765.590714][ T6221]  ? __pfx___sys_sendmmsg+0x10/0x10
[  765.590730][ T6221]  ? ksys_write+0x190/0x250
[  765.590765][ T6221]  ? fput+0x79/0x100
[  765.590780][ T6221]  ? ksys_write+0x1ac/0x250
[  765.590800][ T6221]  ? __pfx_ksys_write+0x10/0x10
[  765.590824][ T6221]  __x64_sys_sendmmsg+0x9c/0x100
[  765.590841][ T6221]  ? lockdep_hardirqs_on+0x78/0x100
[  765.590864][ T6221]  do_syscall_64+0x115/0x840
[  765.590877][ T6221]  ? clear_bhb_loop+0x40/0x90
[  765.590895][ T6221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.590911][ T6221] RIP: 0033:0x7f9cf3f9de99
[  765.590924][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  765.590939][ T6221] RSP: 002b:00007f9cf4dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  765.590954][ T6221] RAX: ffffffffffffffda RBX: 00007f9cf4225fa0 RCX: 00007f9cf3f9de99
[  765.590964][ T6221] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  765.590973][ T6221] RBP: 00007f9cf4dc8090 R08: 0000000000000000 R09: 0000000000000000
[  765.590981][ T6221] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000001
[  765.590990][ T6221] R13: 00007f9cf4226038 R14: 00007f9cf4225fa0 R15: 00007ffd86df1c68
[  765.591009][ T6221]  </TASK>
[  765.829384][ T6134] hsr_slave_0: entered promiscuous mode
[  765.836097][ T6134] hsr_slave_1: entered promiscuous mode
[  765.842606][ T6134] debugfs: 'hsr0' already exists in 'hsr'
[  765.848459][ T6134] Cannot create hsr debugfs directory
[  765.950832][ T8037] Bluetooth: hci12: command tx timeout
[  766.247488][ T6134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.611794][ T6134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.730668][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  766.893727][ T6134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.168136][ T6134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.727912][ T5708] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  767.960061][ T8037] Bluetooth: hci12: command tx timeout
[  768.109391][ T6134] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  768.145214][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  768.169554][ T6134] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  768.207425][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  768.239197][ T6134] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  768.270604][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  768.294493][ T6134] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  768.328604][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  768.584441][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0
[  768.621568][ T6134] 8021q: adding VLAN 0 to HW filter on device team0
[  768.658060][T10229] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.665640][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.714902][T10229] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.722120][T10229] bridge0: port 2(bridge_slave_1) entered forwarding state
[  768.730562][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  769.378509][ T6263] FAULT_INJECTION: forcing a failure.
[  769.378509][ T6263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.440197][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.2.2653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  769.440224][ T6263] Tainted: [L]=SOFTLOCKUP
[  769.440230][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  769.440239][ T6263] Call Trace:
[  769.440245][ T6263]  <TASK>
[  769.440251][ T6263]  dump_stack_lvl+0x100/0x190
[  769.440273][ T6263]  should_fail_ex.cold+0x5/0xa
[  769.440289][ T6263]  _copy_from_user+0x2e/0xd0
[  769.440311][ T6263]  ____sys_sendmsg+0x1d1/0xbe0
[  769.440335][ T6263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  769.440359][ T6263]  ? __pfx__kstrtoull+0x10/0x10
[  769.440377][ T6263]  ___sys_sendmsg+0x190/0x1e0
[  769.440400][ T6263]  ? __pfx____sys_sendmsg+0x10/0x10
[  769.440430][ T6263]  ? find_held_lock+0x2b/0x80
[  769.440458][ T6263]  __sys_sendmmsg+0x20c/0x440
[  769.440478][ T6263]  ? __pfx___sys_sendmmsg+0x10/0x10
[  769.440494][ T6263]  ? ksys_write+0x190/0x250
[  769.440529][ T6263]  ? fput+0x79/0x100
[  769.440544][ T6263]  ? ksys_write+0x1ac/0x250
[  769.440564][ T6263]  ? __pfx_ksys_write+0x10/0x10
[  769.440588][ T6263]  __x64_sys_sendmmsg+0x9c/0x100
[  769.440605][ T6263]  ? lockdep_hardirqs_on+0x78/0x100
[  769.440629][ T6263]  do_syscall_64+0x115/0x840
[  769.440642][ T6263]  ? clear_bhb_loop+0x40/0x90
[  769.440660][ T6263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.440675][ T6263] RIP: 0033:0x7fa25b79de99
[  769.440687][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.440701][ T6263] RSP: 002b:00007fa2599f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  769.440715][ T6263] RAX: ffffffffffffffda RBX: 00007fa25ba25fa0 RCX: 00007fa25b79de99
[  769.440725][ T6263] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  769.440734][ T6263] RBP: 00007fa2599f6090 R08: 0000000000000000 R09: 0000000000000000
[  769.440742][ T6263] R10: 0000000000001f00 R11: 0000000000000246 R12: 0000000000000001
[  769.440792][ T6263] R13: 00007fa25ba26038 R14: 00007fa25ba25fa0 R15: 00007fffeb6b9908
[  769.440810][ T6263]  </TASK>
[  770.044163][ T8037] Bluetooth: hci12: command tx timeout
[  770.660465][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  770.707978][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  770.776222][ T6287] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  770.845625][ T6134] veth0_vlan: entered promiscuous mode
[  770.900508][ T6134] veth1_vlan: entered promiscuous mode
[  771.023381][ T6134] veth0_macvtap: entered promiscuous mode
[  771.165038][ T6134] veth1_macvtap: entered promiscuous mode
[  771.315623][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.383152][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.442787][T10220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.472652][T10220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.514923][T10220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.566269][T10220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.702328][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  771.808662][T10220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.854078][T10220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.956931][T10220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.976475][T10220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.045842][ T6298] sysfs_service_op_show: Client not running :-5:
[  772.696656][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  773.278044][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'.
[  773.356052][ T6322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2667'.
[  773.691633][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  773.946250][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'.
[  774.686321][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  774.758315][ T6350] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2674'.
[  775.018214][ T6333] kexec: Could not allocate control_code_buffer
[  775.237925][ T6355] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  775.324497][ T6356] can: request_module (can-proto-5) failed.
[  775.333760][ T6355] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2675'.
[  775.402233][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'.
[  775.679626][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  776.674208][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  777.116614][ T8037] Bluetooth: hci0: command 0x0406 tx timeout
[  777.414590][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'.
[  777.668309][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  778.662661][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  779.656972][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  779.835297][ T8037] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  779.855790][ T8037] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  779.865930][ T8037] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  779.874093][ T8037] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  779.885664][ T8037] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  780.516015][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2698'.
[  780.651308][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  780.908449][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.926745][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.946063][ T6435] bridge_slave_0: entered allmulticast mode
[  780.965367][ T6435] bridge_slave_0: entered promiscuous mode
[  780.982538][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.004498][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.024956][ T6435] bridge_slave_1: entered allmulticast mode
[  781.042864][ T6435] bridge_slave_1: entered promiscuous mode
[  781.116026][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  781.141487][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  781.221520][ T6435] team0: Port device team_slave_0 added
[  781.241202][ T6435] team0: Port device team_slave_1 added
[  781.313177][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  781.330821][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.358108][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  781.384084][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  781.391236][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  781.423894][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.542087][ T6435] hsr_slave_0: entered promiscuous mode
[  781.563237][ T6435] hsr_slave_1: entered promiscuous mode
[  781.569470][ T6435] debugfs: 'hsr0' already exists in 'hsr'
[  781.597227][ T6435] Cannot create hsr debugfs directory
[  781.645676][ T5708] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  781.964088][ T8037] Bluetooth: hci13: command tx timeout
[  782.096425][ T6435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.221748][ T6435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.290963][ T6435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.348961][ T6435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.543843][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  782.555728][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  782.564325][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  782.575020][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  782.585351][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  782.604793][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  782.614328][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  782.627260][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  782.639971][ T4733] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  782.733655][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0
[  782.757846][ T6435] 8021q: adding VLAN 0 to HW filter on device team0
[  782.772786][T10230] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.779987][T10230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  782.809016][T10220] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.816214][T10220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  783.573601][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'.
[  783.634303][ T5708] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  783.668054][ T6503] ovs_: entered promiscuous mode
[  783.772942][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.029555][ T8037] Bluetooth: hci13: command tx timeout
[  784.228329][ T6435] veth0_vlan: entered promiscuous mode
[  784.258991][ T6435] veth1_vlan: entered promiscuous mode
[  784.319390][ T6519] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2708'.
[  784.341908][ T6435] veth0_macvtap: entered promiscuous mode
[  784.368320][ T6435] veth1_macvtap: entered promiscuous mode
[  784.435639][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  784.480354][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  784.522413][T10229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  784.568098][T10229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  784.622281][T10229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  784.635427][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  784.700918][T10229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  784.989583][T21263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  785.030346][T21263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  785.091782][T10229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  785.116424][T10229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  785.622998][ T5715] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  786.100057][ T8037] Bluetooth: hci13: command tx timeout
[  786.171058][ T6540] zram: Cannot change disksize for initialized device
[  786.617323][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  787.611642][ T5708] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  788.165355][ T8037] Bluetooth: hci13: command tx timeout
[  788.605967][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  789.600302][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  789.675135][ T6591] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6134] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6591]
[  790.605300][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  790.667968][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'.
[  791.140284][ T5917] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  791.165114][ T5917] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  791.175946][ T5917] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  791.190149][ T5917] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  791.201119][ T5917] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  791.589587][ T3436] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  792.390134][ T8090] Bluetooth: hci1: command 0x0406 tx timeout
[  792.966305][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[  793.256992][ T8037] Bluetooth: hci14: command tx timeout
[  793.311954][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.353947][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.397813][ T6617] bridge_slave_0: entered allmulticast mode
[  793.439266][ T6617] bridge_slave_0: entered promiscuous mode
[  793.477813][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.521538][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.535325][ T6672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  793.560150][ T6617] bridge_slave_1: entered allmulticast mode
[  793.606072][ T6617] bridge_slave_1: entered promiscuous mode
[  793.700525][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.760171][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.781167][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'.
[  793.891564][ T6617] team0: Port device team_slave_0 added
[  793.935962][ T6617] team0: Port device team_slave_1 added
[  794.045221][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  794.075517][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.180714][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  794.225538][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  794.248303][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.341773][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.485125][ T6617] hsr_slave_0: entered promiscuous mode
[  794.519205][ T6617] hsr_slave_1: entered promiscuous mode
[  794.542997][ T6617] debugfs: 'hsr0' already exists in 'hsr'
[  794.568299][ T6617] Cannot create hsr debugfs directory
[  794.588205][ T6679] sd 0:0:1:0: PR command failed: 1026
[  794.603353][ T6679] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  794.644865][ T6679] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  795.168410][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2741'.
[  795.213433][ T8090] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  795.236463][ T8090] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  795.247666][ T8090] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  795.259488][ T8090] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  795.281883][ T8090] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  795.326599][ T8037] Bluetooth: hci14: command tx timeout
[  795.360952][ T6689] bond0: entered promiscuous mode
[  795.384402][ T6689] bond_slave_0: entered promiscuous mode
[  795.404526][ T6689] bond_slave_1: entered promiscuous mode
[  795.701030][ T6617] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.260150][ T6617] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.494115][ T6617] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.752655][ T6617] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.974523][ T6713] FAULT_INJECTION: forcing a failure.
[  796.974523][ T6713] name failslab, interval 1, probability 0, space 0, times 0
[  797.039223][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.3.2745 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.039249][ T6713] Tainted: [L]=SOFTLOCKUP
[  797.039254][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  797.039262][ T6713] Call Trace:
[  797.039268][ T6713]  <TASK>
[  797.039273][ T6713]  dump_stack_lvl+0x100/0x190
[  797.039297][ T6713]  should_fail_ex.cold+0x5/0xa
[  797.039315][ T6713]  should_failslab+0xc2/0x120
[  797.039336][ T6713]  __kvmalloc_node_noprof+0x116/0x970
[  797.039355][ T6713]  ? con_get_unimap+0x44/0x460
[  797.039465][ T6713]  con_get_unimap+0x44/0x460
[  797.039490][ T6713]  vt_ioctl+0x11b3/0x3110
[  797.039545][ T6713]  ? __pfx_vt_ioctl+0x10/0x10
[  797.039565][ T6713]  ? find_held_lock+0x2b/0x80
[  797.039582][ T6713]  ? tomoyo_path_number_perm+0x28f/0x580
[  797.039602][ T6713]  ? tomoyo_path_number_perm+0x28f/0x580
[  797.039621][ T6713]  ? tomoyo_path_number_perm+0x188/0x580
[  797.039638][ T6713]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  797.039657][ T6713]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  797.039681][ T6713]  ? __pfx_vt_ioctl+0x10/0x10
[  797.039703][ T6713]  tty_ioctl+0x26a/0x1640
[  797.039756][ T6713]  ? __pfx_tty_ioctl+0x10/0x10
[  797.039779][ T6713]  ? find_held_lock+0x2b/0x80
[  797.039794][ T6713]  ? __fget_files+0x215/0x3d0
[  797.039815][ T6713]  ? hook_file_ioctl_common+0x140/0x440
[  797.039838][ T6713]  ? __fget_files+0x21f/0x3d0
[  797.039861][ T6713]  ? __pfx_tty_ioctl+0x10/0x10
[  797.039879][ T6713]  __x64_sys_ioctl+0x18e/0x210
[  797.039900][ T6713]  do_syscall_64+0x115/0x840
[  797.039917][ T6713]  ? clear_bhb_loop+0x40/0x90
[  797.039935][ T6713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.039950][ T6713] RIP: 0033:0x7fe1fe19de99
[  797.039963][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.039977][ T6713] RSP: 002b:00007fe1ff147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  797.039992][ T6713] RAX: ffffffffffffffda RBX: 00007fe1fe425fa0 RCX: 00007fe1fe19de99
[  797.040001][ T6713] RDX: 0000000000000000 RSI: 0000000000004b66 RDI: 0000000000000003
[  797.040010][ T6713] RBP: 00007fe1ff147090 R08: 0000000000000000 R09: 0000000000000000
[  797.040019][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.040027][ T6713] R13: 00007fe1fe426038 R14: 00007fe1fe425fa0 R15: 00007ffe343aacc8
[  797.040045][ T6713]  </TASK>
[  797.451096][ T8090] Bluetooth: hci15: command tx timeout
[  797.465625][ T8090] Bluetooth: hci14: command tx timeout
[  797.585555][ T5917] Bluetooth: hci5: command 0x0406 tx timeout
[  797.831024][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.877849][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.924345][ T6693] bridge_slave_0: entered allmulticast mode
[  797.958026][ T6693] bridge_slave_0: entered promiscuous mode
[  797.982287][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.004358][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.021600][ T6693] bridge_slave_1: entered allmulticast mode
[  798.056641][ T6693] bridge_slave_1: entered promiscuous mode
[  798.184915][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.233674][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  798.622294][ T6693] team0: Port device team_slave_0 added
[  798.669562][ T6693] team0: Port device team_slave_1 added
[  798.812771][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  798.838812][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.915659][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  798.969980][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  799.013901][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.100458][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  799.160172][ T6743] zswap: compressor FÛâ(_ not available
[  799.172023][ T6617] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  799.212706][ T6617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  799.306710][ T6617] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  799.342851][ T6617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  799.366500][ T6617] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  799.408172][ T6617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  799.440480][ T6693] hsr_slave_0: entered promiscuous mode
[  799.461451][ T6693] hsr_slave_1: entered promiscuous mode
[  799.468272][ T8037] Bluetooth: hci14: command tx timeout
[  799.475104][ T8090] Bluetooth: hci15: command tx timeout
[  799.508505][ T6693] debugfs: 'hsr0' already exists in 'hsr'
[  799.523540][ T6693] Cannot create hsr debugfs directory
[  799.536806][ T6617] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  799.558339][ T6617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  799.761867][ T6758] netlink: 85 bytes leftover after parsing attributes in process `syz.3.2753'.
[  800.404942][ T6693] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.702284][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0
[  800.803730][ T6693] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.113512][ T6693] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.342934][ T6693] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.396390][ T6617] 8021q: adding VLAN 0 to HW filter on device team0
[  801.436759][T10230] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.443957][T10230] bridge0: port 1(bridge_slave_0) entered forwarding state
[  801.550444][ T8090] Bluetooth: hci15: command tx timeout
[  801.577391][T10230] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.584558][T10230] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.404933][ T6693] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  802.466456][ T6693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  802.513843][ T6693] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  802.568861][ T8090] Bluetooth: hci6: command 0x0406 tx timeout
[  802.596193][ T6693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  802.644756][ T6693] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  802.702177][ T6693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  802.733522][ T6693] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  802.785125][ T6693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  803.261655][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.359497][ T6693] 8021q: adding VLAN 0 to HW filter on device team0
[  803.455283][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.462469][ T5348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.550282][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.557484][ T8038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.604487][ T8037] Bluetooth: hci15: command tx timeout
[  803.854439][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.490304][ T6825] FAULT_INJECTION: forcing a failure.
[  804.490304][ T6825] name failslab, interval 1, probability 0, space 0, times 0
[  804.568439][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.3.2766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  804.568466][ T6825] Tainted: [L]=SOFTLOCKUP
[  804.568472][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  804.568481][ T6825] Call Trace:
[  804.568487][ T6825]  <TASK>
[  804.568496][ T6825]  dump_stack_lvl+0x100/0x190
[  804.568519][ T6825]  should_fail_ex.cold+0x5/0xa
[  804.568537][ T6825]  should_failslab+0xc2/0x120
[  804.568556][ T6825]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  804.568575][ T6825]  ? __d_alloc+0x35/0xa50
[  804.568596][ T6825]  __d_alloc+0x35/0xa50
[  804.568619][ T6825]  d_alloc_pseudo+0x1c/0xc0
[  804.568639][ T6825]  alloc_file_pseudo+0x118/0x290
[  804.568658][ T6825]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  804.568681][ T6825]  __shmem_file_setup+0x205/0x460
[  804.568707][ T6825]  ? __pfx___shmem_file_setup+0x10/0x10
[  804.568729][ T6825]  ? vm_area_alloc+0x1f/0x160
[  804.568753][ T6825]  shmem_zero_setup+0x96/0x1b0
[  804.568769][ T6825]  __mmap_region+0x24ef/0x2db0
[  804.568797][ T6825]  ? __pfx___mmap_region+0x10/0x10
[  804.568824][ T6825]  ? __pfx___might_resched+0x10/0x10
[  804.568850][ T6825]  ? __lock_acquire+0x49f/0x1a40
[  804.568885][ T6825]  ? __lock_acquire+0x49f/0x1a40
[  804.568916][ T6825]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[  804.568943][ T6825]  ? rcu_is_watching+0x12/0xc0
[  804.568960][ T6825]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  804.568975][ T6825]  ? lockdep_hardirqs_on+0x78/0x100
[  804.569029][ T6825]  mmap_region+0x35d/0x620
[  804.569044][ T6825]  ? rcu_is_watching+0x12/0xc0
[  804.569059][ T6825]  ? __pfx_mmap_region+0x10/0x10
[  804.569081][ T6825]  ? cap_mmap_addr+0x4b/0x120
[  804.569105][ T6825]  ? bpf_lsm_mmap_addr+0x9/0x30
[  804.569127][ T6825]  ? security_mmap_addr+0x71/0x1e0
[  804.569145][ T6825]  ? __get_unmapped_area+0x255/0x3e0
[  804.569167][ T6825]  do_mmap+0xc63/0x12f0
[  804.569189][ T6825]  ? __pfx_do_mmap+0x10/0x10
[  804.569207][ T6825]  ? __pfx_down_write_killable+0x10/0x10
[  804.569235][ T6825]  ? __pfx_futex_wait+0x10/0x10
[  804.569256][ T6825]  vm_mmap_pgoff+0x29e/0x470
[  804.569279][ T6825]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  804.569301][ T6825]  ? __pfx_do_futex+0x10/0x10
[  804.569320][ T6825]  ksys_mmap_pgoff+0xe4/0x610
[  804.569343][ T6825]  ? __x64_sys_futex+0x358/0x4d0
[  804.569359][ T6825]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  804.569378][ T6825]  ? xfd_validate_state+0x129/0x190
[  804.569401][ T6825]  __x64_sys_mmap+0x125/0x190
[  804.569420][ T6825]  do_syscall_64+0x115/0x840
[  804.569434][ T6825]  ? clear_bhb_loop+0x40/0x90
[  804.569452][ T6825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.569468][ T6825] RIP: 0033:0x7fe1fe19de99
[  804.569492][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.569511][ T6825] RSP: 002b:00007fe1ff147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  804.569527][ T6825] RAX: ffffffffffffffda RBX: 00007fe1fe425fa0 RCX: 00007fe1fe19de99
[  804.569537][ T6825] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  804.569547][ T6825] RBP: 00007fe1fe233eaf R08: fffffffffffffffa R09: 0000000000008000
[  804.569558][ T6825] R10: 0800000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  804.569567][ T6825] R13: 00007fe1fe426038 R14: 00007fe1fe425fa0 R15: 00007ffe343aacc8
[  804.569588][ T6825]  </TASK>
[  805.049750][ T6827] bridge0: port 3(vlan1) entered blocking state
[  805.056530][ T6827] bridge0: port 3(vlan1) entered disabled state
[  805.063010][ T6827] vlan1: entered allmulticast mode
[  805.068333][ T6827] veth0_vlan: entered allmulticast mode
[  805.076958][ T6827] vlan1: entered promiscuous mode
[  805.082670][ T6827] bridge0: port 3(vlan1) entered blocking state
[  805.089168][ T6827] bridge0: port 3(vlan1) entered forwarding state
[  805.624428][ T6617] veth0_vlan: entered promiscuous mode
[  805.648641][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  805.658797][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  805.718421][ T6617] veth1_vlan: entered promiscuous mode
[  805.875673][ T6617] veth0_macvtap: entered promiscuous mode
[  805.910088][ T6617] veth1_macvtap: entered promiscuous mode
[  805.986598][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  806.046121][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  806.149420][T10229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  806.176712][T10229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  806.255141][T10229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.299221][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  806.354327][T10229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.989135][ T5349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.050376][ T5349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.331017][ T8027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.385039][ T8027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.534595][ T6693] veth0_vlan: entered promiscuous mode
[  807.633710][ T6869] random: crng reseeded on system resumption
[  807.667930][ T8090] Bluetooth: hci7: command 0x0406 tx timeout
[  807.714836][ T6693] veth1_vlan: entered promiscuous mode
[  807.886870][ T6693] veth0_macvtap: entered promiscuous mode
[  808.175430][ T6693] veth1_macvtap: entered promiscuous mode
[  808.558861][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.743776][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  809.036095][T10229] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.158600][T10229] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  809.217206][T10229] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  809.268523][T10229] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  809.452341][ T6885] tipc: Started in network mode
[  809.459781][ T6885] tipc: Node identity ffffffff, cluster identity 4711
[  809.494729][ T6885] tipc: Node number set to 4294967295
[  810.279940][ T6900] vivid-007: =================  START STATUS  =================
[  810.351604][ T6900] vivid-007: Generate PTS: true
[  810.382589][ T6900] vivid-007: Generate SCR: true
[  810.448094][ T6900] tpg source WxH: 320x240 (Y'CbCr)
[  810.478480][ T6900] tpg field: 1
[  810.510123][ T6900] tpg crop: (0,0)/320x240
[  810.530701][ T8038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.584081][ T6900] tpg compose: (0,0)/320x240
[  810.590829][ T8038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.627270][ T6900] tpg colorspace: 8
[  810.726448][ T6900] tpg transfer function: 0/0
[  810.759362][ T6900] tpg Y'CbCr encoding: 0/0
[  810.824227][ T6900] tpg quantization: 0/0
[  810.830327][ T6902] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  810.863051][ T6900] tpg RGB range: 0/2
[  810.887244][ T6900] vivid-007: ==================  END STATUS  ==================
[  811.470592][T10229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.501007][T10229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  813.540459][ T6944] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [88]
[  815.146128][   T31] INFO: task syz-executor:4329 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  815.194412][   T31]       Tainted: G             L      syzkaller #0
[  815.221899][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  815.265078][   T31] task:syz-executor    state:D stack:23744 pid:4329  tgid:4329  ppid:1      task_flags:0x400140 flags:0x00080002
[  815.325804][   T31] Call Trace:
[  815.341825][   T31]  <TASK>
[  815.357419][   T31]  __schedule+0x125c/0x6730
[  815.377263][   T31]  ? do_raw_spin_lock+0x128/0x260
[  815.409248][   T31]  ? __pfx___schedule+0x10/0x10
[  815.428529][   T31]  ? find_held_lock+0x2b/0x80
[  815.452371][   T31]  ? schedule+0x225/0x2c0
[  815.480323][   T31]  schedule+0xdd/0x2c0
[  815.499281][   T31]  schedule_preempt_disabled+0x13/0x30
[  815.523615][   T31]  __mutex_lock+0xccc/0x1bd0
[  815.547790][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  815.566097][ T6956] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  815.578339][   T31]  ? __lock_acquire+0x49f/0x1a40
[  815.603106][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  815.627715][   T31]  ? net_generic+0xea/0x2a0
[  815.646527][   T31]  ? net_generic+0xea/0x2a0
[  815.665617][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  815.706729][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  815.730856][   T31]  nfsd_umount+0x3b/0x60
[  815.750209][   T31]  deactivate_locked_super+0xc1/0x1b0
[  815.769518][   T31]  deactivate_super+0xe7/0x110
[  815.834912][   T31]  cleanup_mnt+0x21f/0x450
[  815.862587][   T31]  task_work_run+0x150/0x240
[  815.908728][   T31]  ? __pfx_task_work_run+0x10/0x10
[  815.961162][   T31]  exit_to_user_mode_loop+0x1d8/0x6f0
[  815.995064][   T31]  ? rcu_is_watching+0x12/0xc0
[  816.042098][   T31]  do_syscall_64+0x652/0x840
[  816.056769][   T31]  ? clear_bhb_loop+0x40/0x90
[  816.073268][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.092404][   T31] RIP: 0033:0x7f0ee259f0d7
[  816.117884][   T31] RSP: 002b:00007ffe92343bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  816.150005][   T31] RAX: 0000000000000000 RBX: 00007f0ee263330a RCX: 00007f0ee259f0d7
[  816.178217][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe92343c80
[  816.212269][   T31] RBP: 00007ffe92343c80 R08: 00007ffe92344c80 R09: 00000000ffffffff
[  816.236848][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe92344d10
[  816.276453][   T31] R13: 00007f0ee263330a R14: 00000000000a32d0 R15: 00007ffe92344d50
[  816.301361][   T31]  </TASK>
[  816.324703][   T31] INFO: task syz.2.2410:4447 blocked for more than 144 seconds.
[  816.382871][   T31]       Tainted: G             L      syzkaller #0
[  816.406555][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.429238][   T31] task:syz.2.2410      state:D stack:27560 pid:4447  tgid:4446  ppid:879    task_flags:0x400140 flags:0x00080002
[  816.444912][   T31] Call Trace:
[  816.448242][   T31]  <TASK>
[  816.451219][   T31]  __schedule+0x125c/0x6730
[  816.456195][   T31]  ? do_raw_spin_lock+0x128/0x260
[  816.461248][   T31]  ? __pfx___schedule+0x10/0x10
[  816.466484][   T31]  ? find_held_lock+0x2b/0x80
[  816.471305][   T31]  ? schedule+0x225/0x2c0
[  816.477127][   T31]  schedule+0xdd/0x2c0
[  816.481255][   T31]  schedule_preempt_disabled+0x13/0x30
[  816.489529][   T31]  __mutex_lock+0xccc/0x1bd0
[  816.498080][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  816.504747][   T31]  ? __lock_acquire+0x49f/0x1a40
[  816.516508][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  816.521601][   T31]  ? net_generic+0xea/0x2a0
[  816.526482][   T31]  ? net_generic+0xea/0x2a0
[  816.531059][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  816.538715][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[  816.544896][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  816.550595][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  816.557354][   T31]  ? genl_get_cmd+0x3e7/0x760
[  816.562188][   T31]  ? bpf_lsm_capable+0x9/0x10
[  816.567283][   T31]  ? security_capable+0x80/0x260
[  816.572348][   T31]  genl_rcv_msg+0x560/0x800
[  816.581039][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  816.588145][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  816.596678][   T31]  netlink_rcv_skb+0x159/0x420
[  816.601513][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  816.615883][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  816.621313][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  816.627170][   T31]  genl_rcv+0x28/0x40
[  816.631205][   T31]  netlink_unicast+0x585/0x850
[  816.636399][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  816.641729][   T31]  netlink_sendmsg+0x8b0/0xda0
[  816.647838][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  816.655790][   T31]  ? apparmor_socket_sendmsg+0x15b/0x270
[  816.661660][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[  816.666846][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  816.672174][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  816.677823][   T31]  ? plist_check_list+0x1b8/0x280
[  816.683378][   T31]  ? plist_del+0x308/0x510
[  816.688009][   T31]  ___sys_sendmsg+0x190/0x1e0
[  816.694225][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  816.699484][   T31]  ? __lock_acquire+0x49f/0x1a40
[  816.707325][   T31]  ? futex_wake+0x220/0x5e0
[  816.719307][   T31]  __sys_sendmsg+0x160/0x210
[  816.725474][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  816.730679][   T31]  ? syscall_user_dispatch+0x76/0x130
[  816.742430][   T31]  do_syscall_64+0x115/0x840
[  816.748262][   T31]  ? clear_bhb_loop+0x40/0x90
[  816.754718][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.760694][   T31] RIP: 0033:0x7f1b3639de99
[  816.765493][   T31] RSP: 002b:00007f1b371d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  816.774299][   T31] RAX: ffffffffffffffda RBX: 00007f1b36625fa0 RCX: 00007f1b3639de99
[  816.782645][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  816.790657][   T31] RBP: 00007f1b36433eaf R08: 0000000000000000 R09: 0000000000000000
[  816.800729][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  816.810092][   T31] R13: 00007f1b36626038 R14: 00007f1b36625fa0 R15: 00007fff55961e88
[  816.829056][   T31]  </TASK>
[  816.863839][   T31] INFO: task syz.3.2411:4452 blocked for more than 145 seconds.
[  816.891889][   T31]       Tainted: G             L      syzkaller #0
[  816.903501][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  816.936022][   T31] task:syz.3.2411      state:D stack:27560 pid:4452  tgid:4451  ppid:5624   task_flags:0x400140 flags:0x00080002
[  816.961087][   T31] Call Trace:
[  816.971379][   T31]  <TASK>
[  816.975693][   T31]  __schedule+0x125c/0x6730
[  816.990493][   T31]  ? do_raw_spin_lock+0x128/0x260
[  817.007239][   T31]  ? __pfx___schedule+0x10/0x10
[  817.022823][   T31]  ? find_held_lock+0x2b/0x80
[  817.032340][   T31]  ? schedule+0x225/0x2c0
[  817.043696][   T31]  schedule+0xdd/0x2c0
[  817.056395][   T31]  schedule_preempt_disabled+0x13/0x30
[  817.070454][   T31]  __mutex_lock+0xccc/0x1bd0
[  817.081557][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.090740][   T31]  ? __lock_acquire+0x49f/0x1a40
[  817.101909][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  817.111915][   T31]  ? net_generic+0xea/0x2a0
[  817.148222][   T31]  ? net_generic+0xea/0x2a0
[  817.155700][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.162073][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.167784][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  817.175155][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  817.181514][   T31]  ? genl_get_cmd+0x3e7/0x760
[  817.186247][   T31]  ? bpf_lsm_capable+0x9/0x10
[  817.192267][   T31]  ? security_capable+0x80/0x260
[  817.197348][   T31]  genl_rcv_msg+0x560/0x800
[  817.202267][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.207323][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  817.214864][   T31]  netlink_rcv_skb+0x159/0x420
[  817.226386][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.231750][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  817.237096][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  817.243891][   T31]  genl_rcv+0x28/0x40
[  817.247922][   T31]  netlink_unicast+0x585/0x850
[  817.253485][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  817.258842][   T31]  netlink_sendmsg+0x8b0/0xda0
[  817.267124][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.272961][   T31]  ? apparmor_socket_sendmsg+0x15b/0x270
[  817.278637][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[  817.284828][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.290981][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  817.296332][   T31]  ___sys_sendmsg+0x190/0x1e0
[  817.302929][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  817.308172][   T31]  ? __lock_acquire+0x49f/0x1a40
[  817.313879][   T31]  __sys_sendmsg+0x160/0x210
[  817.318538][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  817.330652][   T31]  ? syscall_user_dispatch+0x76/0x130
[  817.336104][   T31]  do_syscall_64+0x115/0x840
[  817.341148][   T31]  ? clear_bhb_loop+0x40/0x90
[  817.345908][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.353268][   T31] RIP: 0033:0x7fe1e119de99
[  817.357714][   T31] RSP: 002b:00007fe1e1ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.366491][   T31] RAX: ffffffffffffffda RBX: 00007fe1e1425fa0 RCX: 00007fe1e119de99
[  817.377835][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  817.386386][   T31] RBP: 00007fe1e1233eaf R08: 0000000000000000 R09: 0000000000000000
[  817.395742][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.404007][   T31] R13: 00007fe1e1426038 R14: 00007fe1e1425fa0 R15: 00007ffc55dc3718
[  817.413412][   T31]  </TASK>
[  817.445888][   T31] 
[  817.445888][   T31] Showing all locks held in the system:
[  817.485529][   T31] 1 lock held by khungtaskd/31:
[  817.523656][   T31]  #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  817.563697][   T31] 3 locks held by kworker/u11:2/8090:
[  817.575299][   T31]  #0: ffff888034fb1140 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  817.586039][   T31]  #1: ffffc9000358fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  817.601734][   T31]  #2: ffff888057fa4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470
[  817.615289][   T31] 2 locks held by getty/9308:
[  817.621336][   T31]  #0: ffff88803751f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  817.639403][   T31]  #1: ffffc9000cd332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  817.649893][   T31] 2 locks held by syz-executor/4329:
[  817.655213][   T31]  #0: ffff888052bdc0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.665932][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.675794][   T31] 2 locks held by syz.0.2399/4356:
[  817.682351][   T31]  #0: ffffffff90b4dac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  817.695818][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.706288][   T31] 2 locks held by syz.2.2410/4447:
[  817.714869][   T31]  #0: ffffffff90b4dac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  817.723418][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.742319][   T31] 2 locks held by syz.3.2411/4452:
[  817.747979][   T31]  #0: ffffffff90b4dac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  817.756215][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  817.771119][   T31] 2 locks held by syz-executor/4528:
[  817.776446][   T31]  #0: ffff88802c8ca0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.788718][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.798661][   T31] 2 locks held by syz-executor/4644:
[  817.803965][   T31]  #0: ffff88804682a0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.814676][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.827422][   T31] 2 locks held by syz-executor/4667:
[  817.839502][   T31]  #0: ffff88805868c0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.857896][ T8037] Bluetooth: hci8: command 0x0406 tx timeout
[  817.864493][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.874479][   T31] 2 locks held by syz-executor/4740:
[  817.880357][   T31]  #0: ffff8880271140d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.891036][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.902002][   T31] 2 locks held by syz-executor/4889:
[  817.907606][   T31]  #0: ffff8880907460d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  817.918168][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  817.942277][   T31] 4 locks held by kworker/u10:66/5349:
[  817.948062][   T31]  #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  817.960458][   T31]  #1: ffffc90003e07d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  817.971336][   T31]  #2: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  817.980978][   T31]  #3: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  817.991769][   T31] 2 locks held by syz-executor/5372:
[  817.997444][   T31]  #0: ffff88807a6c80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  818.010252][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  818.020332][   T31] 2 locks held by syz-executor/5617:
[  818.025964][   T31]  #0: ffff88801effe0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  818.045047][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  818.056655][   T31] 2 locks held by syz-executor/5914:
[  818.062021][   T31]  #0: ffff88804654c0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  818.073923][   T31]  #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  818.084537][   T31] 1 lock held by syz-executor/6617:
[  818.093244][   T31]  #0: ffffffff90a9eec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  818.102836][   T31] 1 lock held by syz.3.2779/6930:
[  818.108178][   T31]  #0: ffffffff90a9eec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  818.118944][   T31] 1 lock held by syz.7.2781/6937:
[  818.124443][   T31]  #0: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  818.134235][   T31] 2 locks held by syz.7.2781/6945:
[  818.147775][   T31]  #0: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  818.157605][   T31]  #1: ffffffff90a9eec0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780
[  818.176048][   T31] 2 locks held by syz.4.2784/6951:
[  818.181420][   T31]  #0: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  818.192175][   T31]  #1: ffffffff90a9eec0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[  818.201477][   T31] 1 lock held by syz.4.2784/6952:
[  818.207015][   T31]  #0: ffffffff90a862c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  818.253897][   T31] 
[  818.276871][   T31] =============================================
[  818.276871][   T31] 
[  818.314041][   T31] NMI backtrace for cpu 0
[  818.314059][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.314080][   T31] Tainted: [L]=SOFTLOCKUP
[  818.314085][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  818.314094][   T31] Call Trace:
[  818.314099][   T31]  <TASK>
[  818.314105][   T31]  dump_stack_lvl+0x100/0x190
[  818.314126][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  818.314144][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  818.314162][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  818.314186][   T31]  sys_info+0x141/0x190
[  818.314202][   T31]  watchdog+0xcb1/0x1030
[  818.314227][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  818.314258][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.314277][   T31]  ? __kthread_parkme+0x18c/0x230
[  818.314294][   T31]  ? kthread+0x13a/0x450
[  818.314310][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.314327][   T31]  kthread+0x370/0x450
[  818.314344][   T31]  ? __pfx_kthread+0x10/0x10
[  818.314362][   T31]  ret_from_fork+0x72b/0xd50
[  818.314379][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  818.314396][   T31]  ? __switch_to+0x800/0x10f0
[  818.314416][   T31]  ? __switch_to_asm+0x39/0x70
[  818.314435][   T31]  ? __pfx_kthread+0x10/0x10
[  818.314453][   T31]  ret_from_fork_asm+0x1a/0x30
[  818.314481][   T31]  </TASK>
[  818.554699][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  818.561593][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.572267][   T31] Tainted: [L]=SOFTLOCKUP
[  818.576586][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  818.586736][   T31] Call Trace:
[  818.590056][   T31]  <TASK>
[  818.592987][   T31]  dump_stack_lvl+0x100/0x190
[  818.597682][   T31]  vpanic+0x552/0x970
[  818.601661][   T31]  ? __pfx_vpanic+0x10/0x10
[  818.606159][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  818.612338][   T31]  panic+0xd1/0xe0
[  818.616056][   T31]  ? __pfx_panic+0x10/0x10
[  818.620683][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  818.626872][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  818.633019][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  818.639159][   T31]  ? watchdog.cold+0x1ec/0x234
[  818.643968][   T31]  ? watchdog+0xcc1/0x1030
[  818.648397][   T31]  watchdog.cold+0x1fd/0x234
[  818.652984][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  818.658796][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.663484][   T31]  ? __kthread_parkme+0x18c/0x230
[  818.668501][   T31]  ? kthread+0x13a/0x450
[  818.672730][   T31]  ? __pfx_watchdog+0x10/0x10
[  818.677445][   T31]  kthread+0x370/0x450
[  818.681521][   T31]  ? __pfx_kthread+0x10/0x10
[  818.686118][   T31]  ret_from_fork+0x72b/0xd50
[  818.690698][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  818.695801][   T31]  ? __switch_to+0x800/0x10f0
[  818.700476][   T31]  ? __switch_to_asm+0x39/0x70
[  818.705289][   T31]  ? __pfx_kthread+0x10/0x10
[  818.709915][   T31]  ret_from_fork_asm+0x1a/0x30
[  818.714741][   T31]  </TASK>
[  818.717833][   T31] Kernel Offset: disabled
[  818.722158][   T31] Rebooting in 86400 seconds..