last executing test programs:

4m28.688404836s ago: executing program 0 (id=1556):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
r1 = fanotify_init$auto(0x5, 0x2000000000002)
fanotify_mark$auto(r1, 0x61, 0xfff8ffff, r1, 0x0) (async)
renameat$auto(r0, &(0x7f0000000080)='.\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
r2 = fcntl$auto(0x3, 0x4, 0xffffffffffffffff)
mmap$auto(0x2, 0xfffffffffffffff1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) (async)
r3 = socket(0x10, 0x2, 0xc)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40050}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x24000035}, 0x0)
writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000300), 0x6}, 0x6) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

4m28.472303236s ago: executing program 0 (id=1557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x18, r1, 0x301, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090)

4m28.16689446s ago: executing program 0 (id=1559):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/veth0_to_bridge\x00', 0x400304, 0x0)
ioctl$auto_proc_iter_file_ops_compat_inode(r0, 0x0, &(0x7f0000000080)="203cd62a9caf98116e1974e286fe8cc2ae41596c26883754f4886cbfa9e6fb38851ac8a8f58ecf9ca61acc928e3849baa3f7ce3714e376c8c652f42b1f3133f10b0e3655817f044e24e35a679388dbacb939cafdf462a212bfba7b4f64aab4ecf6c9ba17ea25aba74c838249289f2b8abba74211")
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000)
inotify_init1$auto(0x7fff)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x2030009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$auto_SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)="351547")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r5, 0x4143, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0xe68, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
lseek$auto(r1, 0x7, 0x401)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)

4m26.91731498s ago: executing program 0 (id=1569):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
geteuid()
semctl$auto(0x1, 0x8fb, 0x0, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
wait4$auto(0x0, &(0x7f0000000080)=0x7, 0x8, &(0x7f00000000c0)={{0x80000001, 0x6}, {0x10000, 0x5}, 0x200, 0x3b, 0x6, 0x8, 0x9, 0x4, 0x1, 0xc3e, 0xffffffffffffffff, 0xb, 0x8000000000000001, 0x7, 0x40, 0x3})
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={0x38, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@mcast1}, @generic="84abcee2"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x0)

4m26.469408153s ago: executing program 0 (id=1571):
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0)
r0 = socket(0x18, 0x800, 0x2)
getpeername$auto(r0, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2502000000260109803c00d98008000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci3/force_suspend\x00', 0x101000, 0x0)
write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
eventfd$auto(0x8e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r4, 0x114, 0x271b, 0xfffffffffffffffc, 0x0)
r5 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
socket(0x18, 0x0, 0x9)
ioctl$auto(0x3, 0xae60, 0xffffffffffffffff)
r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x101000, 0x0)
fallocate$auto(r8, 0x2, 0xc5, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll$auto(&(0x7f0000000040)={r5, 0x6}, 0x6, &(0x7f00000000c0)={0x5, 0x9}, &(0x7f0000000100)={0x3}, 0x8)
ioctl$auto(r7, 0x4020ae76, r9)

4m24.981164837s ago: executing program 0 (id=1578):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)

4m9.532599374s ago: executing program 32 (id=1578):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010)

2m31.052091676s ago: executing program 3 (id=2090):
mmap$auto(0x0, 0x20009, 0x1, 0x40000000000eb1, 0x401, 0x7fff)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
connect$auto(0x3, 0x0, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d)
mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe)
mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8)
fcntl$auto(0x0, 0x407, 0x100000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x800}, 0xffffffff, 0x4008)
open$dir(0x0, 0x507180, 0x25c)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x88200, 0x1d3)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

2m29.825777778s ago: executing program 3 (id=2097):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m28.9489243s ago: executing program 3 (id=2098):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m28.122439767s ago: executing program 3 (id=2102):
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0)
read$auto(r0, 0x0, 0x7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/node/node1/meminfo\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000300)=""/126, 0x7e)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mincore$auto(0x4, 0x5d5a, &(0x7f0000000100)='(%\'$.\x00')
set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x21)
r4 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x2001, 0x0)
setsockopt$auto_SO_CNX_ADVICE(r4, 0x5, 0x35, &(0x7f0000000240)=')\x00_\xcf\xd0\xca4(\x05\x8aG\x06N\xadl\x91)\xb1\xa5\xe7],g\x1c\ar=\x1cQ#O\x16x\xcawi\xc7\x9b%\\\xb3\xc9-\xbf\x1e\xc1\x00\x00\x00\x00k2\a\x94`\xbc\xdd\x85\xcf\xda\xf5\xc30c\xf9\x9d&\xac\xe7\x83\x98e\x9d\xb0\xa3\x15\x99\xbd\xca4=1\x82}M\x93\x0e\xd5\xc3\x10\xd5\xc7\x9f\x15&\n\xcbh\xfa\x0e\x1f\xd5|\x1c\x1d\x11p\xdcb\xd3\xd6\xbd\xa5\x86\xb7?\b\x00\x00\x00r\xceL\xe4X<\xa5A\xdeSU\xdcJI\xaa\x16z<\x82\xfb\xd9\xf3\x934V$\xf2\x12\xba\xc8\xe7L\xec\x00,\xbd\xce\x9b\xe2\xc1#\xae\x8d\xbc\x9ajFo\xc1Q\xdc\xfb\xc6)(\t`\x0f\xf6\xf67$qG\xde\xb5\xba\xab\x90%\n\x1e\x9c\x9e\xf8\xe8\x9b\x10\xa6\xdc\xdc`\'\xb1(p', 0x7fff)
get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

2m27.196298108s ago: executing program 3 (id=2106):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m26.102639198s ago: executing program 3 (id=2111):
io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x7fff, 0x8000000400000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000)
r2 = socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0xe, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0xa04c0, 0x1d9)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r2)
close_range$auto(0x2, 0x8, 0x0)

2m10.73156569s ago: executing program 33 (id=2111):
io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x7fff, 0x8000000400000001}, {0x100, 0x1, 0x10000052, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000)
r2 = socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x1, 0xe, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0xa04c0, 0x1d9)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r2)
close_range$auto(0x2, 0x8, 0x0)

2m7.412980488s ago: executing program 2 (id=2190):
r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0)
r1 = socket(0x25, 0x1, 0x0)
sendto$auto(r1, 0x0, 0x0, 0x0, 0x0, 0x3)
r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
fallocate$auto(r2, 0x1, 0x2, 0x6657)
prctl$auto(0x40b90000, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0)
socket(0xa, 0x3, 0x87)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
ioctl$auto(0x3, 0x4, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
msync$auto(0x1, 0x9, 0xfffffff7)
write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000)
madvise$auto(0x0, 0x20200, 0x15)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
r5 = prctl$auto_PR_SET_MM_START_BRK(0x7fff, 0x6, 0xffffffffffffffff, 0x5, 0xfffffffffffffff7)
r6 = setfsuid$auto(0xee00)
setreuid$auto(r6, 0x0)
sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="b8040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25100000008f042e8072f423b2db43ece2316aa013796045a607d160e50496def7588ad2a6443470adafeaaace733026cdfc42e5ee234d1864ad1bd3d59a2be05e75e0a9e9c4f3a62c743d9c2f7e3e0c344ae824a28ea6ad507792c02d11df7d1865cbff08007500", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="fe889ff2f01e12505cd12249d39678b884c118817c12392fec9e15fbbb1cdba7953996da972f88c0dafd0f703e316271abae8ccd21770e3b262a1019f03b3871345674e771de0756b6b0137ad5d21cb489cbe8c57f82568dd8cacc5b4b398617514b03d1e947eaf22d05e34d63e7ba1ac906711e2567f6e959dea1399201709d4ed694d054669eebb93abb7c8baba7b884e4486fe6e5e9b68b5f220a344dd3af4aaa203ef6df43f9c8641f17644862d00eae77f9a1a40ccd9337cf71646735af02e2a090e7ef27360400ba8008002a00", @ANYRES32, @ANYBLOB="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"], 0x4b8}, 0x1, 0x0, 0x0, 0x4}, 0x20044010)
pwrite64$auto(r0, 0x0, 0x2, 0xfffd)
open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8)

2m6.390269603s ago: executing program 2 (id=2197):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400304, 0x0)
ioctl$auto_proc_iter_file_ops_compat_inode(r0, 0x0, &(0x7f0000000080)="203cd62a9caf98116e1974e286fe8cc2ae41596c26883754f4886cbfa9e6fb38851ac8a8f58ecf9ca61acc928e3849baa3f7ce3714e376c8c652f42b1f3133f10b0e3655817f044e24e35a679388dbacb939cafdf462a212bfba7b4f64aab4ecf6c9ba17ea25aba74c838249289f2b8abba742")
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x2030009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)="351547")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r4, 0x4143, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0xe68, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
lseek$auto(r1, 0x7, 0x401)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)

2m5.408946268s ago: executing program 2 (id=2203):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0)
ioctl$auto__dev_ioctl_fops_dev_ioctl(r3, 0x19300, 0x0) (async)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/022/001\x00', 0x20882, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, &(0x7f0000000100)})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
r6 = socket(0x1e, 0x2, 0x0)
getsockopt$auto(r6, 0x10f, 0x89, 0x0, 0x0)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000061c3f82acfef5df89703d6a6bf6542a1e8cf91ad50fae7e615d87ebfe977d5b593704bb6bd77b752ef0edfa4cc39c01b3c3b9becebad9cc6", @ANYRES16=r1, @ANYBLOB="230027bd7000fedbdf25090000000c00038005000180030000000400028008000100", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0)

2m5.164258884s ago: executing program 2 (id=2204):
mmap$auto(0xfffffffffffff3b8, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8004)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80582, 0x0)
socket(0xa, 0x3, 0x3b)
openat$auto_fops_u8_(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0xa, 0x1, 0x84)
get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0)
getsockopt$auto_SO_ZEROCOPY(0xffffffffffffffff, 0xe, 0x3c, &(0x7f00000001c0)='\x00', 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
r1 = dup$auto(r0)
ioctl$auto_BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000)
prctl$auto(0x3a, 0x100001, 0x4, 0x809, 0x6)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0)
lseek$auto(r3, 0x7fffffffffffffdf, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0)
pwrite64$auto(r4, &(0x7f0000000440)=',^\x00', 0x1, 0x2)
ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x802, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)

2m4.220378972s ago: executing program 2 (id=2207):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x40000040, 0x80000810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
fcntl$auto_F_SET_RW_HINT(r0, 0x40c, 0x2)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
ioprio_set$auto(0x2, 0x800000000, 0x8)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0xa)
mmap$auto(0x100000001, 0x2020009, 0x3, 0xeb1, r1, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3)
setreuid$auto(0x2, 0x87)
timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6)
unshare$auto(0x40000080)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce')
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto(0x3, 0x541b, 0x7f)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0xf)

2m3.321717343s ago: executing program 2 (id=2209):
setgroups$auto(0xa1, &(0x7f0000000000)=0xc) (async)
setgroups$auto(0xa1, &(0x7f0000000000)=0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m47.988524839s ago: executing program 34 (id=2209):
setgroups$auto(0xa1, &(0x7f0000000000)=0xc) (async)
setgroups$auto(0xa1, &(0x7f0000000000)=0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m24.645742361s ago: executing program 5 (id=2335):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyte\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x22, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045035, 0x0)
write$auto(r1, &(0x7f0000000100)='//\xf2\x00cu\x102\x18\xe2\fv\xe3Tr\xa7\xa9\v\xfd\xa7:\x83O\xabL\x88#\"#\xf8<;E-\xd7z\b\x00\x00\x00\x00@\x00\x00])@\xe30\x95>^kw\x83~\xbe\xa0jZ\xa4', 0x80000000)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
r3 = socket(0xa, 0x1, 0x84)
setreuid$auto(0x0, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000300)={0x2c0, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x13c, 0x3, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @uid}, @nested={0x11e, 0x104, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x83}, @generic="bc17056c99504779e8cad553e332edac62878baf020207fe71317f9d4e1aa3fabc9fa15cfee72bfcb910bf73294e651251be9208928fd3", @typed={0x5, 0x60, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xb6, 0x0, 0x0, @fd}, @nested={0x4, 0x4d}, @nested={0x4, 0x150}, @generic="962e3484ed1e3733cc1f8c3df0ed0b1222d09457c08839736ec232eed9fa144cf2c9360f362cf27c4e2455c9307840a856194dac5cb15e8ff0e4f0a43fde8d71a9a86fd7666a0b59ff24823b40f142e21bda7efcece6e11c7ba1ef03222b57813063db8f09b941b774362528fa051a537b0194c0a856feb5509a6a18e0a4d68149eb6b347e866bf430e1d01e48a45a8dd30090f9150c1d411e5fcd55917b6b7da7e05af5c639f8ce764752582240a91bb8397488e0ab55", @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x5, 0xee, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x39, 0x0, 0x0, @fd}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x7}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x160, 0x2, 0x0, 0x1, [@typed={0x2d, 0xb7, 0x0, 0x0, @binary="cacdc440873798dff23b04aede1539a8f0ca684cc2592eccc785fd3e490fb047b0959384694b97c211"}, @generic="cd4b5c7fb01cd01c1b09f7d02d2c9cbb994b384d0883f4f544739150f4dfb585584fcd21962005936a5caa09760891fe386364eef707ac24a20a5737b24e14e6bff8de08963c32b882983d0aba674e0f04889fc8312350d9e598085672c4551719fc5b3520fa7f5fe3edaba28974b6d2a9789cbf6bb48017f3ce8013cbcc0d9c51", @typed={0x8, 0x22, 0x0, 0x0, @uid}, @generic="9bae09ba3087a7be373ec81f9ca0dc00a3753e83ca58f0a86649bdf0a3b312050dd037eb9efb0c2cd0b3e95dddc50760887ec5d3a907de0cd5464cd7c5cc738fe586cffd81a3ad2dbd45240d23a0682399a623f5a141589ad2228bcacf89691c3417fe386298d0364b5864600bad0db857c670dd831aed1205718228a4e344304055aee5c9e6e4e538df51d91999861554264ba2309a1cfa9d1b7749e53c7c8351685c"]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd05, &(0x7f00000001c0))
getsockopt$auto(r3, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x19, 0x10d, "9bfcc642fb8222e81879d39dc6fd94f765ecdeabfd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e22}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000095)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0)
read$auto(0x3, 0x0, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)

1m23.421819134s ago: executing program 5 (id=2341):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff)
msgctl$auto(0x4, 0x1ff, 0x0)
socket(0xa, 0x3, 0xff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000005bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005b80)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
mmap$auto(0x0, 0x7, 0xe3, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x120, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xd}, @NFC_ATTR_SE_APDU={0xc1, 0x19, "cdddd4f05841e9f40691cd0b320d322efa54f58998e161aa6ac4482d5f42ad50b8ca092c97d02c187d8c3f572ab4a52a65fdf773858dbeb6bc3dd49fe1ff18189803cd2e7807dcccdf1799f2e627d5a16e6314ba3f30b2033a6dec680c23ef14ab5c0f8356521c2eb0104e63258e86604a8829db75c15166890d9604774b9c5b6d13785094db40500a4e06bccc7163a57b5a2a913fc72db42c39f9235e1535e2f1a2d38c6cdb30230a34398a2c055e68731f36ec60fd3df02b029cac22"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8000}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ':'}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, '/dev/tty12\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4080}, 0x20000841)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101800, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto_PTRACE_SYSEMU(0x1f, r5, 0x5, 0xffff)
ioctl$auto(r4, 0x4b46, 0x1)
read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r2, &(0x7f0000000000)='\x04Y', 0xfdef)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event\x00', 0x1, 0x0)
write$auto(r3, 0x0, 0x100082)

1m22.749233935s ago: executing program 5 (id=2343):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
set_mempolicy$auto(0x1, 0x0, 0x21)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0)
r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0)
write$auto_proc_pid_attr_operations_base(r3, 0x0, 0x0)
unshare$auto(0x40000080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="feff31bd7000fddbdf250c0000"], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)

1m19.763243632s ago: executing program 5 (id=2348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001500", @ANYRES32, @ANYBLOB="12000100898771f1c19f17790485908288470000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x1, 0x5, 0x3, 0xffffffff, "76f006e37ceb76bfbde3245bee4c6625cb0662ccc64e124db4fedbdd228b9ced12ac206f688d4858a0b558db"}, 0x1, @integer=@value=[0x2, 0x7, 0x9, 0x4, 0xffffffff, 0x2, 0x7, 0xf52d, 0x8, 0x77, 0x4, 0x1c2, 0x1, 0x0, 0x9, 0x3, 0x8, 0xfffbfffffffffffd, 0x6, 0x1, 0x1840, 0x1, 0x40, 0x5, 0x9, 0x3ff, 0x4, 0x2, 0x3ff, 0x9, 0x101, 0x6, 0x3, 0x0, 0x1, 0x5, 0x800000000002, 0x7, 0xe, 0xffffffffffffffff, 0x1000, 0x81, 0x735, 0x0, 0x81, 0xfe, 0x100, 0x4000, 0x10000, 0x1, 0x100, 0xec00000, 0x185d, 0xe, 0x46, 0x2, 0x1, 0x6, 0x0, 0x6, 0xfffffffffffffffa, 0x4e6b, 0x7, 0x7ff, 0x5, 0x7, 0x7, 0x5, 0x27d64140, 0x1ff, 0xffffffffffffffff, 0x4, 0x7, 0x3, 0x1ff, 0x81, 0x5, 0x2, 0xfffffffffffff800, 0x9, 0x2, 0x208, 0x10547, 0x7, 0x100000000, 0x2, 0x6, 0x7fffffff, 0x5, 0x400, 0x1fd, 0x8000, 0x80, 0x0, 0xf46, 0x2, 0xfffffffffffffff9, 0x8000000000000000, 0x35, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0xe4, 0x8000000000000, 0x7d5, 0x9, 0x7ffffffffffffffc, 0x4, 0x0, 0xfffffdffffffffff, 0x7, 0xfffffffffffffffd, 0x6, 0x0, 0x5, 0x4, 0x40000000000000c0, 0x1400, 0x2000800, 0x6, 0x571a, 0x3], "6b54dd2e739e95a6f217b84988b4581576aaed11b340e4707992930f9a930325903b0e132daa477100a1107a85f3303896b5ec1e61dfb9c0e2698c93ebcd3e1508428d544319376037341d65bb6fb47a002356928a53d1534d8b947cbfcbfba7c7c74e86dc40dc6bca83c523e1e38c31cabf433dd0e3bc1b1b3128e5cf49b23f"})
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r3)
mmap$auto(0x0, 0x20049, 0xe2, 0xeb1, 0x405, 0x8000)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x54, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008000100", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket(0xa, 0x2, 0x3a)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r6, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100)
sendmsg$auto_TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18120000", @ANYRES16=r5, @ANYBLOB="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"/4626], 0x1218}, 0x1, 0x0, 0x0, 0x881}, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r3)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040029bd7000fedbdf256200000004006c0006001200060000004400f200c51a5aaf996859c42c83e763bad13cf4ae5dc5448b6012b530393002b04ad8f5fbe512bdc282406f2d26ffa952cd43fea6fde197f2448b8bb46507c9786a2b6e"], 0x64}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0)
sched_setattr$auto(0x0, 0x0, 0x7b)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r8, 0x0, 0x400018)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

1m18.608127678s ago: executing program 5 (id=2352):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m18.376917698s ago: executing program 5 (id=2353):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/4096, 0x1000)
io_uring_setup$auto(0x86, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r5=>r4, 0x7, 0x6}, 0x4, 0x100000)
r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x38, r9, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x12}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r7)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
read$auto(0x3, 0x0, 0x200000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0)
r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0)
r12 = getpid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
process_vm_readv$auto(r12, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0xc0ce1, 0x0)
read$auto(r11, 0x0, 0x20)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)

1m10.044051876s ago: executing program 6 (id=2370):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async)
timer_create$auto(0x9, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080) (async)
socket(0x23, 0x5, 0xfd)
write$auto(0x3, 0x0, 0xffd8)
r1 = getuid()
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, r1, <r2=>0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"})
fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', &(0x7f00000000c0)="255a10a413f0b67eb46a5d3ab4c01713457bfd2f9893be1834f04bb39b83c826d483cd28aa0223fcd00a33f52ced396dce3ce3c5d962eac325dfae85e14f6d76f5e97d45b15420b323237dcd47c6261b1f978ef6c6766049bc1fa488100a9d99c4c602f517b76ce1a04867276011829e5b95d0cf974bcce319acdd", r2) (async)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) (async)
process_mrelease$auto(0xffffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
write$auto(0x3, 0x0, 0x100082) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x2, 0x1, 0x106) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.10/usb29/bDeviceProtocol\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) (async)
bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) (async, rerun: 32)
ioctl$auto(0x3, 0x80000541b, 0x38) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async)
read$auto(0x3, 0x0, 0x7fffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64)
madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64)
ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f00000004c0)="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")

1m9.584604234s ago: executing program 6 (id=2371):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r0, 0x4004550f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x529081, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
read$auto(0xffffffffffffffff, 0x0, 0xb4d3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x15, 0x5, 0x0)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
write$auto(0x3, 0x0, 0x800)

1m9.084297762s ago: executing program 6 (id=2375):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/self/pagemap\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/firmware/acpi/tables/APIC\x00', 0x0, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0xd, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
pipe$auto(&(0x7f0000000000))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_key\x00', 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
socket(0x2, 0x1, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0)
socket(0xf, 0x3, 0x2) (async)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc0101, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x3, 0xff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
pidfd_open$auto(0x1, 0x0)
socketpair$auto(0x1, 0x4, 0x10010000, 0x0) (async)
socketpair$auto(0x1, 0x4, 0x10010000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)

1m8.700398096s ago: executing program 6 (id=2376):
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x206, 0x0, 0xd1, 0x84, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x10000000000e983, 0x3, 0xeb1, r0, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0)
prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto_ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x3})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000017c0)='{,\xf8\x94\xc0j\xbd\x1d\xc6\x1f\xf5\xab\x9b\a\xe5\xd8,\xa1*\xb6\xef\x95\xaeM\x1a\xe8\x12\x01Q~\n\x01\r!\x05\xc0\x9b\xce\":\xbf8y\xc0M\xc9>\xef\xb6\xb7U\x92\xa3\xa0`Ho*\x96\x19\x81\xa9\xb7\x19j\xb6\x026\xe6t\x1cj%of\xad\x87 \xbc6\xfeX\x9e\xb8\x0e\x1c\x19\xc6\xdc4\xc8\xeb}\xe0\xc9\xd57\xbdr\f\x18\xf0\xa5\xe0\xa8fT\xec\x93\xfe\xdf\x82\xb1\x02\xea\xb8w {\x9a\xa8\x95\xf8\x8c\xa2t\x88\xcc,\n\x8eO\xb1{\xc9\x85f\xb1\'2\xcc[\'\xe0y\xea\x90\x04\xa7\xbe\xf5\x88\xb4\x821\x9dp\xca\x9f\xe1\x80ol\x86\xd0\xee\xd6\xfb\xce\x97\x11\xae6\xbe\x98d\xd5\xae\x7f4n\xab\xce\x89\x9eR\xbb\xc6\x8e\xe8\xefL=\xf3}\x15\x1f\x9d\x02\x8c\xea\xdd\x82q\xb2V\x87\xfe\xd2\x87\xbb\x11\xcb(1', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x6)
select$auto(0x6, &(0x7f0000000000)={[0xb, 0x4, 0x2, 0xa, 0x2000000000ccf9, 0x9, 0xffffffffffffffff, 0x20003, 0xb, 0x1, 0x4000068, 0x3, 0xfffffffffffffe91, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x9, 0x8, 0x80000004, 0xc, 0x1, 0x8fc, 0xb7c, 0xe36c, 0x9, 0x0, 0xfffffffffffff954, 0xfffffffffffffffc, 0x200000000000fff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x9, 0x7, 0x7, 0x6, 0x2, 0x8, 0x14, 0x9, 0xfffffffffffffff6, 0x8, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4)

1m7.297116514s ago: executing program 6 (id=2382):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
sysfs$auto(0x2, 0x27, 0x0) (async)
madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0xc7) (async)
socket(0x2, 0x1, 0x106) (async, rerun: 64)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop11/io-timeout-fail\x00', 0x3c7181, 0x0) (rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (rerun: 32)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async)
r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)
getsockname$auto(r0, &(0x7f0000000180)=@rc={0x1f, @none, 0x4}, 0x0)
close_range$auto(0x2, 0xa, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
socketpair$auto(0x9, 0x2, 0xb, 0x0)
r2 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r2, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9b) (async)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x11) (async)
setsockopt$auto(0x3, 0x113, 0x87, 0x0, 0x12) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103742, 0x0) (async)
socket(0xa, 0x801, 0x106)
getsockopt$auto(0x8, 0x6, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff)
openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m6.096114564s ago: executing program 6 (id=2385):
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x739c80, 0x0)
socket(0x11, 0x80003, 0x10000)
socket(0x10, 0x2, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x2, 0xebcb)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(r2, 0x0, 0xfffffffffffff6f0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/hwsim/dfs_simulate_radar\x00', 0x8346, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r4, 0x0, 0x20)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
setreuid$auto(0x7, 0x0)
sysfs$auto(0x2, 0xffe0000000000000, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x3, 0x0, 0x106, 0x0, 0x6c, 0x5}, 0x3}, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

1m2.854118004s ago: executing program 35 (id=2353):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/4096, 0x1000)
io_uring_setup$auto(0x86, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r5=>r4, 0x7, 0x6}, 0x4, 0x100000)
r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r4)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x38, r9, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x12}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r7)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
read$auto(0x3, 0x0, 0x200000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0)
r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptybd/dev\x00', 0x2440, 0x0)
r12 = getpid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
process_vm_readv$auto(r12, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0xc0ce1, 0x0)
read$auto(r11, 0x0, 0x20)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)

50.941628753s ago: executing program 36 (id=2385):
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x739c80, 0x0)
socket(0x11, 0x80003, 0x10000)
socket(0x10, 0x2, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x2, 0xebcb)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(r2, 0x0, 0xfffffffffffff6f0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/hwsim/dfs_simulate_radar\x00', 0x8346, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r4, 0x0, 0x20)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
setreuid$auto(0x7, 0x0)
sysfs$auto(0x2, 0xffe0000000000000, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x3, 0x0, 0x106, 0x0, 0x6c, 0x5}, 0x3}, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)

12.405006257s ago: executing program 4 (id=2489):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x400304, 0x0)
ioctl$auto_proc_iter_file_ops_compat_inode(r0, 0x0, &(0x7f0000000080)="203cd62a9caf98116e1974e286fe8cc2ae41596c26883754f4886cbfa9e6fb38851ac8a8f58ecf9ca61acc928e3849baa3f7ce3714e376c8c652f42b1f3133f10b0e3655817f044e24e35a679388dbacb939cafdf462a212bfba7b4f64aab4ecf6c9ba17ea25aba74c838249289f2b8abba74211")
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), r1)
sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x1c, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7fffffff}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x5}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0xfffffff9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
mmap$auto(0x0, 0x2030009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)="351547")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r4, 0x4143, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0xe68, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
lseek$auto(r1, 0x7, 0x401)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
mmap$auto(0x0, 0x6, 0x0, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0)

11.126789874s ago: executing program 4 (id=2492):
ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000003c0)={0x6, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xae, 0x9, 0x0, 0x1, [@generic="7e2fb7c87889f3cd3a893fb67aecae521e35", @nested={0x95, 0x47, 0x0, 0x1, [@generic="aa2e8998cce3beaca73bee61b2f72829480bdc54ef3c772d8835311bb1e5d7599d57f05e60f26abf12a9fc2770a2c615357b356b1998f9b41b6a58c1136f6661d54cbdfea757657da231e75777be3b0f1f9b41e101a8b282d801293ab4383a79bfc552bc8c01982f2f99614745cf2c0c6ca159cc99cd3d88c49d882a56fa3adc21a8759e251a18ee3b", @nested={0x4, 0x14a}, @typed={0x4, 0x12f}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40081}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r4 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00'})
socket(0xa, 0x3, 0xff)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8)
landlock_restrict_self$auto(0xffffffffffffffff, 0x1)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf)
bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
clone$auto(0x100c, 0x7, 0x0, 0xffffffffffffffff, 0x480000001)
getpriority$auto_PRIO_PGRP(0x1, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x49, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x2070bd26, 0x25dfdbfd, {0x1, 0x0, 0x300}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x010\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c855}, 0x4880)
epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000380)={0xffffffc2, 0xffffffff00000001})
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4040800)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, r9, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x812000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xe226}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '@\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004)

10.592268311s ago: executing program 4 (id=2494):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

8.889985014s ago: executing program 4 (id=2496):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000003e80)={0x1cec, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x100000001}, @generic="3a798a5c523b456a0aef4c0cf8dd2130de383ede49307d5a9508777c65902180a7ef5bf8c7498ee0"]}, @NL80211_ATTR_MLO_LINKS={0x1c94, 0x138, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x88}, @NL80211_ATTR_QOS_MAP={0xe4, 0xc7, "d7671e423d06970b37d14cca10b7ca13b294c6cbcc628db03913ad8131a895473b452fc4468517105a062c5c2140b7fef5764c1e5d09a8c81c8eb138d3f582f67010e213e8ce2cb1aa38fec6d1a98bad210270923fdea517ec4fd1ef14152d71c7edf091cc620b3e9a241b456a7e6958353a14ec51326ad4d17177b29d6d8ca5ef11caca751ed7dba43680d22d6d83d640bfcbacfa8ba42b913e0225081e565a1a0fa1b8205f049bfd81f59d767660a9cdaf102415c49d2edd07ad55015e88b61a4871609e1d3ceeb64f56df8556ad9e2365e55161e6205da03a2b55c6d5f5db"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xff}]}, {0x12f0, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x89, 0x1f, "6c6c0d1bec06855f0d5d49be0b87da1ef0e765deb937b67e33601ddff2b1693c207205531bba10b6b6bb12f217507d1e6cee47293360bda4de0d556766f7159c5e5357de9e134fea5059da9ee1ebbdf3759fdc5734ab2d170a0b65e64c58c3ef16692d5ea6d00dfaa5118a1b4fa2a891c198c633f44ed23ac0ebc0b5b9c6ece96c0aacf688"}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_TX_RATES={0x11c8, 0x5a, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @u32=0x9}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@private1}, @nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd=r3}]}, @nested={0x119a, 0xd0, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="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", @typed={0xb6, 0x9e, 0x0, 0x0, @binary="bc5c8d4825430f1ebb33fd157f2de4d834a04f43d05819f1df61fdb81f69d4408db9f3dfbdf95d3f3910680698be310c554162394a7c8c01e73964af63aefd35a66bd19fed8d0b033c873ac1c75c8cd88c7ef8b0f909913ba74be126210215f550f30ff3829bec9354303589a9949c56d4b897c8e8593f8e0818db56d0cb646748e094560a4d53a6fa62eb6b3b6e69703da7bd8f135962bbb3a0f58adfc6c78a03f1d39d693322e4e3e533bb7c91538ee83d"}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x2}, @generic="1846b4b324bf99457bb4ecfb4dd3ca620f36bdec9962ba453d19ad39382e0a72138f2610106432034e3289466f60040d8bfc2fcc99e59415c4a55225d2912f1c8875d3dc4af9c4118a0d3bc40391be3f424a7ac06df76d599652e5518518668c609861db2a6569f072415f3395578a64dd4c812d8af38a5d757b2ac85f13097dd848147816c0e3d9fae576cfb1d453b80af089c3018e96b94c5da86b4012bb39f5bc03d7b89d6f7a0a2026461514f6a4d797281dd6b65eb9ea63"]}]}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x913}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_EHT_CAPABILITY={0x67, 0x136, "2457a5623f29c2f7a6202470e1e52e3a457fd3d388c81525c67e2679da9c0e16bb289db1f5ec9c896ef52fb1f8b9abe31dd32a6034d4aef344b08469120fe867fa06b0d6d28a4c2e93ad127953430ea2a5d6fef87f4d67074a4479391032ea75761e14"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}]}, {0x84c, 0x0, 0x0, 0x1, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xd0}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "b2ffb84c3e1a9140719e2b4d"}, @NL80211_ATTR_FILS_NONCES={0x9b, 0xf3, "3e525610986750b4f3441b5c5b41405cf284bc096da5e42fad4a705f96a8271de60aac8f66a01cded4f0d21342d6ac79ada4b2f378dd1769e691622f34985a838dbb97912883067310c4938208c43ead399ac3a51882808d05d4f1d164f7c0b08a354eebbb583cadfb371a79417a93782964f47cca9ce450d11201d90f96a8724715af73ad3d37a741b4f4c007e4b24b17af4d71fa8b3f"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6c2}, @NL80211_ATTR_IE_ASSOC_RESP={0x743, 0x80, "c6bb4a63e71b92bc4d1218db02a56ae2a7d45b64d718c4508a3ac19dfe94e61ce45b389c62873e8f80da29c23aa7658f3a948b5a70c94798dc06194afeb20078539438eecc77c602f7c422b2eda10d75f2da3fc0d6c68fdf5d4f7fc343bfd1b59348fa2f81c7936d1eeff62c7c145a4569edee8a5ec8d2c661070232b76f3ce80f73f155e7696760cb1986d3fab331b942582ba9620c110f80dc58e1cd8aab46c5f786befc37d00ee82184b3e17bef3a8cf396114117f54d13d965fc5b7a737ca4a3a5b8b0cba013f94f795212880aa4a35a8cfcb388342d3cac1a3916ef71f85916ed053b7f0a6f33862a0cf7210bf9ddae37be9950c3391be53dd2033a5d2e18ec6641f098b0893acae47fc0b97ccc2189b3f0830b8c74a17b4c5e5ad678f2abbcf922e2fe929eec99517dc59b45dc0980e4a692913836492cbe469565079964e887cf0bf5335aa8c56d1351ae88d2039fc3cb9cdef019460566c789eb998dc35ae18a054fff9f1148c4f5e2588003a314db168a631350e04cc4c52e43eda3dcb1a3a08b42f1b42012c03a7f43c6844d32dd58e42d749220c3c1eac7c36cd2cbf8bbdea91b595029111cca80f9d783e0f06bc2563b89271e8088d467d4c00a97e735d66e349bb257817f4a2b08c5e3dc3a4bcdd596d64da25ff09530e679ddb8e5313876612de620b48931a3fd80d4278eae4889c83ba1015b0a308007e59f7ce573766cd2eb86de3367bd5f090f4eff7de427f17acdff74f523212cbcf1974662034669ad7080f16c1830af2be979ccba52a295291442129ad789250650399d106596f2a94186a843b7fd50dd27bcd71db55ec576f061db042e812edea64f8e4e03aae72f9b3d2b5ee0686df3ce40611ebeb9a2c99f8adad3e5c28ac875655edcb03d9dc8f3942b0a0eff6c94d22737680b1469d3dbcdba3a5dbeec7fbb19188521a9cfab2f6c574376ae8bd4385fad0bb892a439fab69fa8d4608a52ae6bccda1fec89e9a8a81714ad04e9c21a29f88572939f40fafcba59b336b967f0d456cd8f33373df7a1672932eb4961a0bb35e48f93448870adc3799557bb4e4345cbae4cab7f59d623c2850febac7042729312f7b48e6220ff60432fc237d285b3f1a53595f2928dc64eed4735aa376194f2d25eb6ce9edaac2c0ba62f1f20234290babf8d219f9947c93da6cfaa31002de8d5cfffe7b6e35c6be516bb38ad0c40a93d5ea5f676ff2a2bc084ef3aababc7d8423f87b673a33db977bd3a3fe6e679fd5b40a1b835678c232c51aa5ecfa57ee5438342cfd6ff3cc0e950a464742e3610bf37160a9d2d8492284eae6d7552beb9dc51bd88bfc47671bd0bff9a2562fcba8f95bde1a4d90cff649eb7b80a55527fa8f1a94f9d3a89f4dbdadc48d665f6db9c25fed691f51b0f7a93327980ec3d0634257460acd017652813f9aeb5346bb4f1c238af9dd99abfdf43165093d223363771a3e60980f5a44b5a76c06c7ad95ac8e865e829157780df8d5bcbfcb661ee3d730b2bc9df30263f83781b23151979230ad518fc85fb61b63d4a2da0f44bd03e0249565d409aa3d36e27d690d17c135b4c3cd2d33cc290d3a376c447fc0bbd8e65501fc47574204ee1b0ac2c42f129db88a83427f495aad2a86c662860b2334ffdd6cbcc777a26fab577b1ae09438f4bda76ec115ca87f77e7a1828b310554c51dfd8dfafe0888c1aa7c8c13c4e10dbc8739ec23fdefd5522678f36866c31a78483887812eb3dfe42728802e6fb42f30e68e724231659303da47701afe9d5ee6b18fd1b15faf556c3880b2359904c328ddf51f9018275adbd79fcee615e2776c836672aa547843943fce68ffff9ffe5523fa8c8fb2970a51504338da96725fcc5b88a6e326cfd1341647c3bbd10d2e7e70aa48236b465a582accdabcdf4afd09b74f5d88aa4874f70df99970e6c0fa1dea82a32d810320b2bf1a971902648e0a10da9ef2d29d06bf95db494afbeeb0f32358e3ad8bc46268848be80dc034c4889257470fd420a15002c88d8a6af06df3dd1f75651340b7cdc960a8b2dbf1185e4bc12cd06ec88e96321f4e8ecbda43b36b14748d252ac80cb1e52738db9c234c433dac9060b767928c655fd9e2631f5b1a016eee0e51e0308f85f825ac55f7b273b665727ef24fe4a73fbc9e510e5c96fdbb2dfe36f2d8a41ba6f505f453e114e566b5e40689e465da72c530e2cf710c2a650a4bb653dde24bf8d8bd527f47efff7297c618a773e42e98199ed1710f85ca31199bfe3649656790c7aff9d84154f2d156183ad16f6d52d8820f27933cc04166ed36226928b80d5e8d6c941cf76bc0d08c2322254e7a29808712f25d2d7770f904b36a537d941b61d8ffabe92b23fe4f21c3deb103e5e1a0aefd273a58cf5daa53cd0a35d6de9b2f6882d63a2f6f3c347cb5ffb71425f5a0f07a2eee4d659b1d956892fe9b310cf7664b9a8968a8048bd8ea014679aabd5d116a290478abf57865a0260b8a10fff38dbf8c15b31c32e5cde569344c95a7413301693ca1d1285fc7c11bfe6936852acbeda4a6d479948ab52c07bfb38221a8b9b9e6010f684ed28ab3d4dbdc0bdecedb2bf4fd47ba45b1e738ff9537040acb264872"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x34, 0x3, "58c0159be3784b54a282e51ac561b4bd001f4a12616f3f95ac470d21bf97f19e00c027b41041af66fd6786755e8c0b92"}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x5d}]}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1cec}, 0x1, 0x0, 0x0, 0x746cfe27e784c8fa}, 0x880)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0)
ioctl$auto_RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}})
close_range$auto(0x2, 0x8, 0x0)
fstatfs$auto(0x3, 0x0)
ioctl$auto(r4, 0x4b66, 0x1)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r5)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x51)

8.245314885s ago: executing program 7 (id=2497):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bdff8f000000000000001b9900040008000400038004001af530c926e8442a16203185e05af28b3fefd8add918f812eece97eeb0f7c5967011dd00499d622c318926bc9d00f993d5e91218ea82b89235d999f45b0f367333f8542c1e00aa43083240652a310d5f900a07bd6bb86660f3ca643ccb772b218d4aaafbef75bb20e5a31d37f64410e886e4181a1902d8e1eab7900d98290df0754aaa161f"], 0x20}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf25020002"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
mmap$auto(0x0, 0xa00002, 0x400002, 0x40eb1, 0x602, 0x10001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2})
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x17, 0x0, 0x8)

8.151247585s ago: executing program 8 (id=2498):
r0 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, r0, 0x8002)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x2)
pipe$auto(0x0)
writev$auto(0x1, 0x0, 0x1)
fstat$auto(0x2, 0x0)
readv$auto(r0, 0x0, 0x4)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4c810)
mmap$auto(0x0, 0x8, 0x7, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xc)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, r0, 0x8002) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) (async)
ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x2) (async)
pipe$auto(0x0) (async)
writev$auto(0x1, 0x0, 0x1) (async)
fstat$auto(0x2, 0x0) (async)
readv$auto(r0, 0x0, 0x4) (async)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4c810) (async)
mmap$auto(0x0, 0x8, 0x7, 0xeb1, 0x401, 0x8000) (async)
socket(0x2, 0x1, 0x106) (async)
listen$auto(0x3, 0x81) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xc) (async)
close_range$auto(0x2, 0x8, 0x0) (async)

7.240371451s ago: executing program 8 (id=2499):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) (async)
socket(0x2b, 0x5, 0x20) (async)
mlock$auto(0x112, 0x80006)

6.728582957s ago: executing program 8 (id=2500):
openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r0, 0x0, 0x80000001, 0x0)
prctl$auto(0x9, 0x40c94ace, r0, 0x7, 0x8e9)
openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
io_uring_setup$auto(0x7, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)

6.661644907s ago: executing program 7 (id=2501):
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r0 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1)
prctl$auto(0x3e, 0x1, r0, 0x1, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000014c0)={0x3, 0x3000005, 0x1, 0xffffefff, 0x3})
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0)
ioctl$auto_FIGETBSZ(r3, 0x2, 0x0)
madvise$auto(0xfffffffffffffffe, 0x240007, 0x17)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
unshare$auto(0x40000080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8040)
r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r5, 0x4b72, r6)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006)
signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)

5.42690075s ago: executing program 8 (id=2502):
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x206, 0x0, 0xd1, 0x84, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x10000000000e983, 0x3, 0xeb1, r0, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0)
prctl$auto(0x80, 0x6, 0x0, 0x27c, 0xffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto_ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x3})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsconfig$auto_FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000017c0)='{,\xf8\x94\xc0j\xbd\x1d\xc6\x1f\xf5\xab\x9b\a\xe5\xd8,\xa1*\xb6\xef\x95\xaeM\x1a\xe8\x12\x01Q~\n\x01\r!\x05\xc0\x9b\xce\":\xbf8y\xc0M\xc9>\xef\xb6\xb7U\x92\xa3\xa0`Ho*\x96\x19\x81\xa9\xb7\x19j\xb6\x026\xe6t\x1cj%of\xad\x87 \xbc6\xfeX\x9e\xb8\x0e\x1c\x19\xc6\xdc4\xc8\xeb}\xe0\xc9\xd57\xbdr\f\x18\xf0\xa5\xe0\xa8fT\xec\x93\xfe\xdf\x82\xb1\x02\xea\xb8w {\x9a\xa8\x95\xf8\x8c\xa2t\x88\xcc,\n\x8eO\xb1{\xc9\x85f\xb1\'2\xcc[\'\xe0y\xea\x90\x04\xa7\xbe\xf5\x88\xb4\x821\x9dp\xca\x9f\xe1\x80ol\x86\xd0\xee\xd6\xfb\xce\x97\x11\xae6\xbe\x98d\xd5\xae\x7f4n\xab\xce\x89\x9eR\xbb\xc6\x8e\xe8\xefL=\xf3}\x15\x1f\x9d\x02\x8c\xea\xdd\x82q\xb2V\x87\xfe\xd2\x87\xbb\x11\xcb(1', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x6)
select$auto(0x6, &(0x7f0000000000)={[0xb, 0x4, 0x2, 0xa, 0x2000000000ccf9, 0x9, 0xffffffffffffffff, 0x20003, 0xb, 0x1, 0x4000068, 0x3, 0xfffffffffffffe91, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x9, 0x8, 0x80000004, 0xc, 0x1, 0x8fc, 0xb7c, 0xe36c, 0x9, 0x0, 0xfffffffffffff954, 0xfffffffffffffffc, 0x200000000000fff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x9, 0x7, 0x7, 0x6, 0x2, 0x8, 0x14, 0x9, 0xfffffffffffffff6, 0x8, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401})
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0xfff, 0x0, 0x0, r2, 0x80000000}, 0x6d4)

5.426063966s ago: executing program 4 (id=2510):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(0xffffffffffffffff, 0x541c, r1)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0x3, 0x0, 0x3)
r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

5.07277568s ago: executing program 1 (id=2503):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0)
write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81)
arch_prctl$auto_ARCH_SHSTK_DISABLE(0x5002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2$auto(r0, r0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500180001000000080017000800000008001200cf06a6bb"], 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
r4 = pipe$auto(&(0x7f0000000080)=<r5=>r1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000e0, 0x40eb1, r5, 0x300000000000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x0, 0x2000000005, 0x6)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_HPET_IRQFREQ(r6, 0x40086806, &(0x7f0000000040)=0x2)
sendmmsg$auto(0x3, 0x0, 0xff, 0x7000000)
membarrier$auto(0xffc, 0x1, 0x8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0)
socket(0xa, 0x3, 0x3b)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/pages_shared\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001100)=""/4106, 0x100a)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000002c0)="8318a3ee695913142d8b87ed7e761f751a8179b793283d754530cc4c2e61893977344d51ebf611f57ab2947f2fe98407db256fb2357ef1bd7028097f4e122a6e3c36885ee94d2396c7bb1be3e18b5b14086a9b1e5f57ba609cfe3b14c30dcf3ee1fb5c4d5b6c476de2ed9f6fcdcb37a48017cab253d6c9a32be6bd0102dfed3778add10816e6a27f590f6765388a1f8c3bd0a653b94a18edc9ba150b23123b0276cad544da32b6508ecd37be4a81c959a8cdce0a03dcfc6de8c874cac4288e3fc4f6bddb", 0xc4)
r8 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0)
read$auto(r8, 0x0, 0x1f40)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
write$auto(r0, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5<q\xdf\x95\x10O\x19\t\x99u\x06\xb4\xfe\x13\xf2n\xae\xb3\x85^\x94;\x8c\x16u\x9c\xbd\xb7\xdf9\xa9\xf8)\xb1\xb6\xb5ua\xe2\xb1T$\x93\xdf\xeawv\x02\xddi\xef\xecb\t~P\xb0bH\x13\xef\xa0\x82f\xeea', 0x3)

4.114387269s ago: executing program 7 (id=2504):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/shm_rmid_forced\x00', 0x581643, 0x0)
r0 = socket(0x26, 0x800, 0x0)
dup2$auto(0x0, 0x3)
mmap$auto(0x0, 0xe00006, 0x2, 0x40eb1, 0x602, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x17bdc2, 0x0)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r1, 0x541c, r2)
writev$auto(0x3, 0x0, 0x3)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000600)={0x0, 0x6, 0x9, 0x401, 0x7, 0xffffffffffffffff})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0xfff, &(0x7f0000000000)={0xff, 0x6, 0x7, 0x0, 0x1, 0x6, r0, [0xcbf, 0x4], {0x5, 0x9, 0x7, 0x2, 0x3ff, 0x101, 0xb3, 0x1, 0x7}, {0x4, 0x6, 0x1, 0x80, 0xe89, 0x200, 0x4c78, 0x8001, 0x4}})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x7, 0xd, 0x3ff, 0x6, 0xe, 0x2000000000000002, 0xffffffffffff0000, 0x9, 0x1, 0x2, 0x3, 0x8627, 0x9, 0x20000800002, 0x4, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffec, 0x2a17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.026001783s ago: executing program 4 (id=2505):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0x5c8)
ioctl$auto_TIOCGDEV2(r1, 0x80045432, &(0x7f0000000180))
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
socket(0x2b, 0x1, 0x1)
r2 = socket(0x2c, 0x80003, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r2, 0x0, 0x40)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev7\x00', 0x141083, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop6/rqos/wbt/id\x00', 0x101a00, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0xd, 0x8fd6, 0x948b, 0x4, 0xe, 0x100000000003, 0x3, 0x62, 0x80000001, 0x40000000000007, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
madvise$auto(0x0, 0x10, 0xc)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)

3.884925875s ago: executing program 8 (id=2506):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket(0xa, 0x3, 0x3b)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7})
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r2 = socket(0x28, 0x5, 0x0)
connect$auto(r2, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56)
mmap$auto(0x0, 0x2020009, 0x401, 0xeb1, r1, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x7)
bind$auto(r0, &(0x7f0000000080)=@isdn={0x22, 0x7, 0x0, 0x6, 0x5}, 0x4)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5)
write$auto(0x3, 0x0, 0xffd8)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)

3.305680544s ago: executing program 1 (id=2507):
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async)
sysfs$auto(0x2, 0xd, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x23, 0xc, 0x2008, 0x9, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3) (async)
socket(0x1d, 0x1, 0xe4ac) (async)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
write$auto_safesetid_gid_file_fops_securityfs(r1, 0x0, 0x0) (async)
fsmount$auto(r1, 0x1d12, 0x1)
r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async)
socket(0x29, 0x5, 0x0) (async)
r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$auto_EVIOCGMASK(r3, 0x80104592, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0xfffffffffffffffd, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) (async)
r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r5 = socketpair$auto(0x201e, 0x2, 0x52fb, 0x0)
ioctl$auto(r4, 0x5609, r5) (async)
socket(0xb, 0x80000, 0x8000037) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x9) (async)
msync$auto(0x0, 0x2000000005, 0x6) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
mount$auto(&(0x7f0000000140)='ip6gre0\x00', &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='/sys/kernel/security/safesetid/gid_allowlist_policy\x00', 0x6, &(0x7f0000000240)="32ef2c5dbcbeafdd2da08ce7bb251c887ca932e5d058ea9569a7000a342502af4fd90c973ea4ef46")
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
read$auto_lowpan_control_fops_6lowpan(r2, &(0x7f0000000080)=""/12, 0xc)

2.720872872s ago: executing program 7 (id=2508):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare$auto(0x40000080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r1, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)={0x20, r2, 0xbb484b3ccf0b22b, 0x70bd2c, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r5)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r6, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000000300)={0x400, 0x1, {0x3, 0x8cf, 0xe, {0x9, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0xb7}}, {0x7, 0x8, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x4, 0x69, 0x3, 0x1, {0x30, 0x4, 0x0, 0x800}, 0xac53, 0x0}}})
r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r8, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="03000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf25030000001800018014000200676500"/38, @ANYRES64=r8, @ANYRESDEC=r0, @ANYBLOB="072d3b83d6294d446161d26fa7d13305b0cb269377735e4ea7411608b679f27b14fca958f17cfb65a308710fcefffdec0ffd2dcfd173646446e5506a873e4270926d67a80a380f683cf9e3ee695d716db2d541af36f4b318b8", @ANYRESOCT=r4, @ANYRESDEC=r6, @ANYRES8=r3, @ANYRESOCT=r1, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="5474a78e08dae3e160229ccf4a31ff160bbff60fa6e02fa6931e6aded1c8cd6c1060864887a3e2bb650074a7dea1e1b71af7d3bf59d8b55e2519208809e00ba274008d3c993873b3ec32331ff456e227a84bed1d3dac56b00edb9d8caeb5b28b7a68822875199897953b", @ANYRESOCT=r1, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cpu.weight.nice\x00', 0x10b142, 0x0)
msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, <r10=>0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb})
fchown$auto(0xffffffffffffffff, 0x0, r10)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000001d00)=ANY=[@ANYBLOB="5c140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400da800400070015007c002f6465762f7669727475616c5f6e636900000000040018800400e58008000200", @ANYRES32=r7, @ANYBLOB="0800c900", @ANYRES32=r9, @ANYBLOB="971c8fc8ad3fc54c0b15e3802e2857ac71e4b25303773b71403dc2bb1d70d0fc95268919d5a083ae250400b78800b50030800800dc00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="6de0f13f9496ff232d19c53d5e98c61c57541012e1aded846e8a8e9fff614eda2beb2f118454c286caf1f47e61af3516cc141f47641e8a0900c18d216d48449881d2168c9bcdaaaad5803ac539677be2ffef65f4249ad43c974daba1508f8366e717b84a5f049cd8b365d8bf171a0266a1e89624163189cb97e774b49c1ec0a6546c1d3a4a89f60c9621bd2fa4c6ff10ef1b29926afa14ca30894e1365b08168f1adfd905e7cf4861aa680ed4ffb600ca1e0ba6187392b2b870b75f633b8aaa5096f8c0400eb8008002a00266d0000000800060001000080"], 0x145c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
socket(0xa, 0x1, 0x84)
r11 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
ioctl$auto_BINDER_CTL_ADD(r11, 0xc1086201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x2e, 0x2, 0x7, 0xfff, r1, 0xecd2)
io_uring_setup$auto(0x401, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
shmget$auto(0x0, 0x10, 0x7f5)
shmctl$auto(0x0, 0x0, 0xfffffffffffffffd)

2.676413136s ago: executing program 1 (id=2509):
mmap$auto(0x0, 0x6, 0xdf, 0x12, 0x401, 0x8000)
io_uring_setup$auto(0x52, 0x0)
close_range$auto(0x2, 0xa, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setns(0xffffffffffffffff, 0x60020000)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100)

2.476912152s ago: executing program 1 (id=2511):
r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon39\x00', 0x20400, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, r0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$auto_NFC_CMD_VENDOR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0xe}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x7088cb9d}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xfff}, @NFC_ATTR_SE_APDU={0x41, 0x19, "fc6ef683bdba7ba43f046013ba9c25d6f6c1c0008ee5ee8661874810f8b037f8ab389d1fec1899ba22cc2ed69a13aeff1f4e8348094b72907063e1817a"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008004}, 0xe845)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)

1.739163312s ago: executing program 8 (id=2512):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x0, 0x240007, 0x19)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4040000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, 0x0, 0x7, 0x4008)
r2 = socket(0x2, 0x1, 0x0)
getsockopt$auto_SO_BUSY_POLL(r2, 0x6, 0x2e, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
clone$auto(0x20003b43, 0x2, 0x0, 0x0, 0x2)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0)
getpid()
gettid()
open(0x0, 0x80400, 0xb5d1af1605322dd2)
close_range$auto(0x2, 0x8, 0x0)

1.059157904s ago: executing program 1 (id=2513):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521, 0x0)
socket(0xa, 0x801, 0x84)
writev$auto(0xffffffffffffffff, 0x0, 0x61b3)
write$auto(0xffffffffffffffff, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c4b", 0x23)

810.123504ms ago: executing program 7 (id=2514):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0)

512.942588ms ago: executing program 7 (id=2515):
mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x202000a, 0x3, 0xebf, 0xffffffffffffffff, 0x10000008003)
mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
sendmsg$auto_NL802154_CMD_STOP_BEACONS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x184}}, 0xc0c1)
ioctl$auto(0x3, 0x8905, 0x38)
write$auto(0x3, 0x0, 0x7fffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x161240, 0x408)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x44c42, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
mprotect$auto(0x2, 0x99, 0x180000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x4000c1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)='4', 0x1)
mprotect$auto(0x100000001, 0x167b0c68, 0xd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x4000)
unshare$auto(0x40000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x10, 0x2, 0x0)

0s ago: executing program 1 (id=2516):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_1={r0, 0xb8, @value=0x8, 0x1000}, 0x9)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
sysfs$auto(0x2, 0xd, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x23, 0xc, 0x2008, 0x9, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
fcntl$auto(r0, 0x400, 0x1)
execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r2 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0)
write$auto_safesetid_gid_file_fops_securityfs(r2, 0x0, 0x0)
fsmount$auto(r2, 0x1d12, 0x1)
r3 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0)
read$auto_lowpan_control_fops_6lowpan(r3, &(0x7f0000000080)=""/12, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffc01}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa84}, @NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, '/dev/ecryptfs\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x8}]}, 0x84}}, 0x20000000)
socket(0x2d, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto(0x3, 0x11d, 0xb, 0x0, 0x0)
r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40400, 0x0)
ioctl$auto_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execve$auto(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$auto(r7, 0x0, 0x5)
close_range$auto(0x2, 0x8, 0x0)

kernel console output (not intermixed with test programs):

fail_futex, interval 1, probability 0, space 0, times 0
[  559.092914][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.3.2106 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  559.092953][T15954] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  559.092958][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  559.092967][T15954] Call Trace:
[  559.092973][T15954]  <TASK>
[  559.092979][T15954]  dump_stack_lvl+0x16c/0x1f0
[  559.093008][T15954]  should_fail_ex+0x512/0x640
[  559.093029][T15954]  get_futex_key+0x1d0/0x15f0
[  559.093047][T15954]  ? kasan_save_free_info+0x3b/0x60
[  559.093063][T15954]  ? __kasan_slab_free+0x5f/0x80
[  559.093084][T15954]  ? __pfx_get_futex_key+0x10/0x10
[  559.093098][T15954]  ? __x64_sys_ioctl+0x18e/0x210
[  559.093116][T15954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.093137][T15954]  futex_wait_setup+0x9d/0x570
[  559.093163][T15954]  __futex_wait+0x193/0x2f0
[  559.093183][T15954]  ? __pfx___futex_wait+0x10/0x10
[  559.093206][T15954]  ? __pfx_futex_wake_mark+0x10/0x10
[  559.093228][T15954]  ? futex_hash+0x2c5/0x380
[  559.093244][T15954]  ? futex_private_hash_put+0x160/0x1b0
[  559.093261][T15954]  futex_wait+0xe8/0x380
[  559.093280][T15954]  ? __pfx_futex_wait+0x10/0x10
[  559.093310][T15954]  do_futex+0x229/0x350
[  559.093326][T15954]  ? __pfx_do_futex+0x10/0x10
[  559.093344][T15954]  ? find_held_lock+0x2b/0x80
[  559.093365][T15954]  __x64_sys_futex+0x1e0/0x4c0
[  559.093383][T15954]  ? __pfx_loop_control_ioctl+0x10/0x10
[  559.093397][T15954]  ? __pfx___x64_sys_futex+0x10/0x10
[  559.093417][T15954]  ? fput+0x70/0xf0
[  559.093433][T15954]  do_syscall_64+0xcd/0xf80
[  559.093457][T15954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.093471][T15954] RIP: 0033:0x7fb242f8f7c9
[  559.093485][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  559.093498][T15954] RSP: 002b:00007fb2411ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  559.093512][T15954] RAX: ffffffffffffffda RBX: 00007fb2431e5fa8 RCX: 00007fb242f8f7c9
[  559.093522][T15954] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2431e5fa8
[  559.093530][T15954] RBP: 00007fb2431e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  559.093539][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  559.093547][T15954] R13: 00007fb2431e6038 R14: 00007ffe6669b7d0 R15: 00007ffe6669b8b8
[  559.093566][T15954]  </TASK>
[  560.171794][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2112'.
[  561.437801][T16001] FAULT_INJECTION: forcing a failure.
[  561.437801][T16001] name fail_futex, interval 1, probability 0, space 0, times 0
[  561.496850][T16001] CPU: 0 UID: 0 PID: 16001 Comm: syz.4.2117 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  561.496881][T16001] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  561.496887][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  561.496896][T16001] Call Trace:
[  561.496902][T16001]  <TASK>
[  561.496908][T16001]  dump_stack_lvl+0x16c/0x1f0
[  561.496937][T16001]  should_fail_ex+0x512/0x640
[  561.496964][T16001]  get_futex_key+0x1d0/0x15f0
[  561.496985][T16001]  ? kasan_save_free_info+0x3b/0x60
[  561.497002][T16001]  ? __kasan_slab_free+0x5f/0x80
[  561.497024][T16001]  ? __pfx_get_futex_key+0x10/0x10
[  561.497038][T16001]  ? __x64_sys_ioctl+0x18e/0x210
[  561.497056][T16001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.497079][T16001]  futex_wait_setup+0x9d/0x570
[  561.497105][T16001]  __futex_wait+0x193/0x2f0
[  561.497125][T16001]  ? __pfx___futex_wait+0x10/0x10
[  561.497148][T16001]  ? __pfx_futex_wake_mark+0x10/0x10
[  561.497170][T16001]  ? futex_hash+0x2c5/0x380
[  561.497187][T16001]  ? futex_private_hash_put+0x160/0x1b0
[  561.497204][T16001]  futex_wait+0xe8/0x380
[  561.497223][T16001]  ? __pfx_futex_wait+0x10/0x10
[  561.497253][T16001]  do_futex+0x229/0x350
[  561.497270][T16001]  ? __pfx_do_futex+0x10/0x10
[  561.497288][T16001]  ? find_held_lock+0x2b/0x80
[  561.497309][T16001]  __x64_sys_futex+0x1e0/0x4c0
[  561.497327][T16001]  ? __pfx_loop_control_ioctl+0x10/0x10
[  561.497341][T16001]  ? __pfx___x64_sys_futex+0x10/0x10
[  561.497360][T16001]  ? fput+0x70/0xf0
[  561.497377][T16001]  do_syscall_64+0xcd/0xf80
[  561.497400][T16001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.497415][T16001] RIP: 0033:0x7fc716b8f7c9
[  561.497428][T16001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.497442][T16001] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  561.497456][T16001] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  561.497466][T16001] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  561.497474][T16001] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  561.497483][T16001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.497491][T16001] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  561.497511][T16001]  </TASK>
[  561.754314][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'.
[  562.509669][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  562.635445][T16025] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2121'.
[  563.186193][T16031] FAULT_INJECTION: forcing a failure.
[  563.186193][T16031] name failslab, interval 1, probability 0, space 0, times 0
[  563.275339][T16031] CPU: 0 UID: 0 PID: 16031 Comm: syz.2.2123 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  563.275367][T16031] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  563.275373][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  563.275382][T16031] Call Trace:
[  563.275388][T16031]  <TASK>
[  563.275394][T16031]  dump_stack_lvl+0x16c/0x1f0
[  563.275423][T16031]  should_fail_ex+0x512/0x640
[  563.275441][T16031]  ? __kmalloc_cache_noprof+0x5f/0x800
[  563.275460][T16031]  should_failslab+0xc2/0x120
[  563.275491][T16031]  __kmalloc_cache_noprof+0x80/0x800
[  563.275509][T16031]  ? watch_queue_init+0x45/0x170
[  563.275531][T16031]  ? watch_queue_init+0x45/0x170
[  563.275548][T16031]  watch_queue_init+0x45/0x170
[  563.275566][T16031]  create_pipe_files+0x67f/0x9a0
[  563.275592][T16031]  do_pipe2+0xaf/0x1c0
[  563.275613][T16031]  ? __pfx_do_pipe2+0x10/0x10
[  563.275635][T16031]  ? xfd_validate_state+0x61/0x180
[  563.275653][T16031]  __x64_sys_pipe2+0x54/0x80
[  563.275676][T16031]  do_syscall_64+0xcd/0xf80
[  563.275700][T16031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.275715][T16031] RIP: 0033:0x7f3c5018f7c9
[  563.275728][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.275741][T16031] RSP: 002b:00007f3c50fa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  563.275756][T16031] RAX: ffffffffffffffda RBX: 00007f3c503e5fa0 RCX: 00007f3c5018f7c9
[  563.275766][T16031] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000
[  563.275775][T16031] RBP: 00007f3c50213f91 R08: 0000000000000000 R09: 0000000000000000
[  563.275784][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.275792][T16031] R13: 00007f3c503e6038 R14: 00007f3c503e5fa0 R15: 00007fffdc856908
[  563.275811][T16031]  </TASK>
[  564.170175][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2126'.
[  564.277145][   T30] audit: type=1326 audit(4295037363.600:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16039 comm="syz.4.2126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc716b8f7c9 code=0x0
[  566.563108][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  566.572648][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  566.588270][T16100] FAULT_INJECTION: forcing a failure.
[  566.588270][T16100] name fail_futex, interval 1, probability 0, space 0, times 0
[  566.636651][T16100] CPU: 0 UID: 0 PID: 16100 Comm: syz.2.2141 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  566.636680][T16100] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  566.636686][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  566.636695][T16100] Call Trace:
[  566.636701][T16100]  <TASK>
[  566.636707][T16100]  dump_stack_lvl+0x16c/0x1f0
[  566.636735][T16100]  should_fail_ex+0x512/0x640
[  566.636755][T16100]  get_futex_key+0x1d0/0x15f0
[  566.636773][T16100]  ? lock_acquire+0x179/0x330
[  566.636787][T16100]  ? __pfx_get_futex_key+0x10/0x10
[  566.636801][T16100]  ? find_held_lock+0x2b/0x80
[  566.636820][T16100]  ? trace_ignore_this_task+0xbc/0x100
[  566.636847][T16100]  futex_wait_setup+0x9d/0x570
[  566.636872][T16100]  __futex_wait+0x193/0x2f0
[  566.636893][T16100]  ? __pfx___futex_wait+0x10/0x10
[  566.636911][T16100]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  566.636933][T16100]  ? lockdep_hardirqs_on+0x7c/0x110
[  566.636958][T16100]  ? __pfx_futex_wake_mark+0x10/0x10
[  566.636980][T16100]  ? find_held_lock+0x2b/0x80
[  566.637001][T16100]  ? futex_private_hash_put+0x160/0x1b0
[  566.637017][T16100]  futex_wait+0xe8/0x380
[  566.637036][T16100]  ? __pfx_futex_wait+0x10/0x10
[  566.637060][T16100]  ? __lock_acquire+0x436/0x2890
[  566.637077][T16100]  do_futex+0x229/0x350
[  566.637094][T16100]  ? __pfx_do_futex+0x10/0x10
[  566.637112][T16100]  ? find_held_lock+0x2b/0x80
[  566.637132][T16100]  __x64_sys_futex+0x1e0/0x4c0
[  566.637150][T16100]  ? __fget_files+0x20e/0x3c0
[  566.637171][T16100]  ? __pfx___x64_sys_futex+0x10/0x10
[  566.637190][T16100]  ? fdget+0x187/0x210
[  566.637222][T16100]  do_syscall_64+0xcd/0xf80
[  566.637247][T16100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.637262][T16100] RIP: 0033:0x7f3c5018f7c9
[  566.637275][T16100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.637289][T16100] RSP: 002b:00007f3c50fa60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  566.637303][T16100] RAX: ffffffffffffffda RBX: 00007f3c503e5fa8 RCX: 00007f3c5018f7c9
[  566.637313][T16100] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c503e5fa8
[  566.637322][T16100] RBP: 00007f3c503e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  566.637330][T16100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.637339][T16100] R13: 00007f3c503e6038 R14: 00007fffdc856820 R15: 00007fffdc856908
[  566.637358][T16100]  </TASK>
[  566.882643][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2141'.
[  567.448269][T16110] zswap: compressor  not available
[  568.704075][T16162] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2149'.
[  568.728861][T16162] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2149'.
[  569.225094][T16172] zswap: compressor  not available
[  571.709620][T16242] FAULT_INJECTION: forcing a failure.
[  571.709620][T16242] name fail_futex, interval 1, probability 0, space 0, times 0
[  571.737788][T16242] CPU: 0 UID: 0 PID: 16242 Comm: syz.4.2163 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  571.737838][T16242] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  571.737850][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  571.737861][T16242] Call Trace:
[  571.737867][T16242]  <TASK>
[  571.737873][T16242]  dump_stack_lvl+0x16c/0x1f0
[  571.737901][T16242]  should_fail_ex+0x512/0x640
[  571.737927][T16242]  get_futex_key+0x1d0/0x15f0
[  571.737952][T16242]  ? lock_acquire+0x179/0x330
[  571.737970][T16242]  ? __pfx_get_futex_key+0x10/0x10
[  571.737985][T16242]  ? find_held_lock+0x2b/0x80
[  571.738005][T16242]  ? trace_ignore_this_task+0xbc/0x100
[  571.738033][T16242]  futex_wait_setup+0x9d/0x570
[  571.738059][T16242]  __futex_wait+0x193/0x2f0
[  571.738080][T16242]  ? __pfx___futex_wait+0x10/0x10
[  571.738099][T16242]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  571.738120][T16242]  ? lockdep_hardirqs_on+0x7c/0x110
[  571.738145][T16242]  ? __pfx_futex_wake_mark+0x10/0x10
[  571.738168][T16242]  ? find_held_lock+0x2b/0x80
[  571.738192][T16242]  ? futex_private_hash_put+0x160/0x1b0
[  571.738209][T16242]  futex_wait+0xe8/0x380
[  571.738229][T16242]  ? __pfx_futex_wait+0x10/0x10
[  571.738253][T16242]  ? __lock_acquire+0x436/0x2890
[  571.738270][T16242]  do_futex+0x229/0x350
[  571.738287][T16242]  ? __pfx_do_futex+0x10/0x10
[  571.738305][T16242]  ? find_held_lock+0x2b/0x80
[  571.738325][T16242]  __x64_sys_futex+0x1e0/0x4c0
[  571.738343][T16242]  ? __fget_files+0x20e/0x3c0
[  571.738364][T16242]  ? __pfx___x64_sys_futex+0x10/0x10
[  571.738383][T16242]  ? fdget+0x187/0x210
[  571.738406][T16242]  do_syscall_64+0xcd/0xf80
[  571.738429][T16242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.738444][T16242] RIP: 0033:0x7fc716b8f7c9
[  571.738457][T16242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.738471][T16242] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  571.738485][T16242] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  571.738495][T16242] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  571.738504][T16242] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  571.738512][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.738521][T16242] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  571.738539][T16242]  </TASK>
[  572.564822][T16249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  572.589773][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2163'.
[  572.609796][T16249] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  572.642351][T16249] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  572.649926][T16249] page_type: f5(slab)
[  572.681213][T16249] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000
[  572.689941][T16249] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000
[  572.743883][T16249] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000
[  572.777510][T16249] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000
[  572.796684][T16249] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  572.830120][T16249] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  572.859021][T16249] page dumped because: unmovable page
[  572.886431][T16249] page_owner tracks the page as allocated
[  572.899838][T16249] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5214, tgid 5214 (udevadm), ts 35601146961, free_ts 29364186501
[  572.988518][T16249]  post_alloc_hook+0x1af/0x220
[  573.010423][T16249]  get_page_from_freelist+0xd0b/0x31a0
[  573.030399][T16249]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  573.056733][T16249]  alloc_pages_mpol+0x1fb/0x550
[  573.079131][T16257] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2167'.
[  573.090727][T16249]  new_slab+0x2c3/0x430
[  573.094908][T16249]  ___slab_alloc+0xe18/0x1c90
[  573.128662][T16249]  __slab_alloc.constprop.0+0x63/0x110
[  573.134254][T16249]  kmem_cache_alloc_lru_noprof+0x451/0x770
[  573.171461][T16249]  alloc_inode+0xc3/0x240
[  573.175894][T16249]  iget_locked+0x1d9/0x6d0
[  573.198251][T16249]  kernfs_get_inode+0x46/0x470
[  573.203133][T16249]  kernfs_iop_lookup+0x1a7/0x2d0
[  573.225816][T16249]  __lookup_slow+0x251/0x460
[  573.239050][T16249]  lookup_slow+0x50/0x70
[  573.254534][T16249]  path_lookupat+0x5e9/0xc40
[  573.273796][T16249]  filename_lookup+0x224/0x5f0
[  573.288858][T16249] page last free pid 1 tgid 1 stack trace:
[  573.307011][T16249]  __free_frozen_pages+0x7df/0x1170
[  573.323711][T16249]  free_contig_range+0x183/0x4a0
[  573.343125][T16249]  destroy_args+0xb95/0x14e0
[  573.356968][T16249]  debug_vm_pgtable+0x2220/0x38d0
[  573.374975][T16249]  do_one_initcall+0x123/0x680
[  573.392703][T16249]  kernel_init_freeable+0x5c8/0x920
[  573.409660][T16249]  kernel_init+0x1c/0x2b0
[  573.414020][T16249]  ret_from_fork+0x983/0xb10
[  573.438934][T16249]  ret_from_fork_asm+0x1a/0x30
[  575.316602][T16293] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  575.393111][T16293] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  575.455549][T16293] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  575.608477][T16299] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum
[  575.632551][T16291] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  575.655687][T16291] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  575.691327][T16291] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  575.725333][T16291] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  575.761568][T16291] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  575.776233][T16302] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum
[  575.798405][T16291] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  576.266965][T15668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  576.277587][T15668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  576.290424][T15668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  576.298592][T15668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  576.307771][T15668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  576.406100][T16319] Invalid ELF header magic: != ELF
[  576.848225][T16316] chnl_net:caif_netlink_parms(): no params data found
[  576.873378][T16329] openvswitch: netlink: ct_state flags aa1414ac unsupported
[  576.910800][T15668] Bluetooth: hci1: command 0x0c1a tx timeout
[  577.238704][T16316] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.277394][T16316] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.331126][T16316] bridge_slave_0: entered allmulticast mode
[  577.362371][T16316] bridge_slave_0: entered promiscuous mode
[  577.394159][T16316] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.445068][T16316] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.493593][T16316] bridge_slave_1: entered allmulticast mode
[  577.528208][T16316] bridge_slave_1: entered promiscuous mode
[  577.554282][T16341] ima: policy update failed
[  577.567021][   T30] audit: type=1802 audit(4295037376.953:36): pid=16341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2185" res=0 errno=0
[  577.641637][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.686271][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.719286][T15668] Bluetooth: hci0: command 0x0c1a tx timeout
[  577.762959][T16347] FAULT_INJECTION: forcing a failure.
[  577.762959][T16347] name fail_futex, interval 1, probability 0, space 0, times 0
[  577.785119][T16316] team0: Port device team_slave_0 added
[  577.798696][T15668] Bluetooth: hci3: command 0x0c1a tx timeout
[  577.813525][T16347] CPU: 0 UID: 0 PID: 16347 Comm: syz.4.2187 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  577.813553][T16347] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  577.813559][T16347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  577.813568][T16347] Call Trace:
[  577.813574][T16347]  <TASK>
[  577.813580][T16347]  dump_stack_lvl+0x16c/0x1f0
[  577.813607][T16347]  should_fail_ex+0x512/0x640
[  577.813627][T16347]  get_futex_key+0x1d0/0x15f0
[  577.813646][T16347]  ? lock_acquire+0x179/0x330
[  577.813660][T16347]  ? __pfx_get_futex_key+0x10/0x10
[  577.813674][T16347]  ? find_held_lock+0x2b/0x80
[  577.813693][T16347]  ? trace_ignore_this_task+0xbc/0x100
[  577.813721][T16347]  futex_wait_setup+0x9d/0x570
[  577.813746][T16347]  __futex_wait+0x193/0x2f0
[  577.813767][T16347]  ? __pfx___futex_wait+0x10/0x10
[  577.813785][T16347]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  577.813807][T16347]  ? lockdep_hardirqs_on+0x7c/0x110
[  577.813832][T16347]  ? __pfx_futex_wake_mark+0x10/0x10
[  577.813855][T16347]  ? find_held_lock+0x2b/0x80
[  577.813875][T16347]  ? futex_private_hash_put+0x160/0x1b0
[  577.813892][T16347]  futex_wait+0xe8/0x380
[  577.813911][T16347]  ? __pfx_futex_wait+0x10/0x10
[  577.813935][T16347]  ? __lock_acquire+0x436/0x2890
[  577.813953][T16347]  do_futex+0x229/0x350
[  577.813970][T16347]  ? __pfx_do_futex+0x10/0x10
[  577.813987][T16347]  ? find_held_lock+0x2b/0x80
[  577.814008][T16347]  __x64_sys_futex+0x1e0/0x4c0
[  577.814025][T16347]  ? __fget_files+0x20e/0x3c0
[  577.814046][T16347]  ? __pfx___x64_sys_futex+0x10/0x10
[  577.814066][T16347]  ? fdget+0x187/0x210
[  577.814088][T16347]  do_syscall_64+0xcd/0xf80
[  577.814143][T16347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.814160][T16347] RIP: 0033:0x7fc716b8f7c9
[  577.814173][T16347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.814189][T16347] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  577.814203][T16347] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  577.814213][T16347] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  577.814222][T16347] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  577.814231][T16347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  577.814239][T16347] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  577.814258][T16347]  </TASK>
[  578.306149][T16316] team0: Port device team_slave_1 added
[  578.348037][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.364050][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.423708][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.444906][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.451944][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.478700][ T5837] Bluetooth: hci2: command tx timeout
[  578.485553][T15668] Bluetooth: hci5: command 0x0c1a tx timeout
[  578.572986][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.633335][T16354] random: crng reseeded on system resumption
[  578.683494][T16316] hsr_slave_0: entered promiscuous mode
[  578.692802][T16316] hsr_slave_1: entered promiscuous mode
[  578.705509][T16316] debugfs: 'hsr0' already exists in 'hsr'
[  578.722765][T16316] Cannot create hsr debugfs directory
[  578.981038][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  579.546736][T16316] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  579.639195][T16316] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  579.718603][T16316] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  579.781365][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  579.831582][T16316] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  580.055728][T16316] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.140242][T16316] 8021q: adding VLAN 0 to HW filter on device team0
[  580.187521][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.194656][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.262584][T16406] netlink: 'syz.4.2200': attribute type 2 has an invalid length.
[  580.275781][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.283011][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.573863][ T5837] Bluetooth: hci2: command tx timeout
[  580.898410][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.008680][T16431] Setting dangerous option i915.mitigations - tainting kernel
[  581.242412][T16431] netlink: zone id is out of range
[  581.247590][T16431] netlink: zone id is out of range
[  581.815001][T16316] veth0_vlan: entered promiscuous mode
[  582.129186][T16316] veth1_vlan: entered promiscuous mode
[  582.315419][T16316] veth0_macvtap: entered promiscuous mode
[  582.391137][T16316] veth1_macvtap: entered promiscuous mode
[  582.646132][ T5837] Bluetooth: hci2: command tx timeout
[  582.689165][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.722632][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.795062][T14105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.815454][T14105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.849576][T14105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.876391][T14105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.035678][T14098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.070364][T14098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.130927][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.148798][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.335173][T16460] FAULT_INJECTION: forcing a failure.
[  583.335173][T16460] name fail_futex, interval 1, probability 0, space 0, times 0
[  583.365310][T16460] CPU: 0 UID: 0 PID: 16460 Comm: syz.5.2176 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  583.365339][T16460] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  583.365345][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.365354][T16460] Call Trace:
[  583.365360][T16460]  <TASK>
[  583.365366][T16460]  dump_stack_lvl+0x16c/0x1f0
[  583.365393][T16460]  should_fail_ex+0x512/0x640
[  583.365414][T16460]  get_futex_key+0x1d0/0x15f0
[  583.365434][T16460]  ? kasan_save_free_info+0x3b/0x60
[  583.365451][T16460]  ? __kasan_slab_free+0x5f/0x80
[  583.365477][T16460]  ? __pfx_get_futex_key+0x10/0x10
[  583.365492][T16460]  ? __x64_sys_ioctl+0x18e/0x210
[  583.365510][T16460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.365532][T16460]  futex_wait_setup+0x9d/0x570
[  583.365559][T16460]  __futex_wait+0x193/0x2f0
[  583.365580][T16460]  ? __pfx___futex_wait+0x10/0x10
[  583.365602][T16460]  ? __pfx_futex_wake_mark+0x10/0x10
[  583.365624][T16460]  ? futex_hash+0x2c5/0x380
[  583.365641][T16460]  ? futex_private_hash_put+0x160/0x1b0
[  583.365658][T16460]  futex_wait+0xe8/0x380
[  583.365677][T16460]  ? __pfx_futex_wait+0x10/0x10
[  583.365706][T16460]  do_futex+0x229/0x350
[  583.365723][T16460]  ? __pfx_do_futex+0x10/0x10
[  583.365741][T16460]  ? find_held_lock+0x2b/0x80
[  583.365762][T16460]  __x64_sys_futex+0x1e0/0x4c0
[  583.365780][T16460]  ? __pfx_loop_control_ioctl+0x10/0x10
[  583.365796][T16460]  ? __pfx___x64_sys_futex+0x10/0x10
[  583.365818][T16460]  ? fput+0x70/0xf0
[  583.365835][T16460]  do_syscall_64+0xcd/0xf80
[  583.365861][T16460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.365876][T16460] RIP: 0033:0x7f57ccf8f7c9
[  583.365888][T16460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.365903][T16460] RSP: 002b:00007f57cde890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  583.365917][T16460] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa8 RCX: 00007f57ccf8f7c9
[  583.365927][T16460] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57cd1e5fa8
[  583.365935][T16460] RBP: 00007f57cd1e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  583.365943][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  583.365952][T16460] R13: 00007f57cd1e6038 R14: 00007ffcbfe836d0 R15: 00007ffcbfe837b8
[  583.365971][T16460]  </TASK>
[  584.187450][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2176'.
[  584.379226][T16471] FAULT_INJECTION: forcing a failure.
[  584.379226][T16471] name fail_futex, interval 1, probability 0, space 0, times 0
[  584.430122][T16471] CPU: 0 UID: 0 PID: 16471 Comm: syz.5.2213 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  584.430150][T16471] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  584.430157][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  584.430165][T16471] Call Trace:
[  584.430171][T16471]  <TASK>
[  584.430177][T16471]  dump_stack_lvl+0x16c/0x1f0
[  584.430205][T16471]  should_fail_ex+0x512/0x640
[  584.430225][T16471]  get_futex_key+0x1d0/0x15f0
[  584.430242][T16471]  ? kasan_save_free_info+0x3b/0x60
[  584.430258][T16471]  ? __kasan_slab_free+0x5f/0x80
[  584.430278][T16471]  ? __pfx_get_futex_key+0x10/0x10
[  584.430292][T16471]  ? __x64_sys_ioctl+0x18e/0x210
[  584.430309][T16471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.430331][T16471]  futex_wait_setup+0x9d/0x570
[  584.430356][T16471]  __futex_wait+0x193/0x2f0
[  584.430387][T16471]  ? __pfx___futex_wait+0x10/0x10
[  584.430410][T16471]  ? __pfx_futex_wake_mark+0x10/0x10
[  584.430433][T16471]  ? futex_hash+0x2c5/0x380
[  584.430450][T16471]  ? futex_private_hash_put+0x160/0x1b0
[  584.430468][T16471]  futex_wait+0xe8/0x380
[  584.430488][T16471]  ? __pfx_futex_wait+0x10/0x10
[  584.430518][T16471]  do_futex+0x229/0x350
[  584.430535][T16471]  ? __pfx_do_futex+0x10/0x10
[  584.430553][T16471]  ? find_held_lock+0x2b/0x80
[  584.430574][T16471]  __x64_sys_futex+0x1e0/0x4c0
[  584.430592][T16471]  ? __pfx_loop_control_ioctl+0x10/0x10
[  584.430607][T16471]  ? __pfx___x64_sys_futex+0x10/0x10
[  584.430626][T16471]  ? fput+0x70/0xf0
[  584.430643][T16471]  do_syscall_64+0xcd/0xf80
[  584.430667][T16471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.430682][T16471] RIP: 0033:0x7f57ccf8f7c9
[  584.430695][T16471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  584.430709][T16471] RSP: 002b:00007f57cde890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  584.430723][T16471] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa8 RCX: 00007f57ccf8f7c9
[  584.430733][T16471] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57cd1e5fa8
[  584.430741][T16471] RBP: 00007f57cd1e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  584.430750][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  584.430759][T16471] R13: 00007f57cd1e6038 R14: 00007ffcbfe836d0 R15: 00007ffcbfe837b8
[  584.430777][T16471]  </TASK>
[  584.432456][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2213'.
[  584.753858][ T5837] Bluetooth: hci2: command tx timeout
[  585.212985][T16471] bridge0: entered promiscuous mode
[  585.228451][T16471] bridge0: entered allmulticast mode
[  586.181186][T16488] bridge0: port 3(bond0) entered blocking state
[  586.197512][T16488] bridge0: port 3(bond0) entered disabled state
[  586.210588][T16488] bond0: entered allmulticast mode
[  586.223162][T16488] bond_slave_0: entered allmulticast mode
[  586.238634][T16488] bond_slave_1: entered allmulticast mode
[  586.267987][T16488] bond0: entered promiscuous mode
[  586.278947][T16488] bond_slave_0: entered promiscuous mode
[  586.292030][T16488] bond_slave_1: entered promiscuous mode
[  586.304774][T16488] bridge0: port 3(bond0) entered blocking state
[  586.311181][T16488] bridge0: port 3(bond0) entered forwarding state
[  586.458910][T16494] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  587.541348][T16506] bond0: option mode: unable to set because the bond device is up
[  587.967721][T16509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'.
[  587.986862][T16512] FAULT_INJECTION: forcing a failure.
[  587.986862][T16512] name failslab, interval 1, probability 0, space 0, times 0
[  588.016231][T16512] CPU: 0 UID: 0 PID: 16512 Comm: syz.5.2223 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  588.016260][T16512] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  588.016267][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  588.016276][T16512] Call Trace:
[  588.016282][T16512]  <TASK>
[  588.016289][T16512]  dump_stack_lvl+0x16c/0x1f0
[  588.016318][T16512]  should_fail_ex+0x512/0x640
[  588.016336][T16512]  ? kmem_cache_alloc_noprof+0x62/0x770
[  588.016357][T16512]  should_failslab+0xc2/0x120
[  588.016379][T16512]  kmem_cache_alloc_noprof+0x83/0x770
[  588.016397][T16512]  ? vm_area_alloc+0x1f/0x160
[  588.016416][T16512]  ? vm_area_alloc+0x1f/0x160
[  588.016429][T16512]  vm_area_alloc+0x1f/0x160
[  588.016450][T16512]  __mmap_region+0x107a/0x2a00
[  588.016471][T16512]  ? __pfx___mmap_region+0x10/0x10
[  588.016503][T16512]  ? rcu_is_watching+0x12/0xc0
[  588.016561][T16512]  ? rcu_is_watching+0x12/0xc0
[  588.016586][T16512]  mmap_region+0x1ab/0x3f0
[  588.016603][T16512]  ? __get_unmapped_area+0x267/0x3f0
[  588.016632][T16512]  do_mmap+0xa3e/0x1210
[  588.016661][T16512]  ? __pfx_do_mmap+0x10/0x10
[  588.016683][T16512]  ? __pfx_down_write_killable+0x10/0x10
[  588.016704][T16512]  vm_mmap_pgoff+0x29e/0x470
[  588.016728][T16512]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  588.016749][T16512]  ? find_held_lock+0x2b/0x80
[  588.016771][T16512]  ? __x64_sys_futex+0x1e0/0x4c0
[  588.016787][T16512]  ? __x64_sys_futex+0x1e9/0x4c0
[  588.016806][T16512]  ksys_mmap_pgoff+0x7d/0x5c0
[  588.016826][T16512]  ? xfd_validate_state+0x61/0x180
[  588.016843][T16512]  __x64_sys_mmap+0x125/0x190
[  588.016860][T16512]  do_syscall_64+0xcd/0xf80
[  588.016885][T16512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.016900][T16512] RIP: 0033:0x7f57ccf8f7c9
[  588.016914][T16512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.016929][T16512] RSP: 002b:00007f57cde89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  588.016943][T16512] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa0 RCX: 00007f57ccf8f7c9
[  588.016953][T16512] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000
[  588.016962][T16512] RBP: 00007f57cd013f91 R08: 0000000000000401 R09: 0000000000008000
[  588.016971][T16512] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  588.016980][T16512] R13: 00007f57cd1e6038 R14: 00007f57cd1e5fa0 R15: 00007ffcbfe837b8
[  588.017000][T16512]  </TASK>
[  588.349163][   T30] audit: type=1800 audit(4295037387.784:37): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2224" name="dbroot" dev="configfs" ino=65814 res=0 errno=0
[  589.752527][T16536] FAULT_INJECTION: forcing a failure.
[  589.752527][T16536] name failslab, interval 1, probability 0, space 0, times 0
[  589.796274][T16536] CPU: 0 UID: 0 PID: 16536 Comm: syz.4.2230 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  589.796304][T16536] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  589.796310][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.796319][T16536] Call Trace:
[  589.796324][T16536]  <TASK>
[  589.796330][T16536]  dump_stack_lvl+0x16c/0x1f0
[  589.796357][T16536]  should_fail_ex+0x512/0x640
[  589.796374][T16536]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  589.796394][T16536]  should_failslab+0xc2/0x120
[  589.796418][T16536]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  589.796436][T16536]  ? __pfx___might_resched+0x10/0x10
[  589.796464][T16536]  ? sock_alloc_inode+0x25/0x1c0
[  589.796492][T16536]  ? __pfx_sock_alloc_inode+0x10/0x10
[  589.796514][T16536]  ? sock_alloc_inode+0x25/0x1c0
[  589.796536][T16536]  sock_alloc_inode+0x25/0x1c0
[  589.796559][T16536]  alloc_inode+0x64/0x240
[  589.796575][T16536]  sock_alloc+0x40/0x280
[  589.796596][T16536]  __sock_create+0xc2/0x8a0
[  589.796614][T16536]  __sys_socket+0x14d/0x260
[  589.796629][T16536]  ? __pfx___sys_socket+0x10/0x10
[  589.796644][T16536]  ? xfd_validate_state+0x61/0x180
[  589.796657][T16536]  ? __pfx___do_sys_close_range+0x10/0x10
[  589.796683][T16536]  __x64_sys_socket+0x72/0xb0
[  589.796697][T16536]  ? lockdep_hardirqs_on+0x7c/0x110
[  589.796720][T16536]  do_syscall_64+0xcd/0xf80
[  589.796744][T16536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.796759][T16536] RIP: 0033:0x7fc716b8f7c9
[  589.796771][T16536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.796785][T16536] RSP: 002b:00007fc7179b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  589.796799][T16536] RAX: ffffffffffffffda RBX: 00007fc716de6090 RCX: 00007fc716b8f7c9
[  589.796808][T16536] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  589.796817][T16536] RBP: 00007fc716c13f91 R08: 0000000000000000 R09: 0000000000000000
[  589.796825][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.796841][T16536] R13: 00007fc716de6128 R14: 00007fc716de6090 R15: 00007ffe53974508
[  589.796860][T16536]  </TASK>
[  589.796869][T16536] socket: no more sockets
[  591.881406][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'.
[  592.315544][T16573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2247'.
[  592.413195][T16573] bridge0: entered promiscuous mode
[  592.452381][T16573] bridge0: entered allmulticast mode
[  592.670462][T16583] FAULT_INJECTION: forcing a failure.
[  592.670462][T16583] name failslab, interval 1, probability 0, space 0, times 0
[  592.754549][T16583] CPU: 0 UID: 0 PID: 16583 Comm: syz.4.2241 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  592.754579][T16583] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  592.754585][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  592.754594][T16583] Call Trace:
[  592.754600][T16583]  <TASK>
[  592.754606][T16583]  dump_stack_lvl+0x16c/0x1f0
[  592.754635][T16583]  should_fail_ex+0x512/0x640
[  592.754654][T16583]  ? kmem_cache_alloc_noprof+0x62/0x770
[  592.754675][T16583]  should_failslab+0xc2/0x120
[  592.754698][T16583]  kmem_cache_alloc_noprof+0x83/0x770
[  592.754716][T16583]  ? vm_area_alloc+0x1f/0x160
[  592.754736][T16583]  ? vm_area_alloc+0x1f/0x160
[  592.754749][T16583]  vm_area_alloc+0x1f/0x160
[  592.754763][T16583]  __mmap_region+0x107a/0x2a00
[  592.754790][T16583]  ? __pfx___mmap_region+0x10/0x10
[  592.754846][T16583]  ? rcu_is_watching+0x12/0xc0
[  592.754909][T16583]  ? rcu_is_watching+0x12/0xc0
[  592.754934][T16583]  mmap_region+0x1ab/0x3f0
[  592.754952][T16583]  ? __get_unmapped_area+0x267/0x3f0
[  592.754976][T16583]  do_mmap+0xa3e/0x1210
[  592.755001][T16583]  ? __pfx_do_mmap+0x10/0x10
[  592.755022][T16583]  ? __pfx_down_write_killable+0x10/0x10
[  592.755042][T16583]  vm_mmap_pgoff+0x29e/0x470
[  592.755067][T16583]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  592.755087][T16583]  ? find_held_lock+0x2b/0x80
[  592.755109][T16583]  ? __x64_sys_futex+0x1e0/0x4c0
[  592.755125][T16583]  ? __x64_sys_futex+0x1e9/0x4c0
[  592.755144][T16583]  ksys_mmap_pgoff+0x7d/0x5c0
[  592.755164][T16583]  ? xfd_validate_state+0x61/0x180
[  592.755181][T16583]  __x64_sys_mmap+0x125/0x190
[  592.755198][T16583]  do_syscall_64+0xcd/0xf80
[  592.755222][T16583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.755238][T16583] RIP: 0033:0x7fc716b8f7c9
[  592.755251][T16583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.755265][T16583] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  592.755279][T16583] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  592.755289][T16583] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000
[  592.755297][T16583] RBP: 00007fc716c13f91 R08: 0000000000000401 R09: 0000000000008000
[  592.755307][T16583] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  592.755316][T16583] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  592.755339][T16583]  </TASK>
[  597.231975][T16646] FAULT_INJECTION: forcing a failure.
[  597.231975][T16646] name fail_futex, interval 1, probability 0, space 0, times 0
[  597.338180][T16646] CPU: 0 UID: 0 PID: 16646 Comm: syz.4.2257 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  597.338209][T16646] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  597.338215][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  597.338225][T16646] Call Trace:
[  597.338230][T16646]  <TASK>
[  597.338236][T16646]  dump_stack_lvl+0x16c/0x1f0
[  597.338264][T16646]  should_fail_ex+0x512/0x640
[  597.338284][T16646]  get_futex_key+0x1d0/0x15f0
[  597.338302][T16646]  ? kasan_save_free_info+0x3b/0x60
[  597.338318][T16646]  ? __kasan_slab_free+0x5f/0x80
[  597.338339][T16646]  ? __pfx_get_futex_key+0x10/0x10
[  597.338354][T16646]  ? __x64_sys_ioctl+0x18e/0x210
[  597.338372][T16646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.338393][T16646]  futex_wait_setup+0x9d/0x570
[  597.338418][T16646]  __futex_wait+0x193/0x2f0
[  597.338438][T16646]  ? __pfx___futex_wait+0x10/0x10
[  597.338461][T16646]  ? __pfx_futex_wake_mark+0x10/0x10
[  597.338483][T16646]  ? futex_hash+0x2c5/0x380
[  597.338499][T16646]  ? futex_private_hash_put+0x160/0x1b0
[  597.338516][T16646]  futex_wait+0xe8/0x380
[  597.338536][T16646]  ? __pfx_futex_wait+0x10/0x10
[  597.338565][T16646]  do_futex+0x229/0x350
[  597.338582][T16646]  ? __pfx_do_futex+0x10/0x10
[  597.338599][T16646]  ? find_held_lock+0x2b/0x80
[  597.338621][T16646]  __x64_sys_futex+0x1e0/0x4c0
[  597.338639][T16646]  ? __pfx_loop_control_ioctl+0x10/0x10
[  597.338654][T16646]  ? __pfx___x64_sys_futex+0x10/0x10
[  597.338673][T16646]  ? fput+0x70/0xf0
[  597.338690][T16646]  do_syscall_64+0xcd/0xf80
[  597.338713][T16646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.338728][T16646] RIP: 0033:0x7fc716b8f7c9
[  597.338741][T16646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  597.338755][T16646] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  597.338769][T16646] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  597.338779][T16646] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  597.338788][T16646] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  597.338797][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.338805][T16646] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  597.338824][T16646]  </TASK>
[  598.345072][T15668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  598.360935][T15668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  598.371251][T15668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  598.378954][T15668] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  598.386734][T15668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  598.476277][T16646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'.
[  599.140414][T16655] chnl_net:caif_netlink_parms(): no params data found
[  599.430887][T16655] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.462162][T16655] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.493445][T16655] bridge_slave_0: entered allmulticast mode
[  599.528867][T16655] bridge_slave_0: entered promiscuous mode
[  599.562021][T16655] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.599134][T16655] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.626455][T16655] bridge_slave_1: entered allmulticast mode
[  599.658163][T16655] bridge_slave_1: entered promiscuous mode
[  599.887754][T16655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.034141][T16655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.181152][T16655] team0: Port device team_slave_0 added
[  600.212944][T16655] team0: Port device team_slave_1 added
[  600.329931][T16655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.352881][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.440261][T16655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.480241][T15668] Bluetooth: hci4: command tx timeout
[  600.570833][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.593754][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.680037][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.944491][T16655] hsr_slave_0: entered promiscuous mode
[  600.976134][T16655] hsr_slave_1: entered promiscuous mode
[  600.995626][T16655] debugfs: 'hsr0' already exists in 'hsr'
[  601.025838][T16655] Cannot create hsr debugfs directory
[  601.267179][T16689] block2mtd: too many arguments
[  601.848526][T16655] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  601.864737][T16700] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2267'.
[  601.930203][T16655] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  601.984637][T16655] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  602.003356][T11916] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 908 with max blocks 22 with error 117
[  602.017923][T16706] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  602.051472][T16655] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  602.083725][T11916] EXT4-fs (sda1): This should not happen!! Data will be lost
[  602.083725][T11916] 
[  602.539397][T16655] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.556874][T15668] Bluetooth: hci4: command tx timeout
[  602.624010][T16655] 8021q: adding VLAN 0 to HW filter on device team0
[  602.677243][T14115] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.684418][T14115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.783392][T14115] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.790533][T14115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.742747][T16655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.430285][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'.
[  604.624585][T15668] Bluetooth: hci4: command tx timeout
[  605.051816][T16655] veth0_vlan: entered promiscuous mode
[  605.245801][T16655] veth1_vlan: entered promiscuous mode
[  605.530187][T16655] veth0_macvtap: entered promiscuous mode
[  605.587529][T16655] veth1_macvtap: entered promiscuous mode
[  605.671479][T16655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.727814][T16655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.781109][ T1090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.819202][ T1090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.866015][ T1090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.907361][ T1090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.405770][T11916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.462414][T11916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.577733][T14105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.617927][T14105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.691800][ T5837] Bluetooth: hci4: command tx timeout
[  607.390483][T16778] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2281'.
[  608.266592][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'.
[  610.729353][T16853] FAULT_INJECTION: forcing a failure.
[  610.729353][T16853] name fail_futex, interval 1, probability 0, space 0, times 0
[  610.780126][T16853] CPU: 0 UID: 0 PID: 16853 Comm: syz.6.2294 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  610.780155][T16853] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  610.780160][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  610.780169][T16853] Call Trace:
[  610.780174][T16853]  <TASK>
[  610.780180][T16853]  dump_stack_lvl+0x16c/0x1f0
[  610.780209][T16853]  should_fail_ex+0x512/0x640
[  610.780230][T16853]  get_futex_key+0x1d0/0x15f0
[  610.780247][T16853]  ? kasan_save_free_info+0x3b/0x60
[  610.780264][T16853]  ? __kasan_slab_free+0x5f/0x80
[  610.780284][T16853]  ? __pfx_get_futex_key+0x10/0x10
[  610.780298][T16853]  ? __x64_sys_ioctl+0x18e/0x210
[  610.780318][T16853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.780339][T16853]  futex_wait_setup+0x9d/0x570
[  610.780365][T16853]  __futex_wait+0x193/0x2f0
[  610.780385][T16853]  ? __pfx___futex_wait+0x10/0x10
[  610.780408][T16853]  ? __pfx_futex_wake_mark+0x10/0x10
[  610.780430][T16853]  ? futex_hash+0x2c5/0x380
[  610.780447][T16853]  ? futex_private_hash_put+0x160/0x1b0
[  610.780464][T16853]  futex_wait+0xe8/0x380
[  610.780483][T16853]  ? __pfx_futex_wait+0x10/0x10
[  610.780513][T16853]  do_futex+0x229/0x350
[  610.780530][T16853]  ? __pfx_do_futex+0x10/0x10
[  610.780547][T16853]  ? find_held_lock+0x2b/0x80
[  610.780568][T16853]  __x64_sys_futex+0x1e0/0x4c0
[  610.780586][T16853]  ? __pfx_loop_control_ioctl+0x10/0x10
[  610.780601][T16853]  ? __pfx___x64_sys_futex+0x10/0x10
[  610.780620][T16853]  ? fput+0x70/0xf0
[  610.780637][T16853]  do_syscall_64+0xcd/0xf80
[  610.780661][T16853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.780676][T16853] RIP: 0033:0x7f413078f7c9
[  610.780689][T16853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.780703][T16853] RSP: 002b:00007f41316db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  610.780717][T16853] RAX: ffffffffffffffda RBX: 00007f41309e5fa8 RCX: 00007f413078f7c9
[  610.780726][T16853] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41309e5fa8
[  610.780735][T16853] RBP: 00007f41309e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  610.780744][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.780752][T16853] R13: 00007f41309e6038 R14: 00007ffca98da030 R15: 00007ffca98da118
[  610.780772][T16853]  </TASK>
[  611.017435][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2294'.
[  611.026527][T16853] bridge0: entered promiscuous mode
[  611.031818][T16853] bridge0: entered allmulticast mode
[  611.391597][T16865] random: crng reseeded on system resumption
[  611.471023][T16865] hub 1-0:1.0: USB hub found
[  611.505472][T16865] hub 1-0:1.0: 1 port detected
[  611.721555][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2295'.
[  612.070138][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'.
[  612.701781][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'.
[  614.668670][T16937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  614.716386][T16939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  615.040463][T16952] FAULT_INJECTION: forcing a failure.
[  615.040463][T16952] name fail_futex, interval 1, probability 0, space 0, times 0
[  615.212796][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2313'.
[  615.272469][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.5.2313 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  615.272498][T16952] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  615.272503][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  615.272512][T16952] Call Trace:
[  615.272518][T16952]  <TASK>
[  615.272524][T16952]  dump_stack_lvl+0x16c/0x1f0
[  615.272552][T16952]  should_fail_ex+0x512/0x640
[  615.272573][T16952]  get_futex_key+0x1d0/0x15f0
[  615.272591][T16952]  ? kasan_save_free_info+0x3b/0x60
[  615.272607][T16952]  ? __kasan_slab_free+0x5f/0x80
[  615.272628][T16952]  ? __pfx_get_futex_key+0x10/0x10
[  615.272642][T16952]  ? __x64_sys_ioctl+0x18e/0x210
[  615.272660][T16952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.272682][T16952]  futex_wait_setup+0x9d/0x570
[  615.272708][T16952]  __futex_wait+0x193/0x2f0
[  615.272728][T16952]  ? __pfx___futex_wait+0x10/0x10
[  615.272751][T16952]  ? __pfx_futex_wake_mark+0x10/0x10
[  615.272774][T16952]  ? futex_hash+0x2c5/0x380
[  615.272791][T16952]  ? futex_private_hash_put+0x160/0x1b0
[  615.272807][T16952]  futex_wait+0xe8/0x380
[  615.272827][T16952]  ? __pfx_futex_wait+0x10/0x10
[  615.272856][T16952]  do_futex+0x229/0x350
[  615.272873][T16952]  ? __pfx_do_futex+0x10/0x10
[  615.272891][T16952]  ? find_held_lock+0x2b/0x80
[  615.272912][T16952]  __x64_sys_futex+0x1e0/0x4c0
[  615.272930][T16952]  ? __pfx_loop_control_ioctl+0x10/0x10
[  615.272945][T16952]  ? __pfx___x64_sys_futex+0x10/0x10
[  615.272965][T16952]  ? fput+0x70/0xf0
[  615.272981][T16952]  do_syscall_64+0xcd/0xf80
[  615.273006][T16952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.273020][T16952] RIP: 0033:0x7f57ccf8f7c9
[  615.273033][T16952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  615.273047][T16952] RSP: 002b:00007f57cde890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  615.273061][T16952] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa8 RCX: 00007f57ccf8f7c9
[  615.273071][T16952] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57cd1e5fa8
[  615.273079][T16952] RBP: 00007f57cd1e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  615.273088][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.273096][T16952] R13: 00007f57cd1e6038 R14: 00007ffcbfe836d0 R15: 00007ffcbfe837b8
[  615.273114][T16952]  </TASK>
[  616.306980][T16994] Invalid ELF header magic: != ELF
[  617.998816][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'.
[  618.108131][T17021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.599818][T17021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.769546][T17021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.938524][T17045] FAULT_INJECTION: forcing a failure.
[  618.938524][T17045] name failslab, interval 1, probability 0, space 0, times 0
[  619.015246][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.4.2330 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  619.015274][T17045] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  619.015281][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  619.015290][T17045] Call Trace:
[  619.015295][T17045]  <TASK>
[  619.015302][T17045]  dump_stack_lvl+0x16c/0x1f0
[  619.015330][T17045]  should_fail_ex+0x512/0x640
[  619.015349][T17045]  ? __kmalloc_cache_noprof+0x5f/0x800
[  619.015370][T17045]  should_failslab+0xc2/0x120
[  619.015393][T17045]  __kmalloc_cache_noprof+0x80/0x800
[  619.015410][T17045]  ? devinet_init_net+0x56/0x910
[  619.015429][T17045]  ? devinet_init_net+0x56/0x910
[  619.015443][T17045]  ? __pfx_devinet_init_net+0x10/0x10
[  619.015458][T17045]  devinet_init_net+0x56/0x910
[  619.015474][T17045]  ? __pfx_devinet_init_net+0x10/0x10
[  619.015490][T17045]  ops_init+0x1e2/0x5f0
[  619.015514][T17045]  setup_net+0x11d/0x3a0
[  619.015535][T17045]  ? __pfx_setup_net+0x10/0x10
[  619.015554][T17045]  ? lockdep_init_map_type+0x5c/0x270
[  619.015570][T17045]  ? mutex_init_lockep+0x110/0x150
[  619.015587][T17045]  copy_net_ns+0x351/0x7c0
[  619.015612][T17045]  create_new_namespaces+0x3ea/0xab0
[  619.015636][T17045]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  619.015658][T17045]  ksys_unshare+0x45b/0xa40
[  619.015681][T17045]  ? __pfx_ksys_unshare+0x10/0x10
[  619.015705][T17045]  ? xfd_validate_state+0x61/0x180
[  619.015724][T17045]  __x64_sys_unshare+0x31/0x40
[  619.015737][T17045]  do_syscall_64+0xcd/0xf80
[  619.015761][T17045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.015776][T17045] RIP: 0033:0x7fc716b8f7c9
[  619.015788][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.015802][T17045] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  619.015817][T17045] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  619.015827][T17045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  619.015835][T17045] RBP: 00007fc716c13f91 R08: 0000000000000000 R09: 0000000000000000
[  619.015844][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  619.015853][T17045] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  619.015872][T17045]  </TASK>
[  620.604102][T17053] FAULT_INJECTION: forcing a failure.
[  620.604102][T17053] name fail_futex, interval 1, probability 0, space 0, times 0
[  620.737841][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.5.2331 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  620.737877][T17053] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  620.737883][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  620.737892][T17053] Call Trace:
[  620.737897][T17053]  <TASK>
[  620.737903][T17053]  dump_stack_lvl+0x16c/0x1f0
[  620.737932][T17053]  should_fail_ex+0x512/0x640
[  620.737952][T17053]  get_futex_key+0x1d0/0x15f0
[  620.737968][T17053]  ? kasan_save_free_info+0x3b/0x60
[  620.737985][T17053]  ? __kasan_slab_free+0x5f/0x80
[  620.738005][T17053]  ? __pfx_get_futex_key+0x10/0x10
[  620.738019][T17053]  ? __x64_sys_ioctl+0x18e/0x210
[  620.738036][T17053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.738058][T17053]  futex_wait_setup+0x9d/0x570
[  620.738085][T17053]  __futex_wait+0x193/0x2f0
[  620.738105][T17053]  ? __pfx___futex_wait+0x10/0x10
[  620.738128][T17053]  ? __pfx_futex_wake_mark+0x10/0x10
[  620.738150][T17053]  ? futex_hash+0x2c5/0x380
[  620.738167][T17053]  ? futex_private_hash_put+0x160/0x1b0
[  620.738187][T17053]  futex_wait+0xe8/0x380
[  620.738206][T17053]  ? __pfx_futex_wait+0x10/0x10
[  620.738236][T17053]  do_futex+0x229/0x350
[  620.738253][T17053]  ? __pfx_do_futex+0x10/0x10
[  620.738270][T17053]  ? find_held_lock+0x2b/0x80
[  620.738291][T17053]  __x64_sys_futex+0x1e0/0x4c0
[  620.738309][T17053]  ? __pfx_loop_control_ioctl+0x10/0x10
[  620.738324][T17053]  ? __pfx___x64_sys_futex+0x10/0x10
[  620.738343][T17053]  ? fput+0x70/0xf0
[  620.738360][T17053]  do_syscall_64+0xcd/0xf80
[  620.738384][T17053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.738398][T17053] RIP: 0033:0x7f57ccf8f7c9
[  620.738411][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  620.738424][T17053] RSP: 002b:00007f57cde890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  620.738439][T17053] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa8 RCX: 00007f57ccf8f7c9
[  620.738448][T17053] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57cd1e5fa8
[  620.738457][T17053] RBP: 00007f57cd1e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  620.738466][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.738475][T17053] R13: 00007f57cd1e6038 R14: 00007ffcbfe836d0 R15: 00007ffcbfe837b8
[  620.738493][T17053]  </TASK>
[  621.542496][T17069] __vm_enough_memory: pid: 17069, comm: syz.5.2335, bytes: 4398046511104 not enough memory for the allocation
[  627.435251][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.435435][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.485234][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.485400][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.485548][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.485694][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.485861][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486009][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486166][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486309][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486450][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486591][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486730][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.486869][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487010][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487188][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487337][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487482][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487621][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487759][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.487898][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488033][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488187][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488328][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488464][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488601][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488739][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.488876][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.489014][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.489159][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.489300][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.489452][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.526119][T17174] FAULT_INJECTION: forcing a failure.
[  627.526119][T17174] name fail_futex, interval 1, probability 0, space 0, times 0
[  627.526148][T17174] CPU: 0 UID: 0 PID: 17174 Comm: syz.5.2352 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  627.526170][T17174] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  627.526176][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  627.526185][T17174] Call Trace:
[  627.526190][T17174]  <TASK>
[  627.526196][T17174]  dump_stack_lvl+0x16c/0x1f0
[  627.526223][T17174]  should_fail_ex+0x512/0x640
[  627.526244][T17174]  get_futex_key+0x1d0/0x15f0
[  627.526260][T17174]  ? kasan_save_free_info+0x3b/0x60
[  627.526277][T17174]  ? __kasan_slab_free+0x5f/0x80
[  627.526299][T17174]  ? __pfx_get_futex_key+0x10/0x10
[  627.526313][T17174]  ? __x64_sys_ioctl+0x18e/0x210
[  627.526330][T17174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.526352][T17174]  futex_wait_setup+0x9d/0x570
[  627.526377][T17174]  __futex_wait+0x193/0x2f0
[  627.526398][T17174]  ? __pfx___futex_wait+0x10/0x10
[  627.526426][T17174]  ? __pfx_futex_wake_mark+0x10/0x10
[  627.526448][T17174]  ? futex_hash+0x2c5/0x380
[  627.526469][T17174]  ? futex_private_hash_put+0x160/0x1b0
[  627.526486][T17174]  futex_wait+0xe8/0x380
[  627.526505][T17174]  ? __pfx_futex_wait+0x10/0x10
[  627.526535][T17174]  do_futex+0x229/0x350
[  627.526552][T17174]  ? __pfx_do_futex+0x10/0x10
[  627.526570][T17174]  ? find_held_lock+0x2b/0x80
[  627.526592][T17174]  __x64_sys_futex+0x1e0/0x4c0
[  627.526610][T17174]  ? __pfx_loop_control_ioctl+0x10/0x10
[  627.526625][T17174]  ? __pfx___x64_sys_futex+0x10/0x10
[  627.526644][T17174]  ? fput+0x70/0xf0
[  627.526660][T17174]  do_syscall_64+0xcd/0xf80
[  627.526685][T17174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.526699][T17174] RIP: 0033:0x7f57ccf8f7c9
[  627.526712][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.526727][T17174] RSP: 002b:00007f57cde890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  627.526741][T17174] RAX: ffffffffffffffda RBX: 00007f57cd1e5fa8 RCX: 00007f57ccf8f7c9
[  627.526751][T17174] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57cd1e5fa8
[  627.526759][T17174] RBP: 00007f57cd1e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  627.526768][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  627.526777][T17174] R13: 00007f57cd1e6038 R14: 00007ffcbfe836d0 R15: 00007ffcbfe837b8
[  627.526795][T17174]  </TASK>
[  627.551798][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.552526][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554194][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554357][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554501][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554643][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554787][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.554936][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555082][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555233][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555376][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555530][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555673][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555815][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.555961][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556109][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556281][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556428][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556569][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556715][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556858][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.556996][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557143][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557295][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557435][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557576][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557717][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557855][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.557993][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.558137][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.558282][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.558424][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.558562][T17167] device-mapper: ioctl: only supply one of name or uuid, cmd(5)
[  627.561550][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2352'.
[  627.720525][T13520] NFSD: Failed to start, no listeners configured.
[  627.736569][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  627.736624][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  632.520767][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2363'.
[  635.867780][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2367'.
[  636.546799][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'.
[  636.591720][T17272] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2372'.
[  639.417863][T17323] cgroup: fork rejected by pids controller in /syz6
[  640.620601][T17367] FAULT_INJECTION: forcing a failure.
[  640.620601][T17367] name failslab, interval 1, probability 0, space 0, times 0
[  640.703437][T17367] CPU: 0 UID: 0 PID: 17367 Comm: syz.4.2386 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  640.703468][T17367] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  640.703473][T17367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  640.703483][T17367] Call Trace:
[  640.703488][T17367]  <TASK>
[  640.703494][T17367]  dump_stack_lvl+0x16c/0x1f0
[  640.703524][T17367]  should_fail_ex+0x512/0x640
[  640.703542][T17367]  ? __kvmalloc_node_noprof+0x129/0xa40
[  640.703566][T17367]  should_failslab+0xc2/0x120
[  640.703588][T17367]  __kvmalloc_node_noprof+0x14a/0xa40
[  640.703610][T17367]  ? dm_create+0x9f/0x15b0
[  640.703628][T17367]  ? dm_create+0x9f/0x15b0
[  640.703641][T17367]  dm_create+0x9f/0x15b0
[  640.703656][T17367]  dev_create+0x121/0x290
[  640.703674][T17367]  ? __pfx_dev_create+0x10/0x10
[  640.703697][T17367]  ctl_ioctl+0x798/0xd70
[  640.703714][T17367]  ? __pfx_dev_create+0x10/0x10
[  640.703731][T17367]  ? __pfx_ctl_ioctl+0x10/0x10
[  640.703765][T17367]  ? __fget_files+0x20e/0x3c0
[  640.703790][T17367]  dm_ctl_ioctl+0x22/0x30
[  640.703811][T17367]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  640.703829][T17367]  __x64_sys_ioctl+0x18e/0x210
[  640.703849][T17367]  do_syscall_64+0xcd/0xf80
[  640.703875][T17367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.703890][T17367] RIP: 0033:0x7fc716b8f7c9
[  640.703903][T17367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  640.703917][T17367] RSP: 002b:00007fc717993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  640.703932][T17367] RAX: ffffffffffffffda RBX: 00007fc716de6180 RCX: 00007fc716b8f7c9
[  640.703942][T17367] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000007
[  640.703952][T17367] RBP: 00007fc716c13f91 R08: 0000000000000000 R09: 0000000000000000
[  640.703961][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  640.703970][T17367] R13: 00007fc716de6218 R14: 00007fc716de6180 R15: 00007ffe53974508
[  640.703990][T17367]  </TASK>
[  640.704005][T17367] device-mapper: core: unable to allocate device, out of memory.
[  643.508871][T15668] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  643.521035][T15668] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  643.529195][T15668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  643.536774][T15668] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  643.546044][T15668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  644.127540][T17383] chnl_net:caif_netlink_parms(): no params data found
[  644.467112][T17383] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.511237][T17383] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.586838][T17383] bridge_slave_0: entered allmulticast mode
[  644.608877][T17383] bridge_slave_0: entered promiscuous mode
[  644.652087][T17383] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.686712][T17383] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.777911][T17383] bridge_slave_1: entered allmulticast mode
[  644.812201][T17383] bridge_slave_1: entered promiscuous mode
[  645.000824][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.233365][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  645.431719][T17383] team0: Port device team_slave_0 added
[  645.458281][T17383] team0: Port device team_slave_1 added
[  645.563869][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  645.601719][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  645.657693][T15668] Bluetooth: hci6: command tx timeout
[  645.724121][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  645.782562][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.821036][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  645.936321][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  646.648578][T17383] hsr_slave_0: entered promiscuous mode
[  646.679661][T17383] hsr_slave_1: entered promiscuous mode
[  646.713275][T17383] debugfs: 'hsr0' already exists in 'hsr'
[  646.736742][T17383] Cannot create hsr debugfs directory
[  647.701340][T15668] Bluetooth: hci6: command tx timeout
[  647.825541][T17383] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  647.835646][T15668] Bluetooth: hci0: Malformed LE Event: 0x0b
[  648.606812][T17383] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  648.978800][T17383] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  649.184547][T17383] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  649.476313][T17383] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.622776][T17383] 8021q: adding VLAN 0 to HW filter on device team0
[  649.737624][T11916] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.744756][T11916] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.772227][T15668] Bluetooth: hci6: command tx timeout
[  649.822629][T11916] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.829767][T11916] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.440712][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.740162][T17383] veth0_vlan: entered promiscuous mode
[  651.779701][T17383] veth1_vlan: entered promiscuous mode
[  651.838755][T15668] Bluetooth: hci6: command tx timeout
[  651.936897][T17383] veth0_macvtap: entered promiscuous mode
[  651.991601][T17383] veth1_macvtap: entered promiscuous mode
[  653.631079][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2406'.
[  653.884242][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.956009][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.043594][T11916] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.071395][T11916] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.150979][T11916] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.585418][T11916] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.264953][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  655.275844][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  655.284021][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  655.293131][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  655.300554][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  655.835091][T11916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.872302][T11916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.158811][T14105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.183351][T14105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  656.775985][T17500] chnl_net:caif_netlink_parms(): no params data found
[  656.900902][T17500] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.919631][T17500] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.937309][T17500] bridge_slave_0: entered allmulticast mode
[  656.975224][T17500] bridge_slave_0: entered promiscuous mode
[  657.011512][T17500] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.056825][T17500] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.106390][T17500] bridge_slave_1: entered allmulticast mode
[  657.137644][T17500] bridge_slave_1: entered promiscuous mode
[  657.159432][T17523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2415'.
[  657.215409][T17523] gretap0: left allmulticast mode
[  657.233737][T17523] gretap0: left promiscuous mode
[  657.243919][T17523] bridge0: port 3(gretap0) entered disabled state
[  657.332825][ T5837] Bluetooth: hci7: command tx timeout
[  657.493976][T17523] dummy0: left allmulticast mode
[  657.500134][T17523] dummy0: left promiscuous mode
[  657.512299][T17523] bridge0: port 2(dummy0) entered disabled state
[  657.602965][T17523] bridge_slave_0: left allmulticast mode
[  657.611489][T17523] bridge_slave_0: left promiscuous mode
[  657.623931][T17523] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.954065][T17500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.127507][T17337] syz.6.2382 (17337) used greatest stack depth: 19624 bytes left
[  658.293601][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2417'.
[  658.310139][T17360] syz.6.2382 (17360) used greatest stack depth: 19144 bytes left
[  658.366448][T17500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.524109][T17500] team0: Port device team_slave_0 added
[  658.562730][T17500] team0: Port device team_slave_1 added
[  658.666982][T17500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.704824][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.808390][T17543] FAULT_INJECTION: forcing a failure.
[  658.808390][T17543] name fail_futex, interval 1, probability 0, space 0, times 0
[  658.835792][T17500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.858654][T17543] CPU: 0 UID: 0 PID: 17543 Comm: syz.4.2418 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  658.858682][T17543] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  658.858688][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  658.858698][T17543] Call Trace:
[  658.858705][T17543]  <TASK>
[  658.858711][T17543]  dump_stack_lvl+0x16c/0x1f0
[  658.858741][T17543]  should_fail_ex+0x512/0x640
[  658.858762][T17543]  get_futex_key+0x1d0/0x15f0
[  658.858780][T17543]  ? lock_acquire+0x179/0x330
[  658.858795][T17543]  ? __pfx_get_futex_key+0x10/0x10
[  658.858810][T17543]  ? find_held_lock+0x2b/0x80
[  658.858830][T17543]  ? trace_ignore_this_task+0xbc/0x100
[  658.858858][T17543]  futex_wait_setup+0x9d/0x570
[  658.858884][T17543]  __futex_wait+0x193/0x2f0
[  658.858905][T17543]  ? __pfx___futex_wait+0x10/0x10
[  658.858924][T17543]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  658.858945][T17543]  ? lockdep_hardirqs_on+0x7c/0x110
[  658.858970][T17543]  ? __pfx_futex_wake_mark+0x10/0x10
[  658.858993][T17543]  ? find_held_lock+0x2b/0x80
[  658.859071][T17543]  ? futex_private_hash_put+0x160/0x1b0
[  658.859091][T17543]  futex_wait+0xe8/0x380
[  658.859112][T17543]  ? __pfx_futex_wait+0x10/0x10
[  658.859136][T17543]  ? __lock_acquire+0x436/0x2890
[  658.859154][T17543]  do_futex+0x229/0x350
[  658.859171][T17543]  ? __pfx_do_futex+0x10/0x10
[  658.859189][T17543]  ? find_held_lock+0x2b/0x80
[  658.859209][T17543]  __x64_sys_futex+0x1e0/0x4c0
[  658.859228][T17543]  ? __fget_files+0x20e/0x3c0
[  658.859248][T17543]  ? __pfx___x64_sys_futex+0x10/0x10
[  658.859268][T17543]  ? fdget+0x187/0x210
[  658.859291][T17543]  do_syscall_64+0xcd/0xf80
[  658.859323][T17543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.859340][T17543] RIP: 0033:0x7fc716b8f7c9
[  658.859354][T17543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  658.859369][T17543] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  658.859384][T17543] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  658.859394][T17543] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  658.859403][T17543] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  658.859412][T17543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  658.859421][T17543] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  658.859442][T17543]  </TASK>
[  659.108620][T17537] : Can't lookup blockdev
[  659.129384][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2418'.
[  659.161296][T17500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.168330][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.194896][T17500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.230469][T17500] hsr_slave_0: entered promiscuous mode
[  659.236775][T17500] hsr_slave_1: entered promiscuous mode
[  659.242790][T17500] debugfs: 'hsr0' already exists in 'hsr'
[  659.248661][T17500] Cannot create hsr debugfs directory
[  659.368155][T17500] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  659.475870][ T5837] Bluetooth: hci7: command tx timeout
[  659.514086][T17547] FAULT_INJECTION: forcing a failure.
[  659.514086][T17547] name failslab, interval 1, probability 0, space 0, times 0
[  659.532228][T17547] CPU: 0 UID: 0 PID: 17547 Comm: syz.4.2419 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  659.532258][T17547] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  659.532265][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.532274][T17547] Call Trace:
[  659.532280][T17547]  <TASK>
[  659.532287][T17547]  dump_stack_lvl+0x16c/0x1f0
[  659.532319][T17547]  should_fail_ex+0x512/0x640
[  659.532337][T17547]  ? kmem_cache_alloc_noprof+0x62/0x770
[  659.532359][T17547]  should_failslab+0xc2/0x120
[  659.532382][T17547]  kmem_cache_alloc_noprof+0x83/0x770
[  659.532400][T17547]  ? mas_alloc_nodes+0x27b/0x380
[  659.532423][T17547]  ? mas_alloc_nodes+0x27b/0x380
[  659.532441][T17547]  mas_alloc_nodes+0x27b/0x380
[  659.532462][T17547]  mas_preallocate+0x5e3/0xee0
[  659.532489][T17547]  ? __pfx_mas_preallocate+0x10/0x10
[  659.532517][T17547]  ? vm_area_alloc+0x1f/0x160
[  659.532534][T17547]  ? lockdep_init_map_type+0x5c/0x270
[  659.532552][T17547]  __mmap_region+0x1262/0x2a00
[  659.532573][T17547]  ? __pfx___mmap_region+0x10/0x10
[  659.532605][T17547]  ? rcu_is_watching+0x12/0xc0
[  659.532660][T17547]  ? rcu_is_watching+0x12/0xc0
[  659.532685][T17547]  mmap_region+0x1ab/0x3f0
[  659.532703][T17547]  ? __get_unmapped_area+0x267/0x3f0
[  659.532726][T17547]  do_mmap+0xa3e/0x1210
[  659.532751][T17547]  ? __pfx_do_mmap+0x10/0x10
[  659.532773][T17547]  ? __pfx_down_write_killable+0x10/0x10
[  659.532794][T17547]  vm_mmap_pgoff+0x29e/0x470
[  659.532818][T17547]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  659.532839][T17547]  ? find_held_lock+0x2b/0x80
[  659.532861][T17547]  ? __x64_sys_futex+0x1e0/0x4c0
[  659.532877][T17547]  ? __x64_sys_futex+0x1e9/0x4c0
[  659.532897][T17547]  ksys_mmap_pgoff+0x7d/0x5c0
[  659.532917][T17547]  ? xfd_validate_state+0x61/0x180
[  659.532934][T17547]  __x64_sys_mmap+0x125/0x190
[  659.532952][T17547]  do_syscall_64+0xcd/0xf80
[  659.532976][T17547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.532992][T17547] RIP: 0033:0x7fc716b8f7c9
[  659.533005][T17547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  659.533020][T17547] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  659.533035][T17547] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  659.533046][T17547] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000
[  659.533055][T17547] RBP: 00007fc716c13f91 R08: 0000000000000401 R09: 0000000000008000
[  659.533065][T17547] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  659.533074][T17547] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  659.533095][T17547]  </TASK>
[  660.504955][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2419'.
[  660.624599][T17500] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  660.636445][T17500] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  660.748751][T17500] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  661.238026][T17500] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.399366][T17500] 8021q: adding VLAN 0 to HW filter on device team0
[  661.554206][ T5837] Bluetooth: hci7: command tx timeout
[  661.578021][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2424'.
[  661.599928][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.607113][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.766830][T17573] bond0: left allmulticast mode
[  661.788717][T17573] bond_slave_0: left allmulticast mode
[  661.829343][T17573] bond_slave_1: left allmulticast mode
[  661.886909][T17573] bond0: left promiscuous mode
[  661.906488][T17573] bond_slave_0: left promiscuous mode
[  661.937300][T17573] bond_slave_1: left promiscuous mode
[  661.979614][T17573] bridge0: port 3(bond0) entered disabled state
[  662.017773][T17573] bridge_slave_1: left allmulticast mode
[  662.043919][T17573] bridge_slave_1: left promiscuous mode
[  662.062135][T17573] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.094153][T17573] bridge_slave_0: left allmulticast mode
[  662.121828][T17573] bridge_slave_0: left promiscuous mode
[  662.140427][T17573] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.289667][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.296827][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.504851][ T3547] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.649651][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'.
[  662.700158][T17577] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2426'.
[  662.770558][T17577] FAULT_INJECTION: forcing a failure.
[  662.770558][T17577] name failslab, interval 1, probability 0, space 0, times 0
[  662.814085][ T3547] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.837050][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.4.2426 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  662.837080][T17577] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  662.837087][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  662.837096][T17577] Call Trace:
[  662.837103][T17577]  <TASK>
[  662.837109][T17577]  dump_stack_lvl+0x16c/0x1f0
[  662.837138][T17577]  should_fail_ex+0x512/0x640
[  662.837156][T17577]  ? __kvmalloc_node_noprof+0x129/0xa40
[  662.837180][T17577]  should_failslab+0xc2/0x120
[  662.837203][T17577]  __kvmalloc_node_noprof+0x14a/0xa40
[  662.837224][T17577]  ? kfree+0x27d/0x6e0
[  662.837240][T17577]  ? snd_pcm_plugin_alloc+0x5fd/0x7f0
[  662.837262][T17577]  ? snd_pcm_plugin_alloc+0x5fd/0x7f0
[  662.837278][T17577]  snd_pcm_plugin_alloc+0x5fd/0x7f0
[  662.837299][T17577]  snd_pcm_plug_alloc+0x146/0x330
[  662.837318][T17577]  snd_pcm_oss_change_params_locked+0x1b31/0x3ab0
[  662.837344][T17577]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  662.837362][T17577]  ? snd_pcm_oss_ioctl+0x110e/0x37f0
[  662.837392][T17577]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  662.837412][T17577]  snd_pcm_oss_ioctl+0x2212/0x37f0
[  662.837430][T17577]  ? hook_file_ioctl_common+0x144/0x410
[  662.837450][T17577]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  662.837469][T17577]  ? __fget_files+0x20e/0x3c0
[  662.837493][T17577]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  662.837510][T17577]  __x64_sys_ioctl+0x18e/0x210
[  662.837530][T17577]  do_syscall_64+0xcd/0xf80
[  662.837554][T17577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.837570][T17577] RIP: 0033:0x7fc716b8f7c9
[  662.837583][T17577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  662.837598][T17577] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  662.837613][T17577] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  662.837624][T17577] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007
[  662.837634][T17577] RBP: 00007fc716c13f91 R08: 0000000000000000 R09: 0000000000000000
[  662.837643][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  662.837652][T17577] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  662.837672][T17577]  </TASK>
[  663.685273][ T5837] Bluetooth: hci7: command tx timeout
[  664.844239][ T3547] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.122675][ T3547] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.962486][ T3547] bridge_slave_1: left allmulticast mode
[  665.968405][ T3547] bridge_slave_1: left promiscuous mode
[  666.054856][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.153785][ T3547] bridge_slave_0: left allmulticast mode
[  666.191215][ T3547] bridge_slave_0: left promiscuous mode
[  666.198457][T17604] FAULT_INJECTION: forcing a failure.
[  666.198457][T17604] name failslab, interval 1, probability 0, space 0, times 0
[  666.220423][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.271233][T17604] CPU: 0 UID: 0 PID: 17604 Comm: syz.4.2431 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  666.271264][T17604] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  666.271271][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  666.271280][T17604] Call Trace:
[  666.271295][T17604]  <TASK>
[  666.271302][T17604]  dump_stack_lvl+0x16c/0x1f0
[  666.271331][T17604]  should_fail_ex+0x512/0x640
[  666.271349][T17604]  ? kmem_cache_alloc_noprof+0x62/0x770
[  666.271369][T17604]  should_failslab+0xc2/0x120
[  666.271394][T17604]  kmem_cache_alloc_noprof+0x83/0x770
[  666.271412][T17604]  ? vm_area_dup+0x27/0x8d0
[  666.271430][T17604]  ? vm_area_dup+0x27/0x8d0
[  666.271444][T17604]  vm_area_dup+0x27/0x8d0
[  666.271460][T17604]  copy_vma+0x4ef/0xa70
[  666.271480][T17604]  ? __pfx_copy_vma+0x10/0x10
[  666.271517][T17604]  copy_vma_and_data+0x1cf/0x790
[  666.271536][T17604]  ? __pfx_copy_vma_and_data+0x10/0x10
[  666.271562][T17604]  ? find_held_lock+0x2b/0x80
[  666.271582][T17604]  ? move_vma+0x533/0x1790
[  666.271603][T17604]  move_vma+0x545/0x1790
[  666.271623][T17604]  ? __pfx_move_vma+0x10/0x10
[  666.271643][T17604]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  666.271665][T17604]  ? cap_mmap_addr+0x4b/0x120
[  666.271679][T17604]  ? bpf_lsm_mmap_addr+0x9/0x10
[  666.271696][T17604]  ? security_mmap_addr+0x6c/0x1e0
[  666.271715][T17604]  ? __get_unmapped_area+0x267/0x3f0
[  666.271739][T17604]  ? vrm_set_new_addr+0x208/0x290
[  666.271758][T17604]  mremap_to+0x1b7/0x450
[  666.271776][T17604]  do_mremap+0x13a8/0x2020
[  666.271794][T17604]  ? futex_private_hash_put+0xa0/0x1b0
[  666.271815][T17604]  ? __pfx_do_mremap+0x10/0x10
[  666.271837][T17604]  ? rcu_is_watching+0x12/0xc0
[  666.271861][T17604]  ? irqentry_exit+0x1dd/0x8c0
[  666.271878][T17604]  __do_sys_mremap+0x119/0x170
[  666.271895][T17604]  ? __pfx___do_sys_mremap+0x10/0x10
[  666.271915][T17604]  ? find_held_lock+0x2b/0x80
[  666.271936][T17604]  ? __x64_sys_futex+0x1e0/0x4c0
[  666.271965][T17604]  do_syscall_64+0xcd/0xf80
[  666.271989][T17604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.272005][T17604] RIP: 0033:0x7fc716b8f7c9
[  666.272018][T17604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  666.272033][T17604] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  666.272048][T17604] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  666.272058][T17604] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200001000000
[  666.272066][T17604] RBP: 00007fc716c13f91 R08: 0000000100000000 R09: 0000000000000000
[  666.272076][T17604] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  666.272085][T17604] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  666.272105][T17604]  </TASK>
[  668.353911][T17625] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  668.581430][T17625] FAULT_INJECTION: forcing a failure.
[  668.581430][T17625] name failslab, interval 1, probability 0, space 0, times 0
[  668.637311][T17625] CPU: 0 UID: 0 PID: 17625 Comm: syz.7.2434 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  668.637341][T17625] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  668.637347][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  668.637357][T17625] Call Trace:
[  668.637362][T17625]  <TASK>
[  668.637368][T17625]  dump_stack_lvl+0x16c/0x1f0
[  668.637397][T17625]  should_fail_ex+0x512/0x640
[  668.637415][T17625]  ? __kmalloc_noprof+0xca/0x910
[  668.637433][T17625]  should_failslab+0xc2/0x120
[  668.637457][T17625]  __kmalloc_noprof+0xeb/0x910
[  668.637473][T17625]  ? __register_sysctl_table+0xe8e/0x1900
[  668.637494][T17625]  ? __register_sysctl_table+0xea2/0x1900
[  668.637516][T17625]  ? __register_sysctl_table+0xea2/0x1900
[  668.637536][T17625]  __register_sysctl_table+0xea2/0x1900
[  668.637560][T17625]  ? __pfx___register_sysctl_table+0x10/0x10
[  668.637580][T17625]  ? kfree+0x271/0x6e0
[  668.637596][T17625]  ? __asan_memcpy+0x3c/0x60
[  668.637615][T17625]  setup_ipc_sysctls+0x1aa/0x300
[  668.637641][T17625]  copy_ipcs+0x570/0x7d0
[  668.637658][T17625]  create_new_namespaces+0x20a/0xab0
[  668.637679][T17625]  ? security_capable+0x7e/0x260
[  668.637706][T17625]  copy_namespaces+0x468/0x570
[  668.637727][T17625]  copy_process+0x2a70/0x7430
[  668.637757][T17625]  ? __pfx_copy_process+0x10/0x10
[  668.637783][T17625]  ? _copy_from_user+0x59/0xd0
[  668.637802][T17625]  kernel_clone+0xfc/0x910
[  668.637825][T17625]  ? __pfx_kernel_clone+0x10/0x10
[  668.637846][T17625]  ? futex_private_hash_put+0x160/0x1b0
[  668.637866][T17625]  ? __pfx_futex_wait+0x10/0x10
[  668.637891][T17625]  __do_sys_clone3+0x212/0x290
[  668.637913][T17625]  ? __pfx___do_sys_clone3+0x10/0x10
[  668.637943][T17625]  ? find_held_lock+0x2b/0x80
[  668.637976][T17625]  do_syscall_64+0xcd/0xf80
[  668.638001][T17625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.638016][T17625] RIP: 0033:0x7f452f58f7c9
[  668.638030][T17625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  668.638053][T17625] RSP: 002b:00007f4530382f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  668.638068][T17625] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f452f58f7c9
[  668.638079][T17625] RDX: 00007f4530382f20 RSI: 0000000000000058 RDI: 00007f4530382f20
[  668.638088][T17625] RBP: 00007f452f613f91 R08: 0000000000000000 R09: 0000000000000058
[  668.638098][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  668.638108][T17625] R13: 00007f452f7e6038 R14: 00007f452f7e5fa0 R15: 00007fff273de2f8
[  668.638129][T17625]  </TASK>
[  668.638137][T17625] sysctl could not get directory: /kernel -12
[  669.363006][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  669.389259][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  669.420792][ T3547] bond0 (unregistering): Released all slaves
[  669.784620][T17500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.055803][T17673] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2440'.
[  671.313689][ T3547] hsr_slave_0: left promiscuous mode
[  671.388874][ T3547] hsr_slave_1: left promiscuous mode
[  671.423821][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.480151][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  671.510976][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.551392][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  671.694400][ T3547] veth1_macvtap: left promiscuous mode
[  671.733048][ T3547] veth0_macvtap: left promiscuous mode
[  671.769610][ T3547] veth1_vlan: left promiscuous mode
[  671.805607][ T3547] veth0_vlan: left promiscuous mode
[  673.215126][T17687] Invalid ELF header magic: != ELF
[  674.665668][ T3547] team0 (unregistering): Port device team_slave_1 removed
[  674.980431][ T3547] team0 (unregistering): Port device team_slave_0 removed
[  677.584923][T17500] veth0_vlan: entered promiscuous mode
[  677.681569][T17500] veth1_vlan: entered promiscuous mode
[  677.953649][T17500] veth0_macvtap: entered promiscuous mode
[  678.008610][T17500] veth1_macvtap: entered promiscuous mode
[  678.095740][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.170363][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.253654][ T2993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.283694][T17719] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2448'.
[  678.410323][ T2993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.499328][ T2993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.721673][ T2993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.582472][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.628676][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.812273][T14108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.859430][T14108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  681.781750][T17787] Invalid ELF header magic: != ELF
[  682.053338][T15668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  682.067671][T15668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  682.076069][T15668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  682.084319][T15668] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  682.097803][T15668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  683.367447][T17790] chnl_net:caif_netlink_parms(): no params data found
[  683.470857][T17805] netlink: 'syz.7.2460': attribute type 1 has an invalid length.
[  683.496945][T17805] snd_virmidi snd_virmidi.0: control 61678:131081:3:yªƒ>oÆ[k<÷:1597170177 is already present
[  683.550745][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'.
[  683.926033][T17790] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.944053][T17790] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.962457][T17790] bridge_slave_0: entered allmulticast mode
[  683.977756][T17790] bridge_slave_0: entered promiscuous mode
[  684.010078][T17790] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.021888][T17790] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.042638][T17790] bridge_slave_1: entered allmulticast mode
[  684.059023][T17790] bridge_slave_1: entered promiscuous mode
[  684.155251][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.166740][T15668] Bluetooth: hci4: command tx timeout
[  684.203042][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.280075][T17790] team0: Port device team_slave_0 added
[  684.310435][T17790] team0: Port device team_slave_1 added
[  684.395796][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.402752][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.543248][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.736237][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.784485][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.943084][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.406029][T17790] hsr_slave_0: entered promiscuous mode
[  685.426369][T17790] hsr_slave_1: entered promiscuous mode
[  685.451264][T17790] debugfs: 'hsr0' already exists in 'hsr'
[  685.478005][T17790] Cannot create hsr debugfs directory
[  686.236979][T15668] Bluetooth: hci4: command tx timeout
[  686.354446][T17790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.391331][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2470'.
[  686.564761][T17790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.657246][T17845] FAULT_INJECTION: forcing a failure.
[  686.657246][T17845] name failslab, interval 1, probability 0, space 0, times 0
[  686.701832][T17845] CPU: 0 UID: 0 PID: 17845 Comm: syz.7.2471 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  686.701863][T17845] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  686.701869][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  686.701879][T17845] Call Trace:
[  686.701885][T17845]  <TASK>
[  686.701893][T17845]  dump_stack_lvl+0x16c/0x1f0
[  686.701922][T17845]  should_fail_ex+0x512/0x640
[  686.701943][T17845]  should_failslab+0xc2/0x120
[  686.701967][T17845]  kmem_cache_alloc_noprof+0x83/0x770
[  686.701986][T17845]  ? dst_alloc+0x99/0x1a0
[  686.702008][T17845]  ? dst_alloc+0x99/0x1a0
[  686.702024][T17845]  dst_alloc+0x99/0x1a0
[  686.702043][T17845]  rt_dst_alloc+0x35/0x3a0
[  686.702060][T17845]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  686.702086][T17845]  ip_route_output_key_hash+0x10f/0x2b0
[  686.702105][T17845]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  686.702131][T17845]  ? find_held_lock+0x2b/0x80
[  686.702153][T17845]  ip_route_output_flow+0x27/0x150
[  686.702174][T17845]  __ip_queue_xmit+0x1b67/0x2330
[  686.702193][T17845]  ? __pfx_ip_queue_xmit+0x10/0x10
[  686.702208][T17845]  __tcp_transmit_skb+0x2cae/0x48b0
[  686.702237][T17845]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  686.702312][T17845]  ? ktime_get+0x200/0x310
[  686.702335][T17845]  ? lockdep_hardirqs_on+0x7c/0x110
[  686.702364][T17845]  tcp_write_xmit+0x12aa/0x8710
[  686.702397][T17845]  ? __sk_mem_schedule+0xd0/0x100
[  686.702423][T17845]  tcp_sendmsg_locked+0x36d9/0x42a0
[  686.702455][T17845]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  686.702475][T17845]  ? do_raw_spin_lock+0x12c/0x2b0
[  686.702492][T17845]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  686.702514][T17845]  ? __local_bh_enable_ip+0xa4/0x120
[  686.702538][T17845]  tcp_sendmsg+0x2e/0x50
[  686.702554][T17845]  ? __pfx_tcp_sendmsg+0x10/0x10
[  686.702571][T17845]  inet_sendmsg+0xb9/0x140
[  686.702590][T17845]  sock_write_iter+0x509/0x610
[  686.702605][T17845]  ? __pfx_sock_write_iter+0x10/0x10
[  686.702627][T17845]  ? bpf_lsm_file_permission+0x9/0x10
[  686.702645][T17845]  ? security_file_permission+0x71/0x210
[  686.702666][T17845]  ? rw_verify_area+0xcf/0x6c0
[  686.702687][T17845]  vfs_write+0x7d3/0x11d0
[  686.702708][T17845]  ? __pfx_sock_write_iter+0x10/0x10
[  686.702725][T17845]  ? __pfx_vfs_write+0x10/0x10
[  686.702744][T17845]  ? find_held_lock+0x2b/0x80
[  686.702776][T17845]  ksys_write+0x1f8/0x250
[  686.702796][T17845]  ? __pfx_ksys_write+0x10/0x10
[  686.702822][T17845]  do_syscall_64+0xcd/0xf80
[  686.702847][T17845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.702862][T17845] RIP: 0033:0x7f452f58f7c9
[  686.702877][T17845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.702891][T17845] RSP: 002b:00007f4530383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  686.702906][T17845] RAX: ffffffffffffffda RBX: 00007f452f7e5fa0 RCX: 00007f452f58f7c9
[  686.702917][T17845] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  686.702926][T17845] RBP: 00007f452f613f91 R08: 0000000000000000 R09: 0000000000000000
[  686.702936][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.702945][T17845] R13: 00007f452f7e6038 R14: 00007f452f7e5fa0 R15: 00007fff273de2f8
[  686.702966][T17845]  </TASK>
[  687.499508][T17790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.570435][T17790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.956179][T17790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  688.006612][T17790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  688.034551][T17790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  688.065522][T17790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  688.311368][T15668] Bluetooth: hci4: command tx timeout
[  688.808319][T17790] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.869663][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  688.876263][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  688.908708][T17790] 8021q: adding VLAN 0 to HW filter on device team0
[  688.955139][T11738] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.962304][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  689.062846][T11738] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.069984][T11738] bridge0: port 2(bridge_slave_1) entered forwarding state
[  689.244362][T17891] zswap: compressor  not available
[  690.040770][T17916] FAULT_INJECTION: forcing a failure.
[  690.040770][T17916] name failslab, interval 1, probability 0, space 0, times 0
[  690.158525][T17916] CPU: 0 UID: 0 PID: 17916 Comm: syz.4.2481 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  690.158572][T17916] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  690.158578][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  690.158588][T17916] Call Trace:
[  690.158594][T17916]  <TASK>
[  690.158600][T17916]  dump_stack_lvl+0x16c/0x1f0
[  690.158629][T17916]  should_fail_ex+0x512/0x640
[  690.158650][T17916]  should_failslab+0xc2/0x120
[  690.158674][T17916]  kmem_cache_alloc_noprof+0x83/0x770
[  690.158693][T17916]  ? dst_alloc+0x99/0x1a0
[  690.158714][T17916]  ? dst_alloc+0x99/0x1a0
[  690.158730][T17916]  dst_alloc+0x99/0x1a0
[  690.158750][T17916]  rt_dst_alloc+0x35/0x3a0
[  690.158766][T17916]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  690.158793][T17916]  ip_route_output_key_hash+0x10f/0x2b0
[  690.158812][T17916]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  690.158838][T17916]  ? find_held_lock+0x2b/0x80
[  690.158859][T17916]  ip_route_output_flow+0x27/0x150
[  690.158888][T17916]  __ip_queue_xmit+0x1b67/0x2330
[  690.158908][T17916]  ? __pfx_ip_queue_xmit+0x10/0x10
[  690.158923][T17916]  __tcp_transmit_skb+0x2cae/0x48b0
[  690.158952][T17916]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  690.158983][T17916]  ? ktime_get+0x200/0x310
[  690.158997][T17916]  ? lockdep_hardirqs_on+0x7c/0x110
[  690.159024][T17916]  tcp_write_xmit+0x12aa/0x8710
[  690.159055][T17916]  ? __sk_mem_schedule+0xd0/0x100
[  690.159080][T17916]  tcp_sendmsg_locked+0x36d9/0x42a0
[  690.159110][T17916]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  690.159130][T17916]  ? do_raw_spin_lock+0x12c/0x2b0
[  690.159147][T17916]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  690.159169][T17916]  ? __local_bh_enable_ip+0xa4/0x120
[  690.159192][T17916]  tcp_sendmsg+0x2e/0x50
[  690.159208][T17916]  ? __pfx_tcp_sendmsg+0x10/0x10
[  690.159224][T17916]  inet_sendmsg+0xb9/0x140
[  690.159244][T17916]  sock_write_iter+0x509/0x610
[  690.159259][T17916]  ? __pfx_sock_write_iter+0x10/0x10
[  690.159281][T17916]  ? bpf_lsm_file_permission+0x9/0x10
[  690.159298][T17916]  ? security_file_permission+0x71/0x210
[  690.159318][T17916]  ? rw_verify_area+0xcf/0x6c0
[  690.159340][T17916]  vfs_write+0x7d3/0x11d0
[  690.159361][T17916]  ? __pfx_sock_write_iter+0x10/0x10
[  690.159378][T17916]  ? __pfx_vfs_write+0x10/0x10
[  690.159397][T17916]  ? find_held_lock+0x2b/0x80
[  690.159428][T17916]  ksys_write+0x1f8/0x250
[  690.159448][T17916]  ? __pfx_ksys_write+0x10/0x10
[  690.159475][T17916]  do_syscall_64+0xcd/0xf80
[  690.159499][T17916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.159515][T17916] RIP: 0033:0x7fc716b8f7c9
[  690.159529][T17916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  690.159543][T17916] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.159558][T17916] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  690.159569][T17916] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  690.159578][T17916] RBP: 00007fc716c13f91 R08: 0000000000000000 R09: 0000000000000000
[  690.159587][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.159596][T17916] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  690.159617][T17916]  </TASK>
[  690.758492][T17912] zswap: compressor  not available
[  690.850174][T15668] Bluetooth: hci4: command tx timeout
[  691.793484][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2485'.
[  691.925797][T17941] bridge0: entered promiscuous mode
[  691.998669][T17941] bridge0: entered allmulticast mode
[  692.680734][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.867806][T17790] veth0_vlan: entered promiscuous mode
[  692.947569][T17790] veth1_vlan: entered promiscuous mode
[  693.073357][T17790] veth0_macvtap: entered promiscuous mode
[  693.120627][T17790] veth1_macvtap: entered promiscuous mode
[  693.206479][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  693.251186][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  693.301608][T11738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.338554][T11738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.377958][T11738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.428278][T11738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.658848][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.702561][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.807962][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.853162][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.196105][T17991] vcan0: tx drop: invalid sa for name 0x00000000000000fd
[  694.293237][T17994] FAULT_INJECTION: forcing a failure.
[  694.293237][T17994] name failslab, interval 1, probability 0, space 0, times 0
[  694.417897][T17994] CPU: 0 UID: 0 PID: 17994 Comm: syz.8.2490 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  694.417927][T17994] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  694.417934][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  694.417943][T17994] Call Trace:
[  694.417949][T17994]  <TASK>
[  694.417957][T17994]  dump_stack_lvl+0x16c/0x1f0
[  694.417985][T17994]  should_fail_ex+0x512/0x640
[  694.418002][T17994]  ? trace_fib_table_lookup+0x19f/0x200
[  694.418027][T17994]  should_failslab+0xc2/0x120
[  694.418051][T17994]  kmem_cache_alloc_noprof+0x83/0x770
[  694.418069][T17994]  ? dst_alloc+0x99/0x1a0
[  694.418091][T17994]  ? dst_alloc+0x99/0x1a0
[  694.418107][T17994]  dst_alloc+0x99/0x1a0
[  694.418127][T17994]  rt_dst_alloc+0x35/0x3a0
[  694.418143][T17994]  ip_route_output_key_hash_rcu+0x87a/0x28e0
[  694.418173][T17994]  ip_route_output_key_hash+0x10f/0x2b0
[  694.418193][T17994]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  694.418218][T17994]  ? find_held_lock+0x2b/0x80
[  694.418240][T17994]  ip_route_output_flow+0x27/0x150
[  694.418263][T17994]  __ip_queue_xmit+0x1b67/0x2330
[  694.418283][T17994]  ? __pfx_ip_queue_xmit+0x10/0x10
[  694.418298][T17994]  __tcp_transmit_skb+0x2cae/0x48b0
[  694.418330][T17994]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  694.418360][T17994]  ? ktime_get+0x200/0x310
[  694.418374][T17994]  ? lockdep_hardirqs_on+0x7c/0x110
[  694.418402][T17994]  tcp_write_xmit+0x12aa/0x8710
[  694.418433][T17994]  ? __sk_mem_schedule+0xd0/0x100
[  694.418458][T17994]  tcp_sendmsg_locked+0x36d9/0x42a0
[  694.418490][T17994]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  694.418516][T17994]  ? do_raw_spin_lock+0x12c/0x2b0
[  694.418535][T17994]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  694.418557][T17994]  ? __local_bh_enable_ip+0xa4/0x120
[  694.418583][T17994]  tcp_sendmsg+0x2e/0x50
[  694.418598][T17994]  ? __pfx_tcp_sendmsg+0x10/0x10
[  694.418615][T17994]  inet_sendmsg+0xb9/0x140
[  694.418635][T17994]  sock_write_iter+0x509/0x610
[  694.418650][T17994]  ? __pfx_sock_write_iter+0x10/0x10
[  694.418671][T17994]  ? bpf_lsm_file_permission+0x9/0x10
[  694.418689][T17994]  ? security_file_permission+0x71/0x210
[  694.418710][T17994]  ? rw_verify_area+0xcf/0x6c0
[  694.418731][T17994]  vfs_write+0x7d3/0x11d0
[  694.418752][T17994]  ? __pfx_sock_write_iter+0x10/0x10
[  694.418768][T17994]  ? __pfx_vfs_write+0x10/0x10
[  694.418788][T17994]  ? find_held_lock+0x2b/0x80
[  694.418818][T17994]  ksys_write+0x1f8/0x250
[  694.418839][T17994]  ? __pfx_ksys_write+0x10/0x10
[  694.418865][T17994]  do_syscall_64+0xcd/0xf80
[  694.418889][T17994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.418905][T17994] RIP: 0033:0x7f96ee58f7c9
[  694.418919][T17994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  694.418934][T17994] RSP: 002b:00007f96ec7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.418949][T17994] RAX: ffffffffffffffda RBX: 00007f96ee7e5fa0 RCX: 00007f96ee58f7c9
[  694.418960][T17994] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003
[  694.418969][T17994] RBP: 00007f96ee613f91 R08: 0000000000000000 R09: 0000000000000000
[  694.418980][T17994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  694.418989][T17994] R13: 00007f96ee7e6038 R14: 00007f96ee7e5fa0 R15: 00007ffebeac6728
[  694.419010][T17994]  </TASK>
[  694.762166][T15668] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  695.208570][T17997] zswap: compressor  not available
[  695.505205][T18012] FAULT_INJECTION: forcing a failure.
[  695.505205][T18012] name fail_futex, interval 1, probability 0, space 0, times 0
[  695.588104][T18012] CPU: 0 UID: 0 PID: 18012 Comm: syz.4.2494 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  695.588134][T18012] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  695.588140][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  695.588150][T18012] Call Trace:
[  695.588155][T18012]  <TASK>
[  695.588162][T18012]  dump_stack_lvl+0x16c/0x1f0
[  695.588196][T18012]  should_fail_ex+0x512/0x640
[  695.588216][T18012]  get_futex_key+0x1d0/0x15f0
[  695.588234][T18012]  ? kasan_save_free_info+0x3b/0x60
[  695.588251][T18012]  ? __kasan_slab_free+0x5f/0x80
[  695.588272][T18012]  ? __pfx_get_futex_key+0x10/0x10
[  695.588286][T18012]  ? __x64_sys_ioctl+0x18e/0x210
[  695.588304][T18012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.588332][T18012]  futex_wait_setup+0x9d/0x570
[  695.588359][T18012]  __futex_wait+0x193/0x2f0
[  695.588380][T18012]  ? __pfx___futex_wait+0x10/0x10
[  695.588404][T18012]  ? __pfx_futex_wake_mark+0x10/0x10
[  695.588427][T18012]  ? futex_hash+0x2c5/0x380
[  695.588445][T18012]  ? futex_private_hash_put+0x160/0x1b0
[  695.588462][T18012]  futex_wait+0xe8/0x380
[  695.588482][T18012]  ? __pfx_futex_wait+0x10/0x10
[  695.588512][T18012]  do_futex+0x229/0x350
[  695.588529][T18012]  ? __pfx_do_futex+0x10/0x10
[  695.588547][T18012]  ? find_held_lock+0x2b/0x80
[  695.588568][T18012]  __x64_sys_futex+0x1e0/0x4c0
[  695.588586][T18012]  ? __pfx_loop_control_ioctl+0x10/0x10
[  695.588601][T18012]  ? __pfx___x64_sys_futex+0x10/0x10
[  695.588621][T18012]  ? fput+0x70/0xf0
[  695.588638][T18012]  do_syscall_64+0xcd/0xf80
[  695.588662][T18012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.588677][T18012] RIP: 0033:0x7fc716b8f7c9
[  695.588690][T18012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.588705][T18012] RSP: 002b:00007fc7179d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  695.588720][T18012] RAX: ffffffffffffffda RBX: 00007fc716de5fa8 RCX: 00007fc716b8f7c9
[  695.588730][T18012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc716de5fa8
[  695.588739][T18012] RBP: 00007fc716de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  695.588748][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  695.588757][T18012] R13: 00007fc716de6038 R14: 00007ffe53974420 R15: 00007ffe53974508
[  695.588777][T18012]  </TASK>
[  696.954021][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2494'.
[  698.650244][T18024] rtc_cmos 00:00: Alarms can be up to one day in the future
[  699.196565][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  699.267991][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  699.275457][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  699.406118][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  699.413460][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[  700.898624][T18086] FAULT_INJECTION: forcing a failure.
[  700.898624][T18086] name failslab, interval 1, probability 0, space 0, times 0
[  701.042186][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz.4.2510 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  701.042217][T18086] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  701.042224][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.042233][T18086] Call Trace:
[  701.042238][T18086]  <TASK>
[  701.042245][T18086]  dump_stack_lvl+0x16c/0x1f0
[  701.042274][T18086]  should_fail_ex+0x512/0x640
[  701.042292][T18086]  ? kmem_cache_alloc_noprof+0x62/0x770
[  701.042313][T18086]  should_failslab+0xc2/0x120
[  701.042337][T18086]  kmem_cache_alloc_noprof+0x83/0x770
[  701.042356][T18086]  ? vm_area_alloc+0x1f/0x160
[  701.042374][T18086]  ? vm_area_alloc+0x1f/0x160
[  701.042388][T18086]  vm_area_alloc+0x1f/0x160
[  701.042403][T18086]  __mmap_region+0x107a/0x2a00
[  701.042424][T18086]  ? __pfx___mmap_region+0x10/0x10
[  701.042456][T18086]  ? rcu_is_watching+0x12/0xc0
[  701.042511][T18086]  ? rcu_is_watching+0x12/0xc0
[  701.042536][T18086]  mmap_region+0x1ab/0x3f0
[  701.042554][T18086]  ? __get_unmapped_area+0x267/0x3f0
[  701.042578][T18086]  do_mmap+0xa3e/0x1210
[  701.042603][T18086]  ? __pfx_do_mmap+0x10/0x10
[  701.042625][T18086]  ? __pfx_down_write_killable+0x10/0x10
[  701.042645][T18086]  vm_mmap_pgoff+0x29e/0x470
[  701.042670][T18086]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  701.042691][T18086]  ? find_held_lock+0x2b/0x80
[  701.042712][T18086]  ? __x64_sys_futex+0x1e0/0x4c0
[  701.042729][T18086]  ? __x64_sys_futex+0x1e9/0x4c0
[  701.042748][T18086]  ksys_mmap_pgoff+0x7d/0x5c0
[  701.042768][T18086]  ? xfd_validate_state+0x61/0x180
[  701.042786][T18086]  __x64_sys_mmap+0x125/0x190
[  701.042804][T18086]  do_syscall_64+0xcd/0xf80
[  701.042838][T18086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.042854][T18086] RIP: 0033:0x7fc716b8f7c9
[  701.042868][T18086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.042883][T18086] RSP: 002b:00007fc7179d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  701.042898][T18086] RAX: ffffffffffffffda RBX: 00007fc716de5fa0 RCX: 00007fc716b8f7c9
[  701.042909][T18086] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000
[  701.042918][T18086] RBP: 00007fc716c13f91 R08: 0000000000000401 R09: 0000000000008000
[  701.042929][T18086] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  701.042938][T18086] R13: 00007fc716de6038 R14: 00007fc716de5fa0 R15: 00007ffe53974508
[  701.042958][T18086]  </TASK>
[  701.715620][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2510'.
[  701.849620][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  702.226730][T18108] FAULT_INJECTION: forcing a failure.
[  702.226730][T18108] name fail_futex, interval 1, probability 0, space 0, times 0
[  702.294375][T18108] CPU: 0 UID: 0 PID: 18108 Comm: syz.7.2504 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  702.294404][T18108] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  702.294411][T18108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  702.294420][T18108] Call Trace:
[  702.294426][T18108]  <TASK>
[  702.294433][T18108]  dump_stack_lvl+0x16c/0x1f0
[  702.294460][T18108]  should_fail_ex+0x512/0x640
[  702.294481][T18108]  get_futex_key+0x1d0/0x15f0
[  702.294499][T18108]  ? kasan_save_free_info+0x3b/0x60
[  702.294516][T18108]  ? __kasan_slab_free+0x5f/0x80
[  702.294536][T18108]  ? __pfx_get_futex_key+0x10/0x10
[  702.294551][T18108]  ? __x64_sys_ioctl+0x18e/0x210
[  702.294569][T18108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.294591][T18108]  futex_wait_setup+0x9d/0x570
[  702.294617][T18108]  __futex_wait+0x193/0x2f0
[  702.294639][T18108]  ? __pfx___futex_wait+0x10/0x10
[  702.294671][T18108]  ? __pfx_futex_wake_mark+0x10/0x10
[  702.294695][T18108]  ? futex_hash+0x2c5/0x380
[  702.294712][T18108]  ? futex_private_hash_put+0x160/0x1b0
[  702.294730][T18108]  futex_wait+0xe8/0x380
[  702.294750][T18108]  ? __pfx_futex_wait+0x10/0x10
[  702.294781][T18108]  do_futex+0x229/0x350
[  702.294798][T18108]  ? __pfx_do_futex+0x10/0x10
[  702.294816][T18108]  ? find_held_lock+0x2b/0x80
[  702.294838][T18108]  __x64_sys_futex+0x1e0/0x4c0
[  702.294856][T18108]  ? __pfx_loop_control_ioctl+0x10/0x10
[  702.294871][T18108]  ? __pfx___x64_sys_futex+0x10/0x10
[  702.294890][T18108]  ? fput+0x70/0xf0
[  702.294907][T18108]  do_syscall_64+0xcd/0xf80
[  702.294932][T18108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.294946][T18108] RIP: 0033:0x7f452f58f7c9
[  702.294959][T18108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  702.294974][T18108] RSP: 002b:00007f45303620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  702.294988][T18108] RAX: ffffffffffffffda RBX: 00007f452f7e6098 RCX: 00007f452f58f7c9
[  702.294998][T18108] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f452f7e6098
[  702.295007][T18108] RBP: 00007f452f7e6090 R08: 0000000000000000 R09: 0000000000000000
[  702.295016][T18108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  702.295025][T18108] R13: 00007f452f7e6128 R14: 00007fff273de210 R15: 00007fff273de2f8
[  702.295044][T18108]  </TASK>
[  702.603992][T18105] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2504'.
[  703.048427][T18105] bridge0: entered promiscuous mode
[  703.053788][T18105] bridge0: entered allmulticast mode
[  703.218979][T18107] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  703.287306][T18107] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  703.336894][T18107] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  703.380023][T18107] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  703.418988][T18107] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  703.451235][T18107] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  703.529622][T18107] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  703.598993][T18107] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  703.631435][T18107] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  703.701908][T18107] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  703.745022][T18107] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  703.821510][T18107] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  703.875489][T18131] netlink: set zone limit has 8 unknown bytes
[  703.977746][T18107] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  704.016014][T18107] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  704.077554][T18107] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  705.269169][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout
[  705.348501][T18098] Bluetooth: hci0: command 0x0c1a tx timeout
[  705.354524][T15668] Bluetooth: hci3: command 0x0c1a tx timeout
[  705.361736][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout
[  705.431133][T15668] Bluetooth: hci2: command 0x0406 tx timeout
[  705.585990][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout
[  705.746326][ T5840] Bluetooth: hci7: command 0x0c1a tx timeout
[  705.995267][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout
[  706.068191][   T31] INFO: task syz.3.2111:15978 blocked for more than 142 seconds.
[  706.090200][   T31]       Tainted: G     U       L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  706.136319][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  706.210712][   T31] task:syz.3.2111      state:D stack:28248 pid:15978 tgid:15977 ppid:5834   task_flags:0x400140 flags:0x00080006
[  706.332655][   T31] Call Trace:
[  706.372453][   T31]  <TASK>
[  706.410219][   T31]  ? __schedule+0x10b9/0x6150
[  706.455303][   T31]  __schedule+0x1139/0x6150
[  706.459871][   T31]  ? __lock_acquire+0x436/0x2890
[  706.523072][   T31]  ? __pfx___schedule+0x10/0x10
[  706.527988][   T31]  ? find_held_lock+0x2b/0x80
[  706.602040][   T31]  ? schedule+0x2d7/0x3a0
[  706.606402][   T31]  schedule+0xe7/0x3a0
[  706.610492][   T31]  schedule_preempt_disabled+0x13/0x30
[  706.670904][   T31]  __mutex_lock+0xc69/0x1ca0
[  706.675551][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  706.743726][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  706.748790][   T31]  ? net_generic+0xea/0x2a0
[  706.773775][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  706.779558][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  706.800272][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  706.805847][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  706.820421][   T31]  ? genl_get_cmd+0x194/0x580
[  706.825179][   T31]  ? bpf_lsm_capable+0x9/0x10
[  706.847739][   T31]  ? security_capable+0x7e/0x260
[  706.861693][   T31]  genl_rcv_msg+0x55c/0x800
[  706.866233][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  706.881184][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  706.900380][   T31]  ? __lock_acquire+0x436/0x2890
[  706.905350][   T31]  netlink_rcv_skb+0x158/0x420
[  706.920621][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  706.929815][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  706.935132][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  706.959476][   T31]  genl_rcv+0x28/0x40
[  706.965839][   T31]  netlink_unicast+0x5aa/0x870
[  706.977616][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  706.988816][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  707.008433][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  707.014599][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  707.028476][   T31]  ____sys_sendmsg+0xa5d/0xc30
[  707.034351][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  707.040044][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  707.045330][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  707.053440][   T31]  ___sys_sendmsg+0x134/0x1d0
[  707.058182][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  707.066595][   T31]  ? futex_private_hash_put+0x160/0x1b0
[  707.072470][   T31]  __sys_sendmsg+0x16d/0x220
[  707.077097][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  707.082584][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  707.087555][   T31]  do_syscall_64+0xcd/0xf80
[  707.093451][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.104257][   T31] RIP: 0033:0x7fb242f8f7c9
[  707.108957][   T31] RSP: 002b:00007fb2411ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  707.117374][   T31] RAX: ffffffffffffffda RBX: 00007fb2431e5fa0 RCX: 00007fb242f8f7c9
[  707.126426][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000004
[  707.134732][   T31] RBP: 00007fb243013f91 R08: 0000000000000000 R09: 0000000000000000
[  707.143822][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.152523][   T31] R13: 00007fb2431e6038 R14: 00007fb2431e5fa0 R15: 00007ffe6669b8b8
[  707.162846][   T31]  </TASK>
[  707.261514][   T31] 
[  707.261514][   T31] Showing all locks held in the system:
[  707.308099][   T31] 1 lock held by khungtaskd/31:
[  707.312972][   T31]  #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  707.398106][   T31] 5 locks held by kworker/u8:14/4808:
[  707.403548][   T31] 2 locks held by kworker/u8:15/6613:
[  707.427328][   T31]  #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  707.468638][   T31]  #1: ffff888029288008 (&____s->seqcount#15){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100
[  707.499057][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  707.517415][   T31] 2 locks held by getty/10328:
[  707.522214][   T31]  #0: ffff8880313d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  707.574699][   T31]  #1: ffffc90004a4b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510
[  707.603751][   T31] 2 locks held by syz.0.1578/13520:
[  707.626584][   T31]  #0: ffffffff901ebad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  707.634788][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  707.660824][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout
[  707.696036][   T31] 2 locks held by kworker/u8:36/14107:
[  707.707556][   T31]  #0: ffff88801db21948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[  707.719609][   T31]  #1: ffffc90002f17c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[  707.732532][   T31] 2 locks held by syz.1.1978/15372:
[  707.740241][   T31]  #0: ffff88803376c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  707.750870][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  707.760690][   T31] 2 locks held by syz.3.2111/15978:
[  707.766405][   T31]  #0: ffffffff901ebad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  707.774625][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  707.790035][   T31] 2 locks held by syz.2.2209/16455:
[  707.795240][   T31]  #0: ffffffff901ebad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  707.805118][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0
[  707.815749][   T31] 2 locks held by syz.5.2353/17178:
[  707.820955][   T31]  #0: ffffffff901ebad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  707.830478][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0
[  707.841967][   T31] 2 locks held by syz.5.2353/17179:
[  707.847409][   T31]  #0: ffffffff901ebad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  707.855811][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0
[  707.866141][   T31] 2 locks held by syz.4.2505/18102:
[  707.871348][   T31]  #0: ffff88801ffbe0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  707.884383][   T31]  #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  707.894230][   T31] 1 lock held by syz.8.2512/18151:
[  707.902716][   T31]  #0: ffffffff90145468 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  707.913310][   T31] 2 locks held by syz.7.2515/18176:
[  707.918757][   T31]  #0: ffffffff9012ec90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  707.928630][   T31]  #1: ffffffff90145468 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  707.939195][   T31] 2 locks held by syz.7.2515/18180:
[  707.944381][   T31]  #0: ffffffff9012ec90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[  707.955367][   T31]  #1: ffffffff90145468 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0
[  707.964423][   T31] 1 lock held by syz.1.2516/18184:
[  707.969861][   T31]  #0: ffffffff90145468 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  708.030652][   T31] 
[  708.032992][   T31] =============================================
[  708.032992][   T31] 
[  708.072669][   T31] NMI backtrace for cpu 0
[  708.072687][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  708.072711][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  708.072716][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  708.072726][   T31] Call Trace:
[  708.072731][   T31]  <TASK>
[  708.072738][   T31]  dump_stack_lvl+0x116/0x1f0
[  708.072765][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  708.072784][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  708.072800][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  708.072820][   T31]  sys_info+0x133/0x180
[  708.072835][   T31]  watchdog+0xe66/0x1180
[  708.072861][   T31]  ? rcu_is_watching+0x12/0xc0
[  708.072881][   T31]  ? __pfx_watchdog+0x10/0x10
[  708.072902][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  708.072926][   T31]  ? __kthread_parkme+0x19e/0x250
[  708.072948][   T31]  ? __pfx_watchdog+0x10/0x10
[  708.072969][   T31]  kthread+0x3c5/0x780
[  708.072983][   T31]  ? __pfx_kthread+0x10/0x10
[  708.072999][   T31]  ? rcu_is_watching+0x12/0xc0
[  708.073018][   T31]  ? __pfx_kthread+0x10/0x10
[  708.073033][   T31]  ret_from_fork+0x983/0xb10
[  708.073048][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  708.073065][   T31]  ? __switch_to+0x7af/0x10d0
[  708.073084][   T31]  ? __pfx_kthread+0x10/0x10
[  708.073099][   T31]  ret_from_fork_asm+0x1a/0x30
[  708.073138][   T31]  </TASK>
[  708.369017][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  708.375890][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  708.386552][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  708.391722][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  708.401948][   T31] Call Trace:
[  708.405212][   T31]  <TASK>
[  708.408125][   T31]  dump_stack_lvl+0x3d/0x1f0
[  708.412718][   T31]  vpanic+0x640/0x6f0
[  708.416777][   T31]  panic+0xca/0xd0
[  708.420481][   T31]  ? __pfx_panic+0x10/0x10
[  708.424876][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  708.430840][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  708.436978][   T31]  ? nmi_trigger_cpumask_backtrace+0x2be/0x300
[  708.443149][   T31]  ? watchdog+0xe83/0x1180
[  708.447556][   T31]  ? watchdog+0xe76/0x1180
[  708.451972][   T31]  watchdog+0xe94/0x1180
[  708.456213][   T31]  ? rcu_is_watching+0x12/0xc0
[  708.460969][   T31]  ? __pfx_watchdog+0x10/0x10
[  708.465636][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  708.470827][   T31]  ? __kthread_parkme+0x19e/0x250
[  708.475841][   T31]  ? __pfx_watchdog+0x10/0x10
[  708.480508][   T31]  kthread+0x3c5/0x780
[  708.484563][   T31]  ? __pfx_kthread+0x10/0x10
[  708.489135][   T31]  ? rcu_is_watching+0x12/0xc0
[  708.493889][   T31]  ? __pfx_kthread+0x10/0x10
[  708.498468][   T31]  ret_from_fork+0x983/0xb10
[  708.503077][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  708.508185][   T31]  ? __switch_to+0x7af/0x10d0
[  708.512849][   T31]  ? __pfx_kthread+0x10/0x10
[  708.517422][   T31]  ret_from_fork_asm+0x1a/0x30
[  708.522185][   T31]  </TASK>
[  708.525248][   T31] Kernel Offset: disabled
[  708.529556][   T31] Rebooting in 86400 seconds..