last executing test programs:

9m15.10530374s ago: executing program 32 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
epoll_create1$auto(0x8)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff)
mmap$auto(0x8, 0xffffffff, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0xcc, 0x20009, 0x4000000000df, 0xeb3, 0x6, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mlock$auto(0x7c88, 0x7fff)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_TXTIME(r2, 0x5, 0x3d, &(0x7f0000000100)='\\+}(!\x00', &(0x7f0000000140)=0x8)
socket(0x10, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd700000a8dcdf25020000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x40000000)
openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/output_bpc\x00', 0x400400, 0x0)
sysfs$auto(0x2, 0x4d, 0x7fffffffff)
sendto$auto(0xffffffffffffffff, 0x0, 0x8, 0xd, 0x0, 0x1c)

6m37.735554551s ago: executing program 33 (id=1720):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mlock$auto(0x1000, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000)
socket(0x2, 0x5, 0x0)
mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8003)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0)
r1 = socket(0x10, 0x800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000080)={<r2=>r1, 0xf5a})
preadv2$auto(r2, &(0x7f0000000140)={&(0x7f00000000c0)="d92e19703e105babde81bd564fd2e5a18f15aa3035a00ced07f74c3cb7f76874d5948bd320c47e090ab006a24407b6f9ade54dcc43beb1cc4356a4096a8627a9cf08e90a5e2fb334b39a51df6bfff31fc4", 0x4}, 0x4, 0x1, 0x5, 0x4c)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2eaa82, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="2cbd7000fddbdf25020000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0xca, 0x0, 0x3fc)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0xa, 0x2, 0x73)
ioctl$auto(r3, 0x8918, 0x38)

3m11.689865882s ago: executing program 34 (id=2477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

3m3.165331095s ago: executing program 35 (id=2498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

2m15.657020416s ago: executing program 36 (id=2619):
ioperm$auto(0x40080000000000af, 0x7, 0x991b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
mknodat$auto(0xffffffffffffff9c, 0x0, 0x40, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x5, 0x400)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
fsopen$auto(0x0, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000001)
kill$auto(0x0, 0x11)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)

2m11.711198735s ago: executing program 0 (id=2704):
mmap$auto(0x40000006ce, 0xb, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x1000000008000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x10, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
pipe$auto(0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x6f)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r1)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r0)
clone3$auto(&(0x7f0000000140)={0x3, 0x10001, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x5, 0x1, 0x3ff}, 0xd)
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2m11.466871513s ago: executing program 0 (id=2705):
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x3, 0x6)
getsockopt$auto(r0, 0x40000000029, 0x4, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = socket(0x2, 0x801, 0x106)
setsockopt$auto(r1, 0x6, 0x21, 0x0, 0x20)
close_range$auto(0x2, 0xa, 0x0)

2m11.294771546s ago: executing program 0 (id=2706):
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3)
unshare$auto(0x40000080)
prctl$auto(0xa, 0x8, 0x0, 0x1, 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0)
r0 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x7, 0x2, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ptyqa/power/control\x00', 0x9b6da7607195e52, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioprio_set$auto(0x2, 0x0, 0x1)
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0)
ioctl$auto(0x3, 0x40605346, 0x38)
write$auto(0x3, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x19)
madvise$auto(0x0, 0x200007, 0x19)
ioctl$auto_TIOCGDEV2(r2, 0x80045432, &(0x7f00000000c0)=0x7)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x26004000)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, 0x0)

2m9.506372773s ago: executing program 0 (id=2710):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0)

2m7.556870762s ago: executing program 0 (id=2715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={0x14, r3, 0x9d0da3446261172d, 0x270bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000040), r0)
r5 = setfsuid$auto(0xee00)
r6 = setfsuid$auto(0xee01)
setresuid$auto(r5, r6, r5)
syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57)
sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)

1m56.521594323s ago: executing program 3 (id=2755):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0xfffffffffffffffd, 0x810004, 0xe, 0x8000000008011, r0, 0x4)
r1 = syz_open_procfs$namespace(0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9)
recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bind$auto(r1, 0x0, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x54)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop10\x00', 0x133a03, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)

1m52.022946748s ago: executing program 37 (id=2715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={0x14, r3, 0x9d0da3446261172d, 0x270bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0xa6ffffffffffffff, 0x0, 0x2400f000}, 0x20008080)
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000040), r0)
r5 = setfsuid$auto(0xee00)
r6 = setfsuid$auto(0xee01)
setresuid$auto(r5, r6, r5)
syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57)
sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)

1m48.113450937s ago: executing program 38 (id=2728):
bind$auto(0xffffffffffffffff, 0x0, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
ptrace$auto(0xffffffffffffffff, r0, 0x5169, 0x1)
mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0xffffffffffffffff, 0x28000)
r1 = open(&(0x7f0000000000)='&&\x00', 0x595002, 0x408)
write$auto(r1, 0x0, 0xfffffdf1)
linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xa}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5d}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x10}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x5}]}, 0x50}}, 0x40080)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket(0x2, 0x1, 0x106)
mmap$auto(0x400000000, 0x3, 0x9, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x80)
r2 = socket(0x18, 0x5, 0x1)
connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
ioctl$auto_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000040)="99c8301b3566b0e33e94015acc3bdf6641e44ac22844e949ab682a9e8b7fa5aa423202391b4cd68cfd56ef9d703880b0abd4211afa61ca17e9e5")
close_range$auto(0x0, 0xfffff004, 0x2)

1m41.348892082s ago: executing program 39 (id=2755):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0xfffffffffffffffd, 0x810004, 0xe, 0x8000000008011, r0, 0x4)
r1 = syz_open_procfs$namespace(0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9)
recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bind$auto(r1, 0x0, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x54)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
keyctl$auto(0x6, 0xfffffffffffffffd, 0xee01, 0x0, 0xfff)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop10\x00', 0x133a03, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)

1m32.137119357s ago: executing program 40 (id=2780):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
sysfs$auto(0x2, 0x100000000000011, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)

1m25.567982868s ago: executing program 41 (id=2790):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x1d, 0x3, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x56)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xfff)
copy_file_range$auto(r1, 0x0, r1, &(0x7f0000000080)=0x8, 0x2, 0x0)

1m17.682301345s ago: executing program 5 (id=2847):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)="12b3", 0x2) (async, rerun: 32)
recvmmsg$auto(r0, &(0x7f0000000500)={{&(0x7f0000000080)="8f77b046ff00beaa4a359c7401a2bcc855a1edf933880ef76c7df80816db83a09620357d965f21567f9b5e5417f7c20c21d7d915531612c08d49db6eca96c6c6f9f831f3836eca8f53f04ede3f77425e8969ad26244d8e1fcd8ed9996c7506089aace03801c63fc7f7540d94515b1c981f0ac21443905e93ba44859376784a1cb0e6a3039e6df03b77912361abae2543096b38789a8826a8281a78db867c47b645981b353fa871983b39", 0x0, &(0x7f0000000380)={&(0x7f00000002c0)="187fe82ffc2bb2b5e515b109f3e1d6d0a30724a486938e5ba697245814a9d499aa021bd9b5fb0dfd8c2ad2728fdefebe8b3bcd2017e4d10d1de3202c75cf1dc1e625f9b211ed1307a2c0d6e6f5e121d0b075f31a296a9cddf2f926cd9f05a1c9ed349090da90d539b72efc5a182cb61795677ba807779bd597cd", 0x40}, 0x3, &(0x7f0000000440)="8a589d0b5b3b89678a93dcf89acc85885bc144c0d6888101f7f45d0246814398555b423deb94b75e875be1c07efac03328c2acf78ef2ff92f3cc68958fdb3b9d1e7c2b028e450f20834dbfc806ce64227f45821ed1a30ae6d350d71865457deedba1821d352e928b0c982c1c22494cf4973a18dad85f86ffc1d39eee2b470303997d9e", 0x4, 0x488}, 0x6882}, 0xfffffff9, 0x9e, &(0x7f0000000540)={0x3, 0x7}) (async, rerun: 32)
unshare$auto(0x40000080) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x501d81, 0x0) (async, rerun: 32)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 64)
socket(0x11, 0x800, 0x100) (async, rerun: 64)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x80000001)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x1a1842, 0x0)
pwrite64$auto(r2, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) (async)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x121040, 0x0)
pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x3) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20) (async)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
r6 = open(0x0, 0x40bc2, 0x1c0)
write$auto(r6, 0x0, 0x8001) (async)
sendfile$auto(r6, r6, &(0x7f0000000000)=0x1, 0xb5d) (async, rerun: 32)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) (rerun: 32)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x641, 0x0) (async)
write$auto(0x3, 0x0, 0x5fe938af) (async, rerun: 64)
read$auto(r7, 0x0, 0x20) (async, rerun: 64)
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
unshare$auto(0x40000080)

1m17.635951032s ago: executing program 5 (id=2848):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
setitimer$auto(0x0, &(0x7f0000000140)={{0x40000000002, 0x5}, {0x20000, 0x8}}, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x5f, 0xeb1, 0x401, 0x7ffe) (async)
r0 = io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x9, 0x80, 0x400008000008, 0x12, r0, 0x9) (async)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
write$auto(0x3, 0x0, 0xffd8) (async)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
recvmsg$auto(0x4, 0x0, 0x33c) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x3, 0xe983, 0xdc, 0xeb1, 0x401, 0x4) (async)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101082, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) (async)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eb600ffff8eac2cdafc1f64785509919ba1e9920001ffff0500", @raw=0x4}, 0x4, 0x5, 0xe0, @raw=0x404, @reserved="925064d140c7fa80816f9fd33723e590a768a104c984a2697d756c67c69858ca19b4c58db3a08c0e0a2819d7c704b71179c6cd63b11327451266bf7999db0ae2cf455970f1a19882e36124d7fbd83b5c7e6407876c69265f66d0f09b21d72d7cd165a047419551c34b61fb6e84099430c17845de972c9572f8b4476bf3c0a962", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78c6947a99807bcc1"})

1m17.066601964s ago: executing program 2 (id=2851):
ioperm$auto(0x40080000000000af, 0x7, 0x991b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
mknodat$auto(0xffffffffffffff9c, 0x0, 0x40, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x5, 0x400)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001)
ioperm$auto(0x1, 0xfffffffffffffff9, 0x1)
lsetxattr$auto(0x0, 0x0, 0x0, 0xf4e9, 0x3)
write$auto(r1, &(0x7f0000000080)='S\x00\x00\x03\xfe\xff\xff\xff', 0x8587)
mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7ffffffe, 0x0)
setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60000, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000002080)={{0x3b9, 0xee01, 0xffffffffffffffff, 0x6, 0x3, 0x400, 0x2}, 0x0, &(0x7f0000002040)=0x9, 0x7, 0x200, 0x9, 0x5, 0xc, 0x1, 0x1, 0x401, @raw=0x3, @inferred=0xffffffffffffffff})
gettid()
setfsuid$auto(0xee00)
getuid()
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005280)={0x0, 0x0, 0x0}, 0x40)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba})

1m16.976052926s ago: executing program 5 (id=2852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0)
r3 = socket(0x10, 0x2, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r5=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000280)={0x1278, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0xbc}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '(&\'\x00'}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r5}, @OVS_VPORT_ATTR_UPCALL_STATS={0x1249, 0xa, 0x0, 0x1, [@nested={0x1075, 0x5e, 0x0, 0x1, [@generic="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", @nested={0x4, 0x11e}, @nested={0x4, 0x59}, @generic="92a9d0f10fe4b0d54d5e877aa235426d3c88cbd1cad80d9883a48a9ef4d6b022d64755fa375796235a95086f7f108e8ed0c64c2b535f949fbf89ae907492b0d3d09be78b202dcbeff00b2b82bc7ad175", @generic="c73cc3a97048b58d8262a57f92784dfa24d9f5d569", @nested={0x4, 0xdd}]}, @generic="0eeb488dfe50ac69980d7b0458cdc06b09006de1bce4fd97d8fec25f085c954835db9567ed18c864c8d67add59df4ff0b050c9be2bfa37b52d7be2fdce1a74ad11ac51a75a017b53931075f55f47ef6c9031fa41ff2f3b92f3a9ec6197798a5158dc3811b57702360c9376bc85c14aab79f3333218b3a5078b4cb9cb23203f2e5e75b275964aa57c09129995885d68e6061f3d9a5f0b50c5387ac3e123f7bb258f969ec92b3def431dbdf3ee6c", @nested={0x11d, 0x12f, 0x0, 0x1, [@typed={0xf, 0x4, 0x0, 0x0, @str='ovs_packet\x00'}, @generic="b29aa66223f0c4d1257f42f1be233e715c2e7d3139d970039ad80a1d902ae802bb9ddec83997c4a645d303c0b57872205640427db08c9b95a1ae198719083f17a99adc0c6a09ca9aaf3d02be636310150588de56d4baf1a8008551368a6bd78b0b03c853c4edc58b926e02cc9c45b34cd0382b58d33a36351f5be526a034c7ebeeb3658534a14d79d55f9c53496e3c85fcfe97f932eb790a6e4bd0c5f326aff9dfbc2c6f02f3a7419e5043ae707772149be8ddc9db1acd00e31132ce0e69f6ec4858066e184779d31cc9c64401acf067ed617d3aff966137e4a129a30cb39bd3e349d8358fba85f356051265b3f1e84bcb73c3cbb40a88adb9", @typed={0x8, 0x118, 0x0, 0x0, @uid}, @typed={0x8, 0x15e, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}]}, 0x1278}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000de5970d78895067f21dfbc2412f3a3f71607989bf2e139837e60b404d62f582be65f4cddf6e319233818031bec302fd351107a30be172ecf03ebd38ac95a774f5dc112ce19d42d2d5002b1fd583f2e2298bd874e044e34a65ab3a36bf73149eba9a3eea4513b550f7c36589ebd300819fb065ce3089a641891087e329b2ca3d828676fc901626d09871ddb554671673793163bd17e53b84fd803ec6335ccf2284b437db29af3ae3426259f10c8b6b95788b200ded4742ce35b0fb25042f4a78e", @ANYRES16=r6, @ANYBLOB="1b0026bc7000fddbdf2503000000040008000400038012000100898771f1c19f17790485908286dd00000400028006000900fcff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

1m16.937179962s ago: executing program 5 (id=2853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

1m16.535049209s ago: executing program 2 (id=2855):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(&(0x7f00000002c0)={0xe, 0x2, 0xb, 0x6, 0x83, 0xb03, "944b60c94b703ca3fe5edd14a9f21406cdc2348e9899e4cf7181d0328de9583249727f123a869b0000763a1b93fc5cda621d87e86bc2793e453a0d54391dcf52f32192ce72d07e9bf5de3ce9ffb44e4c87c0c6bf3a8cc5b80bf50300b9a209dcf215f598c9e295f3cdc5f5712ff8b6cb4c7400f94dc32ac9cdf09158a9d9bc3f1094b1ce0e2b9045ecaa10ef0000d534ce97636dd7566009bd5000000000"}, 0x20, 0xfae, 0x800000b)
memfd_secret$auto(0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/queue/max_segment_size\x00', 0x200, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/tunl0/ndisc_evict_nocarrier\x00', 0x789003, 0x0)
sendfile$auto(r1, r0, 0x0, 0x400000000008)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon7\x00', 0x80000, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0)
ftruncate$auto(0x3, 0x700)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0xc, 0x0)
setsockopt$auto_SO_BINDTOIFINDEX(r1, 0xc4ab, 0x3e, &(0x7f00000000c0)='\x00', 0x5)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xfce4, 0x200, 0x5, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x401, 0x7, 0x6, 0x6}, 0x10)
bpf$auto(0x6, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
sysfs$auto(0x2, 0x200, 0x8000)
close_range$auto(0x2, r1, 0x1efc)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x2}, 0x1000002bf)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x2, 0x200000)
mremap$auto(0x200001000000, 0x1, 0x4, 0x3, 0x100000000)
r3 = open(&(0x7f0000000140)='./cgroup\x00', 0xa000, 0x310)
fcntl$auto(r3, 0x402, 0x1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(0xffffffffffffffff, 0x40095505, 0x0)

1m16.39565253s ago: executing program 2 (id=2856):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x59, 0x0)
r0 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r0, 0x65, 0x2, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b)

1m16.343814827s ago: executing program 4 (id=2857):
socket(0xf, 0x3, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000000)={0x30, r2, 0x935, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@nested={0x15, 0x1, 0x0, 0x1, [@generic="6fdc9fbda5ed4d35f9fdaf4fe74b9e0077"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
socket(0x29, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.swappiness\x00', 0x1ea102, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x200, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r4, r5, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000002c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x1)

1m16.238879393s ago: executing program 2 (id=2858):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x80000000)
mmap$auto(0xfffffffffffffffc, 0x9, 0x8000000000000001, 0xeb1, 0x401, 0xffff)
ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0)
read$auto(r0, 0x0, 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r1 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ramdisk_pages/ram15\x00', 0x102, 0x0)
r2 = gettid()
sched_getaffinity$auto(r2, 0xd0700000, &(0x7f0000000000)=0x401)
read$auto_fops_u64_ro_(r1, 0x0, 0x0)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
socket$auto(0xb4, 0x7, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x3, 0x6, 0x2, 0x9b4, 0x0, "7cbc697000", "47b74b2c", "87849101", "2ff43123", ["01040000681b9851136e03a8", "a1679d340ad98fad2453f86d", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyc2\x00', 0x20880, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88c42, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5457, 0x0)
sched_setaffinity$auto(0x1, 0x1, 0x0)
setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3})
clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003)
wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0)
r6 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r6, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", <r7=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r7, 0x3, 0x81, @uprobe_multi={0x81, 0x1fd, 0x9, 0x8, 0x1, 0x4}}, 0x92)

1m16.139425703s ago: executing program 4 (id=2859):
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sysfs$auto(0x2, 0x3c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
mmap$auto(0x0, 0x4020009, 0xe3, 0xeb1, 0x401, 0x8000)
msync$auto(0x200000, 0x2000000005, 0x6)

1m16.030843975s ago: executing program 2 (id=2860):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x10be02, 0x0)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x306, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0)
io_uring_setup$auto(0xc, 0x0)
pipe2$auto(0x0, 0x80)
r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x40384708, r0)
mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)

1m15.866415757s ago: executing program 2 (id=2861):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x2000, 0x0)
pread64$auto(r1, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x8)
read$auto_check_wx_fops_(r0, &(0x7f00000001c0)=""/186, 0xba)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(0x0, 0x800, 0x147)
execve$auto(0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1000000008, 0x0, 0x0, 0x0, 0x100000)
socket(0xa, 0x801, 0x84)
setresuid$auto(0x60, 0x1000, 0x8000)
ioctl$auto(r0, 0x1, r2)
mmap$auto(0x0, 0x20000002020009, 0xffffffffffffffff, 0xeb2, 0xfffffffffffffff7, 0xb)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x7fff)
connect$auto(0x3, 0x0, 0x59)
mmap$auto(0x13, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x1, 0x0, 0x80000000)
munmap$auto(0x8000, 0xffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xa, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x41, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x8, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe295, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x6, 0x962, 0x5, 0x8000000000fff, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x2, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x4, 0x4, 0x6, 0x8, 0xfffffffffffffffc, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"})
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000), 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r5, 0x0, 0xa3d9)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)

1m15.555856537s ago: executing program 4 (id=2862):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x9}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef)

1m15.508379403s ago: executing program 4 (id=2863):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xc208ae62, r0)

1m15.434576208s ago: executing program 4 (id=2864):
socket(0x11, 0x3, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x8000008, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r1, 0x0, 0x480, 0x0, &(0x7f0000000040)=0x83)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffff7, 0x16, r3, 0x2)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r6=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000c741009b08e9fa4357c2c8eccbc907222c78e8fc69cbc8d03b0071ee68cc81f697c07caa926a2c74926971176d2de8db78d3529928dbd803f1c772f499d3a0c349c79b84c1bf0c18e08efa7c582ebc9a127183e5c9c815ae531cb6fd6f97006c622a63a6a592c8079c9bc88684229cb16e7249dc71962e29128a85bc92c156d086d0c3e20ca6faed92f0b3713a7489be4d1e9a1d392979b1ea25ec162396d7e965e9462794409e9ca9c23bc7df76dbf2c30511192072a0bfb2185a42d6b12fbebf8a57c5747854ad0b4582faf364945730cb4a8e3ad7cc57bf5", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250a0000000800030000000000080001000000000008000200", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r7 = fanotify_init$auto(0x1f53, 0x2000000000002)
ioctl$auto_XFS_IOC_GETBMAPA(r7, 0xc020582c, &(0x7f00000003c0)={0xf, 0x9, 0x4, 0x5, 0x1e})
ioctl$auto(0x3, 0x4048aec9, r0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2007c3, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42001, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8202, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1m15.278933953s ago: executing program 4 (id=2865):
r0 = socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)
fcntl$auto_F_GETOWN(r0, 0x9, 0x5)
r1 = waitid$auto(0x6, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x696d, &(0x7f0000000100)={{0x3, 0x2}, {0x3, 0x7043}, 0xffffffffffffffff, 0x2889, 0xffffffff, 0x1000000000000, 0x1, 0x7fffffffffffffff, 0x3, 0x8000000000000001, 0xe05, 0x8000000000000000, 0x5, 0x0, 0x2})
prctl$auto(0x3e, 0x1, r1, 0x1, 0x8000000000000003)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x1, 0x0, 0x80000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
pwrite64$auto(r2, 0x0, 0x400000, 0xc)
socket(0xa, 0x1, 0x84)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, 0x6a)

1m14.595804462s ago: executing program 42 (id=2816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

1m11.325881776s ago: executing program 7 (id=2870):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
r5 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x7, 0x6, 0x80)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket(0x2a, 0x2, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014)
bind$auto(r6, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x4)
sendto$auto(r6, &(0x7f0000000180), 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)

1m11.222792606s ago: executing program 7 (id=2871):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$auto(0x3, 0xae60, 0x10000000000402)

1m11.165325377s ago: executing program 7 (id=2872):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40)
mmap$auto(0x0, 0x810004, 0x2798f263, 0x8000000008011, 0x3, 0x8000000000000b4f)
preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r0, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ip_vti0/ndisc_tclass\x00', 0x642, 0x0)
write$auto(r1, &(0x7f0000000200)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400)
getsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x8001, 0x2d, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3)
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
r2 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(r2, &(0x7f00000002c0)={0x0, 0x6}, 0x80000000, 0x7, 0x89)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x8)
ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)="000004")
ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x13)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
utimes$auto(0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000)
socket(0x10, 0x2, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

1m9.947454049s ago: executing program 7 (id=2873):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x7, 0x4)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0)

1m9.366570779s ago: executing program 7 (id=2874):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x2406a90b, 0x83, 0x3}, 0x20, 0x0, 0x8000006)
memfd_secret$auto(0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/queue/max_segment_size\x00', 0x0, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0)
sendfile$auto(r0, 0x3, 0x0, 0x400000000008)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon7\x00', 0x80000, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0)
ftruncate$auto(0x3, 0x600)
io_uring_setup$auto(0x6, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x2}, 0x1000002bf)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000)
socket(0x2a, 0x2, 0x0)
socket(0x1e, 0x1, 0xfffffffe)
mknod$auto(0x0, 0xcb, 0xfffffffa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/ep_81/uevent\x00', 0x22100, 0x0)
setfsuid$auto(0xee00)
mknod$auto(&(0x7f0000000000)='./file0\x00', 0x67c4, 0x7ff)
mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r2 = setfsuid$auto(0xee00)
setfsuid$auto(r2)
newfstatat$auto(0xffffffffffffffff, 0x0, 0x0, 0xd0beb43)
setfsgid$auto(0x0)

1m9.285963425s ago: executing program 7 (id=2875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

1m1.57378288s ago: executing program 43 (id=2853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

1m0.06273134s ago: executing program 44 (id=2865):
r0 = socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)
fcntl$auto_F_GETOWN(r0, 0x9, 0x5)
r1 = waitid$auto(0x6, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x696d, &(0x7f0000000100)={{0x3, 0x2}, {0x3, 0x7043}, 0xffffffffffffffff, 0x2889, 0xffffffff, 0x1000000000000, 0x1, 0x7fffffffffffffff, 0x3, 0x8000000000000001, 0xe05, 0x8000000000000000, 0x5, 0x0, 0x2})
prctl$auto(0x3e, 0x1, r1, 0x1, 0x8000000000000003)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x1, 0x0, 0x80000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000)
r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0)
pwrite64$auto(r2, 0x0, 0x400000, 0xc)
socket(0xa, 0x1, 0x84)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, 0x6a)

1m0.016014193s ago: executing program 45 (id=2861):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x2000, 0x0)
pread64$auto(r1, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x8)
read$auto_check_wx_fops_(r0, &(0x7f00000001c0)=""/186, 0xba)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(0x0, 0x800, 0x147)
execve$auto(0x0, 0x0, 0x0)
move_pages$auto(0x0, 0x1000000008, 0x0, 0x0, 0x0, 0x100000)
socket(0xa, 0x801, 0x84)
setresuid$auto(0x60, 0x1000, 0x8000)
ioctl$auto(r0, 0x1, r2)
mmap$auto(0x0, 0x20000002020009, 0xffffffffffffffff, 0xeb2, 0xfffffffffffffff7, 0xb)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0)
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x7fff)
connect$auto(0x3, 0x0, 0x59)
mmap$auto(0x13, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x1, 0x0, 0x80000000)
munmap$auto(0x8000, 0xffffffff)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xa, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x41, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x8, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe295, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x6, 0x962, 0x5, 0x8000000000fff, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x2, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x4, 0x4, 0x6, 0x8, 0xfffffffffffffffc, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"})
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000), 0x0)
openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r5, 0x0, 0xa3d9)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)

56.77669616s ago: executing program 0 (id=2876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

54.051241544s ago: executing program 46 (id=2875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

52.757539573s ago: executing program 3 (id=2878):
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000003c00), 0x40402, 0x0)
ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x1) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x80400004, 0x1000000, 0x9b72, 0xffffffffffffffff, 0x401) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r1 = io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_register$auto(r1, 0x2, &(0x7f0000000280), 0x7) (async)
madvise$auto(0x6, 0x200007, 0x2)
ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) (async)
fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon33\x00', 0x121200, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x8400, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x0) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) (rerun: 64)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0xa, 0x1, 0x84) (async)
bind$auto(r1, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xffffeffe, 0x2)
fanotify_init$auto(0x602, 0x1) (async)
socket(0xa, 0x1, 0x84) (async)
setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) (async)
pipe$auto(0x0)

51.212140621s ago: executing program 3 (id=2882):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'})
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
open(0x0, 0x0, 0x408)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0)
bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_update={r1, @new_map_fd=r3, 0x69, @old_prog_fd=r4}, 0x6f4)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)

48.946149644s ago: executing program 3 (id=2885):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x326e955f, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7c8, 0x0, 0x8000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6]}, 0x1fe, 0x81)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bb, 0x734f, 0x33, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}, 0x1fe, 0xd)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
memfd_create$auto(0x0, 0xe)
r1 = socket(0x2b, 0x1, 0x1)
getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0x24084005)
ioctl$auto(0x3, 0x5411, 0x38)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0x4008ae8a, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

48.409075156s ago: executing program 3 (id=2886):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x9003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0x1e, 0x8, 0x65)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r2=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x80000001, 0x5}}, 0x92)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
exit$auto(0x5eb)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)

46.738972916s ago: executing program 3 (id=2888):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x7, 0x4)
sysfs$auto(0x2, 0x400000000008, 0x0)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0)

41.587097352s ago: executing program 47 (id=2876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

32.195844119s ago: executing program 8 (id=2926):
socket$nl_generic(0x10, 0x3, 0x10)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10)
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0)
mbind$auto(0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x6, 0x2)
r0 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6)
r1 = open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2)
read$auto_aoe_fops_aoechr(r1, &(0x7f0000000200)=""/164, 0xa4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
unshare$auto(0x40000080)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon37\x00', 0x640, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event2\x00', 0x4000, 0x0)
r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x1, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)='7', 0x7)
ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x1, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}})
r5 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)

31.494082015s ago: executing program 48 (id=2888):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x7, 0x4)
sysfs$auto(0x2, 0x400000000008, 0x0)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0)

30.98212683s ago: executing program 8 (id=2930):
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
fcntl$auto(r0, 0xd, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163)
close_range$auto(0x2, 0xa, 0x0)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0)
ioctl$auto(r2, 0xc0046209, r1)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x22c00, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(r4, 0xc10c5541, r3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCCONS2(r5, 0x541d, 0x0)
ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp\x00', 0x80, 0x0)
pread64$auto(r6, 0x0, 0x204, 0xa1)
splice$auto(r5, &(0x7f0000000000)=0x6, r6, &(0x7f0000000040)=0x3, 0xfffffffffffffffe, 0x2c2f7663)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
listen$auto(0x3, 0x81)

30.571695326s ago: executing program 8 (id=2931):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000f9dbed250200000004000200040006000817c0009600000024af25d5f2f92eccebf00371f636edbaade8dbc1ffc9caa08854e95c5d969732970f306ca16bfdbe8fcd663bfb074a68151abdc21e0140758a88e8128a1cef9c421362da5ef4baa4fada5742beea148bc150305058d954c2d2cb26467514e3a97c81ec87eab7"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000)
io_uring_setup$auto(0x9, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
read$auto(0x3, 0x0, 0x80)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0)
r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x600000, 0xb5d1af1605322dd2)
open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x3ffff)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000029, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x123002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0\x00', 0x8ee46, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x141f42, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x8, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)

29.937359755s ago: executing program 8 (id=2933):
ioperm$auto(0x40080000000000af, 0x7, 0x991b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
mknodat$auto(0xffffffffffffff9c, 0x0, 0x40, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x5, 0x400)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x4)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
fsopen$auto(0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000001)
r4 = gettid()
kill$auto(r4, 0x11)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f00000000c0)='%*-*)-()%\'\'{/@\x00', 0x9)
read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001)
lsetxattr$auto(0x0, 0x0, 0x0, 0xf4e9, 0x3)
write$auto(r5, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60000, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000002080)={{0x3b9, 0xee01, 0xffffffffffffffff, 0x6, 0x3, 0x400, 0x2}, 0x0, &(0x7f0000002040)=0x9, 0x7, 0x200, 0x9, 0x5, 0xc, 0x1, 0x1, 0x401, @raw=0x3, @inferred=0xffffffffffffffff})
setfsuid$auto(0xee00)
getuid()
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005280)={0x0, 0x0, 0x0}, 0x40)

28.356569024s ago: executing program 8 (id=2938):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/lapb4/statistics/tx_errors\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x109000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x12, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x37a, 0x81, @uprobe_multi={0x89, 0x1ff, 0x3d7e, 0x0, 0x1, 0x5}}, 0xc93)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
listen$auto(0x3, 0x83)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x80, 0x0)
exit$auto(0x5eb)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x3fffffff7fffb)

27.388255476s ago: executing program 8 (id=2943):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000000)="ed4ed5c02e84c9d9bdeeff6a6efabbc842d06b4e69")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x9e, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080)
statx$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, &(0x7f00000000c0)={0x2c, 0x80000001, 0x7fffffffffffffff, 0x0, <r4=>0xee01, 0xee00, 0x9, 0xd, 0x7, 0x8000000000000000, 0x100000000, 0x10000, {0x6, 0xdd}, {0x8, 0x50000}, {0xff, 0x44}, {0x7fffffff, 0x4f79}, 0x8, 0x1000, 0x62db317f, 0x2, 0x8, 0x696, 0x2, 0xf, 0x4, 0xffffffff, 0x6, 0x5, [0x9, 0x8, 0x100000000, 0xf56d, 0xd, 0x0, 0x7, 0x3, 0x7]})
shmctl$auto_IPC_SET(0xb2, 0x1, &(0x7f00000002c0)={{0x5707ec25, <r5=>0xffffffffffffffff, 0xee01, 0x7, 0x7fffffff, 0x800, 0x9}, 0x4, 0xfff, 0xb, 0x5, @raw=0x9, @inferred=<r6=>0xffffffffffffffff, 0x9, 0x0, &(0x7f00000001c0)="3ffb0f0b6ba3a69fc8512f53605e3f21855d91fd901dc107a868d5a97754bef9f8db74a8df71ae508b8e68", &(0x7f0000000200)="df137387c55402113499751975ca8f3bbf7e0bf41f859717a879a34367c639c4f474619cb1e07d221031cde0814b2174dd6c38aa103cb244de6409b32c7128a2529e8aeb98a8bad5fa38bc1d6fd78e407ee17a5d7b0734f8a781b1b7b6a948c2da71880aa8722128803a7566163d3c720cd7aab86b9e6ac022773fc9fbc4f2f1f719cb2b6da61870acef95814a4a6016f77ce73e735ac3bd776d74e2c8837cd607e65d6f551fd0d296a67b6d2c9076dbe909598ab0a20e23520c3ac322c3e773"})
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), r0)
sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000002340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f00000010c0)={0x123c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1228, 0x9, 0x0, 0x1, [@typed={0x103, 0x12d, 0x0, 0x0, @binary="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"}, @nested={0x11d, 0x8c, 0x0, 0x1, [@typed={0x5, 0x114, 0x0, 0x0, @str='\x00'}, @generic="4687277633e547f00fdb0f4880cf0f145f8a6bf1e0280e88d1dd68c73bed5fe3bf17611cc89c91d60ef6f33038b422b056a0a36018535bd2edbdee9bd81322b131289446539715acfc93478779983dd11bbf3acd5cb476d40ab6eafb0bbbf2ff820ecd45f0d75e398eec1acb21f248ba8b57b92b84f4794c43548a48a2c6ea558ecc98", @nested={0x4, 0x11e}, @generic="510c1d3a776d78c2fea4985a2ce12e87b6c3e0c73cbb74f405a230bfecd6f662908c86d188cd23eb4fe66ad5ca93341f838fabb86d970a17054b8a65e23de4444caa7a2d6d264078bf434f0a99384dc87906da94f4fa433f14fb63", @nested={0x4, 0x5}, @generic="d24e97d0318a8707b951ebc67ed3410b2181bc7adeddf39182073a", @nested={0x4, 0x45}, @nested={0x4, 0x127}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r6}]}, @generic="680b52f7e6e811fc7e799848d69e78ef69382bc9b4265bf2a98b823220c724f412af4ee5c77f5d29a1c0152635224fccba555637cd1ed133396b0636315627072aa746662e9d38054dab5c6c6212a2c6617e15072b9dfd6b71ae677615ab3e6a7552c60f14b1aea05984a7b40308285eaf7af219241f5663b82506d5db74f37260179d64ade379debd7dba8c3112fa9d30400b3d541cc257c9762775e6b9cabc3201f9e474b701ceeeb2c90f4540a9e23c657d344537663f9af63440861eacb52f91e2a8ade6b674e58e7fcc23b31c2115cb97468f3903d69c43430410a069e5c36b8c3d9d02d3236c0909968b4f58c5c1b6307e0c9a3713ca70f1a14e98489d374d2cdeea8606f3856990d277e3e9af08ef32c82bcc2f020b5989e1c9a6ad8c4ef4a31ca9dd34e4c487f4496d0d2608b429116bae6311333797b3465eea4400235af8b650207aa421f759a10e4578d839523c8dbac6b2e501e0f2e3e6fb4f74e121b8e263df14d27628996281d19e3eed831f0bffeb10e82e459f73d5f651e2ea06341d9e1999a2a70caf4e78a15f48012cb0c39185e019c5f5b93daac23eac2e8b91185a8f9330d08b74cc0e41e5abeabab7bdc53bf3bd43e2b86b3f052c80d99ef609bb17c0336385461baa5ce940ea4e14725466534d7efc93ca5788955906591842c0bca62a16140286541b3aa2338be4921831f7ce66ac1d04fa87cbddf95e3428a6441da0b5d23ccbd5d52ba9b9099bc3af1b118efb3eba7c99f5b62aba2a70ee420aa923938d61c3b802b8ed4899f8d8b06a55879a14a397e9bcda4f594576d349d9175d2dcdaf88dfafb728097967a6712e321f10da4b4ff93a07e1e48b4a2275ccc2305f9929c9825eeab9ad0cea6d09bfd2bd5df85ab92aa6c5b0ed3c69e78b5d15b1a8446cd49525c30b38403e023c6f4cd30ead43e1a49fa989f04893de61c98a2ec422621b4f4d88a02a4393bcb658fb05de37028a784cac5bfeb0c9cb6f74dc4d42ea97bc746763dcfbccb71a29127a7859695a218f9dce4a5887b3c255ce4511ca3889c4dd5226c69a11976c5e83146fa03e8ae93f1ed76da32d70584a1affe58130bb6344a469074276937a600d84b797ea12c2ea828b5b3a9cb248a9658ff61d7a0bdd2fb617ccf65270002746e04667d792716422e77b59d5d796db848dc290a3ab2fe742829c0689c3836d80ede2cd1f6efe21284dee753557522d7821b788a0adc233e2e910d1165376eea5cfcd8ae87af27030eb38ad5129934a3da397455241c8c750af79d9fea7174a9c904c485c8bcabfda25e76630f78e23b7146dca674f52261d78e2dc2cd54da413af8c0eb70649169fc16ac1e326f69cca2a712d779a845b168a99df1ebcc9b77f5c0a92e15e6cb2c64a4de330ea5534c3b4218508b8d3c3eee5d076084b444836e70b07847633871bfe54522b2af1fcf1b3e5fb150a982b25cac2275aeb35943ed743c8399cfb69712442a539804f912040e83cdd05bd1ed3c375aa4f0e07affdb30ef3b0446266c5101e260f9430bdcd70f75a6a5ee68c9fc41b073e68efc7d252f46fada7a5b6b21f7bfb3bb26ac78b21a2b409ea44d34dd106f810f9076d3e071cf5421c46b8e90da33a4205968097c9625aebab33f4281e33d2a62ad9fea0c43dabe8e92b85a2a008bf50d2f0f161f9be1af7e56b7a76022f60ced769bc55d6244815b7488c2eff5c6e274e4b1a66440e25388188a801586f76ab502fb56e8888698831c42a21c678d548054726cc30044fffb6f39176d1828e213226c58196c2cfc9e95d726d78d5180ae7ac0ed264ac2d699fc6810fbb2998e5e8e149f7f7921cfda083e4d781c973f1265aaa708b192d5ff51063cd4d200f5d53a9610b99995297ff955aed1d1bfd5d1264d5f40e7e477c7521b58c8baa30bd7bf3b4d23d1035e5539e05640c67487797b20ac7b8d4242a11ec491fba62f28fb513774c43b88dc7ccd5c65fa90ca2ab59a36cfd34249600204cfcd0b603f6aa422cdd61de313aed5c1055dca47708a93c055e8c6354e05618d06d083ea79282d44071df43c7de89f60693c7657864b82004e2de0c5fc5f5d8eb2a763ed072c19d3cf1e933cef7a02af2b8933906c0a03f9a6d5905cddaab51f815d99ba0767d604fe4b7197860dbca75cdb75d38b386af55dedaef602a1f1c107aeb4f5501ee578bc0bd5e736433b3b66543797d0cbedb84ab7468240ab781fb996f7060e72fbaded9067b1efa8bcca8d6ad1b3150f9b3886c162d1ea20a6bc28440bd942449a15a9abdff1502bdb0fc3db4e1ddd65aae78e567b73826407d7ec3d02633c133ad2bf0e10b810dc0267a5d6e62609b72de4633b8347f969285eaa88ad4535cb1b209a01f0c28d5db6387110deedc128bdb00fa4d58389b98d3e8af19f7abb5709904d7b180d20288fcce838c8339e244ec9bcb9282f8d1c8cdca5465ce5e895ebf8e42e9fb02a1e23b91d5371a791378581dd4bb4c8ebaa3d31f1bd6c70bacea793d3b3196b1b6c4d6d69bb6e25af1486d52b1de763470464644ecd0e6be068aef6caab5fe3776e267a93e7a48bd7c503a72f105cc84abe5bc5cb7beb2f0295cee91f334fcd2ad3b7cac1d60e746a9ed77e1aa0a0acb1db17f5e1fa830a9528220790903d9fde88c68dd30fc16d59e0bf6af2dfe6a2d7fa184320cf9dd79c3be3bf86fdcf9d436c6c3625644999a24e88d579b7cfa38e003d18947ab8e71beef1b4052cc5286179528dfd7c6a6d2b16f1588fdae9d53a54afd19139cb71e998e7e8fd2375e8e1eef36d84dbb803f234c22a3cc9085a4fc137545ee3eee75c8975864e80e4a0fc09d9d9429fd727109e2012b8c760e9202c22e38618b3b102456a4357eb2ec867b16b328fbbf4ecfb5e9f0d7c99e867708ce9544ded95d74ddc588de31f4a554bd674cda0c52494b76268ed14bb714c42c4fce921f7d4bbb7f198d2b5b25d4c325d5d775eff1c4729068f75beaf901d77dfe349286b8015ec30a3d5b98c4836ba6e7264d157de0e33002d8fe53f964041c049de2c97f5118c3f697b76d8c72ce613358e9758576e9389f43e76cd700038bb7c25dd2c6a581c9dfc6675d179af5c4adaca73762ddde6a7177885780ebf4918258ac20955acb1c53c9b046fdc49f1156473acdf57a8e78480663f78a7084ce9b6efaa873ef4272d1781385d7119365238ed3b3519f8ae8a7de8b1c1c8ee0a14588461efe51ce22bceca24b989fe36d66493f464f674e9bff569f83d7eb881e4fff6342f26b03404feec8884a708900049c19d162133fb9ca615471b3ec771d8a31a13fdbb0d2a935b5d0bb46b9b6a668e0a3ca39f65e33d83761e7a7b48e66f9f4f24cb7fd715c0aa6328d81aab89b54d5cf486813f2a6315dee3a0ff8f4b1ec2c131efc3be76d1f6f83b35230dae784addb5d113dcd68fd6889bc3a101db31d8f10a827769f452730361b68aaae3e0864dfbdb90d4f6e41c0717268e2b8a6440bcc50670c2f618bea818b307ed381f96088a8376af8d61203f6afb02b434195885333aa6e3d4cb440763ff05ea64b92fec43e420d142a0028138f8010f29736acd67f41c35d7903e731586fa3a675c925600cc5d1023d3845e950e9eb442d6a7f5ddcfd6e01dd1a8f29d7e165097854284c1fc3328f5062f3bb580eef6d9c75498b57bfd8dcd7112e4962bbc2ac14ba1e5b9eb14cbab5ab614147c9d8bc78d5a1422e06491ab4d80db514d42e30a41a21f0b29a86b35a4ce270d013f8b2863199b4a9a5dcf0b82f108fe2e063b65bfec638656747b10efcf1ba3ac8165d2ab516cc58a8cdbde7f629c4ae90fd36f28b927f026d9906083d821b2f1d4028ac739aea98bf18d159ac9d5935f5d488a0cd922149314a3c313a893d7af0359ad71edc2a08fa4f2eef6dc97082217f8c769a7ffdd8aa93a7dc909bac4e40f3ea5e0df0d08be4c3d7f4f168862a2a76d59f43dee3385c202ecff08c3eb243643429ce7645f56790ed5507e88ce71489fd9a75a54d52578be649e47d86b3476634a5e64fd0c00e05a560c876789369a154902b48fddcf649c083b59d4b66f09c64f19d013d5aef806f77a14dacd9e7ad4623c215e7919654e51a0a77908c005c4c7fa47d64e31d9ec60249146bba419cf9b7234a6a17bde595ba19838142cf5780408da00613153af1e7c3cdad01f47ebdc60a58e1054f0600951e57106b631f642fe77dde36ffdef611ae6f0f9ddad5dc7c8242e252abb1be02b69ad7682eea8675cce0b01d8518b85ca1bd3d8fabca1c1f85fa393c46c8b82c57f785aa933e32aa05ab27244f4ad9ce0dc6b615f8ee32f2c2edae8a98333219b562daef0de31d1aaa102e4b458b82b9b972186f3017e52d8a561e7c606066ff58fe983d1258cb9222c8d8f7c194d89b895abd7711eeb1c6a4ab8d13ce2330a688dc06f9a35b388a3d01c73f9f54c3c46be7f5ba0997112e16fd0e022cf2bea7bd8b9d96c52bdbb0a320f1e5009731ffa9344e72f209d4a1a7f19c2715adee29f5046d79a9ae396e01aea229ef99bca6e863e63d057b6c3b5fe93eb860d0ef9c48051577d9b1f792674c87e74f69bad8a3d46ce49993c37e51d72f79bcb23943f31e4023968c5b0d1637ec882f9c6aee13457db7cbe546853c054618653627b54e5bf805a608f4d2365153e10903afae561ba516a8c931bd3d84ad94be5652175129f5d355209ba68cad856da2698cdeb60e98d0c39683eaaccb5a609682bdbc42f7ec08a4cbef0409b45e19cc8f4fd4c9c980b9bc9ece651120a1838b6871683635a8fe6bfc4cbfb7743672d6a618220e0f07306f79fb7c69203a2460cd23b350aa99391e3ec0e0a45cf275921947c6904973b21fc2c55055f0724871e6e0157d30e796d826afbbf078b1ab2dbb0db6a06e97d61afd3f64b7ff8b9973b01d724334cad7d96a6d093c9d442e39cf4791eaf5defc241fd4baa84fde1d3b3483c54f34616c41e61368fbb5bb4d1783b482585fd981bf8f447f58804ea96dc456847294884c0f4c25d42543185c52561eea82fc5ced8363cfff2b1757a2e80999ce06678709350cf8193b1cbbac73b467018660c6cfa9319d1ee86f00311f616c43788e77c7bb490b50cb5de9df794ede5e79808798d3c1ea74fe43f1a5e285bba6cb4f7414f7ef49d4103944f0ce65377f2fed4aa0ec9dee0fac65ffcfa508bfcd84e9fe14138c94a58c976c7fafe286dd256919ca50046b4a36c3d952d6f919a0c42886850bea55e8182ee733dd49826a6f3ba7f9848aed53667e8b7fce5d619692a6683b3253887c667f3e2aed3674895a39efd36eeb9984064a9f7020f777051c888ba428ffd077da9934deb56d342dfa9ea753761688ba5997dcd0fa05adaa87c5d88230f9fe452efaaa3e432a6b3fe758d18ec87b8785bd64fb792c42f366ef9873369e7bf6364cb2fea60ba3e13da2734c219cf98a4af16a95775facf75b20c7835d5c043fb355d5f72fcd89507f89f54643ac01cf485512764e15a0042dba72852da0c89421c55125faa8913312c271651cde29ac8659bece0247217c88a825c1a0c188437bbc31d2a23932e776dc1db9c1aa97774071e6f802016d9ec9d41272be96400975ff95dda5e125cee26a44e24324da4f6608bab2739c4fb2b99f173912f6d149a4c89df06225e77f70a59ad6d7b42ecff19da0a39ef811eac533f3720e112ecb3de0f8c0328a68bd074e8f3aaa67ee4f26674ce2a5c59682b25de134807a26d178330a43098c07bc4d191e9cf3806f5eb544b9941dee609c"]}]}, 0x123c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r8 = getpid()
process_vm_readv$auto(r8, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0)
process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f00000005c0)={0xa74, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4b5, 0x2, 0x0, 0x1, [@generic="ce97d01e2e3ff66aae3a87e23d3f89e9d550a78f8a15ab748f86d2795521a2b5394c7948dbd3e93d2c8552da4c193b641df0ab620b02ce5f2aaa8fe0dfe7935c5f6853e1e283165b6620740be71783e89f85aafaf69cf5d880d8d83e84cc6266fb33c406de164c8681d8812f02e875da63be84ecafa8872cd8f619229a3e7a1ed428be52bde2328b743fa625bf33e9680ff1dd8a200c714ae90138af97a1646e366c8e3ed2f902fdcdf5b613ef6e32a40a33cef03ef8bd47e450abf3788b9c8289fd13953d95c15015420952b2298ad17c07db374b8dbb6774c29856c0ab5003706bde6fe312f763c1c918f28361554735ca3eb8ae49d3b3c6b24c0331a0", @generic="5354d9c9ca9602e3cd13cc1b53ca20245d05e680a225555398319e0e921b6965c748fd8d8f165fc95feefaa9dc84cc9211722cf05733f6f42db161cae4c53cc60139b0033e74a926432c819edc6101903f806fe11b6f9a3331d0b8f8e3b2ea5d869376102a2a56adde408825c1a82ca024d856f9844440c0dfe7b0e68a67a27aaf438e1e795bed779ab30b0c18d1d8e54a94885a8f00625a07ca0c767724c04a0069d287c764ed66f79ff8ab0919598fe9a56d61715d047fd5724b28781553a9d25cec4e5255e49321f010afc00f0edb4cffda8cbc4223fa641b4685797525f45e0afb48d053aaa06d1290c61f7c2945fd", @typed={0x14, 0xa5, 0x0, 0x0, @str='$*\\#%+\\\xfa\x0f&$-:^[\x00'}, @typed={0x13, 0xf5, 0x0, 0x0, @binary="6ca5f98b4036a7f2f6d2fb5378297c"}, @generic="16ab77586281f8075a710fe2965edb3098605dafaed8861dd4ba130ef781cd873b04161e8cbb9eb9dd805896a9c777e279196cb329e2c271c512b933ca21ee859225114e90edd98598067b93f29f743041392b770c71ea6783cf12b124f960c446f4fb5f6f7c9fe4c53f3523c40d6f148c53ef8484aef8dfdc000474339d5379112ebf0b94d57e2edaac438b4f2adfe4369a9fbdbcbe47b663a18adb7a6fe28416d2e92b07ba1a3dacd91daa312a8db396d33c9d8266c35a9f7d120fbfeaaff9d9c7dd", @generic="a4fbc0fd45aa0cbc479c41cc0937b6836021f3", @nested={0x10, 0xfd, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xdf}]}, @nested={0x12f, 0xa7, 0x0, 0x1, [@nested={0x4, 0x4a}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x108}, @generic="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", @typed={0x13, 0x39, 0x0, 0x0, @str='\xca$\x06$$]%-&:(&{)\x00'}, @typed={0x8, 0x134, 0x0, 0x0, @uid=r5}]}, @generic="cae1f096c3c1351d93b468180e0b801729848a5c8106a5b694a471663a5ee103a4c300e8b46052cf17c8a4d5dc81cb838f79ff4def42582b6b5c7667d706ff3310488256900170ac2e10f7e7b152c65e3f8eed4095caf08af6036f2c73b8ea9bb4469132", @generic="f1b88246a0f8ce660f8c100eed8247194f3d187c0aef15baffe5e8c819037810"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4f8, 0x2, 0x0, 0x1, [@typed={0x8, 0x159, 0x0, 0x0, @pid}, @typed={0x8, 0x167, 0x0, 0x0, @u32=0xffffffff}, @typed={0x6, 0x58, 0x0, 0x0, @str='(\x00'}, @nested={0x16a, 0x143, 0x0, 0x1, [@typed={0x4, 0x125}, @generic="4a64fa071d6a9fbf520a68c8c2e9e40b32041541b17f1aa725cc2793a3303c3e2a60e4903e5b3b5f08df6db2a3f815ee1b3b216cecf44b20959e179567cf43b11ee417a21bcaf2137b97165f89630575e49383ef41761614433115906db7f4e6b765d6051347188d25e960c40a8b735076d9e38b8399ce4e8381ffb45c843a4773f89dcb92b53586f16a8bfceb7374b83a7c9d67f65b83a5e4eacd54f71e43c0ebde5657b5b2f7d0", @typed={0xc, 0x60, 0x0, 0x0, @u64=0xd8a7}, @generic="2f35be6005f4fae8386ed22650fbe930af46f6540042370e42d694dafb5b7bbb3d01ed694e9e23c23cc504bfac294e31c20c7a717167bf6e8d70f4ee021499ff8ae74a536e8d201335a87e41cc3bf9a1f03425216be1648dbfbe8f24a00e43301575810eee1f9b3b2fbdb5481f34cd6753ff269db4bd05ea52ec27a208d27d84e9acb2dd703fffa15c642ea01e2ebfeb599f32258acd37c03c584dd9791a034d64ee2a44e552", @nested={0x4, 0x3d}, @nested={0x4, 0xb7}]}, @nested={0x1c6, 0x8e, 0x0, 0x1, [@typed={0x4, 0x3c}, @generic="952461f9aa5427b13204a6ddea9c8e2078a1249db350dde1082c314232f8a594cd2f02bf957e2e923cac793126a9f903b67df133717ce9b0298aeb130ce8c60afb428b51556e8007dc3166efeae9bf15fc760b93b704391def85a67ad8e65685b78ebc154d0adc5d0bb6b9a1d6a283507f094df4a8de8ad4f72faa6e5cd3f94b87b16351f8794634964f835af6cf6f7bc900713ab12bf53508e10db74886f7efc2d52e47675787fb15efd3797492f7ddcfc6d1414ca68611196e2623c31645014e5c", @generic="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"]}, @nested={0x1a6, 0xf2, 0x0, 0x1, [@generic="5836f6db2186371e7f48a3b9c56f0e9135f7950fb302c4e66b195ddaa5e15f21d201df6789d74c25071d5a4c7f57788fe6b098f66868a4", @generic="96f3077541e4d8e169e3c772452a9a88d6ceb5ebc217c42e0df679722a0d2cefa5d22e1eb3e0e91f227daa514d62a64c18c5dd541caa7bac2ebf7fd5b42ddcc7d06e9b9da56cc1248704d7bb9219c3df654d3bccd99a10a0a07bdd4a04048cf72271557f1a7258bbbd3f0d463fed038493f2a47e76c5", @typed={0x8, 0x91, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x14e, 0x0, 0x0, @u32}, @nested={0x4, 0x10a}, @generic="463451a7c9896fcef151b57b8a4e8be5d6309740cd546493a632ab7242accb40f816085e04e1d6aeb48893a9b14fbeb893ca85f7b250f1a25769bdb36ca8fd99cb817c2e0895383f6785affdcfd9f56b152cefe8418eb9029ea1ce433c124571af4de5896c47b0dae5f3d9bba90c56a4ea5a73c55cad6879706bb5cf509961f5e2c2ec94152fcd60e67cb1243266b83a5ccbf13614bde7aca9d1c1e756d3a8646441570d4de5233205244e66aebc9a33b6677ceded18c4cc8b943af94d1b608ea7900fa1ae42ef09498f1bd4c253311b851b058251c8d5591eb1c7bcffd377931b"]}]}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
mlockall$auto(0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
shmget$auto(0x8, 0x10569, 0x7ff)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)

12.343664349s ago: executing program 49 (id=2943):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000000)="ed4ed5c02e84c9d9bdeeff6a6efabbc842d06b4e69")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x9e, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080)
statx$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, &(0x7f00000000c0)={0x2c, 0x80000001, 0x7fffffffffffffff, 0x0, <r4=>0xee01, 0xee00, 0x9, 0xd, 0x7, 0x8000000000000000, 0x100000000, 0x10000, {0x6, 0xdd}, {0x8, 0x50000}, {0xff, 0x44}, {0x7fffffff, 0x4f79}, 0x8, 0x1000, 0x62db317f, 0x2, 0x8, 0x696, 0x2, 0xf, 0x4, 0xffffffff, 0x6, 0x5, [0x9, 0x8, 0x100000000, 0xf56d, 0xd, 0x0, 0x7, 0x3, 0x7]})
shmctl$auto_IPC_SET(0xb2, 0x1, &(0x7f00000002c0)={{0x5707ec25, <r5=>0xffffffffffffffff, 0xee01, 0x7, 0x7fffffff, 0x800, 0x9}, 0x4, 0xfff, 0xb, 0x5, @raw=0x9, @inferred=<r6=>0xffffffffffffffff, 0x9, 0x0, &(0x7f00000001c0)="3ffb0f0b6ba3a69fc8512f53605e3f21855d91fd901dc107a868d5a97754bef9f8db74a8df71ae508b8e68", &(0x7f0000000200)="df137387c55402113499751975ca8f3bbf7e0bf41f859717a879a34367c639c4f474619cb1e07d221031cde0814b2174dd6c38aa103cb244de6409b32c7128a2529e8aeb98a8bad5fa38bc1d6fd78e407ee17a5d7b0734f8a781b1b7b6a948c2da71880aa8722128803a7566163d3c720cd7aab86b9e6ac022773fc9fbc4f2f1f719cb2b6da61870acef95814a4a6016f77ce73e735ac3bd776d74e2c8837cd607e65d6f551fd0d296a67b6d2c9076dbe909598ab0a20e23520c3ac322c3e773"})
r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), r0)
sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000002340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f00000010c0)={0x123c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1228, 0x9, 0x0, 0x1, [@typed={0x103, 0x12d, 0x0, 0x0, @binary="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"}, @nested={0x11d, 0x8c, 0x0, 0x1, [@typed={0x5, 0x114, 0x0, 0x0, @str='\x00'}, @generic="4687277633e547f00fdb0f4880cf0f145f8a6bf1e0280e88d1dd68c73bed5fe3bf17611cc89c91d60ef6f33038b422b056a0a36018535bd2edbdee9bd81322b131289446539715acfc93478779983dd11bbf3acd5cb476d40ab6eafb0bbbf2ff820ecd45f0d75e398eec1acb21f248ba8b57b92b84f4794c43548a48a2c6ea558ecc98", @nested={0x4, 0x11e}, @generic="510c1d3a776d78c2fea4985a2ce12e87b6c3e0c73cbb74f405a230bfecd6f662908c86d188cd23eb4fe66ad5ca93341f838fabb86d970a17054b8a65e23de4444caa7a2d6d264078bf434f0a99384dc87906da94f4fa433f14fb63", @nested={0x4, 0x5}, @generic="d24e97d0318a8707b951ebc67ed3410b2181bc7adeddf39182073a", @nested={0x4, 0x45}, @nested={0x4, 0x127}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r6}]}, @generic="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"]}]}, 0x123c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r8 = getpid()
process_vm_readv$auto(r8, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0)
process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f00000005c0)={0xa74, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4b5, 0x2, 0x0, 0x1, [@generic="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", @generic="5354d9c9ca9602e3cd13cc1b53ca20245d05e680a225555398319e0e921b6965c748fd8d8f165fc95feefaa9dc84cc9211722cf05733f6f42db161cae4c53cc60139b0033e74a926432c819edc6101903f806fe11b6f9a3331d0b8f8e3b2ea5d869376102a2a56adde408825c1a82ca024d856f9844440c0dfe7b0e68a67a27aaf438e1e795bed779ab30b0c18d1d8e54a94885a8f00625a07ca0c767724c04a0069d287c764ed66f79ff8ab0919598fe9a56d61715d047fd5724b28781553a9d25cec4e5255e49321f010afc00f0edb4cffda8cbc4223fa641b4685797525f45e0afb48d053aaa06d1290c61f7c2945fd", @typed={0x14, 0xa5, 0x0, 0x0, @str='$*\\#%+\\\xfa\x0f&$-:^[\x00'}, @typed={0x13, 0xf5, 0x0, 0x0, @binary="6ca5f98b4036a7f2f6d2fb5378297c"}, @generic="16ab77586281f8075a710fe2965edb3098605dafaed8861dd4ba130ef781cd873b04161e8cbb9eb9dd805896a9c777e279196cb329e2c271c512b933ca21ee859225114e90edd98598067b93f29f743041392b770c71ea6783cf12b124f960c446f4fb5f6f7c9fe4c53f3523c40d6f148c53ef8484aef8dfdc000474339d5379112ebf0b94d57e2edaac438b4f2adfe4369a9fbdbcbe47b663a18adb7a6fe28416d2e92b07ba1a3dacd91daa312a8db396d33c9d8266c35a9f7d120fbfeaaff9d9c7dd", @generic="a4fbc0fd45aa0cbc479c41cc0937b6836021f3", @nested={0x10, 0xfd, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xdf}]}, @nested={0x12f, 0xa7, 0x0, 0x1, [@nested={0x4, 0x4a}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0x108}, @generic="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", @typed={0x13, 0x39, 0x0, 0x0, @str='\xca$\x06$$]%-&:(&{)\x00'}, @typed={0x8, 0x134, 0x0, 0x0, @uid=r5}]}, @generic="cae1f096c3c1351d93b468180e0b801729848a5c8106a5b694a471663a5ee103a4c300e8b46052cf17c8a4d5dc81cb838f79ff4def42582b6b5c7667d706ff3310488256900170ac2e10f7e7b152c65e3f8eed4095caf08af6036f2c73b8ea9bb4469132", @generic="f1b88246a0f8ce660f8c100eed8247194f3d187c0aef15baffe5e8c819037810"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4f8, 0x2, 0x0, 0x1, [@typed={0x8, 0x159, 0x0, 0x0, @pid}, @typed={0x8, 0x167, 0x0, 0x0, @u32=0xffffffff}, @typed={0x6, 0x58, 0x0, 0x0, @str='(\x00'}, @nested={0x16a, 0x143, 0x0, 0x1, [@typed={0x4, 0x125}, @generic="4a64fa071d6a9fbf520a68c8c2e9e40b32041541b17f1aa725cc2793a3303c3e2a60e4903e5b3b5f08df6db2a3f815ee1b3b216cecf44b20959e179567cf43b11ee417a21bcaf2137b97165f89630575e49383ef41761614433115906db7f4e6b765d6051347188d25e960c40a8b735076d9e38b8399ce4e8381ffb45c843a4773f89dcb92b53586f16a8bfceb7374b83a7c9d67f65b83a5e4eacd54f71e43c0ebde5657b5b2f7d0", @typed={0xc, 0x60, 0x0, 0x0, @u64=0xd8a7}, @generic="2f35be6005f4fae8386ed22650fbe930af46f6540042370e42d694dafb5b7bbb3d01ed694e9e23c23cc504bfac294e31c20c7a717167bf6e8d70f4ee021499ff8ae74a536e8d201335a87e41cc3bf9a1f03425216be1648dbfbe8f24a00e43301575810eee1f9b3b2fbdb5481f34cd6753ff269db4bd05ea52ec27a208d27d84e9acb2dd703fffa15c642ea01e2ebfeb599f32258acd37c03c584dd9791a034d64ee2a44e552", @nested={0x4, 0x3d}, @nested={0x4, 0xb7}]}, @nested={0x1c6, 0x8e, 0x0, 0x1, [@typed={0x4, 0x3c}, @generic="952461f9aa5427b13204a6ddea9c8e2078a1249db350dde1082c314232f8a594cd2f02bf957e2e923cac793126a9f903b67df133717ce9b0298aeb130ce8c60afb428b51556e8007dc3166efeae9bf15fc760b93b704391def85a67ad8e65685b78ebc154d0adc5d0bb6b9a1d6a283507f094df4a8de8ad4f72faa6e5cd3f94b87b16351f8794634964f835af6cf6f7bc900713ab12bf53508e10db74886f7efc2d52e47675787fb15efd3797492f7ddcfc6d1414ca68611196e2623c31645014e5c", @generic="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"]}, @nested={0x1a6, 0xf2, 0x0, 0x1, [@generic="5836f6db2186371e7f48a3b9c56f0e9135f7950fb302c4e66b195ddaa5e15f21d201df6789d74c25071d5a4c7f57788fe6b098f66868a4", @generic="96f3077541e4d8e169e3c772452a9a88d6ceb5ebc217c42e0df679722a0d2cefa5d22e1eb3e0e91f227daa514d62a64c18c5dd541caa7bac2ebf7fd5b42ddcc7d06e9b9da56cc1248704d7bb9219c3df654d3bccd99a10a0a07bdd4a04048cf72271557f1a7258bbbd3f0d463fed038493f2a47e76c5", @typed={0x8, 0x91, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x14e, 0x0, 0x0, @u32}, @nested={0x4, 0x10a}, @generic="463451a7c9896fcef151b57b8a4e8be5d6309740cd546493a632ab7242accb40f816085e04e1d6aeb48893a9b14fbeb893ca85f7b250f1a25769bdb36ca8fd99cb817c2e0895383f6785affdcfd9f56b152cefe8418eb9029ea1ce433c124571af4de5896c47b0dae5f3d9bba90c56a4ea5a73c55cad6879706bb5cf509961f5e2c2ec94152fcd60e67cb1243266b83a5ccbf13614bde7aca9d1c1e756d3a8646441570d4de5233205244e66aebc9a33b6677ceded18c4cc8b943af94d1b608ea7900fa1ae42ef09498f1bd4c253311b851b058251c8d5591eb1c7bcffd377931b"]}]}]}, 0xa74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
mlockall$auto(0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
shmget$auto(0x8, 0x10569, 0x7ff)
shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa)

7.401887969s ago: executing program 9 (id=3022):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x7, 0x4)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0)

6.959478053s ago: executing program 1 (id=3023):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0)
mmap$auto(0xfffffffffffffff8, 0x4, 0x9f, 0x800000000801e, 0xffffffffffffffff, 0x8)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008aeb0, 0x0)
mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000)
mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x7, 0x4)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0)

6.711531842s ago: executing program 6 (id=3024):
ioperm$auto(0x40080000000000af, 0x7, 0x991b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
mknodat$auto(0xffffffffffffff9c, 0x0, 0x40, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(0x0, 0x5, 0x400)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
fsopen$auto(0x0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0)
writev$auto(r3, 0x0, 0x4)
ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000001)
r4 = gettid()
kill$auto(r4, 0x11)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f00000000c0)='%*-*)-()%\'\'{/@\x00', 0x9)
read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001)
lsetxattr$auto(0x0, 0x0, 0x0, 0xf4e9, 0x3)
write$auto(r5, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
setresgid$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60000, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000002080)={{0x3b9, 0xee01, 0xffffffffffffffff, 0x6, 0x3, 0x400, 0x2}, 0x0, &(0x7f0000002040)=0x9, 0x7, 0x200, 0x9, 0x5, 0xc, 0x1, 0x1, 0x401, @raw=0x3, @inferred=0xffffffffffffffff})
setfsuid$auto(0xee00)
getuid()
sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005280)={0x0, 0x0, 0x0}, 0x40)

6.158228262s ago: executing program 9 (id=3025):
mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffff7, 0x6a0000000000000)
mmap$auto(0x4, 0x80000f76, 0xdf, 0x14, 0x401, 0x8000)
pipe$auto(0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, &(0x7f0000000080)=0x8)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0)
madvise$auto(0x9, 0x600000000000, 0x4)
sendfile$auto(r1, r1, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52)
getsockopt$auto_SO_TIMESTAMP_NEW(r0, 0x5, 0x3f, &(0x7f0000000100)='\xcc-\x00', &(0x7f0000000140)=0x9)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0)
ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)

5.893886243s ago: executing program 6 (id=3026):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
r5 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x7, 0x6, 0x80)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket(0x2a, 0x2, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "1dfcd05dd93beabf4a0ceefa258053fa91912abc7adf74c1592636817d25c8e264e3ebc960a9590e392444ce7cae1cc984b1827379928cfd8cf73599c7f357ec8b61bce0056a71b5e9b1e07ec534f321be1cd28b4fc563875bacbd911a678bcf0c137c5f1a52795fd42a98fc14a0651e36d17964137b2b69b4dc806c33673fb8509f034f8fab6c17ce17a18bdb4b2f46cbbf5b02e0a3a2472a0a811ccaa01da75c596aa89452b1469c913be3bf836d1301b71636b41e578e706ac24ae1acca1b208cc2332ac0d7b6afbfec54df750197f36646f67f4928780182f90eacdaa318928fb294a2a591b36fa40d2a755ff91b77f44996d70d3f16fe66442bf9212ebcd88a5ad805cbdf9673497932d61c5564fa34dd383709717eb10fc89db2faa930023961c603504834d6d3e28c1420f96524cb4fbe34efdb3da1e53a54f15dd8f722656ea6e0c81e20a057e7b00b1f00f617443ae1096de08d3cd2b274c96d38ee76d4290416a8fedea2ca89413c39326384ad2d3c793f10201ab1f6df5cdb21fe11e968c847632d8d0695441430c1749d6df7a77c5848fa478a73b5cc0d7acfbac28f2b1e5c04d2c873127464be2bb68042cb9995f17ca529ebb145d54ddee3699bdea85af150fa3ed7dd518db0e4aeeebe099eda18738844e0c51060553bd5d49f40fbadae435cc1dec577cd437452210c31f179b332fdd50a3b9ecf23dd157274426c22dd013646770015f4751293bbe5e8382be2d6fd69ce47910476a861d87da37464e6575ec709450bb20c6c75691d3fee5135cacfa00b263a6098b9a7522ea3e753409c0df8a692631e94a13c7de9f8aed160f976375c703cfd93e1b91df2e8a2131cf42d2b9a2acdd8f41d67ca7fa190a3e38a695805d94b0666041b964670778de5d24e49455f80728d79a5a6b0935ce15ad460ba843b2f0c0888ad00ff29d7ade6c9fde3f96af27a00019b8ed7941a7be3bf8b2d7431a48fcb4afbc293bf2ab4e76bdb7a5384ad5a76b3fd1a3b1542bcd51db9af1b574985f5f09dff8dc2582d86858a565c8251ecab8481a193fa43dc51508b87cc5fe2426e611caf7a77da85cb64799967461e5e5290f0172a8b792140348fa7b1394bf7a03f2db347a81c62ecb98dac28bb9b71797740553ec39af3ad0ed060490354b88cb08408f9cfd491f6c67d3e441951b0bf91d51f467839be6080b20b5eeabd5c40c35e140743d1b49d3f90ea81d6a3131ae846b451d020da1d8e72de3a62c87fd39e4d6a04e06893f42cbe402be76660265f6a4061952eab7dc110ef2f7fb371d06570c70b1f393da979f401116cec3b2b087ec444390ae11bc7563ab6acdebbe839ef126200993123e29e2ef8fd72e0c8fead8070c1fba3f3f78bf52b4a63093597b20e04a4de8a1f03aabf44606c7a466a8d0af7353eb07580cc14ca114e5f667b3f4431bf199fe02319fe9a41c4a06d24e25e7a140ccb02718e644aac1c6c3c36fa8cf5d3e56a713a73678403c7fcdb4f2eecbce58334d674fe6d72391bf1ac4e4bdf963a7148370ad0ae26c1d1972ddfd1913aea4887c3f39c8879e3e8748dd5044a62b39a16bf96c6290c73df326ed37e44fc3f6eb38a9aa95f3112da19bc7bc1c458c63407327b557c244614d4ec49086aaaf2329d5dc3cdca676647fe19ceb199e349e86e488ab9b682929e48130ce35ac0baf19a3720b051724e69801de52671ace74c27d648f2f1658384d3d850046fb4f2a47dbb8c3aa3084303d8e4e495f3f0e84fe1764141d155abbdf082da3e62a16185395e80bd2ffb736d7502f46a8c33cee3257a7363c67fbc8c4f61020916d84c3afd5f6c518d2f3ed090ea68e7761ea4c8f337ddebe1e9f806921f395136a2378fbb882bea8ebfce89bdec784ebbae151309ba61cb5aefc425c7752defdfdad916c299c2929d0e08043ff9498e4b08147014ec3c8d03ce97413b047eec2ed6dbd4db4a4f3e7863586a7f729c86c6ec19a25a6d1747d11acd835491fcd1ff88f2bae11602dc9f7f78fea1847051013a7e832964da0112e4b817078fefedf8111d0749eefb9618a13fefde0b7121eb"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014)
bind$auto(r6, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x4)
sendto$auto(r6, &(0x7f0000000180)="eb43d1a7c50c95d59e8bdd617e674feac5c91f21d780f51889b790e7358ca55a0f", 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1)
connect$auto(0x3, 0x0, 0x55)

5.555745611s ago: executing program 1 (id=3027):
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x401)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty61\x00', 0x40403, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
getsockopt$auto(r1, 0x11b, 0x8, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
timer_create$auto(0x9, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x317, r2, 0x4, 0x1)
ptrace$auto(0x10, r2, 0x1, 0x7ff)
bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000280)=@batch={0xfffffffffffffffb, 0x2, 0xffffffffffff7457, 0x0, 0xffff, r0, 0x7, 0x556e}, 0x6)
ptrace$auto(0xe, r2, 0x9, 0xfffffffffffff6de)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0xfffffffffffffffe, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
unshare$auto(0x2)
ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000100)="8d8cfd72f1c71518ed22169e0b95f9ec78a50679ec2009e4e3018d19c40010000017fab27c8579476acec85237f8ee85a124f668e8bbf6de7eda4cce570cdc4ad25d470132")
read$auto(0xffffffffffffffff, 0x0, 0x2800000009)
write$auto(0x3, 0x0, 0xfdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r4)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="017eadf07f7e3d3940250400000028000c0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)

5.162317313s ago: executing program 6 (id=3028):
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), 0xffffffffffffffff)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="251729bd7000fcdbc725010000000800010009000000", @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x64810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pimreg\x00'})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="00032bbd7000fddbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x1)
bind$auto(0xffffffffffffffff, 0x0, 0x6a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r2, 0x1, 0x7ff)
ptrace$auto(0xffffffffffffffff, r2, 0x5169, 0x1)
mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0xffffffffffffffff, 0x28000)
r3 = open(&(0x7f0000000000)='&&\x00', 0x595002, 0x408)
write$auto(r3, 0x0, 0xfffffdf1)
linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket(0x2, 0x1, 0x106)
mmap$auto(0x400000000, 0x3, 0x9, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0x25, 0x2, 0x0)
r4 = socket(0x18, 0x5, 0x1)
connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)

5.056926005s ago: executing program 9 (id=3029):
bpf$auto(0x5, 0x0, 0x47)
unshare$auto(0x40000080)
write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x28, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000040)
read$auto(0x3, 0x0, 0x8080)
unshare$auto(0x40000080)
socket(0x2c, 0x1, 0x0)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
umask$auto(0x7)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0)
ioctl$auto(0x3, 0x5521, 0x1)
sendfile$auto(r1, r1, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000)
get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3)
setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x140082, 0x0)
writev$auto(r2, 0x0, 0x3)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
futex$auto(0x0, 0x85, 0xa, 0x0, 0x0, 0xa0800002)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)

4.989558416s ago: executing program 1 (id=3030):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804)
lstat$auto(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram7\x00', 0x600, 0x0)
ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={"52b9488db85fffbed6eb138fcd56d5424019963c641252e1e9f1a7bded20e024", 0x400, 0x8, 0x20000000, 0x5, 0x80000000})
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, r2, 0x711, 0x70b52c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
poll$auto(&(0x7f0000000340)={r5, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x10000007c84, 0x7fff)

3.047146319s ago: executing program 9 (id=3031):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x20, r0, 0xf25, 0x70bd26, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/serial\x00', 0x109522, 0x0)
write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7)

2.916185245s ago: executing program 6 (id=3032):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x801, 0x84)
r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0xb) (async)
r2 = socket(0xa, 0x1, 0x6)
bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x17) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
epoll_create$auto(0x4)
socket(0xa, 0x2, 0x3a) (async)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x0, 0x0) (async)
lseek$auto(0x3, 0x2, 0x4) (async)
getsockopt$auto_SO_GET_FILTER(r0, 0x0, 0x1a, &(0x7f00000003c0)='/dev/sg0\x00\x0e\xe7\x8eI\xb3m\x83\xb3\v\\\x9f\xb4\x8f\x7f@7\x03\x00\x00\x00\x86w\x02\xa0\x16MZ\x14W`\xc3HjX\xa4\xe7\xd0\xc5D\xe4\xc5 \x9b3r\x11,\xdd9\r\xab~\xf8\xec\x8az;\xfa\xb3\xc8\x04\x16\xedT\x95\x82-\x05\tZR\b\x14\xe6\xe7\xfc\xfds\x8a\xfayT\x9dp\x1a \xba$\x02bz\xc3\x8c\x7fT2\xfe\x93\xf6[\xc3\xb76\xbc\x88\xee}\xbb`,\x11\xe2gP\xda\xbeG\xb1J\xd5\x14\xb1j\xa8\\\x16Y^U\x0e\xfb\xfa\xe8XJ\x94\xa4\xfb\"\x9b\xb4_\v\n\x97\x8c\x88,l\x91\xec\x1ca\xd0~\x00Zi\x98J\x0eG\xac|a\xd6\xc0\x9f~`\x98\x83\x92\x19\x9a*y\xba{hv\xe5\x98LT\xac\xbf\xff\x86!\xb0\xd1D\xe6G\xd1\x9b\x11\x99\x83\xf3\xd6\xc4Oz\n\xc1\x81\xcco\xf6\x9e9\xc6\x8fG\xef\v\xc1Z\xe7\xa7\'\x8d\xcf\xee+\xacc\xacR\x04N\xb8 J\x7fbQ\x88\xeb\x8b>\xd05\xad\x18n\xd6\xf5T\x81H\xdfY4\xd1\x12\x84\xdfVt\xce\xe9\xe2>\x83g\x0fe\xeb\xe5\xd5\xc3\xa1\x97\xd4\x88\xbdD\xf8\x9bP\xc8\xc1$\x00\x14\x1ak\xc3\xafU\xc4P\x14\xbf\xf1\xfd\xda\x90\x1e\xefY\xe9\xed\x7f', &(0x7f00000000c0)=0x4cb)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nullb0/queue/physical_block_size\x00', 0x0, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0xffffffffffffffff, 0x3}, 0x6f3)

2.840966447s ago: executing program 1 (id=3033):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/path\x00', 0xc8800, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4138, 0x102a) (fail_nth: 3)

2.439726402s ago: executing program 6 (id=3034):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f00000004c0)="445cc19989", 0x5)
socket(0xa, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x0)
mmap$auto(0x80000000, 0x2000a, 0x0, 0x40000000000eb1, 0x401, 0x8000) (async)
mmap$auto(0x80000000, 0x2000a, 0x0, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x2, 0x202000a, 0x3, 0xeb1, r0, 0x20000000008000) (async)
mmap$auto(0x2, 0x202000a, 0x3, 0xeb1, r0, 0x20000000008000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1) (async)
r2 = socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0) (async)
socket(0xa, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
getsockopt$auto_SO_TYPE(r2, 0x5, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x8001) (async)
getsockopt$auto_SO_TYPE(r2, 0x5, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x8001)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x80108907, 0x0)
r4 = socketcall$auto(0xa, 0x0)
read$auto_tty_fops_tty_io(r1, &(0x7f0000000080)=""/4, 0x4)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(r5, 0x66a, 0xffffffffffffffff)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)={0xdd})

660.693156ms ago: executing program 6 (id=3035):
r0 = socket(0x2, 0x1, 0x106)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0)
ioctl$auto(r1, 0x4b3a, 0x1)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x242000, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x8a000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000040)={{@raw=0x6, 0x7, 0x5, 0x4, "3c70d528a4a70ef32de672c630142efc2c9963564ed0a722ed226e7254dd431c9712cc3b67a2203555dc9710", @inferred=<r4=>0x0}, 0x7, 0x6, 0x4, @raw=0x3, @enumerated={0x2, 0xd, "7e84e6c428a94d86f1da07124ae3fe2e694832d7218694764444d9dfa511d5246626da11e26b6b267e1a2cb6e1d41331d12d9e78470cd1d0b56d0cd2145340fc", 0x4040000000000, 0x7dd04bb4}, "71bc01bc5686085ca15f095a841b25d66c148f52a1ad31a489e59be291336905d64a8f7dbd9775e74d1ee3d57ca9b9ac2d9c4c00fb687b7327a575257b3c0deb"})
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000000c0)={0x6, 0xfc3, 0x2, 0x6, 0x6, <r5=>0xffffffffffffffff})
syz_clone3(&(0x7f00000018c0)={0x20000000, &(0x7f0000000200), &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280), {0x3c}, &(0x7f0000000840)=""/4096, 0x1000, &(0x7f0000001840)=""/42, &(0x7f0000001880)=[0x0, r5], 0x2}, 0x58)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000140)={0x0, 0x802000, 0x7, @raw=0x3, &(0x7f0000000100)={@inferred=r4, 0x9, 0x9, 0x407, "60d6d361f5c4a25561a55f282f856a43f1f31f9f3bfe9bd3d86a046f1302fe4a4bb437445efbd6340fe7278d", @inferred=<r7=>r6}, "1a85cd92a3323d310f5aeae8d3d23add5da57fd039d0c05c700600d1319323563cd57741543e1106d8f63829505c678c9bf6"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = open(&(0x7f0000000100)='.\x00', 0x141000, 0x408)
write$auto(r9, 0x0, 0xfdfffdf1)
ioctl$auto_XFS_IOC_ALLOCSP(r9, 0x4030580a, &(0x7f00000002c0)={0x2, 0x8, 0x7, 0x4, 0x100, r7})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001ac0)={'veth0_to_hsr\x00', <r12=>0x0})
sendmsg$auto_NETDEV_CMD_DEV_GET(r10, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000001c0), r10)
mmap$auto(0x0, 0x202000d, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x400, 0x647a, 0x9b72, 0x2, 0x108000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x4, 0x40000006, 0x0, 0x0, 0x80000001)
fallocate$auto(0x8000000000000003, 0x0, 0xd252, 0xcbd5d)
mlock$auto(0x81, 0xffff)
r13 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r13, 0x4b68, 0x0)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c)

659.991395ms ago: executing program 1 (id=3036):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
r5 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x7, 0x6, 0x80)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket(0x2a, 0x2, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014)
bind$auto(r6, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x4)
sendto$auto(r6, &(0x7f0000000180)="eb43d1a7c50c95d59e8bdd617e674feac5c91f21d780f51889b790e7358ca55a0f", 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)

530.158535ms ago: executing program 9 (id=3037):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) (fail_nth: 1)
r5 = socket(0xa, 0x1, 0x84)
ioperm$auto(0x7, 0x6, 0x80)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket(0x2a, 0x2, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6)
sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014)
bind$auto(r6, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x4)
sendto$auto(r6, &(0x7f0000000180)="eb43d1a7c50c95d59e8bdd617e674feac5c91f21d780f51889b790e7358ca55a0f", 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)

251.409945ms ago: executing program 1 (id=3038):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800)
open(&(0x7f00000002c0)='./file0\x00', 0xc2243, 0x1c7)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r1, @new_prog_fd, 0x2c}, 0x92)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0)
read$auto_ima_ascii_measurements_ops_ima_fs(r2, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ustat$auto(0x40, 0x0)

190.442706ms ago: executing program 5 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00P', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080003008500"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840)

110.86734ms ago: executing program 9 (id=3039):
socket(0x27, 0x2, 0x1fbffffe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2641, 0x0)
write$auto(r0, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x801, 0x84)
fcntl$auto_F_GETFD(r1, 0x1, 0xffffffff)
io_uring_setup$auto(0x4, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0)
epoll_create$auto(0x4)
r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1})
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x7, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7)
r4 = epoll_create$auto(0x8800001)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/crash_notes\x00', 0x40, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000380)=""/166, 0xa6)
socket(0x2b, 0x1, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54)
shutdown$auto(0x200000003, 0x2)
epoll_ctl$auto(r4, 0x1, r2, 0x0)

0s ago: executing program 5 (id=3040):
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/wchan\x00', 0x2400, 0x0)
read$auto_proc_single_file_operations_base(r0, &(0x7f0000000200)=""/225, 0xe1)
mmap$auto(0x401, 0x4000000000000002, 0x4000000000df, 0x12, 0x401, 0x8000007ffc)
r1 = ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000180)=0x6)
bind$auto(r1, &(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x2, 0x0)
socket(0x28, 0x1, 0x0)
r3 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x4, 0x0, 0x1, 0x20000005)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x1c100, 0x0)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x800, 0x4020009, 0xdf, 0xeb1, 0x401, 0x10001)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xe46)
epoll_create$auto(0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3)
sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd700300000004001e0100"/26], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x44000)
epoll_ctl$auto(0x5, 0x1, r4, 0x0)
epoll_ctl$auto(0x5, 0x3, r4, 0x0)

kernel console output (not intermixed with test programs):

etdevsim0: renamed from eth0
[  802.620506][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  802.628392][T19561] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  802.637675][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  802.645603][T19561] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  802.655852][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  802.663759][T19561] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  802.673381][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  802.802271][T19561] 8021q: adding VLAN 0 to HW filter on device bond0
[  802.826793][T19561] 8021q: adding VLAN 0 to HW filter on device team0
[  802.852650][T19166] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.859769][T19166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.919424][T19166] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.926529][T19166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.077224][T16721] Bluetooth: hci0: command tx timeout
[  803.463622][T19561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  803.484924][T19614] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  803.498088][T19614] netlink: 186 bytes leftover after parsing attributes in process `syz.8.2772'.
[  803.868674][T19561] veth0_vlan: entered promiscuous mode
[  803.893226][T19561] veth1_vlan: entered promiscuous mode
[  803.930634][T19561] veth0_macvtap: entered promiscuous mode
[  803.941851][T19561] veth1_macvtap: entered promiscuous mode
[  803.970471][T19561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  803.991098][T19628] random: crng reseeded on system resumption
[  804.000101][T19561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  804.022514][T19179] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  804.034531][T19179] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  804.046646][T19179] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  804.055564][T19179] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  804.175900][T16363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.184058][T16363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.220437][T19178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.230948][T19178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.044481][T14880] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  805.061346][T14880] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  805.076270][T14880] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  805.097103][T14880] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  805.108231][T14880] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  805.818887][T19657] FAULT_INJECTION: forcing a failure.
[  805.818887][T19657] name failslab, interval 1, probability 0, space 0, times 0
[  805.845061][T19657] CPU: 1 UID: 0 PID: 19657 Comm: syz.8.2779 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  805.845104][T19657] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  805.845115][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  805.845130][T19657] Call Trace:
[  805.845138][T19657]  <TASK>
[  805.845149][T19657]  dump_stack_lvl+0x100/0x190
[  805.845198][T19657]  should_fail_ex.cold+0x5/0xa
[  805.845232][T19657]  should_failslab+0xc2/0x120
[  805.845264][T19657]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  805.845304][T19657]  ? __d_alloc+0x34/0xa40
[  805.845348][T19657]  __d_alloc+0x34/0xa40
[  805.845387][T19657]  d_alloc+0x4a/0x1e0
[  805.845424][T19657]  lookup_one_qstr_excl+0x171/0x250
[  805.845468][T19657]  start_dirop+0x59/0xb0
[  805.845508][T19657]  simple_start_creating+0xf9/0x110
[  805.845540][T19657]  ? __pfx_simple_start_creating+0x10/0x10
[  805.845572][T19657]  ? mntput+0x70/0xa0
[  805.845601][T19657]  ? simple_pin_fs+0xa3/0x190
[  805.845631][T19657]  debugfs_start_creating.part.0+0x82/0x170
[  805.845687][T19657]  __debugfs_create_file+0xb3/0x4f0
[  805.845719][T19657]  debugfs_create_file_full+0x41/0x60
[  805.845750][T19657]  kvm_dev_ioctl+0x1492/0x1a50
[  805.845797][T19657]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  805.845845][T19657]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  805.845881][T19657]  __x64_sys_ioctl+0x18e/0x210
[  805.845911][T19657]  do_syscall_64+0x115/0x840
[  805.845947][T19657]  ? clear_bhb_loop+0x40/0x90
[  805.845982][T19657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.846009][T19657] RIP: 0033:0x7f7a6f39ce59
[  805.846031][T19657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.846056][T19657] RSP: 002b:00007f7a70311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  805.846082][T19657] RAX: ffffffffffffffda RBX: 00007f7a6f616090 RCX: 00007f7a6f39ce59
[  805.846101][T19657] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[  805.846117][T19657] RBP: 00007f7a6f432d6f R08: 0000000000000000 R09: 0000000000000000
[  805.846134][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  805.846150][T19657] R13: 00007f7a6f616128 R14: 00007f7a6f616090 R15: 00007ffe21e6c2b8
[  805.846188][T19657]  </TASK>
[  806.358860][T14880] Bluetooth: hci0: command tx timeout
[  806.634503][T19645] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.648643][T19645] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.659459][T19645] bridge_slave_0: entered allmulticast mode
[  806.670939][T19645] bridge_slave_0: entered promiscuous mode
[  806.680290][T19645] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.687635][T19645] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.707193][T19645] bridge_slave_1: entered allmulticast mode
[  806.716828][T19645] bridge_slave_1: entered promiscuous mode
[  806.790597][T19645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.823848][T19645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.877087][T19645] team0: Port device team_slave_0 added
[  806.886420][T19645] team0: Port device team_slave_1 added
[  806.933111][T19645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  806.940277][T19645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  806.970116][T19645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  806.994007][T19645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.004073][T19645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.031098][T19645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.112146][T19645] hsr_slave_0: entered promiscuous mode
[  807.118930][T19645] hsr_slave_1: entered promiscuous mode
[  807.126525][T19645] debugfs: 'hsr0' already exists in 'hsr'
[  807.133630][T19645] Cannot create hsr debugfs directory
[  807.157740][T14880] Bluetooth: hci8: command tx timeout
[  808.274725][T19695] futex_wake_op: syz.8.2783 tries to shift op by -2048; fix this program
[  808.332469][T19695] futex_wake_op: syz.8.2783 tries to shift op by -2048; fix this program
[  808.345492][T19699] 0x000000000001-0x000000020000 : ""
[  808.381865][T19699] ftl_cs: FTL header corrupt!
[  808.439660][T14880] Bluetooth: hci0: command tx timeout
[  808.572970][T19706] ERROR: Out of memory at tomoyo_memory_ok.
[  808.621623][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  808.628119][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  808.702706][T19645] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  808.714328][T19645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  808.752223][T19645] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  808.766067][T19645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  808.795984][T19645] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  808.819768][T19645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  808.828467][T19645] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  808.843100][T19645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  809.180413][T19645] 8021q: adding VLAN 0 to HW filter on device bond0
[  809.248724][T14880] Bluetooth: hci8: command tx timeout
[  809.289077][T19645] 8021q: adding VLAN 0 to HW filter on device team0
[  809.342524][T16363] bridge0: port 1(bridge_slave_0) entered blocking state
[  809.349714][T16363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  809.403521][T16363] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.410736][T16363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  809.573860][T19731] zswap: compressor û not available
[  810.404004][T19645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.492969][T19645] veth0_vlan: entered promiscuous mode
[  810.510919][T19645] veth1_vlan: entered promiscuous mode
[  810.619334][T19645] veth0_macvtap: entered promiscuous mode
[  810.653635][T19645] veth1_macvtap: entered promiscuous mode
[  810.712382][T19645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.742017][T19645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  810.790121][T15242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  810.806002][T15242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.823713][T15242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.849700][T15242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.124038][T19166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.145848][T19166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.298285][T19179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.306779][T19179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.317470][T14880] Bluetooth: hci8: command tx timeout
[  811.697407][T16721] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  811.711958][T16721] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  811.731718][T16721] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  811.741443][T16721] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  811.752558][T16721] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  813.406982][T14880] Bluetooth: hci8: command tx timeout
[  813.555533][T19800] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.564117][T19800] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.571496][T19800] bridge_slave_0: entered allmulticast mode
[  813.581451][T19800] bridge_slave_0: entered promiscuous mode
[  813.626481][T19800] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.651732][T19800] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.672925][T19800] bridge_slave_1: entered allmulticast mode
[  813.682828][T19800] bridge_slave_1: entered promiscuous mode
[  813.802232][T14880] Bluetooth: hci9: command tx timeout
[  813.866324][T19800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  813.924158][T19800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.026715][T19800] team0: Port device team_slave_0 added
[  814.044563][T19800] team0: Port device team_slave_1 added
[  814.106434][T19800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.122547][T19800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.154787][T19800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.170268][T19800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.177327][T19800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  814.206033][T19800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.433907][T19800] hsr_slave_0: entered promiscuous mode
[  814.482360][T19800] hsr_slave_1: entered promiscuous mode
[  814.493812][T19800] debugfs: 'hsr0' already exists in 'hsr'
[  814.501523][T19800] Cannot create hsr debugfs directory
[  815.021630][T19800] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  815.055568][T19800] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  815.064045][T19800] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  815.083337][T19800] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  815.108750][T19800] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  815.122164][T19800] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  815.132526][T19800] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  815.158876][T19800] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  815.772882][T19800] 8021q: adding VLAN 0 to HW filter on device bond0
[  815.815786][T19800] 8021q: adding VLAN 0 to HW filter on device team0
[  815.843553][T14912] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.850795][T14912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  815.874494][T14980] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.881703][T14980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.893380][T14880] Bluetooth: hci9: command tx timeout
[  816.253902][T19935] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2798'.
[  816.508396][T19935] input input14: cannot allocate more than FF_MAX_EFFECTS effects
[  817.593206][T19800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.700927][T19800] veth0_vlan: entered promiscuous mode
[  817.716768][T19800] veth1_vlan: entered promiscuous mode
[  817.766637][T19800] veth0_macvtap: entered promiscuous mode
[  817.784726][T19800] veth1_macvtap: entered promiscuous mode
[  817.832961][T19800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.867779][T19800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  817.918640][T14912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.942029][T14912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  817.958127][T14880] Bluetooth: hci9: command tx timeout
[  817.980843][T14912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.013515][T15242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.235338][T19179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.258950][T19179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  818.323111][T19179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.332799][T19179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  818.715867][T14880] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18
[  818.887858][T20005] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  820.037716][T14880] Bluetooth: hci9: command tx timeout
[  820.952790][T14901] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  820.970270][T14901] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  820.980258][T14901] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  820.992969][T14901] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  821.003756][T14901] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  822.119467][T14901] Bluetooth: hci9: command 0x2016 tx timeout
[  823.077517][T16721] Bluetooth: hci10: command tx timeout
[  823.316733][T20034] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.373114][T20034] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.393277][T20034] bridge_slave_0: entered allmulticast mode
[  823.431622][T20034] bridge_slave_0: entered promiscuous mode
[  823.487200][T20034] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.509611][T20034] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.529628][T20034] bridge_slave_1: entered allmulticast mode
[  823.553140][T20034] bridge_slave_1: entered promiscuous mode
[  823.663757][T20034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.692274][T20034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.763003][T20034] team0: Port device team_slave_0 added
[  823.772098][T20034] team0: Port device team_slave_1 added
[  823.811017][T20034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.823171][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.852194][T20034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.865311][T20034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.872580][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.898904][T20034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.940945][T20091] random: crng reseeded on system resumption
[  823.981385][T20091] FAULT_INJECTION: forcing a failure.
[  823.981385][T20091] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  824.013120][T20034] hsr_slave_0: entered promiscuous mode
[  824.019084][T20091] CPU: 1 UID: 0 PID: 20091 Comm: syz.2.2818 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  824.019132][T20091] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  824.019144][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  824.019161][T20091] Call Trace:
[  824.019171][T20091]  <TASK>
[  824.019182][T20091]  dump_stack_lvl+0x100/0x190
[  824.019237][T20091]  should_fail_ex.cold+0x5/0xa
[  824.019267][T20091]  ? prepare_alloc_pages+0x16d/0x5f0
[  824.019305][T20091]  should_fail_alloc_page+0xeb/0x140
[  824.019344][T20091]  prepare_alloc_pages+0x1f0/0x5f0
[  824.019387][T20091]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  824.019437][T20091]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  824.019495][T20091]  ? stack_trace_save+0x8e/0xc0
[  824.019533][T20091]  ? __pfx_stack_trace_save+0x10/0x10
[  824.019568][T20091]  ? arch_stack_walk+0xa6/0xf0
[  824.019603][T20091]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  824.019651][T20091]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  824.019702][T20091]  ? kasan_save_stack+0x30/0x50
[  824.019729][T20091]  ? kasan_save_track+0x14/0x30
[  824.019756][T20091]  ? __kasan_kmalloc+0xaa/0xb0
[  824.019790][T20091]  ? memory_bm_create+0x14d/0xba0
[  824.019831][T20091]  ? do_syscall_64+0x115/0x840
[  824.019870][T20091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.019905][T20091]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  824.019948][T20091]  ? policy_nodemask+0xed/0x4f0
[  824.019985][T20091]  alloc_pages_mpol+0x1fb/0x540
[  824.020022][T20091]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  824.020057][T20091]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  824.020094][T20091]  alloc_pages_noprof+0x1a/0x160
[  824.020133][T20091]  get_zeroed_page_noprof+0x18/0xb0
[  824.020170][T20091]  get_image_page+0x18/0x1a0
[  824.020203][T20091]  alloc_rtree_node+0x3c/0xb0
[  824.020238][T20091]  memory_bm_create+0x65e/0xba0
[  824.020287][T20091]  create_basic_memory_bitmaps+0xbd/0x350
[  824.020331][T20091]  snapshot_open+0x230/0x2a0
[  824.020371][T20091]  ? __pfx_snapshot_open+0x10/0x10
[  824.020412][T20091]  misc_open+0x26d/0x450
[  824.020444][T20091]  ? __pfx_misc_open+0x10/0x10
[  824.020472][T20091]  chrdev_open+0x234/0x6a0
[  824.020508][T20091]  ? __pfx_apparmor_file_open+0x10/0x10
[  824.020542][T20091]  ? __pfx_chrdev_open+0x10/0x10
[  824.020580][T20091]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  824.020628][T20091]  do_dentry_open+0x6ab/0x14d0
[  824.020663][T20091]  ? __pfx_chrdev_open+0x10/0x10
[  824.020707][T20091]  vfs_open+0x82/0x3f0
[  824.020754][T20091]  path_openat+0x208c/0x31a0
[  824.020812][T20091]  ? __pfx_path_openat+0x10/0x10
[  824.020861][T20091]  do_file_open+0x20e/0x430
[  824.020898][T20091]  ? __pfx_do_file_open+0x10/0x10
[  824.020962][T20091]  ? alloc_fd+0x476/0x790
[  824.020998][T20091]  ? do_getname+0x191/0x390
[  824.021043][T20091]  do_sys_openat2+0x10d/0x1e0
[  824.021087][T20091]  ? __pfx_do_sys_openat2+0x10/0x10
[  824.021129][T20091]  ? __pfx_restore_altstack+0x10/0x10
[  824.021180][T20091]  __x64_sys_openat+0x12d/0x210
[  824.021223][T20091]  ? __pfx___x64_sys_openat+0x10/0x10
[  824.021264][T20091]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  824.021312][T20091]  ? rcu_is_watching+0x12/0xc0
[  824.021350][T20091]  do_syscall_64+0x115/0x840
[  824.021388][T20091]  ? clear_bhb_loop+0x40/0x90
[  824.021425][T20091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.021455][T20091] RIP: 0033:0x7f76a519ce59
[  824.021480][T20091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.021508][T20091] RSP: 002b:00007f76a5fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  824.021535][T20091] RAX: ffffffffffffffda RBX: 00007f76a5416090 RCX: 00007f76a519ce59
[  824.021555][T20091] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  824.021574][T20091] RBP: 00007f76a5232d6f R08: 0000000000000000 R09: 0000000000000000
[  824.021592][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.021609][T20091] R13: 00007f76a5416128 R14: 00007f76a5416090 R15: 00007fffbe51db08
[  824.021649][T20091]  </TASK>
[  824.022989][T20034] hsr_slave_1: entered promiscuous mode
[  824.197019][T16721] Bluetooth: hci9: command 0x2016 tx timeout
[  824.429364][T20034] debugfs: 'hsr0' already exists in 'hsr'
[  824.435131][T20034] Cannot create hsr debugfs directory
[  824.735996][T20034] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.900428][T20034] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.016979][T20034] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.141478][T20034] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.160492][T16721] Bluetooth: hci10: command tx timeout
[  825.756673][T20034] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  825.821497][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  825.876067][T20034] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  825.913436][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  825.933804][T20034] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  825.967802][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  825.979706][T20034] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  826.012851][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  826.416255][T20034] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.477188][T20034] 8021q: adding VLAN 0 to HW filter on device team0
[  826.502539][T15242] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.509664][T15242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.557943][T15242] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.565063][T15242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.237666][T16721] Bluetooth: hci10: command tx timeout
[  827.240549][T20034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.618193][T14901] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  827.647282][T14901] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  827.658169][T14901] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  827.673210][T14901] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  827.681563][T14901] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  828.203604][T20034] veth0_vlan: entered promiscuous mode
[  828.234946][T20034] veth1_vlan: entered promiscuous mode
[  828.385866][T20034] veth0_macvtap: entered promiscuous mode
[  828.404220][T20034] veth1_macvtap: entered promiscuous mode
[  828.467794][T20034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.494473][T20034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.525340][T14980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.552534][T14980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.567264][T14980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.608997][T14980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.939033][T19166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  828.972970][T19166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.110232][T14875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.127657][T14875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.324440][T16721] Bluetooth: hci10: command tx timeout
[  829.444801][T20193] random: crng reseeded on system resumption
[  829.467237][T20193] FAULT_INJECTION: forcing a failure.
[  829.467237][T20193] name failslab, interval 1, probability 0, space 0, times 0
[  829.488844][T20193] CPU: 1 UID: 0 PID: 20193 Comm: syz.5.2809 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  829.488897][T20193] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  829.488913][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  829.488931][T20193] Call Trace:
[  829.488941][T20193]  <TASK>
[  829.488953][T20193]  dump_stack_lvl+0x100/0x190
[  829.489006][T20193]  should_fail_ex.cold+0x5/0xa
[  829.489041][T20193]  should_failslab+0xc2/0x120
[  829.489076][T20193]  __kmalloc_cache_noprof+0x7a/0x6f0
[  829.489118][T20193]  ? create_basic_memory_bitmaps+0xeb/0x350
[  829.489165][T20193]  create_basic_memory_bitmaps+0xeb/0x350
[  829.489210][T20193]  snapshot_open+0x230/0x2a0
[  829.489250][T20193]  ? __pfx_snapshot_open+0x10/0x10
[  829.489292][T20193]  misc_open+0x26d/0x450
[  829.489323][T20193]  ? __pfx_misc_open+0x10/0x10
[  829.489353][T20193]  chrdev_open+0x234/0x6a0
[  829.489397][T20193]  ? __pfx_apparmor_file_open+0x10/0x10
[  829.489431][T20193]  ? __pfx_chrdev_open+0x10/0x10
[  829.489470][T20193]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  829.489517][T20193]  do_dentry_open+0x6ab/0x14d0
[  829.489553][T20193]  ? __pfx_chrdev_open+0x10/0x10
[  829.489598][T20193]  vfs_open+0x82/0x3f0
[  829.489644][T20193]  path_openat+0x208c/0x31a0
[  829.489694][T20193]  ? __pfx_path_openat+0x10/0x10
[  829.489744][T20193]  do_file_open+0x20e/0x430
[  829.489782][T20193]  ? __pfx_do_file_open+0x10/0x10
[  829.489854][T20193]  ? alloc_fd+0x476/0x790
[  829.489894][T20193]  ? do_getname+0x191/0x390
[  829.489940][T20193]  do_sys_openat2+0x10d/0x1e0
[  829.489985][T20193]  ? __pfx_do_sys_openat2+0x10/0x10
[  829.490032][T20193]  ? __pfx_restore_altstack+0x10/0x10
[  829.490089][T20193]  __x64_sys_openat+0x12d/0x210
[  829.490135][T20193]  ? __pfx___x64_sys_openat+0x10/0x10
[  829.490177][T20193]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  829.490230][T20193]  ? rcu_is_watching+0x12/0xc0
[  829.490269][T20193]  do_syscall_64+0x115/0x840
[  829.490310][T20193]  ? clear_bhb_loop+0x40/0x90
[  829.490346][T20193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.490376][T20193] RIP: 0033:0x7fe30959ce59
[  829.490400][T20193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  829.490428][T20193] RSP: 002b:00007fe30a4a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  829.490456][T20193] RAX: ffffffffffffffda RBX: 00007fe309815fa0 RCX: 00007fe30959ce59
[  829.490477][T20193] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  829.490496][T20193] RBP: 00007fe309632d6f R08: 0000000000000000 R09: 0000000000000000
[  829.490514][T20193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  829.490533][T20193] R13: 00007fe309816038 R14: 00007fe309815fa0 R15: 00007fffb2d66f38
[  829.490575][T20193]  </TASK>
[  829.523621][T20135] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.802716][T16721] Bluetooth: hci11: command tx timeout
[  829.848467][T20135] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.855769][T20135] bridge_slave_0: entered allmulticast mode
[  829.867596][T20135] bridge_slave_0: entered promiscuous mode
[  829.889485][T20135] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.898523][T20135] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.906025][T20135] bridge_slave_1: entered allmulticast mode
[  829.920722][T20135] bridge_slave_1: entered promiscuous mode
[  830.004853][T20135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  830.043102][T20135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  830.132446][T20209] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  830.160300][T20135] team0: Port device team_slave_0 added
[  830.183357][T20135] team0: Port device team_slave_1 added
[  830.252970][T20135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  830.262833][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  830.296142][T20135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  830.313837][T20135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  830.321379][T20135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  830.350922][T20135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  830.432180][T20135] hsr_slave_0: entered promiscuous mode
[  830.440185][T20135] hsr_slave_1: entered promiscuous mode
[  830.446538][T20135] debugfs: 'hsr0' already exists in 'hsr'
[  830.452361][T20135] Cannot create hsr debugfs directory
[  830.867895][T20214] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20219] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[20214]
[  830.930602][T20221] nvme_fcloop: unknown parameter or missing value '7�="­ÿ�ù;¤°&Lë=j³"Yq'R"'
[  830.944566][T20135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.143132][T20135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.311348][T20135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.545993][T20135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.877644][T16721] Bluetooth: hci11: command tx timeout
[  831.968172][T20233] FAULT_INJECTION: forcing a failure.
[  831.968172][T20233] name failslab, interval 1, probability 0, space 0, times 0
[  831.982241][T20233] CPU: 1 UID: 8 PID: 20233 Comm: syz.5.2835 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  831.982286][T20233] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  831.982298][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  831.982313][T20233] Call Trace:
[  831.982323][T20233]  <TASK>
[  831.982334][T20233]  dump_stack_lvl+0x100/0x190
[  831.982382][T20233]  should_fail_ex.cold+0x5/0xa
[  831.982413][T20233]  ? __alloc_empty_sheaf+0x35/0x50
[  831.982449][T20233]  should_failslab+0xc2/0x120
[  831.982478][T20233]  __kmalloc_noprof+0xe0/0x850
[  831.982519][T20233]  ? __pcs_replace_empty_main+0x13a/0x650
[  831.982558][T20233]  ? __pcs_replace_empty_main+0x13a/0x650
[  831.982604][T20233]  __alloc_empty_sheaf+0x35/0x50
[  831.982640][T20233]  __pcs_replace_empty_main+0x3e8/0x650
[  831.982701][T20233]  kmem_cache_alloc_noprof+0x480/0x6e0
[  831.982738][T20233]  ? key_alloc+0x3c5/0x1310
[  831.982770][T20233]  ? mark_lock+0x9f0/0xa20
[  831.982815][T20233]  key_alloc+0x3c5/0x1310
[  831.982863][T20233]  ? __pfx_key_alloc+0x10/0x10
[  831.982895][T20233]  ? __pfx_key_default_cmp+0x10/0x10
[  831.982935][T20233]  ? __pfx_keyring_search_iterator+0x10/0x10
[  831.982987][T20233]  keyring_alloc+0x44/0xc0
[  831.983031][T20233]  look_up_user_keyrings+0x465/0x790
[  831.983072][T20233]  ? __pfx_look_up_user_keyrings+0x10/0x10
[  831.983101][T20233]  ? futex_wait+0x11e/0x370
[  831.983137][T20233]  ? __pfx_futex_wait+0x10/0x10
[  831.983177][T20233]  lookup_user_key+0xbb1/0x1300
[  831.983209][T20233]  ? __pfx_lookup_user_key+0x10/0x10
[  831.983247][T20233]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  831.983286][T20233]  ? __x64_sys_futex+0x34f/0x4d0
[  831.983311][T20233]  ? __x64_sys_futex+0x358/0x4d0
[  831.983345][T20233]  keyctl_session_to_parent+0x28/0xae0
[  831.983382][T20233]  __do_sys_keyctl+0x2b1/0x5a0
[  831.983412][T20233]  do_syscall_64+0x115/0x840
[  831.983451][T20233]  ? clear_bhb_loop+0x40/0x90
[  831.983485][T20233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.983512][T20233] RIP: 0033:0x7fe30959ce59
[  831.983534][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.983561][T20233] RSP: 002b:00007fe30a4a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  831.983586][T20233] RAX: ffffffffffffffda RBX: 00007fe309815fa0 RCX: 00007fe30959ce59
[  831.983605][T20233] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012
[  831.983624][T20233] RBP: 00007fe309632d6f R08: 0000000000000002 R09: 0000000000000000
[  831.983641][T20233] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000
[  831.983659][T20233] R13: 00007fe309816038 R14: 00007fe309815fa0 R15: 00007fffb2d66f38
[  831.983709][T20233]  </TASK>
[  832.259355][T20135] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  832.299735][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  832.308060][T20135] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  832.345583][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  832.375637][T20135] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  832.399447][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  832.413025][T20135] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  832.427465][T20135] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  832.704935][T20135] 8021q: adding VLAN 0 to HW filter on device bond0
[  832.750899][T20135] 8021q: adding VLAN 0 to HW filter on device team0
[  832.763871][T20184] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.771061][T20184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  832.804249][T20184] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.811364][T20184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  832.833827][T20255] random: crng reseeded on system resumption
[  833.492978][T20268] sd 0:0:1:0: PR command failed: 1026
[  833.507084][T20268] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  833.518904][T20268] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  833.791494][T20135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  833.957672][T16721] Bluetooth: hci11: command tx timeout
[  834.018022][T20282] random: crng reseeded on system resumption
[  834.615357][T20135] veth0_vlan: entered promiscuous mode
[  834.730447][T20135] veth1_vlan: entered promiscuous mode
[  834.995494][T20135] veth0_macvtap: entered promiscuous mode
[  835.021132][T20135] veth1_macvtap: entered promiscuous mode
[  835.079565][T20135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  835.164244][T20306] i2c i2c-0: new_device: Missing parameters
[  835.271214][T20135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  835.350818][T15055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.391654][T15055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.402268][T15055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  835.426702][T15055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.694337][T20184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.708760][T20184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.831058][T15055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.870863][T15055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.039007][T16721] Bluetooth: hci11: command tx timeout
[  838.337705][T14901] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  838.349947][T14901] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  838.366130][T14901] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  838.374625][T14901] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  838.382399][T14901] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  838.864907][T20365] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.872225][T20365] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.879506][T20365] bridge_slave_0: entered allmulticast mode
[  838.886588][T20365] bridge_slave_0: entered promiscuous mode
[  838.894657][T20365] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.901926][T20365] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.909284][T20365] bridge_slave_1: entered allmulticast mode
[  838.916293][T20365] bridge_slave_1: entered promiscuous mode
[  838.943863][T20365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.955632][T20365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  838.989051][T20365] team0: Port device team_slave_0 added
[  838.996652][T20365] team0: Port device team_slave_1 added
[  839.022478][T20365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.029448][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.055398][T20365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.068041][T20365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.074998][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.101441][T20365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.143244][T20365] hsr_slave_0: entered promiscuous mode
[  839.149608][T20365] hsr_slave_1: entered promiscuous mode
[  839.155615][T20365] debugfs: 'hsr0' already exists in 'hsr'
[  839.163526][T20365] Cannot create hsr debugfs directory
[  839.304395][T20365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.429004][T20365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.522381][T20365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.596388][T20365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.759978][T20365] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  839.769774][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  839.777634][T20365] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  839.786757][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  839.797956][T20365] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  839.807472][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  839.818633][T20365] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  839.829144][T20365] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  839.913985][T20365] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.933206][T20365] 8021q: adding VLAN 0 to HW filter on device team0
[  839.944957][T14980] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.952071][T14980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  839.976755][T20176] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.983868][T20176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  840.354859][T20365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  840.438294][T14901] Bluetooth: hci12: command tx timeout
[  840.572885][T20365] veth0_vlan: entered promiscuous mode
[  840.583701][T20365] veth1_vlan: entered promiscuous mode
[  840.611873][T20365] veth0_macvtap: entered promiscuous mode
[  840.625797][T20365] veth1_macvtap: entered promiscuous mode
[  840.651049][T20365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.663450][T20365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.681879][T20176] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.691612][T20176] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.704989][T20176] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.717887][T20176] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.822733][T20179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  840.880887][T20179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  840.905393][T14892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  840.914397][T14892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.373362][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2869'.
[  841.793108][T20427] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  842.520333][T14901] Bluetooth: hci12: command tx timeout
[  844.597322][T14901] Bluetooth: hci12: command tx timeout
[  846.679142][T14901] Bluetooth: hci12: command tx timeout
[  851.373608][T16721] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  851.388641][T16721] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  851.399239][T16721] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  851.412108][T16721] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  851.423298][T16721] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  851.892389][T20441] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.899555][T20441] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.906675][T20441] bridge_slave_0: entered allmulticast mode
[  851.916124][T20441] bridge_slave_0: entered promiscuous mode
[  851.923837][T20441] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.931440][T20441] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.938676][T20441] bridge_slave_1: entered allmulticast mode
[  851.945685][T20441] bridge_slave_1: entered promiscuous mode
[  851.974313][T20441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  851.987991][T20441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.017218][T20441] team0: Port device team_slave_0 added
[  852.025339][T20441] team0: Port device team_slave_1 added
[  852.049688][T20441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  852.056620][T20441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.083067][T20441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  852.097042][T20441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  852.103988][T20441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  852.133934][T20441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  852.172829][T20441] hsr_slave_0: entered promiscuous mode
[  852.179636][T20441] hsr_slave_1: entered promiscuous mode
[  852.185939][T20441] debugfs: 'hsr0' already exists in 'hsr'
[  852.191718][T20441] Cannot create hsr debugfs directory
[  852.343205][T20441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.451435][T20441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.548344][T20441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.694289][T20441] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  852.704061][T20441] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  852.712040][T20441] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  852.721056][T20441] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  852.729049][T20441] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  852.739936][T20441] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  852.753185][T20441] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  852.775679][T20441] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  853.002075][T20441] 8021q: adding VLAN 0 to HW filter on device bond0
[  853.015621][T16721] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  853.048289][T20441] 8021q: adding VLAN 0 to HW filter on device team0
[  853.057518][T20471] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  853.066522][T16721] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  853.086445][T16721] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  853.094808][T20441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  853.098324][T20471] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  853.105366][T20441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  853.128525][T16721] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  853.139744][T16721] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  853.150566][T20471] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  853.182765][T20471] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  853.195480][T20471] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  853.208871][T20179] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.215971][T20179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.300876][T20179] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.308083][T20179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  853.477059][T14880] Bluetooth: hci13: command tx timeout
[  854.718142][T20441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  854.930197][T20441] veth0_vlan: entered promiscuous mode
[  854.953580][T20441] veth1_vlan: entered promiscuous mode
[  854.986078][T20441] veth0_macvtap: entered promiscuous mode
[  855.011273][T20441] veth1_macvtap: entered promiscuous mode
[  855.034314][T20441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  855.059044][T20441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  855.079788][T19167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  855.165834][T19167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  855.191576][T20178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  855.201604][T20178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.237279][T14880] Bluetooth: hci14: command tx timeout
[  855.268035][T20467] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.275553][T20467] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.283030][T20467] bridge_slave_0: entered allmulticast mode
[  855.292814][T20467] bridge_slave_0: entered promiscuous mode
[  855.302363][T20467] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.309830][T20467] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.317671][T20467] bridge_slave_1: entered allmulticast mode
[  855.320260][T14880] Bluetooth: hci15: command tx timeout
[  855.325580][T20467] bridge_slave_1: entered promiscuous mode
[  855.502596][T20467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  855.515559][T20467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.549732][T20469] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.557179][T14880] Bluetooth: hci13: command tx timeout
[  855.565974][T20469] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.573449][T20469] bridge_slave_0: entered allmulticast mode
[  855.580986][T20469] bridge_slave_0: entered promiscuous mode
[  855.589736][T20469] bridge0: port 2(bridge_slave_1) entered blocking state
[  855.596999][T20469] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.604215][T20469] bridge_slave_1: entered allmulticast mode
[  855.612096][T20469] bridge_slave_1: entered promiscuous mode
[  855.629241][T14980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.638438][T14980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.668389][T20467] team0: Port device team_slave_0 added
[  855.679395][T20467] team0: Port device team_slave_1 added
[  855.714092][T20469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  855.739124][T20467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.746106][T20467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.773221][T20467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.796242][T20469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.806804][T20467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.814164][T20467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.840203][T20467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  855.891082][T20178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.894017][T20469] team0: Port device team_slave_0 added
[  855.908843][T20469] team0: Port device team_slave_1 added
[  855.912671][T20178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.962904][T20467] hsr_slave_0: entered promiscuous mode
[  855.969764][T20467] hsr_slave_1: entered promiscuous mode
[  855.976139][T20467] debugfs: 'hsr0' already exists in 'hsr'
[  855.982723][T20467] Cannot create hsr debugfs directory
[  856.010341][T20469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.017628][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.049549][T20469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.063687][T20469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.081048][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.112182][T20469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.225128][T20469] hsr_slave_0: entered promiscuous mode
[  856.235193][T20469] hsr_slave_1: entered promiscuous mode
[  856.243579][T20469] debugfs: 'hsr0' already exists in 'hsr'
[  856.249877][T20469] Cannot create hsr debugfs directory
[  856.435417][T20467] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.538738][T20467] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.626519][T20467] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.712958][T20467] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.873344][T20467] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  856.883825][T20467] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  856.892393][T20467] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  856.903507][T20467] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  856.911368][T20467] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  856.928537][T20467] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  856.984411][T20469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.019510][T20467] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  857.031299][T20467] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.095449][T20469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.161821][T20467] 8021q: adding VLAN 0 to HW filter on device bond0
[  857.203495][T20469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.229592][T20467] 8021q: adding VLAN 0 to HW filter on device team0
[  857.242782][T20176] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.249956][T20176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.277353][T14980] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.284474][T14980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  857.317801][T14880] Bluetooth: hci14: command tx timeout
[  857.324845][T20469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.397445][T14880] Bluetooth: hci15: command tx timeout
[  857.557933][T20469] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  857.574494][T20469] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  857.584390][T20469] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  857.595220][T20469] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  857.605762][T20469] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  857.617082][T20469] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  857.626238][T20469] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  857.638149][T20469] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.638994][T14880] Bluetooth: hci13: command tx timeout
[  857.763432][T20469] 8021q: adding VLAN 0 to HW filter on device bond0
[  857.788780][T20469] 8021q: adding VLAN 0 to HW filter on device team0
[  857.803696][T20173] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.810842][T20173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.851228][T20176] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.858351][T20176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.159116][T20467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  858.578767][T20467] veth0_vlan: entered promiscuous mode
[  858.593158][T20467] veth1_vlan: entered promiscuous mode
[  858.610262][T20469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  858.658752][T20467] veth0_macvtap: entered promiscuous mode
[  858.671631][T20467] veth1_macvtap: entered promiscuous mode
[  858.702295][T20467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  858.731364][T20467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  858.753402][T19167] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.766743][T19167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.789479][T19167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.802900][T20469] veth0_vlan: entered promiscuous mode
[  858.813299][T19167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  858.905705][T20469] veth1_vlan: entered promiscuous mode
[  859.061235][T20471] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  859.069233][T20471] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  859.092898][T20471] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  859.101065][T20469] veth0_macvtap: entered promiscuous mode
[  859.106113][T20469] veth1_macvtap: entered promiscuous mode
[  859.122488][T20471] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  859.130640][T20471] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  859.193624][T14980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.221721][T14980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.251408][T20469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  859.281230][T20469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  859.319674][T15055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.334605][T14980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  859.348010][T15055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.370281][T14980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  859.400435][T14880] Bluetooth: hci14: command tx timeout
[  859.410672][T14980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  859.439502][T14980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  859.477591][T14880] Bluetooth: hci15: command tx timeout
[  859.670246][T20176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.702338][T20176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.722946][T14880] Bluetooth: hci13: command tx timeout
[  859.885846][T20176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.924707][T20176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.261966][T20568] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  860.957228][T20553] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.964914][T20553] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.972418][T20553] bridge_slave_0: entered allmulticast mode
[  860.996421][T20553] bridge_slave_0: entered promiscuous mode
[  861.028766][T20553] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.036030][T20553] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.051125][T20553] bridge_slave_1: entered allmulticast mode
[  861.061254][T20553] bridge_slave_1: entered promiscuous mode
[  861.154678][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.189728][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.237524][T14880] Bluetooth: hci16: command tx timeout
[  861.283057][T20553] team0: Port device team_slave_0 added
[  861.318968][T20553] team0: Port device team_slave_1 added
[  861.382430][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.397170][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.447048][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.478246][T14880] Bluetooth: hci14: command tx timeout
[  861.485380][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.495742][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.522614][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.559681][T14880] Bluetooth: hci15: command tx timeout
[  861.822844][T20593] netlink: Failed to add  helper -22
[  861.828620][T20553] hsr_slave_0: entered promiscuous mode
[  861.845255][T20553] hsr_slave_1: entered promiscuous mode
[  861.857895][T20553] debugfs: 'hsr0' already exists in 'hsr'
[  861.871473][T20553] Cannot create hsr debugfs directory
[  862.379358][T20553] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.659045][T20553] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.863930][T20553] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.011401][T20553] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.317739][T14880] Bluetooth: hci16: command tx timeout
[  863.494847][T20553] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  863.514130][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  863.545385][T20553] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  863.614674][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  863.644645][T20553] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  863.676584][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  863.692629][T20553] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  863.724330][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  863.966526][T20553] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.016896][T20553] 8021q: adding VLAN 0 to HW filter on device team0
[  864.050573][T15055] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.057684][T15055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.129813][T15055] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.136946][T15055] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.213835][T20618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2885'.
[  864.235109][T20618] virt_wifi0: entered allmulticast mode
[  864.994927][T20553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.397563][T14880] Bluetooth: hci16: command tx timeout
[  865.867357][T20553] veth0_vlan: entered promiscuous mode
[  865.894228][T20647] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  865.996245][T20553] veth1_vlan: entered promiscuous mode
[  866.245063][T20553] veth0_macvtap: entered promiscuous mode
[  866.255989][T20553] veth1_macvtap: entered promiscuous mode
[  866.320438][T20553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  866.352911][T20553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  866.384366][T20176] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.441315][T20179] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.441708][T20653] netlink: NAT attribute has 5 unknown bytes
[  866.455139][T20179] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.496340][T20179] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  866.806170][T15055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.836455][T15055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  866.939689][T14980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.968881][T14980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.175195][T20662] random: crng reseeded on system resumption
[  867.226748][T20662] FAULT_INJECTION: forcing a failure.
[  867.226748][T20662] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  867.275822][T20662] CPU: 1 UID: 0 PID: 20662 Comm: syz.9.2879 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  867.275872][T20662] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  867.275884][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  867.275903][T20662] Call Trace:
[  867.275912][T20662]  <TASK>
[  867.275924][T20662]  dump_stack_lvl+0x100/0x190
[  867.275981][T20662]  should_fail_ex.cold+0x5/0xa
[  867.276011][T20662]  ? prepare_alloc_pages+0x16d/0x5f0
[  867.276053][T20662]  should_fail_alloc_page+0xeb/0x140
[  867.276090][T20662]  prepare_alloc_pages+0x1f0/0x5f0
[  867.276132][T20662]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  867.276180][T20662]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  867.276247][T20662]  ? stack_trace_save+0x8e/0xc0
[  867.276284][T20662]  ? __pfx_stack_trace_save+0x10/0x10
[  867.276317][T20662]  ? arch_stack_walk+0xa6/0xf0
[  867.276349][T20662]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  867.276394][T20662]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  867.276441][T20662]  ? kasan_save_stack+0x30/0x50
[  867.276468][T20662]  ? kasan_save_track+0x14/0x30
[  867.276495][T20662]  ? __kasan_kmalloc+0xaa/0xb0
[  867.276520][T20662]  ? memory_bm_create+0x14d/0xba0
[  867.276563][T20662]  ? do_syscall_64+0x115/0x840
[  867.276605][T20662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.276640][T20662]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  867.276687][T20662]  ? policy_nodemask+0xed/0x4f0
[  867.276725][T20662]  alloc_pages_mpol+0x1fb/0x540
[  867.276768][T20662]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  867.276805][T20662]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  867.276845][T20662]  alloc_pages_noprof+0x1a/0x160
[  867.276881][T20662]  get_zeroed_page_noprof+0x18/0xb0
[  867.276915][T20662]  get_image_page+0x18/0x1a0
[  867.276950][T20662]  alloc_rtree_node+0x3c/0xb0
[  867.276986][T20662]  memory_bm_create+0x65e/0xba0
[  867.277039][T20662]  create_basic_memory_bitmaps+0xbd/0x350
[  867.277084][T20662]  snapshot_open+0x230/0x2a0
[  867.277124][T20662]  ? __pfx_snapshot_open+0x10/0x10
[  867.277166][T20662]  misc_open+0x26d/0x450
[  867.277198][T20662]  ? __pfx_misc_open+0x10/0x10
[  867.277235][T20662]  chrdev_open+0x234/0x6a0
[  867.277272][T20662]  ? __pfx_apparmor_file_open+0x10/0x10
[  867.277307][T20662]  ? __pfx_chrdev_open+0x10/0x10
[  867.277345][T20662]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  867.277392][T20662]  do_dentry_open+0x6ab/0x14d0
[  867.277427][T20662]  ? __pfx_chrdev_open+0x10/0x10
[  867.277472][T20662]  vfs_open+0x82/0x3f0
[  867.277519][T20662]  path_openat+0x208c/0x31a0
[  867.277565][T20662]  ? __pfx_path_openat+0x10/0x10
[  867.277615][T20662]  do_file_open+0x20e/0x430
[  867.277654][T20662]  ? __pfx_do_file_open+0x10/0x10
[  867.277719][T20662]  ? alloc_fd+0x476/0x790
[  867.277758][T20662]  ? do_getname+0x191/0x390
[  867.277804][T20662]  do_sys_openat2+0x10d/0x1e0
[  867.277848][T20662]  ? __pfx_do_sys_openat2+0x10/0x10
[  867.277893][T20662]  ? __pfx_restore_altstack+0x10/0x10
[  867.277945][T20662]  __x64_sys_openat+0x12d/0x210
[  867.277991][T20662]  ? __pfx___x64_sys_openat+0x10/0x10
[  867.278032][T20662]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  867.278081][T20662]  ? rcu_is_watching+0x12/0xc0
[  867.278119][T20662]  do_syscall_64+0x115/0x840
[  867.278158][T20662]  ? clear_bhb_loop+0x40/0x90
[  867.278194][T20662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.278230][T20662] RIP: 0033:0x7f297d19ce59
[  867.278254][T20662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.278281][T20662] RSP: 002b:00007f297dfb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  867.278307][T20662] RAX: ffffffffffffffda RBX: 00007f297d416090 RCX: 00007f297d19ce59
[  867.278326][T20662] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  867.278345][T20662] RBP: 00007f297d232d6f R08: 0000000000000000 R09: 0000000000000000
[  867.278362][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.278378][T20662] R13: 00007f297d416128 R14: 00007f297d416090 R15: 00007ffee8d4f258
[  867.278416][T20662]  </TASK>
[  867.696986][T14880] Bluetooth: hci16: command tx timeout
[  867.915897][T20669] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  868.780647][T20686] ERROR: Out of memory at tomoyo_memory_ok.
[  869.331875][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2895'.
[  869.364606][T20690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  869.383217][T20690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  869.419654][T20690] bond0 (unregistering): Released all slaves
[  870.046803][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  870.053303][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  870.541081][T20705] FAULT_INJECTION: forcing a failure.
[  870.541081][T20705] name failslab, interval 1, probability 0, space 0, times 0
[  870.592413][T20705] CPU: 0 UID: 0 PID: 20705 Comm: syz.9.2898 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  870.592463][T20705] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  870.592475][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  870.592493][T20705] Call Trace:
[  870.592502][T20705]  <TASK>
[  870.592513][T20705]  dump_stack_lvl+0x100/0x190
[  870.592567][T20705]  should_fail_ex.cold+0x5/0xa
[  870.592604][T20705]  should_failslab+0xc2/0x120
[  870.592637][T20705]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  870.592682][T20705]  ? __d_alloc+0x34/0xa40
[  870.592718][T20705]  ? lockdep_init_map_type+0x5c/0x250
[  870.592769][T20705]  __d_alloc+0x34/0xa40
[  870.592810][T20705]  d_alloc_pseudo+0x1c/0xc0
[  870.592838][T20705]  alloc_file_pseudo+0xcf/0x230
[  870.592882][T20705]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  870.592924][T20705]  ? alloc_fd+0x476/0x790
[  870.592963][T20705]  sock_alloc_file+0x50/0x210
[  870.592996][T20705]  __sys_socket+0x1c0/0x260
[  870.593046][T20705]  ? __pfx___sys_socket+0x10/0x10
[  870.593083][T20705]  ? ksys_write+0x1ac/0x250
[  870.593125][T20705]  __x64_sys_socket+0x72/0xb0
[  870.593163][T20705]  ? lockdep_hardirqs_on+0x78/0x100
[  870.593204][T20705]  do_syscall_64+0x115/0x840
[  870.593243][T20705]  ? clear_bhb_loop+0x40/0x90
[  870.593278][T20705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.593305][T20705] RIP: 0033:0x7f297d19e6c7
[  870.593328][T20705] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  870.593357][T20705] RSP: 002b:00007f297df95f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  870.593385][T20705] RAX: ffffffffffffffda RBX: 00007f297d416180 RCX: 00007f297d19e6c7
[  870.593405][T20705] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  870.593423][T20705] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  870.593441][T20705] R10: 0000200000000340 R11: 0000000000000286 R12: 0000000000000000
[  870.593459][T20705] R13: 00007f297d416218 R14: 00007f297d416180 R15: 00007ffee8d4f258
[  870.593503][T20705]  </TASK>
[  871.455541][T14880] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  871.474615][T14880] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  871.490708][T14880] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  871.503007][T14880] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  871.513225][T14880] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  873.368658][T20715] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.375935][T20715] bridge0: port 1(bridge_slave_0) entered disabled state
[  873.393059][T20715] bridge_slave_0: entered allmulticast mode
[  873.401873][T20715] bridge_slave_0: entered promiscuous mode
[  873.411609][T20715] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.421367][T20715] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.428900][T20715] bridge_slave_1: entered allmulticast mode
[  873.441026][T20715] bridge_slave_1: entered promiscuous mode
[  873.550826][T20715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.573456][T20715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.637007][T14880] Bluetooth: hci17: command tx timeout
[  873.693859][T20715] team0: Port device team_slave_0 added
[  873.734439][T20715] team0: Port device team_slave_1 added
[  873.775504][T20715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.785970][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.830948][T20715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.851612][T20715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  873.858880][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  873.918719][T20715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  874.098341][T20715] hsr_slave_0: entered promiscuous mode
[  874.113144][T20715] hsr_slave_1: entered promiscuous mode
[  874.130118][T20715] debugfs: 'hsr0' already exists in 'hsr'
[  874.142070][T20715] Cannot create hsr debugfs directory
[  874.701319][T20715] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.939991][T20715] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.130996][T20715] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.296011][T20715] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.643059][T20770] netlink: 'syz.9.2911': attribute type 19 has an invalid length.
[  875.651396][T20770] netlink: 334 bytes leftover after parsing attributes in process `syz.9.2911'.
[  875.671223][T20770] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  875.728044][T14880] Bluetooth: hci17: command tx timeout
[  876.023246][T20715] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  876.055589][T20715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  876.084859][T20715] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  876.110738][T20715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  876.125364][T20715] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  876.155069][T20715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  876.164405][T20715] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  876.175095][T20715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  876.397786][T20715] 8021q: adding VLAN 0 to HW filter on device bond0
[  876.421061][T20715] 8021q: adding VLAN 0 to HW filter on device team0
[  876.433811][T20176] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.440995][T20176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  876.472050][T14980] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.479173][T14980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  877.052552][T20715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.121083][T14880] Bluetooth: hci16: unexpected subevent 0x01 length: 123 > 18
[  877.128747][T20809] futex_wake_op: syz.9.2916 tries to shift op by -2048; fix this program
[  877.174365][T20809] futex_wake_op: syz.9.2916 tries to shift op by -2048; fix this program
[  877.212575][T20809] random: crng reseeded on system resumption
[  877.278481][T20813] ERROR: Out of memory at tomoyo_memory_ok.
[  877.797376][T14880] Bluetooth: hci17: command tx timeout
[  878.051694][T20715] veth0_vlan: entered promiscuous mode
[  878.129652][T20715] veth1_vlan: entered promiscuous mode
[  878.244075][T20827] netlink: 'syz.6.2920': attribute type 19 has an invalid length.
[  878.277223][T20827] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2920'.
[  878.354278][T20715] veth0_macvtap: entered promiscuous mode
[  878.467517][T20715] veth1_macvtap: entered promiscuous mode
[  878.491758][T20715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.550514][T20715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.579441][T20176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.630684][T20176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.689510][T20176] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.744677][T19167] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  879.032554][T19167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.047818][T19167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.098437][T19167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.137272][T19167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.552027][T20841] aoe: invalid device specification 
[  879.634303][T20844] FAULT_INJECTION: forcing a failure.
[  879.634303][T20844] name failslab, interval 1, probability 0, space 0, times 0
[  879.677309][T20844] CPU: 1 UID: 0 PID: 20844 Comm: syz.9.2922 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  879.677353][T20844] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  879.677372][T20844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  879.677388][T20844] Call Trace:
[  879.677396][T20844]  <TASK>
[  879.677407][T20844]  dump_stack_lvl+0x100/0x190
[  879.677455][T20844]  should_fail_ex.cold+0x5/0xa
[  879.677489][T20844]  ? tomoyo_encode2+0xfb/0x3c0
[  879.677522][T20844]  should_failslab+0xc2/0x120
[  879.677555][T20844]  __kmalloc_noprof+0xe0/0x850
[  879.677603][T20844]  tomoyo_encode2+0xfb/0x3c0
[  879.677644][T20844]  tomoyo_encode+0x29/0x50
[  879.677679][T20844]  tomoyo_realpath_from_path+0x18c/0x690
[  879.677724][T20844]  tomoyo_path_number_perm+0x23c/0x580
[  879.677755][T20844]  ? tomoyo_path_number_perm+0x22e/0x580
[  879.677789][T20844]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  879.677859][T20844]  ? find_held_lock+0x2b/0x80
[  879.677889][T20844]  ? __fget_files+0x215/0x3d0
[  879.677918][T20844]  ? hook_file_ioctl_common+0x149/0x410
[  879.677952][T20844]  ? __fget_files+0x215/0x3d0
[  879.677987][T20844]  ? __fget_files+0x21f/0x3d0
[  879.678023][T20844]  security_file_ioctl+0xd3/0x230
[  879.678057][T20844]  __x64_sys_ioctl+0xb7/0x210
[  879.678086][T20844]  do_syscall_64+0x115/0x840
[  879.678122][T20844]  ? clear_bhb_loop+0x40/0x90
[  879.678154][T20844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.678180][T20844] RIP: 0033:0x7f297d19ce59
[  879.678202][T20844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  879.678226][T20844] RSP: 002b:00007f297dfd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  879.678251][T20844] RAX: ffffffffffffffda RBX: 00007f297d415fa0 RCX: 00007f297d19ce59
[  879.678269][T20844] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003
[  879.678286][T20844] RBP: 00007f297dfd9090 R08: 0000000000000000 R09: 0000000000000000
[  879.678302][T20844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  879.678318][T20844] R13: 00007f297d416038 R14: 00007f297d415fa0 R15: 00007ffee8d4f258
[  879.678355][T20844]  </TASK>
[  879.678477][T20844] ERROR: Out of memory at tomoyo_realpath_from_path.
[  879.887704][T14880] Bluetooth: hci17: command tx timeout
[  881.894627][T20471] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  881.916091][T20471] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  881.936719][T20471] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  881.953711][T20471] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  881.965850][T20471] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  882.422795][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2931'.
[  883.112981][T20896] random: crng reseeded on system resumption
[  883.156746][T20896] FAULT_INJECTION: forcing a failure.
[  883.156746][T20896] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  883.195931][T20896] CPU: 1 UID: 0 PID: 20896 Comm: syz.8.2933 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  883.195979][T20896] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  883.195992][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  883.196010][T20896] Call Trace:
[  883.196019][T20896]  <TASK>
[  883.196031][T20896]  dump_stack_lvl+0x100/0x190
[  883.196085][T20896]  should_fail_ex.cold+0x5/0xa
[  883.196122][T20896]  ? prepare_alloc_pages+0x16d/0x5f0
[  883.196164][T20896]  should_fail_alloc_page+0xeb/0x140
[  883.196202][T20896]  prepare_alloc_pages+0x1f0/0x5f0
[  883.196246][T20896]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  883.196297][T20896]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  883.196355][T20896]  ? stack_trace_save+0x8e/0xc0
[  883.196393][T20896]  ? __pfx_stack_trace_save+0x10/0x10
[  883.196427][T20896]  ? arch_stack_walk+0xa6/0xf0
[  883.196461][T20896]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  883.196510][T20896]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  883.196561][T20896]  ? kasan_save_stack+0x30/0x50
[  883.196588][T20896]  ? kasan_save_track+0x14/0x30
[  883.196615][T20896]  ? __kasan_kmalloc+0xaa/0xb0
[  883.196641][T20896]  ? memory_bm_create+0x14d/0xba0
[  883.196683][T20896]  ? do_syscall_64+0x115/0x840
[  883.196722][T20896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.196756][T20896]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  883.196800][T20896]  ? policy_nodemask+0xed/0x4f0
[  883.196839][T20896]  alloc_pages_mpol+0x1fb/0x540
[  883.196874][T20896]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  883.196908][T20896]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  883.196948][T20896]  alloc_pages_noprof+0x1a/0x160
[  883.196987][T20896]  get_zeroed_page_noprof+0x18/0xb0
[  883.197020][T20896]  get_image_page+0x18/0x1a0
[  883.197054][T20896]  alloc_rtree_node+0x3c/0xb0
[  883.197089][T20896]  memory_bm_create+0x65e/0xba0
[  883.197174][T20896]  create_basic_memory_bitmaps+0xbd/0x350
[  883.197220][T20896]  snapshot_open+0x230/0x2a0
[  883.197259][T20896]  ? __pfx_snapshot_open+0x10/0x10
[  883.197300][T20896]  misc_open+0x26d/0x450
[  883.197331][T20896]  ? __pfx_misc_open+0x10/0x10
[  883.197360][T20896]  chrdev_open+0x234/0x6a0
[  883.197396][T20896]  ? __pfx_apparmor_file_open+0x10/0x10
[  883.197427][T20896]  ? __pfx_chrdev_open+0x10/0x10
[  883.197464][T20896]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  883.197510][T20896]  do_dentry_open+0x6ab/0x14d0
[  883.197544][T20896]  ? __pfx_chrdev_open+0x10/0x10
[  883.197588][T20896]  vfs_open+0x82/0x3f0
[  883.197634][T20896]  path_openat+0x208c/0x31a0
[  883.197684][T20896]  ? __pfx_path_openat+0x10/0x10
[  883.197735][T20896]  do_file_open+0x20e/0x430
[  883.197774][T20896]  ? __pfx_do_file_open+0x10/0x10
[  883.197839][T20896]  ? alloc_fd+0x476/0x790
[  883.197877][T20896]  ? do_getname+0x191/0x390
[  883.197922][T20896]  do_sys_openat2+0x10d/0x1e0
[  883.197971][T20896]  ? __pfx_do_sys_openat2+0x10/0x10
[  883.198020][T20896]  ? __pfx_restore_altstack+0x10/0x10
[  883.198071][T20896]  __x64_sys_openat+0x12d/0x210
[  883.198120][T20896]  ? __pfx___x64_sys_openat+0x10/0x10
[  883.198164][T20896]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  883.198214][T20896]  ? rcu_is_watching+0x12/0xc0
[  883.198252][T20896]  do_syscall_64+0x115/0x840
[  883.198291][T20896]  ? clear_bhb_loop+0x40/0x90
[  883.198328][T20896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.198358][T20896] RIP: 0033:0x7f953dd9ce59
[  883.198382][T20896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.198409][T20896] RSP: 002b:00007f953eb6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  883.198436][T20896] RAX: ffffffffffffffda RBX: 00007f953e016090 RCX: 00007f953dd9ce59
[  883.198463][T20896] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  883.198482][T20896] RBP: 00007f953de32d6f R08: 0000000000000000 R09: 0000000000000000
[  883.198500][T20896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  883.198518][T20896] R13: 00007f953e016128 R14: 00007f953e016090 R15: 00007fffc74f8218
[  883.198559][T20896]  </TASK>
[  884.045830][T20471] Bluetooth: hci18: command tx timeout
[  884.389927][T20916] random: crng reseeded on system resumption
[  884.534566][T20919] FAULT_INJECTION: forcing a failure.
[  884.534566][T20919] name failslab, interval 1, probability 0, space 0, times 0
[  884.570041][T20919] CPU: 1 UID: 0 PID: 20919 Comm: syz.6.2937 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  884.570091][T20919] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  884.570103][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  884.570121][T20919] Call Trace:
[  884.570131][T20919]  <TASK>
[  884.570143][T20919]  dump_stack_lvl+0x100/0x190
[  884.570198][T20919]  should_fail_ex.cold+0x5/0xa
[  884.570235][T20919]  ? tomoyo_encode2+0xfb/0x3c0
[  884.570275][T20919]  should_failslab+0xc2/0x120
[  884.570310][T20919]  __kmalloc_noprof+0xe0/0x850
[  884.570355][T20919]  ? d_absolute_path+0x136/0x1b0
[  884.570391][T20919]  tomoyo_encode2+0xfb/0x3c0
[  884.570437][T20919]  tomoyo_encode+0x29/0x50
[  884.570479][T20919]  tomoyo_realpath_from_path+0x18c/0x690
[  884.570538][T20919]  tomoyo_get_exe+0x63/0xa0
[  884.570570][T20919]  tomoyo_write_control+0x69e/0x13a0
[  884.570616][T20919]  ? __pfx_tomoyo_write_control+0x10/0x10
[  884.570658][T20919]  vfs_write+0x2aa/0x1070
[  884.570693][T20919]  ? __pfx_tomoyo_write+0x10/0x10
[  884.570737][T20919]  ? __pfx_vfs_write+0x10/0x10
[  884.570769][T20919]  ? __fget_files+0x215/0x3d0
[  884.570812][T20919]  ? __fget_files+0x21f/0x3d0
[  884.570857][T20919]  ksys_write+0x12a/0x250
[  884.570890][T20919]  ? __pfx_ksys_write+0x10/0x10
[  884.570927][T20919]  ? rcu_is_watching+0x12/0xc0
[  884.570965][T20919]  do_syscall_64+0x115/0x840
[  884.571005][T20919]  ? clear_bhb_loop+0x40/0x90
[  884.571040][T20919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.571070][T20919] RIP: 0033:0x7f5cf6f9ce59
[  884.571094][T20919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  884.571122][T20919] RSP: 002b:00007f5cf7d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  884.571149][T20919] RAX: ffffffffffffffda RBX: 00007f5cf7216090 RCX: 00007f5cf6f9ce59
[  884.571170][T20919] RDX: 0000000000008587 RSI: 0000200000000080 RDI: 0000000000000008
[  884.571188][T20919] RBP: 00007f5cf7032d6f R08: 0000000000000000 R09: 0000000000000000
[  884.571204][T20919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  884.571221][T20919] R13: 00007f5cf7216128 R14: 00007f5cf7216090 R15: 00007ffce81d1b08
[  884.571261][T20919]  </TASK>
[  884.571809][T20919] ERROR: Out of memory at tomoyo_realpath_from_path.
[  885.002725][T20878] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.027399][T20878] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.034653][T20878] bridge_slave_0: entered allmulticast mode
[  885.043423][T20878] bridge_slave_0: entered promiscuous mode
[  885.075148][T20878] bridge0: port 2(bridge_slave_1) entered blocking state
[  885.100603][T20878] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.113192][T20878] bridge_slave_1: entered allmulticast mode
[  885.121527][T20878] bridge_slave_1: entered promiscuous mode
[  885.239698][T20878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  885.281275][T20878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.393094][T20878] team0: Port device team_slave_0 added
[  885.480293][T20878] team0: Port device team_slave_1 added
[  885.529657][T20878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.536651][T20878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.581822][T20878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.595289][T20878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  885.604364][T20878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  885.653584][T20878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  885.763971][T20878] hsr_slave_0: entered promiscuous mode
[  885.774836][T20878] hsr_slave_1: entered promiscuous mode
[  885.792396][T20878] debugfs: 'hsr0' already exists in 'hsr'
[  885.799260][T20878] Cannot create hsr debugfs directory
[  886.117207][T20471] Bluetooth: hci18: command tx timeout
[  886.415577][T20878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  886.626364][T20878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  886.832490][T20878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.073635][T20878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.290713][T20974] random: crng reseeded on system resumption
[  887.687499][T20878] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  887.715733][T20878] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  887.735968][T20878] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  887.766617][T20878] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  887.793113][T20878] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  887.819214][T20878] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  887.844496][T20878] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  887.879227][T20878] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  888.210695][T20471] Bluetooth: hci18: command tx timeout
[  888.763777][T20878] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.803781][T20878] 8021q: adding VLAN 0 to HW filter on device team0
[  888.820271][T20184] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.827438][T20184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  888.903306][T20184] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.910517][T20184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  889.603577][T21020] FAULT_INJECTION: forcing a failure.
[  889.603577][T21020] name failslab, interval 1, probability 0, space 0, times 0
[  889.616410][T21020] CPU: 1 UID: 0 PID: 21020 Comm: syz.6.2956 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  889.616460][T21020] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  889.616472][T21020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  889.616490][T21020] Call Trace:
[  889.616500][T21020]  <TASK>
[  889.616511][T21020]  dump_stack_lvl+0x100/0x190
[  889.616566][T21020]  should_fail_ex.cold+0x5/0xa
[  889.616603][T21020]  should_failslab+0xc2/0x120
[  889.616638][T21020]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  889.616681][T21020]  ? __d_alloc+0x34/0xa40
[  889.616727][T21020]  __d_alloc+0x34/0xa40
[  889.616769][T21020]  d_alloc_pseudo+0x1c/0xc0
[  889.616796][T21020]  alloc_file_pseudo+0xcf/0x230
[  889.616844][T21020]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  889.616883][T21020]  ? pidfs_register_pid+0x70/0x1b0
[  889.616924][T21020]  sock_alloc_file+0x50/0x210
[  889.616957][T21020]  __sys_socketpair+0x321/0x5b0
[  889.616999][T21020]  ? __pfx___sys_socketpair+0x10/0x10
[  889.617041][T21020]  ? xfd_validate_state+0x129/0x190
[  889.617080][T21020]  __x64_sys_socketpair+0x96/0x100
[  889.617118][T21020]  ? lockdep_hardirqs_on+0x78/0x100
[  889.617167][T21020]  do_syscall_64+0x115/0x840
[  889.617208][T21020]  ? clear_bhb_loop+0x40/0x90
[  889.617244][T21020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.617274][T21020] RIP: 0033:0x7f5cf6f9ce59
[  889.617298][T21020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.617328][T21020] RSP: 002b:00007f5cf7dc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  889.617356][T21020] RAX: ffffffffffffffda RBX: 00007f5cf7215fa0 RCX: 00007f5cf6f9ce59
[  889.617376][T21020] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  889.617395][T21020] RBP: 00007f5cf7032d6f R08: 0000000000000000 R09: 0000000000000000
[  889.617413][T21020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.617431][T21020] R13: 00007f5cf7216038 R14: 00007f5cf7215fa0 R15: 00007ffce81d1b08
[  889.617469][T21020]  </TASK>
[  890.280177][T20471] Bluetooth: hci18: command tx timeout
[  890.533640][T17745] NFSD: Failed to start, no listeners configured.
[  890.844252][T20878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.979597][T21040] FAULT_INJECTION: forcing a failure.
[  890.979597][T21040] name failslab, interval 1, probability 0, space 0, times 0
[  891.020793][T20878] veth0_vlan: entered promiscuous mode
[  891.031607][T21040] CPU: 0 UID: 0 PID: 21040 Comm: syz.6.2959 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  891.031650][T21040] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  891.031660][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  891.031675][T21040] Call Trace:
[  891.031684][T21040]  <TASK>
[  891.031694][T21040]  dump_stack_lvl+0x100/0x190
[  891.031744][T21040]  should_fail_ex.cold+0x5/0xa
[  891.031778][T21040]  should_failslab+0xc2/0x120
[  891.031810][T21040]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  891.031850][T21040]  ? ioctx_alloc+0x1b9/0x21a0
[  891.031892][T21040]  ioctx_alloc+0x1b9/0x21a0
[  891.031925][T21040]  ? __sock_release+0x184/0x260
[  891.031963][T21040]  ? find_held_lock+0x2b/0x80
[  891.031996][T21040]  ? __pfx_ioctx_alloc+0x10/0x10
[  891.032045][T21040]  __x64_sys_io_setup+0xc9/0x220
[  891.032105][T21040]  do_syscall_64+0x115/0x840
[  891.032134][T21040]  ? clear_bhb_loop+0x40/0x90
[  891.032164][T21040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.032189][T21040] RIP: 0033:0x7f5cf6f9ce59
[  891.032210][T21040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.032233][T21040] RSP: 002b:00007f5cf7d9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  891.032256][T21040] RAX: ffffffffffffffda RBX: 00007f5cf7216090 RCX: 00007f5cf6f9ce59
[  891.032271][T21040] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff
[  891.032287][T21040] RBP: 00007f5cf7032d6f R08: 0000000000000000 R09: 0000000000000000
[  891.032301][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  891.032314][T21040] R13: 00007f5cf7216128 R14: 00007f5cf7216090 R15: 00007ffce81d1b08
[  891.032346][T21040]  </TASK>
[  891.344957][T20878] veth1_vlan: entered promiscuous mode
[  891.396706][T20878] veth0_macvtap: entered promiscuous mode
[  891.431646][T20878] veth1_macvtap: entered promiscuous mode
[  891.460506][T20878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  891.480441][T20878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  891.501247][T14980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.556246][T14980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.573221][T14980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.603107][T14980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.850664][T19167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.878213][T19167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.980860][T20184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  892.000384][T20184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  892.124501][T21063] FAULT_INJECTION: forcing a failure.
[  892.124501][T21063] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  892.124549][T21063] CPU: 1 UID: 0 PID: 21063 Comm: syz.9.2964 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  892.124590][T21063] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  892.124601][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  892.124618][T21063] Call Trace:
[  892.124628][T21063]  <TASK>
[  892.124642][T21063]  dump_stack_lvl+0x100/0x190
[  892.124693][T21063]  should_fail_ex.cold+0x5/0xa
[  892.124729][T21063]  _copy_from_user+0x2e/0xd0
[  892.124773][T21063]  copy_msghdr_from_user+0x9f/0x4f0
[  892.124814][T21063]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  892.124861][T21063]  ? __pfx_futex_wake_mark+0x10/0x10
[  892.124905][T21063]  ___sys_sendmsg+0x106/0x1e0
[  892.124947][T21063]  ? __pfx____sys_sendmsg+0x10/0x10
[  892.125039][T21063]  __sys_sendmsg+0x170/0x220
[  892.125071][T21063]  ? __pfx___sys_sendmsg+0x10/0x10
[  892.125099][T21063]  ? __x64_sys_futex+0x34f/0x4d0
[  892.125144][T21063]  ? rcu_is_watching+0x12/0xc0
[  892.125186][T21063]  do_syscall_64+0x115/0x840
[  892.125227][T21063]  ? clear_bhb_loop+0x40/0x90
[  892.125261][T21063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.125291][T21063] RIP: 0033:0x7f297d19ce59
[  892.125316][T21063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  892.125345][T21063] RSP: 002b:00007f297dfb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  892.125372][T21063] RAX: ffffffffffffffda RBX: 00007f297d416090 RCX: 00007f297d19ce59
[  892.125392][T21063] RDX: 0000000020040080 RSI: 0000200000004240 RDI: 0000000000000009
[  892.125411][T21063] RBP: 00007f297d232d6f R08: 0000000000000000 R09: 0000000000000000
[  892.125429][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  892.125447][T21063] R13: 00007f297d416128 R14: 00007f297d416090 R15: 00007ffee8d4f258
[  892.125484][T21063]  </TASK>
[  892.328953][T21068] random: crng reseeded on system resumption
[  893.192318][T21084] ovs_: entered promiscuous mode
[  893.331512][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2969'.
[  894.738229][T21120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2974'.
[  897.171074][T21165] ERROR: Out of memory at tomoyo_memory_ok.
[  897.241627][T21168] random: crng reseeded on system resumption
[  898.356361][T21191] FAULT_INJECTION: forcing a failure.
[  898.356361][T21191] name failslab, interval 1, probability 0, space 0, times 0
[  898.371282][T21190] ERROR: Out of memory at tomoyo_memory_ok.
[  898.389323][T21194] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  898.396703][T21194] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  898.406125][T21191] CPU: 1 UID: 0 PID: 21191 Comm: syz.9.2989 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  898.406168][T21191] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  898.406178][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  898.406194][T21191] Call Trace:
[  898.406203][T21191]  <TASK>
[  898.406222][T21191]  dump_stack_lvl+0x100/0x190
[  898.406275][T21191]  should_fail_ex.cold+0x5/0xa
[  898.406308][T21191]  should_failslab+0xc2/0x120
[  898.406339][T21191]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  898.406380][T21191]  ? alloc_empty_file+0x5b/0x1c0
[  898.406415][T21191]  ? is_bpf_text_address+0x8a/0x1a0
[  898.406457][T21191]  alloc_empty_file+0x5b/0x1c0
[  898.406495][T21191]  path_openat+0xe8/0x31a0
[  898.406525][T21191]  ? __kernel_text_address+0xd/0x30
[  898.406551][T21191]  ? unwind_get_return_address+0x59/0xa0
[  898.406585][T21191]  ? arch_stack_walk+0xa6/0xf0
[  898.406623][T21191]  ? __pfx_path_openat+0x10/0x10
[  898.406659][T21191]  ? stack_trace_save+0x8e/0xc0
[  898.406690][T21191]  ? __pfx_stack_trace_save+0x10/0x10
[  898.406727][T21191]  do_file_open+0x20e/0x430
[  898.406763][T21191]  ? __pfx_do_file_open+0x10/0x10
[  898.406805][T21191]  ? kasan_save_track+0x14/0x30
[  898.406828][T21191]  ? __kasan_slab_alloc+0x89/0x90
[  898.406853][T21191]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  898.406928][T21191]  do_open_execat+0xd1/0x360
[  898.406955][T21191]  ? __pfx_do_open_execat+0x10/0x10
[  898.406984][T21191]  ? __might_fault+0xc5/0x140
[  898.407021][T21191]  ? __might_fault+0xc5/0x140
[  898.407063][T21191]  alloc_bprm+0x2d/0x710
[  898.407091][T21191]  do_execveat_common.isra.0+0x19c/0x580
[  898.407122][T21191]  ? do_getname+0x191/0x390
[  898.407162][T21191]  __x64_sys_execve+0x93/0xd0
[  898.407191][T21191]  do_syscall_64+0x115/0x840
[  898.407233][T21191]  ? clear_bhb_loop+0x40/0x90
[  898.407264][T21191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.407291][T21191] RIP: 0033:0x7f297d19ce59
[  898.407313][T21191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  898.407338][T21191] RSP: 002b:00007f297dfb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  898.407364][T21191] RAX: ffffffffffffffda RBX: 00007f297d416090 RCX: 00007f297d19ce59
[  898.407382][T21191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  898.407399][T21191] RBP: 00007f297d232d6f R08: 0000000000000000 R09: 0000000000000000
[  898.407415][T21191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  898.407431][T21191] R13: 00007f297d416128 R14: 00007f297d416090 R15: 00007ffee8d4f258
[  898.407468][T21191]  </TASK>
[  898.787611][T21194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2990'.
[  898.801023][T21194] hsr_slave_0: left promiscuous mode
[  898.813540][T21194] hsr_slave_1: left promiscuous mode
[  900.948339][T21237] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  900.987599][T21237] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  901.015504][T21237] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  901.037077][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  901.054353][T21237] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  901.074477][T21237] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  901.107147][T21237] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  901.175849][T21237] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  901.207014][T21237] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  901.234519][T21237] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  901.256205][T21237] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  901.294650][T21237] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  901.320474][T21237] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  901.330204][T21237] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  901.351944][T21237] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  901.368051][T21237] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  901.386981][T21237] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  901.403750][T21237] Bluetooth: hci9: Opcode 0x0406 failed: -4
[  901.415575][T21237] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  901.425039][T21237] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  901.456039][T21237] Bluetooth: hci10: Opcode 0x0406 failed: -4
[  901.489598][T21237] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  901.506987][T21237] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  901.557956][T21237] Bluetooth: hci11: Opcode 0x0406 failed: -4
[  901.586516][T21237] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  901.613557][T21237] Bluetooth: hci12: Opcode 0x0406 failed: -4
[  901.623019][T21237] Bluetooth: hci12: Opcode 0x0406 failed: -4
[  901.637324][T21237] Bluetooth: hci13: Opcode 0x0c1a failed: -4
[  901.643537][T21237] Bluetooth: hci13: Opcode 0x0406 failed: -4
[  901.656244][T21237] Bluetooth: hci13: Opcode 0x0406 failed: -4
[  901.685510][T21237] Bluetooth: hci14: Opcode 0x0c1a failed: -4
[  901.698919][T21237] Bluetooth: hci14: Opcode 0x0406 failed: -4
[  901.744032][T21237] Bluetooth: hci14: Opcode 0x0406 failed: -4
[  901.770417][T21237] Bluetooth: hci15: Opcode 0x0c1a failed: -4
[  901.788248][T21237] Bluetooth: hci15: Opcode 0x0406 failed: -4
[  901.832628][T21237] Bluetooth: hci15: Opcode 0x0406 failed: -4
[  901.865103][T21237] Bluetooth: hci16: Opcode 0x0c1a failed: -4
[  901.887651][T21237] Bluetooth: hci16: Opcode 0x0406 failed: -4
[  901.944663][T21266] netlink: 330 bytes leftover after parsing attributes in process `syz.9.3008'.
[  901.961049][T21237] Bluetooth: hci16: Opcode 0x0406 failed: -4
[  901.994133][T21266] ERROR: Out of memory at tomoyo_memory_ok.
[  901.996637][T21237] Bluetooth: hci16: Opcode 0x0406 failed: -4
[  902.070222][T21237] Bluetooth: hci17: Opcode 0x0c1a failed: -4
[  902.079498][T21237] Bluetooth: hci17: Opcode 0x0406 failed: -4
[  902.109266][T21237] Bluetooth: hci17: Opcode 0x0406 failed: -4
[  902.134095][T21237] Bluetooth: hci18: Opcode 0x0c1a failed: -4
[  902.148208][T21237] Bluetooth: hci18: Opcode 0x0406 failed: -4
[  902.170190][T21237] Bluetooth: hci18: Opcode 0x0406 failed: -4
[  902.238154][T20471] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  902.268442][T20471] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  902.280296][T20471] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  902.298470][T20471] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  902.309183][T20471] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  902.362406][T20471] Bluetooth: hci4: command 0x0c1a tx timeout
[  902.998464][T20471] Bluetooth: hci2: command 0x2016 tx timeout
[  903.087327][T20471] Bluetooth: hci5: command 0x0c1a tx timeout
[  903.093933][T14880] Bluetooth: hci1: command 0x0c1a tx timeout
[  903.100206][T14880] Bluetooth: hci3: command 0x0c1a tx timeout
[  903.159229][T20471] Bluetooth: hci6: command 0x0c1a tx timeout
[  903.246958][T16721] Bluetooth: hci7: command 0x0406 tx timeout
[  903.253110][T20471] Bluetooth: hci0: command 0x0c1a tx timeout
[  903.397469][T20471] Bluetooth: hci9: command 0x2016 tx timeout
[  903.405087][T16721] Bluetooth: hci8: command 0x0c1a tx timeout
[  903.495319][T20471] Bluetooth: hci10: command 0x0c1a tx timeout
[  903.557356][T20471] Bluetooth: hci11: command 0x0c1a tx timeout
[  903.649649][T20471] Bluetooth: hci12: command 0x0c1a tx timeout
[  903.716965][T20471] Bluetooth: hci14: command 0x0c1a tx timeout
[  903.723767][T16721] Bluetooth: hci13: command 0x0c1a tx timeout
[  903.798016][T16721] Bluetooth: hci15: command 0x0c1a tx timeout
[  903.877586][T16721] Bluetooth: hci16: command 0x0c1a tx timeout
[  904.117823][T16721] Bluetooth: hci17: command 0x0c1a tx timeout
[  904.204377][T16721] Bluetooth: hci18: command 0x0c1a tx timeout
[  904.315036][T21319] debugfs: '›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211'
[  904.357029][T16721] Bluetooth: hci19: command tx timeout
[  904.533497][T21249] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.555530][T21249] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.568932][T21330] Setting dangerous option i915.mitigations - tainting kernel
[  904.578588][T21249] bridge_slave_0: entered allmulticast mode
[  904.589369][T21249] bridge_slave_0: entered promiscuous mode
[  904.612392][T21322] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  904.646946][T21322] CPU: 1 UID: 0 PID: 21322 Comm: syz.9.3019 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  904.646992][T21322] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  904.647005][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  904.647022][T21322] Call Trace:
[  904.647032][T21322]  <TASK>
[  904.647043][T21322]  dump_stack_lvl+0x100/0x190
[  904.647095][T21322]  sysfs_warn_dup.cold+0x1c/0x28
[  904.647129][T21322]  sysfs_do_create_link_sd+0x113/0x140
[  904.647168][T21322]  sysfs_create_link+0x61/0xc0
[  904.647195][T21322]  device_add+0x675/0x1950
[  904.647226][T21322]  ? __pfx_device_add+0x10/0x10
[  904.647250][T21322]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  904.647289][T21322]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  904.647335][T21322]  wiphy_register+0x1edd/0x2d90
[  904.647362][T21322]  ? __rtnl_unlock+0xb9/0xf0
[  904.647399][T21322]  ? __pfx_wiphy_register+0x10/0x10
[  904.647428][T21322]  ? __asan_memset+0x23/0x50
[  904.647463][T21322]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  904.647513][T21322]  ieee80211_register_hw+0x3055/0x4570
[  904.647565][T21322]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  904.647599][T21322]  ? __pfx___debug_object_init+0x10/0x10
[  904.647636][T21322]  ? find_held_lock+0x2b/0x80
[  904.647672][T21322]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  904.647705][T21322]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  904.647743][T21322]  ? __hrtimer_setup+0x208/0x330
[  904.647770][T21322]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  904.647821][T21322]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  904.647856][T21322]  ? __asan_memcpy+0x3c/0x60
[  904.647896][T21322]  hwsim_new_radio_nl+0xc5f/0x1370
[  904.647928][T21322]  ? rcu_is_watching+0x12/0xc0
[  904.647956][T21322]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.647994][T21322]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  904.648034][T21322]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  904.648078][T21322]  genl_family_rcv_msg_doit+0x214/0x300
[  904.648117][T21322]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  904.648158][T21322]  ? genl_get_cmd+0x3e7/0x760
[  904.648200][T21322]  ? bpf_lsm_capable+0x9/0x10
[  904.648226][T21322]  ? security_capable+0x80/0x260
[  904.648251][T21322]  ? ns_capable+0xd2/0xf0
[  904.648280][T21322]  genl_rcv_msg+0x560/0x800
[  904.648318][T21322]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.648353][T21322]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.648393][T21322]  netlink_rcv_skb+0x159/0x420
[  904.648424][T21322]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.648459][T21322]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  904.648502][T21322]  ? netlink_deliver_tap+0x1ae/0xcc0
[  904.648536][T21322]  genl_rcv+0x28/0x40
[  904.648565][T21322]  netlink_unicast+0x585/0x850
[  904.648599][T21322]  ? __pfx_netlink_unicast+0x10/0x10
[  904.648639][T21322]  netlink_sendmsg+0x8b0/0xda0
[  904.648674][T21322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.648703][T21322]  ? __import_iovec+0x1d2/0x640
[  904.648739][T21322]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  904.648768][T21322]  ____sys_sendmsg+0x9e1/0xb70
[  904.648797][T21322]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.648830][T21322]  ? __pfx_____sys_sendmsg+0x10/0x10
[  904.648865][T21322]  ? rcu_is_watching+0x12/0xc0
[  904.648890][T21322]  ? ___sys_sendmsg+0x19d/0x1e0
[  904.648918][T21322]  ? kfree+0x1dd/0x6c0
[  904.648955][T21322]  ___sys_sendmsg+0x190/0x1e0
[  904.648992][T21322]  ? __pfx____sys_sendmsg+0x10/0x10
[  904.649052][T21322]  ? __pfx___might_resched+0x10/0x10
[  904.649083][T21322]  __sys_sendmmsg+0x205/0x430
[  904.649111][T21322]  ? __pfx___sys_sendmmsg+0x10/0x10
[  904.649167][T21322]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  904.649204][T21322]  ? kcov_ioctl+0x16a/0x720
[  904.649241][T21322]  __x64_sys_sendmmsg+0x9c/0x100
[  904.649267][T21322]  ? lockdep_hardirqs_on+0x78/0x100
[  904.649301][T21322]  do_syscall_64+0x115/0x840
[  904.649333][T21322]  ? clear_bhb_loop+0x40/0x90
[  904.649362][T21322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.649386][T21322] RIP: 0033:0x7f297d19ce59
[  904.649405][T21322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  904.649429][T21322] RSP: 002b:00007f297dfb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  904.649452][T21322] RAX: ffffffffffffffda RBX: 00007f297d416090 RCX: 00007f297d19ce59
[  904.649468][T21322] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  904.649484][T21322] RBP: 00007f297d232d6f R08: 0000000000000000 R09: 0000000000000000
[  904.649498][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.649513][T21322] R13: 00007f297d416128 R14: 00007f297d416090 R15: 00007ffee8d4f258
[  904.649545][T21322]  </TASK>
[  904.651826][T21249] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.108266][T21249] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.115517][T21249] bridge_slave_1: entered allmulticast mode
[  905.124787][T21249] bridge_slave_1: entered promiscuous mode
[  905.271378][T21249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.331899][T16721] Bluetooth: hci0: command 0x0c1a tx timeout
[  905.332124][T21249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  905.339438][T20471] Bluetooth: hci7: command 0x0406 tx timeout
[  905.477609][T16721] Bluetooth: hci8: command 0x0c1a tx timeout
[  905.483746][T20471] Bluetooth: hci9: command 0x2016 tx timeout
[  905.523364][T21249] team0: Port device team_slave_0 added
[  905.532571][T21249] team0: Port device team_slave_1 added
[  905.557495][T20471] Bluetooth: hci10: command 0x0c1a tx timeout
[  905.613059][T21249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  905.620123][T21249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.646601][T21249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.665653][T20471] Bluetooth: hci11: command 0x0c1a tx timeout
[  905.673488][T21249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  905.701650][T21249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.758242][T20471] Bluetooth: hci12: command 0x0c1a tx timeout
[  905.777263][T21249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  905.804654][T20471] Bluetooth: hci13: command 0x0c1a tx timeout
[  905.812865][T16721] Bluetooth: hci14: command 0x0c1a tx timeout
[  905.906552][T16721] Bluetooth: hci15: command 0x0c1a tx timeout
[  905.967560][T16721] Bluetooth: hci16: command 0x0c1a tx timeout
[  905.979216][T21249] hsr_slave_0: entered promiscuous mode
[  905.986158][T21249] hsr_slave_1: entered promiscuous mode
[  905.992842][T21249] debugfs: 'hsr0' already exists in 'hsr'
[  906.001352][T21249] Cannot create hsr debugfs directory
[  906.197672][T16721] Bluetooth: hci17: command 0x0c1a tx timeout
[  906.277267][T16721] Bluetooth: hci18: command 0x0c1a tx timeout
[  906.411915][T21351] random: crng reseeded on system resumption
[  906.448462][T16721] Bluetooth: hci19: command tx timeout
[  906.884265][T21249] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.064939][T21249] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.252712][T21249] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.372738][T21249] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.401133][T16721] Bluetooth: hci0: command 0x0c1a tx timeout
[  907.538799][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'.
[  907.559242][T20471] Bluetooth: hci8: command 0x0c1a tx timeout
[  907.565348][T16721] Bluetooth: hci9: command 0x2016 tx timeout
[  907.637920][T16721] Bluetooth: hci10: command 0x0c1a tx timeout
[  907.721239][T16721] Bluetooth: hci11: command 0x0c1a tx timeout
[  907.800507][T20471] Bluetooth: hci12: command 0x0c1a tx timeout
[  907.849835][   T29] audit: type=1800 audit(4294967410.850:16): pid=21371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3028" name="features" dev="configfs" ino=110416 res=0 errno=0
[  907.893043][T20471] Bluetooth: hci13: command 0x0c1a tx timeout
[  907.899569][T16721] Bluetooth: hci14: command 0x0c1a tx timeout
[  907.967626][T16721] Bluetooth: hci15: command 0x0c1a tx timeout
[  907.973977][T20471] Bluetooth: hci16: unexpected subevent 0x01 length: 123 > 18
[  908.049215][T16721] Bluetooth: hci16: command 0x0c1a tx timeout
[  908.278154][T16721] Bluetooth: hci17: command 0x0c1a tx timeout
[  908.358178][T21249] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  908.367342][T16721] Bluetooth: hci18: command 0x0c1a tx timeout
[  908.423525][T21249] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  908.517495][T16721] Bluetooth: hci19: command tx timeout
[  908.536606][T21384] futex_wake_op: syz.9.3029 tries to shift op by -2048; fix this program
[  908.611526][T21249] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  908.618945][T21384] futex_wake_op: syz.9.3029 tries to shift op by -2048; fix this program
[  908.654162][T21249] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  909.032002][T21249] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  909.053185][T21249] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  909.081663][T21249] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  909.104663][T21249] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  909.571495][T21249] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.608189][T21249] 8021q: adding VLAN 0 to HW filter on device team0
[  909.619798][T20176] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.627000][T20176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.661196][T20173] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.668350][T20173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.072594][T21407] FAULT_INJECTION: forcing a failure.
[  910.072594][T21407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  910.102989][T21407] CPU: 1 UID: 0 PID: 21407 Comm: syz.1.3033 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  910.103034][T21407] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  910.103045][T21407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  910.103061][T21407] Call Trace:
[  910.103070][T21407]  <TASK>
[  910.103080][T21407]  dump_stack_lvl+0x100/0x190
[  910.103128][T21407]  should_fail_ex.cold+0x5/0xa
[  910.103163][T21407]  _copy_to_iter+0x1f3/0x1720
[  910.103208][T21407]  ? __pfx__copy_to_iter+0x10/0x10
[  910.103242][T21407]  ? kernfs_seq_stop+0xcd/0x120
[  910.103285][T21407]  ? kernfs_put_active+0x93/0xe0
[  910.103322][T21407]  seq_read_iter+0xdab/0x1270
[  910.103368][T21407]  kernfs_fop_read_iter+0x46c/0x610
[  910.103406][T21407]  ? rw_verify_area+0xce/0x6d0
[  910.103432][T21407]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  910.103473][T21407]  vfs_read+0x825/0xb30
[  910.103508][T21407]  ? __pfx_vfs_read+0x10/0x10
[  910.103562][T21407]  ksys_read+0x12a/0x250
[  910.103592][T21407]  ? __pfx_ksys_read+0x10/0x10
[  910.103625][T21407]  ? rcu_is_watching+0x12/0xc0
[  910.103660][T21407]  do_syscall_64+0x115/0x840
[  910.103695][T21407]  ? clear_bhb_loop+0x40/0x90
[  910.103735][T21407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.103763][T21407] RIP: 0033:0x7f0166d9ce59
[  910.103783][T21407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  910.103807][T21407] RSP: 002b:00007f0167ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  910.103833][T21407] RAX: ffffffffffffffda RBX: 00007f0167015fa0 RCX: 00007f0166d9ce59
[  910.103851][T21407] RDX: 000000000000102a RSI: 00002000000010c0 RDI: 0000000000000003
[  910.103868][T21407] RBP: 00007f0167ce9090 R08: 0000000000000000 R09: 0000000000000000
[  910.103884][T21407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  910.103900][T21407] R13: 00007f0167016038 R14: 00007f0167015fa0 R15: 00007fff5cb28828
[  910.103938][T21407]  </TASK>
[  910.118073][T16721] Bluetooth: hci16: command 0x0c1a tx timeout
[  910.597865][T16721] Bluetooth: hci19: command tx timeout
[  910.846114][T21249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  911.254943][T21249] veth0_vlan: entered promiscuous mode
[  911.280146][T21249] veth1_vlan: entered promiscuous mode
[  911.341448][T21249] veth0_macvtap: entered promiscuous mode
[  911.363498][T21249] veth1_macvtap: entered promiscuous mode
[  911.391713][T21249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  911.405690][T21249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  911.468341][T20184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  911.493247][T20184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  911.518582][T20184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  911.535928][T20184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  911.603987][T21409] ERROR: Out of memory at tomoyo_memory_ok.
[  911.939875][T21408] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  911.946512][T21408] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  911.952961][T21408] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  911.960486][T21408] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  911.974227][T21408] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  911.980391][T21408] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  911.991406][T21408] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  911.997847][T21408] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  912.003883][T21408] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  912.012211][T21408] Bluetooth: hci9: Opcode 0x0c1a failed: -4
[  912.019448][T21408] Bluetooth: hci10: Opcode 0x0c1a failed: -4
[  912.025597][T21408] Bluetooth: hci11: Opcode 0x0c1a failed: -4
[  912.032183][T21408] Bluetooth: hci12: Opcode 0x0c1a failed: -4
[  912.040676][T21408] Bluetooth: hci13: Opcode 0x0c1a failed: -4
[  912.047438][T21408] Bluetooth: hci14: Opcode 0x0c1a failed: -4
[  912.053550][T21408] Bluetooth: hci15: Opcode 0x0c1a failed: -4
[  912.059938][T21408] Bluetooth: hci16: Opcode 0x0c1a failed: -4
[  912.066180][T21408] Bluetooth: hci16: Opcode 0x0406 failed: -4
[  912.075323][T21408] Bluetooth: hci17: Opcode 0x0c1a failed: -4
[  912.081697][T21408] Bluetooth: hci18: Opcode 0x0c1a failed: -4
[  912.092955][T21408] Bluetooth: hci19: Opcode 0x0c1a failed: -4
[  912.100696][T21408] Bluetooth: hci19: Opcode 0x0406 failed: -4
[  912.110212][T21408] Bluetooth: hci19: Opcode 0x0406 failed: -4
[  912.261196][T20176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.296316][T20176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.424332][T20178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.438772][T16721] Bluetooth: hci4: command 0x0c1a tx timeout
[  912.472836][T20178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.483439][T21440] FAULT_INJECTION: forcing a failure.
[  912.483439][T21440] name failslab, interval 1, probability 0, space 0, times 0
[  912.483549][T21440] CPU: 1 UID: 0 PID: 21440 Comm: syz.9.3037 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  912.483598][T21440] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  912.483608][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  912.483624][T21440] Call Trace:
[  912.483633][T21440]  <TASK>
[  912.483644][T21440]  dump_stack_lvl+0x100/0x190
[  912.483692][T21440]  should_fail_ex.cold+0x5/0xa
[  912.483725][T21440]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  912.483758][T21440]  should_failslab+0xc2/0x120
[  912.483788][T21440]  __kmalloc_noprof+0xe0/0x850
[  912.483827][T21440]  ? __pfx_aa_file_perm+0x10/0x10
[  912.483945][T21440]  kernfs_fop_write_iter+0x26a/0x5f0
[  912.483988][T21440]  do_iter_readv_writev+0x6ee/0x920
[  912.484021][T21440]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  912.484066][T21440]  vfs_writev+0x360/0xe10
[  912.484097][T21440]  ? trace_contention_end+0x122/0x170
[  912.484130][T21440]  ? __pfx_vfs_writev+0x10/0x10
[  912.484159][T21440]  ? find_held_lock+0x2b/0x80
[  912.484191][T21440]  ? ksys_write+0x190/0x250
[  912.484240][T21440]  ? __fget_files+0x21f/0x3d0
[  912.484279][T21440]  ? do_writev+0x13e/0x340
[  912.484304][T21440]  do_writev+0x13e/0x340
[  912.484333][T21440]  ? __pfx_do_writev+0x10/0x10
[  912.484364][T21440]  ? rcu_is_watching+0x12/0xc0
[  912.484397][T21440]  do_syscall_64+0x115/0x840
[  912.484432][T21440]  ? clear_bhb_loop+0x40/0x90
[  912.484464][T21440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.484494][T21440] RIP: 0033:0x7f297d19ce59
[  912.484517][T21440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  912.484542][T21440] RSP: 002b:00007f297dfb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  912.484574][T21440] RAX: ffffffffffffffda RBX: 00007f297d416090 RCX: 00007f297d19ce59
[  912.484592][T21440] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005
[  912.484608][T21440] RBP: 00007f297dfb8090 R08: 0000000000000000 R09: 0000000000000000
[  912.484624][T21440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.484640][T21440] R13: 00007f297d416128 R14: 00007f297d416090 R15: 00007ffee8d4f258
[  912.484678][T21440]  </TASK>
[  912.917095][   T30] INFO: task syz.4.2498:17906 blocked for more than 184 seconds.
[  912.917126][   T30]       Tainted: G     U       L      syzkaller #0
[  912.917142][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  912.917155][   T30] task:syz.4.2498      state:D stack:28296 pid:17906 tgid:17905 ppid:11409  task_flags:0x400140 flags:0x00080002
[  912.917226][   T30] Call Trace:
[  912.917236][   T30]  <TASK>
[  912.917253][   T30]  __schedule+0x1295/0x67a0
[  912.917311][   T30]  ? __pfx___schedule+0x10/0x10
[  912.917345][   T30]  ? find_held_lock+0x2b/0x80
[  912.917379][   T30]  ? schedule+0x2bf/0x390
[  912.917447][   T30]  schedule+0xdd/0x390
[  912.917483][   T30]  schedule_preempt_disabled+0x13/0x30
[  912.917517][   T30]  __mutex_lock+0xced/0x1b10
[  912.917564][   T30]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.917635][   T30]  ? __nla_validate_parse+0x1e7/0x28b0
[  912.917672][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  912.917723][   T30]  ? net_generic+0xea/0x2a0
[  912.917762][   T30]  ? net_generic+0xea/0x2a0
[  912.917808][   T30]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.917837][   T30]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.917875][   T30]  genl_family_rcv_msg_doit+0x214/0x300
[  912.917921][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  912.917960][   T30]  ? genl_get_cmd+0x3e7/0x760
[  912.918007][   T30]  ? bpf_lsm_capable+0x9/0x10
[  912.918037][   T30]  ? security_capable+0x80/0x260
[  912.918074][   T30]  genl_rcv_msg+0x560/0x800
[  912.918117][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  912.918157][   T30]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  912.918191][   T30]  ? __lock_acquire+0x4a5/0x2630
[  912.918236][   T30]  netlink_rcv_skb+0x159/0x420
[  912.918271][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  912.918313][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  912.918362][   T30]  ? netlink_deliver_tap+0x1ae/0xcc0
[  912.918403][   T30]  genl_rcv+0x28/0x40
[  912.918437][   T30]  netlink_unicast+0x585/0x850
[  912.918558][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  912.918600][   T30]  netlink_sendmsg+0x8b0/0xda0
[  912.918637][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  912.918668][   T30]  ? __import_iovec+0x1d2/0x640
[  912.918708][   T30]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  912.918739][   T30]  ____sys_sendmsg+0x9e1/0xb70
[  912.918772][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  912.918808][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  912.918848][   T30]  ? __pfx_futex_wake_mark+0x10/0x10
[  912.918888][   T30]  ___sys_sendmsg+0x190/0x1e0
[  912.918926][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  912.919039][   T30]  __sys_sendmsg+0x170/0x220
[  912.919070][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  912.919099][   T30]  ? __x64_sys_futex+0x34f/0x4d0
[  912.919143][   T30]  ? rcu_is_watching+0x12/0xc0
[  912.919177][   T30]  do_syscall_64+0x115/0x840
[  912.919205][   T30]  ? clear_bhb_loop+0x40/0x90
[  912.919232][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.919255][   T30] RIP: 0033:0x7f38be99ce59
[  912.919272][   T30] RSP: 002b:00007f38bf7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  912.919293][   T30] RAX: ffffffffffffffda RBX: 00007f38bec15fa0 RCX: 00007f38be99ce59
[  912.919307][   T30] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003
[  912.919320][   T30] RBP: 00007f38bea32d6f R08: 0000000000000000 R09: 0000000000000000
[  912.919333][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  912.919346][   T30] R13: 00007f38bec16038 R14: 00007f38bec15fa0 R15: 00007fff25b61a68
[  912.919374][   T30]  </TASK>
[  912.919487][   T30] 
[  912.919487][   T30] Showing all locks held in the system:
[  912.919503][   T30] 1 lock held by khungtaskd/30:
[  912.919514][   T30]  #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  912.919607][   T30] 3 locks held by kworker/u11:3/14912:
[  912.919619][   T30] 4 locks held by kworker/u11:4/14980:
[  912.919634][   T30] 2 locks held by syz-executor/17700:
[  912.919646][   T30]  #0: ffff88802cdf20d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.919701][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.919757][   T30] 2 locks held by syz.5.2477/17745:
[  912.919769][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.919823][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.919872][   T30] 2 locks held by syz.4.2498/17906:
[  912.919883][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.919936][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.919985][   T30] 2 locks held by syz-executor/18036:
[  912.919997][   T30]  #0: ffff8880502840d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.920156][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.920215][   T30] 2 locks held by syz-executor/18238:
[  912.920226][   T30]  #0: ffff88807e90a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.920300][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.920360][   T30] 2 locks held by syz-executor/19197:
[  912.920372][   T30]  #0: ffff8880424420d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.920429][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.920489][   T30] 2 locks held by syz.0.2715/19333:
[  912.920501][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.920567][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[  912.920621][   T30] 2 locks held by syz-executor/19561:
[  912.920635][   T30]  #0: ffff888071f960d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.920693][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.920750][   T30] 2 locks held by syz-executor/19800:
[  912.920763][   T30]  #0: ffff8880233f40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.920818][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.920880][   T30] 2 locks held by syz.1.2816/20071:
[  912.920893][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.920956][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.921006][   T30] 2 locks held by syz-executor/20135:
[  912.921019][   T30]  #0: ffff888022f1c0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.921078][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.921171][   T30] 5 locks held by kworker/u11:21/20178:
[  912.921186][   T30] 2 locks held by syz.5.2853/20328:
[  912.921198][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.921258][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.921343][   T30] 2 locks held by syz.7.2875/20439:
[  912.921358][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.921416][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.921471][   T30] 2 locks held by syz-executor/20469:
[  912.921485][   T30]  #0: ffff8880a50320d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.921551][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.921611][   T30] 2 locks held by syz.0.2876/20513:
[  912.921693][   T30]  #0: ffffffff906b5128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  912.921755][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[  912.921815][   T30] 2 locks held by syz-executor/20715:
[  912.921829][   T30]  #0: ffff88802c77a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[  912.921892][   T30]  #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  912.921957][   T30] 2 locks held by getty/21334:
[  912.921969][   T30]  #0: ffff8880336610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  912.922104][   T30]  #1: ffffc90004e7a2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  912.922183][   T30] 2 locks held by udevd/21366:
[  912.922200][   T30] 4 locks held by syz.6.3035/21436:
[  912.922217][   T30] 4 locks held by syz.1.3038/21444:
[  912.922244][   T30] 1 lock held by syz.1.3038/21449:
[  912.922261][   T30] 1 lock held by syz.9.3039/21447:
[  912.922282][   T30] 4 locks held by syz-executor/21450:
[  912.922301][   T30] 
[  912.922308][   T30] =============================================
[  912.922308][   T30] 
[  912.922326][   T30] NMI backtrace for cpu 1
[  912.922344][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  912.922382][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  912.922393][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  912.922408][   T30] Call Trace:
[  912.922417][   T30]  <TASK>
[  912.922427][   T30]  dump_stack_lvl+0x100/0x190
[  912.922476][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  912.922507][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  912.922535][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  912.922575][   T30]  sys_info+0x141/0x190
[  912.922614][   T30]  watchdog+0xcb1/0x1030
[  912.922656][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  912.922691][   T30]  ? __pfx_watchdog+0x10/0x10
[  912.922729][   T30]  ? __kthread_parkme+0x18c/0x230
[  912.922767][   T30]  ? kthread+0x13a/0x450
[  912.922801][   T30]  ? __pfx_watchdog+0x10/0x10
[  912.922834][   T30]  kthread+0x370/0x450
[  912.922870][   T30]  ? __pfx_kthread+0x10/0x10
[  912.922910][   T30]  ret_from_fork+0x72b/0xd50
[  912.922939][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  912.922965][   T30]  ? __switch_to+0x800/0x1100
[  912.922995][   T30]  ? __switch_to_asm+0x39/0x70
[  912.923025][   T30]  ? __pfx_kthread+0x10/0x10
[  912.923068][   T30]  ret_from_fork_asm+0x1a/0x30
[  912.923114][   T30]  </TASK>
[  912.923153][   T30] Sending NMI from CPU 1 to CPUs 0:
[  912.923191][    C0] NMI backtrace for cpu 0
[  912.923208][    C0] CPU: 0 UID: 0 PID: 20179 Comm: kworker/u11:22 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  912.923242][    C0] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  912.923251][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  912.923267][    C0] Workqueue: events_unbound toggle_allocation_gate
[  912.923293][    C0] RIP: 0010:switch_mm_irqs_off+0x455/0x7a0
[  912.923319][    C0] Code: e9 55 fe ff ff 83 fb 07 0f 87 39 02 00 00 48 89 d8 be 08 00 00 00 48 c1 f8 06 48 8d 7c c5 00 e8 b1 97 bb 00 f0 48 0f ab 5d 00 <e9> 2f fd ff ff 48 89 e8 4c 09 e8 a8 02 0f 84 c6 fc ff ff 41 83 e5
[  912.923342][    C0] RSP: 0018:ffffc9000408f8a8 EFLAGS: 00000046
[  912.923358][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81b958cf
[  912.923373][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88813fe817c0
[  912.923388][    C0] RBP: ffff88813fe817c0 R08: 0000000000000001 R09: ffffed1027fd02f8
[  912.923403][    C0] R10: ffff88813fe817c7 R11: 0000000000000000 R12: ffffffff8e9b8080
[  912.923418][    C0] R13: 0000000000000000 R14: ffff8880337c85c0 R15: ffff88813fe80c40
[  912.923433][    C0] FS:  0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000
[  912.923454][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  912.923470][    C0] CR2: 00007f0166e4f156 CR3: 000000000e596000 CR4: 00000000003526f0
[  912.923485][    C0] Call Trace:
[  912.923492][    C0]  <TASK>
[  912.923503][    C0]  use_temporary_mm+0x95/0x140
[  912.923525][    C0]  ? kmem_cache_alloc_noprof+0x90/0x6e0
[  912.923565][    C0]  __text_poke+0x3e2/0xae0
[  912.923591][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  912.923621][    C0]  ? __pfx___text_poke+0x10/0x10
[  912.923647][    C0]  ? kmem_cache_alloc_noprof+0x90/0x6e0
[  912.923684][    C0]  smp_text_poke_batch_finish+0x6b5/0xc60
[  912.923721][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  912.923755][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  912.923794][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  912.923827][    C0]  jump_label_update+0x37a/0x550
[  912.923855][    C0]  static_key_enable_cpuslocked+0x1bc/0x270
[  912.923884][    C0]  static_key_enable+0x1a/0x20
[  912.923909][    C0]  toggle_allocation_gate+0xfe/0x2d0
[  912.923933][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  912.923960][    C0]  ? rcu_is_watching+0x12/0xc0
[  912.923988][    C0]  process_one_work+0xa0e/0x1980
[  912.924016][    C0]  ? __pfx_process_one_work+0x10/0x10
[  912.924048][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  912.924074][    C0]  worker_thread+0x5ef/0xe50
[  912.924098][    C0]  ? __pfx_worker_thread+0x10/0x10
[  912.924120][    C0]  ? kthread+0x13a/0x450
[  912.924150][    C0]  ? __pfx_worker_thread+0x10/0x10
[  912.924169][    C0]  kthread+0x370/0x450
[  912.924200][    C0]  ? __pfx_kthread+0x10/0x10
[  912.924232][    C0]  ret_from_fork+0x72b/0xd50
[  912.924255][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  912.924277][    C0]  ? rcu_is_watching+0x12/0xc0
[  912.924301][    C0]  ? __switch_to+0x800/0x1100
[  912.924329][    C0]  ? __switch_to_asm+0x39/0x70
[  912.924355][    C0]  ? __pfx_kthread+0x10/0x10
[  912.924388][    C0]  ret_from_fork_asm+0x1a/0x30
[  912.924423][    C0]  </TASK>
[  912.944522][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  912.944557][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  912.944598][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  912.944613][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  912.944629][   T30] Call Trace:
[  912.944639][   T30]  <TASK>
[  912.944651][   T30]  dump_stack_lvl+0x100/0x190
[  912.944700][   T30]  vpanic+0x552/0x970
[  912.944727][   T30]  ? __pfx_vpanic+0x10/0x10
[  912.944754][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  912.944788][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  912.944824][   T30]  panic+0xd1/0xe0
[  912.944850][   T30]  ? __pfx_panic+0x10/0x10
[  912.944882][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  912.944912][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  912.944943][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  912.944972][   T30]  ? watchdog.cold+0x1ec/0x234
[  912.945002][   T30]  ? watchdog+0xcc1/0x1030
[  912.945041][   T30]  watchdog.cold+0x1fd/0x234
[  912.945079][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  912.945116][   T30]  ? __pfx_watchdog+0x10/0x10
[  912.945153][   T30]  ? __kthread_parkme+0x18c/0x230
[  912.945193][   T30]  ? kthread+0x13a/0x450
[  912.945229][   T30]  ? __pfx_watchdog+0x10/0x10
[  912.945264][   T30]  kthread+0x370/0x450
[  912.945303][   T30]  ? __pfx_kthread+0x10/0x10
[  912.945345][   T30]  ret_from_fork+0x72b/0xd50
[  912.945376][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  912.945407][   T30]  ? __switch_to+0x800/0x1100
[  912.945442][   T30]  ? __switch_to_asm+0x39/0x70
[  912.945476][   T30]  ? __pfx_kthread+0x10/0x10
[  912.945518][   T30]  ret_from_fork_asm+0x1a/0x30
[  912.945576][   T30]  </TASK>
[  912.945704][   T30] Kernel Offset: disabled