last executing test programs:

2m36.676564191s ago: executing program 0 (id=2097):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x10, 0x0)
mmap$auto(0x3, 0x5, 0x8, 0xeb3, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x40000002)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x4042, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x44100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r1, 0x8, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x60, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="010031bd7000fddbdf250c0000000c000380080003800400b080"], 0x20}}, 0x20000090)
listmount$auto(0x0, 0x0, 0xf4240, 0x0)
unshare$auto(0x40000005)
get_mempolicy$auto(0x0, 0x0, 0xa, 0x4000000100, 0x3)
r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x2003, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/driver/usbserial\x00', 0x40000, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000400)=""/232, 0xe8)
ioctl$auto(r2, 0x6f2d, r2)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/snd\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x7)

2m36.272573935s ago: executing program 0 (id=2100):
unshare$auto(0x40000082)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', <r3=>0x0})
sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x1, 0x60bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x810)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/cpulist\x00', 0x28000, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, 0x0, 0x4000040)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, 0x0, 0x100000a3d9)
r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5)
ioctl$auto(r6, 0x4008af13, r6)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080)
syslog$auto(0x4, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m35.260570911s ago: executing program 0 (id=2102):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x7b, 0xffffffffffffff80, 0x0, 0x5, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x39, 0x0, 0x10)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x13b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x6000, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0)
write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)
pidfd_open$auto(0x1, 0x99)
unshare$auto(0x20000)

2m33.13542552s ago: executing program 0 (id=2107):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x7b, 0xffffffffffffff80, 0x0, 0x5, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10)
mmap$auto(0x428f, 0x200004, 0x4000000000df, 0xaad5, r0, 0x300000000000)
socket(0xa, 0x8000b, 0x10000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x6000, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/queue/max_sectors_kb\x00', 0x48542, 0x0)
write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)

2m33.135307189s ago: executing program 3 (id=2108):
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2m32.939734233s ago: executing program 3 (id=2109):
socket(0x11, 0x3, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002)
openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae50352ff4adbc282ab3f4c7f5829064548299d3bfddf89e353e057cb8c1475867107f833423a4cdf3e6f4029a9110bd0c002d8008", @ANYRES32=0x0, @ANYBLOB="0500290006000000ae040f00fa38fc1ce2bcbfdace4ce0a007bb13f43b3108d7e2cecccf33506bba9c0bbdc8a031ca7c3ad1025987708a5337a352660728c00d193cb3554b3b9bdd137eb5c2d52f2bcce073226aa41e76856727998c41eeb80198064cad66119de4fa829ad3584a8dfa3832f94546f3629cda63baa9967e7e546b00845a04aa0a34aec962b9c5d7c9856b0736e214b05a5566e810d3f473add19181e9e11fd74aa7906511794413e2c1868f507d1faff1b24691aeb05d2a539a993088b196c58a656c744c39a31e0951067deae831d8f5c723da1b7e2688686e184e5514091f13080da42fd236662656bf10e9833fbb4f7ecdc37fbc594c3f26d53bbbf9c818c2b71855f3a1f843bd5571d0b7832b35d380820bfd75883905f858473ede84caa005c2e9fe71f8ea2310e36c650566f68ceee7eb8b42e9262270fe3d227c021943bf8f9f00c3dc603007757fe399bc795b49fb122cf2ccf4e6a1a643f20e444706ed4f5cff66bae14cb6b9602d4c00512b19095c46e8fcd3a6d4b276bd4666c8f4a5c195fcdb2570a6d1bd5cc2377c8a863d624587a4e06d10f83f2b322dc8d6a80e8f4b5a3398c1deab5ab0a1e11ec7675e44f01409d39915a34050e4a14e1e53c560b33b58ccb788734c6ffecade76d2cbb778f6c24635078c7fbb70c420ae48011232d2148902512aa08176b6ca1a51bc5774c273b74bf450a650e8d49d10b0d9d247b6af592dcd1fb391c2d50024842c0fd5c735b35adb75030f783618a88c8c4cafedbefd2359605192bd9f70be54822fdd4cba3087ac960546f4d4695e6f7112dcf88f10368fa2cd94387652b69a167442f963e69c7b8211febc5c2bbe69afb56dffb2c2cf841ee4db972d03e1d9a360d5cb0421d43a30fc0722ced687e8c137101acc205f6a128f4f827a0e06f9be21fc66fe35ace03025f4ff159e83b3464a7b813af92ca8acd653a9e7f09e06d5da70bf7c9e3ce05431c1d73b6d5fb51f5fddf760b73aabb2883bd27f75a76ce1bf98e6349d12aaea1026d3b97375f5502022797a1d4ae012c02d85d37de68612867e3909f69eb2ac800669868abe8eff8ee8f6ac54d7233ff736b5f94de2230056f1f7a8619fbe7bcf10bc166f99540cdda69a529a20ce28aea62e82871f2676747e87e28520fd75df781b250d890ca99638fc5fc33d2bdb693bad1a2b296e59f55298480ddefa0f5e26e1789d28f2550f3d5bbc1afff16f23094179b29c8f2032e0a3d23244db82936d149d255b291881e59f6c09e3bd39a2f4f145deb9f44dc79d06a7bb084af6547875a4eb0c431c3b2415a9bdc44ce1f402552f1c130396e007f5dd83f43fd59fa248908996e1f9e31eb7c56aee98dfbbeba223f127c0e36b602f227a5d0e5e2945823947694c2976bc740ba444e46847d35d4f44fab25896a7c75ae72d43203df25a4daa26f4155de0b2d1cad44a0c5c21e8874ef21cd3efa2f1c946697b638fdbd80418a1a884b49149c45fea130bebcedb9a8c41650c85d468e088a2ac4de41f6b4f31d02038a8479211e5d64a9df6552ee5405f46641e59abb3abb88ed22b510f4b2adb0340a1ab01f175dbfdada121fbe19d2255022ad7720f16f574f57e9b405a223e28dbcf1f9fa0f58ba42d15510c855b7ade58f5cd9fd0f3b57ac38096c95ba44e2b062abf2d16de4baa178b8defc85b8522b85e3487fc4638465e0000"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff)

2m31.7678688s ago: executing program 0 (id=2110):
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
msgget$auto(0xc, 0x77d9)
msgrcv$auto(0x0, 0x0, 0xff9, 0x8, 0x3)
msgsnd$auto(0x7d, 0x0, 0x8, 0x9)
syz_genetlink_get_family_id$auto_macsec(0x0, r0)
mmap$auto(0x2000000000000, 0x2, 0xe2, 0x9b72, 0x2, 0x6)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0xc}, 0x7, 0x20020000)
landlock_restrict_self$auto(r0, 0x56)
sendmsg$auto_NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251100000008001e00d80000002a0002002f7379732f6b65726e656c2f64656275672f6f72616e676566732f64656275672d68656c70000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004010}, 0x4001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0)
recvmmsg$auto(r1, 0x0, 0x10000, 0x9, 0x0)
msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffff98, 0xf, 0x8, 0x2}, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0xff, 0x9, @raw})
mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = memfd_create$auto(0x0, 0x4)
statx$auto(r4, 0x0, 0x1000, 0xbdfc, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0)
ioctl$auto(r6, 0xc0305602, r5)
sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9b7ec905046735f0859da12a8efe39150000", @ANYRES16=r3, @ANYBLOB="080025bd7000010100001000000005001f0043000000080027003b00000008000e0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8080)

2m31.736182772s ago: executing program 3 (id=2111):
socket(0xa, 0x801, 0x84)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty42\x00', 0x40741, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x20480, 0x0)
read$auto_mISDN_fops_timerdev(r0, &(0x7f00000000c0)=""/4099, 0x1003)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100085)
ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c)
r2 = getpid()
rt_sigqueueinfo$auto(r2, 0x6, &(0x7f0000000140)={@siginfo_0_0={0x9, 0x6, 0xffffffca, @_sigfault={&(0x7f0000000040)="64dcffc55b74fb45e194a7884f08048c6e07bb523ef0925f92aadb89b4d0a52aa860302c1c8dcb6357ac8d7904f98013bd4aa1db7e46cb1a5be230cfc1eb1a60c94d8641706333a12ffef737f70d07c67ddfd66b81f9444d8ea0ab167cc4ce1d630718d02153dee27dab2925edf43da245d6c34ee9fb7ed0a05d37dfaeb818027e35efae5e4769ebb7bcb6c6c724e2f498ee6532d55e684646fbca6892ece987f65573d43b8065ec0844f28d6339708efdd01b2fe7f518f688fc0d4a504c0f57814617f352994aec0073c950f306978a9e75c37ac4210bd5a40de31f04d1301e50c88900"}}})
sendto$auto(0x3, 0x0, 0x2000f, 0x1, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c)

2m31.210084159s ago: executing program 0 (id=2112):
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

2m30.806053342s ago: executing program 3 (id=2113):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x4, 0x3}, @generic="fc9a7bbecd3ef9da80e7b7617a458a0887d73696"]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10ac}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x9c}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0xc8, 0x2e, 0x0, 0x1, [@generic="0ba2dc190d3d9cd8daf204532c27b492cf2947e321771eb083a19a7ce4b58871a0fc5787438f514efa870d80d65c3c37bce2b480a75ef7d39ccccf491c420d8f1cbb08ef0b372c35838da0786ca8589a98fdc5ac68f03c45c0f74b564ad138c352f009736f93dd7fb70df4b4889833dd9a3099b987e7a63fe879e4dc336d1b4de3c629548b42b90ec0b9479345099e9a695168ceb0f6edab19a209626ae7c04e10f7c7c93bd363ebb25efeb29f943a5b01b572ddd9f17ed425a2a39057a2fc8ecf346d03"]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000)
r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000640), r1)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000009}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @remote}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010102}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
ioctl$auto(r5, 0x800064ba, 0x1e6)
capget$auto(0x0, 0x0)
r7 = socket(0x2c, 0x3, 0x0)
getsockopt$auto(r7, 0x11b, 0x7, 0x0, 0x0)
r8 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
lseek$auto(0x3, 0x8, 0x1)
r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1)
r10 = fcntl$getown(r1, 0x9)
sendmsg$auto_NFC_CMD_SE_IO(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80000000}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x9}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x9}, @NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @pid=r10}]}, @NFC_ATTR_SE_APDU={0xfa, 0x19, "ff736f56912683989fe13bd5a9b50fcc17d925ee4e3b8859fdd8ce64fa02b76970667420a0e39630525512ae80892db4788eed8d8ce14f9fc03597a42b29a6863763b22db810351a638ad84842e40ea4ab856ea975ada8f77a137d039d1b572b88170b19612e61bd3b060af2ceb616b7ecc8349b9e634bf915a2f959be222c1e81dadccb0eef24109740ddd4ddf4d4c1d707bcdcd70251117bdd49330f3503a774c6ad24aeac56093c32f0728cd3c217320f7b531524a6eb07bedd8d72ee09aa1e747e24114b4ddd63bdae303bfaf4bc744ebf2c290093645b0ae6f711716ae0f5106a19512db753ab0b725967da98d636ad45263fab"}]}, 0x154}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)

2m30.471381372s ago: executing program 3 (id=2114):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

2m30.432569655s ago: executing program 3 (id=2115):
socket(0x10, 0x2, 0xc)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r2 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r2, 0x0, 0x4000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r4, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m19.679783218s ago: executing program 32 (id=2105):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

2m19.609600002s ago: executing program 33 (id=2103):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

2m16.118991599s ago: executing program 34 (id=2112):
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

2m15.342903279s ago: executing program 35 (id=2115):
socket(0x10, 0x2, 0xc)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r2 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r2, 0x0, 0x4000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r4, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m4.940296999s ago: executing program 6 (id=2136):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x20400, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000000), 0x7}, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_FLUSH(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf26110000"], 0x14}}, 0x4000000)
ioctl$auto_NVRAM_INIT(r0, 0x7040, 0x0)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), r2)
shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f0000000440)={{0xe, <r5=>0xffffffffffffffff, 0xee01, 0xe33e, 0x7, 0xf027, 0x80}, 0x121c, 0x1000, 0x80, 0x4, @raw=0x3, @raw=0x2a5, 0x8000, 0x0, &(0x7f0000000280)="9d594d976ffac62870f66ca50bb778887e2c3764a577131d1e2f79a36a7cdf72bcafe713cefc6ded7acd6378b78249af591686dbb6599c12f85a65cbd95fd55ea9fd1f3413738455961ac6e1252e79de28a65ed9e2f6af75e4ee000efe4df483c8588b235c3b386be6cb15", &(0x7f0000000340)="706413f64e17f2cd9d42378127801cdc39bf2693bb834cc19c765854cb8a28d8361db1bdb1b557563f0d53f3bcdb3631316105599b49a858a685fc1f1a920e5e13e745f5f49872ee88b8bdfc9b1b7904e301893e8e6466df5e1a239e0b4b85c5587facf53397b71ae9f5d3c0357418d900a763eb7e1642b0e7add7f7089a8639e2cc86b58aff31d6e7a9b319e7c64514847945456e8f20347712df709e850ceabfa9b28d124c67a3dd2bd8de0b26a51fc5091b29c1191abec41e5e887d8ad99775803d5bb5e65718bd45e4b0e91982dc2ed0e290698b8158bbe1c91b88fc"})
r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$auto_RNDADDENTROPY2(r6, 0x40085203, 0x0)
lstat$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x4, 0xeed, 0x1, 0x80000000, <r7=>0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffe9, 0x0, 0x4, 0x44, 0x1, 0x1, 0x1, 0x8f, 0x6, 0x80000001})
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f0000001c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f00000005c0)={0x1570, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x284, 0x3, 0x0, 0x1, [@nested={0x14, 0xc5, 0x0, 0x1, [@generic="2c4735f17622d46b6162065a", @nested={0x4, 0x1b}]}, @typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x2}, @nested={0x21c, 0x13a, 0x0, 0x1, [@generic="787e00302ef3d422de2b159014dd98523cbbb5ae8fc7ae119c88c8f8504f8f1bcefdaaec6e2cef4bdaf17eb2adde5815e428d142a041697dfda1b43d07a419468b42e8c0b6d428a7849aac1beafc1d732401912279eaa1ff90b687e904db6dd2c6eca8e71e918253b82a0cc2ccd1123a6273d990034ab7acdd0630be78a0b669f7c2b353b92ee2038ba2901b9be8de7c1cf22b949646aaff07ecd41010162916e3c058de2a665c99bfd0bc4e6d4e07590c88727b56a4", @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0xcb}, @generic="12bd4db9769db723d023b0a43bc673cf307264f8eaf9d9b21e49a7b2cedf0b366aa7f3592fcf487753fe0acc2323f5459c7b937a47bbbbdc0958a2190eafdc95ca502eaf45f8320559f0121766dffc1618ad496429e9d3f8563af4a829b745b6231ab22b2d835757f0259b000df62c61590d4df238b1f97ab4baa39d92eba9e54b58d142fda216b4772a1cb954db369c7d785d63639b2345838d82dc7777c4ae548c4e0875313037ac104493f98dd0246d90090481f1e90c6da287f51e13d7c8863d68723f2a4a2275f31a0c6d3111b69a2f3979b952a2a142ece25a1ea74a6b5f5a60f30b045ee8f9366f05ee4977c36f4c1e63764d99", @generic, @nested={0x4, 0xa7}, @generic="c5fabf3b9be65b8fe1a195c8254e0dfe49dd534c62e10b556222d2ea4a33916fb4413555a39e3d9e657226229672f94a6a654d05782f218cd16c099d1c261c3e0fb34a4a9e0809946bb7dc2705d63b"]}, @typed={0x3e, 0xad, 0x0, 0x0, @binary="417baa6c5860b0606ebc854194cb7efa18e700791f423c8b058962f1036bb7b22aa9a88ec67bbe003afa28f0247eb857c4443fd82d56dda32eed"}]}, @MACSEC_ATTR_OFFLOAD={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @uid=r5}]}, @MACSEC_ATTR_SA_CONFIG={0x12cc, 0x3, 0x0, 0x1, [@typed={0x4, 0x45}, @nested={0xa4, 0x49, 0x0, 0x1, [@generic="2714370dcd58b2ded6a8853187d60107d60c41b97c3fd31672590ef8ec267a55e642d2cb36960b3b7e61e8364205ff3cf3ede7ef71405753cbe19dc23f31da479b47d446b600b956e66adb9fd3a32a92e25ddcf5129230c444c285fd0d7d6f9ab3b4e836f32d5a1c1a5e98343ba94310d7713a7270e571c69902ad027b900b61ed739f2e94106650a44f533c80ea2680d0f88c7879f36782", @typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}]}, @nested={0x120e, 0x9f, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @ipv4=@remote}, @generic="958850d10ed16cc1aef774edf35e2c47f8d373fcb1bf1aecf91b0a3867d1cf29a7e4806062fa11be017be77fbe6ef463913114bb777f621dcb071fef76d2f4248b95b3414c78c0faddbc9ebf5b54d7fc4adcc9c59f59a30cfee80a20b160ec931d70d6dce60fcdbedad24cfcd9ffe36107dea91b61d19928c95c707ede64994bc1d167f0cc37bae1abc18d255d0ff4d2f7a2f238253db27f8b7e44073d883074cfc2afd568466b42a2da463c952d6e3734f890a3b371e5e9c00d72c6f5ce882791c8aff2c4ba55dee433adf211ba89bd47873a96636fbee1629a93d16b75c490ff6701ac257e87ddbffd", @nested={0x4, 0x88}, @nested={0x4}, @generic="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", @generic="6c74ac4cd825063eaa329d6e04fc6859adc00d06641283cacf91765db23db1efb9df76eca9520f4a1089b37e51b9d7b5076a3cb52961abff236d58a50d0c65ca7e6f0cb04c49e3174bc70ef796025ada02dc", @generic="667ea53730d2d59821bd80ea88a9b16afad982e86e3ed5ccbab020cacf8e640c6ee299979e614e593a45132d3844908c9f6908182cb8783d9e23e2f1de9b2202b47b1c1847e69cf440dc08b0f0061a830e589c9491e127d4a2d6b3a782df472bff30b5966a387d5953255035b8dbfdacf189a419579556455ec7083f8b60a842b579669806319ac777132688e8b6353f19fa247929fa7e1495a8761c033afeb82a3109b4197a954a57404071492561c8e4b85f25fac7", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0x49, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r7}]}]}, 0x1570}, 0x1, 0x0, 0x0, 0x10}, 0x14)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r9=>0x0})
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x80)

2m4.610200036s ago: executing program 6 (id=2137):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
readv$auto(0x3, 0x0, 0x7)
mbind$auto(0xb6, 0x2, 0x7, 0x0, 0x59f, 0x5)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto(0x3, 0x402c542b, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

2m4.39673083s ago: executing program 6 (id=2138):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x93f, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000680)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbbH\b\xc0d.\xe5\xb0~\xa8\xcb.\x13\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002)
r4 = io_uring_setup$auto(0x7, 0x0)
epoll_ctl$auto(0xffffffffffffffff, 0x80000000, r4, 0x0)
sendmmsg$auto(r4, &(0x7f0000000500)={{&(0x7f00000001c0), 0x6cd1, 0x0, 0x13f1, 0x0, 0xd, 0x7}, 0x10}, 0x5, 0xfff)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="fe3cdf3e46be9a913519c4b641536dbafc8dc1a63f5e8a5ad784492d35736daa514e34d6452bc4ed3f323c6b9480efbd8f82f8dde906da19aa9c69c9f5ed51caf6455693c0da314851c64ac4f06d995fc14135fac4d49e", @ANYRES16=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4890)
sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fbdbdf251700000005003d000200000006006d00730e000008002700050000000400f40005002f01a50000000100000000000000000000000000000000000000ea0d96cbd38d6514af7b726a6b08bf3a2cf919675c7a58c2ef99278483ef25da7655d9294502"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)

2m3.590885774s ago: executing program 6 (id=2141):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0)
mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r2, 0x0, 0x20)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40282, 0x0)
socket(0x15, 0xa, 0x6)
ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000300)={"8c972772", 0xe, 0x0, 0x81, 0xfff, 0x7, "45421ad20f484dec61ddd3c7e54943", 'W\x00', "4750cf6c", "c9a212c0", ["00dc9fad260a78d529dd0045", "40601013115a101bbe89b63a", "e81e9ac7c0a5930fa74681ba", "ebdfe7e9596deab366af46ae"]})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000640)='/proc/execdomains\x00', 0x0, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x4, 0x1, 0x2, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b620200f764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacf03000000000000008bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6cac1ba3023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8133ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"})
r4 = socket(0x2, 0x3, 0x100)
r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r5, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r6)
sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0xffffffffffffffff, 0x0, 0x3)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x26c}, 0x1, 0x0, 0x0, 0x4080}, 0x81)
openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, 0x0)

2m3.065450556s ago: executing program 6 (id=2143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto(r1, 0x0, 0x80000001, 0x0, 0x0)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e1842, 0x0)
ioctl$auto(0xffffffffffffffff, 0x0, 0xfffffffffffff4e0)
open(&(0x7f0000000340)='./cgroup/file0\x00', 0x101840, 0x100)
execve$auto(0x0, 0x0, 0x0)
rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00')
r2 = socket(0xa, 0x80000, 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x20000000000, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0)
readv$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x5)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001340)='/sys/module/l1oip/parameters/limit\x00', 0x80302, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)
prctl$auto(0x3, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x20044841)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x101000, 0x0)
write$auto_ftrace_event_filter_fops_trace_events(r5, &(0x7f0000000280)="645e0ca63a4fc7a2e379851e2d0f1c1322e8f3e1884459ea686ef83e1e549f690774d9bed47c0165e8e4041e10065ec977918e972b6ebd08cad574a0e1c2acf669bf13cca866bb587dee62b66b2849a05c626b6370291d9954c6262e2d52a8b16d192a6e829e7a4161af6fa3f6614183976701579b28c094bee007a3266a370aaa2c5a042a472cdc55f571f95679c55431f96c", 0x93)
r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r6, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2m2.008361381s ago: executing program 6 (id=2146):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

1m46.499941581s ago: executing program 36 (id=2146):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c06000100060000000bde8967012230308020f5797a"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0)
write$auto(r4, 0x0, 0x4000000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000002500)=0xff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r6, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0)
write$auto(0x3, 0x0, 0x100082)

1m1.901086632s ago: executing program 5 (id=2295):
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0)
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
inotify_init1$auto(0x3000000000000)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x280, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x880, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8b40, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socketpair$auto(0x1e, 0x9, 0x7, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x80106f53, r0)

1m1.892190216s ago: executing program 7 (id=2296):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

1m1.723396489s ago: executing program 7 (id=2297):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
mremap$auto(0x84, 0x4000007, 0x407, 0x0, 0x20000020000000)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
r3 = memfd_create$auto(0x0, 0xe)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYBLOB="20002abd7000fbdbdf2503000000000101800c00f600feffffffffffffff18a921a660a3672dd99574fe5c0400d38037d64c5e9a032824b36054bd37b6f7d6482c48b96da06c90805bdd84a082b9da96a3e8ad6236c65375e29bafd96b4201db8aa94ebacc3a0168d706fbdd93efa1c230d0859b1fa788d18deeeb"], 0x114}, 0x1, 0x0, 0x0, 0x101}, 0x15)
ioctl$auto_SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000040)="d9b45a821453a2c3eb04af129a5730afc1c9435d52a32279416326561417cd65135c71730c264c9aa3cbc41efd46003ee4")
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r3)
write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
prctl$auto(0xfffffffe, 0x8, 0x0, 0x3e, 0x2)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
read$auto_fragmentation_threshold_ops_(r1, &(0x7f00000000c0)=""/118, 0x76)
msync$auto(0x0, 0xe0, 0x6)
io_uring_setup$auto(0x9, 0x0)

1m1.567804201s ago: executing program 5 (id=2298):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0x8)
writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, 0x0, 0x3a)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)

59.540091949s ago: executing program 5 (id=2304):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4bfa, 0x1)
r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
fcntl$auto(r1, 0x400, 0x1)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x1, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee00", @ANYRES16=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000)
r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r3)
sendmsg$auto_IPVS_CMD_DEL_DEST(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r6, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xf9, 0x2, 0x0, 0x1, [@typed={0x6e, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f29"}, @nested={0x18, 0x41, 0x0, 0x1, [@typed={0x14, 0x96, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="5abeac4439dc636af15ef8140b652432f69aa35fdf470d6b9fd83bb7bf8b22d0f4", @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6b324cf20837162a95dc30f434792"]}]}, 0x110}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

58.597103992s ago: executing program 5 (id=2305):
eventfd$auto(0x34b)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xb, 0x1, 0x948b, 0x3, 0x4, 0x10060000000, 0x6, 0x62, 0x8000001d, 0x8, 0x6d3b, 0x9, 0x8, 0x4]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
write$auto(r2, &(0x7f00000001c0)='y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0)
sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000011)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x389803, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x5f)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttys0\x00', 0x26a00, 0x0)
ioctl$auto_TIOCMBIS(r3, 0x5416, &(0x7f0000000040)="1e66cfea880288ddc30115c3e01d1aff43b6768c2e86242394c3d7f3cf5a8996deaf1c8cf1cb09e2fb7f001651c62c2b820be9720e64b82be79af1c74ed80c8e43e561c1504568ddfaa46191ffc8508ddc0327b6378f2a7a2d")
close_range$auto(0x2, 0x8, 0x0)
connect$auto(0xffffffffffffffff, 0x0, 0x54)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4)
eventfd$auto(0x5d5d)

56.272696337s ago: executing program 7 (id=2309):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyyf\x00', 0x4000, 0x0)
ioctl$auto_TIOCGSERIAL2(r1, 0x541e, &(0x7f0000000100)="b41e4423e7b50e6ce2ef01d380879eff0155a155d1dafc402e4cd19223cb4eaeccbdf8e4ad372ebd0fbf6df90da91d9311822287cbaf1f1b82dea1264b0548075747954f7e1c24ac39566dc526eb1d45e41f084bd56b6edf37897603b1f627c57f87268c60f7faa53d2ba59f890b46089207d970a3e8ec7219f54475e6a574790a3fc034759188416e8b59786185c2a487e3cb3571add63c7fd07c7fc79e7d2a4243526012820729417864086a887abe6b48371d0790")
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0)
read$auto(r2, 0x0, 0x1ff)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0)
prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff)
setreuid$auto(0x0, 0x5)
fcntl$auto(r3, 0x400, 0x1)
setresuid$auto(0x2, 0xee01, 0x8080)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
read$auto_mon_fops_binary_mon_bin(r5, 0x0, 0x0)
poll$auto(0x0, 0x7, 0x100)
ioctl$auto_MON_IOCG_STATS(r5, 0x80089203, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0)
write$auto(r0, 0x0, 0x2)
fanotify_mark$auto(0xffffffffffffffff, 0xac, 0x5, 0xffffffffffffffff, 0x0)
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x282042, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x3f7, 0x0)

55.561926351s ago: executing program 5 (id=2311):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/ep_81/interval\x00', 0x300, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = open(0x0, 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=r0, 0x400, @old_map_fd=r2}, 0x10)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0)
sendfile$auto(r4, r3, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$auto(r4, &(0x7f0000000080)=@can, 0x2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x1d, 0x2, 0x6)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x10000, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000040)='.\x00', 0x100, 0x161)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0xdf, 0xffff, 0x401, 0x8000)
shmctl$auto(0x691, 0x3, 0x0)
ioctl$auto(0x1, 0x8941, 0x8)

55.484925696s ago: executing program 7 (id=2312):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x4, 0x3}, @generic="fc9a7bbecd3ef9da80e7b7617a458a0887d73696"]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x14, r5, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)
sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10ac}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x24, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x9c}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x20000000)
r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000640), r1)
sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000009}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r7, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @remote}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010102}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
ioctl$auto(r6, 0x800064ba, 0x1e6)
capget$auto(0x0, 0x0)
r8 = socket(0x2c, 0x3, 0x0)
getsockopt$auto(r8, 0x11b, 0x7, 0x0, 0x0)
r9 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
lseek$auto(0x3, 0x8, 0x1)
r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1)
r11 = fcntl$getown(r1, 0x9)
sendmsg$auto_NFC_CMD_SE_IO(r9, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x80000000}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x9}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x9}, @NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @pid=r11}]}, @NFC_ATTR_SE_APDU={0xfa, 0x19, "ff736f56912683989fe13bd5a9b50fcc17d925ee4e3b8859fdd8ce64fa02b76970667420a0e39630525512ae80892db4788eed8d8ce14f9fc03597a42b29a6863763b22db810351a638ad84842e40ea4ab856ea975ada8f77a137d039d1b572b88170b19612e61bd3b060af2ceb616b7ecc8349b9e634bf915a2f959be222c1e81dadccb0eef24109740ddd4ddf4d4c1d707bcdcd70251117bdd49330f3503a774c6ad24aeac56093c32f0728cd3c217320f7b531524a6eb07bedd8d72ee09aa1e747e24114b4ddd63bdae303bfaf4bc744ebf2c290093645b0ae6f711716ae0f5106a19512db753ab0b725967da98d636ad45263fab"}]}, 0x154}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
close_range$auto(0x2, 0x8, 0x0)

54.9234856s ago: executing program 5 (id=2314):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0)
ioctl$auto_IOC_PR_RELEASE(r1, 0x401070ca, 0x0)

54.920762559s ago: executing program 7 (id=2315):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff)
write$auto(r1, 0x0, 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
unshare$auto(0x40000080)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0)
ppoll$auto(&(0x7f0000000440)={r2, 0x4, 0x1}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0x930)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0)

53.89702386s ago: executing program 7 (id=2317):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto(r0, 0x9210640d, 0xffffffffffffffff)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x3a, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20000804)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, 0x0)
statmount$auto(0x0, 0x0, 0x1ff, 0x3)
unshare$auto(0x4000007f)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x200000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x2, 0x0)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000000)=""/122, 0x7a)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x68881, 0x0)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100))
r4 = mq_open$auto(0x0, 0x83, 0x7, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x380001}, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(r5, 0x0, 0x20040000)
mmap$auto(0x3, 0x20009, 0x4000000000df, 0x7fffffff, 0x401, 0x8003)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd12\x00', 0x60342, 0x0)
fstat$auto(r6, 0x0)
r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x4610, 0x0)

39.699563315s ago: executing program 37 (id=2314):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0)
ioctl$auto_IOC_PR_RELEASE(r1, 0x401070ca, 0x0)

38.513399218s ago: executing program 38 (id=2317):
r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$auto(r0, 0x9210640d, 0xffffffffffffffff)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x3a, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20000804)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, 0x0)
statmount$auto(0x0, 0x0, 0x1ff, 0x3)
unshare$auto(0x4000007f)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x200000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x2, 0x0)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000000)=""/122, 0x7a)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x68881, 0x0)
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100))
r4 = mq_open$auto(0x0, 0x83, 0x7, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x380001}, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(r5, 0x0, 0x20040000)
mmap$auto(0x3, 0x20009, 0x4000000000df, 0x7fffffff, 0x401, 0x8003)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd12\x00', 0x60342, 0x0)
fstat$auto(r6, 0x0)
r7 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x4610, 0x0)

36.949478947s ago: executing program 8 (id=2351):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0x4, 0x9b72, 0x7, 0x27ffd)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x2, 0x73)
pipe2$auto(0x0, 0x0)
io_uring_setup$auto(0x7e1b, 0x0)
r1 = socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x141e83, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
read$auto(r0, 0x0, 0x73)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x3, 0x5, 0x6, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, r1)
waitid$auto_P_PGID(0x2, 0xffffffffffffffff, 0x0, 0x1, 0x0)
pwrite64$auto(0xc8, 0x0, 0xe, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x3, 0x2, 0x88)

36.684262887s ago: executing program 8 (id=2352):
r0 = bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="267466a62958b213d250b71567a2a1295dcda93d5e4652b7354db9aa73473eedabc1b8c84a09f249e39b0dc0956b69", @ANYRES16=r3, @ANYBLOB="00022abd7000ffdbdf255f0000006800c8002cc63c58a5b98fa7d6eca4e325a871c9238b1227015c8ff1128759b6240baa3220e665cce23cabccaec79442d2d13f81ea41d5fa902b641033041ec5fe134ff839900c46bbb2b2611ed8b1e82058680778641f42bde1b309108bbf7bc04afefe8c58df5708000b01ffffffff050020010e00000008000d00060000001c001b8004000300040002000400030005000100080000000400030004006c000600f7000706000004004100"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0xc804)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
ioctl$auto_UI_SET_KEYBIT(r0, 0x40045565, &(0x7f0000000140)=0xc)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
getuid()

35.606298774s ago: executing program 8 (id=2354):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
read$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xcc)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3b)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0x2, 0x801, 0x106)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x4, @old_prog_fd=r1}, 0xa3)
bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x10004, 0x7, 0x9, 0x7f, @prog_cnt=0x42c, 0x0, 0x80000005, 0xf, 0xb, 0x5}, 0x4)

34.629091278s ago: executing program 8 (id=2355):
r0 = socket(0xa, 0x5, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
timer_create$auto(0x0, 0x0, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r1, 0x300000000000)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x100, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "107c4c"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1)
set_mempolicy_home_node$auto(0x2, 0x2010001, 0x0, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
shutdown$auto(r0, 0xfff)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0)
read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000)
r4 = ioctl$auto_TUNGETVNETBE2(r2, 0x800454df, &(0x7f0000000040)=0xf)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000010c0)={'pimreg1\x00', <r5=>0x0})
getpeername$auto(r4, &(0x7f0000001100)=@xdp={0x2c, 0x4, r5, 0x1b}, &(0x7f0000001140)=0x10)

32.954980957s ago: executing program 8 (id=2356):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff)
write$auto(r1, 0x0, 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
unshare$auto(0x40000080)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0)
ppoll$auto(&(0x7f0000000440)={r2, 0x4, 0x1}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0x930)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0)

29.807788077s ago: executing program 8 (id=2359):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
inotify_init1$auto(0x3000000000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/comm\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x2, 0x3a)
inotify_init1$auto(0x3000000000000)
r0 = io_uring_setup$auto(0x4, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, r0, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)

22.746687189s ago: executing program 4 (id=2371):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0)
write$auto(0x3, 0x0, 0xfdef)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008)
statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x20, 0x940, 0x1ffde, 0x2, 0x4, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x20000081, 0x3, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x7, 0x9, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffc, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281)
sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4081)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x18000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x18, 0xa, 0x80000000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x7}, 0x80000007, 0x4008)
r1 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
sysfs$auto(0x2, 0x2, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
fstatfs$auto(r1, &(0x7f0000000140)={0x7, 0x400, 0x80, 0x3d24c65d, 0x3ff, 0x80, 0xe6e, {[0x48b2, 0x1]}, 0x3, 0x1, 0x0, [0x0, 0xb9, 0x5ac, 0x5]})
socket$nl_generic(0x10, 0x3, 0x10)

21.143415669s ago: executing program 4 (id=2375):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffb)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0x5, 0x8000000008011, r1, 0x8000)
ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x401)
close_range$auto(0x2, 0xa, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x20301, 0x0)
ioctl$auto_UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000280)={0xb8e, 0x0, {0x5, 0xe3, 0x202, {0x5, 0x3}, {0x80, 0x6}, @ramp={0x9, 0xf18f, {0x9, 0x10, 0x1, 0xfffe}}}, {0xffff, 0x2, 0x5, {0xcb, 0x100}, {0xfff, 0x1}, @ramp={0x7, 0x4, {0x11, 0xffff, 0xfffe, 0x6}}}})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto(r3, 0x80045438, 0xffffffffffffffff)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r4, &(0x7f0000001540)=""/209, 0xd1)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r5, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r6 = bpf$auto(0x1ec, &(0x7f00000000c0)=@enable_stats={0x1}, 0x7)
madvise$auto(0x108000, 0x800032, 0x40)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
ioctl$auto_UI_SET_ABSBIT(r6, 0x40045567, &(0x7f0000000000)=0x8)

21.012318571s ago: executing program 1 (id=2376):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r0, 0x5608, 0x0)
r1 = socket(0x1e, 0xc, 0x1ff)
get_robust_list$auto(0x0, 0x0, 0x0)
read$auto(r1, 0x0, 0x201)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getresuid$auto(0x0, 0x0, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socket(0x2, 0x1, 0x84)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0009, 0x7ff)
preadv$auto(0x40000000000003, 0x0, 0x5, 0x8, 0x5)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r2, 0x0, 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0)
ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mlock$auto(0x112, 0x80006)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0xfffffffffffffbfc, 0x4020009, 0x24db193a, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x5, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

19.868342951s ago: executing program 4 (id=2377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000400), r0)
sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x3, 0x6)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1)
sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r1, 0x0, 0x8041)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="48110000", @ANYBLOB="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"], 0x1148}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xe}, 0x800009}, 0x5, 0x20000000)
openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x630000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x28a101, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x25b, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x40)
openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0)
socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xbad7, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
pidfd_open$auto(0x1, 0x0)
write$auto(0x3, 0x0, 0x100085)

18.347525546s ago: executing program 1 (id=2378):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0x0, 0x0, 0x2)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto(r0, 0x1, r0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_clone3(&(0x7f0000000640)={0x80000000, 0x0, 0x0, 0x0, {0x4000015}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
acct$auto(0x0)
shmctl$auto_SHM_INFO(0xffffffff, 0xe, &(0x7f0000000340)={{0x19e, 0xee00, 0x0, 0x9e, 0x800, 0x1, 0x3}, 0x1, 0x100000000, 0x50aed9ac, 0x7, @inferred=r3, @inferred=r3, 0x5, 0x0, 0x0, &(0x7f0000000280)="6fd9fffbf55daeb5af4053b5ce4504288b432ce3445a8fbb1fc3857a60751e386a601bf6c5438eb21b0df89220e04d3e82ff9cfe800c5cab2f4931f7a73d86a2756443373d5c5e88b257d93d714be85b161d3d73bfbbdc4da7f8550f1eb78d1c8f527a76cecef7c49ee109702eefbeb8ead25c63a8eb228cf18b23a36a6d78ab73ef9053c6741c"})
sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={0x0, 0x4c8}, 0x1, 0x0, 0x0, 0xc4}, 0x40)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto(r4, 0x5419, 0xffffffffffffffff)
unshare$auto(0x8000000)
semget$auto(0x0, 0x2e4a, 0x8000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x6}, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)

18.252644149s ago: executing program 4 (id=2379):
unshare$auto(0x40000082)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
get_mempolicy$auto(&(0x7f0000000000)=0x4, &(0x7f0000000080)=0x2, 0x9, 0x0, 0x4)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'})
sendmsg$auto_WG_CMD_SET_DEVICE(r1, 0x0, 0x810)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400201, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, 0x0, 0x4000040)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xefffffffffff0001, 0x15)
prctl$auto(0x13b, 0x1, 0x4, 0x5, 0x2)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c07, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
ioctl$auto(r3, 0x4008af13, r3)
syslog$auto(0x4, 0x0, 0x0)

17.011574906s ago: executing program 1 (id=2380):
madvise$auto(0x0, 0x2000040080000004, 0xb)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x601, 0x0)
write$auto(r1, &(0x7f00000002c0)='1\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e)
write$auto(r0, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = socket(0x2, 0x801, 0x6)
openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg/1:0:0:0\x00', 0x4980, 0x0)
setsockopt$auto(r3, 0x1, 0x12, 0x0, 0xa4)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r4 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3)
fchmod$auto(r4, 0x0)
syslog$auto(0x3, 0x0, 0x5)
poll$auto(0x0, 0x7f, 0x9)
pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)

16.183236566s ago: executing program 4 (id=2381):
timer_settime$auto(0xffffffff, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10008}, {0x9, 0x2}}, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = prctl$auto_SIGCONT(0x401, 0x12, 0xffffffffffffffff, 0x2, 0x2)
getsockopt$auto_SO_MEMINFO(r1, 0x200b, 0x37, 0x0, &(0x7f00000000c0))
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r2, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
getsockopt$auto_SO_ACCEPTCONN(r0, 0x800, 0x1e, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
mmap$auto(0x4, 0x9, 0x2000000000000dd, 0x9b72, r0, 0x7ffd)
unshare$auto(0x40000080)
socket(0x29, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x80000001]}, 0x0, 0x0, &(0x7f0000001040))
read$auto(r3, 0x0, 0x20)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0xc014)

15.818018739s ago: executing program 1 (id=2382):
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)

15.64386533s ago: executing program 1 (id=2383):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
fspick$auto(0xffffffffffffffff, 0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff)
write$auto(r1, 0x0, 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
unshare$auto(0x40000080)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0)
ppoll$auto(&(0x7f0000000440)={r2, 0x4, 0x1}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0x930)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0)

13.949008553s ago: executing program 39 (id=2359):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
inotify_init1$auto(0x3000000000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)
socket(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/comm\x00', 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x2, 0x3a)
inotify_init1$auto(0x3000000000000)
r0 = io_uring_setup$auto(0x4, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, r0, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r1)

13.910044132s ago: executing program 4 (id=2385):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0xcb00, 0x0)
getpid()
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1)
sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844)
getsockopt$auto_SO_MEMINFO(r1, 0x7, 0x37, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r4, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6)
sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ffc300", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25450000002d001a006cb15d87dd4a2d46f7482597b3eb9f3d90a79bb5cfe2ecb05c9146711566246bdb523ea1eb07bfc32a00000012003400c4cd3d430fdc438a5627614ac47700000800dc00050000000500ee000d0000000500c20007000000"], 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

13.789384345s ago: executing program 1 (id=2386):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e)
shmctl$auto_IPC_RMID(0x0, 0x0, 0x0)
chown$auto(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x3f)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x40}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
setreuid$auto(0x0, 0x7fffffffffffffff)

5.405572328s ago: executing program 9 (id=2391):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x10000000000006, 0xffffffffffffffff, 0x4, 0x2f)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x3, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, <r1=>0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}})
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/tracing/tracing_on\x00', 0x5b9040, 0x0)
open(0x0, 0x22040, 0x75)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
link$auto(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0)
mmap$auto(0x0, 0x202000a, 0x3, 0xeb3, r2, 0x8000)
mmap$auto(0x0, 0x7, 0x1000000000003, 0xeb1, r0, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram3\x00', 0x0, 0x0)
getrlimit$auto(0xc, 0x0)
fstatfs$auto(r0, &(0x7f0000000180)={0xfffffffffffff71b, 0x0, 0x8, 0x5, 0xc, 0x1, 0x6, {[0xffffffff, 0x7ff]}, 0x2, 0xfff, 0x58, [0x7f, 0x1, 0x17be]})
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, &(0x7f0000000040))
ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0)

4.178321197s ago: executing program 9 (id=2392):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = timerfd_create$auto(0x1, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0)
getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50, 0x10000}, 0x1000)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0)
r2 = pidfd_open$auto(0x1, 0x0)
r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xc, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x800, 0x5, 0x2, 0x1]}, 0x0)
r5 = fcntl$auto_F_UNLCK(r3, 0x206, 0x2)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5)
sendmsg$auto_NL80211_CMD_DEL_STATION(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x620, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_NONCES={0x79, 0xf3, "7b02fe3442a95f695fbe60f6880e76c41ee6d9c9aaa9413cdf014d45fe4a3126a66f91f0c832767bd58c2c0c2ac1250702272fa029105edc7899c7bc76ac52573920b3e1c4fdda6d1b645261f0bd83871b7e8f7b7e4d3a8b8ca022193688c6f0cf98728bf38b813d4b5a328d6d1c4e8f56709af396"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x1}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0xffff}, @NL80211_ATTR_STA_WME={0xc, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xa9d5}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x554, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x550, 0x2, "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"}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xc}]}, 0x620}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pread64$auto(r4, 0x0, 0x5946, 0x7f)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
msgsnd$auto(0x0, &(0x7f0000000040)={0x5, 0x20}, 0x1000, 0xfffffffc)
sendfile$auto(r1, 0x3, 0x0, 0x400000000006)
timerfd_settime$auto(r0, 0x3, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0)
r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto_EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000000)=0x1)
read$auto(r0, 0x0, 0x20)
syz_clone(0xa00c2000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.972075121s ago: executing program 2 (id=2393):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x250, 0x10, 0x1}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0xf, 0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x602, 0x1)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
fanotify_mark$auto(0x0, 0x451, 0xa, r5, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fallocate$auto(r6, 0x0, 0x400000a, 0x4b)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14)
ioctl$auto(r3, 0x2, 0x6)
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3880, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, 0x0, 0x4000)

3.780713169s ago: executing program 2 (id=2394):
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x1, 0x84)
futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$auto(r2, &(0x7f0000000080)=@in={0x28}, 0x68)
getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
ioctl$auto(0x3, 0x541b, 0x38)
clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/008/001\x00', 0x298ec0, 0x0)
io_uring_setup$auto(0x1, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
setrlimit$auto(0x3a90a817, &(0x7f0000000180)={0x9, 0x3})
socket(0x2, 0x3, 0xa)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$auto(r4, 0x4b4b, r4)

3.244435355s ago: executing program 9 (id=2395):
r0 = socket(0x2, 0x1, 0x106)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0))
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
write$auto(0x3, 0x0, 0x100082)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r5, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
close_range$auto(0x2, 0x8, 0x0)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18)
setsockopt$auto(r0, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)

2.849202801s ago: executing program 2 (id=2396):
socket(0x2, 0x8000b, 0x106)
init_module$auto(0x0, 0xffff9, 0x0)
pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x1, 0x0, 0x6, 0x8001, 0x5d5, 0x200ffc, 0x9, 0xcf1, 0x100000003, 0x3, 0x0, 0x2f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'})
ioperm$auto(0x7, 0x5, 0x2)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0)
sendfile$auto(r1, r1, &(0x7f0000000040)=0x8010, 0x788b)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e)
flock$auto(r3, 0x6)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
flock$auto(r4, 0x1)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
flock$auto(r5, 0x2)
msgctl$auto_MSG_INFO(0x790, 0xc, &(0x7f0000000240)={{0xc, <r6=>0xffffffffffffffff, 0xee01, 0x9, 0x3, 0x2, 0xe}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x1, 0x80000000000004, 0x7f, 0x0, 0x7fffffff, 0xa, 0xffff, 0xb, 0xe, @raw=0x9, @raw=0x6})
ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000002c0)={0x0, <r7=>0x0, 0x5, 0xe})
r8 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0)
msgctl$auto_MSG_INFO(0x1, 0xc, &(0x7f0000000380)={{0x7fff, r6, r7, 0x6b, 0x7005, 0x9, 0x4}, &(0x7f0000000300)=0x81, &(0x7f0000000340)=0xfb, 0x7, 0x7, 0x373, 0x8, 0x5, 0x5, 0x7, 0x1, @inferred=r8, @raw=0x9})
r9 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff)
sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
flock$auto(r5, 0x2)
close_range$auto(r2, 0xffffffffffffffff, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x7fffffff, 0xd, 0x0, 0x8)

2.377438552s ago: executing program 2 (id=2397):
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = socket(0xa, 0x3, 0x3b)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0)
r1 = socket(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0)
sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x40000)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xc2c02, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
shutdown$auto(r0, 0xf5)
ioctl$auto_TCFLSH2(r2, 0x5453, 0x0)
prctl$auto(0x16, 0x1, 0x0, 0x7fffffff, 0x4)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr$auto(r4, 0x0, 0x7b)
pidfd_open$auto(r4, 0x8000)
write$auto_ftrace_set_event_fops_trace_events(r3, &(0x7f0000000680), 0x0)
setfsgid$auto(0xee01)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)

2.084761451s ago: executing program 9 (id=2398):
socket(0xa, 0x3, 0x73)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
setfsuid$auto(0xee00)
cachestat$auto(r3, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)
r4 = socket(0xa, 0x5, 0x84)
sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c)
ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x34, 0x28, &(0x7f0000000280)='!{\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00'})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x0)
sendto$auto(r3, 0x0, 0x13, 0x3ff, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x3}}, 0x20)

1.286853206s ago: executing program 2 (id=2399):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x1, 0x84)
futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800)
bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0)
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
ioprio_set$auto(0x2, 0x800000000, 0xa8a)
setsockopt$auto(r0, 0x0, 0x80000001, 0x0, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e1842, 0x0)
ioctl$auto(0xffffffffffffffff, 0x0, 0xfffffffffffff4e0)
open(&(0x7f0000000340)='./file0\x00', 0x404801, 0xd1)
execve$auto(0x0, 0x0, 0x0)
rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00')
r1 = socket(0x8, 0xa, 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

991.762299ms ago: executing program 9 (id=2400):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0)
ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}])
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x5)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r2 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$auto(r2, 0x0, 0xa)
write$auto(r2, 0x0, 0x81)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1)

805.029655ms ago: executing program 2 (id=2401):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x234e40, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r0, 0x0, 0xa3d9)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socket(0xa, 0x801, 0x106)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x31c480, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0x400caed0, r1)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0)
close_range$auto(0x2, 0x8, 0x0)

0s ago: executing program 9 (id=2402):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x7fff)
r1 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x401bf, 0x7352, 0x37, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x10, 0x1fff, 0x203, 0x838b, 0x84, 0x12, 0x100, 0x5, 0x0, 0x7ff, [0x0, 0x10000000000006, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x3, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x400000000001ff, 0xb06d, 0x10001, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x2010]}, 0x1fe, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
fchdir$auto(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0)
socket(0x10, 0x2, 0x0)
exit$auto(0x7)
getcwd$auto(0x0, 0xffffffffffffffff)
bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)=@info={r0, 0xfdb, 0x2}, 0x894)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0)
ppoll$auto(&(0x7f0000000040)={r6, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
flistxattr$auto(r5, &(0x7f0000000080)='\\\\\x00', 0x0)
sendmsg$auto_TIPC_NL_PEER_REMOVE(r7, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20100000", @ANYRES16, @ANYBLOB="030026bd7000fedbdf25140000000c00078006000200ffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x20008105}, 0x40)
io_uring_setup$auto(0x4, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x2, 0xbf7a, 0x0, r5, [0xc94, 0x1, 0x4], {0x3, 0x3, 0x5, 0x80000001, 0x5c, 0xd, 0x2, 0x62c, 0x80000001}, {0x1, 0x80000000, 0x10, 0x1, 0x7fffffff, 0x0, 0x7807, 0x5, 0x6}})
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000826bd7000fedbdf251700000014002d800800c280bca1be4f0898998460d52a2e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x80)

kernel console output (not intermixed with test programs):

slave_1: entered allmulticast mode
[  886.906647][T16389] bridge_slave_1: entered promiscuous mode
[  887.421575][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.469464][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.720729][T16389] team0: Port device team_slave_0 added
[  887.796256][T16389] team0: Port device team_slave_1 added
[  887.971854][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.999826][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  888.088702][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  888.136014][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.153959][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  888.269644][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.699791][T11839] Bluetooth: hci8: command tx timeout
[  888.774048][T16389] hsr_slave_0: entered promiscuous mode
[  888.831065][T16389] hsr_slave_1: entered promiscuous mode
[  888.853216][T16389] debugfs: 'hsr0' already exists in 'hsr'
[  888.894344][T16389] Cannot create hsr debugfs directory
[  889.055512][T16431] program syz.5.2195 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  889.584899][T16439] FAULT_INJECTION: forcing a failure.
[  889.584899][T16439] name failslab, interval 1, probability 0, space 0, times 0
[  889.650090][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.5.2198 Not tainted syzkaller #0 PREEMPT(full) 
[  889.650123][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  889.650134][T16439] Call Trace:
[  889.650141][T16439]  <TASK>
[  889.650148][T16439]  dump_stack_lvl+0x16c/0x1f0
[  889.650175][T16439]  should_fail_ex+0x512/0x640
[  889.650204][T16439]  ? __kmalloc_cache_noprof+0x5f/0x780
[  889.650226][T16439]  should_failslab+0xc2/0x120
[  889.650252][T16439]  __kmalloc_cache_noprof+0x72/0x780
[  889.650270][T16439]  ? vkms_plane_duplicate_state+0x45/0x130
[  889.650303][T16439]  ? vkms_plane_duplicate_state+0x45/0x130
[  889.650329][T16439]  vkms_plane_duplicate_state+0x45/0x130
[  889.650357][T16439]  drm_atomic_get_plane_state+0x20e/0x590
[  889.650386][T16439]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  889.650414][T16439]  ? __pfx___might_resched+0x10/0x10
[  889.650441][T16439]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  889.650470][T16439]  ? __mutex_lock+0x1c5/0x1060
[  889.650492][T16439]  ? rcu_is_watching+0x12/0xc0
[  889.650536][T16439]  drm_client_modeset_commit_locked+0x14d/0x580
[  889.650570][T16439]  drm_client_modeset_commit+0x4f/0x80
[  889.650599][T16439]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  889.650627][T16439]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  889.650650][T16439]  drm_fbdev_client_restore+0x2c/0x40
[  889.650672][T16439]  drm_client_dev_restore+0x1f6/0x2a0
[  889.650704][T16439]  drm_release+0x2c4/0x360
[  889.650731][T16439]  ? __pfx_drm_release+0x10/0x10
[  889.650756][T16439]  __fput+0x402/0xb70
[  889.650787][T16439]  task_work_run+0x150/0x240
[  889.650816][T16439]  ? __pfx_task_work_run+0x10/0x10
[  889.650845][T16439]  ? __pfx___do_sys_close_range+0x10/0x10
[  889.650872][T16439]  exit_to_user_mode_loop+0xec/0x130
[  889.650900][T16439]  do_syscall_64+0x426/0xfa0
[  889.650925][T16439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.650943][T16439] RIP: 0033:0x7fbc80b8f749
[  889.650958][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.650975][T16439] RSP: 002b:00007fbc8199f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  889.650994][T16439] RAX: 0000000000000000 RBX: 00007fbc80de5fa0 RCX: 00007fbc80b8f749
[  889.651005][T16439] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  889.651015][T16439] RBP: 00007fbc80c13f91 R08: 0000000000000000 R09: 0000000000000000
[  889.651026][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.651036][T16439] R13: 00007fbc80de6038 R14: 00007fbc80de5fa0 R15: 00007ffce213a958
[  889.651061][T16439]  </TASK>
[  889.968581][T16389] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  890.067278][T16389] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  890.082250][T16442] tipc: Trying to set illegal importance in message
[  890.206748][T16389] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  890.244488][T16389] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  890.579772][T16389] 8021q: adding VLAN 0 to HW filter on device bond0
[  890.676748][T16389] 8021q: adding VLAN 0 to HW filter on device team0
[  890.761460][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  890.768714][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  890.784143][T11839] Bluetooth: hci8: command tx timeout
[  890.849424][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  890.856587][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.870072][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.532651][T16479] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  892.654832][T16479] CIFS mount error: No usable UNC path provided in device string!
[  892.654832][T16479] 
[  892.752308][T16479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  892.791585][T16389] veth0_vlan: entered promiscuous mode
[  892.860139][T11839] Bluetooth: hci8: command tx timeout
[  892.941496][T16389] veth1_vlan: entered promiscuous mode
[  893.090662][T16389] veth0_macvtap: entered promiscuous mode
[  893.171771][T16389] veth1_macvtap: entered promiscuous mode
[  893.237792][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  893.308878][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  893.418654][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  893.472982][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.672666][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  893.709649][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  894.295191][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.339225][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.466071][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 937 with max blocks 10 with error 117
[  894.513348][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.557987][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.567716][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  894.567716][T12036] 
[  894.641218][T16496] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  894.651973][T16496] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  894.682814][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1385 with max blocks 11 with error 117
[  894.707355][T16496] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  894.734198][T16496] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  894.770966][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  894.770966][T12036] 
[  894.859401][T16496] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  894.998214][T16496] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  895.013255][T16496] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  895.111928][T16496] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  895.211225][T16496] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  895.232755][T16496] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  895.263671][T16496] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  895.305670][T16496] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  895.367223][T16496] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  895.389072][T16496] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  895.404511][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2208'.
[  895.432542][T16496] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  895.511059][T16496] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  895.546586][T16496] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  895.607002][T16496] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  895.648074][T16496] CPU0 is offline.
[  896.412965][T16513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2209'.
[  896.665022][T16513] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.706865][T11839] Bluetooth: hci1: command 0x0406 tx timeout
[  896.712987][T15906] Bluetooth: hci0: command 0x0406 tx timeout
[  896.780105][T11839] Bluetooth: hci4: command 0x0c1a tx timeout
[  897.019904][T11839] Bluetooth: hci5: command 0x0c1a tx timeout
[  897.135402][T16513] bridge_slave_1 (unregistering): left allmulticast mode
[  897.216588][T16513] bridge_slave_1 (unregistering): left promiscuous mode
[  897.264077][T11839] Bluetooth: hci6: command 0x0c1a tx timeout
[  897.311198][T16513] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.419853][T11839] Bluetooth: hci7: command 0x0c1a tx timeout
[  897.579855][T11839] Bluetooth: hci8: command 0x0c1a tx timeout
[  897.672195][T16526] tipc: Started in network mode
[  897.677080][T16526] tipc: Node identity ee00, cluster identity 4711
[  897.714112][T16526] tipc: Node number set to 60928
[  898.420115][   T30] audit: type=1326 audit(4294967392.320:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16538 comm="syz.7.2216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78f858f749 code=0x0
[  898.860275][T11839] Bluetooth: hci4: command 0x0c1a tx timeout
[  899.100508][T11839] Bluetooth: hci5: command 0x0c1a tx timeout
[  899.343795][T11839] Bluetooth: hci6: command 0x0c1a tx timeout
[  899.505236][T11839] Bluetooth: hci7: command 0x0c1a tx timeout
[  899.660950][T11839] Bluetooth: hci8: command 0x0c1a tx timeout
[  900.940640][T11839] Bluetooth: hci4: command 0x0c1a tx timeout
[  901.179648][T11839] Bluetooth: hci5: command 0x0c1a tx timeout
[  901.424101][T11839] Bluetooth: hci6: command 0x0c1a tx timeout
[  901.579698][T11839] Bluetooth: hci7: command 0x0c1a tx timeout
[  901.712229][T16571] vhci_hcd: invalid port number 21
[  901.717373][T16571] vhci_hcd: invalid port number 21
[  901.741120][T11839] Bluetooth: hci8: command 0x0c1a tx timeout
[  902.694652][T16575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'.
[  903.203655][T16581] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  903.263741][T11839] Bluetooth: hci5: command 0x0c1a tx timeout
[  903.452911][T16597] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  904.911476][T16618] FAULT_INJECTION: forcing a failure.
[  904.911476][T16618] name failslab, interval 1, probability 0, space 0, times 0
[  905.000948][T16618] CPU: 1 UID: 0 PID: 16618 Comm: syz.4.2230 Not tainted syzkaller #0 PREEMPT(full) 
[  905.000976][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  905.000986][T16618] Call Trace:
[  905.000993][T16618]  <TASK>
[  905.000999][T16618]  dump_stack_lvl+0x16c/0x1f0
[  905.001028][T16618]  should_fail_ex+0x512/0x640
[  905.001055][T16618]  ? __kmalloc_cache_noprof+0x5f/0x780
[  905.001077][T16618]  should_failslab+0xc2/0x120
[  905.001109][T16618]  __kmalloc_cache_noprof+0x72/0x780
[  905.001128][T16618]  ? vkms_plane_duplicate_state+0x45/0x130
[  905.001160][T16618]  ? vkms_plane_duplicate_state+0x45/0x130
[  905.001187][T16618]  vkms_plane_duplicate_state+0x45/0x130
[  905.001215][T16618]  drm_atomic_get_plane_state+0x20e/0x590
[  905.001245][T16618]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  905.001274][T16618]  ? __pfx___might_resched+0x10/0x10
[  905.001301][T16618]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  905.001330][T16618]  ? __mutex_lock+0x1c5/0x1060
[  905.001353][T16618]  ? rcu_is_watching+0x12/0xc0
[  905.001397][T16618]  drm_client_modeset_commit_locked+0x14d/0x580
[  905.001430][T16618]  drm_client_modeset_commit+0x4f/0x80
[  905.001459][T16618]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  905.001488][T16618]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  905.001511][T16618]  drm_fbdev_client_restore+0x2c/0x40
[  905.001533][T16618]  drm_client_dev_restore+0x1f6/0x2a0
[  905.001565][T16618]  drm_release+0x2c4/0x360
[  905.001593][T16618]  ? __pfx_drm_release+0x10/0x10
[  905.001618][T16618]  __fput+0x402/0xb70
[  905.001649][T16618]  task_work_run+0x150/0x240
[  905.001679][T16618]  ? __pfx_task_work_run+0x10/0x10
[  905.001708][T16618]  ? __pfx___do_sys_close_range+0x10/0x10
[  905.001734][T16618]  exit_to_user_mode_loop+0xec/0x130
[  905.001763][T16618]  do_syscall_64+0x426/0xfa0
[  905.001788][T16618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.001806][T16618] RIP: 0033:0x7fd32298f749
[  905.001821][T16618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  905.001839][T16618] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  905.001857][T16618] RAX: 0000000000000000 RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  905.001868][T16618] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  905.001878][T16618] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  905.001888][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  905.001898][T16618] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  905.001928][T16618]  </TASK>
[  906.079660][   T30] audit: type=1326 audit(4294967399.900:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.4.2231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd32298f749 code=0x0
[  907.457242][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'.
[  907.530685][T16666] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2237'.
[  907.785313][T16672] hub 8-0:1.0: USB hub found
[  907.836078][T16675] random: crng reseeded on system resumption
[  907.878732][T16672] hub 8-0:1.0: 1 port detected
[  909.393291][T16691] FAULT_INJECTION: forcing a failure.
[  909.393291][T16691] name failslab, interval 1, probability 0, space 0, times 0
[  909.446587][T16690] FAULT_INJECTION: forcing a failure.
[  909.446587][T16690] name failslab, interval 1, probability 0, space 0, times 0
[  909.490383][T16691] CPU: 1 UID: 0 PID: 16691 Comm: syz.4.2240 Not tainted syzkaller #0 PREEMPT(full) 
[  909.490409][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  909.490420][T16691] Call Trace:
[  909.490426][T16691]  <TASK>
[  909.490433][T16691]  dump_stack_lvl+0x16c/0x1f0
[  909.490463][T16691]  should_fail_ex+0x512/0x640
[  909.490492][T16691]  ? __kmalloc_noprof+0xca/0x880
[  909.490524][T16691]  should_failslab+0xc2/0x120
[  909.490550][T16691]  __kmalloc_noprof+0xdd/0x880
[  909.490579][T16691]  ? drm_atomic_state_init+0x17b/0x320
[  909.490611][T16691]  ? drm_atomic_state_init+0x17b/0x320
[  909.490637][T16691]  drm_atomic_state_init+0x17b/0x320
[  909.490662][T16691]  ? __kasan_kmalloc+0xaa/0xb0
[  909.490685][T16691]  drm_atomic_state_alloc+0xd3/0x120
[  909.490713][T16691]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  909.490743][T16691]  ? __pfx___might_resched+0x10/0x10
[  909.490769][T16691]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  909.490798][T16691]  ? __mutex_lock+0x1c5/0x1060
[  909.490820][T16691]  ? rcu_is_watching+0x12/0xc0
[  909.490863][T16691]  drm_client_modeset_commit_locked+0x14d/0x580
[  909.490896][T16691]  drm_client_modeset_commit+0x4f/0x80
[  909.490925][T16691]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  909.490955][T16691]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  909.490978][T16691]  drm_fbdev_client_restore+0x2c/0x40
[  909.491000][T16691]  drm_client_dev_restore+0x1f6/0x2a0
[  909.491032][T16691]  drm_release+0x2c4/0x360
[  909.491060][T16691]  ? __pfx_drm_release+0x10/0x10
[  909.491093][T16691]  __fput+0x402/0xb70
[  909.491124][T16691]  task_work_run+0x150/0x240
[  909.491154][T16691]  ? __pfx_task_work_run+0x10/0x10
[  909.491184][T16691]  ? __pfx___do_sys_close_range+0x10/0x10
[  909.491211][T16691]  exit_to_user_mode_loop+0xec/0x130
[  909.491241][T16691]  do_syscall_64+0x426/0xfa0
[  909.491266][T16691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.491284][T16691] RIP: 0033:0x7fd32298f749
[  909.491299][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.491317][T16691] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  909.491334][T16691] RAX: 0000000000000000 RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  909.491346][T16691] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  909.491355][T16691] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  909.491366][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.491376][T16691] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  909.491401][T16691]  </TASK>
[  909.792930][T16690] CPU: 1 UID: 0 PID: 16690 Comm: syz.7.2241 Not tainted syzkaller #0 PREEMPT(full) 
[  909.792958][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  909.792969][T16690] Call Trace:
[  909.792976][T16690]  <TASK>
[  909.792983][T16690]  dump_stack_lvl+0x16c/0x1f0
[  909.793011][T16690]  should_fail_ex+0x512/0x640
[  909.793040][T16690]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  909.793071][T16690]  should_failslab+0xc2/0x120
[  909.793096][T16690]  kmem_cache_alloc_noprof+0x75/0x6e0
[  909.793114][T16690]  ? __proc_create+0x2ce/0x8e0
[  909.793147][T16690]  ? __proc_create+0x2ce/0x8e0
[  909.793173][T16690]  __proc_create+0x2ce/0x8e0
[  909.793201][T16690]  ? __pfx___proc_create+0x10/0x10
[  909.793232][T16690]  ? proc_create_reg+0xe3/0x180
[  909.793263][T16690]  proc_mkdir+0x81/0x170
[  909.793290][T16690]  ? __pfx_proc_mkdir+0x10/0x10
[  909.793316][T16690]  ? __pfx_ndisc_net_init+0x10/0x10
[  909.793348][T16690]  ? __pfx_ipv6_proc_init_net+0x10/0x10
[  909.793372][T16690]  ipv6_proc_init_net+0xdd/0x1e0
[  909.793398][T16690]  ops_init+0x1e2/0x5f0
[  909.793421][T16690]  setup_net+0x100/0x390
[  909.793440][T16690]  ? __pfx_setup_net+0x10/0x10
[  909.793461][T16690]  ? debug_mutex_init+0x37/0x70
[  909.793483][T16690]  copy_net_ns+0x2f8/0x690
[  909.793507][T16690]  create_new_namespaces+0x3ea/0xa90
[  909.793534][T16690]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  909.793557][T16690]  ksys_unshare+0x45b/0xa40
[  909.793583][T16690]  ? __pfx_ksys_unshare+0x10/0x10
[  909.793608][T16690]  ? xfd_validate_state+0x61/0x180
[  909.793641][T16690]  __x64_sys_unshare+0x31/0x40
[  909.793665][T16690]  do_syscall_64+0xcd/0xfa0
[  909.793689][T16690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.793707][T16690] RIP: 0033:0x7f78f858f749
[  909.793722][T16690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.793740][T16690] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  909.793757][T16690] RAX: ffffffffffffffda RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  909.793768][T16690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  909.793779][T16690] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  909.793789][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.793800][T16690] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  909.793824][T16690]  </TASK>
[  911.496956][T16704] ovs_��: entered promiscuous mode
[  911.958575][T11839] Bluetooth: hci4: unexpected event 0x32 length: 727 > 9
[  912.055428][T16734] ptp ptp0: delete virtual clock ptp5
[  912.253233][T16734] ptp ptp0: delete virtual clock ptp4
[  912.334089][T16734] ptp ptp0: delete virtual clock ptp3
[  912.354975][T11839] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[  912.426030][T16734] ptp ptp0: only physical clock in use now
[  913.427990][T16755] FAULT_INJECTION: forcing a failure.
[  913.427990][T16755] name failslab, interval 1, probability 0, space 0, times 0
[  913.497389][T16755] CPU: 1 UID: 0 PID: 16755 Comm: syz.5.2258 Not tainted syzkaller #0 PREEMPT(full) 
[  913.497417][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  913.497428][T16755] Call Trace:
[  913.497435][T16755]  <TASK>
[  913.497442][T16755]  dump_stack_lvl+0x16c/0x1f0
[  913.497470][T16755]  should_fail_ex+0x512/0x640
[  913.497498][T16755]  ? __kmalloc_node_noprof+0xcd/0x8a0
[  913.497524][T16755]  should_failslab+0xc2/0x120
[  913.497549][T16755]  __kmalloc_node_noprof+0xe0/0x8a0
[  913.497570][T16755]  ? __get_vm_area_node+0x1dc/0x330
[  913.497594][T16755]  ? __vmalloc_node_range_noprof+0x3e5/0x1480
[  913.497627][T16755]  ? __vmalloc_node_range_noprof+0x3e5/0x1480
[  913.497653][T16755]  __vmalloc_node_range_noprof+0x3e5/0x1480
[  913.497680][T16755]  ? do_raw_spin_unlock+0x172/0x230
[  913.497703][T16755]  ? n_tty_open+0x1a/0x170
[  913.497733][T16755]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  913.497759][T16755]  ? console_unlock+0x184/0x210
[  913.497777][T16755]  ? __pfx_console_unlock+0x10/0x10
[  913.497797][T16755]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  913.497825][T16755]  ? n_tty_open+0x1a/0x170
[  913.497847][T16755]  __vmalloc_node_noprof+0xad/0xf0
[  913.497873][T16755]  ? n_tty_open+0x1a/0x170
[  913.497896][T16755]  ? __pfx_n_tty_open+0x10/0x10
[  913.497921][T16755]  n_tty_open+0x1a/0x170
[  913.497945][T16755]  ? __pfx_n_tty_open+0x10/0x10
[  913.497968][T16755]  tty_ldisc_open+0x9f/0x120
[  913.497985][T16755]  tty_ldisc_setup+0x40/0x100
[  913.498004][T16755]  tty_init_dev.part.0+0x1ec/0x500
[  913.498029][T16755]  tty_open+0xa4f/0xf90
[  913.498063][T16755]  ? __pfx_tty_open+0x10/0x10
[  913.498085][T16755]  ? chrdev_open+0x10b/0x6a0
[  913.498110][T16755]  ? __pfx_tty_open+0x10/0x10
[  913.498132][T16755]  chrdev_open+0x234/0x6a0
[  913.498153][T16755]  ? __pfx_apparmor_file_open+0x10/0x10
[  913.498180][T16755]  ? __pfx_chrdev_open+0x10/0x10
[  913.498205][T16755]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  913.498232][T16755]  do_dentry_open+0x982/0x1530
[  913.498254][T16755]  ? __pfx_chrdev_open+0x10/0x10
[  913.498282][T16755]  vfs_open+0x82/0x3f0
[  913.498316][T16755]  path_openat+0x1de4/0x2cb0
[  913.498345][T16755]  ? __pfx_path_openat+0x10/0x10
[  913.498374][T16755]  ? __lock_acquire+0xb8a/0x1c90
[  913.498402][T16755]  do_filp_open+0x20b/0x470
[  913.498422][T16755]  ? __pfx_do_filp_open+0x10/0x10
[  913.498461][T16755]  ? alloc_fd+0x471/0x7d0
[  913.498487][T16755]  do_sys_openat2+0x11b/0x1d0
[  913.498513][T16755]  ? __pfx_do_sys_openat2+0x10/0x10
[  913.498551][T16755]  __x64_sys_openat+0x174/0x210
[  913.498580][T16755]  ? __pfx___x64_sys_openat+0x10/0x10
[  913.498618][T16755]  do_syscall_64+0xcd/0xfa0
[  913.498643][T16755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.498662][T16755] RIP: 0033:0x7fbc80b8f749
[  913.498677][T16755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  913.498695][T16755] RSP: 002b:00007fbc8199f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  913.498713][T16755] RAX: ffffffffffffffda RBX: 00007fbc80de5fa0 RCX: 00007fbc80b8f749
[  913.498724][T16755] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  913.498736][T16755] RBP: 00007fbc80c13f91 R08: 0000000000000000 R09: 0000000000000000
[  913.498746][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.498757][T16755] R13: 00007fbc80de6038 R14: 00007fbc80de5fa0 R15: 00007ffce213a958
[  913.498781][T16755]  </TASK>
[  913.857764][T16755] syz.5.2258: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  913.875196][T16755] CPU: 1 UID: 0 PID: 16755 Comm: syz.5.2258 Not tainted syzkaller #0 PREEMPT(full) 
[  913.875222][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  913.875233][T16755] Call Trace:
[  913.875239][T16755]  <TASK>
[  913.875246][T16755]  dump_stack_lvl+0x16c/0x1f0
[  913.875274][T16755]  warn_alloc+0x248/0x3a0
[  913.875295][T16755]  ? __pfx_warn_alloc+0x10/0x10
[  913.875312][T16755]  ? dump_stack_lvl+0x1a3/0x1f0
[  913.875335][T16755]  ? should_fail_ex+0x354/0x640
[  913.875369][T16755]  ? rcu_is_watching+0x12/0xc0
[  913.875391][T16755]  ? trace_kmalloc+0x2b/0xd0
[  913.875413][T16755]  ? __kmalloc_node_noprof+0x364/0x8a0
[  913.875433][T16755]  ? __get_vm_area_node+0x1dc/0x330
[  913.875457][T16755]  ? __vmalloc_node_range_noprof+0x3e5/0x1480
[  913.875489][T16755]  __vmalloc_node_range_noprof+0xfe2/0x1480
[  913.875516][T16755]  ? do_raw_spin_unlock+0x172/0x230
[  913.875540][T16755]  ? n_tty_open+0x1a/0x170
[  913.875570][T16755]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  913.875596][T16755]  ? console_unlock+0x184/0x210
[  913.875614][T16755]  ? __pfx_console_unlock+0x10/0x10
[  913.875635][T16755]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  913.875663][T16755]  ? n_tty_open+0x1a/0x170
[  913.875685][T16755]  __vmalloc_node_noprof+0xad/0xf0
[  913.875711][T16755]  ? n_tty_open+0x1a/0x170
[  913.875734][T16755]  ? __pfx_n_tty_open+0x10/0x10
[  913.875758][T16755]  n_tty_open+0x1a/0x170
[  913.875781][T16755]  ? __pfx_n_tty_open+0x10/0x10
[  913.875804][T16755]  tty_ldisc_open+0x9f/0x120
[  913.875822][T16755]  tty_ldisc_setup+0x40/0x100
[  913.875841][T16755]  tty_init_dev.part.0+0x1ec/0x500
[  913.875866][T16755]  tty_open+0xa4f/0xf90
[  913.875892][T16755]  ? __pfx_tty_open+0x10/0x10
[  913.875914][T16755]  ? chrdev_open+0x10b/0x6a0
[  913.875940][T16755]  ? __pfx_tty_open+0x10/0x10
[  913.875961][T16755]  chrdev_open+0x234/0x6a0
[  913.875982][T16755]  ? __pfx_apparmor_file_open+0x10/0x10
[  913.876010][T16755]  ? __pfx_chrdev_open+0x10/0x10
[  913.876034][T16755]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  913.876060][T16755]  do_dentry_open+0x982/0x1530
[  913.876082][T16755]  ? __pfx_chrdev_open+0x10/0x10
[  913.876116][T16755]  vfs_open+0x82/0x3f0
[  913.876146][T16755]  path_openat+0x1de4/0x2cb0
[  913.876175][T16755]  ? __pfx_path_openat+0x10/0x10
[  913.876196][T16755]  ? __lock_acquire+0xb8a/0x1c90
[  913.876231][T16755]  do_filp_open+0x20b/0x470
[  913.876252][T16755]  ? __pfx_do_filp_open+0x10/0x10
[  913.876291][T16755]  ? alloc_fd+0x471/0x7d0
[  913.876317][T16755]  do_sys_openat2+0x11b/0x1d0
[  913.876344][T16755]  ? __pfx_do_sys_openat2+0x10/0x10
[  913.876383][T16755]  __x64_sys_openat+0x174/0x210
[  913.876411][T16755]  ? __pfx___x64_sys_openat+0x10/0x10
[  913.876450][T16755]  do_syscall_64+0xcd/0xfa0
[  913.876475][T16755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.876493][T16755] RIP: 0033:0x7fbc80b8f749
[  913.876509][T16755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  913.876526][T16755] RSP: 002b:00007fbc8199f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  913.876544][T16755] RAX: ffffffffffffffda RBX: 00007fbc80de5fa0 RCX: 00007fbc80b8f749
[  913.876556][T16755] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  913.876566][T16755] RBP: 00007fbc80c13f91 R08: 0000000000000000 R09: 0000000000000000
[  913.876577][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.876586][T16755] R13: 00007fbc80de6038 R14: 00007fbc80de5fa0 R15: 00007ffce213a958
[  913.876611][T16755]  </TASK>
[  913.876667][T16755] Mem-Info:
[  914.242699][T16755] active_anon:13254 inactive_anon:0 isolated_anon:0
[  914.242699][T16755]  active_file:22552 inactive_file:38434 isolated_file:0
[  914.242699][T16755]  unevictable:768 dirty:675 writeback:13
[  914.242699][T16755]  slab_reclaimable:12365 slab_unreclaimable:109917
[  914.242699][T16755]  mapped:55242 shmem:2466 pagetables:1445
[  914.242699][T16755]  sec_pagetables:0 bounce:0
[  914.242699][T16755]  kernel_misc_reclaimable:0
[  914.242699][T16755]  free:1235910 free_pcp:11162 free_cma:0
[  914.349606][T16755] Node 0 active_anon:53052kB inactive_anon:0kB active_file:90204kB inactive_file:153612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220972kB dirty:2664kB writeback:0kB shmem:8336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  914.420139][T15906] Bluetooth: hci5: command 0x0c1a tx timeout
[  914.449611][T16755] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  914.509654][T16755] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  914.584350][T16755] lowmem_reserve[]: 0 2485 2487 2487 2487
[  914.595219][T16755] Node 0 DMA32 free:1017916kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53104kB inactive_anon:0kB active_file:90204kB inactive_file:153612kB unevictable:1536kB writepending:2144kB zspages:0kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:39756kB local_pcp:39756kB free_cma:0kB
[  914.649423][T16755] lowmem_reserve[]: 0 0 1 1 1
[  914.659613][T16755] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  914.725001][T16755] lowmem_reserve[]: 0 0 0 0 0
[  914.735183][T16755] Node 1 Normal free:3910408kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3104kB local_pcp:3104kB free_cma:0kB
[  914.810132][T16755] lowmem_reserve[]: 0 0 0 0 0
[  914.826366][T16755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  914.861653][T16755] Node 0 DMA32: 1949*4kB (UM) 1321*8kB (UM) 1172*16kB (UM) 790*32kB (UM) 279*64kB (UM) 298*128kB (UM) 260*256kB (UME) 155*512kB (UM) 62*1024kB (UM) 17*2048kB (UM) 160*4096kB (UM) = 1017980kB
[  914.928450][T16755] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  914.968462][T16755] Node 1 Normal: 176*4kB (UME) 19*8kB (UME) 29*16kB (UME) 187*32kB (UE) 104*64kB (UME) 31*128kB (UE) 13*256kB (UME) 2*512kB (UE) 3*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3910408kB
[  915.007324][T16755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.029769][T16755] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  915.057202][T16755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.077110][T16755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  915.097309][T16755] 63635 total pagecache pages
[  915.106610][T16755] 1 pages in swap cache
[  915.116798][T16755] Free swap  = 124992kB
[  915.125437][T16755] Total swap = 124996kB
[  915.134087][T16755] 2097051 pages RAM
[  915.142280][T16755] 0 pages HighMem/MovableOnly
[  915.156654][T16755] 428695 pages reserved
[  915.171898][T16755] 0 pages cma reserved
[  915.183115][T16755] tty tty29: ldisc open failed (-12), clearing slot 28
[  915.198090][T16757] ttynull ttynull: ldisc open failed (-12), clearing slot 0
[  916.668622][T16786] FAULT_INJECTION: forcing a failure.
[  916.668622][T16786] name failslab, interval 1, probability 0, space 0, times 0
[  916.757221][T16786] CPU: 1 UID: 0 PID: 16786 Comm: syz.8.2264 Not tainted syzkaller #0 PREEMPT(full) 
[  916.757249][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  916.757260][T16786] Call Trace:
[  916.757267][T16786]  <TASK>
[  916.757274][T16786]  dump_stack_lvl+0x16c/0x1f0
[  916.757304][T16786]  should_fail_ex+0x512/0x640
[  916.757334][T16786]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  916.757359][T16786]  should_failslab+0xc2/0x120
[  916.757390][T16786]  kmem_cache_alloc_noprof+0x75/0x6e0
[  916.757409][T16786]  ? vm_area_dup+0x27/0x8d0
[  916.757431][T16786]  ? vm_area_dup+0x27/0x8d0
[  916.757446][T16786]  vm_area_dup+0x27/0x8d0
[  916.757465][T16786]  dup_mmap+0x86f/0x2280
[  916.757501][T16786]  ? __pfx_dup_mmap+0x10/0x10
[  916.757545][T16786]  copy_process+0x3f0c/0x76a0
[  916.757569][T16786]  ? __pfx___futex_wait+0x10/0x10
[  916.757586][T16786]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  916.757618][T16786]  ? __pfx_copy_process+0x10/0x10
[  916.757641][T16786]  ? find_held_lock+0x2b/0x80
[  916.757665][T16786]  ? futex_private_hash_put+0xd5/0x190
[  916.757694][T16786]  kernel_clone+0xfc/0x930
[  916.757720][T16786]  ? __pfx_kernel_clone+0x10/0x10
[  916.757758][T16786]  __do_sys_clone+0xce/0x120
[  916.757782][T16786]  ? __pfx___do_sys_clone+0x10/0x10
[  916.757818][T16786]  ? xfd_validate_state+0x61/0x180
[  916.757844][T16786]  ? __pfx_do_writev+0x10/0x10
[  916.757872][T16786]  do_syscall_64+0xcd/0xfa0
[  916.757897][T16786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.757916][T16786] RIP: 0033:0x7f23dcb8f749
[  916.757932][T16786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  916.757951][T16786] RSP: 002b:00007f23dadf5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  916.757969][T16786] RAX: ffffffffffffffda RBX: 00007f23dcde6180 RCX: 00007f23dcb8f749
[  916.757981][T16786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411
[  916.757992][T16786] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  916.758003][T16786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  916.758014][T16786] R13: 00007f23dcde6218 R14: 00007f23dcde6180 R15: 00007fffbb16e6b8
[  916.758039][T16786]  </TASK>
[  918.620817][T16813] FAULT_INJECTION: forcing a failure.
[  918.620817][T16813] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  918.639282][T16814] IPVS: length: 131 != 8
[  918.762234][T16813] CPU: 1 UID: 0 PID: 16813 Comm: syz.7.2272 Not tainted syzkaller #0 PREEMPT(full) 
[  918.762261][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  918.762273][T16813] Call Trace:
[  918.762280][T16813]  <TASK>
[  918.762288][T16813]  dump_stack_lvl+0x16c/0x1f0
[  918.762317][T16813]  should_fail_ex+0x512/0x640
[  918.762349][T16813]  should_fail_alloc_page+0xe7/0x130
[  918.762382][T16813]  prepare_alloc_pages+0x3c2/0x610
[  918.762411][T16813]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  918.762435][T16813]  ? rcu_is_watching+0x12/0xc0
[  918.762456][T16813]  ? trace_mm_page_alloc+0x11f/0x1a0
[  918.762481][T16813]  ? __alloc_frozen_pages_noprof+0x292/0x2470
[  918.762502][T16813]  ? stack_trace_save+0x8e/0xc0
[  918.762526][T16813]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  918.762555][T16813]  ? kmem_cache_alloc_node_noprof+0x28a/0x770
[  918.762575][T16813]  ? __get_vm_area_node+0x1ca/0x330
[  918.762600][T16813]  ? __vmalloc_node_noprof+0xad/0xf0
[  918.762624][T16813]  ? n_tty_open+0x1a/0x170
[  918.762646][T16813]  ? tty_ldisc_open+0x9f/0x120
[  918.762661][T16813]  ? tty_ldisc_setup+0x40/0x100
[  918.762677][T16813]  ? tty_init_dev.part.0+0x1ec/0x500
[  918.762698][T16813]  ? tty_open+0xa4f/0xf90
[  918.762718][T16813]  ? chrdev_open+0x234/0x6a0
[  918.762742][T16813]  ? __x64_sys_openat+0x174/0x210
[  918.762769][T16813]  ? do_syscall_64+0xcd/0xfa0
[  918.762790][T16813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.762812][T16813]  alloc_pages_bulk_noprof+0x77a/0x1410
[  918.762832][T16813]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  918.762864][T16813]  ? policy_nodemask+0xea/0x4e0
[  918.762892][T16813]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  918.762913][T16813]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  918.762949][T16813]  kasan_populate_vmalloc+0x112/0x2d0
[  918.762970][T16813]  ? alloc_vmap_area+0x8b5/0x29e0
[  918.762998][T16813]  alloc_vmap_area+0x960/0x29e0
[  918.763032][T16813]  ? __pfx_alloc_vmap_area+0x10/0x10
[  918.763063][T16813]  __get_vm_area_node+0x1ca/0x330
[  918.763101][T16813]  __vmalloc_node_range_noprof+0x271/0x1480
[  918.763129][T16813]  ? n_tty_open+0x1a/0x170
[  918.763152][T16813]  ? do_raw_spin_unlock+0x172/0x230
[  918.763176][T16813]  ? n_tty_open+0x1a/0x170
[  918.763207][T16813]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  918.763233][T16813]  ? console_unlock+0x184/0x210
[  918.763252][T16813]  ? __pfx_console_unlock+0x10/0x10
[  918.763273][T16813]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  918.763302][T16813]  ? n_tty_open+0x1a/0x170
[  918.763324][T16813]  __vmalloc_node_noprof+0xad/0xf0
[  918.763351][T16813]  ? n_tty_open+0x1a/0x170
[  918.763374][T16813]  ? __pfx_n_tty_open+0x10/0x10
[  918.763399][T16813]  n_tty_open+0x1a/0x170
[  918.763422][T16813]  ? __pfx_n_tty_open+0x10/0x10
[  918.763446][T16813]  tty_ldisc_open+0x9f/0x120
[  918.763463][T16813]  tty_ldisc_setup+0x40/0x100
[  918.763483][T16813]  tty_init_dev.part.0+0x1ec/0x500
[  918.763508][T16813]  tty_open+0xa4f/0xf90
[  918.763535][T16813]  ? __pfx_tty_open+0x10/0x10
[  918.763557][T16813]  ? chrdev_open+0x10b/0x6a0
[  918.763582][T16813]  ? __pfx_tty_open+0x10/0x10
[  918.763603][T16813]  chrdev_open+0x234/0x6a0
[  918.763625][T16813]  ? __pfx_apparmor_file_open+0x10/0x10
[  918.763653][T16813]  ? __pfx_chrdev_open+0x10/0x10
[  918.763676][T16813]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  918.763703][T16813]  do_dentry_open+0x982/0x1530
[  918.763725][T16813]  ? __pfx_chrdev_open+0x10/0x10
[  918.763752][T16813]  vfs_open+0x82/0x3f0
[  918.763782][T16813]  path_openat+0x1de4/0x2cb0
[  918.763811][T16813]  ? __pfx_path_openat+0x10/0x10
[  918.763833][T16813]  ? __lock_acquire+0xb8a/0x1c90
[  918.763861][T16813]  do_filp_open+0x20b/0x470
[  918.763882][T16813]  ? __pfx_do_filp_open+0x10/0x10
[  918.763921][T16813]  ? alloc_fd+0x471/0x7d0
[  918.763947][T16813]  do_sys_openat2+0x11b/0x1d0
[  918.763974][T16813]  ? __pfx_do_sys_openat2+0x10/0x10
[  918.764011][T16813]  __x64_sys_openat+0x174/0x210
[  918.764039][T16813]  ? __pfx___x64_sys_openat+0x10/0x10
[  918.764117][T16813]  do_syscall_64+0xcd/0xfa0
[  918.764143][T16813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  918.764162][T16813] RIP: 0033:0x7f78f858f749
[  918.764179][T16813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  918.764197][T16813] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  918.764216][T16813] RAX: ffffffffffffffda RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  918.764228][T16813] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  918.764240][T16813] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  918.764251][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  918.764261][T16813] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  918.764287][T16813]  </TASK>
[  919.232385][    C1] vkms_vblank_simulate: vblank timer overrun
[  919.241730][T16813] tty tty29: ldisc open failed (-12), clearing slot 28
[  919.359417][T16817] ptrace attach of "./syz-executor exec"[16818] was attempted by "./syz-executor exec"[16817]
[  919.606900][T16810] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  919.735422][T16821] FAULT_INJECTION: forcing a failure.
[  919.735422][T16821] name failslab, interval 1, probability 0, space 0, times 0
[  919.779738][T16821] CPU: 1 UID: 0 PID: 16821 Comm: syz.7.2274 Not tainted syzkaller #0 PREEMPT(full) 
[  919.779765][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  919.779776][T16821] Call Trace:
[  919.779783][T16821]  <TASK>
[  919.779790][T16821]  dump_stack_lvl+0x16c/0x1f0
[  919.779819][T16821]  should_fail_ex+0x512/0x640
[  919.779848][T16821]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  919.779870][T16821]  should_failslab+0xc2/0x120
[  919.779896][T16821]  kmem_cache_alloc_noprof+0x75/0x6e0
[  919.779914][T16821]  ? mpol_new+0x11b/0x2d0
[  919.779941][T16821]  ? mpol_new+0x11b/0x2d0
[  919.779961][T16821]  mpol_new+0x11b/0x2d0
[  919.779985][T16821]  do_set_mempolicy+0x83/0x480
[  919.780009][T16821]  ? __pfx_do_set_mempolicy+0x10/0x10
[  919.780035][T16821]  ? __x64_sys_futex+0x1e0/0x4c0
[  919.780073][T16821]  kernel_set_mempolicy+0x1c4/0x1e0
[  919.780098][T16821]  ? __pfx_kernel_set_mempolicy+0x10/0x10
[  919.780131][T16821]  do_syscall_64+0xcd/0xfa0
[  919.780156][T16821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.780174][T16821] RIP: 0033:0x7f78f858f749
[  919.780190][T16821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  919.780209][T16821] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee
[  919.780227][T16821] RAX: ffffffffffffffda RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  919.780239][T16821] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000004006
[  919.780250][T16821] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  919.780261][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.780272][T16821] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  919.780296][T16821]  </TASK>
[  919.964125][    C1] vkms_vblank_simulate: vblank timer overrun
[  920.316861][T16829] QAT: Stopping all acceleration devices.
[  920.512958][T15906] Bluetooth: hci7: unexpected event 0x3e length: 726 > 260
[  920.512989][T15906] Bluetooth: hci7: unexpected subevent 0x0a length: 725 > 30
[  922.048716][T16849] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input26
[  922.186628][T16851] Process accounting resumed
[  922.581282][T16855] FAULT_INJECTION: forcing a failure.
[  922.581282][T16855] name failslab, interval 1, probability 0, space 0, times 0
[  922.634564][T16802] delete_channel: no stack
[  922.652914][T16855] CPU: 1 UID: 0 PID: 16855 Comm: syz.8.2282 Not tainted syzkaller #0 PREEMPT(full) 
[  922.652941][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  922.652952][T16855] Call Trace:
[  922.652960][T16855]  <TASK>
[  922.652967][T16855]  dump_stack_lvl+0x16c/0x1f0
[  922.652996][T16855]  should_fail_ex+0x512/0x640
[  922.653024][T16855]  ? __kmalloc_noprof+0xca/0x880
[  922.653066][T16855]  should_failslab+0xc2/0x120
[  922.653096][T16855]  __kmalloc_noprof+0xdd/0x880
[  922.653126][T16855]  ? drm_atomic_state_init+0x17b/0x320
[  922.653160][T16855]  ? drm_atomic_state_init+0x17b/0x320
[  922.653186][T16855]  drm_atomic_state_init+0x17b/0x320
[  922.653213][T16855]  ? __kasan_kmalloc+0xaa/0xb0
[  922.653235][T16855]  drm_atomic_state_alloc+0xd3/0x120
[  922.653264][T16855]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  922.653294][T16855]  ? __pfx___might_resched+0x10/0x10
[  922.653321][T16855]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  922.653350][T16855]  ? __mutex_lock+0x1c5/0x1060
[  922.653372][T16855]  ? rcu_is_watching+0x12/0xc0
[  922.653417][T16855]  drm_client_modeset_commit_locked+0x14d/0x580
[  922.653450][T16855]  drm_client_modeset_commit+0x4f/0x80
[  922.653479][T16855]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  922.653509][T16855]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  922.653532][T16855]  drm_fbdev_client_restore+0x2c/0x40
[  922.653554][T16855]  drm_client_dev_restore+0x1f6/0x2a0
[  922.653587][T16855]  drm_release+0x2c4/0x360
[  922.653616][T16855]  ? __pfx_drm_release+0x10/0x10
[  922.653640][T16855]  __fput+0x402/0xb70
[  922.653673][T16855]  task_work_run+0x150/0x240
[  922.653703][T16855]  ? __pfx_task_work_run+0x10/0x10
[  922.653732][T16855]  ? __pfx___do_sys_close_range+0x10/0x10
[  922.653760][T16855]  exit_to_user_mode_loop+0xec/0x130
[  922.653789][T16855]  do_syscall_64+0x426/0xfa0
[  922.653814][T16855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.653832][T16855] RIP: 0033:0x7f23dcb8f749
[  922.653848][T16855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  922.653866][T16855] RSP: 002b:00007f23dd97a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  922.653884][T16855] RAX: 0000000000000000 RBX: 00007f23dcde5fa0 RCX: 00007f23dcb8f749
[  922.653896][T16855] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  922.653906][T16855] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  922.653917][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  922.653927][T16855] R13: 00007f23dcde6038 R14: 00007f23dcde5fa0 R15: 00007fffbb16e6b8
[  922.653954][T16855]  </TASK>
[  923.631369][T16864] netlink: 354 bytes leftover after parsing attributes in process `syz.8.2283'.
[  924.411429][T16886] FAULT_INJECTION: forcing a failure.
[  924.411429][T16886] name failslab, interval 1, probability 0, space 0, times 0
[  924.490899][T16886] CPU: 1 UID: 0 PID: 16886 Comm: syz.4.2290 Not tainted syzkaller #0 PREEMPT(full) 
[  924.490928][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  924.490939][T16886] Call Trace:
[  924.490947][T16886]  <TASK>
[  924.490954][T16886]  dump_stack_lvl+0x16c/0x1f0
[  924.490983][T16886]  should_fail_ex+0x512/0x640
[  924.491011][T16886]  ? __kmalloc_noprof+0xca/0x880
[  924.491044][T16886]  should_failslab+0xc2/0x120
[  924.491070][T16886]  __kmalloc_noprof+0xdd/0x880
[  924.491108][T16886]  ? drm_atomic_state_init+0x17b/0x320
[  924.491141][T16886]  ? drm_atomic_state_init+0x17b/0x320
[  924.491166][T16886]  drm_atomic_state_init+0x17b/0x320
[  924.491193][T16886]  ? __kasan_kmalloc+0xaa/0xb0
[  924.491216][T16886]  drm_atomic_state_alloc+0xd3/0x120
[  924.491245][T16886]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  924.491274][T16886]  ? __pfx___might_resched+0x10/0x10
[  924.491302][T16886]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  924.491331][T16886]  ? __mutex_lock+0x1c5/0x1060
[  924.491354][T16886]  ? rcu_is_watching+0x12/0xc0
[  924.491397][T16886]  drm_client_modeset_commit_locked+0x14d/0x580
[  924.491430][T16886]  drm_client_modeset_commit+0x4f/0x80
[  924.491460][T16886]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  924.491490][T16886]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  924.491513][T16886]  drm_fbdev_client_restore+0x2c/0x40
[  924.491536][T16886]  drm_client_dev_restore+0x1f6/0x2a0
[  924.491568][T16886]  drm_release+0x2c4/0x360
[  924.491597][T16886]  ? __pfx_drm_release+0x10/0x10
[  924.491621][T16886]  __fput+0x402/0xb70
[  924.491653][T16886]  task_work_run+0x150/0x240
[  924.491683][T16886]  ? __pfx_task_work_run+0x10/0x10
[  924.491712][T16886]  ? __pfx___do_sys_close_range+0x10/0x10
[  924.491739][T16886]  exit_to_user_mode_loop+0xec/0x130
[  924.491768][T16886]  do_syscall_64+0x426/0xfa0
[  924.491793][T16886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.491812][T16886] RIP: 0033:0x7fd32298f749
[  924.491828][T16886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  924.491846][T16886] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  924.491865][T16886] RAX: 0000000000000000 RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  924.491876][T16886] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  924.491887][T16886] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  924.491898][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  924.491908][T16886] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  924.491940][T16886]  </TASK>
[  925.092510][T16883] [U] 	
[  925.095614][T16883] [U] 
[  925.098310][T16883] [U] 
[  925.101000][T16883] [U] 
[  925.103688][T16883] [U] 
[  925.118491][T16883] [U] 
[  925.121306][T16883] [U] 
[  925.124001][T16883] [U] 
[  925.126694][T16883] [U] 
[  925.143970][T16883] [U] 
[  925.146715][T16883] [U] 
[  925.149413][T16883] [U] 
[  925.152106][T16883] [U] 
[  925.220996][T16883] [U] 
[  925.223733][T16883] [U] 
[  925.226429][T16883] [U] 
[  925.229128][T16883] [U] 
[  925.329779][T16883] [U] 
[  925.332516][T16883] [U] 
[  925.335210][T16883] [U] 
[  925.337900][T16883] [U] 
[  925.375414][T16883] [U] 
[  925.378183][T16883] [U] 
[  925.380876][T16883] [U] 
[  925.383563][T16883] [U] 
[  925.421938][T16883] [U] 
[  925.424671][T16883] [U] 
[  925.427364][T16883] [U] 
[  925.430057][T16883] [U] 
[  925.500329][T16893] [U] 
[  925.658250][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1352 with max blocks 32 with error 117
[  925.748058][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  925.748058][T12036] 
[  925.792428][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1385 with max blocks 11 with error 117
[  925.866579][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  925.866579][T12036] 
[  926.384923][T16879] FAULT_INJECTION: forcing a failure.
[  926.384923][T16879] name failslab, interval 1, probability 0, space 0, times 0
[  926.443723][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.7.2288 Not tainted syzkaller #0 PREEMPT(full) 
[  926.443752][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  926.443764][T16879] Call Trace:
[  926.443771][T16879]  <TASK>
[  926.443778][T16879]  dump_stack_lvl+0x16c/0x1f0
[  926.443807][T16879]  should_fail_ex+0x512/0x640
[  926.443836][T16879]  ? __kmalloc_cache_node_noprof+0x62/0x7a0
[  926.443866][T16879]  should_failslab+0xc2/0x120
[  926.443891][T16879]  __kmalloc_cache_node_noprof+0x75/0x7a0
[  926.443913][T16879]  ? look_up_lock_class+0x59/0x150
[  926.443934][T16879]  ? __get_vm_area_node+0x101/0x330
[  926.443964][T16879]  ? __get_vm_area_node+0x101/0x330
[  926.443988][T16879]  __get_vm_area_node+0x101/0x330
[  926.444013][T16879]  ? __lock_acquire+0xb8a/0x1c90
[  926.444050][T16879]  __vmalloc_node_range_noprof+0x271/0x1480
[  926.444078][T16879]  ? n_tty_open+0x1a/0x170
[  926.444102][T16879]  ? do_raw_spin_unlock+0x172/0x230
[  926.444126][T16879]  ? n_tty_open+0x1a/0x170
[  926.444158][T16879]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  926.444185][T16879]  ? console_unlock+0x184/0x210
[  926.444204][T16879]  ? __pfx_console_unlock+0x10/0x10
[  926.444225][T16879]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  926.444255][T16879]  ? n_tty_open+0x1a/0x170
[  926.444278][T16879]  __vmalloc_node_noprof+0xad/0xf0
[  926.444305][T16879]  ? n_tty_open+0x1a/0x170
[  926.444328][T16879]  ? __pfx_n_tty_open+0x10/0x10
[  926.444353][T16879]  n_tty_open+0x1a/0x170
[  926.444377][T16879]  ? __pfx_n_tty_open+0x10/0x10
[  926.444401][T16879]  tty_ldisc_open+0x9f/0x120
[  926.444419][T16879]  tty_ldisc_setup+0x40/0x100
[  926.444439][T16879]  tty_init_dev.part.0+0x1ec/0x500
[  926.444464][T16879]  tty_open+0xa4f/0xf90
[  926.444491][T16879]  ? __pfx_tty_open+0x10/0x10
[  926.444514][T16879]  ? chrdev_open+0x10b/0x6a0
[  926.444540][T16879]  ? __pfx_tty_open+0x10/0x10
[  926.444561][T16879]  chrdev_open+0x234/0x6a0
[  926.444583][T16879]  ? __pfx_apparmor_file_open+0x10/0x10
[  926.444611][T16879]  ? __pfx_chrdev_open+0x10/0x10
[  926.444636][T16879]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  926.444663][T16879]  do_dentry_open+0x982/0x1530
[  926.444685][T16879]  ? __pfx_chrdev_open+0x10/0x10
[  926.444713][T16879]  vfs_open+0x82/0x3f0
[  926.444742][T16879]  path_openat+0x1de4/0x2cb0
[  926.444777][T16879]  ? __pfx_path_openat+0x10/0x10
[  926.444799][T16879]  ? __lock_acquire+0xb8a/0x1c90
[  926.444828][T16879]  do_filp_open+0x20b/0x470
[  926.444849][T16879]  ? __pfx_do_filp_open+0x10/0x10
[  926.444888][T16879]  ? alloc_fd+0x471/0x7d0
[  926.444914][T16879]  do_sys_openat2+0x11b/0x1d0
[  926.444941][T16879]  ? __pfx_do_sys_openat2+0x10/0x10
[  926.444979][T16879]  __x64_sys_openat+0x174/0x210
[  926.445006][T16879]  ? __pfx___x64_sys_openat+0x10/0x10
[  926.445052][T16879]  do_syscall_64+0xcd/0xfa0
[  926.445077][T16879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.445095][T16879] RIP: 0033:0x7f78f858f749
[  926.445111][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  926.445129][T16879] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  926.445148][T16879] RAX: ffffffffffffffda RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  926.445160][T16879] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  926.445171][T16879] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  926.445183][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  926.445194][T16879] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  926.445219][T16879]  </TASK>
[  926.446710][T16879] warn_alloc: 1 callbacks suppressed
[  926.446723][T16879] syz.7.2288: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  927.116665][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.7.2288 Not tainted syzkaller #0 PREEMPT(full) 
[  927.116694][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  927.116705][T16879] Call Trace:
[  927.116712][T16879]  <TASK>
[  927.116719][T16879]  dump_stack_lvl+0x16c/0x1f0
[  927.116748][T16879]  warn_alloc+0x248/0x3a0
[  927.116770][T16879]  ? __pfx_warn_alloc+0x10/0x10
[  927.116787][T16879]  ? rcu_is_watching+0x12/0xc0
[  927.116809][T16879]  ? __kmalloc_cache_node_noprof+0x2df/0x7a0
[  927.116838][T16879]  ? __kasan_kmalloc+0x8a/0xb0
[  927.116862][T16879]  ? __get_vm_area_node+0x208/0x330
[  927.116894][T16879]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  927.116923][T16879]  ? do_raw_spin_unlock+0x172/0x230
[  927.116947][T16879]  ? n_tty_open+0x1a/0x170
[  927.116979][T16879]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  927.117006][T16879]  ? console_unlock+0x184/0x210
[  927.117030][T16879]  ? __pfx_console_unlock+0x10/0x10
[  927.117061][T16879]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  927.117090][T16879]  ? n_tty_open+0x1a/0x170
[  927.117114][T16879]  __vmalloc_node_noprof+0xad/0xf0
[  927.117141][T16879]  ? n_tty_open+0x1a/0x170
[  927.117166][T16879]  ? __pfx_n_tty_open+0x10/0x10
[  927.117192][T16879]  n_tty_open+0x1a/0x170
[  927.117216][T16879]  ? __pfx_n_tty_open+0x10/0x10
[  927.117240][T16879]  tty_ldisc_open+0x9f/0x120
[  927.117259][T16879]  tty_ldisc_setup+0x40/0x100
[  927.117279][T16879]  tty_init_dev.part.0+0x1ec/0x500
[  927.117304][T16879]  tty_open+0xa4f/0xf90
[  927.117332][T16879]  ? __pfx_tty_open+0x10/0x10
[  927.117355][T16879]  ? chrdev_open+0x10b/0x6a0
[  927.117382][T16879]  ? __pfx_tty_open+0x10/0x10
[  927.117404][T16879]  chrdev_open+0x234/0x6a0
[  927.117426][T16879]  ? __pfx_apparmor_file_open+0x10/0x10
[  927.117456][T16879]  ? __pfx_chrdev_open+0x10/0x10
[  927.117481][T16879]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  927.117509][T16879]  do_dentry_open+0x982/0x1530
[  927.117544][T16879]  ? __pfx_chrdev_open+0x10/0x10
[  927.117572][T16879]  vfs_open+0x82/0x3f0
[  927.117603][T16879]  path_openat+0x1de4/0x2cb0
[  927.117638][T16879]  ? __pfx_path_openat+0x10/0x10
[  927.117662][T16879]  ? __lock_acquire+0xb8a/0x1c90
[  927.117691][T16879]  do_filp_open+0x20b/0x470
[  927.117713][T16879]  ? __pfx_do_filp_open+0x10/0x10
[  927.117753][T16879]  ? alloc_fd+0x471/0x7d0
[  927.117779][T16879]  do_sys_openat2+0x11b/0x1d0
[  927.117807][T16879]  ? __pfx_do_sys_openat2+0x10/0x10
[  927.117846][T16879]  __x64_sys_openat+0x174/0x210
[  927.117875][T16879]  ? __pfx___x64_sys_openat+0x10/0x10
[  927.117914][T16879]  do_syscall_64+0xcd/0xfa0
[  927.117939][T16879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.117958][T16879] RIP: 0033:0x7f78f858f749
[  927.117974][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  927.117993][T16879] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  927.118011][T16879] RAX: ffffffffffffffda RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  927.118023][T16879] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  927.118035][T16879] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  927.118053][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  927.118064][T16879] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  927.118090][T16879]  </TASK>
[  927.446576][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.546161][T16879] Mem-Info:
[  927.549304][T16879] active_anon:20545 inactive_anon:0 isolated_anon:0
[  927.549304][T16879]  active_file:22552 inactive_file:38440 isolated_file:0
[  927.549304][T16879]  unevictable:768 dirty:510 writeback:0
[  927.549304][T16879]  slab_reclaimable:12421 slab_unreclaimable:110330
[  927.549304][T16879]  mapped:62086 shmem:9667 pagetables:1447
[  927.549304][T16879]  sec_pagetables:0 bounce:0
[  927.549304][T16879]  kernel_misc_reclaimable:0
[  927.549304][T16879]  free:1223062 free_pcp:16215 free_cma:0
[  927.594788][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.601620][T16879] Node 0 active_anon:82180kB inactive_anon:0kB active_file:90204kB inactive_file:153628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:248344kB dirty:2036kB writeback:0kB shmem:37132kB shmem_thp:32768kB shmem_pmdmapped:30720kB anon_thp:0kB kernel_stack:13680kB pagetables:5656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  927.634532][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.641909][T16879] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  927.671730][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.678947][T16879] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  927.709418][T16879] lowmem_reserve[]: 0 2485 2487 2487 2487
[  927.715260][T16879] Node 0 DMA32 free:980292kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82180kB inactive_anon:0kB active_file:90204kB inactive_file:153628kB unevictable:1536kB writepending:2036kB zspages:64kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:47848kB local_pcp:47848kB free_cma:0kB
[  927.748950][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.756182][T16879] lowmem_reserve[]: 0 0 1 1 1
[  927.761853][T16879] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  927.791431][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.797565][T16879] lowmem_reserve[]: 0 0 0 0 0
[  927.802323][T16879] Node 1 Normal free:3896592kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17012kB local_pcp:17012kB free_cma:0kB
[  927.834590][    C1] vkms_vblank_simulate: vblank timer overrun
[  927.841083][T16879] lowmem_reserve[]: 0 0 0 0 0
[  927.847792][T16879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  927.870814][T16879] Node 0 DMA32: 1825*4kB (UM) 800*8kB (UM) 254*16kB (UM) 802*32kB (UME) 402*64kB (UME) 290*128kB (UM) 262*256kB (UME) 156*512kB (UM) 62*1024kB (UM) 4*2048kB (UM) 160*4096kB (UM) = 980260kB
[  927.893014][T16879] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  927.905714][T16879] Node 1 Normal: 5*4kB (UME) 3*8kB (UME) 1*16kB (M) 4*32kB (ME) 78*64kB (UME) 32*128kB (UME) 13*256kB (UME) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (ME) 946*4096kB (M) = 3896636kB
[  927.924607][T16879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  927.934514][T16879] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  927.944124][T16879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  927.955272][T16879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  927.975402][T16879] 70660 total pagecache pages
[  927.988561][T16879] 5 pages in swap cache
[  928.008687][T16879] Free swap  = 124916kB
[  928.018226][T16879] Total swap = 124996kB
[  928.029615][T16879] 2097051 pages RAM
[  928.033441][T16879] 0 pages HighMem/MovableOnly
[  928.047844][T16879] 428695 pages reserved
[  928.053204][T16879] 0 pages cma reserved
[  928.057305][T16879] tty tty29: ldisc open failed (-12), clearing slot 28
[  928.207844][T16908] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1384 with max blocks 1 with error 117
[  928.269690][T16908] EXT4-fs (sda1): This should not happen!! Data will be lost
[  928.269690][T16908] 
[  928.532579][T16912] ttynull ttynull: ldisc open failed (-12), clearing slot 0
[  928.947806][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'.
[  929.078919][T11839] Bluetooth: hci5: hcon ffff888033090000 sent 0 < count 256
[  930.016611][T16950] FAULT_INJECTION: forcing a failure.
[  930.016611][T16950] name failslab, interval 1, probability 0, space 0, times 0
[  930.141995][T16950] CPU: 1 UID: 0 PID: 16950 Comm: syz.4.2302 Not tainted syzkaller #0 PREEMPT(full) 
[  930.142038][T16950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  930.142049][T16950] Call Trace:
[  930.142056][T16950]  <TASK>
[  930.142064][T16950]  dump_stack_lvl+0x16c/0x1f0
[  930.142100][T16950]  should_fail_ex+0x512/0x640
[  930.142129][T16950]  ? __kmalloc_cache_noprof+0x5f/0x780
[  930.142152][T16950]  should_failslab+0xc2/0x120
[  930.142178][T16950]  __kmalloc_cache_noprof+0x72/0x780
[  930.142198][T16950]  ? vkms_plane_duplicate_state+0x45/0x130
[  930.142233][T16950]  ? vkms_plane_duplicate_state+0x45/0x130
[  930.142260][T16950]  vkms_plane_duplicate_state+0x45/0x130
[  930.142289][T16950]  drm_atomic_get_plane_state+0x20e/0x590
[  930.142318][T16950]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  930.142347][T16950]  ? __pfx___might_resched+0x10/0x10
[  930.142375][T16950]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  930.142404][T16950]  ? __mutex_lock+0x1c5/0x1060
[  930.142427][T16950]  ? rcu_is_watching+0x12/0xc0
[  930.142472][T16950]  drm_client_modeset_commit_locked+0x14d/0x580
[  930.142506][T16950]  drm_client_modeset_commit+0x4f/0x80
[  930.142535][T16950]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  930.142565][T16950]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  930.142589][T16950]  drm_fbdev_client_restore+0x2c/0x40
[  930.142611][T16950]  drm_client_dev_restore+0x1f6/0x2a0
[  930.142644][T16950]  drm_release+0x2c4/0x360
[  930.142672][T16950]  ? __pfx_drm_release+0x10/0x10
[  930.142697][T16950]  __fput+0x402/0xb70
[  930.142728][T16950]  task_work_run+0x150/0x240
[  930.142759][T16950]  ? __pfx_task_work_run+0x10/0x10
[  930.142788][T16950]  ? __pfx___do_sys_close_range+0x10/0x10
[  930.142816][T16950]  exit_to_user_mode_loop+0xec/0x130
[  930.142845][T16950]  do_syscall_64+0x426/0xfa0
[  930.142870][T16950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.142888][T16950] RIP: 0033:0x7fd32298f749
[  930.142905][T16950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  930.142922][T16950] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  930.142941][T16950] RAX: 0000000000000000 RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  930.142952][T16950] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  930.142963][T16950] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  930.142973][T16950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.142984][T16950] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  930.143010][T16950]  </TASK>
[  930.405708][    C1] vkms_vblank_simulate: vblank timer overrun
[  930.558404][T16954] FAULT_INJECTION: forcing a failure.
[  930.558404][T16954] name failslab, interval 1, probability 0, space 0, times 0
[  930.571708][T16954] CPU: 1 UID: 0 PID: 16954 Comm: syz.8.2303 Not tainted syzkaller #0 PREEMPT(full) 
[  930.571734][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  930.571744][T16954] Call Trace:
[  930.571751][T16954]  <TASK>
[  930.571759][T16954]  dump_stack_lvl+0x16c/0x1f0
[  930.571787][T16954]  should_fail_ex+0x512/0x640
[  930.571815][T16954]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  930.571838][T16954]  should_failslab+0xc2/0x120
[  930.571865][T16954]  kmem_cache_alloc_noprof+0x75/0x6e0
[  930.571885][T16954]  ? __kernfs_new_node+0xd2/0x8e0
[  930.571914][T16954]  ? __kernfs_new_node+0xd2/0x8e0
[  930.571936][T16954]  __kernfs_new_node+0xd2/0x8e0
[  930.571962][T16954]  ? __pfx___kernfs_new_node+0x10/0x10
[  930.571993][T16954]  ? find_held_lock+0x2b/0x80
[  930.572014][T16954]  ? kernfs_root+0xee/0x2a0
[  930.572042][T16954]  kernfs_new_node+0x13c/0x1e0
[  930.572073][T16954]  __kernfs_create_file+0x53/0x350
[  930.572102][T16954]  sysfs_add_file_mode_ns+0x207/0x3c0
[  930.572131][T16954]  sysfs_merge_group+0x1aa/0x340
[  930.572156][T16954]  ? __pfx_sysfs_merge_group+0x10/0x10
[  930.572184][T16954]  ? __pfx_dev_add_physical_location+0x10/0x10
[  930.572215][T16954]  ? bus_to_subsys+0x131/0x160
[  930.572239][T16954]  dpm_sysfs_add+0x237/0x280
[  930.572268][T16954]  device_add+0x9a6/0x1aa0
[  930.572287][T16954]  ? __pfx_device_add+0x10/0x10
[  930.572305][T16954]  ? rcu_is_watching+0x12/0xc0
[  930.572326][T16954]  ? lockdep_init_map_type+0x5c/0x280
[  930.572358][T16954]  input_register_device+0x7e8/0x1180
[  930.572379][T16954]  ? input_ff_create+0x256/0x350
[  930.572407][T16954]  uinput_ioctl_handler.isra.0+0x1357/0x1df0
[  930.572436][T16954]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  930.572464][T16954]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  930.572498][T16954]  ? find_held_lock+0x2b/0x80
[  930.572528][T16954]  ? __pfx_uinput_ioctl+0x10/0x10
[  930.572556][T16954]  __x64_sys_ioctl+0x18e/0x210
[  930.572585][T16954]  do_syscall_64+0xcd/0xfa0
[  930.572610][T16954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.572628][T16954] RIP: 0033:0x7f23dcb8f749
[  930.572644][T16954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  930.572661][T16954] RSP: 002b:00007f23dd97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  930.572678][T16954] RAX: ffffffffffffffda RBX: 00007f23dcde5fa0 RCX: 00007f23dcb8f749
[  930.572690][T16954] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009
[  930.572701][T16954] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  930.572711][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.572722][T16954] R13: 00007f23dcde6038 R14: 00007f23dcde5fa0 R15: 00007fffbb16e6b8
[  930.572746][T16954]  </TASK>
[  930.847219][    C1] vkms_vblank_simulate: vblank timer overrun
[  932.951557][T16973] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.2307: iget: checksum invalid
[  933.049933][T16973] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  933.148510][T16973] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.2307: iget: checksum invalid
[  933.222954][T16973] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  933.426723][T16973] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.2307: iget: checksum invalid
[  933.570902][T16973] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  933.683791][T16973] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.2307: iget: checksum invalid
[  933.742255][T16973] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  933.914295][T16973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  933.980163][T16973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  934.735424][T17011] FAULT_INJECTION: forcing a failure.
[  934.735424][T17011] name failslab, interval 1, probability 0, space 0, times 0
[  934.789682][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.7.2312 Not tainted syzkaller #0 PREEMPT(full) 
[  934.789710][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  934.789721][T17011] Call Trace:
[  934.789728][T17011]  <TASK>
[  934.789736][T17011]  dump_stack_lvl+0x16c/0x1f0
[  934.789763][T17011]  should_fail_ex+0x512/0x640
[  934.789792][T17011]  ? __kmalloc_cache_noprof+0x5f/0x780
[  934.789813][T17011]  should_failslab+0xc2/0x120
[  934.789840][T17011]  __kmalloc_cache_noprof+0x72/0x780
[  934.789860][T17011]  ? vkms_plane_duplicate_state+0x45/0x130
[  934.789894][T17011]  ? vkms_plane_duplicate_state+0x45/0x130
[  934.789921][T17011]  vkms_plane_duplicate_state+0x45/0x130
[  934.789950][T17011]  drm_atomic_get_plane_state+0x20e/0x590
[  934.789980][T17011]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  934.790009][T17011]  ? __pfx___might_resched+0x10/0x10
[  934.790036][T17011]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  934.790066][T17011]  ? __mutex_lock+0x1c5/0x1060
[  934.790090][T17011]  ? rcu_is_watching+0x12/0xc0
[  934.790141][T17011]  drm_client_modeset_commit_locked+0x14d/0x580
[  934.790174][T17011]  drm_client_modeset_commit+0x4f/0x80
[  934.790203][T17011]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  934.790233][T17011]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  934.790257][T17011]  drm_fbdev_client_restore+0x2c/0x40
[  934.790279][T17011]  drm_client_dev_restore+0x1f6/0x2a0
[  934.790313][T17011]  drm_release+0x2c4/0x360
[  934.790342][T17011]  ? __pfx_drm_release+0x10/0x10
[  934.790367][T17011]  __fput+0x402/0xb70
[  934.790398][T17011]  task_work_run+0x150/0x240
[  934.790428][T17011]  ? __pfx_task_work_run+0x10/0x10
[  934.790456][T17011]  ? __pfx___do_sys_close_range+0x10/0x10
[  934.790483][T17011]  exit_to_user_mode_loop+0xec/0x130
[  934.790513][T17011]  do_syscall_64+0x426/0xfa0
[  934.790537][T17011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.790556][T17011] RIP: 0033:0x7f78f858f749
[  934.790571][T17011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  934.790589][T17011] RSP: 002b:00007f78f9367038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  934.790608][T17011] RAX: 0000000000000000 RBX: 00007f78f87e5fa0 RCX: 00007f78f858f749
[  934.790619][T17011] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  934.790630][T17011] RBP: 00007f78f8613f91 R08: 0000000000000000 R09: 0000000000000000
[  934.790640][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.790651][T17011] R13: 00007f78f87e6038 R14: 00007f78f87e5fa0 R15: 00007ffc87f30f78
[  934.790676][T17011]  </TASK>
[  935.142141][T17018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28
[  936.944804][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  936.951344][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  937.560660][T17040] netlink: 62 bytes leftover after parsing attributes in process `syz.8.2318'.
[  939.045852][T17054] kfence: re-enabled
[  939.418278][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2323'.
[  939.487243][T17056] vlan1: entered promiscuous mode
[  939.509212][T17061] ptrace attach of ""[17062] was attempted by "./syz-executor exec"[17061]
[  939.541306][T17056] vlan1: entered allmulticast mode
[  939.602734][T17056] veth0_vlan: entered allmulticast mode
[  941.299403][T17072] random: crng reseeded on system resumption
[  942.788827][T17091] serio: Serial port ttyS2
[  944.003571][T17104] FAULT_INJECTION: forcing a failure.
[  944.003571][T17104] name failslab, interval 1, probability 0, space 0, times 0
[  944.039498][T17104] CPU: 1 UID: 0 PID: 17104 Comm: syz.8.2333 Not tainted syzkaller #0 PREEMPT(full) 
[  944.039533][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  944.039545][T17104] Call Trace:
[  944.039552][T17104]  <TASK>
[  944.039560][T17104]  dump_stack_lvl+0x16c/0x1f0
[  944.039590][T17104]  should_fail_ex+0x512/0x640
[  944.039619][T17104]  ? __kmalloc_cache_noprof+0x5f/0x780
[  944.039642][T17104]  should_failslab+0xc2/0x120
[  944.039667][T17104]  __kmalloc_cache_noprof+0x72/0x780
[  944.039686][T17104]  ? vkms_plane_duplicate_state+0x45/0x130
[  944.039720][T17104]  ? vkms_plane_duplicate_state+0x45/0x130
[  944.039748][T17104]  vkms_plane_duplicate_state+0x45/0x130
[  944.039776][T17104]  drm_atomic_get_plane_state+0x20e/0x590
[  944.039806][T17104]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  944.039835][T17104]  ? __pfx___might_resched+0x10/0x10
[  944.039863][T17104]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  944.039892][T17104]  ? __mutex_lock+0x1c5/0x1060
[  944.039916][T17104]  ? rcu_is_watching+0x12/0xc0
[  944.039960][T17104]  drm_client_modeset_commit_locked+0x14d/0x580
[  944.039994][T17104]  drm_client_modeset_commit+0x4f/0x80
[  944.040023][T17104]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  944.040052][T17104]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  944.040101][T17104]  drm_fbdev_client_restore+0x2c/0x40
[  944.040124][T17104]  drm_client_dev_restore+0x1f6/0x2a0
[  944.040157][T17104]  drm_release+0x2c4/0x360
[  944.040186][T17104]  ? __pfx_drm_release+0x10/0x10
[  944.040212][T17104]  __fput+0x402/0xb70
[  944.040245][T17104]  task_work_run+0x150/0x240
[  944.040275][T17104]  ? __pfx_task_work_run+0x10/0x10
[  944.040304][T17104]  ? __pfx___do_sys_close_range+0x10/0x10
[  944.040331][T17104]  exit_to_user_mode_loop+0xec/0x130
[  944.040361][T17104]  do_syscall_64+0x426/0xfa0
[  944.040386][T17104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  944.040405][T17104] RIP: 0033:0x7f23dcb8f749
[  944.040421][T17104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  944.040439][T17104] RSP: 002b:00007f23dd97a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  944.040457][T17104] RAX: 0000000000000000 RBX: 00007f23dcde5fa0 RCX: 00007f23dcb8f749
[  944.040469][T17104] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  944.040479][T17104] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  944.040489][T17104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  944.040500][T17104] R13: 00007f23dcde6038 R14: 00007f23dcde5fa0 R15: 00007fffbb16e6b8
[  944.040526][T17104]  </TASK>
[  945.498894][T17113] [U] 	
[  945.501719][T17113] [U] 
[  945.504413][T17113] [U] 
[  945.507102][T17113] [U] 
[  945.509804][T17113] [U] 
[  945.683003][T17113] [U] 
[  945.685743][T17113] [U] 
[  945.688443][T17113] [U] 
[  945.691140][T17113] [U] 
[  945.789772][T17113] [U] 
[  945.792508][T17113] [U] 
[  945.795197][T17113] [U] 
[  945.797887][T17113] [U] 
[  945.868683][T17113] [U] 
[  945.871437][T17113] [U] 
[  945.874139][T17113] [U] 
[  945.876827][T17113] [U] 
[  945.971802][T17120] [U] 
[  947.550206][T17132] random: crng reseeded on system resumption
[  947.645561][T17131] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input29
[  947.667477][T17131] FAULT_INJECTION: forcing a failure.
[  947.667477][T17131] name failslab, interval 1, probability 0, space 0, times 0
[  947.728520][T17131] CPU: 1 UID: 0 PID: 17131 Comm: syz.4.2338 Not tainted syzkaller #0 PREEMPT(full) 
[  947.728548][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  947.728560][T17131] Call Trace:
[  947.728567][T17131]  <TASK>
[  947.728575][T17131]  dump_stack_lvl+0x16c/0x1f0
[  947.728603][T17131]  should_fail_ex+0x512/0x640
[  947.728631][T17131]  ? __kmalloc_noprof+0xca/0x880
[  947.728664][T17131]  should_failslab+0xc2/0x120
[  947.728691][T17131]  __kmalloc_noprof+0xdd/0x880
[  947.728720][T17131]  ? __pfx___debug_object_init+0x10/0x10
[  947.728742][T17131]  ? kobj_map+0x81/0x470
[  947.728771][T17131]  ? kobj_map+0x81/0x470
[  947.728800][T17131]  kobj_map+0x81/0x470
[  947.728824][T17131]  ? __pfx_exact_match+0x10/0x10
[  947.728845][T17131]  ? __pfx_exact_lock+0x10/0x10
[  947.728872][T17131]  cdev_add+0xa7/0x1a0
[  947.728894][T17131]  cdev_device_add+0xa6/0x1e0
[  947.728918][T17131]  evdev_connect+0x3a4/0x4c0
[  947.728943][T17131]  input_attach_handler.isra.0+0x176/0x250
[  947.728967][T17131]  input_register_device+0xab9/0x1180
[  947.728989][T17131]  ? input_ff_create+0x241/0x350
[  947.729017][T17131]  uinput_ioctl_handler.isra.0+0x1357/0x1df0
[  947.729046][T17131]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  947.729073][T17131]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  947.729107][T17131]  ? find_held_lock+0x2b/0x80
[  947.729146][T17131]  ? __pfx_uinput_ioctl+0x10/0x10
[  947.729174][T17131]  __x64_sys_ioctl+0x18e/0x210
[  947.729204][T17131]  do_syscall_64+0xcd/0xfa0
[  947.729229][T17131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.729248][T17131] RIP: 0033:0x7fd32298f749
[  947.729264][T17131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  947.729282][T17131] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  947.729300][T17131] RAX: ffffffffffffffda RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  947.729312][T17131] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009
[  947.729322][T17131] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  947.729333][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  947.729344][T17131] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  947.729368][T17131]  </TASK>
[  947.953615][    C1] vkms_vblank_simulate: vblank timer overrun
[  948.647352][T17131] input: failed to attach handler evdev to device input29, error: -12
[  948.763529][T17145] snd_virmidi snd_virmidi.0: control 5:9:1:IA��>/�[k<���mgx���<�5��+-C��Y��5:0 is already present
[  948.887096][T17149] IPVS: length: 131 != 8
[  949.018116][T17145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[  949.058203][T17151] mkiss: ax0: crc mode is auto.
[  949.300128][T17151] ptp ptp0: new virtual clock ptp3
[  949.325475][T17151] ptp ptp0: new virtual clock ptp4
[  949.347275][T17151] ptp ptp0: new virtual clock ptp5
[  949.361564][T17151] ptp ptp0: guarantee physical clock free running
[  949.460156][T17159] FAULT_INJECTION: forcing a failure.
[  949.460156][T17159] name failslab, interval 1, probability 0, space 0, times 0
[  949.477320][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.4.2344 Not tainted syzkaller #0 PREEMPT(full) 
[  949.477348][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  949.477368][T17159] Call Trace:
[  949.477375][T17159]  <TASK>
[  949.477383][T17159]  dump_stack_lvl+0x16c/0x1f0
[  949.477411][T17159]  should_fail_ex+0x512/0x640
[  949.477439][T17159]  ? __kmalloc_cache_noprof+0x5f/0x780
[  949.477461][T17159]  should_failslab+0xc2/0x120
[  949.477487][T17159]  __kmalloc_cache_noprof+0x72/0x780
[  949.477506][T17159]  ? vkms_plane_duplicate_state+0x45/0x130
[  949.477539][T17159]  ? vkms_plane_duplicate_state+0x45/0x130
[  949.477566][T17159]  vkms_plane_duplicate_state+0x45/0x130
[  949.477595][T17159]  drm_atomic_get_plane_state+0x20e/0x590
[  949.477625][T17159]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  949.477654][T17159]  ? __pfx___might_resched+0x10/0x10
[  949.477682][T17159]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  949.477716][T17159]  ? __mutex_lock+0x1c5/0x1060
[  949.477739][T17159]  ? rcu_is_watching+0x12/0xc0
[  949.477782][T17159]  drm_client_modeset_commit_locked+0x14d/0x580
[  949.477821][T17159]  drm_client_modeset_commit+0x4f/0x80
[  949.477850][T17159]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  949.477881][T17159]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  949.477905][T17159]  drm_fbdev_client_restore+0x2c/0x40
[  949.477927][T17159]  drm_client_dev_restore+0x1f6/0x2a0
[  949.477960][T17159]  drm_release+0x2c4/0x360
[  949.477989][T17159]  ? __pfx_drm_release+0x10/0x10
[  949.478013][T17159]  __fput+0x402/0xb70
[  949.478044][T17159]  task_work_run+0x150/0x240
[  949.478081][T17159]  ? __pfx_task_work_run+0x10/0x10
[  949.478111][T17159]  ? __pfx___do_sys_close_range+0x10/0x10
[  949.478138][T17159]  exit_to_user_mode_loop+0xec/0x130
[  949.478167][T17159]  do_syscall_64+0x426/0xfa0
[  949.478193][T17159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.478212][T17159] RIP: 0033:0x7fd32298f749
[  949.478228][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.478246][T17159] RSP: 002b:00007fd3237a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  949.478264][T17159] RAX: 0000000000000000 RBX: 00007fd322be5fa0 RCX: 00007fd32298f749
[  949.478276][T17159] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  949.478287][T17159] RBP: 00007fd322a13f91 R08: 0000000000000000 R09: 0000000000000000
[  949.478298][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  949.478314][T17159] R13: 00007fd322be6038 R14: 00007fd322be5fa0 R15: 00007ffc4344a068
[  949.478340][T17159]  </TASK>
[  949.735639][    C1] vkms_vblank_simulate: vblank timer overrun
[  950.432706][T17165] FAULT_INJECTION: forcing a failure.
[  950.432706][T17165] name failslab, interval 1, probability 0, space 0, times 0
[  950.470594][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.8.2347 Not tainted syzkaller #0 PREEMPT(full) 
[  950.470621][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  950.470632][T17165] Call Trace:
[  950.470638][T17165]  <TASK>
[  950.470646][T17165]  dump_stack_lvl+0x16c/0x1f0
[  950.470674][T17165]  should_fail_ex+0x512/0x640
[  950.470701][T17165]  ? __kmalloc_cache_node_noprof+0x62/0x7a0
[  950.470729][T17165]  should_failslab+0xc2/0x120
[  950.470755][T17165]  __kmalloc_cache_node_noprof+0x75/0x7a0
[  950.470777][T17165]  ? look_up_lock_class+0x59/0x150
[  950.470798][T17165]  ? __get_vm_area_node+0x101/0x330
[  950.470824][T17165]  ? __lock_acquire+0xb8a/0x1c90
[  950.470853][T17165]  ? __get_vm_area_node+0x101/0x330
[  950.470877][T17165]  __get_vm_area_node+0x101/0x330
[  950.470902][T17165]  ? __lock_acquire+0xb8a/0x1c90
[  950.470929][T17165]  __vmalloc_node_range_noprof+0x271/0x1480
[  950.470956][T17165]  ? n_tty_open+0x1a/0x170
[  950.470988][T17165]  ? n_tty_open+0x1a/0x170
[  950.471018][T17165]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  950.471045][T17165]  ? look_up_lock_class+0x59/0x150
[  950.471071][T17165]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  950.471099][T17165]  ? n_tty_open+0x1a/0x170
[  950.471130][T17165]  __vmalloc_node_noprof+0xad/0xf0
[  950.471156][T17165]  ? n_tty_open+0x1a/0x170
[  950.471179][T17165]  ? __pfx_n_tty_open+0x10/0x10
[  950.471204][T17165]  n_tty_open+0x1a/0x170
[  950.471228][T17165]  ? __pfx_n_tty_open+0x10/0x10
[  950.471252][T17165]  tty_ldisc_open+0x9f/0x120
[  950.471270][T17165]  tty_ldisc_setup+0x40/0x100
[  950.471290][T17165]  tty_init_dev.part.0+0x1ec/0x500
[  950.471315][T17165]  tty_init_dev+0x60/0x80
[  950.471339][T17165]  ? __pfx_ptmx_open+0x10/0x10
[  950.471366][T17165]  ptmx_open+0x10d/0x360
[  950.471395][T17165]  ? __pfx_ptmx_open+0x10/0x10
[  950.471422][T17165]  chrdev_open+0x234/0x6a0
[  950.471444][T17165]  ? __pfx_apparmor_file_open+0x10/0x10
[  950.471472][T17165]  ? __pfx_chrdev_open+0x10/0x10
[  950.471496][T17165]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  950.471522][T17165]  do_dentry_open+0x982/0x1530
[  950.471545][T17165]  ? __pfx_chrdev_open+0x10/0x10
[  950.471573][T17165]  vfs_open+0x82/0x3f0
[  950.471602][T17165]  path_openat+0x1de4/0x2cb0
[  950.471631][T17165]  ? __pfx_path_openat+0x10/0x10
[  950.471653][T17165]  ? __lock_acquire+0xb8a/0x1c90
[  950.471681][T17165]  do_filp_open+0x20b/0x470
[  950.471702][T17165]  ? __pfx_do_filp_open+0x10/0x10
[  950.471741][T17165]  ? alloc_fd+0x471/0x7d0
[  950.471767][T17165]  do_sys_openat2+0x11b/0x1d0
[  950.471793][T17165]  ? __pfx_do_sys_openat2+0x10/0x10
[  950.471830][T17165]  __x64_sys_openat+0x174/0x210
[  950.471859][T17165]  ? __pfx___x64_sys_openat+0x10/0x10
[  950.471897][T17165]  do_syscall_64+0xcd/0xfa0
[  950.471922][T17165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.471940][T17165] RIP: 0033:0x7f23dcb8f749
[  950.471956][T17165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  950.471974][T17165] RSP: 002b:00007f23dd97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  950.471992][T17165] RAX: ffffffffffffffda RBX: 00007f23dcde5fa0 RCX: 00007f23dcb8f749
[  950.472004][T17165] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  950.472015][T17165] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  950.472026][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  950.472036][T17165] R13: 00007f23dcde6038 R14: 00007f23dcde5fa0 R15: 00007fffbb16e6b8
[  950.472062][T17165]  </TASK>
[  950.472071][T17165] syz.8.2347: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  951.291142][T15906] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  951.358202][T15906] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  951.379888][T15906] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  951.420439][T15906] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  951.438156][T15906] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  951.578598][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2347'.
[  951.654024][T17165] ,cpuset=/,mems_allowed=0-1
[  951.685286][T17165] CPU: 1 UID: 0 PID: 17165 Comm: syz.8.2347 Not tainted syzkaller #0 PREEMPT(full) 
[  951.685315][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  951.685327][T17165] Call Trace:
[  951.685334][T17165]  <TASK>
[  951.685342][T17165]  dump_stack_lvl+0x16c/0x1f0
[  951.685376][T17165]  warn_alloc+0x248/0x3a0
[  951.685405][T17165]  ? __pfx_warn_alloc+0x10/0x10
[  951.685422][T17165]  ? rcu_is_watching+0x12/0xc0
[  951.685444][T17165]  ? __kmalloc_cache_node_noprof+0x2df/0x7a0
[  951.685473][T17165]  ? __kasan_kmalloc+0x8a/0xb0
[  951.685497][T17165]  ? __get_vm_area_node+0x208/0x330
[  951.685529][T17165]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  951.685566][T17165]  ? n_tty_open+0x1a/0x170
[  951.685598][T17165]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  951.685626][T17165]  ? look_up_lock_class+0x59/0x150
[  951.685654][T17165]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  951.685684][T17165]  ? n_tty_open+0x1a/0x170
[  951.685708][T17165]  __vmalloc_node_noprof+0xad/0xf0
[  951.685737][T17165]  ? n_tty_open+0x1a/0x170
[  951.685763][T17165]  ? __pfx_n_tty_open+0x10/0x10
[  951.685789][T17165]  n_tty_open+0x1a/0x170
[  951.685813][T17165]  ? __pfx_n_tty_open+0x10/0x10
[  951.685838][T17165]  tty_ldisc_open+0x9f/0x120
[  951.685857][T17165]  tty_ldisc_setup+0x40/0x100
[  951.685877][T17165]  tty_init_dev.part.0+0x1ec/0x500
[  951.685903][T17165]  tty_init_dev+0x60/0x80
[  951.685927][T17165]  ? __pfx_ptmx_open+0x10/0x10
[  951.685955][T17165]  ptmx_open+0x10d/0x360
[  951.685984][T17165]  ? __pfx_ptmx_open+0x10/0x10
[  951.686020][T17165]  chrdev_open+0x234/0x6a0
[  951.686043][T17165]  ? __pfx_apparmor_file_open+0x10/0x10
[  951.686073][T17165]  ? __pfx_chrdev_open+0x10/0x10
[  951.686098][T17165]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  951.686127][T17165]  do_dentry_open+0x982/0x1530
[  951.686150][T17165]  ? __pfx_chrdev_open+0x10/0x10
[  951.686179][T17165]  vfs_open+0x82/0x3f0
[  951.686209][T17165]  path_openat+0x1de4/0x2cb0
[  951.686240][T17165]  ? __pfx_path_openat+0x10/0x10
[  951.686262][T17165]  ? __lock_acquire+0xb8a/0x1c90
[  951.686292][T17165]  do_filp_open+0x20b/0x470
[  951.686321][T17165]  ? __pfx_do_filp_open+0x10/0x10
[  951.686371][T17165]  ? alloc_fd+0x471/0x7d0
[  951.686397][T17165]  do_sys_openat2+0x11b/0x1d0
[  951.686426][T17165]  ? __pfx_do_sys_openat2+0x10/0x10
[  951.686464][T17165]  __x64_sys_openat+0x174/0x210
[  951.686494][T17165]  ? __pfx___x64_sys_openat+0x10/0x10
[  951.686535][T17165]  do_syscall_64+0xcd/0xfa0
[  951.686560][T17165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.686579][T17165] RIP: 0033:0x7f23dcb8f749
[  951.686595][T17165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.686614][T17165] RSP: 002b:00007f23dd97a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  951.686632][T17165] RAX: ffffffffffffffda RBX: 00007f23dcde5fa0 RCX: 00007f23dcb8f749
[  951.686645][T17165] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  951.686657][T17165] RBP: 00007f23dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  951.686668][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  951.686679][T17165] R13: 00007f23dcde6038 R14: 00007f23dcde5fa0 R15: 00007fffbb16e6b8
[  951.686705][T17165]  </TASK>
[  952.006831][    C1] vkms_vblank_simulate: vblank timer overrun
[  952.188536][T17165] Mem-Info:
[  952.191845][T17165] active_anon:13017 inactive_anon:0 isolated_anon:0
[  952.191845][T17165]  active_file:22682 inactive_file:38486 isolated_file:0
[  952.191845][T17165]  unevictable:768 dirty:821 writeback:0
[  952.191845][T17165]  slab_reclaimable:12649 slab_unreclaimable:111101
[  952.191845][T17165]  mapped:64589 shmem:1421 pagetables:1489
[  952.191845][T17165]  sec_pagetables:0 bounce:0
[  952.191845][T17165]  kernel_misc_reclaimable:0
[  952.191845][T17165]  free:1198952 free_pcp:23733 free_cma:0
[  952.240307][T17165] Node 0 active_anon:52068kB inactive_anon:0kB active_file:90724kB inactive_file:153812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:258356kB dirty:3280kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:5824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  952.272264][T17165] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  952.303942][T17165] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  952.335152][T17165] lowmem_reserve[]: 0 2485 2487 2487 2487
[  952.341876][T17165] Node 0 DMA32 free:890304kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52068kB inactive_anon:0kB active_file:90724kB inactive_file:153812kB unevictable:1536kB writepending:3280kB zspages:728kB present:3129332kB managed:2545064kB mlocked:0kB bounce:0kB free_pcp:71364kB local_pcp:71364kB free_cma:0kB
[  952.398204][T17165] lowmem_reserve[]: 0 0 1 1 1
[  952.403048][T17165] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  952.433870][T17165] lowmem_reserve[]: 0 0 0 0 0
[  952.438589][T17165] Node 1 Normal free:3890140kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23564kB local_pcp:23564kB free_cma:0kB
[  952.529646][T17165] lowmem_reserve[]: 0 0 0 0 0
[  952.534424][T17165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  952.579950][T17165] Node 0 DMA32: 1300*4kB (ME) 382*8kB (ME) 257*16kB (UME) 830*32kB (UME) 420*64kB (ME) 269*128kB (UM) 234*256kB (ME) 150*512kB (M) 58*1024kB (M) 12*2048kB (UM) 139*4096kB (M) = 890256kB
[  952.646902][T17165] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  952.689661][T17165] Node 1 Normal: 5*4kB (UME) 1*8kB (E) 2*16kB (UM) 5*32kB (UME) 38*64kB (UME) 31*128kB (UE) 12*256kB (UE) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 945*4096kB (M) = 3890140kB
[  952.719716][T17165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  952.759076][T17165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  952.781091][T11839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  952.800840][T17165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  952.830848][T17165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  952.866503][T17166] chnl_net:caif_netlink_parms(): no params data found
[  952.874447][T11839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  952.890087][T17165] 62626 total pagecache pages
[  952.895767][T17165] 38 pages in swap cache
[  952.920487][T17165] Free swap  = 120184kB
[  952.924761][T17165] Total swap = 124996kB
[  952.928945][T17165] 2097051 pages RAM
[  952.965698][T17165] 0 pages HighMem/MovableOnly
[  952.973273][T11839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  952.991132][T17165] 428695 pages reserved
[  952.995308][T17165] 0 pages cma reserved
[  953.011274][T17165] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  953.073477][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  953.134668][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  953.215229][T17166] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.226055][T17166] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.234444][T17166] bridge_slave_0: entered allmulticast mode
[  953.244825][T17166] bridge_slave_0: entered promiscuous mode
[  953.297231][T17166] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.316102][T17166] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.384832][T17166] bridge_slave_1: entered allmulticast mode
[  953.439220][T17166] bridge_slave_1: entered promiscuous mode
[  953.503247][ T5840] Bluetooth: hci9: command tx timeout
[  953.574407][T17166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  953.641663][T17166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  953.800689][T17166] team0: Port device team_slave_0 added
[  953.831650][T17166] team0: Port device team_slave_1 added
[  953.977554][T17166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  953.977572][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  953.977596][T17166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  953.991157][T17166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  953.991175][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  953.991198][T17166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  954.153284][T17166] hsr_slave_0: entered promiscuous mode
[  954.163971][T17166] hsr_slave_1: entered promiscuous mode
[  954.164487][T17166] debugfs: 'hsr0' already exists in 'hsr'
[  954.164505][T17166] Cannot create hsr debugfs directory
[  954.199504][T17193] ptrace attach of "./syz-executor exec"[15907] was attempted by "�x���o�/I.��Kx�a�5��:��D���9� �m������-O�%�/�v�\x5c��G�{��&��w�F�p�[���\x0c60���ݻ\x1b���*\x22j��'��4}}D���_]�2�s��Z������r..N'�s9\x0a]�2�Ad����C2��CÄL�3T%̺�8�\x07�|U\x0d\x5c���v��,��s�;;�g��@�[/��L3If�ρ���F|x��]6��#�������R,є��
1ՆN&é��+i��Tm����L-� ��qP�h�S�P��E���g?�/ucM�ސ[2Yc��[gf/mo�2�2��ٵ+[�5��Jq,\x09\x5c�e�i��Cf��((�\x076 \x0d�x��(~�ژ�o�W0&A%@�v��d�$q�s��fy��JY���_�}���qੱ��6Վ�O������vbq�Eov�BdM�f�f$�Ic����K�WN���#���_��}n�kZ�G+�GIgD��!��N�E�Z��.����<y�_��w���=\x22_��K��2��6�J�F�&+���͛��NV�Ȇ���Ғ
�׭C����f�@�P��t�����^�3�lO�.�@�\x1b��Q\x5c�j��5�a!�Ϡ�Z�G:�]o7�o�cǺ b�/+D,��l�D�iTW�����>>\x1b=k>�N\x22#lmp���*[�9DW�����c�a\x07��`\x09륔t�(ˠ��\x1b��s���#��3<g�Fmj2yܗ��OՅ1\x5c50y����g�Z]B!�IV ��������e��Xe��M�o��h��LyK�!�H��\x0c��%@<�n �祂p��X#QP\x0b`��h5�㢺C�V�>w��LueZ\x09!�W�X��`�t<�e���pb�Z]+� ���\x0d��Kpi/�f�*갎ա�77X���y�[\x22E
[  954.658845][T17173] chnl_net:caif_netlink_parms(): no params data found
[  954.938725][T17173] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.938812][T17173] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.938930][T17173] bridge_slave_0: entered allmulticast mode
[  954.950557][T17173] bridge_slave_0: entered promiscuous mode
[  954.952606][T17173] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.960428][T17173] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.960551][T17173] bridge_slave_1: entered allmulticast mode
[  954.961748][T17173] bridge_slave_1: entered promiscuous mode
[  955.091267][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.115437][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  955.300354][ T5840] Bluetooth: hci10: command tx timeout
[  955.329677][T17173] team0: Port device team_slave_0 added
[  955.331790][T17173] team0: Port device team_slave_1 added
[  955.430895][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  955.430914][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.430936][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  955.432229][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  955.432243][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.432266][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.483446][T17166] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  955.502145][T17166] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  955.511778][T17166] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  955.571013][T17173] hsr_slave_0: entered promiscuous mode
[  955.584908][ T5840] Bluetooth: hci9: command tx timeout
[  955.585322][T17173] hsr_slave_1: entered promiscuous mode
[  955.585851][T17173] debugfs: 'hsr0' already exists in 'hsr'
[  955.585870][T17173] Cannot create hsr debugfs directory
[  955.587389][T17166] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  956.262242][T17166] 8021q: adding VLAN 0 to HW filter on device bond0
[  956.380939][   T50] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 946 with max blocks 1 with error 117
[  956.380971][   T50] EXT4-fs (sda1): This should not happen!! Data will be lost
[  956.380971][   T50] 
[  956.381340][   T50] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1376 with max blocks 8 with error 117
[  956.381364][   T50] EXT4-fs (sda1): This should not happen!! Data will be lost
[  956.381364][   T50] 
[  956.433238][T17173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.657896][T17173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.683454][T17166] 8021q: adding VLAN 0 to HW filter on device team0
[  956.773287][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.773416][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.774969][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.775046][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.832228][T17173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.932947][T17173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.350552][ T5840] Bluetooth: hci10: command tx timeout
[  957.355723][T17173] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  957.379000][T17173] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  957.411767][T17222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  957.444904][T17173] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  957.494628][T17173] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  957.577970][T17166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  957.663815][ T5840] Bluetooth: hci9: command tx timeout
[  957.876586][T17173] 8021q: adding VLAN 0 to HW filter on device bond0
[  957.935331][T17173] 8021q: adding VLAN 0 to HW filter on device team0
[  957.942967][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.943050][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  958.006411][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.006486][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  958.803745][T17166] veth0_vlan: entered promiscuous mode
[  958.994834][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  959.054591][T17166] veth1_vlan: entered promiscuous mode
[  959.213852][T17166] veth0_macvtap: entered promiscuous mode
[  959.262871][T17166] veth1_macvtap: entered promiscuous mode
[  959.316169][T17173] veth0_vlan: entered promiscuous mode
[  959.369454][T17166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  959.415225][T17173] veth1_vlan: entered promiscuous mode
[  959.421356][ T5840] Bluetooth: hci10: command tx timeout
[  959.453888][T17166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  959.516885][   T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  959.554938][   T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  959.598181][   T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  959.615801][   T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.698992][T17173] veth0_macvtap: entered promiscuous mode
[  959.741739][ T5840] Bluetooth: hci9: command tx timeout
[  959.787061][T17173] veth1_macvtap: entered promiscuous mode
[  960.085790][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.121179][T12036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.174578][T12036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.188467][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  960.265723][T12036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.344446][T12036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.376158][T12036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.416011][T12036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.469622][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.515246][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.686771][T12036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.738371][T12036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.856700][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.894380][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  961.099025][T17256] binder: 17254:17256 unknown command 0
[  961.138155][T17256] binder: 17254:17256 ioctl c0306201 2000000000c0 returned -22
[  961.372646][T17256] __vm_enough_memory: pid: 17256, comm: syz.9.2348, bytes: 4398046511104 not enough memory for the allocation
[  961.501473][ T5840] Bluetooth: hci10: command tx timeout
[  963.375659][T17264] netlink: 'syz.1.2360': attribute type 17 has an invalid length.
[  963.457546][T17264] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2360'.
[  963.783148][T17278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.300499][T17294] FAULT_INJECTION: forcing a failure.
[  965.300499][T17294] name failslab, interval 1, probability 0, space 0, times 0
[  965.386616][T17294] CPU: 1 UID: 0 PID: 17294 Comm: syz.1.2366 Not tainted syzkaller #0 PREEMPT(full) 
[  965.386644][T17294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  965.386656][T17294] Call Trace:
[  965.386662][T17294]  <TASK>
[  965.386670][T17294]  dump_stack_lvl+0x16c/0x1f0
[  965.386698][T17294]  should_fail_ex+0x512/0x640
[  965.386727][T17294]  ? __kmalloc_noprof+0xca/0x880
[  965.386759][T17294]  should_failslab+0xc2/0x120
[  965.386785][T17294]  __kmalloc_noprof+0xdd/0x880
[  965.386815][T17294]  ? drm_atomic_state_init+0x17b/0x320
[  965.386848][T17294]  ? drm_atomic_state_init+0x17b/0x320
[  965.386874][T17294]  drm_atomic_state_init+0x17b/0x320
[  965.386901][T17294]  ? __kasan_kmalloc+0xaa/0xb0
[  965.386923][T17294]  drm_atomic_state_alloc+0xd3/0x120
[  965.386952][T17294]  drm_client_modeset_commit_atomic+0xcc/0x7e0
[  965.386981][T17294]  ? __pfx___might_resched+0x10/0x10
[  965.387007][T17294]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  965.387036][T17294]  ? __mutex_lock+0x1c5/0x1060
[  965.387059][T17294]  ? rcu_is_watching+0x12/0xc0
[  965.387103][T17294]  drm_client_modeset_commit_locked+0x14d/0x580
[  965.387136][T17294]  drm_client_modeset_commit+0x4f/0x80
[  965.387165][T17294]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[  965.387194][T17294]  ? __pfx_drm_fbdev_client_restore+0x10/0x10
[  965.387218][T17294]  drm_fbdev_client_restore+0x2c/0x40
[  965.387240][T17294]  drm_client_dev_restore+0x1f6/0x2a0
[  965.387273][T17294]  drm_release+0x2c4/0x360
[  965.387301][T17294]  ? __pfx_drm_release+0x10/0x10
[  965.387333][T17294]  __fput+0x402/0xb70
[  965.387365][T17294]  task_work_run+0x150/0x240
[  965.387395][T17294]  ? __pfx_task_work_run+0x10/0x10
[  965.387425][T17294]  ? __pfx___do_sys_close_range+0x10/0x10
[  965.387452][T17294]  exit_to_user_mode_loop+0xec/0x130
[  965.387483][T17294]  do_syscall_64+0x426/0xfa0
[  965.387508][T17294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.387527][T17294] RIP: 0033:0x7f098558f749
[  965.387542][T17294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  965.387560][T17294] RSP: 002b:00007f0986507038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  965.387579][T17294] RAX: 0000000000000000 RBX: 00007f09857e5fa0 RCX: 00007f098558f749
[  965.387590][T17294] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  965.387600][T17294] RBP: 00007f0985613f91 R08: 0000000000000000 R09: 0000000000000000
[  965.387611][T17294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.387622][T17294] R13: 00007f09857e6038 R14: 00007f09857e5fa0 R15: 00007fff224187e8
[  965.387648][T17294]  </TASK>
[  966.505932][T17296] erspan0: entered allmulticast mode
[  966.983287][   T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.306219][   T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.350469][T17305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  967.494932][   T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.545128][T17307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'.
[  967.717517][T17307] bond0: (slave bond_slave_0): Releasing backup interface
[  967.826202][   T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.859638][T15906] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  967.871729][T15906] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  967.879463][T15906] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  967.891293][T15906] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  967.903031][T15906] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  968.322760][   T50] bridge_slave_1: left allmulticast mode
[  968.328669][   T50] bridge_slave_1: left promiscuous mode
[  968.368915][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.524539][   T50] bridge_slave_0: left allmulticast mode
[  968.542360][   T50] bridge_slave_0: left promiscuous mode
[  968.584715][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.408218][T17335] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000
[  969.408281][T17335] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  969.408298][T17335] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  969.408324][T17335] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  969.408343][T17335] raw: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000
[  969.408360][T17335] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  969.408377][T17335] head: ffff888078000000 0000000000000000 00000016ffffffff 0000000000000000
[  969.408498][T17335] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  969.408517][T17335] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  969.408529][T17335] page dumped because: unmovable page
[  969.408538][T17335] page_owner tracks the page as allocated
[  969.408557][T17335] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5494, tgid 5494 (dhcpcd), ts 65584284136, free_ts 61963990722
[  969.408590][T17335]  post_alloc_hook+0x1af/0x220
[  969.408623][T17335]  get_page_from_freelist+0x10a3/0x3a30
[  969.408642][T17335]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  969.408661][T17335]  alloc_pages_mpol+0x1fb/0x550
[  969.408686][T17335]  alloc_pages_noprof+0x131/0x390
[  969.408710][T17335]  skb_page_frag_refill+0x186/0x5c0
[  969.408734][T17335]  try_fill_recv+0x7e4/0x2930
[  969.408759][T17335]  virtnet_open+0x3a9/0xc20
[  969.408783][T17335]  __dev_open+0x2e7/0x7c0
[  969.408802][T17335]  __dev_change_flags+0x55d/0x720
[  969.408819][T17335]  netif_change_flags+0x8d/0x160
[  969.408837][T17335]  dev_change_flags+0xba/0x250
[  969.408859][T17335]  devinet_ioctl+0x11d5/0x1f50
[  969.408881][T17335]  inet_ioctl+0x3a7/0x3f0
[  969.408904][T17335]  sock_do_ioctl+0x118/0x280
[  969.408925][T17335]  sock_ioctl+0x227/0x6b0
[  969.408948][T17335] page last free pid 5483 tgid 5483 stack trace:
[  969.408959][T17335]  __free_frozen_pages+0x7df/0x1160
[  969.408986][T17335]  __put_partials+0x130/0x170
[  969.409002][T17335]  qlist_free_all+0x4d/0x120
[  969.409022][T17335]  kasan_quarantine_reduce+0x195/0x1e0
[  969.409052][T17335]  __kasan_slab_alloc+0x69/0x90
[  969.409075][T17335]  kmem_cache_alloc_noprof+0x250/0x6e0
[  969.409094][T17335]  vm_area_alloc+0x1f/0x160
[  969.409111][T17335]  __mmap_region+0xf85/0x27a0
[  969.409128][T17335]  mmap_region+0x1ab/0x3f0
[  969.409147][T17335]  do_mmap+0xa3e/0x1210
[  969.409170][T17335]  vm_mmap_pgoff+0x29e/0x470
[  969.409196][T17335]  ksys_mmap_pgoff+0x32c/0x5c0
[  969.409218][T17335]  __x64_sys_mmap+0x125/0x190
[  969.409245][T17335]  do_syscall_64+0xcd/0xfa0
[  969.409268][T17335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.980330][T15906] Bluetooth: hci9: command tx timeout
[  970.327145][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  970.329092][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  970.331044][   T50] bond0 (unregistering): Released all slaves
[  970.928053][T17311] chnl_net:caif_netlink_parms(): no params data found
[  971.001739][   T50] hsr_slave_0: left promiscuous mode
[  971.003893][   T50] hsr_slave_1: left promiscuous mode
[  971.004477][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  971.004507][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  971.005292][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  971.005309][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  971.074309][   T50] veth1_macvtap: left promiscuous mode
[  971.074424][   T50] veth0_macvtap: left promiscuous mode
[  971.074551][   T50] veth1_vlan: left promiscuous mode
[  971.074666][   T50] veth0_vlan: left promiscuous mode
[  971.591094][T17347] tty tty1: ldisc open failed (-12), clearing slot 0
[  972.060300][T15906] Bluetooth: hci9: command tx timeout
[  972.201559][T17369] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input33
[  972.270511][T10482] Process accounting resumed
[  972.826023][   T50] team0 (unregistering): Port device team_slave_1 removed
[  973.001281][   T50] team0 (unregistering): Port device team_slave_0 removed
[  973.363454][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 945 with max blocks 2 with error 117
[  973.395750][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  973.395750][T12036] 
[  973.473948][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1367 with max blocks 29 with error 117
[  973.534314][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  973.534314][T12036] 
[  973.721220][T12036] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1365 with max blocks 15 with error 117
[  973.793634][T12036] EXT4-fs (sda1): This should not happen!! Data will be lost
[  973.793634][T12036] 
[  974.141552][T15906] Bluetooth: hci9: command tx timeout
[  975.399433][T17311] bridge0: port 1(bridge_slave_0) entered blocking state
[  975.441788][T17311] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.449018][T17311] bridge_slave_0: entered allmulticast mode
[  975.490838][T17311] bridge_slave_0: entered promiscuous mode
[  975.521446][T17311] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.536248][T17311] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.556395][T17311] bridge_slave_1: entered allmulticast mode
[  975.586303][T17311] bridge_slave_1: entered promiscuous mode
[  975.797365][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.844288][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  976.220500][T15906] Bluetooth: hci9: command tx timeout
[  976.335515][T17311] team0: Port device team_slave_0 added
[  976.396221][T17311] team0: Port device team_slave_1 added
[  976.628703][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  976.671070][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.780890][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  976.831929][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  976.838895][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.949619][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  977.057853][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  977.070429][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  977.079033][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  977.108967][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  977.117629][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  977.214066][T17311] hsr_slave_0: entered promiscuous mode
[  977.230911][T17311] hsr_slave_1: entered promiscuous mode
[  977.247968][T17311] debugfs: 'hsr0' already exists in 'hsr'
[  977.268669][T17311] Cannot create hsr debugfs directory
[  978.176214][T17428] chnl_net:caif_netlink_parms(): no params data found
[  978.497184][T17428] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.508894][T17428] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.531015][T17428] bridge_slave_0: entered allmulticast mode
[  978.557237][T17428] bridge_slave_0: entered promiscuous mode
[  978.587158][T17428] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.604765][T17428] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.623013][T17428] bridge_slave_1: entered allmulticast mode
[  978.644055][T17428] bridge_slave_1: entered promiscuous mode
[  978.695939][T17311] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  978.743598][T17311] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  978.782359][T17311] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  978.813411][T17428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.834817][T17311] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  978.870338][T17428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.966303][T17428] team0: Port device team_slave_0 added
[  978.986384][T17428] team0: Port device team_slave_1 added
[  979.068645][T17428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.090585][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  979.148861][T17428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.184971][ T5840] Bluetooth: hci11: command tx timeout
[  979.201125][T17428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  979.208092][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  979.265306][T17428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.412365][T17428] hsr_slave_0: entered promiscuous mode
[  979.430812][T17428] hsr_slave_1: entered promiscuous mode
[  979.440407][T17428] debugfs: 'hsr0' already exists in 'hsr'
[  979.446152][T17428] Cannot create hsr debugfs directory
[  979.626486][T17311] 8021q: adding VLAN 0 to HW filter on device bond0
[  979.691198][T17311] 8021q: adding VLAN 0 to HW filter on device team0
[  979.787391][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.794561][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  979.856794][T17428] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.909582][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.916742][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  980.042633][T17428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.147080][T17428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.216646][T17311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  980.321816][T17428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.466971][T17428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.825600][T17428] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  980.868195][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  980.899473][T17428] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  980.927383][T17428] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  980.979189][T17428] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  981.247533][T17428] 8021q: adding VLAN 0 to HW filter on device bond0
[  981.261302][ T5840] Bluetooth: hci11: command tx timeout
[  981.325606][T17428] 8021q: adding VLAN 0 to HW filter on device team0
[  981.395152][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  981.402313][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  981.441114][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  981.448253][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  981.652870][T17311] veth0_vlan: entered promiscuous mode
[  981.712412][T17311] veth1_vlan: entered promiscuous mode
[  981.807826][T17311] veth0_macvtap: entered promiscuous mode
[  981.869069][T17311] veth1_macvtap: entered promiscuous mode
[  981.941625][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  981.984233][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.064493][T12036] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.100081][   T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.109321][   T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.164061][   T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.265542][T17428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  982.396878][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.427371][T17428] veth0_vlan: entered promiscuous mode
[  982.436778][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.495762][T17428] veth1_vlan: entered promiscuous mode
[  982.574617][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  982.601827][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.616544][T17428] veth0_macvtap: entered promiscuous mode
[  982.672250][T17428] veth1_macvtap: entered promiscuous mode
[  982.779108][T17428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  982.816408][T17428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.874969][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.893684][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.944906][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.981470][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  983.251385][T12036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.300871][T12036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.340223][ T5840] Bluetooth: hci11: command tx timeout
[  983.398942][T12036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  983.434318][T12036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  984.663905][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'.
[  985.420545][ T5840] Bluetooth: hci11: command tx timeout
[  985.683401][T17562] netlink: 62 bytes leftover after parsing attributes in process `syz.9.2391'.
[  987.052252][T17579] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  988.032952][   T30] audit: type=1326 audit(4294967346.650:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17589 comm="syz.2.2397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8bdd8f749 code=0x0
[  989.246053][T17610] Console: switching to colour VGA+ 80x25
[  990.063772][   T31] INFO: task syz.2.2103:15858 blocked for more than 143 seconds.
[  990.098229][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  990.121826][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  990.171436][   T31] task:syz.2.2103      state:D stack:27256 pid:15858 tgid:15854 ppid:5826   task_flags:0x400140 flags:0x00080002
[  990.185415][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2402'.
[  990.239379][   T31] Call Trace:
[  990.245348][   T31]  <TASK>
[  990.264724][   T31]  __schedule+0x1190/0x5de0
[  990.269267][   T31]  ? is_bpf_text_address+0x94/0x1a0
[  990.288094][   T31]  ? __lock_acquire+0x622/0x1c90
[  990.304633][   T31]  ? __pfx___schedule+0x10/0x10
[  990.322083][   T31]  ? find_held_lock+0x2b/0x80
[  990.336990][   T31]  ? schedule+0x2d7/0x3a0
[  990.342568][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  990.362469][   T31]  schedule+0xe7/0x3a0
[  990.368822][   T31]  schedule_preempt_disabled+0x13/0x30
[  990.385704][   T31]  __mutex_lock+0x818/0x1060
[  990.399761][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  990.408960][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  990.427535][   T31]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  990.440183][   T31]  ? __nla_validate_parse+0x600/0x2880
[  990.453318][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  990.465703][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1b10
[  990.479063][   T31]  ? rcu_is_watching+0x12/0xc0
[  990.489073][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  990.579111][   T31]  ? __nla_parse+0x40/0x60
[  990.594944][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  990.669751][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  990.677493][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  990.733034][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  990.739243][   T31]  ? rcu_is_watching+0x12/0xc0
[  990.749763][   T31]  ? bpf_lsm_capable+0x9/0x10
[  990.754477][   T31]  ? security_capable+0x7e/0x260
[  990.759465][   T31]  genl_rcv_msg+0x55c/0x800
[  990.780486][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  990.799619][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  990.805818][   T31]  netlink_rcv_skb+0x158/0x420
[  990.824932][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  990.831284][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  990.850428][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  990.855761][   T31]  genl_rcv+0x28/0x40
[  990.872203][   T31]  netlink_unicast+0x5aa/0x870
[  990.877066][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  990.910020][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  990.914917][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.924987][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  990.949593][   T31]  ____sys_sendmsg+0xa98/0xc70
[  990.954398][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  990.970067][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  990.975502][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  990.990374][   T31]  ? try_to_wake_up+0xa67/0x1870
[  990.995477][   T31]  ___sys_sendmsg+0x134/0x1d0
[  991.001086][   T31]  ? find_held_lock+0x2b/0x80
[  991.005795][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  991.011500][   T31]  ? __lock_acquire+0x622/0x1c90
[  991.016497][   T31]  __sys_sendmsg+0x16d/0x220
[  991.028808][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  991.034198][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  991.044782][   T31]  do_syscall_64+0xcd/0xfa0
[  991.049321][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.056011][   T31] RIP: 0033:0x7f6efa38f749
[  991.061043][   T31] RSP: 002b:00007f6efb166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.069468][   T31] RAX: ffffffffffffffda RBX: 00007f6efa5e6180 RCX: 00007f6efa38f749
[  991.078411][   T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000007
[  991.086925][   T31] RBP: 00007f6efa413f91 R08: 0000000000000000 R09: 0000000000000000
[  991.097858][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.108444][   T31] R13: 00007f6efa5e6218 R14: 00007f6efa5e6180 R15: 00007ffcc24fc9a8
[  991.117153][   T31]  </TASK>
[  991.174409][   T31] INFO: task syz.0.2112:15890 blocked for more than 144 seconds.
[  991.190006][   T31]       Not tainted syzkaller #0
[  991.196469][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  991.208053][   T31] task:syz.0.2112      state:D stack:26824 pid:15890 tgid:15888 ppid:5828   task_flags:0x400140 flags:0x00080002
[  991.221207][   T31] Call Trace:
[  991.224507][   T31]  <TASK>
[  991.227465][   T31]  __schedule+0x1190/0x5de0
[  991.235911][   T31]  ? is_bpf_text_address+0x94/0x1a0
[  991.243345][   T31]  ? __lock_acquire+0x622/0x1c90
[  991.248311][   T31]  ? __pfx___schedule+0x10/0x10
[  991.253457][   T31]  ? find_held_lock+0x2b/0x80
[  991.258145][   T31]  ? schedule+0x2d7/0x3a0
[  991.264102][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.271690][   T31]  schedule+0xe7/0x3a0
[  991.275804][   T31]  schedule_preempt_disabled+0x13/0x30
[  991.283453][   T31]  __mutex_lock+0x818/0x1060
[  991.288068][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.295091][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  991.301387][   T31]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  991.307310][   T31]  ? __nla_validate_parse+0x600/0x2880
[  991.315325][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.321704][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.327390][   T31]  ? rcu_is_watching+0x12/0xc0
[  991.335575][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  991.349013][   T31]  ? __nla_parse+0x40/0x60
[  991.354957][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  991.362937][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  991.370538][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  991.376471][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  991.385257][   T31]  ? rcu_is_watching+0x12/0xc0
[  991.391293][   T31]  ? bpf_lsm_capable+0x9/0x10
[  991.396274][   T31]  ? security_capable+0x7e/0x260
[  991.403078][   T31]  genl_rcv_msg+0x55c/0x800
[  991.407605][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.413166][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  991.419353][   T31]  netlink_rcv_skb+0x158/0x420
[  991.428849][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.437099][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  991.443601][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  991.451323][   T31]  genl_rcv+0x28/0x40
[  991.455338][   T31]  netlink_unicast+0x5aa/0x870
[  991.461199][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  991.466506][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  991.471603][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  991.476927][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  991.483656][   T31]  ____sys_sendmsg+0xa98/0xc70
[  991.488439][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  991.495787][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  991.503384][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  991.508743][   T31]  ___sys_sendmsg+0x134/0x1d0
[  991.514446][   T31]  ? find_held_lock+0x2b/0x80
[  991.519183][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  991.525636][   T31]  ? __lock_acquire+0x622/0x1c90
[  991.533555][   T31]  __sys_sendmsg+0x16d/0x220
[  991.541312][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  991.546552][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  991.554447][   T31]  do_syscall_64+0xcd/0xfa0
[  991.559010][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.565595][   T31] RIP: 0033:0x7fb41c78f749
[  991.570671][   T31] RSP: 002b:00007fb41d60a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.583591][   T31] RAX: ffffffffffffffda RBX: 00007fb41c9e6090 RCX: 00007fb41c78f749
[  991.591791][   T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000007
[  991.602727][   T31] RBP: 00007fb41c813f91 R08: 0000000000000000 R09: 0000000000000000
[  991.612162][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.621422][   T31] R13: 00007fb41c9e6128 R14: 00007fb41c9e6090 R15: 00007ffd06c517f8
[  991.630426][   T31]  </TASK>
[  991.680827][   T31] INFO: task syz.3.2115:15898 blocked for more than 144 seconds.
[  991.688663][   T31]       Not tainted syzkaller #0
[  991.697215][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  991.707258][   T31] task:syz.3.2115      state:D stack:27672 pid:15898 tgid:15897 ppid:5827   task_flags:0x400140 flags:0x00080002
[  991.722387][   T31] Call Trace:
[  991.725725][   T31]  <TASK>
[  991.728662][   T31]  __schedule+0x1190/0x5de0
[  991.734583][   T31]  ? is_bpf_text_address+0x94/0x1a0
[  991.743598][   T31]  ? __lock_acquire+0x622/0x1c90
[  991.748570][   T31]  ? __pfx___schedule+0x10/0x10
[  991.755639][   T31]  ? find_held_lock+0x2b/0x80
[  991.765078][   T31]  ? schedule+0x2d7/0x3a0
[  991.769436][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.776766][   T31]  schedule+0xe7/0x3a0
[  991.781806][   T31]  schedule_preempt_disabled+0x13/0x30
[  991.787278][   T31]  __mutex_lock+0x818/0x1060
[  991.792799][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.798625][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  991.804314][   T31]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  991.810771][   T31]  ? __nla_validate_parse+0x600/0x2880
[  991.816248][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.823234][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1b10
[  991.828960][   T31]  ? rcu_is_watching+0x12/0xc0
[  991.837261][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  991.847416][   T31]  ? __nla_parse+0x40/0x60
[  991.852382][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  991.861866][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  991.869266][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  991.877485][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  991.885269][   T31]  ? rcu_is_watching+0x12/0xc0
[  991.890283][   T31]  ? bpf_lsm_capable+0x9/0x10
[  991.895000][   T31]  ? security_capable+0x7e/0x260
[  991.901070][   T31]  genl_rcv_msg+0x55c/0x800
[  991.905598][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.911344][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  991.917552][   T31]  netlink_rcv_skb+0x158/0x420
[  991.923705][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  991.928984][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  991.934670][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  991.943526][   T31]  genl_rcv+0x28/0x40
[  991.950935][   T31]  netlink_unicast+0x5aa/0x870
[  991.955727][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  991.963475][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  991.968267][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  991.974376][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  991.991840][   T31]  ____sys_sendmsg+0xa98/0xc70
[  991.996684][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  992.002470][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  992.007779][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  992.014140][   T31]  ___sys_sendmsg+0x134/0x1d0
[  992.019414][   T31]  ? find_held_lock+0x2b/0x80
[  992.024587][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  992.030887][   T31]  ? __lock_acquire+0x622/0x1c90
[  992.035886][   T31]  __sys_sendmsg+0x16d/0x220
[  992.040833][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  992.045985][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  992.056663][   T31]  do_syscall_64+0xcd/0xfa0
[  992.067981][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  992.074717][   T31] RIP: 0033:0x7f42c9b8f749
[  992.079171][   T31] RSP: 002b:00007f42caacc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  992.088512][   T31] RAX: ffffffffffffffda RBX: 00007f42c9de5fa0 RCX: 00007f42c9b8f749
[  992.098995][   T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000006
[  992.108782][   T31] RBP: 00007f42c9c13f91 R08: 0000000000000000 R09: 0000000000000000
[  992.118413][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  992.126665][   T31] R13: 00007f42c9de6038 R14: 00007f42c9de5fa0 R15: 00007ffe4a83a3d8
[  992.135419][   T31]  </TASK>
[  992.180120][   T31] 
[  992.180120][   T31] Showing all locks held in the system:
[  992.187878][   T31] 1 lock held by pool_workqueue_/3:
[  992.208054][   T31]  #0: ffff8880b853a4d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  992.226504][   T31] 1 lock held by khungtaskd/31:
[  992.231573][   T31]  #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  992.242786][   T31] 3 locks held by kworker/1:2/914:
[  992.247905][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  992.261701][   T31]  #1: ffff888054b6e018 (&pid_list->lock){-.-.}-{2:2}, at: trace_pid_list_is_set+0x4c/0x150
[  992.273577][   T31]  #2: ffff888088b1a240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0
[  992.287905][   T31] 4 locks held by kworker/u8:7/1165:
[  992.293619][   T31]  #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  992.304852][   T31]  #1: ffffc90003dcfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  992.317303][   T31]  #2: ffffffff900d4fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0
[  992.327495][   T31]  #3: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x83/0x350
[  992.338736][   T31] 2 locks held by getty/14531:
[  992.344083][   T31]  #0: ffff888034c640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  992.354042][   T31]  #1: ffffc9000e51b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  992.369366][   T31] 2 locks held by syz.1.2105/15856:
[  992.374792][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.385197][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  992.398227][   T31] 2 locks held by syz.2.2103/15858:
[  992.404174][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.413188][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  992.426679][   T31] 2 locks held by syz.0.2112/15890:
[  992.432100][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.442083][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  992.452924][   T31] 2 locks held by syz.3.2115/15898:
[  992.462907][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.472867][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  992.483611][   T31] 2 locks held by syz-executor/15903:
[  992.488982][   T31]  #0: ffff888058b4c0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  992.503417][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  992.514410][   T31] 2 locks held by syz-executor/15980:
[  992.521004][   T31]  #0: ffff8880359da0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  992.533541][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  992.543644][   T31] 2 locks held by syz.6.2146/16140:
[  992.548843][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.558539][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  992.574317][   T31] 2 locks held by syz-executor/16389:
[  992.580381][   T31]  #0: ffff88808756c0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  992.591271][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  992.601135][   T31] 2 locks held by syz-executor/17173:
[  992.606511][   T31]  #0: ffff88802fd200e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  992.625090][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  992.635378][   T31] 2 locks held by syz.4.2385/17423:
[  992.643416][   T31]  #0: ffffffff9018f1d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  992.651891][   T31]  #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0
[  992.666337][   T31] 2 locks held by syz-executor/17428:
[  992.671948][   T31]  #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  992.683124][   T31]  #1: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  992.694464][   T31] 1 lock held by syz.9.2402/17618:
[  992.701172][   T31]  #0: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  992.744288][   T31] 
[  992.746648][   T31] =============================================
[  992.746648][   T31] 
[  992.782975][   T31] NMI backtrace for cpu 1
[  992.782993][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  992.783015][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  992.783034][   T31] Call Trace:
[  992.783040][   T31]  <TASK>
[  992.783048][   T31]  dump_stack_lvl+0x116/0x1f0
[  992.783076][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  992.783104][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  992.783128][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  992.783156][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  992.783189][   T31]  watchdog+0xf3f/0x1170
[  992.783211][   T31]  ? rcu_is_watching+0x12/0xc0
[  992.783232][   T31]  ? __pfx_watchdog+0x10/0x10
[  992.783249][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  992.783274][   T31]  ? __kthread_parkme+0x19e/0x250
[  992.783299][   T31]  ? __pfx_watchdog+0x10/0x10
[  992.783316][   T31]  kthread+0x3c5/0x780
[  992.783344][   T31]  ? __pfx_kthread+0x10/0x10
[  992.783373][   T31]  ? rcu_is_watching+0x12/0xc0
[  992.783393][   T31]  ? __pfx_kthread+0x10/0x10
[  992.783421][   T31]  ret_from_fork+0x675/0x7d0
[  992.783449][   T31]  ? __pfx_kthread+0x10/0x10
[  992.783477][   T31]  ret_from_fork_asm+0x1a/0x30
[  992.783514][   T31]  </TASK>
[  992.963504][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.041721][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.135573][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.222484][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.457639][ T1165] bridge_slave_1: left allmulticast mode
[  993.479705][ T1165] bridge_slave_1: left promiscuous mode
[  993.487343][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.503451][ T1165] bridge_slave_0: left allmulticast mode
[  993.509113][ T1165] bridge_slave_0: left promiscuous mode
[  993.531152][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.294163][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  994.315469][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  994.326476][ T1165] bond0 (unregistering): Released all slaves
[  994.654481][ T1165] hsr_slave_0: left promiscuous mode
[  994.670372][ T1165] hsr_slave_1: left promiscuous mode
[  994.691957][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  994.699376][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  994.732423][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  994.750086][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  994.788514][ T1165] veth1_macvtap: left promiscuous mode
[  994.819740][ T1165] veth0_macvtap: left promiscuous mode
[  995.412090][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  995.458419][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  996.264968][ T1165] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.386350][ T1165] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.482579][ T1165] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.582795][ T1165] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.776679][ T1165] bridge_slave_1: left allmulticast mode
[  996.793779][ T1165] bridge_slave_1: left promiscuous mode
[  996.799564][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.832038][ T1165] bridge_slave_0: left allmulticast mode
[  996.837712][ T1165] bridge_slave_0: left promiscuous mode
[  996.856469][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.223130][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  997.237810][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  997.250855][ T1165] bond0 (unregistering): Released all slaves
[  997.554713][ T1165] hsr_slave_0: left promiscuous mode
[  997.564148][ T1165] hsr_slave_1: left promiscuous mode
[  997.591312][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  997.598720][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  997.624685][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  997.640160][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  997.676273][ T1165] veth1_macvtap: left promiscuous mode
[  997.700430][ T1165] veth0_macvtap: left promiscuous mode
[  997.706040][ T1165] veth1_vlan: left promiscuous mode
[  997.729407][ T1165] veth0_vlan: left promiscuous mode
[  998.391245][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  998.399006][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  998.493050][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  998.543824][ T1165] team0 (unregistering): Port device team_slave_0 removed