last executing test programs:

6m51.281777358s ago: executing program 0 (id=845):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x33d801, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) (async)
preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async)
write$auto_tty_fops_tty_io(r0, &(0x7f0000001200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555eab44091b074f848dd8a0908000000058400674dda3416a9d592b8f5de27d5c2425805f44c23090b5641cba07c9ebec4f497f92d059296f9f1f951cc30e0e53fa6c24bc63e836dece5c796f89901f1517879e1694e11a0a3127738f518bdc66007bd6759e143f1b311989334ef12ba54f86698860b9dd897e7761b6cb1a026120000000000", 0xd5)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async)
ustat$auto(0x801, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/i2c/drivers/pi3usb30532/uevent\x00', 0x600, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socket(0x2, 0x3, 0x500006) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async)
socketpair$auto(0xb, 0x9, 0x800, 0x0) (async)
setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xe) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
madvise$auto(0x0, 0x2003f0, 0x15) (async)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) (async)
io_uring_setup$auto(0x1, 0x0) (async)
bpf$auto(0x5, 0x0, 0x102)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mkdir$auto(&(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc001)
getpid() (async)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff)

6m50.207044219s ago: executing program 0 (id=847):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/017/001\x00', 0x10fb82, 0x0)
ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0)
sendfile$auto(r0, 0x3, 0x0, 0x400000000008)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00')
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/pagemap\x00', 0x8000, 0x0)
writev$auto(0x3, 0x0, 0x8009)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x7fffffff, 0x10000000, 0x80)
fsopen$auto(0x0, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x1, 0x8, 0xd, 0xffffffffffff53d7, 0x81, 0xe, 0x9, 0x0, 0x9, 0x1, 0x2, 0x7ffffffd, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x1eb68525, 0x6, 0x7, 0x20, 0xffffffee, 0x2a17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x100000000, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x209, 0x81)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x10001, 0x2100002, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8, 0xc351, 0x5, 0x2c, 0x3, 0x7})
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009)
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

6m49.57904432s ago: executing program 0 (id=851):
openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/projid_map\x00', 0x80303, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000001200)='/proc/thread-self/environ\x00', 0x101200, 0x0)
read$auto_proc_environ_operations_base(r1, &(0x7f0000001240)=""/173, 0xad)
ioctl$auto_TIOCMBIS2(r0, 0x5416, &(0x7f0000001a40))
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000011c0)={{&(0x7f0000000100)="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", 0x6, &(0x7f0000000080)={&(0x7f0000000000)="28ca2cc45e2f307afa125489ea269c715fd064cd38b1b5e61edf2824e5ca2ce87edde782c36cf8830eb8ac4e96eaa1a1b808564c414e610c622c3bf4ae710ef8e156096253a95e6a0be3cd5b27be22", 0x2}, 0x25, &(0x7f0000001100)="b0e6be5eac41e7c592b3c2f7b20befa176cd945dc594572ca4700b9a318a71f76dac8ef362403aabf0f4e1d4bc259da7af5476e610f10a23ee5296e1576dccbd5693b857ab9ceb1ca658ba7014195d2f722c9622b48c19af896d164ee2a33096968068c96cfc0a2b089bf965614e2739f0444e82c777453e1bf359383d186f0c400f6d8ad5edca460cbf8e6b60c002146064348a9da2c4a9904b926dfa0b7c9d176648ba5eaa56fafa00f3c60c588deddc4401d5a939259361d77e", 0x1f1f, 0x9}, 0x9}, 0x100, 0x1)

6m49.154175715s ago: executing program 0 (id=853):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/stats\x00', 0x900, 0x0)
pread64$auto(r0, &(0x7f00000001c0)='/sys/kernel/irq/2/hwirq\x00', 0x3, 0x7f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0xa, 0x1, 0x100)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0x9)
r3 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc_occ_max\x00', 0x0, 0x0)
r4 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'dummy0\x00', <r5=>0x0})
sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c8, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10000}, @NL802154_ATTR_SEC_KEY={0x173, 0x30, 0x0, 0x1, [@generic="6162502280a2ae8205d721f2", @generic="18a633d91e41428baaac667ef6a64c36f68925", @typed={0xc, 0x99, 0x0, 0x0, @u64=0x40}, @generic, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r3}, @generic="7b465f49317e5a0aaba5401afebbae4be96f35f238c159bf18fe69d42b0844f5ceeb8ded6c49bcee3a26b411258cf38df13606637825aeab96ac79fb22c737e398b4e3812e0fd52808bcb9a33d566b598ea1c8bee9af1b33a758a53d75bbbf77a6e30a4515077845b8e9d572970655ddf43922f04de88fa9b9a825b872054befb422666f2535084a2044f78a22669f8c50ab83d80057b7d1db8b591501f8b70d0353dcce9eab1c2b9d1d71ae3e546708e72d4f98a901b077ab", @generic="12ee0e449be58124a1e5274d41c4d0cb175a27330e6d2a936b58a5aca66da13661cf0d534e985dac014e3de86c592cea16b1a1a10c9b1873dc9f3f9c5f67b2e20244883daff839d07ca5c2e5b7bbcf65c7a36c60affd5d955fa904c4720ebd394927df8f418211f8be99330519df19", @typed={0x8, 0x48, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x9a}, @typed={0x8, 0x9, 0x0, 0x0, @uid=0xee00}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'geneve0\x00'}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xf3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x60}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20008001}, 0x40084)
eventfd2$auto(0x6af3, 0x800)
r6 = socket(0x1e, 0x1, 0x0)
bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r6, @new_map_fd=r1, 0x3, @old_prog_fd=r2}, 0x1)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snd/midiC2D0\x00', 0x241, 0x0)
pipe2$auto(0x0, 0x9)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0)
write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r8 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r11=>0x0})
sendmsg$auto_BATADV_CMD_SET_MESH(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="1480007fe39c267387f680c201a8259fd5e0ab78fcfc94094a3d81dfacbe711490167ba1024d1c7a27e0b0b852219cfb99d2a90acdafedd0dca457fa51ea9f001aba722a27c7bdd9ae81dddbbc1293891c9ed8eb53b12bf00564857f1d68b5c32a5230223ad1e6ac7eda1d1f4b9ab81156328152b670980539bebd95d153c95b3e88def7e3a1c22ccb210e54e50d593927dc7da8277a1053b375ffe2c53a209354b379b1769819d05a3750ca103a56e277a1bcf2bcc3fa1db01f7c559907f3b12327ae7e96d8244f5050ae78bea1993eb3fd337d7c46895cc5caeb1aa55219fff4f0cbb44994f84eaa44eaafbce3d567eb28cfe9", @ANYRES16=r8, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x810)
sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r6, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x114, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, "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"}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x48010)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0)

6m47.827051999s ago: executing program 0 (id=858):
unshare$auto(0x40000080)
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0)
readv$auto(r0, 0x0, 0x6)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x400000ead, 0x0, 0x5, 0x20000000000100)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="7e7e81c2", @ANYRES16=0x0, @ANYBLOB="21022cbd7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r2 = socket(0xa, 0x2, 0x3a)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x106)
setsockopt$auto(r2, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a)
listen$auto(0x3, 0x81)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/118, 0x76)
open(0x0, 0x4242, 0xe1d2b27bdc14aabc)
syz_open_procfs$namespace(0x0, 0x0)

6m47.138995582s ago: executing program 0 (id=869):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000009bf6bc099b8dc7a99bb87ff0d75b6e054e2b19b13d31af4ab1a64ed3f68d45f4258ee71318b53bc073fa95d11623e7f705b7e51de36d00d7293b6d092a906131d037da563844bccd66cfef370ad92537c4e3fae52a7df618d039ac2c07a9064f5824259599bd15ca18549716dfaca7503cd2d72b95f6ce00299b8adb30e3492ae3daa51b87213ac6b134b43e0b06dab60220b13f404158f747300a6883c562d978b7bea70a0a844fe5172e9564be27f998390e2c0ea42c", @ANYRES32=r1, @ANYBLOB="000429bd700002dcdd25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r4 = fsopen$auto(&(0x7f0000000280)='\x00', 0x4)
setsockopt$auto_SO_MARK(r4, 0x101, 0x24, &(0x7f00000002c0)='dummy0\x00', 0x9)
write$auto(r0, &(0x7f00000000c0)='\x00', 0x6)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x6, 0x80000, 0x80002)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r5, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x3, 0x4008)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYBLOB="494e28bd7000fedbdf251c000002180001801400020064756d6d793000"/38, @ANYRES64=r2, @ANYRES32=r3, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
socket(0xa, 0x3, 0x100)
socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0)
ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r6, 0x8924, 0x0)
getpgid(0x0)

6m31.833052803s ago: executing program 32 (id=869):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000009bf6bc099b8dc7a99bb87ff0d75b6e054e2b19b13d31af4ab1a64ed3f68d45f4258ee71318b53bc073fa95d11623e7f705b7e51de36d00d7293b6d092a906131d037da563844bccd66cfef370ad92537c4e3fae52a7df618d039ac2c07a9064f5824259599bd15ca18549716dfaca7503cd2d72b95f6ce00299b8adb30e3492ae3daa51b87213ac6b134b43e0b06dab60220b13f404158f747300a6883c562d978b7bea70a0a844fe5172e9564be27f998390e2c0ea42c", @ANYRES32=r1, @ANYBLOB="000429bd700002dcdd25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r4 = fsopen$auto(&(0x7f0000000280)='\x00', 0x4)
setsockopt$auto_SO_MARK(r4, 0x101, 0x24, &(0x7f00000002c0)='dummy0\x00', 0x9)
write$auto(r0, &(0x7f00000000c0)='\x00', 0x6)
mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000)
socket(0x6, 0x80000, 0x80002)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r5, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x3, 0x4008)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYBLOB="494e28bd7000fedbdf251c000002180001801400020064756d6d793000"/38, @ANYRES64=r2, @ANYRES32=r3, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x848000000015, 0x805, 0x0)
socket(0xa, 0x3, 0x100)
socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0)
ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r6, 0x8924, 0x0)
getpgid(0x0)

5m38.148414752s ago: executing program 3 (id=1096):
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, 0x0, 0x8880)
r2 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x8040, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, r2, 0x300000000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
unshare$auto(0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3)
sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x6)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0)
write$auto(r4, 0x0, 0x81)
fcntl$auto_F_GETFD(0xffffffffffffffff, 0x1, 0x7)
ioctl$auto(0xffffffffffffffff, 0x4004556e, 0x1f)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
getsockopt$auto_SO_LOCK_FILTER(r4, 0x9, 0x2c, &(0x7f0000000280)='@,\\#\x00', &(0x7f0000000300)=0xc)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x88, 0x8, 0xae85, 0x66b, 0x4, 0x7ff}, 0x6f4)
read$auto(r0, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff)
fstat$auto(r5, &(0x7f0000000100)={0x0, 0x88, 0xa6, 0x1, 0xee00, 0xee01, 0x0, 0x2, 0x3, 0xd, 0x7, 0x400000000009, 0x0, 0xc64c, 0x5, 0x3, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
seccomp$auto(0x2, 0x10, 0x0)
unshare$auto(0x40000080)

5m37.592267028s ago: executing program 3 (id=1099):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
unshare$auto(0x40000080)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x8, &(0x7f0000000580)={{0x4, 0x7}, {0x6, 0x100}, 0x3ff, 0x6, 0x80000001, 0x587, 0x6, 0x7, 0x1, 0xffff, 0xa67, 0xa1dd, 0x81, 0x7, 0x0, 0x8000})
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000140)='\t', 0x1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0)
sendfile$auto(r3, r3, 0x0, 0x200)

5m37.264382964s ago: executing program 3 (id=1100):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="b43b41e5b46af8d508000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sysinfo$auto(0x0)
r1 = socket(0xa, 0x801, 0x100)
setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3)
prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0)

5m35.299374828s ago: executing program 3 (id=1112):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyq7\x00', 0x142, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b874b853fe2e685482c8d73f4f3954757095a41e68c0b5d0e2ff61c07dca6944cb534a7e0964f482648d8e5a6e82f24d03fa0bb465f0bbad37d238c4a68079269aa73b6120723c649476f509b5b", 0x5f)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/017/001\x00', 0x145982, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f716e852bf61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x0, 0x80001, 0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x7)
r7 = socket(0x10, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4048040)
fsconfig$auto(r6, 0x8, &(0x7f00000002c0)='.+\x00', &(0x7f0000000300)="4ce8b2358a3a75f33e6d972168ca7e67f8ac15bb0d1d2e78bcf4180803992f33", 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090)
r9 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r9, 0x0, 0x3, 0x0)
r10 = syz_clone(0x100000, &(0x7f0000000340)="a1b53b55540dd84c7eebb137766ff526a710fa94ab798beb4927a10bdebfdad386684cb303c82313eb8602f572e7c895cc5bc945b384004d6c1308ef9b2f3e56408b0fa1f989f97a6885ab83ec2dcf0d8257e73c01ae7b2ffc9e16581d896c467269bcba58a47811f60fb01c0aa777cf6464f4a29b24fa06118a2a4a76f58fa3b24dcaae9baa1134095adeaba7c8ef85db958945043b9de5e84a1de7b509925b904015b832f0920ef987a9e3ee2e786661f10d2cad129b2ba31a84a961ccc88f0d87d155f04800c6fe2e290cebb0321e77a0890186e31dc368e027ea2b25d1c7379f03ed03", 0xe5, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="5e9d36d917942bd85440ebb8321b2e9a37c629515a9d2320cd6c370ca454c149b19d953243633c67c1cc67d759d77ac7b62d4b8eb455218be59ac9f15c40a85e2d4de1101cd47884980a6fd4898218a856f3673c5ad92b14249517a23e9dd7840b579859be01e3ff4054dd5292fd557672aacea6f21b88b64cf16ede994c24f081782cb140dfb731c72a41f5843006d7cf9d9c1c0d1fac831b33c33db55a22846bbbcffbd66b08f48b5c7ac88affae5ecea169eb3bf9819bd166ace08cecb045a74e8f80627ccf550c6c68db8246bb1edf5d4ce15538f5f85259d0197a9a1e98af")
prctl$auto(0x8, 0x7, r10, 0x9, 0x9)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="810b27bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)
nanosleep$auto(&(0x7f0000000180)={0x40, 0x8001}, &(0x7f0000000200)={0x0, 0x4})
write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB])
ioctl$auto(r1, 0x4008550c, r1)

5m34.281228575s ago: executing program 3 (id=1115):
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/mb_groups\x00', 0x40102, 0x0)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000280)={0x100000000, r0, 0x425, "b4e4a0baece87a672b6067a11d5f4477"})
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
prctl$auto(0x44, 0x7, 0x0, 0x6fffffffffffffff, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r4)
sendmsg$auto_NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="f9c832efff08eab68270eb9f5e9d5397ee1aac6de27e304e9174d4af0b091a4859fcd5874ccb481c5ca4531f017b845c13c08b048b282404fc4215a93d9d30a8ea8cef86cf583e8fc06802140727148b79efdee2418944cd0629f2d76145994ef458f78798699b3dc23007820225119f81a48f143f4c9ba831d7ff994729a56eae734d2d667b3c677fe161ed0bd7db44324c8af3960866", @ANYRES16=r5, @ANYBLOB="05032cbd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040008)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfdf3)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)

5m33.483805386s ago: executing program 3 (id=1120):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x2b, 0x3, 0xfffff001)
socket(0x11, 0x80003, 0x300)
socket(0x10, 0x80d, 0x9e)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0)
pivot_root$auto(&(0x7f0000000080)='{/-\x00', &(0x7f00000000c0)='/dev/audio\x00')
io_cancel$auto(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x3, 0xdd13, r1, 0xb, 0x7ff, 0x1, 0x0, 0x9, r0}, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x2})
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2b, 0x3, 0xfffff001) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x10, 0x80d, 0x9e) (async)
socket(0x2, 0x3, 0x2) (async)
socket(0x2, 0x3, 0x104) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) (async)
pivot_root$auto(&(0x7f0000000080)='{/-\x00', &(0x7f00000000c0)='/dev/audio\x00') (async)
io_cancel$auto(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x3, 0xdd13, r1, 0xb, 0x7ff, 0x1, 0x0, 0x9, r0}, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x2}) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
socketpair$auto(0x3, 0x5, 0x7, 0x0) (async)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async)
bind$auto(0x3, 0x0, 0x6b) (async)

5m32.847352284s ago: executing program 33 (id=1120):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
r1 = socket(0x2b, 0x3, 0xfffff001)
socket(0x11, 0x80003, 0x300)
socket(0x10, 0x80d, 0x9e)
socket(0x2, 0x3, 0x2)
socket(0x2, 0x3, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0)
pivot_root$auto(&(0x7f0000000080)='{/-\x00', &(0x7f00000000c0)='/dev/audio\x00')
io_cancel$auto(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x3, 0xdd13, r1, 0xb, 0x7ff, 0x1, 0x0, 0x9, r0}, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x2})
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socketpair$auto(0x3, 0x5, 0x7, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
bind$auto(0x3, 0x0, 0x6b)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x2b, 0x3, 0xfffff001) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x10, 0x80d, 0x9e) (async)
socket(0x2, 0x3, 0x2) (async)
socket(0x2, 0x3, 0x104) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) (async)
pivot_root$auto(&(0x7f0000000080)='{/-\x00', &(0x7f00000000c0)='/dev/audio\x00') (async)
io_cancel$auto(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8, 0x3, 0xdd13, r1, 0xb, 0x7ff, 0x1, 0x0, 0x9, r0}, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x2}) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async)
socketpair$auto(0x3, 0x5, 0x7, 0x0) (async)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async)
bind$auto(0x3, 0x0, 0x6b) (async)

2m40.60784072s ago: executing program 2 (id=1793):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$auto(0x6, 0x8001, 0x6, 0x16, r0, 0x6)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
read$auto(0x3, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002180), r2)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000002540)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000021c0)=ANY=[], 0x30c}, 0x1, 0x0, 0x0, 0x20000885}, 0x4011)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2)
clone$auto(0xa685, 0x2, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0xfffffff2, 0x1b9)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto(0x3, 0x8108551b, 0x1)
ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0})
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = getpid()
process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce", 0x40000100000001}, 0x6, 0xf4000000)

2m39.930432349s ago: executing program 2 (id=1794):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x4004550c, r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x11c, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x104, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0xf9, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8", @nested={0x3c, 0x122, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x5ae3693d}, @typed={0x4, 0x3b}, @nested={0x28, 0x8b, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x8, 0x136, 0x0, 0x0, @uid}]}]}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r2, 0x251)
close_range$auto(0x2, r1, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x2}]})
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mlock$auto(0xfbea, 0x7fffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
madvise$auto(0x0, 0x22, 0xa)

2m38.338115101s ago: executing program 2 (id=1802):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4000000040009, 0xdf, 0x9b72, r2, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r3 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r3, 0x1, r1, 0x0)
sendmmsg$auto(r0, 0x0, 0x9a6, 0x10001)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x45, 0x0, 0x20000369, 0x0, 0x3, 0x6}, 0x5}, 0x108, 0x5, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0)
ioctl$auto(0x3, 0x40045542, 0xb551)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, r0, 0x0)

2m35.95578726s ago: executing program 2 (id=1810):
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
statmount$auto(&(0x7f0000000000)={0x5, @raw=0x3, 0x6, 0x4}, &(0x7f0000000040)={0x0, 0x1, 0x200, 0x200, 0x5, 0xfffffffffffffffd, 0x1000, 0xf, 0x4, 0x3, 0xfffffffc, 0x80, 0x1, 0x3, 0x400, 0x0, 0x2, 0x6, 0x5, 0x7fff, 0x5, 0x400, 0x4e, 0x1, 0x9, 0x6, 0x7, 0x7, 0x4, 0x3a9, 0x0, [0x7, 0x7, 0x7ff, 0x3, 0x715a, 0x4, 0x2, 0x6, 0x2, 0x4, 0x5, 0x3000000, 0x83, 0x7, 0x7, 0x7f, 0x9de, 0x3, 0xffffffffffffff8d, 0x6, 0x9, 0xf763, 0xcdec, 0x3, 0x7, 0x0, 0x100000000, 0x7, 0xe93, 0x0, 0x0, 0x7fff, 0x2000000000000008, 0x0, 0xf6b7, 0x7, 0x5, 0x2000000000006, 0x0, 0x1000, 0x8, 0x8, 0x80000001], "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"}, 0x9, 0x2008)
fcntl$auto_F_CREATED_QUERY(r0, 0x404, 0x5f87)
mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001240), 0x900, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
ioctl$auto(r1, 0xc0045401, r1)
io_uring_register$auto(0x2, 0x1a, 0x0, 0x1)
ppoll$auto(&(0x7f0000001280)={r1, 0x4, 0xfff}, 0x9, &(0x7f00000012c0)={0x9, 0xffffffff}, &(0x7f0000001300)={0x7}, 0x8)
write$auto(0x3, 0x0, 0x7fffffff)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r2, 0x4b4b, r2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
setresuid$auto(0x0, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
setuid$auto(0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x240007, 0x19)

2m35.264242224s ago: executing program 2 (id=1813):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$auto(0x6, 0x8001, 0x6, 0x16, r0, 0x6)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x0, r0, 0x0, 0x1}, 0x6f3)
read$auto(0x3, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socketpair$auto(0x3, 0x10000, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000002540)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f00000021c0)=ANY=[], 0x30c}, 0x1, 0x0, 0x0, 0x20000885}, 0x4011)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2)
clone$auto(0xa685, 0x8, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0xfffffff2, 0x1b9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x3, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x2)
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000280), 0x46c3c1, 0x0)
ioctl$auto_TUNSETSNDBUF(r3, 0x400454d4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
cachestat$auto(0xffffffffffffffff, 0x0, 0x0, 0x9)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311)
lseek$auto(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto(0x3, 0x8108551b, 0x1)
ioctl$auto_USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000400)={0x1, 0x81, 0x5, 0x4, &(0x7f00000002c0)="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", 0x9, 0xeb90, 0xffff, @stream_id=0x101, 0x7, 0x477, 0x0})
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)

2m33.288491061s ago: executing program 2 (id=1817):
setfsuid$auto(0xee01)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x18b402, 0x0)
pread64$auto(r2, 0x0, 0x100000001, 0x5c2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0x0, 0xffffffffffffff55, 0x5)
mlockall$auto(0x7)
ioctl$auto_XFS_IOC_FSBULKSTAT(r3, 0xc0205865, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pipe$auto(&(0x7f0000000080)=0xe7da)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
dup2$auto(0x0, 0x4)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
setfsuid$auto(0xee01) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x18b402, 0x0) (async)
pread64$auto(r2, 0x0, 0x100000001, 0x5c2) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0x0, 0xffffffffffffff55, 0x5) (async)
mlockall$auto(0x7) (async)
ioctl$auto_XFS_IOC_FSBULKSTAT(r3, 0xc0205865, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
pipe$auto(&(0x7f0000000080)=0xe7da) (async)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async)
dup2$auto(0x0, 0x4) (async)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0) (async)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async)

2m30.302541684s ago: executing program 1 (id=1827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001100), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0200fbdd26bd7000fddbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/platform/vivid.0/media5/power/autosuspend_delay_ms\x00', 0x2080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000004c0)=""/206, 0xce)
write$auto(0x3, 0x0, 0x5c8)
mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001280), r0)
sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f00000012c0)={0x374, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x34b, 0x7f, "f9c291b1b717a2d1a760de9214221382657d028aaee82858a2deddd1b4e3150fab7e848728b3c016cc1f94c943ffcc1e905f5e7c12e8cc38940f41f6eb6f8a0255a5a1bf7ab5dad415fdd14a9c72a7dd4775d091ab33e412594ce38a9ee89655bd127228f7fafdd707a770c1579fafd8e9fa2835e1c2ef75badc678668b7428822f5521e91f90b9367ff56d769fc0ad5f5b9c434e449ecd697aaa66269b924485827ca47f9017c71dd3b5b84ec94985ae2beb09f63300e9b0331c9bb1fed42be63f71ec1dd154aea479369b53f23d7fcf077f22c26920f7785a2e65b9e4441110924e5dd6ba730103aafc926b7f16a80ba6658be5b52c9407f205efe87233ae9177c7fb1d4d02c3e355d4c2746f566a0d53658dd20b3d122f3a590415d2950ab9b12e0e19141b24c182342021aed089266fc8cf2aeea675c40166c071f7e7398ddb55e9c1fa4ba38aaebdd952fddde89d0c0d30f0202b4053d2ce33b2d1d2b35fc69efd5cef9b688cd07919edfb34c50f5cdbcd7a43563ceb2bf7731b9033063ab5d605f02b7f5ceed4c6afd29a154ed252b5a9bff53e01f7435cd6784a6c522c4a695f1f00aae1bc946b37ea04952e3d775352c34e7ecd05aebaeff03d4d7b9268b19b2775f0ec411f534de016150a94d41c495bb3e9a03ac63696ec1f1c8fc5fa2ffdde49c6b8f39c18f79a6541002405632720438e9cf9b3cc08873b3c45aefe089e7e78871386fe93eb604cdf5144893f97ac78ff3e6bfef7df91b01e7280a1126afd1c47d9d9c0dea0b4429d538d842ecba641c52d4d47fd294df7d8f8f0dc65f566f338395bba5ca3d91864aace3b7caf9f6b25241b94ec325e4ec1cd74b62718b26a4d45b651cbef75e409f91b2fef39dbef7515867abd84682f4c2f8ce7a54e58a654c2fee4789ba318622c0c20ada7248ceef89dd2e43556db4a3aa93c7ebd550d927f61d457f69d92b840d9794384025d51d0767acd15167369e0ff54a9d2d2632bff378caac059eb3acc0b44fc0fb7467d5c8a1787c9c9643e9729e9f5f568fc6d20202023ad26bccc7beb623d7e327d1720339df24f932ca9c69290a9e2b7481a9c70af7c1ad1c0b0ea7189f80ed17f623756a38a45da3478c590b6655d79011793b7929a4bc1df2fdd79ffd3d4c41e03b034082698850863ade5cbe205762952d"}]}, 0x374}, 0x1, 0x0, 0x0, 0x10}, 0x4044010)
mremap$auto(0x0, 0x6, 0x2, 0x3, 0x7fffffffb000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00')
readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80)

2m28.921962984s ago: executing program 4 (id=1832):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6}, 0x5)
socket(0x2b, 0x1, 0x1)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x2, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000180)="76a2d1cbb4b92f8d4b6bf6d90ef92acd6a5b3d3ec3c9efb3556b40eb5dfede66d9c95921d322789e0478e619492f2a0ec74675ed8675603d8248b1d3c58f95fb0ff773751c86", 0x1}, 0x7e)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000)
fsopen$auto(0x0, 0x1)

2m27.827641177s ago: executing program 4 (id=1836):
socket(0x2, 0x80001, 0x40)
unshare$auto(0x40000080)
pwrite64$auto(0xc8, 0x0, 0x5e, 0x39)
eventfd2$auto(0x6, 0x4)
select$auto(0xd, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getrandom$auto(0x0, 0x2, 0x3)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
madvise$auto(0x110c230000, 0x1, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram10/discard_alignment\x00', 0x101000, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
lseek$auto(0x3, 0x8, 0x3)
madvise$auto(0xfffffffffffffffc, 0x3, 0x18)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd)
sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8050)
msync$auto(0x110c230000, 0x200001, 0x6)
mmap$auto(0x1000000, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x1)
settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4})
getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x2, 0x80000, 0x0)
listen$auto(0x3, 0x81)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

2m26.717652697s ago: executing program 1 (id=1838):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
pivot_root$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
connect$auto(0x3, 0x0, 0x1)
unshare$auto(0x40000080)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0)
lseek$auto(r2, 0x0, 0x2)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
r3 = socket(0x2, 0x2, 0x1)
getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58)

2m26.530675154s ago: executing program 4 (id=1839):
r0 = socket(0x10, 0x2, 0x0)
socket(0x2, 0x801, 0x106)
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
bind$auto(0x3, 0x0, 0x68)
r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x2174bfc7}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x80)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100023d0e60408e28bd7c00fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
r2 = wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x10}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0xb, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000})
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000007000fbdbdf251100fffcbf3895e21d828f5d08cdcf2f1241ccf3cd6b1b87400bf352a5bcf7de7b677fe34b20b1ad75558d87a6561561bf1a13fcfced355625bc80f77e345bc420ad230604fa20eeabbf5c279eaf9615c975fdd3825d3870f75a6a06c43f420e533015888f2a993b85c82c3002e00f9548079fe48fd662829b3c66a769d24057f668f1f15b1d03ec8cd056d49368a54c5a207d6fcde2029c9a25cff77bb178f309ba1a655d01fdb7ab23f209f82a410f5050f4419873cb92af92f4ac22b70a8893000000000000000000000000eb35756f428ff4ebd4bcd88e07874c07978ff0"], 0x14}}, 0x400c0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r7)
sendmsg$auto_TIPC_NL_PUBL_GET(r7, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000300)={0x50, r8, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x840)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r9=>0x0})
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd50009ddbdf251100000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0)
r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r11 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r10, 0x80085610, r11)
sendmsg$auto_NL80211_CMD_SET_BSS(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x244, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x36, 0xfc, "aa0fdd0f0f348e52e79f083cdba781cb5845e0e573a9cc1832a0dd21bda92c87628be266400c3e67b9c3c7829489f627ad7c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18b, 0x6e, 0x0, 0x1, [@typed={0x76, 0x9e, 0x0, 0x0, @binary="0d0c3e9c1eda54889f07f81711bf4a676ca330814507122170951e9c22c0473fa94fbabdd4f8a6e834832d1630dec5ea3f366d516240bfb3d3827d1de73f1b933392be6c344bafa9c5e26b0fce6a036be037f22c6ba971549a04af02b683d14d17a986697328a89b0653ba640d72314748a7"}, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@empty}, @generic="16be3a9eeced702fab393b32b95f3e2c946bc340a59805da530b8cd645635646f502f9a2a3437ba984da1ef8e2bef76111b1888d09d59688b4fe99c4b1d06f13d2b2fd9483521cdc8eb96ba1bfc5cba9094a153f8cba4dc0ff65305c27210b532c565ce89eaa682a8730c692a3d11c3fae57834faf33c26468c8d894aed6d5e93190ca486983d24859f74decdebc8a80f2b9afc900d5cb3d52e62096feb716622ecbcbd4b798b383fdaa57f8d0f66c7cb8ad34bb234d5c5d8c1a94ea38fe4f5b0a595b73a1e07d13e10fe54845d761618077bc56f8f7fc8c978e7461020d6046c0a1fe9ea53bc99cc4e3e3", @typed={0x8, 0x134, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x11a, 0x0, 0x0, @pid=r2}]}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x1}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xc659}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x54, 0x125, "794ef5505539d165da9dc2bb73f989c24eb89e0edbb7ef8d1661e3f7ae54a8c0a0d9ebecd6af44541aa8094aab632e7469c62af507b9966b3e0a89cd3e9f35d1a0fb085aabcb02c002b04d458f634f07"}]}, 0x244}, 0x1, 0x0, 0x0, 0x20008054}, 0x400c840)

2m26.071930769s ago: executing program 4 (id=1841):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_cpus\x00', 0x2, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@link_update={r0, @new_map_fd=r0, 0x200, @old_prog_fd=r0}, 0x7)
socket(0x1, 0x1, 0x0)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x189160, 0x0)
close_range$auto(r1, r1, 0x0)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14100000", @ANYRES16=0x0, @ANYBLOB="21022cbd7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x2, 0xa, 0xa)
io_uring_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb)
r3 = setfsuid$auto(0xee00)
r4 = setfsuid$auto(0xee01)
setresuid$auto(r3, r4, r3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
write$auto(0x3, 0x0, 0xfffffdef)

2m26.022369758s ago: executing program 4 (id=1842):
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
umount2$auto(&(0x7f0000000000)='.\x00', 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000)
recvmmsg$auto(0x3, 0x0, 0xfffe, 0x52, 0x0)
unshare$auto(0x20070dc)
unshare$auto(0x40000080)
openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
unshare$auto(0x146)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0)
mmap$auto(0x400000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40101, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
umount2$auto(&(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x401)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, 0x0, 0x5)
unshare$auto(0x40000080)
write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8)
msync$auto(0x8, 0x3, 0x0)

2m25.520679111s ago: executing program 4 (id=1843):
r0 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x2)
close_range$auto(r0, r0, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
copy_file_range$auto(r1, &(0x7f0000000140)=0xffff, r1, 0x0, 0x21c1, 0x0)

2m25.096608782s ago: executing program 1 (id=1845):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async)
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0)
mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff)
mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x67c1, 0x7fc)
r0 = pipe2$auto(0x0, 0x80)
ioctl$auto(r0, 0x5761, 0x4) (async, rerun: 64)
close_range$auto(0x0, 0x5, 0x0) (rerun: 64)

2m25.020022054s ago: executing program 1 (id=1846):
socket(0x11, 0x80003, 0x300)
keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002)
mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000)
msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d", @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x2400c0d0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}})
ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xc8, 0x0, 0x40f6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800c00b08008000200", @ANYRES32=0x0, @ANYBLOB="04001e801800018014000200916c616e3000000000000000"], 0x44}}, 0x24048084)
listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0xffffffffffffffff, 0x2}, 0x0, 0xf4240, 0x0)
unshare$auto(0x40000080)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0)
ioctl$auto(r5, 0x6f2d, r5)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)

2m24.740141275s ago: executing program 1 (id=1847):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000600)="2552475bda6dd28a2898d86e649f4e3eda0f2a37e9565c5b007cb66b5e5bd330550dafe892f3626afe50c0a1ef7c719af8b380fdb759ff2be7b8d54a0f6ba3f44f5afee900190629afe54205bf72e5970c68b5faea72cf5094c5fd33259ddcbe4e434822726c29bf066c553e5a0bf640db8a1fa6c105bdf5710aba5b6bdab9433bd0dff4c52c1922be31f7dfcfad1e4b7f41eeacf297e9994c9412550fd56835219fc8fbf5fe1597a990f0abadf933a5f5f983ef7cee252b08fb69cbc9cd4506804bc2b0072ada5d8ee3e7c359", 0xffffff9c)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38)
socket(0xa, 0x1, 0x84)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd)
ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2)
write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r5)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000005c0)=""/8, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)

2m23.837628605s ago: executing program 1 (id=1850):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x9e6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xa, 0x1, 0x84)
listen$auto(0x3, 0x83)
accept4$auto(r0, 0x0, 0x0, 0x0)
socket(0x2, 0x5, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0)
seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xac45, &(0x7f00000000c0)="f931a463a744d3d5ff75c26e1edd6629ea36442ae1a22319e17261165194322dc8336680f3404a8031b7ba7ecdadcaf1b5142e205dc8eaad2e8fbd84b5a81e76ce314b3af2e89aba23d9f91b6a92a7ad30f4f85a7d107650294cd8fa4bbade7dc2c9aa37302f5b8ac409")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x100, 0xb}, 0x18)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x8910, 0x0)

2m17.961909891s ago: executing program 34 (id=1817):
setfsuid$auto(0xee01)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x18b402, 0x0)
pread64$auto(r2, 0x0, 0x100000001, 0x5c2)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0x0, 0xffffffffffffff55, 0x5)
mlockall$auto(0x7)
ioctl$auto_XFS_IOC_FSBULKSTAT(r3, 0xc0205865, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pipe$auto(&(0x7f0000000080)=0xe7da)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0)
dup2$auto(0x0, 0x4)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
setfsuid$auto(0xee01) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x18b402, 0x0) (async)
pread64$auto(r2, 0x0, 0x100000001, 0x5c2) (async)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, 0x0, 0xffffffffffffff55, 0x5) (async)
mlockall$auto(0x7) (async)
ioctl$auto_XFS_IOC_FSBULKSTAT(r3, 0xc0205865, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
pipe$auto(&(0x7f0000000080)=0xe7da) (async)
select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async)
dup2$auto(0x0, 0x4) (async)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x1, 0x8, 0x0) (async)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async)

2m10.533452665s ago: executing program 35 (id=1843):
r0 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x2)
close_range$auto(r0, r0, 0x1)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
copy_file_range$auto(r1, &(0x7f0000000140)=0xffff, r1, 0x0, 0x21c1, 0x0)

2m8.786834656s ago: executing program 36 (id=1850):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x802, 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x9e6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xa, 0x1, 0x84)
listen$auto(0x3, 0x83)
accept4$auto(r0, 0x0, 0x0, 0x0)
socket(0x2, 0x5, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0)
seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xac45, &(0x7f00000000c0)="f931a463a744d3d5ff75c26e1edd6629ea36442ae1a22319e17261165194322dc8336680f3404a8031b7ba7ecdadcaf1b5142e205dc8eaad2e8fbd84b5a81e76ce314b3af2e89aba23d9f91b6a92a7ad30f4f85a7d107650294cd8fa4bbade7dc2c9aa37302f5b8ac409")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20000, 0x100, 0xb}, 0x18)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TCFLSH2(r1, 0x8910, 0x0)

14.217365703s ago: executing program 8 (id=2288):
r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$auto(0x6, 0x8001, 0x6, 0x16, r0, 0x6)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
read$auto(0x3, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000)
r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40288d4)
syz_genetlink_get_family_id$auto_macsec(0x0, r2)
sendfile$auto(r2, r2, &(0x7f0000000340)=0x7, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x4, 0xd, 0x8fd7, 0x968b, 0x20000000003, 0x87, 0x3, 0x5, 0x62, 0x80000000, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3da)
r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0)
pread64$auto(r7, 0x0, 0x594c, 0x9fffffffd)
r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
fdatasync$auto(r4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000240)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\x00\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x84)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r8, @ANYBLOB], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14)
sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)

13.001471669s ago: executing program 8 (id=2293):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0)
pivot_root$auto(0x0, 0x0)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
connect$auto(0x3, 0x0, 0x10)
unshare$auto(0x40000080)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0)
lseek$auto(r2, 0x0, 0x2)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x86fdebffda344acd, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000007c0)={{0x3, 0xee00, 0x0, 0x8, 0x4, 0xee, 0x1ff}, &(0x7f0000000740)=0x6, &(0x7f0000000780)=0x1, 0x2, 0x8000000000000000, 0x7, 0xa, 0x4, 0x3ff, 0x1, 0x3, @raw=0x5, @raw=0x52})

10.286784983s ago: executing program 8 (id=2299):
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x201, 0x0)
mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0)
ioctl$auto_CEC_S_MODE(r0, 0x40046109, 0x0)
ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r1 = epoll_create$auto(0x2)
epoll_pwait2$auto(r1, 0x0, 0x8, 0x0, 0x0, 0x8)
kill$auto(0x0, 0x11)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80040000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000600050000000a000500aaaaaaaaaaaa000006000700030000000800040010"], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r2, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0x100082)

9.238781869s ago: executing program 8 (id=2305):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6}, 0x5)
socket(0x2b, 0x1, 0x1)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x2, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000180)="76a2d1cbb4b92f8d4b6bf6d90ef92acd6a5b3d3ec3c9efb3556b40eb5dfede66d9c95921d322789e0478e619492f2a0ec74675ed8675603d8248b1d3c58f95fb0ff773751c86", 0x1}, 0x7e)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000)
syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000)
fsopen$auto(0x0, 0x1)

7.610076322s ago: executing program 8 (id=2311):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000600)="2552475bda6dd28a2898d86e649f4e3eda0f2a37e9565c5b007cb66b5e5bd330550dafe892f3626afe50c0a1ef7c719af8b380fdb759ff2be7b8d54a0f6ba3f44f5afee900190629afe54205bf72e5970c68b5faea72cf5094c5fd33259ddcbe4e434822726c29bf066c553e5a0bf640db8a1fa6c105bdf5710aba5b6bdab9433bd0dff4c52c1922be31f7dfcfad1e4b7f41eeacf297e9994c9412550fd56835219fc8fbf5fe1597a990f0abadf933a5f5f983ef7cee252b08fb69cbc9cd4506804bc2b0072ada5d8ee3e7c359", 0xffffff9c)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38)
socket(0xa, 0x1, 0x84)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd)
ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2)
write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r5)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000005c0)=""/8, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)

5.761232272s ago: executing program 8 (id=2316):
mmap$auto(0xfffffffffffffffc, 0x9, 0x809, 0x7f, 0x401, 0x100000000008002)
socket(0x2, 0x801, 0x100)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x2062, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0xfdf3)
preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9)
sysfs$auto(0x2, 0x10000000000000e, 0x0)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x218141, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
open(0x0, 0x14d27e, 0x72)
socket(0x2b, 0x1, 0xfffffffd)
select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socketpair$auto(0x6, 0x8, 0x0, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.760206477s ago: executing program 5 (id=2318):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(r0, &(0x7f0000000080)=@llc={0x1a, 0x334, 0x0, 0xfb, 0x2, 0x5, @broadcast}, 0xf)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/hw_conf\x00', 0xa82, 0x0)
write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20)
r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x68043, 0x0)
dup2$auto(r2, r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'ip6tnl0\x00'})

5.581107384s ago: executing program 5 (id=2320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r2=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9a0}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}, @NET_SHAPER_A_BURST={0xc, 0x5, 0xfffffffffffffffc}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x14)
openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x7602, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x21, 0x2, 0x2)
setsockopt$auto(0x3, 0x1000000110, 0x5, 0xffffffffffffffff, 0x0)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r3)
sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r4, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008)
write$auto(0x3, 0x0, 0xffd8)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4110000", @ANYRES16, @ANYBLOB="020029bd7000fedbdf25010000004811028043e72a4130e0ab10f58a73165236c242ce7b447d7bebf752003c4ac7a5d993864192d4846ad381f6a7cd18002c80080021008a0600000400db8008001600", @ANYRES32, @ANYBLOB="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"], 0x11c4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')

5.461845601s ago: executing program 5 (id=2321):
socket(0x11, 0x80003, 0x300)
keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002)
mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000)
msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d", @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x2400c0d0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}})
ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
write$auto(0xc8, 0x0, 0x40f6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800c00b08008000200", @ANYRES32=0x0, @ANYBLOB="04001e801800018014000200916c616e3000000000000000"], 0x44}}, 0x24048084)
listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0xffffffffffffffff, 0x2}, 0x0, 0xf4240, 0x0)
unshare$auto(0x40000080)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0)
ioctl$auto(r5, 0x6f2d, r5)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0)

3.601013857s ago: executing program 5 (id=2325):
r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/ap_power_level\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept$auto(r1, &(0x7f0000000040)=@sco, &(0x7f0000000180)=0x8000)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x40, 0x0)
sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x884)
readv$auto(r0, &(0x7f0000000000)={&(0x7f0000000180), 0x7}, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r2, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250400000004001d00130011004d414338ceb4649b92303231315f485753494d0000080005bbdbff354ada84936f068477e3a64bfcf140eeea6805f02dfa641e745ce81417e8157cb0a8abdc27d7f371d5f14f4b5348871a"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.508334428s ago: executing program 5 (id=2326):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
preadv$auto(0x40000000000003, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
r0 = prctl$auto(0x21, 0x0, 0x1, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/tls_stat\x00', 0x500, 0x0)
pread64$auto(r1, 0x0, 0x1ff, 0x8800000000)
ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, 0x0)
lseek$auto(0x3, 0x0, 0x1)
munmap$auto(0x8000, 0xffffffff)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)

3.380010874s ago: executing program 5 (id=2327):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000600)="2552475bda6dd28a2898d86e649f4e3eda0f2a37e9565c5b007cb66b5e5bd330550dafe892f3626afe50c0a1ef7c719af8b380fdb759ff2be7b8d54a0f6ba3f44f5afee900190629afe54205bf72e5970c68b5faea72cf5094c5fd33259ddcbe4e434822726c29bf066c553e5a0bf640db8a1fa6c105bdf5710aba5b6bdab9433bd0dff4c52c1922be31f7dfcfad1e4b7f41eeacf297e9994c9412550fd56835219fc8fbf5fe1597a990f0abadf933a5f5f983ef7cee252b08fb69cbc9cd4506804bc2b0072ada5d8ee3e7c359", 0xffffff9c)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38)
socket(0xa, 0x1, 0x84)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd)
ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2)
write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x4, 0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r5)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000005c0)=""/8, 0x8)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)

2.902488702s ago: executing program 7 (id=2328):
r0 = fanotify_init$auto(0x5, 0x0)
fanotify_mark$auto(r0, 0x209, 0xa, r0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x200080000000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="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", 0x159)
socket(0x1b, 0x3, 0x1)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x6c02, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x80003, 0x300)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x10, 0xa, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x9, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', &(0x7f0000000140)="2bbf7a86fdfdb1a87fcecdbfbb437fc54e0e4c", 0x4)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000010)
socket(0x10, 0x2, 0x14)

2.409106436s ago: executing program 6 (id=2331):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000)
rseq$auto(0x0, 0x1c, 0x5d7, 0x9)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
writev$auto(r0, &(0x7f0000000280)={0x0, 0x4}, 0x85)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="1b002bbd7000fddb0300030000000400080018000380140011801000f280edff0000000000000000000012000100898771f1c19f17790485908288470000"], 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800)
r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/io\x00', 0x800, 0x0)
read$auto_proc_single_file_operations_base(r3, &(0x7f00000000c0)=""/14, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x9, 0x400000008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40401, 0x0)
r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_LINK={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0)

1.982915735s ago: executing program 6 (id=2332):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_debugfs_full_proxy_file_operations_internal(r1, 0x4a, &(0x7f00000000c0)="6739252f2820e9aceacab8bac025977d2d11ea8a70fee3d77734eebd23fe40eaea5fafeb583452594a387769e1971efaeb3b4990f6aae907232afa7f91d4004f6273df43816e15b7f1bf7fa5a9fb35e13ddd19a80449ab23ea6047428c2fd2235218ea1a4c2f0ae8a72ca07734f264de25950e6faad43aa88c41278d2a84430fb47b542903045184b0fbe7d1d5bd5c1f3779ad5d06c54caf6a103b774ca02859dd3407e2e0c5085e04b619a2e9549c59af25c4e28f")
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
madvise$auto(0x0, 0x2003f0, 0x15)

1.84338025s ago: executing program 7 (id=2333):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r2)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8002}, 0x8010)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$auto_UI_SET_FFBIT(r4, 0x4004556b, &(0x7f0000000040)=0x400)
setsockopt$auto(r1, 0x6, 0x1d, 0x0, 0x3f)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfdef)

1.783053771s ago: executing program 6 (id=2334):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x22202, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30)
setresuid$auto(0x0, 0x8, 0x8000)
ioprio_set$auto(0x3, 0x0, 0x4b34)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
getdents$auto(0xffffffffffffffff, 0x0, 0x62d4)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
close_range$auto(r0, 0xa, 0x7fff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)

1.708468229s ago: executing program 7 (id=2335):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e60900000000000000b2763d93c5574c3b1e16077e1e", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010001a80080001008703000004000480"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)

1.381349981s ago: executing program 7 (id=2336):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000)

1.229568171s ago: executing program 7 (id=2337):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000)
rseq$auto(0x0, 0xfffffff5, 0x0, 0x5)
mmap$auto(0x80, 0x40009, 0x7, 0x9b72, 0x7, 0x28000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032a0151eea860d7bd7000fcdb"], 0x14}, 0x1, 0xffffffa6}, 0x8000)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw0\x00', 0x40000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open$auto(0x0, 0x0, 0xfff, &(0x7f00000000c0)={0x1, 0x4, 0x37046cbf, 0xb3da})
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8003, 0x0)
setreuid$auto(0x8, 0x9d7)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r3, 0x1, &(0x7f00000000c0))
mmap$auto(0x0, 0x8, 0x9, 0x15, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/veth0_to_bond/router_solicitations\x00', 0x0, 0x0)
sendfile$auto(r5, r6, 0x0, 0xfdef)
dup2$auto(r6, r2)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0x4010ae67, 0x38)

288.472917ms ago: executing program 7 (id=2338):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram15\x00', 0x14f602, 0x0)
mlockall$auto(0x5)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f)
mmap$auto(0x0, 0x2020009, 0x20000000000003, 0xeb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x23, 0x0)
r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r2, 0x0, 0x4)
sysfs$auto(0xffffffff, 0x16, 0xffffffffffffffff)
r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x880, 0x0)
close_range$auto(0xffffffffffffffff, r3, 0x80000001)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
add_key$auto_KEY_SPEC_THREAD_KEYRING(&(0x7f0000000000)='\x00', 0x0, 0x0, 0xffff, 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

285.5543ms ago: executing program 6 (id=2339):
timer_create$auto(0x9, 0x0, 0x0)
socketpair$auto(0x1d, 0x2, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = io_uring_setup$auto(0x4c2, 0x0)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x0, 0x0)
fsopen$auto(0x0, 0x1)
epoll_create$auto(0x4)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
setresuid$auto(0x5, 0x7f, 0x200)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
close_range$auto(0x2, 0x8, 0x0)

105.236ms ago: executing program 6 (id=2340):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
socket(0xa, 0x3, 0x3b) (async)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x20)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000040), r0)
mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0) (async)
socket(0xa, 0x2, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) (async)
r2 = socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
connect$auto(r2, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57)
write$auto(0x3, 0x0, 0x3f00) (async)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x701642, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mlock$auto(0x112, 0x80006) (async)
mlockall$auto(0x800000000000005) (async)
madvise$auto(0x0, 0x200007, 0x19)
write$auto(r1, 0x0, 0xa3d9) (async)
r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
write$auto_proc_mem_operations_base(r4, &(0x7f0000001680), 0x0) (async)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async)
fsopen$auto(0x0, 0x1)

0s ago: executing program 6 (id=2341):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

kernel console output (not intermixed with test programs):

_pfx_do_mmap+0x10/0x10
[  276.558962][ T9307]  ? __pfx_down_write_killable+0x10/0x10
[  276.558999][ T9307]  vm_mmap_pgoff+0x29e/0x470
[  276.559036][ T9307]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  276.559076][ T9307]  ? __x64_sys_futex+0x1e0/0x4c0
[  276.559109][ T9307]  ? __x64_sys_futex+0x1e9/0x4c0
[  276.559148][ T9307]  ksys_mmap_pgoff+0x7d/0x5c0
[  276.559177][ T9307]  ? xfd_validate_state+0x61/0x180
[  276.559213][ T9307]  ? __pfx_do_writev+0x10/0x10
[  276.559254][ T9307]  __x64_sys_mmap+0x125/0x190
[  276.559284][ T9307]  do_syscall_64+0xcd/0x4b0
[  276.559313][ T9307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.559340][ T9307] RIP: 0033:0x7fbcba58eec9
[  276.559362][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.559386][ T9307] RSP: 002b:00007fbcbb4d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  276.559411][ T9307] RAX: ffffffffffffffda RBX: 00007fbcba7e5fa0 RCX: 00007fbcba58eec9
[  276.559429][ T9307] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  276.559445][ T9307] RBP: 00007fbcba611f91 R08: 0000000000000003 R09: 0000000040008000
[  276.559462][ T9307] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  276.559477][ T9307] R13: 00007fbcba7e6038 R14: 00007fbcba7e5fa0 R15: 00007ffd8a179298
[  276.559514][ T9307]  </TASK>
[  280.758121][ T9368] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input12
[  280.774983][ T9373] Process accounting resumed
[  281.357686][ T9388] netlink: 93 bytes leftover after parsing attributes in process `syz.0.734'.
[  282.176677][ T9403] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  282.377698][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  282.662391][ T9407] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  282.727090][ T9415] netlink: 186 bytes leftover after parsing attributes in process `syz.2.744'.
[  282.734223][ T9412] netlink: zone id is out of range
[  282.742353][ T9412] netlink: zone id is out of range
[  282.760446][ T9412] netlink: zone id is out of range
[  282.798678][ T9416] netlink: 17 bytes leftover after parsing attributes in process `syz.0.743'.
[  282.808238][ T9412] netlink: zone id is out of range
[  282.991728][ T9412] netlink: zone id is out of range
[  282.996914][ T9412] netlink: zone id is out of range
[  283.063531][ T9412] netlink: zone id is out of range
[  283.068783][ T9412] netlink: zone id is out of range
[  283.110583][ T9412] netlink: zone id is out of range
[  283.168828][ T9428] kAFS: Invalid Command on /proc/fs/afs/cells file
[  283.179023][ T9412] netlink: zone id is out of range
[  283.939450][ T5853] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1
[  284.918791][ T9474] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  284.970099][ T9475] usb usb36: usbfs: process 9475 (syz.3.758) did not claim interface 0 before use
[  286.549650][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  290.423257][ T9592] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  290.612936][   T30] audit: type=1800 audit(1759456071.417:5): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=08 name="lu_gp_id" dev="configfs" ino=25772 res=0 errno=0
[  293.143509][ T9638] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  294.054637][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'.
[  294.122212][   T30] audit: type=1326 audit(1759456074.935:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.2.798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f938eec9 code=0x0
[  294.291824][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  295.075357][ T5853] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  297.059096][ T9706] can: request_module (can-proto-0) failed.
[  297.389258][ T9719] net_ratelimit: 1 callbacks suppressed
[  297.389277][ T9719] openvswitch: netlink: VXLAN extension 64 out of range max 1
[  299.036173][ T9759] Invalid ELF header magic: != ELF
[  299.936764][ T9789] netlink: 'syz.2.828': attribute type 2 has an invalid length.
[  300.456336][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'.
[  300.541254][ T9805] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  301.798547][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'.
[  301.846683][ T9828] zswap: compressor  not available
[  302.759739][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[  304.352163][ T9893] Console: switching to colour VGA+ 80x25
[  306.145703][ T9923] WARNING! power/level is deprecated; use power/control instead
[  306.613973][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'.
[  310.749617][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'.
[  312.146815][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'.
[  312.522754][T10008] random: crng reseeded on system resumption
[  313.297599][T10016] usb usb36: usbfs: process 10016 (syz.1.880) did not claim interface 0 before use
[  315.154290][   T30] audit: type=1804 audit(1759456096.084:7): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.883" name="file0" dev="tmpfs" ino=1296 res=1 errno=0
[  315.324748][T10040] blkio.reset_stats is deprecated
[  315.373245][T10040] openvswitch: netlink: IP tunnel dst address not specified
[  316.520694][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  316.527017][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  318.447358][T10097] netlink: 342 bytes leftover after parsing attributes in process `syz.1.897'.
[  319.472138][T10114] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  320.125209][T10131] netlink: 330 bytes leftover after parsing attributes in process `syz.2.904'.
[  320.147623][T10131] : renamed from bond0 (while UP)
[  322.145987][T10157] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  322.200160][T10157] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  322.262623][T10157] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  322.287509][T10160] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  322.925646][T10171] FAULT_INJECTION: forcing a failure.
[  322.925646][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  322.969912][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) 
[  322.969947][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  322.969962][T10171] Call Trace:
[  322.969969][T10171]  <TASK>
[  322.969978][T10171]  dump_stack_lvl+0x16c/0x1f0
[  322.970009][T10171]  should_fail_ex+0x512/0x640
[  322.970060][T10171]  _copy_from_user+0x2e/0xd0
[  322.970085][T10171]  get_timespec64+0x8b/0x1b0
[  322.970118][T10171]  ? __pfx_get_timespec64+0x10/0x10
[  322.970147][T10171]  ? ktime_get+0x200/0x310
[  322.970187][T10171]  __x64_sys_futex+0x288/0x4c0
[  322.970226][T10171]  ? __pfx___x64_sys_futex+0x10/0x10
[  322.970256][T10171]  ? xfd_validate_state+0x61/0x180
[  322.970299][T10171]  do_syscall_64+0xcd/0x4b0
[  322.970325][T10171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.970347][T10171] RIP: 0033:0x7fbcba58eec9
[  322.970367][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.970389][T10171] RSP: 002b:00007ffd8a1793f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  322.970413][T10171] RAX: ffffffffffffffda RBX: 000000000004efc1 RCX: 00007fbcba58eec9
[  322.970429][T10171] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbcba7e5fac
[  322.970443][T10171] RBP: 0000000000000032 R08: 00007fbcbb4d9000 R09: 000000138a1796ef
[  322.970458][T10171] R10: 00007ffd8a1794f0 R11: 0000000000000246 R12: 00007fbcba7e5fac
[  322.970474][T10171] R13: 00007ffd8a1794f0 R14: 000000000004eff3 R15: 00007ffd8a179510
[  322.970507][T10171]  </TASK>
[  323.714514][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  323.761613][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  323.774123][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  323.792427][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  323.810341][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  323.920439][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'.
[  323.956089][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.963653][T10169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.708619][T10179] chnl_net:caif_netlink_parms(): no params data found
[  324.904332][T10191] ptp ptp0: only physical clock in use now
[  325.315690][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'.
[  325.342470][T10179] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.377806][T10179] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.399644][T10179] bridge_slave_0: entered allmulticast mode
[  325.432766][T10179] bridge_slave_0: entered promiscuous mode
[  325.488745][T10179] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.574096][T10179] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.619338][T10179] bridge_slave_1: entered allmulticast mode
[  325.679205][T10179] bridge_slave_1: entered promiscuous mode
[  325.908828][ T5158] Bluetooth: hci4: command tx timeout
[  326.197112][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.223547][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.370690][T10225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  326.413085][T10179] team0: Port device team_slave_0 added
[  326.444531][T10179] team0: Port device team_slave_1 added
[  326.676946][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.699070][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.784448][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.342261][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.355091][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.410623][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.721766][T10179] hsr_slave_0: entered promiscuous mode
[  327.744969][T10179] hsr_slave_1: entered promiscuous mode
[  327.804509][T10179] debugfs: 'hsr0' already exists in 'hsr'
[  327.854154][T10179] Cannot create hsr debugfs directory
[  327.990264][ T5158] Bluetooth: hci4: command tx timeout
[  328.830696][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  329.120324][T10179] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  329.283191][T10288] FAULT_INJECTION: forcing a failure.
[  329.283191][T10288] name failslab, interval 1, probability 0, space 0, times 0
[  329.340674][T10288] CPU: 1 UID: 0 PID: 10288 Comm: syz.1.936 Not tainted syzkaller #0 PREEMPT(full) 
[  329.340711][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  329.340727][T10288] Call Trace:
[  329.340732][T10288]  <TASK>
[  329.340739][T10288]  dump_stack_lvl+0x16c/0x1f0
[  329.340760][T10288]  should_fail_ex+0x512/0x640
[  329.340784][T10288]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  329.340808][T10288]  should_failslab+0xc2/0x120
[  329.340828][T10288]  __kmalloc_cache_noprof+0x6a/0x3e0
[  329.340850][T10288]  ? kvm_dev_ioctl+0x13ce/0x1af0
[  329.340869][T10288]  kvm_dev_ioctl+0x13ce/0x1af0
[  329.340890][T10288]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  329.340912][T10288]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  329.340928][T10288]  __x64_sys_ioctl+0x18e/0x210
[  329.340949][T10288]  do_syscall_64+0xcd/0x4b0
[  329.340965][T10288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.340979][T10288] RIP: 0033:0x7f8b13f8eec9
[  329.340992][T10288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.341005][T10288] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  329.341020][T10288] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  329.341029][T10288] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002
[  329.341037][T10288] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  329.341045][T10288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.341053][T10288] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  329.341071][T10288]  </TASK>
[  329.695344][T10290] openvswitch: netlink: Flow actions attr not present in new flow.
[  329.759735][T10179] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  329.913342][T10179] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  329.991281][T10179] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  330.057549][ T5158] Bluetooth: hci4: command tx timeout
[  330.978065][T10179] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.038510][T10179] 8021q: adding VLAN 0 to HW filter on device team0
[  331.109231][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.116520][ T8683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.220218][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.227485][ T8683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.585726][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.845656][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.121479][ T5158] Bluetooth: hci4: command tx timeout
[  332.231403][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.356764][T10328] netlink: 'syz.1.943': attribute type 9 has an invalid length.
[  332.404289][T10328] netlink: 330 bytes leftover after parsing attributes in process `syz.1.943'.
[  332.557369][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.669290][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'.
[  332.683734][T10330] zswap: compressor  not available
[  333.084172][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.356893][T10352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  334.335266][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.353754][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.367908][   T36] bond0 (unregistering): Released all slaves
[  334.969478][T10179] veth0_vlan: entered promiscuous mode
[  335.035644][T10179] veth1_vlan: entered promiscuous mode
[  335.153870][   T36] hsr_slave_0: left promiscuous mode
[  335.172159][   T36] hsr_slave_1: left promiscuous mode
[  335.210378][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.237133][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.246463][T10396] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  335.285444][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.311036][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.392964][   T36] veth1_macvtap: left promiscuous mode
[  335.407750][   T36] veth0_macvtap: left promiscuous mode
[  335.416443][   T36] veth1_vlan: left promiscuous mode
[  335.422447][   T36] veth0_vlan: left promiscuous mode
[  337.017577][   T36] team0 (unregistering): Port device team_slave_1 removed
[  337.144495][   T36] team0 (unregistering): Port device team_slave_0 removed
[  337.757110][T10179] veth0_macvtap: entered promiscuous mode
[  337.778461][T10179] veth1_macvtap: entered promiscuous mode
[  337.861594][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.922080][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.025412][ T8686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.047371][ T8686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.236575][ T8686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.267110][ T8686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.468745][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.491753][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.580479][ T8681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.598650][ T8681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.731165][T10464] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  339.103163][T10476] sg_write: data in/out 2359516/106 bytes for SCSI command 0x0-- guessing data in;
[  339.103163][T10476]    program syz.4.911 not setting count and/or reply_len properly
[  341.227842][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'.
[  343.377231][T10548] usb usb36: usbfs: process 10548 (syz.4.979) did not claim interface 0 before use
[  345.044351][T10579] netlink: set zone limit has 8 unknown bytes
[  345.562392][T10597] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[  347.060086][T10629] sg_write: data in/out 2359516/106 bytes for SCSI command 0x0-- guessing data in;
[  347.060086][T10629]    program syz.3.996 not setting count and/or reply_len properly
[  347.872408][T10639] netlink: 'syz.3.998': attribute type 1 has an invalid length.
[  350.949443][T10700] FAULT_INJECTION: forcing a failure.
[  350.949443][T10700] name failslab, interval 1, probability 0, space 0, times 0
[  350.962165][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.1.1007 Not tainted syzkaller #0 PREEMPT(full) 
[  350.962185][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  350.962194][T10700] Call Trace:
[  350.962201][T10700]  <TASK>
[  350.962207][T10700]  dump_stack_lvl+0x16c/0x1f0
[  350.962227][T10700]  should_fail_ex+0x512/0x640
[  350.962250][T10700]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  350.962268][T10700]  should_failslab+0xc2/0x120
[  350.962284][T10700]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  350.962299][T10700]  ? __d_alloc+0x32/0xae0
[  350.962317][T10700]  __d_alloc+0x32/0xae0
[  350.962332][T10700]  d_alloc_pseudo+0x1c/0xc0
[  350.962350][T10700]  alloc_file_pseudo+0xcf/0x230
[  350.962370][T10700]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  350.962389][T10700]  ? alloc_fd+0x471/0x7d0
[  350.962412][T10700]  sock_alloc_file+0x50/0x210
[  350.962429][T10700]  __sys_socket+0x1c0/0x260
[  350.962448][T10700]  ? __pfx___sys_socket+0x10/0x10
[  350.962468][T10700]  ? do_user_addr_fault+0x843/0x1370
[  350.962488][T10700]  __x64_sys_socket+0x72/0xb0
[  350.962506][T10700]  ? lockdep_hardirqs_on+0x7c/0x110
[  350.962519][T10700]  do_syscall_64+0xcd/0x4b0
[  350.962534][T10700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.962549][T10700] RIP: 0033:0x7f8b13f90de7
[  350.962562][T10700] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.962575][T10700] RSP: 002b:00007f8b14de0fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  350.962590][T10700] RAX: ffffffffffffffda RBX: 00007f8b141e6090 RCX: 00007f8b13f90de7
[  350.962599][T10700] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  350.962607][T10700] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  350.962615][T10700] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  350.962623][T10700] R13: 00007f8b141e6128 R14: 00007f8b141e6090 R15: 00007ffd03009988
[  350.962642][T10700]  </TASK>
[  351.641877][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'.
[  351.977524][T10709] FAULT_INJECTION: forcing a failure.
[  351.977524][T10709] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.026255][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) 
[  352.026285][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  352.026294][T10709] Call Trace:
[  352.026299][T10709]  <TASK>
[  352.026305][T10709]  dump_stack_lvl+0x16c/0x1f0
[  352.026325][T10709]  should_fail_ex+0x512/0x640
[  352.026351][T10709]  _copy_from_user+0x2e/0xd0
[  352.026365][T10709]  get_bitmap+0x6d/0x110
[  352.026379][T10709]  get_nodes+0x1df/0x210
[  352.026392][T10709]  ? __pfx_get_nodes+0x10/0x10
[  352.026410][T10709]  kernel_mbind+0x139/0x1f0
[  352.026430][T10709]  ? __pfx_kernel_mbind+0x10/0x10
[  352.026453][T10709]  do_syscall_64+0xcd/0x4b0
[  352.026469][T10709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.026483][T10709] RIP: 0033:0x7f8b13f8eec9
[  352.026497][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.026510][T10709] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  352.026523][T10709] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  352.026532][T10709] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000008000
[  352.026540][T10709] RBP: 00007f8b14011f91 R08: 0000000000000003 R09: 0000000000000001
[  352.026548][T10709] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000
[  352.026556][T10709] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  352.026574][T10709]  </TASK>
[  352.179976][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.370946][T10721] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input15
[  353.482175][T10746] zswap: compressor  not available
[  357.426980][T10845] ICMPv6: process `syz.4.1032' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  358.065764][   T30] audit: type=1804 audit(1759456139.238:8): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1034" name="/newroot/246/file0" dev="tmpfs" ino=1322 res=1 errno=0
[  358.122311][T10858] netlink: 'syz.3.1034': attribute type 2 has an invalid length.
[  358.143274][   T30] audit: type=1804 audit(1759456139.288:9): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1034" name="/newroot/246/file0" dev="tmpfs" ino=1322 res=1 errno=0
[  359.031934][T10875] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  359.317575][T10870] bond0: option arp_interval: invalid value ()
[  359.354526][T10870] bond0: option arp_interval: allowed values 0 - 2147483647
[  359.723725][T10887] usb usb36: usbfs: process 10887 (syz.3.1039) did not claim interface 0 before use
[  359.831187][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'.
[  360.770023][   T30] audit: type=1800 audit(1759456141.901:10): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1042" name="dbroot" dev="configfs" ino=32827 res=0 errno=0
[  363.408436][T10957] ptrace attach of "./syz-executor exec"[10962] was attempted by "./syz-executor exec"[10957]
[  367.413978][T11048] syz.1.1070 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  367.434171][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'.
[  369.890675][T11095] capability: warning: `syz.4.1077' uses 32-bit capabilities (legacy support in use)
[  370.519984][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  370.529626][T11106] syz.4.1080 (11106): /proc/11104/oom_adj is deprecated, please use /proc/11104/oom_score_adj instead.
[  373.996679][T11136] zswap: compressor  not available
[  374.583648][T11164] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1088'.
[  374.959625][T11170] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  375.004846][T11172] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  375.063362][T11178] netlink: 306 bytes leftover after parsing attributes in process `syz.1.1091'.
[  375.333046][T11178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1091'.
[  375.509420][T11185] ptp ptp0: new virtual clock ptp1
[  375.559711][T11185] ptp ptp0: new virtual clock ptp2
[  375.587387][T11185] ptp ptp0: new virtual clock ptp3
[  375.620244][T11185] ptp ptp0: guarantee physical clock free running
[  376.579518][T11225] zswap: compressor  not available
[  377.528422][T11250] ptp ptp0: guarantee physical clock free running
[  377.645751][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  377.652107][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  379.223195][T11271] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1110'.
[  380.351377][T11299] [U] 
[  380.354523][T11299] [U] 
[  380.355486][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'.
[  380.357234][T11299] [U] 
[  380.357290][T11299] [U] 
[  380.381037][T11299] [U] 
[  380.383793][T11299] [U] 
[  380.386504][T11299] [U] 
[  380.389219][T11299] [U] 
[  380.446768][T11299] [U] 
[  380.449563][T11299] [U] 
[  380.452291][T11299] [U] 
[  380.455016][T11299] [U] 
[  380.459540][T11299] [U] 
[  380.462279][T11299] [U] 
[  380.465006][T11299] [U] 
[  380.467719][T11299] [U] 
[  380.486817][T11299] [U] 
[  380.489575][T11299] [U] 
[  380.492301][T11299] [U] 
[  380.495058][T11299] [U] 
[  380.508061][T11299] [U] 
[  380.510810][T11299] [U] 
[  380.513536][T11299] [U] 
[  380.516256][T11299] [U] 
[  380.539778][T11299] [U] 
[  380.542539][T11299] [U] 
[  380.545264][T11299] [U] 
[  380.547980][T11299] [U] 
[  380.551612][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.564632][T11299] [U] 
[  380.567379][T11299] [U] 
[  380.570100][T11299] [U] 
[  380.572819][T11299] [U] 
[  380.586126][T11299] [U] 
[  380.588880][T11299] [U] 
[  380.591600][T11299] [U] 
[  380.594315][T11299] [U] 
[  380.624249][T11299] [U] 
[  380.627006][T11299] [U] 
[  380.629723][T11299] [U] 
[  380.632434][T11299] [U] 
[  380.682224][T11299] [U] 
[  380.684972][T11299] [U] 
[  380.687686][T11299] [U] 
[  380.690393][T11299] [U] 
[  380.723784][T11299] [U] 
[  380.726534][T11299] [U] 
[  380.729245][T11299] [U] 
[  380.731962][T11299] [U] 
[  380.735040][T11299] [U] 
[  380.737762][T11299] [U] 
[  380.740456][T11299] [U] 
[  380.743154][T11299] [U] 
[  380.746313][T11299] [U] 
[  380.749039][T11299] [U] 
[  380.751750][T11299] [U] 
[  380.754458][T11299] [U] 
[  380.757577][T11299] [U] 
[  380.760293][T11299] [U] 
[  380.763008][T11299] [U] 
[  380.765721][T11299] [U] 
[  380.769085][T11299] [U] 
[  380.771806][T11299] [U] 
[  380.774525][T11299] [U] 
[  380.777240][T11299] [U] 
[  380.781030][T11299] [U] 
[  380.783752][T11299] [U] 
[  380.786463][T11299] [U] 
[  380.789173][T11299] [U] 
[  380.798541][T11299] [U] 
[  380.801275][T11299] [U] 
[  380.803992][T11299] [U] 
[  380.806700][T11299] [U] 
[  380.867212][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.883982][T11299] [U] 
[  380.886732][T11299] [U] 
[  380.889443][T11299] [U] 
[  380.892154][T11299] [U] 
[  380.966457][T11299] [U] 
[  380.969205][T11299] [U] 
[  380.971912][T11299] [U] 
[  380.974602][T11299] [U] 
[  381.168026][T11299] [U] 
[  381.173278][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.361300][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.009340][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.028817][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.037933][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.047437][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.055163][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.161645][T11332] random: crng reseeded on system resumption
[  382.238151][T11334] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  382.422319][T11338] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  382.452234][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1128'.
[  382.561498][T11338] macvtap0: entered promiscuous mode
[  382.609729][   T36] bridge_slave_1: left allmulticast mode
[  382.619135][   T36] bridge_slave_1: left promiscuous mode
[  382.652994][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.752008][   T36] bridge_slave_0: left allmulticast mode
[  382.782889][   T36] bridge_slave_0: left promiscuous mode
[  382.804444][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.040397][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.079299][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.097629][ T5853] Bluetooth: hci1: command tx timeout
[  384.196852][   T36] bond0 (unregistering): Released all slaves
[  384.502227][   T36] tipc: Left network mode
[  385.501440][T11329] chnl_net:caif_netlink_parms(): no params data found
[  385.619321][T11393] netlink: zone id is out of range
[  385.645014][T11393] netlink: zone id is out of range
[  385.707833][T11393] netlink: zone id is out of range
[  385.713009][T11393] netlink: zone id is out of range
[  385.835133][T11393] netlink: zone id is out of range
[  385.890205][   T36] hsr_slave_0: left promiscuous mode
[  385.996123][T11393] netlink: zone id is out of range
[  386.001283][T11393] netlink: zone id is out of range
[  386.020895][T11393] netlink: zone id is out of range
[  386.026137][T11393] netlink: zone id is out of range
[  386.031362][T11393] netlink: zone id is out of range
[  386.040178][   T36] hsr_slave_1: left promiscuous mode
[  386.138474][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.158788][ T5853] Bluetooth: hci1: command tx timeout
[  386.174574][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.203390][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.259027][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.347181][   T36] veth1_macvtap: left promiscuous mode
[  386.352705][   T36] veth0_macvtap: left promiscuous mode
[  386.367660][   T36] veth1_vlan: left promiscuous mode
[  386.394479][   T36] veth0_vlan: left promiscuous mode
[  388.172508][   T36] team0 (unregistering): Port device team_slave_1 removed
[  388.234484][ T5853] Bluetooth: hci1: command tx timeout
[  388.243377][   T36] team0 (unregistering): Port device team_slave_0 removed
[  388.326178][T11446] FAULT_INJECTION: forcing a failure.
[  388.326178][T11446] name failslab, interval 1, probability 0, space 0, times 0
[  388.339241][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(full) 
[  388.339276][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  388.339292][T11446] Call Trace:
[  388.339302][T11446]  <TASK>
[  388.339312][T11446]  dump_stack_lvl+0x16c/0x1f0
[  388.339345][T11446]  should_fail_ex+0x512/0x640
[  388.339386][T11446]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  388.339416][T11446]  should_failslab+0xc2/0x120
[  388.339444][T11446]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  388.339470][T11446]  ? security_file_alloc+0x34/0x2b0
[  388.339505][T11446]  security_file_alloc+0x34/0x2b0
[  388.339535][T11446]  init_file+0x93/0x4c0
[  388.339565][T11446]  alloc_empty_file+0x73/0x1e0
[  388.339598][T11446]  path_openat+0xda/0x2cb0
[  388.339620][T11446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.339659][T11446]  ? __pfx_path_openat+0x10/0x10
[  388.339694][T11446]  do_filp_open+0x20b/0x470
[  388.339715][T11446]  ? __pfx_do_filp_open+0x10/0x10
[  388.339763][T11446]  ? alloc_fd+0x471/0x7d0
[  388.339811][T11446]  do_sys_openat2+0x11b/0x1d0
[  388.339843][T11446]  ? __pfx_do_sys_openat2+0x10/0x10
[  388.339877][T11446]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  388.339919][T11446]  __x64_sys_openat+0x174/0x210
[  388.339960][T11446]  ? __pfx___x64_sys_openat+0x10/0x10
[  388.340004][T11446]  do_syscall_64+0xcd/0x4b0
[  388.340031][T11446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.340056][T11446] RIP: 0033:0x7f8b13f8eec9
[  388.340078][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.340103][T11446] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  388.340127][T11446] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  388.340144][T11446] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  388.340162][T11446] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  388.340176][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.340189][T11446] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  388.340221][T11446]  </TASK>
[  389.473685][T11329] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.495040][T11329] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.513964][T11329] bridge_slave_0: entered allmulticast mode
[  389.522197][T11329] bridge_slave_0: entered promiscuous mode
[  389.552446][T11329] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.565188][T11329] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.620812][T11329] bridge_slave_1: entered allmulticast mode
[  389.629202][T11329] bridge_slave_1: entered promiscuous mode
[  389.745682][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.844627][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.970502][T11329] team0: Port device team_slave_0 added
[  390.004925][T11329] team0: Port device team_slave_1 added
[  390.293800][ T5853] Bluetooth: hci1: command tx timeout
[  390.428925][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1150'.
[  390.449066][T11464] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1148'.
[  391.050848][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.058017][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.116381][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.132489][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.140076][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.165946][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.173267][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.451679][T11329] hsr_slave_0: entered promiscuous mode
[  391.533237][T11329] hsr_slave_1: entered promiscuous mode
[  391.549224][T11329] debugfs: 'hsr0' already exists in 'hsr'
[  391.570539][T11329] Cannot create hsr debugfs directory
[  392.951434][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.037822][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.070685][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.084804][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.110948][T11329] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  393.130308][T11329] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  393.184706][T11329] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  393.194509][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.231656][T11329] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  393.241131][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.278155][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.295100][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.310711][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.333042][T11522] __vm_enough_memory: pid: 11522, comm: syz.2.1157, bytes: 4398046511104 not enough memory for the allocation
[  393.713091][T11329] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.861755][T11329] 8021q: adding VLAN 0 to HW filter on device team0
[  393.943502][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.950721][ T8686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.006489][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.013698][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.224359][T11329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  394.696133][T11546] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1160'.
[  395.138146][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.925884][T11574] input: f�
 as /devices/virtual/input/input16
[  396.031090][T11329] veth0_vlan: entered promiscuous mode
[  396.062584][T11329] veth1_vlan: entered promiscuous mode
[  396.314955][T11329] veth0_macvtap: entered promiscuous mode
[  396.326250][T11329] veth1_macvtap: entered promiscuous mode
[  396.389871][T11329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.553381][T11329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.778237][ T8682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.833608][ T8682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.892551][ T8683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.956020][ T8683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.001930][T11600] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  397.022368][T11600] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  397.043999][T11600] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  397.050726][T11600] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  397.077307][T11600] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  397.109544][T11600] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  397.124811][T11600] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  397.144760][T11600] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  397.320247][ T7092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.364260][ T7092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.459075][ T8683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.523224][ T8683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.707507][T11610] ksmbd: Unknown IPC event: 14, ignore.
[  398.643226][T11630] net_ratelimit: 7 callbacks suppressed
[  398.643242][T11630] netlink: zone id is out of range
[  398.664108][T11630] netlink: zone id is out of range
[  398.681098][T11630] netlink: zone id is out of range
[  398.730388][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  398.747181][T11630] netlink: zone id is out of range
[  398.761371][T11630] netlink: zone id is out of range
[  398.858387][T11630] netlink: zone id is out of range
[  398.925939][T11630] netlink: zone id is out of range
[  399.050608][T11630] netlink: zone id is out of range
[  399.059221][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  399.065295][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout
[  399.127893][T11630] netlink: zone id is out of range
[  399.128879][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  399.133035][T11630] netlink: zone id is out of range
[  399.210078][T11636] random: crng reseeded on system resumption
[  399.847802][T11640] usb usb36: usbfs: process 11640 (syz.4.1174) did not claim interface 0 before use
[  401.145113][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  401.207034][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  402.573832][T11688] FAULT_INJECTION: forcing a failure.
[  402.573832][T11688] name failslab, interval 1, probability 0, space 0, times 0
[  402.640047][T11688] CPU: 0 UID: 0 PID: 11688 Comm: syz.1.1183 Not tainted syzkaller #0 PREEMPT(full) 
[  402.640077][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  402.640086][T11688] Call Trace:
[  402.640092][T11688]  <TASK>
[  402.640098][T11688]  dump_stack_lvl+0x16c/0x1f0
[  402.640119][T11688]  should_fail_ex+0x512/0x640
[  402.640142][T11688]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  402.640167][T11688]  should_failslab+0xc2/0x120
[  402.640184][T11688]  __kmalloc_cache_noprof+0x6a/0x3e0
[  402.640205][T11688]  ? ipv4_mib_init_net+0x263/0x5f0
[  402.640227][T11688]  ipv4_mib_init_net+0x263/0x5f0
[  402.640246][T11688]  ? __pfx_igmp_net_init+0x10/0x10
[  402.640267][T11688]  ? __pfx_ipv4_mib_init_net+0x10/0x10
[  402.640287][T11688]  ops_init+0x1df/0x5f0
[  402.640304][T11688]  setup_net+0x100/0x390
[  402.640319][T11688]  ? __pfx_setup_net+0x10/0x10
[  402.640335][T11688]  ? debug_mutex_init+0x37/0x70
[  402.640354][T11688]  copy_net_ns+0x2f8/0x690
[  402.640372][T11688]  create_new_namespaces+0x3ea/0xa90
[  402.640394][T11688]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  402.640414][T11688]  ksys_unshare+0x45b/0xa40
[  402.640435][T11688]  ? __pfx_ksys_unshare+0x10/0x10
[  402.640460][T11688]  ? xfd_validate_state+0x61/0x180
[  402.640488][T11688]  __x64_sys_unshare+0x31/0x40
[  402.640509][T11688]  do_syscall_64+0xcd/0x4b0
[  402.640526][T11688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.640541][T11688] RIP: 0033:0x7f8b13f8eec9
[  402.640553][T11688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.640567][T11688] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  402.640581][T11688] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  402.640591][T11688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  402.640599][T11688] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  402.640608][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.640617][T11688] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  402.640636][T11688]  </TASK>
[  403.186872][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  403.314124][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  405.011229][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1197'.
[  405.128384][T11731] veth0_macvtap: left promiscuous mode
[  405.549401][T11742] netlink: 'syz.2.1190': attribute type 33 has an invalid length.
[  406.405642][T11751] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1191'.
[  407.323739][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  407.362390][T11790] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1199'.
[  407.918139][T11801] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary
[  408.306506][T11813] usb usb36: usbfs: process 11813 (syz.5.1204) did not claim interface 0 before use
[  408.594486][T11825] warning: `syz.4.1206' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  408.970664][T11831] Invalid ELF header magic: != ELF
[  409.074248][T11831] delete_channel: no stack
[  409.948178][T11867] usbip-vudc usbip-vudc.0: gadget not bound
[  409.988837][T11863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  410.067662][T11866] ip_vti0: entered allmulticast mode
[  410.074369][T11858] zswap: compressor  not available
[  410.179165][T11871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  410.230946][T11871] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  410.288423][T11871] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  410.301233][T11871] page_type: f5(slab)
[  410.333130][T11871] raw: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[  410.376476][T11871] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  410.432246][T11871] head: 00fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[  410.498616][T11871] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  410.518528][T11871] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  410.576396][T11871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  410.617131][T11871] page dumped because: unmovable page
[  410.679302][T11871] page_owner tracks the page as allocated
[  410.701274][T11871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5222, tgid 5222 (udevadm), ts 35962693456, free_ts 28718551559
[  410.785977][T11871]  post_alloc_hook+0x1c0/0x230
[  410.809809][T11871]  get_page_from_freelist+0x132b/0x38e0
[  410.815423][T11871]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  410.859696][T11871]  alloc_pages_mpol+0x1fb/0x550
[  410.864613][T11871]  new_slab+0x247/0x330
[  410.896437][T11871]  ___slab_alloc+0xcf2/0x1750
[  410.922730][T11871]  __slab_alloc.constprop.0+0x56/0xb0
[  410.953468][T11871]  __kmalloc_noprof+0x2f2/0x510
[  410.976102][T11871]  tomoyo_realpath_from_path+0xc2/0x6e0
[  411.006128][T11871]  tomoyo_check_open_permission+0x2ab/0x3c0
[  411.012078][T11871]  tomoyo_file_open+0x6b/0x90
[  411.035738][T11871]  security_file_open+0x84/0x1e0
[  411.041908][T11871]  do_dentry_open+0x596/0x1530
[  411.048811][T11871]  vfs_open+0x82/0x3f0
[  411.052934][T11871]  path_openat+0x1de4/0x2cb0
[  411.064316][T11871]  do_filp_open+0x20b/0x470
[  411.070427][T11871] page last free pid 1 tgid 1 stack trace:
[  411.105428][T11871]  __free_frozen_pages+0x7d5/0x10f0
[  411.111581][T11871]  free_contig_range+0x183/0x4b0
[  411.125275][T11871]  destroy_args+0x794/0xc10
[  411.135217][T11871]  debug_vm_pgtable+0x1a32/0x3640
[  411.140303][T11871]  do_one_initcall+0x120/0x6e0
[  411.145398][T11871]  kernel_init_freeable+0x5c2/0x910
[  411.150627][T11871]  kernel_init+0x1c/0x2b0
[  411.154992][T11871]  ret_from_fork+0x56d/0x730
[  411.161384][T11871]  ret_from_fork_asm+0x1a/0x30
[  411.438034][T11870] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18
[  413.247791][T11929] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1222'.
[  413.257324][T11930] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1222'.
[  413.413242][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'.
[  414.283025][T11948] FAULT_INJECTION: forcing a failure.
[  414.283025][T11948] name failslab, interval 1, probability 0, space 0, times 0
[  414.323418][T11948] CPU: 0 UID: 0 PID: 11948 Comm: syz.4.1224 Not tainted syzkaller #0 PREEMPT(full) 
[  414.323455][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  414.323473][T11948] Call Trace:
[  414.323482][T11948]  <TASK>
[  414.323493][T11948]  dump_stack_lvl+0x16c/0x1f0
[  414.323526][T11948]  should_fail_ex+0x512/0x640
[  414.323563][T11948]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  414.323593][T11948]  should_failslab+0xc2/0x120
[  414.323621][T11948]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  414.323646][T11948]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  414.323688][T11948]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  414.323728][T11948]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  414.323767][T11948]  alloc_inode+0x64/0x240
[  414.323799][T11948]  new_inode+0x22/0x1c0
[  414.323832][T11948]  hugetlbfs_get_inode+0x354/0x730
[  414.323877][T11948]  hugetlb_file_setup+0x15b/0x620
[  414.323913][T11948]  ksys_mmap_pgoff+0x189/0x5c0
[  414.323952][T11948]  __x64_sys_mmap+0x125/0x190
[  414.323981][T11948]  do_syscall_64+0xcd/0x4b0
[  414.324010][T11948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.324036][T11948] RIP: 0033:0x7fdbf8b8eec9
[  414.324058][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.324084][T11948] RSP: 002b:00007fdbf99f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  414.324110][T11948] RAX: ffffffffffffffda RBX: 00007fdbf8de5fa0 RCX: 00007fdbf8b8eec9
[  414.324128][T11948] RDX: 0000000000009c0b RSI: 000000000000000c RDI: 0000000000000000
[  414.324144][T11948] RBP: 00007fdbf8c11f91 R08: ffffffffffffffff R09: 0000300000000000
[  414.324162][T11948] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000
[  414.324178][T11948] R13: 00007fdbf8de6038 R14: 00007fdbf8de5fa0 R15: 00007ffd89354d98
[  414.324213][T11948]  </TASK>
[  415.709674][T11962] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1228'.
[  416.690016][T11989] usb usb36: usbfs: process 11989 (syz.4.1243) did not claim interface 0 before use
[  417.101374][T11968] kexec: Could not allocate control_code_buffer
[  418.984749][T11997] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  418.991020][T11997] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  419.127961][T11997] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  419.178948][T11997] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  419.299056][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  419.671038][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  420.094275][T12041] usb usb36: usbfs: process 12041 (syz.4.1247) did not claim interface 0 before use
[  421.025150][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout
[  421.175424][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout
[  421.181527][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  422.183545][T12075] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  422.859289][T12085] futex_wake_op: syz.1.1257 tries to shift op by -2048; fix this program
[  422.875361][T12085] futex_wake_op: syz.1.1257 tries to shift op by -2048; fix this program
[  423.863507][T12095] afs: Bad value for 'source'
[  424.853620][T12115] usb usb36: usbfs: process 12115 (syz.5.1262) did not claim interface 0 before use
[  426.746991][T12144] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  428.246988][T12167] usb usb36: usbfs: process 12167 (syz.1.1274) did not claim interface 0 before use
[  428.363340][T12155] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  428.373724][T12155] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  428.385693][T12155] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  428.394040][T12155] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.848124][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  430.405254][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout
[  430.411473][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout
[  430.417719][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout
[  433.852944][T12278] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  434.031067][T12281] sysfs_service_op_show: Client not running :-5:
[  434.996497][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1303'.
[  435.588233][ T5853] Bluetooth: hci0: ISO packet too small
[  437.027907][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1313'.
[  437.076317][T12342] bridge_slave_1: left allmulticast mode
[  437.108055][T12342] bridge_slave_1: left promiscuous mode
[  437.139473][T12342] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.739812][T12342] bridge_slave_0: left allmulticast mode
[  437.745477][T12342] bridge_slave_0: left promiscuous mode
[  437.772974][T12342] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.419400][T12368] nbd: must specify a size in bytes for the device
[  438.428128][T12367] nbd: must specify a size in bytes for the device
[  438.775502][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  438.784336][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.859722][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'.
[  441.438051][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'.
[  442.500442][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'.
[  443.160033][T12474] __vm_enough_memory: 55 callbacks suppressed
[  443.160049][T12474] __vm_enough_memory: pid: 12474, comm: syz.2.1343, bytes: 4398046511104 not enough memory for the allocation
[  443.403704][T12479] ima: policy update failed
[  443.443421][   T30] audit: type=1802 audit(4294967336.076:11): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1345" res=0 errno=0
[  443.776221][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  443.981773][T12500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1348'.
[  444.060426][T12499] net_ratelimit: 7 callbacks suppressed
[  444.060441][T12499] netlink: zone id is out of range
[  445.084334][T12521] openvswitch: netlink: Missing valid actions attribute.
[  445.203349][T12515] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  447.444750][T12552] CIFS mount error: No usable UNC path provided in device string!
[  447.444750][T12552] 
[  447.465094][T12552] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  447.465151][T12549] svc: failed to register nfsdv3 RPC service (errno 111).
[  447.568107][T12549] svc: failed to register nfsaclv3 RPC service (errno 111).
[  447.596394][T12550] synth uevent: /bus/usb: unknown uevent action string
[  447.812886][T12559] Invalid ELF header magic: != ELF
[  447.820238][T12560] Invalid ELF header magic: != ELF
[  448.802249][T12582] __vm_enough_memory: pid: 12582, comm: syz.5.1373, bytes: 4398046511104 not enough memory for the allocation
[  453.529135][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'.
[  453.585952][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'.
[  454.072041][T12665] svc: failed to register nfsdv3 RPC service (errno 111).
[  454.203971][T12665] svc: failed to register nfsaclv3 RPC service (errno 111).
[  455.812910][   T30] audit: type=1800 audit(4294967348.490:12): pid=12699 uid=4 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1400" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  461.348036][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'.
[  461.484249][T12805] hub 8-0:1.0: USB hub found
[  461.542078][T12805] hub 8-0:1.0: 1 port detected
[  464.940990][T12879] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1440'.
[  469.099235][T12954] netlink: 302 bytes leftover after parsing attributes in process `syz.1.1458'.
[  469.816157][T12973] netlink: zone id is out of range
[  469.822603][T12973] netlink: zone id is out of range
[  469.832949][T12973] netlink: zone id is out of range
[  469.838304][T12973] netlink: zone id is out of range
[  469.855470][T12973] netlink: zone id is out of range
[  469.862323][T12973] netlink: zone id is out of range
[  469.867946][T12973] netlink: zone id is out of range
[  469.877282][T12973] netlink: zone id is out of range
[  469.908671][T12982] netlink: zone id is out of range
[  469.916198][T12973] netlink: zone id is out of range
[  470.468455][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.481128][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.505534][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.570664][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.591223][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.616567][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.676245][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.693180][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.709774][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.745029][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.771811][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.782017][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.793612][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.804542][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.820935][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.849087][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.883363][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.904871][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.916598][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.927885][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.941101][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.960463][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.972687][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.984605][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  470.995992][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  471.006737][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  471.019508][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  471.033373][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  471.046923][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  471.072597][T12998] usb usb37: usbfs: process 12998 (syz.1.1466) did not claim interface 0 before use
[  472.187376][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1475'.
[  473.314738][T13066] random: crng reseeded on system resumption
[  473.742789][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'.
[  475.245600][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'.
[  479.149150][T13154] input: jJǸ���;9�%v����l��Q�	J86�� as /devices/virtual/input/input20
[  479.945785][T13174] input: f�
 as /devices/virtual/input/input21
[  481.311513][T13191] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  481.330998][T13191] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  481.337127][T13191] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  481.350599][T13191] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  482.035568][T13217] usbip-vudc usbip-vudc.0: gadget not bound
[  482.693117][T12209] Bluetooth: hci0: command 0x0c1a tx timeout
[  483.331869][T12209] Bluetooth: hci4: command 0x0c1a tx timeout
[  483.337979][T12209] Bluetooth: hci2: command 0x0c1a tx timeout
[  483.412732][T12209] Bluetooth: hci1: command 0x0c1a tx timeout
[  485.693676][T13252] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.1522: 7
[  486.077453][T13260] net_ratelimit: 134 callbacks suppressed
[  486.077476][T13260] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  488.159063][T13295] FAULT_INJECTION: forcing a failure.
[  488.159063][T13295] name failslab, interval 1, probability 0, space 0, times 0
[  488.264996][T13295] CPU: 0 UID: 0 PID: 13295 Comm: syz.1.1532 Not tainted syzkaller #0 PREEMPT(full) 
[  488.265033][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  488.265049][T13295] Call Trace:
[  488.265058][T13295]  <TASK>
[  488.265069][T13295]  dump_stack_lvl+0x16c/0x1f0
[  488.265102][T13295]  should_fail_ex+0x512/0x640
[  488.265136][T13295]  ? __kmalloc_noprof+0xbf/0x510
[  488.265161][T13295]  ? kvm_io_bus_register_dev+0x1b9/0x7f0
[  488.265189][T13295]  should_failslab+0xc2/0x120
[  488.265216][T13295]  __kmalloc_noprof+0xd2/0x510
[  488.265250][T13295]  kvm_io_bus_register_dev+0x1b9/0x7f0
[  488.265290][T13295]  kvm_ioapic_init+0x429/0x590
[  488.265326][T13295]  kvm_arch_vm_ioctl+0x8c6/0x1860
[  488.265357][T13295]  ? register_lock_class+0x41/0x4c0
[  488.265394][T13295]  ? find_held_lock+0x2b/0x80
[  488.265423][T13295]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  488.265462][T13295]  ? __lock_acquire+0x62e/0x1ce0
[  488.265503][T13295]  ? __lock_acquire+0x62e/0x1ce0
[  488.265546][T13295]  ? __lock_acquire+0x62e/0x1ce0
[  488.265588][T13295]  ? __lock_acquire+0x62e/0x1ce0
[  488.265642][T13295]  ? is_bpf_text_address+0x8a/0x1a0
[  488.265682][T13295]  ? bpf_ksym_find+0x124/0x1c0
[  488.265712][T13295]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  488.265744][T13295]  ? is_bpf_text_address+0x94/0x1a0
[  488.265781][T13295]  ? kernel_text_address+0x8d/0x100
[  488.265817][T13295]  ? __kernel_text_address+0xd/0x40
[  488.265844][T13295]  ? unwind_get_return_address+0x59/0xa0
[  488.265878][T13295]  ? arch_stack_walk+0xa6/0x100
[  488.265921][T13295]  ? stack_trace_save+0x8e/0xc0
[  488.265952][T13295]  ? __pfx_stack_trace_save+0x10/0x10
[  488.265985][T13295]  ? stack_depot_save_flags+0x29/0x9c0
[  488.266024][T13295]  ? __lock_acquire+0xb97/0x1ce0
[  488.266065][T13295]  ? kasan_save_stack+0x42/0x60
[  488.266089][T13295]  ? kasan_save_stack+0x33/0x60
[  488.266116][T13295]  ? kasan_save_track+0x14/0x30
[  488.266139][T13295]  ? kasan_save_free_info+0x3b/0x60
[  488.266174][T13295]  ? __kasan_slab_free+0x60/0x70
[  488.266199][T13295]  ? kfree+0x2b4/0x4d0
[  488.266238][T13295]  kvm_vm_ioctl+0x1a91/0x4000
[  488.266281][T13295]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  488.266338][T13295]  ? kasan_quarantine_put+0x10a/0x240
[  488.266381][T13295]  ? lockdep_hardirqs_on+0x7c/0x110
[  488.266411][T13295]  ? find_held_lock+0x2b/0x80
[  488.266441][T13295]  ? tomoyo_path_number_perm+0x295/0x580
[  488.266477][T13295]  ? tomoyo_path_number_perm+0x18d/0x580
[  488.266509][T13295]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  488.266551][T13295]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  488.266581][T13295]  ? do_vfs_ioctl+0x128/0x14f0
[  488.266615][T13295]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  488.266661][T13295]  ? find_held_lock+0x2b/0x80
[  488.266689][T13295]  ? hook_file_ioctl_common+0x145/0x410
[  488.266727][T13295]  ? __fget_files+0x20e/0x3c0
[  488.266772][T13295]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  488.266809][T13295]  __x64_sys_ioctl+0x18e/0x210
[  488.266848][T13295]  do_syscall_64+0xcd/0x4b0
[  488.266879][T13295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.266907][T13295] RIP: 0033:0x7f8b13f8eec9
[  488.266929][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  488.266955][T13295] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  488.266980][T13295] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  488.266998][T13295] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003
[  488.267014][T13295] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  488.267029][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.267044][T13295] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  488.267077][T13295]  </TASK>
[  489.266986][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'.
[  489.548810][T13326] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  490.102699][T13327] usb usb36: usbfs: process 13327 (syz.4.1542) did not claim interface 0 before use
[  490.207736][T13334] usb usb36: usbfs: process 13334 (syz.1.1545) did not claim interface 0 before use
[  491.445319][T13349] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1549'.
[  491.518993][T13353] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1549'.
[  491.845131][T13349] netlink: 290 bytes leftover after parsing attributes in process `syz.1.1549'.
[  494.960295][T13394] netlink: 29 bytes leftover after parsing attributes in process `syz.4.1560'.
[  496.229949][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'.
[  496.662928][ T8683] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.707484][T13428] FAULT_INJECTION: forcing a failure.
[  496.707484][T13428] name failslab, interval 1, probability 0, space 0, times 0
[  496.725469][T13428] CPU: 1 UID: 0 PID: 13428 Comm: syz.1.1568 Not tainted syzkaller #0 PREEMPT(full) 
[  496.725509][T13428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  496.725525][T13428] Call Trace:
[  496.725534][T13428]  <TASK>
[  496.725544][T13428]  dump_stack_lvl+0x16c/0x1f0
[  496.725577][T13428]  should_fail_ex+0x512/0x640
[  496.725614][T13428]  ? __kmalloc_noprof+0xbf/0x510
[  496.725642][T13428]  ? __register_sysctl_table+0xb3/0x1900
[  496.725677][T13428]  should_failslab+0xc2/0x120
[  496.725707][T13428]  __kmalloc_noprof+0xd2/0x510
[  496.725741][T13428]  __register_sysctl_table+0xb3/0x1900
[  496.725775][T13428]  ? is_module_address+0x5f/0xf0
[  496.725821][T13428]  ? __pfx___register_sysctl_table+0x10/0x10
[  496.725855][T13428]  ? is_module_address+0x69/0xf0
[  496.725892][T13428]  ? register_net_sysctl_sz+0x228/0x3e0
[  496.725924][T13428]  ? __asan_memcpy+0x3c/0x60
[  496.725960][T13428]  xfrm4_net_init+0xf0/0x1c0
[  496.725986][T13428]  ? __pfx_xfrm4_net_init+0x10/0x10
[  496.726009][T13428]  ops_init+0x1df/0x5f0
[  496.726136][T13428]  setup_net+0x100/0x390
[  496.726177][T13428]  ? __pfx_setup_net+0x10/0x10
[  496.726207][T13428]  ? debug_mutex_init+0x37/0x70
[  496.726240][T13428]  copy_net_ns+0x2f8/0x690
[  496.726275][T13428]  create_new_namespaces+0x3ea/0xa90
[  496.726309][T13428]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  496.726344][T13428]  ksys_unshare+0x45b/0xa40
[  496.726380][T13428]  ? __pfx_ksys_unshare+0x10/0x10
[  496.726422][T13428]  ? xfd_validate_state+0x61/0x180
[  496.726469][T13428]  __x64_sys_unshare+0x31/0x40
[  496.726502][T13428]  do_syscall_64+0xcd/0x4b0
[  496.726529][T13428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.726553][T13428] RIP: 0033:0x7f8b13f8eec9
[  496.726575][T13428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  496.726599][T13428] RSP: 002b:00007f8b14e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  496.726623][T13428] RAX: ffffffffffffffda RBX: 00007f8b141e5fa0 RCX: 00007f8b13f8eec9
[  496.726640][T13428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  496.726654][T13428] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  496.726670][T13428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  496.726685][T13428] R13: 00007f8b141e6038 R14: 00007f8b141e5fa0 R15: 00007ffd03009988
[  496.726720][T13428]  </TASK>
[  499.886772][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  499.893246][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  499.999882][T13495] sock: sock_timestamping_bind_phc: sock not bind to device
[  500.283258][T13500] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1584'.
[  500.930837][T13510] zswap: compressor  not available
[  501.896339][T12209] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  502.022161][T13545] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1593'.
[  502.150142][T13534] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input22
[  502.343688][T13554] Process accounting resumed
[  502.620912][T13559] Invalid ELF header magic: != ELF
[  503.786769][T13591] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1603'.
[  503.952581][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  508.091811][T13694] ubi0: attaching mtd0
[  508.124904][T13694] ubi0: scanning is finished
[  508.129614][T13694] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  508.275778][T13694] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  509.068383][T13737] random: crng reseeded on system resumption
[  509.761039][T13747] delete_channel: no stack
[  515.964830][T13896] usb usb36: usbfs: process 13896 (syz.1.1664) did not claim interface 0 before use
[  518.784973][T13961] usb usb36: usbfs: process 13961 (syz.1.1677) did not claim interface 0 before use
[  520.497975][T13988] usb usb36: usbfs: process 13988 (syz.1.1690) did not claim interface 0 before use
[  522.768117][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'.
[  528.871798][T14096] random: crng reseeded on system resumption
[  529.056886][T14097] usb usb36: usbfs: process 14097 (syz.4.1706) did not claim interface 0 before use
[  534.351049][T14210] FAULT_INJECTION: forcing a failure.
[  534.351049][T14210] name failslab, interval 1, probability 0, space 0, times 0
[  534.401750][T14210] CPU: 1 UID: 0 PID: 14210 Comm: syz.1.1721 Not tainted syzkaller #0 PREEMPT(full) 
[  534.401789][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  534.401806][T14210] Call Trace:
[  534.401815][T14210]  <TASK>
[  534.401826][T14210]  dump_stack_lvl+0x16c/0x1f0
[  534.401861][T14210]  should_fail_ex+0x512/0x640
[  534.401901][T14210]  ? __kvmalloc_node_noprof+0x124/0x620
[  534.401947][T14210]  should_failslab+0xc2/0x120
[  534.401985][T14210]  __kvmalloc_node_noprof+0x137/0x620
[  534.402027][T14210]  ? trace_kmalloc+0x2b/0xd0
[  534.402058][T14210]  ? __kvmalloc_node_noprof+0x298/0x620
[  534.402097][T14210]  ? io_alloc_cache_init+0x33/0x170
[  534.402141][T14210]  ? io_alloc_cache_init+0x33/0x170
[  534.402178][T14210]  io_alloc_cache_init+0x33/0x170
[  534.402218][T14210]  io_rsrc_cache_init+0x26/0x50
[  534.402256][T14210]  io_uring_setup+0x660/0x20c0
[  534.402292][T14210]  ? __pfx_io_uring_setup+0x10/0x10
[  534.402324][T14210]  ? do_futex+0x122/0x350
[  534.402360][T14210]  ? __pfx_do_futex+0x10/0x10
[  534.402398][T14210]  ? __pfx___might_resched+0x10/0x10
[  534.402443][T14210]  ? __pfx___do_sys_close_range+0x10/0x10
[  534.402478][T14210]  __x64_sys_io_uring_setup+0xc2/0x170
[  534.402513][T14210]  do_syscall_64+0xcd/0x4b0
[  534.402543][T14210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.402570][T14210] RIP: 0033:0x7f8b13f8eec9
[  534.402592][T14210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.402617][T14210] RSP: 002b:00007f8b14de2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  534.402644][T14210] RAX: ffffffffffffffda RBX: 00007f8b141e6090 RCX: 00007f8b13f8eec9
[  534.402663][T14210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  534.402679][T14210] RBP: 00007f8b14011f91 R08: 0000000000000000 R09: 0000000000000000
[  534.402695][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.402711][T14210] R13: 00007f8b141e6128 R14: 00007f8b141e6090 R15: 00007ffd03009988
[  534.402746][T14210]  </TASK>
[  535.440880][T14220] zswap: compressor  not available
[  537.135971][T14262] random: crng reseeded on system resumption
[  539.318804][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  539.382248][T14291] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  539.398807][T14289] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1736'.
[  539.850637][T14297] usb usb36: usbfs: process 14297 (syz.1.1739) did not claim interface 0 before use
[  542.360024][T14336] usb usb36: usbfs: process 14336 (syz.1.1751) did not claim interface 0 before use
[  544.314672][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  546.222468][T14424] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1764'.
[  547.275072][ T5853] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1
[  549.150761][T14487] netlink: 'syz.4.1777': attribute type 1 has an invalid length.
[  552.163835][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'.
[  554.667298][T14561] netlink: zone id is out of range
[  554.672558][T14561] netlink: zone id is out of range
[  554.677735][T14561] netlink: zone id is out of range
[  554.683117][T14561] netlink: zone id is out of range
[  554.688225][T14561] netlink: zone id is out of range
[  554.802082][T14561] netlink: zone id is out of range
[  554.807427][T14561] netlink: zone id is out of range
[  554.812866][T14561] netlink: zone id is out of range
[  554.818874][T14561] netlink: zone id is out of range
[  554.845696][T14561] netlink: zone id is out of range
[  556.541768][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  556.564692][T14599] __vm_enough_memory: pid: 14599, comm: syz.5.1805, bytes: 4398046511104 not enough memory for the allocation
[  557.397232][T12209] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  557.410576][T12209] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  557.420589][T12209] CPU: 0 UID: 0 PID: 12209 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  557.420610][T12209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  557.420620][T12209] Workqueue: hci4 hci_rx_work
[  557.420648][T12209] Call Trace:
[  557.420653][T12209]  <TASK>
[  557.420659][T12209]  dump_stack_lvl+0x16c/0x1f0
[  557.420676][T12209]  sysfs_warn_dup+0x7f/0xa0
[  557.420693][T12209]  sysfs_create_dir_ns+0x24b/0x2b0
[  557.420709][T12209]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  557.420724][T12209]  ? find_held_lock+0x2b/0x80
[  557.420744][T12209]  ? do_raw_spin_unlock+0x172/0x230
[  557.420760][T12209]  kobject_add_internal+0x2c4/0x9b0
[  557.420780][T12209]  kobject_add+0x16e/0x240
[  557.420796][T12209]  ? __pfx_kobject_add+0x10/0x10
[  557.420814][T12209]  ? do_raw_spin_unlock+0x172/0x230
[  557.420839][T12209]  ? kobject_put+0xab/0x5a0
[  557.420860][T12209]  device_add+0x288/0x1aa0
[  557.420878][T12209]  ? __pfx_dev_set_name+0x10/0x10
[  557.420896][T12209]  ? __pfx_device_add+0x10/0x10
[  557.420912][T12209]  ? mgmt_send_event_skb+0x2fb/0x460
[  557.420939][T12209]  hci_conn_add_sysfs+0x17e/0x230
[  557.420964][T12209]  le_conn_complete_evt+0x1260/0x2150
[  557.420989][T12209]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  557.421009][T12209]  ? bt_warn+0xe4/0x120
[  557.421026][T12209]  ? __pfx_bt_warn+0x10/0x10
[  557.421049][T12209]  hci_le_conn_complete_evt+0x23c/0x370
[  557.421075][T12209]  hci_le_meta_evt+0x354/0x5e0
[  557.421096][T12209]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  557.421119][T12209]  hci_event_packet+0x685/0x11c0
[  557.421140][T12209]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  557.421163][T12209]  ? __pfx_hci_event_packet+0x10/0x10
[  557.421185][T12209]  ? kcov_remote_start+0x3c9/0x6d0
[  557.421199][T12209]  ? lockdep_hardirqs_on+0x7c/0x110
[  557.421217][T12209]  hci_rx_work+0x2c5/0x16b0
[  557.421240][T12209]  ? rcu_is_watching+0x12/0xc0
[  557.421259][T12209]  process_one_work+0x9cf/0x1b70
[  557.421281][T12209]  ? __pfx_process_one_work+0x10/0x10
[  557.421301][T12209]  ? assign_work+0x1a0/0x250
[  557.421325][T12209]  worker_thread+0x6c8/0xf10
[  557.421344][T12209]  ? __kthread_parkme+0x19e/0x250
[  557.421364][T12209]  ? __pfx_worker_thread+0x10/0x10
[  557.421378][T12209]  kthread+0x3c2/0x780
[  557.421401][T12209]  ? __pfx_kthread+0x10/0x10
[  557.421424][T12209]  ? rcu_is_watching+0x12/0xc0
[  557.421440][T12209]  ? __pfx_kthread+0x10/0x10
[  557.421462][T12209]  ret_from_fork+0x56d/0x730
[  557.421476][T12209]  ? __pfx_kthread+0x10/0x10
[  557.421498][T12209]  ret_from_fork_asm+0x1a/0x30
[  557.421526][T12209]  </TASK>
[  557.421547][T12209] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  557.684143][T12209] Bluetooth: hci4: failed to register connection device
[  561.012892][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  561.021273][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  561.144766][T14664] zswap: compressor  not available
[  561.242653][T14664] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1818: bg 4: bad block bitmap checksum
[  561.312442][T14664] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74
[  561.366721][T14664] EXT4-fs (sda1): This should not happen!! Data will be lost
[  561.366721][T14664] 
[  561.488590][T14673] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1820'.
[  561.499077][T14673] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1820'.
[  561.904804][T14682] netlink: 306 bytes leftover after parsing attributes in process `syz.5.1822'.
[  563.237607][T14700] ptp ptp0: delete virtual clock ptp3
[  563.290199][T14700] ptp ptp0: delete virtual clock ptp2
[  563.393976][T14700] ptp ptp0: delete virtual clock ptp1
[  563.476125][T14700] ptp ptp0: only physical clock in use now
[  563.714829][   T59] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1343 with max blocks 1 with error 117
[  563.768410][   T59] EXT4-fs (sda1): This should not happen!! Data will be lost
[  563.768410][   T59] 
[  564.413234][T14716] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  564.465484][T14716] EXT4-fs (sda1): This should not happen!! Data will be lost
[  564.465484][T14716] 
[  565.877968][T14746] net_ratelimit: 10 callbacks suppressed
[  565.877984][T14746] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  566.307044][T14752] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.4.1836: Error -117 reading block bitmap for 4
[  568.200340][ T5853] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1
[  568.271602][T14780] random: crng reseeded on system resumption
[  569.262273][T14795] zswap: compressor  not available
[  569.351154][T14799] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24
[  569.536461][T14801] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  569.679967][T14803] HfR: entered promiscuous mode
[  571.107490][T14827] erspan0: entered allmulticast mode
[  571.954201][T14843] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1859'.
[  576.355160][T12209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  576.365823][T12209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  576.376040][T12209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  576.389963][T12209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  576.407379][T12209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  577.131383][T14914] chnl_net:caif_netlink_parms(): no params data found
[  577.498678][T14914] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.511009][T14914] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.520208][T14914] bridge_slave_0: entered allmulticast mode
[  577.532406][T14914] bridge_slave_0: entered promiscuous mode
[  577.544120][T14914] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.553732][T14914] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.562527][T14914] bridge_slave_1: entered allmulticast mode
[  577.571123][T14914] bridge_slave_1: entered promiscuous mode
[  577.696269][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.711336][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.773145][T14914] team0: Port device team_slave_0 added
[  577.782771][T14914] team0: Port device team_slave_1 added
[  577.841787][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.858330][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.886038][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.906954][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.914062][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.940055][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.151363][T14914] hsr_slave_0: entered promiscuous mode
[  578.158090][T14914] hsr_slave_1: entered promiscuous mode
[  578.165137][T14914] debugfs: 'hsr0' already exists in 'hsr'
[  578.173982][T14914] Cannot create hsr debugfs directory
[  578.435893][ T5853] Bluetooth: hci3: command tx timeout
[  578.593037][T14914] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  578.602689][T14914] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  578.612884][T14914] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  578.623463][T14914] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  578.703685][T14914] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.725916][T14914] 8021q: adding VLAN 0 to HW filter on device team0
[  578.740096][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.747288][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.763529][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.770682][ T7086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.969844][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.192486][T14914] veth0_vlan: entered promiscuous mode
[  579.205713][T14914] veth1_vlan: entered promiscuous mode
[  579.236491][T14914] veth0_macvtap: entered promiscuous mode
[  579.246576][T14914] veth1_macvtap: entered promiscuous mode
[  579.266492][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  579.283044][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  579.297132][ T7086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  579.309563][ T7086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  579.328154][ T7086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  579.339549][ T7086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.444648][ T7087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.455296][ T7087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.542646][ T7082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.564137][ T7082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.273582][T14995] usb usb36: usbfs: process 14995 (syz.6.1889) did not claim interface 0 before use
[  580.504665][ T5853] Bluetooth: hci3: command tx timeout
[  581.265634][T15007] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1892'.
[  582.117519][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1898'.
[  582.202952][T15028] team0: Port device team_slave_1 removed
[  582.574383][ T5853] Bluetooth: hci3: command tx timeout
[  582.971959][T15040] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1901'.
[  583.345939][ T5853] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  583.882957][T12209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  583.902930][T12209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  583.916992][T12209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  583.926226][T12209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  583.937514][T12209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  584.368210][T15068] chnl_net:caif_netlink_parms(): no params data found
[  584.628969][T15068] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.640367][T15068] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.648029][ T5853] Bluetooth: hci3: command tx timeout
[  584.658085][T15068] bridge_slave_0: entered allmulticast mode
[  584.666706][T15068] bridge_slave_0: entered promiscuous mode
[  584.689705][T15068] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.697486][T15068] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.705288][T15068] bridge_slave_1: entered allmulticast mode
[  584.719916][T15068] bridge_slave_1: entered promiscuous mode
[  584.803977][T15068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.844747][T15068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.096671][T15068] team0: Port device team_slave_0 added
[  585.123748][T15068] team0: Port device team_slave_1 added
[  585.272524][T15068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.279515][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.296907][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1916'.
[  585.340801][T15068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.381212][T15068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.388189][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.458673][T15068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.481292][ T5853] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260
[  585.481328][ T5853] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260
[  585.497384][ T5853] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[  585.497468][ T5853] Bluetooth: hci3: adv larger than maximum supported
[  585.505121][ T5853] Bluetooth: hci3: Malformed LE Event: 0x0d
[  585.527037][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'.
[  585.683505][T12209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  585.709485][T12209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  585.719021][T12209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  585.728126][T12209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  585.736457][T12209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  585.811994][T15068] hsr_slave_0: entered promiscuous mode
[  585.820344][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'.
[  585.863851][T15068] hsr_slave_1: entered promiscuous mode
[  585.906783][T15068] debugfs: 'hsr0' already exists in 'hsr'
[  585.923835][T15068] Cannot create hsr debugfs directory
[  585.996231][T12209] Bluetooth: hci5: command tx timeout
[  586.438624][T15118] chnl_net:caif_netlink_parms(): no params data found
[  586.498795][T15068] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  586.580804][T15068] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  586.594463][T15068] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  586.651243][T15068] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  586.809676][T15118] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.821897][T15118] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.835012][T15118] bridge_slave_0: entered allmulticast mode
[  586.849336][T15118] bridge_slave_0: entered promiscuous mode
[  586.869884][T15118] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.881194][T15118] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.916626][T15118] bridge_slave_1: entered allmulticast mode
[  586.928234][T15118] bridge_slave_1: entered promiscuous mode
[  587.024869][T15118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.044637][T15118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  587.112781][T15118] team0: Port device team_slave_0 added
[  587.136360][T15118] team0: Port device team_slave_1 added
[  587.255575][T15118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.263097][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.292978][T15118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.333736][T15118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.347766][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.382256][T15118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.553132][T15118] hsr_slave_0: entered promiscuous mode
[  587.561665][T15118] hsr_slave_1: entered promiscuous mode
[  587.569195][T15118] debugfs: 'hsr0' already exists in 'hsr'
[  587.576318][T15118] Cannot create hsr debugfs directory
[  587.746954][T12209] Bluetooth: hci6: command tx timeout
[  587.769462][T15068] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.836631][T15068] 8021q: adding VLAN 0 to HW filter on device team0
[  587.903772][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.910956][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.957853][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.965028][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.075722][T12209] Bluetooth: hci5: command tx timeout
[  588.371705][T15118] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  588.409478][T15118] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  588.454032][T15118] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  588.482574][T15118] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  588.849514][T15068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.890954][T15118] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.946486][T15118] 8021q: adding VLAN 0 to HW filter on device team0
[  588.979820][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.987072][ T7086] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.020190][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.027355][ T8683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.836458][T12209] Bluetooth: hci6: command tx timeout
[  589.871616][T15178] FAULT_INJECTION: forcing a failure.
[  589.871616][T15178] name failslab, interval 1, probability 0, space 0, times 0
[  589.901681][T15178] CPU: 0 UID: 0 PID: 15178 Comm: syz.6.1926 Not tainted syzkaller #0 PREEMPT(full) 
[  589.901716][T15178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  589.901733][T15178] Call Trace:
[  589.901742][T15178]  <TASK>
[  589.901753][T15178]  dump_stack_lvl+0x16c/0x1f0
[  589.901789][T15178]  should_fail_ex+0x512/0x640
[  589.901830][T15178]  ? __kmalloc_cache_node_noprof+0x5a/0x420
[  589.901877][T15178]  should_failslab+0xc2/0x120
[  589.901908][T15178]  __kmalloc_cache_node_noprof+0x6d/0x420
[  589.901952][T15178]  ? __alloc_workqueue+0x7fe/0x1810
[  589.901994][T15178]  __alloc_workqueue+0x7fe/0x1810
[  589.902042][T15178]  alloc_workqueue_noprof+0xd2/0x200
[  589.902078][T15178]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  589.902122][T15178]  ? rcu_is_watching+0x12/0xc0
[  589.902153][T15178]  ? __kmalloc_noprof+0x242/0x510
[  589.902185][T15178]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  589.902221][T15178]  ieee80211_register_hw+0x1f2c/0x4120
[  589.902268][T15178]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  589.902304][T15178]  ? find_held_lock+0x2b/0x80
[  589.902335][T15178]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  589.902364][T15178]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  589.902401][T15178]  ? __hrtimer_setup+0x176/0x280
[  589.902429][T15178]  mac80211_hwsim_new_radio+0x3034/0x54d0
[  589.902486][T15178]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  589.902530][T15178]  hwsim_new_radio_nl+0xb51/0x12c0
[  589.902566][T15178]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  589.902609][T15178]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  589.902644][T15178]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  589.902687][T15178]  genl_family_rcv_msg_doit+0x209/0x2f0
[  589.902722][T15178]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  589.902767][T15178]  ? bpf_lsm_capable+0x9/0x10
[  589.902802][T15178]  ? security_capable+0x7e/0x260
[  589.902841][T15178]  ? ns_capable+0xd7/0x110
[  589.902875][T15178]  genl_rcv_msg+0x55c/0x800
[  589.902911][T15178]  ? __pfx_genl_rcv_msg+0x10/0x10
[  589.902944][T15178]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  589.902989][T15178]  netlink_rcv_skb+0x158/0x420
[  589.903018][T15178]  ? __pfx_genl_rcv_msg+0x10/0x10
[  589.903052][T15178]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  589.903096][T15178]  ? netlink_deliver_tap+0x1ae/0xd30
[  589.903129][T15178]  genl_rcv+0x28/0x40
[  589.903153][T15178]  netlink_unicast+0x5a7/0x870
[  589.903190][T15178]  ? __pfx_netlink_unicast+0x10/0x10
[  589.903213][T15178]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  589.903235][T15178]  ? __lock_acquire+0xb97/0x1ce0
[  589.903279][T15178]  netlink_sendmsg+0x8d1/0xdd0
[  589.903309][T15178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.903335][T15178]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  589.903375][T15178]  ____sys_sendmsg+0xa95/0xc70
[  589.903406][T15178]  ? copy_msghdr_from_user+0x10a/0x160
[  589.903428][T15178]  ? __pfx_____sys_sendmsg+0x10/0x10
[  589.903463][T15178]  ? __pfx_futex_wake_mark+0x10/0x10
[  589.903490][T15178]  ___sys_sendmsg+0x134/0x1d0
[  589.903515][T15178]  ? __pfx____sys_sendmsg+0x10/0x10
[  589.903569][T15178]  __sys_sendmsg+0x16d/0x220
[  589.903593][T15178]  ? __pfx___sys_sendmsg+0x10/0x10
[  589.903615][T15178]  ? __x64_sys_futex+0x1e0/0x4c0
[  589.903662][T15178]  do_syscall_64+0xcd/0x4b0
[  589.903689][T15178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.903713][T15178] RIP: 0033:0x7f437138eec9
[  589.903734][T15178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.903754][T15178] RSP: 002b:00007f43721cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  589.903773][T15178] RAX: ffffffffffffffda RBX: 00007f43715e6090 RCX: 00007f437138eec9
[  589.903786][T15178] RDX: 0000000004040040 RSI: 0000200000000300 RDI: 0000000000000006
[  589.903798][T15178] RBP: 00007f4371411f91 R08: 0000000000000000 R09: 0000000000000000
[  589.903810][T15178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.903821][T15178] R13: 00007f43715e6128 R14: 00007f43715e6090 R15: 00007ffccca08718
[  589.903846][T15178]  </TASK>
[  590.335626][T12209] Bluetooth: hci5: command tx timeout
[  590.929298][T15068] veth0_vlan: entered promiscuous mode
[  591.013393][T15068] veth1_vlan: entered promiscuous mode
[  591.052857][T15118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.104319][T15068] veth0_macvtap: entered promiscuous mode
[  591.123082][T15068] veth1_macvtap: entered promiscuous mode
[  591.143254][T15068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.153684][T15068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.218610][   T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.272479][   T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.428117][   T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.465414][   T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.511990][   T30] audit: type=1107 audit(4294968407.716:13): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  591.553434][T12209] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7
[  591.621276][   T30] audit: type=1107 audit(4294968407.756:14): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  591.719116][ T7086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.726971][ T7086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.886513][T12209] Bluetooth: hci6: command tx timeout
[  591.901976][ T7087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.918576][ T7087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.192962][T15118] veth0_vlan: entered promiscuous mode
[  592.295510][T15118] veth1_vlan: entered promiscuous mode
[  592.364907][T12209] Bluetooth: hci5: command tx timeout
[  592.387697][T15118] veth0_macvtap: entered promiscuous mode
[  592.725762][T15118] veth1_macvtap: entered promiscuous mode
[  593.168088][T15118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.203927][T15118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.439715][ T7086] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.448477][ T7086] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.535833][ T7086] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.545735][ T7086] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.890221][ T7082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.911607][ T7082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.957002][T12209] Bluetooth: hci6: command tx timeout
[  594.437969][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.454407][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.862248][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'.
[  595.991131][T15239] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1932'.
[  597.736894][T15253] usb usb36: usbfs: process 15253 (syz.7.1938) did not claim interface 0 before use
[  598.955413][T15274] device-mapper: ioctl: Unable to rename non-existent device,  to uuid �
[  600.776050][T15301] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  600.834159][T15299] Process accounting resumed
[  604.197608][T15345] usb usb36: usbfs: process 15345 (syz.7.1958) did not claim interface 0 before use
[  604.303041][T15352] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1960'.
[  607.008123][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'.
[  607.017468][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'.
[  608.964112][T15428] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  611.130203][T15463] FAULT_INJECTION: forcing a failure.
[  611.130203][T15463] name failslab, interval 1, probability 0, space 0, times 0
[  611.153849][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.6.1981 Not tainted syzkaller #0 PREEMPT(full) 
[  611.153884][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  611.153902][T15463] Call Trace:
[  611.153911][T15463]  <TASK>
[  611.153921][T15463]  dump_stack_lvl+0x16c/0x1f0
[  611.153954][T15463]  should_fail_ex+0x512/0x640
[  611.153994][T15463]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  611.154034][T15463]  should_failslab+0xc2/0x120
[  611.154064][T15463]  __kmalloc_cache_noprof+0x6a/0x3e0
[  611.154101][T15463]  ? ktime_get_coarse_real_ts64_mg+0x240/0x300
[  611.154138][T15463]  ? hugetlb_vma_lock_alloc+0xbc/0x1f0
[  611.154183][T15463]  hugetlb_vma_lock_alloc+0xbc/0x1f0
[  611.154219][T15463]  hugetlb_reserve_pages+0x151/0xf40
[  611.154251][T15463]  ? __vma_enter_locked+0x163/0x3f0
[  611.154289][T15463]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[  611.154324][T15463]  ? atime_needs_update+0x8b/0x710
[  611.154368][T15463]  hugetlbfs_file_mmap+0x4a1/0x730
[  611.154414][T15463]  __mmap_region+0x1314/0x27b0
[  611.154461][T15463]  ? __pfx___mmap_region+0x10/0x10
[  611.154498][T15463]  ? is_bpf_text_address+0x94/0x1a0
[  611.154545][T15463]  ? kernel_text_address+0x8d/0x100
[  611.154574][T15463]  ? __kernel_text_address+0xd/0x40
[  611.154601][T15463]  ? unwind_get_return_address+0x59/0xa0
[  611.154633][T15463]  ? arch_stack_walk+0xa6/0x100
[  611.154728][T15463]  ? trace_cap_capable+0x18d/0x200
[  611.154781][T15463]  mmap_region+0x32b/0x3f0
[  611.154813][T15463]  do_mmap+0xa3e/0x1210
[  611.154851][T15463]  ? __pfx_do_mmap+0x10/0x10
[  611.154882][T15463]  ? __pfx_down_write_killable+0x10/0x10
[  611.154921][T15463]  vm_mmap_pgoff+0x29e/0x470
[  611.154959][T15463]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  611.154987][T15463]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  611.155024][T15463]  ? hugetlbfs_get_inode+0x31f/0x730
[  611.155077][T15463]  ksys_mmap_pgoff+0x1c8/0x5c0
[  611.155115][T15463]  __x64_sys_mmap+0x125/0x190
[  611.155145][T15463]  do_syscall_64+0xcd/0x4b0
[  611.155176][T15463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.155202][T15463] RIP: 0033:0x7f437138eec9
[  611.155225][T15463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.155250][T15463] RSP: 002b:00007f43721ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  611.155275][T15463] RAX: ffffffffffffffda RBX: 00007f43715e5fa0 RCX: 00007f437138eec9
[  611.155293][T15463] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000
[  611.155310][T15463] RBP: 00007f4371411f91 R08: 0000000000000602 R09: 0000300000000000
[  611.155332][T15463] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000
[  611.155348][T15463] R13: 00007f43715e6038 R14: 00007f43715e5fa0 R15: 00007ffccca08718
[  611.155384][T15463]  </TASK>
[  611.155537][T15463] HugeTLB: unable to allocate vma specific lock
[  611.489912][   T30] audit: type=1800 audit(4294968427.790:15): pid=15465 uid=4 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1982" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  615.832888][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2004'.
[  615.856502][T15578] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  615.878496][T15546] cgroup: fork rejected by pids controller in 
[  615.924474][T15592] kAFS: Invalid Command on /proc/fs/afs/cells file
[  615.976707][T15546] /syz5
[  615.981949][T15571] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  616.201648][   T30] audit: type=1800 audit(4294968432.522:16): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2007" name="features" dev="configfs" ino=55913 res=0 errno=0
[  616.444284][   T30] audit: type=1804 audit(4294968432.773:17): pid=15621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2009" name="/newroot/25/file0" dev="tmpfs" ino=148 res=1 errno=0
[  617.587058][T15731] ima: policy update failed
[  617.601195][   T30] audit: type=1802 audit(4294968433.918:18): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2012" res=0 errno=0
[  617.781941][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2017'.
[  617.843215][T15767] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.302870][T15771] random: crng reseeded on system resumption
[  618.724757][T15767] bridge_slave_1 (unregistering): left allmulticast mode
[  618.733441][T15767] bridge_slave_1 (unregistering): left promiscuous mode
[  618.747167][T15767] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.562324][T15816] FAULT_INJECTION: forcing a failure.
[  621.562324][T15816] name failslab, interval 1, probability 0, space 0, times 0
[  621.596819][T15816] CPU: 1 UID: 0 PID: 15816 Comm: syz.8.2027 Not tainted syzkaller #0 PREEMPT(full) 
[  621.596864][T15816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  621.596881][T15816] Call Trace:
[  621.596890][T15816]  <TASK>
[  621.596901][T15816]  dump_stack_lvl+0x16c/0x1f0
[  621.596934][T15816]  should_fail_ex+0x512/0x640
[  621.596971][T15816]  ? __kmalloc_noprof+0xbf/0x510
[  621.596997][T15816]  ? ops_init+0x77/0x5f0
[  621.597022][T15816]  should_failslab+0xc2/0x120
[  621.597050][T15816]  __kmalloc_noprof+0xd2/0x510
[  621.597072][T15816]  ? __asan_memcpy+0x3c/0x60
[  621.597111][T15816]  ops_init+0x77/0x5f0
[  621.597143][T15816]  setup_net+0x100/0x390
[  621.597174][T15816]  ? __pfx_setup_net+0x10/0x10
[  621.597203][T15816]  ? debug_mutex_init+0x37/0x70
[  621.597234][T15816]  copy_net_ns+0x2f8/0x690
[  621.597265][T15816]  create_new_namespaces+0x3ea/0xa90
[  621.597306][T15816]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  621.597342][T15816]  ksys_unshare+0x45b/0xa40
[  621.597380][T15816]  ? __pfx_ksys_unshare+0x10/0x10
[  621.597422][T15816]  ? xfd_validate_state+0x61/0x180
[  621.597476][T15816]  __x64_sys_unshare+0x31/0x40
[  621.597514][T15816]  do_syscall_64+0xcd/0x4b0
[  621.597545][T15816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.597573][T15816] RIP: 0033:0x7f061bf8eec9
[  621.597596][T15816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.597623][T15816] RSP: 002b:00007f061ceb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  621.597650][T15816] RAX: ffffffffffffffda RBX: 00007f061c1e6180 RCX: 00007f061bf8eec9
[  621.597669][T15816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  621.597686][T15816] RBP: 00007f061c011f91 R08: 0000000000000000 R09: 0000000000000000
[  621.597703][T15816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  621.597721][T15816] R13: 00007f061c1e6218 R14: 00007f061c1e6180 R15: 00007ffc24ccd0c8
[  621.597758][T15816]  </TASK>
[  622.162019][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  622.173442][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  622.700142][    C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff816380da (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[  622.715676][    C0] Call Trace:
[  622.718995][    C0]  <TASK>
[  622.721929][    C0]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  622.728620][    C0]  ? __pfx_mce_cpu_restart+0x10/0x10
[  622.733912][    C0]  mce_cpu_restart+0xd9/0x1f0
[  622.738591][    C0]  __flush_smp_call_function_queue+0x27a/0x8c0
[  622.744752][    C0]  __sysvec_call_function_single+0x87/0x400
[  622.750650][    C0]  sysvec_call_function_single+0x52/0xc0
[  622.756293][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  622.762279][    C0] RIP: 0033:0x7f061be681d3
[  622.766709][    C0] Code: 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b <49> 8b 14 24 eb bf 48 39 f2 72 97 48 39 f0 73 46 49 89 34 24 48 89
[  622.786327][    C0] RSP: 002b:00007ffc24cccfc0 EFLAGS: 00000212
[  622.792398][    C0] RAX: 00007f061b37b8c8 RBX: 00007f061b37b5d0 RCX: ffffffff89b7fdf2
[  622.800369][    C0] RDX: ffffffff89b7fdf2 RSI: ffffffff89b7fdf2 RDI: 00007f061b37ba78
[  622.808339][    C0] RBP: 00007f061b37b420 R08: 00007f061b37b748 R09: 00007f061c1d2000
[  622.816313][    C0] R10: 00007f061b1fb008 R11: 0000000000000011 R12: 00007f061b37b418
[  622.824277][    C0] R13: 0000000000000015 R14: ffffffffffffffff R15: 00007f061b1fb008
[  622.832253][    C0]  ? inet_twsk_purge+0x102/0x860
[  622.837193][    C0]  ? inet_twsk_purge+0x102/0x860
[  622.842126][    C0]  ? inet_twsk_purge+0x102/0x860
[  622.847066][    C0]  </TASK>
[  623.593262][T15835] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  625.615653][T15861] nvme_fabrics: missing parameter 'transport=%s'
[  625.625150][T15861] nvme_fabrics: missing parameter 'nqn=%s'
[  626.474909][T15878] sp0: Synchronizing with TNC
[  627.175589][T15889] zswap: compressor  not available
[  629.982807][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2049'.
[  630.832133][T15962] Process accounting paused
[  632.606236][T15992] ecryptfs_miscdev_write: Invalid packet size [192]
[  634.246942][T16013] random: crng reseeded on system resumption
[  634.700730][T16019] program syz.6.2059 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  634.710358][T16019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  634.816474][T16022] i2c i2c-0: delete_device: Can't parse I2C address
[  635.216317][T16029] netlink: 'syz.7.2062': attribute type 2 has an invalid length.
[  635.489678][T16032] syz.5.2056 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  635.619917][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.5.2056 Not tainted syzkaller #0 PREEMPT(full) 
[  635.619946][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  635.619960][T16032] Call Trace:
[  635.619968][T16032]  <TASK>
[  635.619977][T16032]  dump_stack_lvl+0x16c/0x1f0
[  635.620004][T16032]  dump_header+0x101/0x930
[  635.620031][T16032]  oom_kill_process+0x272/0xa40
[  635.620059][T16032]  out_of_memory+0x350/0x1700
[  635.620092][T16032]  ? __pfx_out_of_memory+0x10/0x10
[  635.620125][T16032]  mem_cgroup_out_of_memory+0x118/0x130
[  635.620157][T16032]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  635.620196][T16032]  ? do_raw_spin_unlock+0x172/0x230
[  635.620225][T16032]  try_charge_memcg+0x72b/0xd50
[  635.620256][T16032]  ? __pfx_try_charge_memcg+0x10/0x10
[  635.620282][T16032]  ? peak_open+0x21/0x50
[  635.620312][T16032]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  635.620349][T16032]  obj_cgroup_charge_pages+0x22/0x1f0
[  635.620375][T16032]  __memcg_kmem_charge_page+0xc2/0x2e0
[  635.620404][T16032]  memcg_charge_kernel_stack+0xc3/0x1f0
[  635.620438][T16032]  copy_process+0x5b8/0x76a0
[  635.620484][T16032]  ? __pfx_copy_process+0x10/0x10
[  635.620524][T16032]  ? _copy_from_user+0x59/0xd0
[  635.620551][T16032]  kernel_clone+0xfc/0x930
[  635.620585][T16032]  ? __pfx_kernel_clone+0x10/0x10
[  635.620626][T16032]  ? __lock_acquire+0xb97/0x1ce0
[  635.620667][T16032]  __do_sys_clone3+0x212/0x290
[  635.620705][T16032]  ? __pfx___do_sys_clone3+0x10/0x10
[  635.620785][T16032]  do_syscall_64+0xcd/0x4b0
[  635.620813][T16032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.620841][T16032] RIP: 0033:0x7ff9d4dc3609
[  635.620861][T16032] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[  635.620883][T16032] RSP: 002b:00007fff6bef7c48 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  635.620906][T16032] RAX: ffffffffffffffda RBX: 00007ff9d4d459f0 RCX: 00007ff9d4dc3609
[  635.620922][T16032] RDX: 00007ff9d4d459f0 RSI: 0000000000000058 RDI: 00007fff6bef7c90
[  635.620937][T16032] RBP: 00007ff9d5bbb6c0 R08: 00007ff9d5bbb6c0 R09: 00007fff6bef7d77
[  635.620954][T16032] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8
[  635.620969][T16032] R13: 000000000000000b R14: 00007fff6bef7c90 R15: 00007fff6bef7d78
[  635.621002][T16032]  </TASK>
[  635.911368][T16032] memory: usage 307196kB, limit 307200kB, failcnt 26717
[  635.920153][T16032] memory+swap: usage 423280kB, limit 9007199254740988kB, failcnt 0
[  635.928063][T16032] kmem: usage 3552kB, limit 9007199254740988kB, failcnt 0
[  635.935816][T16032] Memory cgroup stats for /syz5:
[  635.936080][T16032] cache 306528256
[  635.945213][T16032] rss 4362240
[  635.948637][T16032] rss_huge 0
[  635.952166][T16032] shmem 304967680
[  635.955798][T16032] mapped_file 45056
[  635.966242][T16032] dirty 0
[  635.969231][T16032] writeback 0
[  635.974596][T16032] workingset_refault_anon 2876
[  635.983016][T16032] workingset_refault_file 4677
[  635.987791][T16032] swap 118870016
[  635.993808][T16032] swapcached 40960
[  635.997537][T16032] pgpgin 658913
[  636.134977][T16032] pgpgout 587090
[  636.138658][T16032] pgfault 256560
[  636.142209][T16032] pgmajfault 473
[  636.145753][T16032] inactive_anon 178253824
[  636.150148][T16032] active_anon 131117056
[  636.154303][T16032] inactive_file 552960
[  636.158776][T16032] active_file 0
[  636.162242][T16032] unevictable 0
[  636.165699][T16032] hierarchical_memory_limit 314572800
[  636.171149][T16032] hierarchical_memsw_limit 9223372036854771712
[  636.179317][T16032] total_cache 306528256
[  636.179345][T16032] total_rss 4362240
[  636.179356][T16032] total_rss_huge 0
[  636.179367][T16032] total_shmem 304967680
[  636.179377][T16032] total_mapped_file 45056
[  636.179388][T16032] total_dirty 0
[  636.179398][T16032] total_writeback 0
[  636.179408][T16032] total_workingset_refault_anon 2876
[  636.179420][T16032] total_workingset_refault_file 4677
[  636.179432][T16032] total_swap 118870016
[  636.179442][T16032] total_swapcached 40960
[  636.179454][T16032] total_pgpgin 658913
[  636.179464][T16032] total_pgpgout 587090
[  636.179475][T16032] total_pgfault 256560
[  636.179485][T16032] total_pgmajfault 473
[  636.179496][T16032] total_inactive_anon 178253824
[  636.179507][T16032] total_active_anon 131117056
[  636.179519][T16032] total_inactive_file 552960
[  636.179530][T16032] total_active_file 0
[  636.179540][T16032] total_unevictable 0
[  636.179551][T16032] anon_cost 0
[  636.179560][T16032] file_cost 0
[  636.179570][T16032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2003,pid=15590,uid=0
[  636.179957][T16032] Memory cgroup out of memory: Killed process 15590 (syz.5.2003) total-vm:102544kB, anon-rss:5176kB, file-rss:30328kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0
[  636.234186][T16036] random: crng reseeded on system resumption
[  637.380492][T16045] netlink: 'syz.6.2065': attribute type 2 has an invalid length.
[  637.389482][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2065'.
[  638.238169][   T32] oom_reaper: reaped process 15590 (syz.5.2003), now anon-rss:92kB, file-rss:29224kB, shmem-rss:0kB
[  640.607306][T15588] syz.5.2003 (15588) used greatest stack depth: 18760 bytes left
[  643.923946][T16113] usb usb36: usbfs: process 16113 (syz.6.2080) did not claim interface 0 before use
[  645.254917][T16148] device-mapper: ioctl: Invalid ioctl structure: name �, dev 7d00010002
[  645.413931][T15556] syz.5.2003 (15556) used greatest stack depth: 18568 bytes left
[  645.565443][T15557] syz.5.2003 (15557) used greatest stack depth: 18264 bytes left
[  646.868900][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2094'.
[  648.590954][T16227] ICMPv6: process `syz.8.2102' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  648.865814][T16229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2103'.
[  648.909677][T16232] netlink: 93 bytes leftover after parsing attributes in process `syz.7.2103'.
[  650.427798][T16258] kexec: Could not allocate control_code_buffer
[  654.146093][   T30] audit: type=1800 audit(4294967304.153:19): pid=16307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2119" name="dbroot" dev="configfs" ino=59413 res=0 errno=0
[  654.260900][   T30] audit: type=1800 audit(4294967304.213:20): pid=16310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2119" name="dbroot" dev="configfs" ino=59413 res=0 errno=0
[  654.946411][T16315] zswap: compressor  not available
[  657.623653][T16348] kexec: Could not allocate control_code_buffer
[  657.853547][T16360] ptrace attach of "./syz-executor exec"[15068] was attempted by "����E�U�%��U��`=p}��|�Aԍ�S���c�G�o��� {�?�Np�<�Q\x0cSd���?!,f%ޣЈr
1چ�BM�\x07S�ޛ�y\x5cT�O�s�f_,¯n��c}�}���Cc�
��Y��,4���ry;c��n�����X7�]��-�F��/-tKN.DE�E���y�)Q����'4\x0d\x1bG\x0bZ,\x0dt��#Ij�\x0c�j`:C�%�����\x09�º�y�?��&�k\x5c
�hdG\x0b�Q<;�N_��=�[��A]ڡuyX�s��ä��٣�#��Vы��y�� u�;|O���7�Q'�\x09�T�\x0c���{W�+\x5c��h���t��\x07��]\x5c��QT
q {7B����ra��ҁ�&�7�A_��XJ�\x5c�w�I�Z��~�n+#gq��#��K��E��~����1�S�ۑ0Fm����M
��}�L&�=���v:'�fW��T3�\x0bN���;���N�����c�\x07W�a%\x09�w��JX�d<Б_Bӌ1jS4͢Z��\x0c���2ˌ�\x1b\x0b�V޴FoΥ�q�'���4���� �Rv=H���43��*\x07ud%� `��p�)��\x0aS��5ݳ�\x0c�.�pH���z���wf���ٰ����N��p��?��z[ٹ���Ya?�lA�H�Hl^�E��Ny�h��Jy���R/��$���HlR\x5c��\x07E�e��'O��<�l�#T�0�\x09\x5c�ņ���;N=C�W��-��tտ���7����<��]���V/LkL���/\x0b�\x1bj�R�.�}P�?�s���h1�ˉ٨�k�\x0a�����yD�KV*�F��d��a�f \x0aU:n���p�\x0c�L��Yu�ۚޭ��B�}���{�\x22
09Ӯ�]餡](��c��*��5}3k�
[  658.616541][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2131'.
[  658.809778][T16387] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  658.895109][T16393] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2135'.
[  660.945095][T16412] kexec: Could not allocate control_code_buffer
[  662.458407][T16432] Process accounting resumed
[  667.270848][T16507] kexec: Could not allocate control_code_buffer
[  672.121204][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2181'.
[  672.134282][T16608] netlink: 354 bytes leftover after parsing attributes in process `syz.8.2181'.
[  675.319370][T16678] KVM: debugfs: duplicate directory 16678-4
[  676.962205][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'.
[  679.388579][T16768] zswap: compressor 000 not available
[  680.259873][T16800] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input27
[  681.453758][T12209] Bluetooth: hci6: unexpected event 0x01 length: 5 > 1
[  683.324926][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  683.347523][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  683.886660][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'.
[  684.537331][T16877] FAULT_INJECTION: forcing a failure.
[  684.537331][T16877] name failslab, interval 1, probability 0, space 0, times 0
[  684.550399][T16877] CPU: 0 UID: 0 PID: 16877 Comm: syz.7.2231 Not tainted syzkaller #0 PREEMPT(full) 
[  684.550435][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  684.550450][T16877] Call Trace:
[  684.550459][T16877]  <TASK>
[  684.550469][T16877]  dump_stack_lvl+0x16c/0x1f0
[  684.550503][T16877]  should_fail_ex+0x512/0x640
[  684.550529][T16877]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  684.550546][T16877]  should_failslab+0xc2/0x120
[  684.550563][T16877]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  684.550577][T16877]  ? __pfx_gid_cmp+0x10/0x10
[  684.550596][T16877]  ? prepare_creds+0x2c/0x7d0
[  684.550611][T16877]  prepare_creds+0x2c/0x7d0
[  684.550625][T16877]  set_current_groups+0x15/0xd0
[  684.550647][T16877]  __do_sys_setgroups+0x3db/0x4e0
[  684.550668][T16877]  ? 0xffffffffff600000
[  684.550682][T16877]  do_syscall_64+0xcd/0x4b0
[  684.550705][T16877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.550721][T16877] RIP: 0033:0x7f7f0a78eec9
[  684.550734][T16877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  684.550750][T16877] RSP: 002b:00007f7f0b610038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  684.550765][T16877] RAX: ffffffffffffffda RBX: 00007f7f0a9e6180 RCX: 00007f7f0a78eec9
[  684.550774][T16877] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000
[  684.550783][T16877] RBP: 00007f7f0a811f91 R08: 0000000000000000 R09: 0000000000000000
[  684.550792][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  684.550800][T16877] R13: 00007f7f0a9e6218 R14: 00007f7f0a9e6180 R15: 00007ffe34adc6c8
[  684.550816][T16877]  ? 0xffffffffff600000
[  684.550828][T16877]  </TASK>
[  685.820434][T12209] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  686.056225][T16908] netlink: zone id is out of range
[  686.070294][T16908] netlink: zone id is out of range
[  686.080462][T16908] netlink: zone id is out of range
[  686.097201][T16908] netlink: zone id is out of range
[  686.122926][T16908] netlink: zone id is out of range
[  686.159859][T16908] netlink: zone id is out of range
[  686.165139][T16908] netlink: zone id is out of range
[  686.170750][T16908] netlink: zone id is out of range
[  686.198374][T16908] netlink: zone id is out of range
[  686.227033][T16908] netlink: zone id is out of range
[  687.234036][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2242'.
[  688.444905][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'.
[  692.315897][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2258'.
[  692.421046][T16955] Process accounting paused
[  692.732852][T17013] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2269'.
[  693.043972][T17007] net_ratelimit: 11 callbacks suppressed
[  693.043989][T17007] netlink: zone id is out of range
[  693.084655][T17007] netlink: zone id is out of range
[  693.089906][T17007] netlink: zone id is out of range
[  693.095569][T17007] netlink: zone id is out of range
[  693.103447][T17007] netlink: zone id is out of range
[  693.108864][T17007] netlink: zone id is out of range
[  693.114952][T17007] netlink: zone id is out of range
[  693.120107][T17007] netlink: zone id is out of range
[  693.163833][T17007] netlink: zone id is out of range
[  693.169005][T17007] netlink: zone id is out of range
[  693.462260][T17026] ICMPv6: process `syz.8.2264' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  693.542792][T17029] random: crng reseeded on system resumption
[  694.579154][T17052] deleting an unspecified loop device is not supported.
[  697.263241][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2279'.
[  697.346097][T17094] ima: policy update failed
[  697.351268][   T30] audit: type=1802 audit(6442450988.665:21): pid=17094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2279" res=0 errno=0
[  697.915085][T17116] ICMPv6: process `syz.7.2283' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  698.377007][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2281'.
[  700.176363][T17143] net_ratelimit: 10 callbacks suppressed
[  700.176429][T17143] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  700.655710][T12209] Bluetooth: hci3: command 0x0406 tx timeout
[  700.693944][T17135] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2287'.
[  701.373223][T17176] random: crng reseeded on system resumption
[  702.135803][T17170] netlink: zone id is out of range
[  703.075237][T17188] __vm_enough_memory: pid: 17188, comm: syz.7.2304, bytes: 4398046511104 not enough memory for the allocation
[  704.147528][ T5853] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  705.750032][ T5853] Bluetooth: hci5: command 0x0406 tx timeout
[  705.845627][T17244] ICMPv6: process `syz.6.2309' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  706.087048][T12209] Bluetooth: hci5: unexpected event 0x3e length: 509 > 260
[  706.087085][T12209] Bluetooth: hci5: unexpected subevent 0x02 length: 508 > 260
[  706.103034][T12209] Bluetooth: hci5: Dropping invalid advertising data
[  706.110287][T12209] Bluetooth: hci5: Dropping invalid advertising data
[  706.118719][T12209] Bluetooth: hci5: Malformed LE Event: 0x02
[  706.483559][T17258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28
[  706.725671][T17254] zswap: compressor  not available
[  706.986568][T17254] HfR: entered promiscuous mode
[  707.107548][T17260] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[  707.804540][T17274] input: f�
 as /devices/virtual/input/input30
[  707.915377][T17277] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31
[  708.047820][T17279] sd 0:0:1:0: PR command failed: 1026
[  708.055774][T17279] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  708.062744][T17279] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  708.387943][T17286] __vm_enough_memory: pid: 17286, comm: syz.5.2320, bytes: 4398046511104 not enough memory for the allocation
[  710.828391][T17320] HfR: entered promiscuous mode
[  710.871031][ T5853] Bluetooth: hci6: command 0x0406 tx timeout
[  712.867112][T17356] program syz.7.2337 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  713.871789][   T31] INFO: task syz-executor:5837 blocked for more than 143 seconds.
[  713.897274][   T31]       Not tainted syzkaller #0
[  713.902267][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  713.921202][   T31] task:syz-executor    state:D stack:22680 pid:5837  tgid:5837  ppid:1      task_flags:0x400140 flags:0x00080002
[  714.001898][   T31] Call Trace:
[  714.011377][   T31]  <TASK>
[  714.017830][   T31]  __schedule+0x1190/0x5de0
[  714.023593][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  714.034129][   T31]  ? __pfx___schedule+0x10/0x10
[  714.051063][   T31]  ? find_held_lock+0x2b/0x80
[  714.063102][   T31]  ? schedule+0x2d7/0x3a0
[  714.067695][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.080898][   T31]  schedule+0xe7/0x3a0
[  714.087944][   T31]  schedule_preempt_disabled+0x13/0x30
[  714.100334][   T31]  __mutex_lock+0x818/0x1060
[  714.108901][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  714.119871][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.129340][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  714.142477][   T31]  ? net_generic+0xea/0x2a0
[  714.149902][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.162607][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  714.178737][   T31]  nfsd_umount+0x48/0xe0
[  714.189281][   T31]  deactivate_locked_super+0xbe/0x1a0
[  714.205514][   T31]  deactivate_super+0xde/0x100
[  714.214203][   T31]  cleanup_mnt+0x225/0x450
[  714.225508][   T31]  task_work_run+0x150/0x240
[  714.233916][   T31]  ? __pfx_task_work_run+0x10/0x10
[  714.253426][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  714.259335][   T31]  exit_to_user_mode_loop+0xdd/0x100
[  714.280741][   T31]  do_syscall_64+0x419/0x4b0
[  714.293165][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.307618][   T31] RIP: 0033:0x7f8b13f901f7
[  714.315981][   T31] RSP: 002b:00007ffd03008c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  714.334226][   T31] RAX: 0000000000000000 RBX: 00007f8b14011d7d RCX: 00007f8b13f901f7
[  714.342816][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd03008cd0
[  714.354849][   T31] RBP: 00007ffd03008cd0 R08: 0000000000000000 R09: 0000000000000000
[  714.363099][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd03009d60
[  714.377214][   T31] R13: 00007f8b14011d7d R14: 000000000008b9ea R15: 00007ffd03009da0
[  714.393123][   T31]  </TASK>
[  714.396423][   T31] INFO: task syz-executor:10179 blocked for more than 143 seconds.
[  714.405532][   T31]       Not tainted syzkaller #0
[  714.416475][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  714.434869][   T31] task:syz-executor    state:D stack:24216 pid:10179 tgid:10179 ppid:1      task_flags:0x400140 flags:0x00080002
[  714.447841][   T31] Call Trace:
[  714.451611][   T31]  <TASK>
[  714.458817][   T31]  __schedule+0x1190/0x5de0
[  714.466375][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  714.475476][   T31]  ? __pfx___schedule+0x10/0x10
[  714.488417][   T31]  ? find_held_lock+0x2b/0x80
[  714.495147][   T31]  ? schedule+0x2d7/0x3a0
[  714.499767][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.512588][   T31]  schedule+0xe7/0x3a0
[  714.518247][   T31]  schedule_preempt_disabled+0x13/0x30
[  714.529171][   T31]  __mutex_lock+0x818/0x1060
[  714.535469][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  714.540580][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.547978][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  714.554943][   T31]  ? net_generic+0xea/0x2a0
[  714.559637][   T31]  ? nfsd_shutdown_threads+0x5b/0xf0
[  714.567161][   T31]  nfsd_shutdown_threads+0x5b/0xf0
[  714.572667][   T31]  nfsd_umount+0x48/0xe0
[  714.579782][   T31]  deactivate_locked_super+0xbe/0x1a0
[  714.589149][   T31]  deactivate_super+0xde/0x100
[  714.602958][   T31]  cleanup_mnt+0x225/0x450
[  714.607671][   T31]  task_work_run+0x150/0x240
[  714.621556][   T31]  ? __pfx_task_work_run+0x10/0x10
[  714.631586][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  714.648245][   T31]  exit_to_user_mode_loop+0xdd/0x100
[  714.671911][   T31]  do_syscall_64+0x419/0x4b0
[  714.679288][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.686315][   T31] RIP: 0033:0x7fdbf8b901f7
[  714.690904][   T31] RSP: 002b:00007ffd89354028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  714.699484][   T31] RAX: 0000000000000000 RBX: 00007fdbf8c11d7d RCX: 00007fdbf8b901f7
[  714.707719][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd893540e0
[  714.715873][   T31] RBP: 00007ffd893540e0 R08: 0000000000000000 R09: 0000000000000000
[  714.724224][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd89355170
[  714.732391][   T31] R13: 00007fdbf8c11d7d R14: 000000000008b368 R15: 00007ffd893551b0
[  714.740632][   T31]  </TASK>
[  714.744202][   T31] INFO: task syz.2.1817:14687 blocked for more than 144 seconds.
[  714.752901][   T31]       Not tainted syzkaller #0
[  714.758375][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  714.767279][   T31] task:syz.2.1817      state:D stack:27304 pid:14687 tgid:14653 ppid:5839   task_flags:0x400140 flags:0x00080002
[  714.780120][   T31] Call Trace:
[  714.783690][   T31]  <TASK>
[  714.786745][   T31]  __schedule+0x1190/0x5de0
[  714.791383][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  714.797717][   T31]  ? __pfx___schedule+0x10/0x10
[  714.802860][   T31]  ? find_held_lock+0x2b/0x80
[  714.807658][   T31]  ? schedule+0x2d7/0x3a0
[  714.812121][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  714.818239][   T31]  schedule+0xe7/0x3a0
[  714.822884][   T31]  schedule_preempt_disabled+0x13/0x30
[  714.828575][   T31]  __mutex_lock+0x818/0x1060
[  714.833266][   T31]  ? netlink_unicast+0x5a7/0x870
[  714.838236][   T31]  ? netlink_sendmsg+0x8d1/0xdd0
[  714.844129][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  714.850022][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  714.855320][   T31]  ? __asan_memset+0x23/0x50
[  714.860214][   T31]  ? __nla_validate_parse+0x600/0x2880
[  714.865794][   T31]  ? nfsd_nl_listener_set_doit+0xd5/0x1b10
[  714.871678][   T31]  nfsd_nl_listener_set_doit+0xd5/0x1b10
[  714.877458][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  714.884349][   T31]  ? __nla_parse+0x40/0x60
[  714.888802][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  714.896370][   T31]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  714.903918][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  714.909524][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  714.915663][   T31]  ? rcu_is_watching+0x12/0xc0
[  714.920468][   T31]  ? bpf_lsm_capable+0x9/0x10
[  714.925427][   T31]  ? security_capable+0x7e/0x260
[  714.930397][   T31]  genl_rcv_msg+0x55c/0x800
[  714.934973][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  714.940049][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  714.946345][   T31]  netlink_rcv_skb+0x158/0x420
[  714.951186][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  714.956294][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  714.962098][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  714.967415][   T31]  genl_rcv+0x28/0x40
[  714.971464][   T31]  netlink_unicast+0x5a7/0x870
[  714.976330][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  714.981870][   T31]  ? __pfx___might_resched+0x10/0x10
[  714.987693][   T31]  ? __lock_acquire+0xb97/0x1ce0
[  714.992751][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  714.997542][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  715.003050][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  715.009153][   T31]  ____sys_sendmsg+0xa95/0xc70
[  715.014013][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  715.019500][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  715.024872][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  715.030191][   T31]  ___sys_sendmsg+0x134/0x1d0
[  715.034917][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  715.040166][   T31]  __sys_sendmsg+0x16d/0x220
[  715.044841][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  715.049973][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  715.055065][   T31]  ? syscall_user_dispatch+0x78/0x140
[  715.060476][   T31]  do_syscall_64+0xcd/0x4b0
[  715.068072][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.074330][   T31] RIP: 0033:0x7fd1f938eec9
[  715.078938][   T31] RSP: 002b:00007fd1fa214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  715.087864][   T31] RAX: ffffffffffffffda RBX: 00007fd1f95e6450 RCX: 00007fd1f938eec9
[  715.097129][   T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003
[  715.105226][   T31] RBP: 00007fd1f9411f91 R08: 0000000000000000 R09: 0000000000000000
[  715.113633][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  715.121748][   T31] R13: 00007fd1f95e64e8 R14: 00007fd1f95e6450 R15: 00007ffd6ec7dba8
[  715.129852][   T31]  </TASK>
[  715.132966][   T31] 
[  715.132966][   T31] Showing all locks held in the system:
[  715.144263][   T31] 1 lock held by khungtaskd/31:
[  715.149141][   T31]  #0: ffffffff8e1c34a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  715.159102][   T31] 1 lock held by klogd/5197:
[  715.164189][   T31]  #0: ffff8880b863a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  715.174244][   T31] 2 locks held by getty/5605:
[  715.179006][   T31]  #0: ffff888033d880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  715.189412][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  715.199636][   T31] 2 locks held by syz-executor/5837:
[  715.204966][   T31]  #0: ffff8880287460e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  715.215312][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  715.225131][   T31] 2 locks held by kworker/1:3/5841:
[  715.230542][   T31]  #0: ffff88801b081148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  715.241087][   T31]  #1: ffffc90003a47d10 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  715.252707][   T31] 2 locks held by syz-executor/10179:
[  715.258105][   T31]  #0: ffff8880326a20e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  715.268942][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  715.278652][   T31] 2 locks held by syz.2.1817/14660:
[  715.284079][   T31]  #0: ffffffff8ff7df90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  715.292919][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  715.303179][   T31] 2 locks held by syz.2.1817/14687:
[  715.308387][   T31]  #0: ffffffff8ff7df90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  715.316625][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  715.326824][   T31] 2 locks held by syz-executor/15118:
[  715.332235][   T31]  #0: ffff8880778720e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  715.342890][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  715.352582][   T31] 2 locks held by syz.5.2327/17320:
[  715.357787][   T31]  #0: ffff88807bf5e0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  715.368571][   T31]  #1: ffffffff8e5e4e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  715.378283][   T31] 
[  715.380932][   T31] =============================================
[  715.380932][   T31] 
[  715.389523][   T31] NMI backtrace for cpu 0
[  715.389541][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  715.389570][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  715.389584][   T31] Call Trace:
[  715.389592][   T31]  <TASK>
[  715.389601][   T31]  dump_stack_lvl+0x116/0x1f0
[  715.389631][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  715.389664][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  715.389699][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  715.389732][   T31]  watchdog+0xf0e/0x1260
[  715.389762][   T31]  ? __pfx_watchdog+0x10/0x10
[  715.389784][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  715.389809][   T31]  ? __kthread_parkme+0x19e/0x250
[  715.389842][   T31]  ? __pfx_watchdog+0x10/0x10
[  715.389866][   T31]  kthread+0x3c2/0x780
[  715.389902][   T31]  ? __pfx_kthread+0x10/0x10
[  715.389943][   T31]  ? rcu_is_watching+0x12/0xc0
[  715.389979][   T31]  ? __pfx_kthread+0x10/0x10
[  715.390015][   T31]  ret_from_fork+0x56d/0x730
[  715.390038][   T31]  ? __pfx_kthread+0x10/0x10
[  715.390074][   T31]  ret_from_fork_asm+0x1a/0x30
[  715.390122][   T31]  </TASK>
[  715.390130][   T31] Sending NMI from CPU 0 to CPUs 1:
[  715.507576][    C1] NMI backtrace for cpu 1
[  715.507597][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  715.507622][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  715.507635][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  715.507673][    C1] Code: 38 5f 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 86 1c 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  715.507693][    C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6
[  715.507712][    C1] RAX: 00000000005021ed RBX: 0000000000000001 RCX: ffffffff8b4d7fb9
[  715.507726][    C1] RDX: 0000000000000000 RSI: ffffffff8d9c2638 RDI: ffffffff8bd00dc0
[  715.507739][    C1] RBP: ffffed1003bd7b58 R08: 0000000000000001 R09: ffffed10170e6655
[  715.507754][    C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001
[  715.507767][    C1] R13: ffff88801debdac0 R14: ffffffff9060a290 R15: 0000000000000000
[  715.507781][    C1] FS:  0000000000000000(0000) GS:ffff888124f66000(0000) knlGS:0000000000000000
[  715.507801][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  715.507815][    C1] CR2: 00005555805b25c8 CR3: 0000000075bfe000 CR4: 00000000003526f0
[  715.507829][    C1] Call Trace:
[  715.507838][    C1]  <TASK>
[  715.507846][    C1]  default_idle+0x13/0x20
[  715.507869][    C1]  default_idle_call+0x6c/0xb0
[  715.507891][    C1]  do_idle+0x38d/0x500
[  715.507920][    C1]  ? __pfx_do_idle+0x10/0x10
[  715.507949][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  715.507974][    C1]  cpu_startup_entry+0x4f/0x60
[  715.508002][    C1]  start_secondary+0x21d/0x2b0
[  715.508032][    C1]  ? __pfx_start_secondary+0x10/0x10
[  715.508065][    C1]  common_startup_64+0x13e/0x148
[  715.508098][    C1]  </TASK>
[  715.508634][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  715.508652][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  715.508682][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  715.508697][   T31] Call Trace:
[  715.508706][   T31]  <TASK>
[  715.508715][   T31]  dump_stack_lvl+0x3d/0x1f0
[  715.508743][   T31]  vpanic+0x6e8/0x7a0
[  715.508779][   T31]  ? __pfx_vpanic+0x10/0x10
[  715.508817][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  715.508848][   T31]  panic+0xca/0xd0
[  715.508881][   T31]  ? __pfx_panic+0x10/0x10
[  715.508916][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  715.508952][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  715.508987][   T31]  ? watchdog+0xd78/0x1260
[  715.509010][   T31]  ? watchdog+0xd6b/0x1260
[  715.509035][   T31]  watchdog+0xd89/0x1260
[  715.509065][   T31]  ? __pfx_watchdog+0x10/0x10
[  715.509088][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  715.509114][   T31]  ? __kthread_parkme+0x19e/0x250
[  715.509147][   T31]  ? __pfx_watchdog+0x10/0x10
[  715.509171][   T31]  kthread+0x3c2/0x780
[  715.509217][   T31]  ? __pfx_kthread+0x10/0x10
[  715.509254][   T31]  ? rcu_is_watching+0x12/0xc0
[  715.509283][   T31]  ? __pfx_kthread+0x10/0x10
[  715.509320][   T31]  ret_from_fork+0x56d/0x730
[  715.509343][   T31]  ? __pfx_kthread+0x10/0x10
[  715.509382][   T31]  ret_from_fork_asm+0x1a/0x30
[  715.509427][   T31]  </TASK>
[  715.816452][   T31] Kernel Offset: disabled
[  715.820771][   T31] Rebooting in 86400 seconds..