last executing test programs:

9m57.295950657s ago: executing program 32 (id=520):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
r2 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000440)={@siginfo_0_0={0x3, 0x7, 0x0, @_timer={0x0, 0x81, @sival_int, 0x9}}}, 0x5, 0x0)
move_pages$auto(r2, 0xab6, &(0x7f0000000680)=&(0x7f0000000500)="12695940bf3c626839ef841ee8b23bd6328ec1f44d0e7dbd1af5fc1b46d4ead32487c5e3b069ecf19ebe3b216400d3a55c783c13942101a366afe742a68adc370cc5ed04ed96e11d8e2e1bea6d96ed39a2ad189a650f927b6d61eca01710abc718fa", &(0x7f00000006c0)=0x8000, &(0x7f0000000700)=0x8001, 0x7fffffff)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d)
setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140)
sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r3, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51)
read$auto(0xffffffffffffffff, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14858f00", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)

9m42.951790441s ago: executing program 33 (id=554):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r0, 0x0, 0x27, 0x0, 0xc)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
timer_create$auto(0x8, 0x0, 0x0)
timer_getoverrun$auto(0x0)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x20)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x9)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2a, 0x2, 0x1)
connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1)
close_range$auto(0x2, 0xa, 0x0)

8m32.476404732s ago: executing program 34 (id=722):
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x6800000000000000, 0xdf, 0x13, 0x40000000000a5, 0x9)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0)
socket(0x22, 0x6, 0x4)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000)
mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0xfe, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x800}, 0x7, 0x4108)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xebd, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
gettid()
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
ioctl$auto_CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
setresuid$auto(0x8, 0x8, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40101, 0x0)

6m18.808070229s ago: executing program 35 (id=1271):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
writev$auto(0x3, 0x0, 0x8009) (async)
syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b49, 0x9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0)
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async)
write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) (async)
io_uring_setup$auto(0xfa3, 0x0) (async)
bpf$auto(0x5, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0xe, 0x100, 0x80000001, 0x6fca, 0xffffffffffffffff, 0x5, "31b63adcc97aa60ffd8c28b17c06a76e", 0x0, 0xffffffffffffffff, 0x61, 0xffffffff, 0x4, 0x8}, 0x9) (async)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_REGISTER(r4, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x1, 0x0)
syz_genetlink_get_family_id$auto_batadv(0x0, r2) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) (async)
r5 = socket(0x10, 0x3, 0x6)
pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x80000000, &(0x7f0000000300)={@_si_pad}, 0x6) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810)

4m43.716487019s ago: executing program 6 (id=1769):
mmap$auto(0x9, 0x2, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/pagemap\x00', 0xcc02, 0x0)
readv$auto(r0, &(0x7f0000000400)={0x0, 0x40}, 0x6)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10)
listmount$auto(0x0, 0x0, 0xf4240, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0)
getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0)
r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000003c0), 0x52f03, 0x0)
readv$auto(r1, &(0x7f00000018c0)={0x0, 0x1}, 0x9)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
timer_create$auto(0xfffffffc, 0x0, 0x0)
timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0xe64e}, {0x9, 0x3}}, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
prctl$auto_PR_SET_MM_START_STACK(0x2, 0x5, 0x0, 0x2, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000e1, 0x40eb1, 0x401, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0)
sched_setattr$auto(r3, &(0x7f0000000340)={0x7, 0x6, 0xfffffffffffffff9, 0xfff, 0xa, 0x1f9, 0x6, 0x9, 0x4, 0x8001}, 0x7b)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd1/queue/chunk_sectors\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0)
sendfile$auto(r5, 0x3, 0x0, 0x7)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000240)=""/157, 0x9d)

4m43.404653802s ago: executing program 6 (id=1772):
mmap$auto(0xfffffffffffffffe, 0x20009, 0x10000000000e2, 0xeb2, 0x401, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
socket(0x2c, 0x3, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x4, 0x0, 0x400000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
write$auto(r0, 0x0, 0x100000a3d9)
prctl$auto(0x1fc, 0xfffffffffffffffe, 0x0, 0x1000, 0x7)
prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0xa)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000080)={0x0, 0x80000001}, 0x101, 0x2, 0x753)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2, 0x2, 0x1)
sendto$auto(r2, 0x0, 0x3, 0xfffffff8, &(0x7f0000000000)=@isdn={0x22, 0x4, 0x0, 0x3, 0x2}, 0x1c)
mmap$auto(0x9, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0)
openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0)
readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0)
clock_adjtime$auto(0xfffffffffffffffb, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
read$auto_proc_fail_nth_operations_base(0xffffffffffffffff, 0x0, 0x0)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)
timer_settime$auto(0x0, 0x7ff, 0x0, 0x0)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0)

4m42.898569493s ago: executing program 6 (id=1778):
r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x200600, 0x0)
write$auto_lowpan_enable_fops_(r0, &(0x7f0000000100), 0x0)
connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd06, &(0x7f00000001c0))
r1 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101000, 0x0)
lseek$auto(r1, 0x7fffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rx_duplicates\x00', 0x200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x181081, 0x0)
ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004})
r3 = socketcall$auto(0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3)
close_range$auto(0x2, 0x8, 0x0)

4m42.72732752s ago: executing program 6 (id=1779):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
open(0x0, 0x7ffd, 0x12)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000000, 0xe)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x8, 0x82030009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
connect$auto(r1, 0x0, 0x10)
sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x134, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_COORDINATOR={0xfb, 0x1e, 0x0, 0x1, [@generic="360edf623c70d22ede40fbc7583a5ca7af241248fd926dd1ca6b0890197a64dbce4578794dfae996754bb55807cf6704f86ff9bf956263ab9e3ecc98b3b273bddd6ed761d98d8dc197f23d74d05fc041eb4d1ee76c4eec6bf95abef6c1614b469c5fd2d036e6ca739f74f3f2773f6b2edd418a9f7d865e67302f6cdc51c4f31f7af9d3e3116065e9dbdf6f2cc9cf8b2710d8e21f0b4eaad37d67d06ba479b0231595e4115e00b99adb203639e5fcf23e7419f42afe6699f635b9c315b9a3cf25740c0a24caa453eb297b68e3d47cf5b4959f974f03357d165df924abdfd9c2f12602c77fa881ebe96d8f1e9585da437bdcd2404ceae923"]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}]}, 0x134}}, 0x4040)
unshare$auto(0x40000080)
r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000001c0), 0x86903, 0x0)
lseek$auto(r2, 0x2, 0x2)
r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x82)
io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000180)="31cad0426efcf3d650035f5e074632d1f382cfd1d9aa4689d842d41826daa77b2d562b1e009e828f0f90f7d4933f8c4cc4", 0x7)
readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1)
mkdir$auto(0x0, 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3378, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)
r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0)
read$auto(r4, 0x0, 0x4000000081)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = socket(0x1e, 0x805, 0x0)
connect$auto(r5, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10)

4m41.874850526s ago: executing program 6 (id=1784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), 0xffffffffffffffff)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000040)="78298dc7", 0x1)
r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x1, 0x0)
write$auto(r2, 0x0, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001280)='/dev/ptyxd\x00', 0x801, 0x0)
ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000012c0)="98b78996b3ec")
tkill$auto(0x1, 0x7)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf0705d38e5ef4951b0e6e0c27e1fc5", @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
timerfd_create$auto(0x75f6, 0x3737837e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(r5, 0xae41, r4)
ioctl$auto_SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0)
ioctl$auto_OSS_ALSAEMULVER(r4, 0x80044df9, &(0x7f00000002c0)="c299b4862cf240537acf4bd05677915835f0807575b4e094e907edee013f33f399cd6a67fb633b480ecdd07d5e1cb971d8289a3aa676b223b794cb01f82f1bafbad174c60729707861832b20f49c93f31b594f8f3849b43d30b07fd0c710c70f19e9204314e04c99504fe03d805991d41ec8851607153dd542f2bc8b17ea4606c784819034dcedcdf5abbc16369ce836d99ed061dc51c6416eab91adf17897051305147cc74c9441f3b8bf066fe1dff4d7835d6f3b19a4dcd7584da3c36475460378e0bedbf8")

4m40.950039697s ago: executing program 6 (id=1788):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81)
mmap$auto(0xfffffffffffffffe, 0xffffffff00000001, 0x4000020000df, 0x4000000eb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0)
socket(0x2, 0xa, 0xe57a)
getpeername$auto(0x3, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x7, 0x80000101, 0x4, "aab8e8dfffff7f000000000000000000205e782d000000000000000000021000", @raw=0x2}, 0x5, 0x408, 0x6, @raw=0x9, @enumerated={0x1, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x3}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x200200b8, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x502, 0x5, 0x0, 0x467, @raw=0x9, @raw=0xf, 0x7, 0x0, &(0x7f0000000380)="cf796bac33e50ef646b5c94256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf604d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537e5ef7ffffcb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb042d4efbc257e036c3242b2fd63d5345aa8a6e880f941fe5b0a7366d60ef5cf6b9ec7268d034035aacf10e", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d5adb424af07a9e8d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc99d0a6ff"})
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mmap$auto(0x1426f188, 0xc, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)

4m40.408286556s ago: executing program 36 (id=1788):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81)
mmap$auto(0xfffffffffffffffe, 0xffffffff00000001, 0x4000020000df, 0x4000000eb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x1)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0)
socket(0x2, 0xa, 0xe57a)
getpeername$auto(0x3, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)
ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x7, 0x80000101, 0x4, "aab8e8dfffff7f000000000000000000205e782d000000000000000000021000", @raw=0x2}, 0x5, 0x408, 0x6, @raw=0x9, @enumerated={0x1, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x3}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x200200b8, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x502, 0x5, 0x0, 0x467, @raw=0x9, @raw=0xf, 0x7, 0x0, &(0x7f0000000380)="cf796bac33e50ef646b5c94256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf604d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537e5ef7ffffcb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb042d4efbc257e036c3242b2fd63d5345aa8a6e880f941fe5b0a7366d60ef5cf6b9ec7268d034035aacf10e", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d5adb424af07a9e8d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc99d0a6ff"})
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mmap$auto(0x1426f188, 0xc, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)

2m55.737737852s ago: executing program 8 (id=2202):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$auto_PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100))
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, 0x0})
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x34, 0xf3, 0x0, @inferred=r1}})

2m54.72908529s ago: executing program 8 (id=2209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20044810}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(r2, 0x10000000084, 0x77, 0x0, 0x8)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x420042, 0x0)
mmap$auto(0x0, 0x5, 0x105, 0x40fb2, r3, 0x300000000000)
r4 = setfsuid$auto(0xee00)
setreuid$auto(r4, 0x0)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000001200)=ANY=[@ANYBLOB="48160000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="c48128de6307ceec0b2248c8fa4e41cc30280b3eaa24714518234d7f85ad970b8da2b52815f766c1d8eddfcdc55d1d93553d024e5484aef7b93ef7eecdad125070de193f6c83851f385253b67874d91d19d00ad98c4446e925c427d404230783e3e4cd1108bfe53ebaafda2d1a2389c77d9a6081a7b2b46f3322ff28d1596a36128e272a656becff0bf1b58b5f928354eac4acac711600bacd24c2ff76872f400895a2510ddcbfc163c248f960f0d6c8dc4d122b258cc93d10686ce08011311103073fcbda42e64d1cc1eb78df3e99ef57e50af6500000003400ac800800fc00", @ANYRES32, @ANYBLOB="040039800800c500", @ANYRES32=0xee00, @ANYBLOB="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"], 0x1648}, 0x1, 0x0, 0x0, 0x20048810}, 0x20000000)
sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x8}}, 0x20)
rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000480)={@_si_pad})
r5 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r5, &(0x7f0000000340)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000400), 0xe7}, 0x5, &(0x7f0000000180), 0x5, 0x80000001}, 0x8}, 0x2, 0xfc)
semctl$auto(0x9, 0xc, 0x12, 0x1)
r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
pread64$auto(r7, 0x0, 0xe, 0x100000000007)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, 0x0)
r8 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x80000001)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000000), r8)
stat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x6, 0x8, 0x126bced2, 0x9, <r9=>0x0, 0x0, 0x0, 0x8000000000000000, 0xe2fc, 0xffffffffffffffff, 0x5, 0x3, 0x6, 0x7fffffff, 0x6, 0x8, 0x1000000000})
ioctl$auto(r2, 0x8, r7)
setfsuid$auto(r9)
getpeername$auto(r7, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x0}, &(0x7f0000000240)=0x1a30)

2m53.902923902s ago: executing program 8 (id=2214):
socket(0x11, 0x3, 0x6) (async)
socket(0x11, 0x3, 0x6)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) (async)
bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async)
openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (async)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
msgctl$auto_IPC_RMID(0xfff, 0x0, &(0x7f00000004c0)={{0x5, 0xee01, <r1=>0xee01, 0x11, 0x6, 0x1000, 0x1}, &(0x7f0000000440)=0xbf, &(0x7f0000000480)=0x2, 0x8, 0x8000000000000001, 0x1, 0x5, 0x2, 0xfff, 0x1000, 0x3, @raw=0x8, @inferred=0xffffffffffffffff})
keyctl$auto_KEY_SPEC_PROCESS_KEYRING(0x7, 0xee00, 0x0, r1, 0xfffffffffffffffe) (async)
keyctl$auto_KEY_SPEC_PROCESS_KEYRING(0x7, 0xee00, 0x0, r1, 0xfffffffffffffffe)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdfdf250200000007000400284f2dc6fe7d00daab4616be0c4ed18dea7b785f7fbae6047dc9"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdfdf250200000007000400284f2dc6fe7d00daab4616be0c4ed18dea7b785f7fbae6047dc9"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd704f3e84d882bfc1ff00260397da3727f3a5146af92b5e1b60f8b674cc00266b98b45a5d2604a2f03b5355d695ddf8c4bbf5f0458cbe5bc7c781b0782f8370f94cc811c83d22239600a981ad15e70a79c447188200e9a8f27c9b23deb82cfd0e3e4a3ee174f0f494d3cf8290f2deab7150276b0592ef4b7f06a03468b47b"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000b, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)

2m52.215141174s ago: executing program 8 (id=2220):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000010", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
madvise$auto(0x2, 0x7, 0xc)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{<r3=>r0, &(0x7f0000000300)="2799a9ff76c310c817d5a4badde253a66d1bdd7cc383230a0100badd20375b84b256d655d0c5682c2c248b63044ea68575c58c7ea2fd72f615c48a1d0f7fc56f6a32efce9dc24ce5aa2af5b2feda51f4748bbef190978abcd947fa0d0047ff81", 0x3, &(0x7f0000000380)="9e6bce811a5aff05bda4afe8519eeb7eb99073d4547a6ff1e3401eb1f35bbd84072d3a180efde4c92bb288d823539b115b6b424069aca4fc000036bdb30bcf416522886a415e806c08c6249c07001f329d9431bc85d0db31ee0dc1104a02b82e57a4bba6a5fbb6a39d84355ec71f52f0b04e52e8ea4fba0032928b23c972b5a835e01c7018034e00b244ee8a7611ba2c97700eb119066ee3ef18582e6334d61ab95198dca53eeef313c7b5103d", 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x3}, {[0x7, 0x6, 0x5, 0x7fff]}, 0x88, 0x0, &(0x7f00000004c0)="0f6eee60ed9c118a9c0a2e02f0dd28d296a8cac3fef825b9f7808b861e0eb9f421f78acf2178ac80"})
ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000580)=0xfffff0f4)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x480c)
write$auto_fake_panic_fops_(r3, &(0x7f00000005c0)="f2bd5678706ecc04609bc4fb4d131b70bc33e3a07c810e2f8841b30d74901044fcf54235a5487dff5f52c2d56f7b6ce85821094241aa7b78dca8e4e39fe2ad0b735e2f320d9ef5910cf078ba7ceaf9f6930bfdc149f1ba38c6eb97630092ecb2c946e5b4d284c5a4f5", 0x69)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
munlock$auto(0x6, 0xd177)

2m51.900799471s ago: executing program 8 (id=2221):
r0 = memfd_secret$auto(0x0)
socket(0x1a, 0x1, 0x0)
epoll_create$auto(0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async)
write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) (async)
mmap$auto(0x401, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x3373, 0xffffffffffffffff, 0x4}, 0x8) (async)
mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8000, 0xfffffffd)
r2 = socket(0x2b, 0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1)
io_uring_register$auto(r2, 0x3, 0x0, 0x100006) (async)
socket(0x2b, 0x1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mlock$auto(0x112, 0x80006) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) (async)
close_range$auto(r0, 0x8000, 0x0) (async)
mlockall$auto(0x800000000000005) (async)
madvise$auto(0x0, 0x200007, 0x19)

2m51.729510599s ago: executing program 4 (id=2222):
quotactl_fd$auto(0x0, 0x2, 0x0, 0xfffffffffffffffd)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/name\x00', 0x971b02, 0x0) (async)
r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/name\x00', 0x971b02, 0x0)
mmap$auto(0xfffffffff8, 0xa, 0x8, 0x7427c1bb, r0, 0xfff)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/self/smaps_rollup\x00', 0x2, 0x0)
socket(0xa, 0x801, 0x84)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto(r2, 0x8100451b, r2) (async)
ioctl$auto(r2, 0x8100451b, r2)
setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x2) (async)
setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x8, 0x80) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x8, 0x80)
r3 = socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0) (async)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
recvmmsg$auto(r1, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x4, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r3, 0x8b0f, 0x24) (async)
ioctl$auto(r3, 0x8b0f, 0x24)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r5 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0)
read$auto_sco_debugfs_fops_(r5, &(0x7f0000000140)=""/211, 0xd3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x37e, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4) (async)
bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x37e, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4)

2m51.327107685s ago: executing program 8 (id=2224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
fsconfig$auto_HIDEPID_NO_ACCESS(r1, 0x5, &(0x7f0000000040)='\'{\x00', &(0x7f0000000080)="85f6cea26e91ad8ebdb72ab69c356323ed84ca261c77618c9ca1ba7917380ae3726ecb5ed14e72531c91eea6de6f26ccaaf2296a2a5bdc7ec01bcaf0cdfbdcd4c70f890c8bf56890ef09912ddb8ac4e9ede87697a2347be88e2706dec03b7d88e371a282dc27e965491e375dfdb7a4c5b404100a09da16ea37238299e66c883e17d48a853cbdf00d4f36c759e10a55fd90a8a4074c1255da5472f96d3f36559c403b748ad5bb9b76efd58c6ccf7c82d2bca455084b7f811ba89828715a2a15a6ff26dc0dff2e98a5ea04609bc89c0bafae3dc9a3aa7c17b7b1632fbb42aa1dc2beca84082c6928a487cb62caf773d55b", 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000)
socket(0x10, 0x80000, 0x5)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m50.574938077s ago: executing program 4 (id=2228):
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8)
getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
lsm_get_self_attr$auto(0x0, &(0x7f0000000280)={0xb4, 0x8, 0x1000, 0xa6, "f99d879b1c1a74751ea62c8b740417ff8e5dba29a9751f062cd27aec01725e5bdc0f9bff43aa80ea95cbf362bdeb71daef87d9a88e41b1fc37647ed37b7f657de8f7a35ebfa839556cd9fb12490c98a590db1942d53a8398315c76e5210ed545f36ee95c99016f37e2dd0f8696082efafb317f4323eed38e3f4d4185590eb7895ecf4ed942983b06fd0761c8e11e63b34452ea6ebdfaedb2f44525959cb32e50df3ed7f0c74c"}, &(0x7f0000000380)=0xffffffff, 0x1)
socket(0x10, 0x2, 0xc)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x6, 0x8000000000000006, 0x10, 0x0, 0x7ffffc)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x118, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8000}, @NL80211_ATTR_HT_CAPABILITY={0xe5, 0x1f, "826a9037b1e46bc6b04e1dc3376a271725ae8947db505c514bc8e59f69a181a80eb34cc99e23e7ad1f40f874128e30b481b3eb521126a9e080492d3d6463e63ad2b0467620831343783d1ef45fac0dfb1a69db1c56762613c87ad10477018b66be05a167e738b818b8ef62013c3e4cb7b3adda9a8c4afab450dde7e88592b7882b2feaf468efc5dc37251f9d2a60d9bdf50646ab76c124787e6237735d8f4d2e327a3def364c8bd04b72fe4c1c4af7501c83fa2b3c4feb9cdd6cf86ac7af88be7837887e11829b502a4eadc76186a96f9a47296e0b6a0c059ca8204f5128c40979"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000080}, 0x10)

2m48.630454039s ago: executing program 4 (id=2230):
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xaf0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x1e76c3, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
unlink$auto(&(0x7f0000000380)='./file0\x00')
fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x441, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0)
read$auto(r1, 0x0, 0x1ff)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x400008, 0xe3, 0x410, r0, 0x8000)
bind$auto(0xffffffffffffffff, 0x0, 0x6a)
ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0)
socket(0xa, 0x5, 0x84)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40242, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2)
read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffae, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x6cc31ef15fcd919c)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x20004004)

2m48.475815517s ago: executing program 4 (id=2232):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mq_getsetattr$auto(r0, &(0x7f0000000000)={0x1, 0x2, 0x400, 0xfffffffeffffffff}, &(0x7f00000000c0)={0x0, 0x0, 0xfd06, 0x7f})
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ieee802154/6lowpan/6lowpanfrag_low_thresh\x00', 0x80, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0)
sendfile$auto(r2, r1, 0x0, 0x48)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
brk$auto(0x7fffffffafff)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x810004, 0x7fffffffffffffff, 0x100000010, 0x3, 0x80000001)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)
brk$auto(0x8)
mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd})
semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)

2m47.939672079s ago: executing program 4 (id=2233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(r0, r0, 0x400)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r1=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
socket(0x10, 0x2, 0x0)
memfd_create$auto(0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
tkill$auto(0x1, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0)
seccomp$auto_SECCOMP_SET_MODE_STRICT(0x0, 0x7f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
socket(0xa, 0x3, 0x3a)
r3 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3)

2m47.432151579s ago: executing program 4 (id=2237):
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x10, 0x0, 0x7f, 0xffff, 0xffffffffffffffff, 0x97, "b3be20b60af2baa925ab5ed7fbf10be2", 0x0, 0xffffffffffffffff, 0x2, 0x10, 0x1000, 0x100000000}, 0x10)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0xb, 0x4, 0x8, 0x19}, 0x6d)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
connect$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41c8e4d5018fca6b1643fc"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x48c, 0x0, 0xa}]})
r2 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x2, 0x4}, 0x8}, 0x5, 0x20000000)

2m46.887940937s ago: executing program 37 (id=2237):
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x10, 0x0, 0x7f, 0xffff, 0xffffffffffffffff, 0x97, "b3be20b60af2baa925ab5ed7fbf10be2", 0x0, 0xffffffffffffffff, 0x2, 0x10, 0x1000, 0x100000000}, 0x10)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0xb, 0x4, 0x8, 0x19}, 0x6d)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
connect$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x14}, 0x6, &(0x7f0000000180), 0x5, 0x1001}, 0x5}, 0x2, 0x100)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{0x48c, 0x0, 0xa}]})
r2 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x2, 0x4}, 0x8}, 0x5, 0x20000000)

2m36.047704721s ago: executing program 38 (id=2224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
fsconfig$auto_HIDEPID_NO_ACCESS(r1, 0x5, &(0x7f0000000040)='\'{\x00', &(0x7f0000000080)="85f6cea26e91ad8ebdb72ab69c356323ed84ca261c77618c9ca1ba7917380ae3726ecb5ed14e72531c91eea6de6f26ccaaf2296a2a5bdc7ec01bcaf0cdfbdcd4c70f890c8bf56890ef09912ddb8ac4e9ede87697a2347be88e2706dec03b7d88e371a282dc27e965491e375dfdb7a4c5b404100a09da16ea37238299e66c883e17d48a853cbdf00d4f36c759e10a55fd90a8a4074c1255da5472f96d3f36559c403b748ad5bb9b76efd58c6ccf7c82d2bca455084b7f811ba89828715a2a15a6ff26dc0dff2e98a5ea04609bc89c0bafae3dc9a3aa7c17b7b1632fbb42aa1dc2beca84082c6928a487cb62caf773d55b", 0x1)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000)
socket(0x10, 0x80000, 0x5)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

2m34.633681545s ago: executing program 9 (id=2263):
syz_clone3(&(0x7f0000001240)={0x2000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x27}, &(0x7f0000000140)=""/173, 0xad, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5c}, 0x58)
sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80)
readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) (async)
readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10)
move_pages$auto(0x1, 0x80000000000003fb, 0x0, 0x0, 0x0, 0x4) (async)
move_pages$auto(0x1, 0x80000000000003fb, 0x0, 0x0, 0x0, 0x4)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2})
ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2077dda5537abf072109ee3738e2363fd6f77ee5f7a0eb6b5467ad193a15687768e5cd532026798d78be79990649e060468efc9bc1b19c260001005469e128ebd12ae54d359d00000000b2059386f15ddf5f03000090d9617f96c4841f02235a7b38c8b42600000000000000f667d78d34da832d2edd713fac62da6f4d0b1ada0caeb48d78fc79f3af82a9c71429d21ed90a93b326350fb5ef77ce547bf3e6aa130035cd1e6b4c524defe2c5368625abd92440c7ee50078d665826a58192c87876207addf39b", @ANYRES16=r1, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810)
socket(0x2, 0x3, 0x1)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0)
read$auto(0x4, 0x0, 0xfdef)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x14)

2m34.365874485s ago: executing program 9 (id=2264):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x0, 0x0)
socket(0xf, 0x3, 0x2)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
shutdown$auto(0x200000003, 0x2)
listen$auto(r0, 0x7)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4")
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x2808c0, 0x0)
read$auto(r3, 0x0, 0x20)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

2m34.092086702s ago: executing program 9 (id=2265):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000008c0)=""/61, 0x3d)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0)
write$auto(r2, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0)
write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
ioctl$auto_BLKRRPART(r3, 0x125f, 0x0)
mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r6 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/interfaces\x00', 0x1, 0x0)
sendmsg$auto_NL80211_CMD_SET_STATION(r5, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x13c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0xf5, 0x148, "2c06f03b228a28c8ca75fdbc48dfebdbc4e552d0c0f6955e5acfbdc5472ad37d09c8d56b34139d530be0c9078848b17a509648f5b50677ddb185bde757be0c181ead9b42136bf0b97d598cac50fd975cccc3c58c55349f7d0a936823138f389d0fefaa6bc094e0b3ab77574abe3edebb8ec930a8a2b839f13c0a052eaf4e6e23a9458057784cab78e3c191e660ebdcdfb52861ed38ae55321236f177cc1eeb027848cbeb5c75ef4e8bb8436402f7ff4c49b5ff82a1ddfdf3e858b87ec41fa49dc161e03bba27667eca235fcef22e5964e7dc73fd8ed5d476470482f23021cd504ef904b235b01e5eed625dbf110a05735d"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6f, 0x6}}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x20, 0xbe, "b020292a0872a9fe6152d687c9e8512178dc5483f60a3291e2170db5"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x4880)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
writev$auto(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x1}, 0x4)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r7, 0x5425, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8360c21, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

2m32.989561566s ago: executing program 0 (id=2270):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x3, 0x5420, 0x38)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
ioctl$auto(0x3, 0x402c542c, 0x38)
ioctl$auto(0x3, 0x402c542b, r0)
mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8880)
unshare$auto(0x40000080)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8947, &(0x7f0000000000)={'bond0\x00'})
fremovexattr$auto(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00')

2m32.984385833s ago: executing program 9 (id=2271):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) (async)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0) (async)
r0 = socket(0x10, 0x2, 0x4) (async)
futex$auto(0x0, 0x0, 0x6, &(0x7f0000000080)={0xfffffffffffffff9}, 0x0, 0x3)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x2, 0x88)
socket(0x10, 0x2, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/infiniband_mad/abi_version\x00', 0x20100, 0x0) (async)
socket(0x2, 0x1, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x2, 0xc) (async, rerun: 32)
r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci0/hci0:200/power/autosuspend_delay_ms\x00', 0x50541, 0x0)
mq_timedreceive$auto(r2, &(0x7f0000000040)='\x00', 0xe, &(0x7f0000000280)=0x101, &(0x7f0000000340)={0x200, 0xc725})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64)
bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) (async, rerun: 64)
r3 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async, rerun: 64)
write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) (async, rerun: 64)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) (async)
read$auto(0x3, 0x0, 0x7fffffff) (async, rerun: 64)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) (rerun: 64)
ioctl$auto(0x3, 0x402c542b, 0x38) (async)
pkey_free$auto(0x17) (async, rerun: 64)
ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) (rerun: 64)

2m32.112903389s ago: executing program 0 (id=2272):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
lseek$auto(0x3, 0x2, 0x4)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xa)
unshare$auto(0x40000080)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ioctl$auto_SG_SET_RESERVED_SIZE2(r1, 0x2275, 0x0)
r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0)
readv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
r3 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
socket(0x10, 0x3, 0x2)
socket(0x10, 0x2, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
getsockopt$auto(r3, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2m31.827082258s ago: executing program 9 (id=2273):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x0, 0x0)
socket(0xf, 0x3, 0x2)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
shutdown$auto(0x200000003, 0x2)
listen$auto(r0, 0x7)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff)
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4")
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x2808c0, 0x0)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

2m31.630219046s ago: executing program 9 (id=2274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket(0x2, 0x80002, 0x73)
getsockopt$auto(r2, 0x0, 0x3, &(0x7f0000000040)='+\x00', &(0x7f0000000080)=0x3ff)
mmap$auto(0x80000001, 0x3, 0x6, 0x14, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000)

2m30.894904605s ago: executing program 0 (id=2275):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r0, 0x0, 0x6bc, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x1003, 0x401, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r1)
unshare$auto(0x40000080)
socket(0x1, 0x5, 0x100)
mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0x6, 0x4000eb1, 0x401, 0x1)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
ioctl$auto(r2, 0x4008af04, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0)
madvise$auto(0x0, 0x2, 0xb41d)
write$auto(0x3, 0x0, 0x100082)
madvise$auto(0x0, 0x200007, 0x19)
socket(0x29, 0x3, 0x3)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x240, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/152, 0x98)
r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0)
openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x802, 0x0)
read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000010c0)=""/22, 0x16)

2m29.255470361s ago: executing program 0 (id=2280):
r0 = socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
open(0x0, 0x2ac41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x7, 0x0)
open(0x0, 0x10d543, 0x165)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8000, 0x0) (async)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8000, 0x0)
ioctl$auto(r3, 0xc10c5541, r2) (async)
ioctl$auto(r3, 0xc10c5541, r2)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"7f1d8651ec1fd8ba828cbf19dac294556505f01920192dc9970bb2104a793f6e", 0x6, 0x6, 0x2, 0x1, 0x1, 0xffffffffffffffff}) (async)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"7f1d8651ec1fd8ba828cbf19dac294556505f01920192dc9970bb2104a793f6e", 0x6, 0x6, 0x2, 0x1, 0x1, <r6=>0xffffffffffffffff})
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x484, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_BEACON_HEAD={0x29d, 0xe, "ca590dbbc6b0876c9de912ed1e6a4d8d47c36ad19ed9e102846a96e2507b2bd40f54272d0ae8ae369e32827e88a283d4ae88e3e462956eec6a5fb358e9976caf038831c3b37be7c447586b93b710b479478b76fea246689b6e923c552353ee9c7e6355bdc984b05988756f6dc122fa3587efb7824d8b436fb7ee6961dee97742c731ce6f3f5bebfc39de580c7599790e341036a278cd6103fccf50f352958e9aee18a54cfeb28a43f20e15d9654fd48bcbae15f373931afbcfde9b915daeb23fbeebf9ecde0592c3a9d5d6165c6772c5b104848d0fccfbeba4c015f4accb344fe7d93bbb2ac9635b09e9babe4cd2ac24b594b9b56f6ee16f3dc518fa161b1dfa9216044cd840621a1866e1e2df3c8bfca5cf1ab27b6a1e34e426f634dd4cdf0fb6366f117f244e48f1c46d5613f5451d867867614762cd920c58b63a8319ac8c92502a5435d8482f60d35e9b2d9f221ca98fd21c13b3636aa194b4414c71e2fe2cfc32373e3f7c3a6db83502137e048617be126a906e278c5ee2ab50c6afe7192b84e745a8b63f82ac87eca2166b76996353e72d1112dc3222cceebdb423353e30cc0a703780caf3210c3138e55a61cecebc15ca77f3254f5a753ff97639e496978250a3efb096b67857470a2b53d97733b6d3278ebebdce6031c9eab8af2b65ad2278f5e3906363f330578f7491622a3c190d1d64f0ecba5cd49626391873fc8369cdc0c6886591396999242c9bc6385728044602e429155ae61c7f9ad314051532bcae04288aa803a4abedc7d6b64f16d0fd800e322dcf9d066ccdb9d7589e04d0884913a846bf9c93d1aa69c71fa74906a99c78a42196cc4ce4ba21fe72ec76b64b99cc9a200054b382d3ac99fe2ac296cdd1111f4101a4049a867d3e5213db3fec1d523ea4c5bfe06133f24a8395a10f6949db16a2aae2"}, @NL80211_ATTR_IE_RIC={0x16f, 0xb2, "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"}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x31, 0xfc, "3c4cf0ea97fc8db7df264aac570d3af777a3a10a630803b41bb527127146e8838fa35cde63075fc0a80de91b27"}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x484}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
ioctl$auto(0xc8, 0x4020940d, 0x5c8d) (async)
ioctl$auto(0xc8, 0x4020940d, 0x5c8d)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004d081}, 0x4010)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x368, &(0x7f00000003c0)={{}, {0x0, 0x97}}, 0x0)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000)
fsopen$auto(0x0, 0x1) (async)
r7 = fsopen$auto(0x0, 0x1)
io_uring_setup$auto(0x1, &(0x7f0000000280)={0xa10663d3, 0x6, 0x78, 0x7fffffff, 0x3, 0x4, r7, [0x8, 0x1, 0x80000001], {0x3, 0x7, 0x1, 0x5, 0x8, 0xa2, 0x6, 0xc3, 0xfffffffffffffffe}, {0x53, 0x6, 0x0, 0x2, 0x80, 0x7, 0xe, 0x9, 0x4}})
ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r7, 0x40789440, 0x0)
ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r7, 0xc0844123, &(0x7f00000001c0)={0x8000, @reserved="a35a0b369f4961492fd422c4e5c1077d0f356f27ba1f744a1ecbafa4d60200bfd9d774df1fc70179116cea0b475d80fc645509c210a3dabc078a922653206ec7", @reserved="7cb296e70865cd9f2af0507580f10da5b7f6383060185eabecf82da640ca3bf0d2feaba565728d400485ad151d7181d4e36712c342dcfd8464e2fe6c74e1374d"})

2m28.783039614s ago: executing program 0 (id=2281):
select$auto(0x3, &(0x7f0000000040)={[0x800, 0xd0, 0x1, 0x8, 0x7f, 0x100000001, 0x9, 0x820, 0x2a, 0x4, 0x8, 0xfffffffffffffff9, 0x69c8, 0x535e86c5, 0x1, 0x1]}, &(0x7f0000000140)={[0x100000000, 0x80, 0xffffffff, 0x788e485d, 0x4a, 0x5, 0x0, 0xc131, 0x29c6, 0x100, 0x15c000000000, 0x0, 0x9, 0x7fffffff, 0x7, 0x9]}, &(0x7f00000001c0)={[0xffffffffffff8684, 0x8, 0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x3, 0x3, 0x0, 0x1, 0x5, 0x3, 0x2, 0x7fffffff, 0x7]}, &(0x7f00000000c0)={0xba, 0x8}) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32)
clone$auto(0x1002, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) (async)
madvise$auto(0x0, 0x2003f0, 0x15)
setreuid$auto(0x9, 0x1) (async, rerun: 64)
ioctl$auto(r0, 0x401870cb, r0) (async, rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) (async)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async)
fcntl$auto(0x3, 0x4, 0xa553) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
write$auto(0x3, 0x0, 0xfffffdef) (rerun: 64)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000ec0)=""/4096, 0x300) (async)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x500000, 0xfb3a, 0x27a, 0x9)

2m28.584905904s ago: executing program 0 (id=2282):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0)
r0 = open(0x0, 0xeee00, 0x31)
pipe2$auto(&(0x7f0000000000)=r0, 0x9)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r1, 0x0, 0x400000000005)
mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r0, 0x0)

2m15.769139736s ago: executing program 39 (id=2274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket(0x2, 0x80002, 0x73)
getsockopt$auto(r2, 0x0, 0x3, &(0x7f0000000040)='+\x00', &(0x7f0000000080)=0x3ff)
mmap$auto(0x80000001, 0x3, 0x6, 0x14, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000)

2m13.516813677s ago: executing program 40 (id=2282):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0)
r0 = open(0x0, 0xeee00, 0x31)
pipe2$auto(&(0x7f0000000000)=r0, 0x9)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)
write$auto(r1, 0x0, 0x400000000005)
mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r0, 0x0)

1m52.725876653s ago: executing program 1 (id=2360):
r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x272601, 0x0) (async)
ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, 0x0)

1m52.479047388s ago: executing program 1 (id=2362):
prctl$auto(0x1003b, 0x3fe, 0x0, 0x5, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$auto_sg_fops_sg(0xffffffffffffffff, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
getpeername$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0xc)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F<y\xba\xf7\x8c5\x82\x7fF\xef\xb3{\xe9rw\xd8\x110\xbdC\xe3\x1c`4v\x10\xf3\xe6_=`\xd3\xd1\xe21\xc0\xcc#\xadV\xff#V]\x95\xcf\xaf\xc7\xa9*d\xda\x18\xc0\xc0\x1c'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010)
socket(0x18, 0xa, 0x1)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
ioctl$auto(0x3, 0xc0104d03, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
sendfile$auto(r4, r4, &(0x7f0000000040)=0x2, 0x7)
mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xffffffffffffffff, 0x100000000008000)
ioctl$auto_BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000002c0)="7dba3ad082dea4fd4b73245582c36df9b7107fd785ddf4f064becd139f1ae44d5a43355937000000000000000000000000000000c55be46049e9088adfb98c058de150e647c07aa66c71866bdb1032e92220851fcf147927ff43a95a5a554a43656b8df7df1093ec6dbcfa8b0823842de96bb61e78d9c6")

1m51.596235356s ago: executing program 1 (id=2366):
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
fchdir$auto(r2)
exit$auto(0x7)
r3 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0)
getdents64$auto(r3, 0x0, 0x400)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rename$auto(&(0x7f00000000c0)=':,\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x80)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x5c8)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r6 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40400, 0x0)
read$auto_dfs_global_fops_debug(r6, 0x0, 0x0)
getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x0, 0x1d, &(0x7f0000000080)='/dev/ppp\x00', 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xb0, 0xf3, 0xb0, @inferred=r0}})

1m50.503238214s ago: executing program 1 (id=2370):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
pipe$auto(0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) (async, rerun: 64)
fstat$auto(0x2, 0x0) (rerun: 64)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
semctl$auto(0x7, 0x2, 0x13, 0x1) (async)
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$auto(r0, 0x10f, 0x80, 0x0, 0x0) (async, rerun: 32)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x0, 0x0) (async, rerun: 32)
socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0) (async)
r1 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/make-it-fail\x00', 0x282, 0x0) (async)
exit$auto(0x4)
read$auto_proc_fault_inject_operations_base(r1, 0x0, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (rerun: 64)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r3) (async)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

1m48.891045455s ago: executing program 1 (id=2377):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000840)={{@raw=0x7, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
ioctl$auto_TUNSETGROUP(r0, 0x400454ce, &(0x7f0000000080)=0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d0c, 0x0)
madvise$auto(0x0, 0x2003f0, 0x15)
syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_expire_count\x00', 0x80, 0x0)
read$auto(r3, &(0x7f0000000ac0)='vlan1\x00', 0x5)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
r5 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61)
fchdir$auto(r5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
rmdir$auto(&(0x7f0000000300)='./cgroup\x00')
close_range$auto(0x2, 0x8, 0x0)

1m47.685140213s ago: executing program 1 (id=2381):
setresuid$auto(0x8, 0x8, 0x0)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/pcm0c/sub3/hw_params\x00', 0x50000, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
getegid()
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7})
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x2a)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0101, 0x15)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb8, 0x10, 0x4, 0x4, r2, 0xa, "000600", <r4=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x5}, 0xf)
r5 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0)
bind$auto(r5, &(0x7f0000000180)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x8)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

1m32.277869118s ago: executing program 41 (id=2381):
setresuid$auto(0x8, 0x8, 0x0)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/pcm0c/sub3/hw_params\x00', 0x50000, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4)
mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
getegid()
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7})
open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x2a)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0101, 0x15)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb8, 0x10, 0x4, 0x4, r2, 0xa, "000600", <r4=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x5}, 0xf)
r5 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8a042, 0x0)
bind$auto(r5, &(0x7f0000000180)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x8)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92)

9.846264922s ago: executing program 3 (id=2674):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0xe58, 0x82, 0x13, 0x40000000000a5, 0x8000) (async, rerun: 32)
socket(0x29, 0x2, 0x0) (async, rerun: 32)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
select$auto(0xb, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x00', 0x0) (async)
r3 = getpid() (async)
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000280)="6320a55edf1e86cbd7a06d6b06c36212a46b5266d8f606539f59f2a03b05d38dbaff2b753159c68442bdedaa0a463541b2f2d304c7e888275d8bfbcf8c3768ada93565e4dad3844c6da6923a56e9a63052f6391badaf9251519e3556518e77af1a03efac474999cde964bc334793d3f64ad1a26a438763", 0x1000}, 0xa, 0x1)
lseek$auto(0x3, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
memfd_create$auto(0x0, 0xe) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x2, 0x0)
write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async, rerun: 64)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64)
msync$auto(0x0, 0xe0, 0x6) (async, rerun: 32)
r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async, rerun: 32)
socket(0x2c, 0x3, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000600)='/proc/thread-secp6\x00\xd2)\x8e\x892x\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4\x02\x00\x00\x00Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8_\x00\x00L\x8b\xaa\x13m\x104ry[:STiC\x81\xd2;\xb7\xcaJ\xd0(\xcet?\xac\x97n\xe6\x1f\x1cF\x06\xb1>CE;I\xbb\n\xd67JP\xb0)Bj\xb0\xe4\xcb\x12Ff\x86\xfc\x88\x1a\xb5jy/\x13\xed\x11_ij$\b\xf4\xb9:!\xbf\xb4\xcc\xbd\xc3\v\x9c\x80[\xa2\xa3\xc7\t\xbeA\xcd\xf5L\x99\xe2\xf9\xe2\x9a\xc1\x9e!\x84\'\x8bhM6\xc0b\xba}\x83\x0f}\xeb\xb5\x88\\Y\xbe\xe1\x0eAH:\x14\\\xef\xd8\xd0\xbco\xcc\xbe\x90.U\xd9\xd2\xf0\xc53\x92\x8a\x96\xc6\x9d\xb0\xe7\x0fJz\x95H[Q=\xa8\x01\x929\x9c\xbe\x9e\x86\x1a\x93\x8cc\xb4n\x11\x9ds\xc7\x1f\v\xad?s\xd6/\xa8e\xd2l\xe1\x06\xba]`\xc3\xe2\a\x19\xd8\xf2\xd8\xbe\xa4E\xfej\xc3-', 0x10, 0x20000000009) (async)
bind$auto(r2, 0x0, 0x6b) (async)
read$auto(r5, 0x0, 0x1f42)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
getsockopt$auto_SO_BUF_LOCK(r0, 0x8, 0x48, &(0x7f0000000200)='/proc/thread-self/oom_adj\x00', &(0x7f0000000240)=0x6) (async)
io_uring_register$auto_IORING_UNREGISTER_NAPI(r1, 0x1c, 0x0, 0xb)

7.643026601s ago: executing program 3 (id=2688):
mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='^.\x00', 0xffffffffffffff80, 0x9) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_register$auto(0x2, 0x22, &(0x7f0000001140)="265ae374fb994cc4f8282325713327c54e13120547bdb80502167d3a3d4446e86de6dc34df594b7f826b79c7b37b0c0df53011fc7dc1c1ee08b7277792254537b1039195", 0x1) (async)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r1 = gettid()
kcmp$auto(0x1, r1, 0x1, 0x4, 0x24000) (async)
prctl$auto(0x3, 0x1, r1, 0x200000000001, 0x1) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3) (async)
r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0)
write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x10009b7f, 0x2, 0xfffffffffffffffa) (async)
mlockall$auto(0x7) (async)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async)
futimesat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x3}) (async)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000)
prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

6.582986855s ago: executing program 3 (id=2697):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/4096, 0x1000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x482301, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2c, 0x1, 0x3)
r4 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0)
write$auto_force_suspend_fops_hci_vhci(r4, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x10009b7f, 0x2, 0xfffffffffffffffa)
mlockall$auto(0x7)
mremap$auto(0x0, 0x4, 0x4, 0x800000000000007, 0x100000000)
fremovexattr$auto(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'veth1_macvtap\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xd0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x61}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x6}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_BYTES={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
futimesat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x4})
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007)
mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r3, 0x7)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0)
close_range$auto(0x2, 0xa, 0x0)

5.560504886s ago: executing program 3 (id=2702):
mmap$auto(0x6, 0x400008, 0xdf, 0x400000000009b72, 0x2, 0x2008000)
r0 = memfd_create$auto(0x0, 0x9)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51)
mmap$auto(0x7c, 0x20009, 0xffffffffffffffc0, 0xeb1, 0x401, 0x10001)
statmount$auto(0x0, 0x0, 0x1fe, 0x10081)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048014}, 0x4008841)
socket(0xa, 0x1, 0x100)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
readv$auto(r2, &(0x7f0000000080)={0x0, 0x5}, 0x1)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400002, 0x0)
mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x1, 0x8983, 0x4)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x0, 0xa502}, 0x1}, 0x4, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0)
sendfile$auto(r0, r4, 0x0, 0x20000000000000)
socket(0x1d, 0x2, 0x6)

5.350927122s ago: executing program 2 (id=2704):
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0xfffffff9, 0x1, 0x7f, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x2}, 0x503, 0x5, 0x4, @raw=0x7, @enumerated={0xc, 0x0, "cb0c80699beb33ab05dc27d4bf2a711a4378ba926b660e893ca63be6c004786ceac50991aa4975421eebb8e24b11006a359336cf5c603240dff7022f6bd2af13", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"})
r0 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
lseek$auto(0x3, 0x8, 0x1)
ioctl$auto(0x3, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x2000, 0x0)
memfd_create$auto(0x0, 0xe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42}, 0x4)
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100)

4.767291294s ago: executing program 3 (id=2705):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28002) (async)
mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28002)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2000000000000021, 0x2, 0x10000000000002)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
r0 = socket(0x2c, 0x80003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2000, 0x0)
write$auto(r3, 0x0, 0x40)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
socket(0xf, 0x1, 0xfff) (async)
socket(0xf, 0x1, 0xfff)
madvise$auto(0x192ad524, 0x1, 0x19) (async)
madvise$auto(0x192ad524, 0x1, 0x19)
prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) (async)
process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0)
listxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x3)
kill$auto(0x0, 0x21)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) (async)
r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0)
sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000200)="20c8b3a4fb6bff059c95374dba0a152bbeeeffe5ee2adeb39acc5fa84ac509109eb06243e9d27cd8157f22e3d5089bddeddf34eb9c01d5738694b74981ba90c2b722a3e628acc07af34ecb", 0x5, &(0x7f0000000380)={&(0x7f0000000280)="26ffac49ee421a79c1069c8188b64084169914823858670fff721b5fa287837f795587af55f6b243affa06df58d6b3c72e6b338ecb5bc64016d0b7dd30f5046dcbd72bb9e69c90cffac4af9a7822e16bec5fa5e07f61ed1edbb65909f436d1f83af38cabeda4cf9e6451eecd9b34d00b971b23452bc62c6cb589a111ed439198575ead7a3d24622d0349d8372b5850d72d0a29aa8fa8850f6c49d78d8408eae9c6c3fadae632933181c236acd3dd180364d3c61638a221", 0x3}, 0x7, &(0x7f00000003c0)="8e128042ff6d03a4fdc3c4194477c61e331dcc834a5350d74aa6544f5c", 0x8b1, 0x4c}, 0x5}, 0x7, 0x2) (async)
sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000200)="20c8b3a4fb6bff059c95374dba0a152bbeeeffe5ee2adeb39acc5fa84ac509109eb06243e9d27cd8157f22e3d5089bddeddf34eb9c01d5738694b74981ba90c2b722a3e628acc07af34ecb", 0x5, &(0x7f0000000380)={&(0x7f0000000280)="26ffac49ee421a79c1069c8188b64084169914823858670fff721b5fa287837f795587af55f6b243affa06df58d6b3c72e6b338ecb5bc64016d0b7dd30f5046dcbd72bb9e69c90cffac4af9a7822e16bec5fa5e07f61ed1edbb65909f436d1f83af38cabeda4cf9e6451eecd9b34d00b971b23452bc62c6cb589a111ed439198575ead7a3d24622d0349d8372b5850d72d0a29aa8fa8850f6c49d78d8408eae9c6c3fadae632933181c236acd3dd180364d3c61638a221", 0x3}, 0x7, &(0x7f00000003c0)="8e128042ff6d03a4fdc3c4194477c61e331dcc834a5350d74aa6544f5c", 0x8b1, 0x4c}, 0x5}, 0x7, 0x2)
pread64$auto(r4, 0x0, 0x8, 0x7fff)

4.209508924s ago: executing program 7 (id=2706):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
shutdown$auto(0x200000003, 0x2)
listen$auto(r0, 0x7)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

3.927269051s ago: executing program 7 (id=2707):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x21, 0x2, 0x2)
listen$auto(0x3, 0x81)
r0 = socket(0x2, 0x1, 0x0)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
shutdown$auto(0x200000003, 0x2)
listen$auto(r0, 0x7)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
shmctl$auto_IPC_RMID(0x7, 0x0, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x14)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

3.164505655s ago: executing program 2 (id=2709):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)
readahead$auto(r1, 0x3, 0xffffffffffffffff)
sysfs$auto(0x3, 0x401, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15) (async)
madvise$auto(0x0, 0x2000000080000001, 0x3) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r4 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0)
mprotect$auto(0x0, 0xe6a, 0x6) (async)
preadv2$auto(r4, &(0x7f0000000040)={0x0, 0x80000000}, 0x1eaf, 0x8005, 0x9, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) (async)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x25, 0x5, 0x0)

2.583759257s ago: executing program 7 (id=2710):
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create$auto(0x0, 0x4)
mmap$auto(0x0, 0x5, 0xefb, 0x8000000008011, 0x3, 0x2000000000)
openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0)
socket(0xa, 0x1, 0x100)
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/interface_authorized_default\x00', 0x10b002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2.471108712s ago: executing program 2 (id=2711):
r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x20400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
read$auto(r1, &(0x7f0000000000)='\x00', 0x91e2)
socket(0x2, 0x3, 0x100) (async)
socket(0x10, 0x2, 0x0) (async)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x0, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon7\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) (async)
write$auto(r3, &(0x7f0000000000)='\xde\x00', 0xfded) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0x5, 0x0) (async)
r5 = pipe$auto(0x0) (async)
r6 = socket(0x11, 0x80003, 0x300)
read$auto_regulator_summary_fops_(r5, &(0x7f0000000040)=""/224, 0xe0) (async)
sendfile$auto(0x1, r6, 0x0, 0x8fb5) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) (async)
r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/1/cpuid\x00', 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyq9\x00', 0x40480, 0x0) (async)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x3, 0x9b4, 0x5, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["0000000000000000000000f9", "70d900001100", "0800000000000000000000ec", "00de07000020000000e0d4e4"]}) (async)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r8, 0x0, 0x4) (async)
sendmsg$auto_L2TP_CMD_SESSION_GET(r8, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0500060044000000"], 0x60}, 0x1, 0x0, 0x0, 0x40105}, 0xc012)

2.34206442s ago: executing program 2 (id=2712):
mmap$auto(0x4, 0x400008, 0xdf, 0x2000008000009b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000004c80)='/sys/bus/usb/drivers/airspy/new_id\x00', 0xa081, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
write$auto(0x3, 0x0, 0x7fffffff)

2.213603305s ago: executing program 2 (id=2713):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D1\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
r0 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, 0x6a)
bind$auto(0x3, &(0x7f00000001c0)=@can, 0x6b)
mmap$auto(0x20000000000, 0x4, 0x3, 0x12, 0xffffffffffffffff, 0x168d)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x6001, 0x9, 0x7, 0xffffffffffffffff, 0x20010180, 0xa}, 0x98)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_BROADCAST(r4, 0x80004, 0x6, &(0x7f0000000080)='/dev/midiC2D1\x80\x00\x00\x00\x00', &(0x7f00000000c0)=0x4)
ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, 0x0)
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x11, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c)
mmap$auto(0x7ffe, 0x40009, 0xdf, 0x9b72, r4, 0x28000)
recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0)

1.66195435s ago: executing program 5 (id=2716):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) (async)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008084)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x204000, 0x8000, 0x468, 0x9, 0x2, 0x4, 0x2, 0x0, 0x200, 0x1ff, 0xb6, 0x4, 0x3, 0x3}, 0x7fff) (async)
bpf$auto(0xfffff011, &(0x7f0000000000)=@test={<r1=>0xffffffffffffffff, 0x204000, 0x8000, 0x468, 0x9, 0x2, 0x4, 0x2, 0x0, 0x200, 0x1ff, 0xb6, 0x4, 0x3, 0x3}, 0x7fff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c1200030000000000a3677337f9ecba075f6bba441b1011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100)
r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', <r4=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b0120000", @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf250700000008200100a0e11658c134d0301404c45b623bdc797f09d54e6f0108df0bed9974541f8014a1c70e8992a45d4c2da369f95eb87b585e0f2b24d48e5b814deb23180926a50545b51e932fb8f4200af71c935269a4a255d88ed9925dd1830d0000003e23abea2dd12b04fe0f135af4d567f373f78cb2b6a48eabe2e12c31067b26a7588fe5445f2b4e7d9f3f037df730840ea31880fe1e69dad5f7097b744de2f1ba9723e05a589d", @ANYRES32=r4, @ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000)
writev$auto(0xca, &(0x7f0000000100)={&(0x7f0000000200)="f6b308976c617bc966198b85bfd9879dc53f251a67ce5c396cd156c675936d3b055868c7928d0a5bab9bf2e1b5ccaf66e2dacad46064d90d25e29aeee8da9980719f4fd21de4b71ea290a7c99d1635e722c9545095473ed6154084e35edb5adbeb979091e4a102915ad2bcb083f6072aadb87b8a5e063b00b2b176ce7d53f41660423b623fefe7b533d766cfb57c7329ca2c00c0e368161df0a45198bf4fd80a45370a1871a45d76679eaf79091023a84e49196f20", 0x1}, 0x400000000007e)

1.479722616s ago: executing program 5 (id=2717):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fb, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)=@batch={0x6, 0x2e4, 0x6, 0x7, 0x8, <r1=>r0, 0x20000000000000, 0x8000000000000000}, 0x7)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x20054845)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x5cc}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1.389462337s ago: executing program 7 (id=2718):
r0 = socket(0xa, 0x1, 0x84)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0x0, 0x6, 0x0})
getsockopt$auto(r0, 0x0, 0x485, 0x0, &(0x7f0000000040)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)
sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000)
unshare$auto(0x40000080)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2)
sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r3, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = getpid()
process_vm_readv$auto(r5, 0x0, 0x800000002, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

1.347482683s ago: executing program 2 (id=2719):
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
write$auto(r0, 0x0, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0)
socket(0x10, 0x2, 0xc)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0)
r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0)
read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f)

1.26796416s ago: executing program 5 (id=2720):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x400008000)
socket(0x2, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
inotify_init1$auto(0x3000000000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0)
socket(0x10, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket(0xf, 0xa, 0xf)
setsockopt$auto(r0, 0x1, 0xc, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x47}, 0x5)
madvise$auto(0x0, 0x100000, 0x17)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
socket(0xf, 0x2, 0x0)
socket(0xa, 0x1, 0x84)
inotify_init1$auto(0x3000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x4, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x154)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)

893.711649ms ago: executing program 5 (id=2721):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r0, 0x0, 0xa3d9)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_to_bond/delay_first_probe_time\x00', 0x8a042, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7fb, 0x400)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
mmap$auto(0x3, 0x1, 0x8, 0x13, r1, 0x81)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000)
r2 = socket(0x11, 0x80003, 0x300)
sysfs$auto(0x2, 0x2, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
readv$auto(0x3, 0x0, 0x1)
setsockopt$auto(r2, 0x107, 0x8, 0x0, 0x6)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
read$auto(r3, 0x0, 0x39b8)
read$auto(0x3, 0x0, 0x7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
r4 = socket(0x18, 0x5, 0x1)
connect$auto(r4, &(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x3a)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0)

595.002516ms ago: executing program 3 (id=2722):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
ioctl$auto_FIONREAD(r0, 0x8934, 0x5)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
select$auto(0x11, 0x0, 0x0, 0x0, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
setuid$auto(0xe)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf1, 0xad}})
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x1a0042, 0x0)
ioctl$auto(r3, 0x4611, r3)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x0, "f186b07087f7a6f2a478fa4cca842514dfc90e3e27d90a6d67d41b2b5c5e2f4e", @inferred=r0})

517.292218ms ago: executing program 5 (id=2723):
r0 = clone$auto(0x40ffff, 0x4, 0x0, 0x0, 0x7)
mmap$auto(0x0, 0x80, 0xcd, 0x9b74, 0xffffffffffffffff, 0x8000)
r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xa1, 0x3, r0, 0x10, 0x1)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4004)
mlock$auto(0xfbe8, 0x4)
mlock$auto(0x5, 0x10)
mlock$auto(0x1, 0x100)
socket(0x25, 0x1, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0)
ioctl$auto_SG_SCSI_RESET(r3, 0x2284, &(0x7f00000001c0))
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r4, 0x0, 0x7ff, 0x400)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x226e0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mlock$auto(0x3, 0x7)

268.930243ms ago: executing program 7 (id=2724):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, r0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size\x00', 0x181002, 0x0)
readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x4, 0x6003f0, 0x80000001)

156.430705ms ago: executing program 5 (id=2725):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async)
mmap$auto(0x5, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29be) (async)
open(0x0, 0x7ffd, 0x12) (async)
kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x2000040080000000, 0xe)
madvise$auto(0x0, 0x20000, 0x103)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1Z\x04\x00\x00\x00\x00\x00\x00\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 32)
r3 = getpid() (rerun: 32)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x1002}, 0x1000000000000001, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0)
ioctl$auto(r2, 0x40246f4c, 0x38) (async)
mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff)
connect$auto(r1, 0x0, 0x10)
unshare$auto(0x40000080) (async, rerun: 32)
r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) (rerun: 32)
lseek$auto(r4, 0x4c9, 0x4) (async, rerun: 32)
r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x82) (rerun: 32)
io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000180)="31cad0426efcf3d650035f5e074632d1f382cfd1d9aa4689d842d41826daa77b2d562b1e009e828f0f90f7d4933f8c4cc4", 0x7)
readv$auto(r4, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) (async)
mkdir$auto(0x0, 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3378, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0)

0s ago: executing program 7 (id=2726):
r0 = socket(0xa, 0x2, 0x4)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x800000000000002, 0x20000000000000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(r2, 0x0, 0x6, 0xfffffffe)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x400006, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYRES32=r3, @ANYBLOB="5de1523353782950330a"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000)
readv$auto(0x3, &(0x7f0000000180)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0)
readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101ce}, 0x400)
sched_getscheduler$auto(0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc1)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
socket(0x2, 0x1, 0x6)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000)
r4 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0)
read$auto(r4, 0x0, 0x80)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
write$auto(r5, 0x0, 0xfdef)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
shutdown$auto(0x200000003, 0x2)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@xdp={0x2c, 0x3, 0x0, 0xb}, 0x54)

kernel console output (not intermixed with test programs):

9][T16195] nbd: socks must be embedded in a SOCK_ITEM attr
[  614.906617][T16201] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  615.093777][T16203] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2033'.
[  615.287307][T16213] ICMPv6: process `syz.7.2027' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead
[  616.669646][   T30] audit: type=1800 audit(4294985683.789:21): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2035" name="dbroot" dev="configfs" ino=58037 res=0 errno=0
[  616.691397][T16242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  616.816221][T16242] db_root: cannot open: /dev/audio1
[  617.087399][T16242] tipc: Started in network mode
[  617.154456][T16242] tipc: Node identity ee00, cluster identity 4711
[  617.236675][T16242] tipc: Node number set to 60928
[  617.844529][T16267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  618.554394][T16266] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2041'.
[  620.946797][T16307] nbd: socks must be embedded in a SOCK_ITEM attr
[  623.806907][T16356] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2060'.
[  623.840531][T16356] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2060'.
[  623.999054][T16356] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000
[  624.041657][T16356] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[  624.075692][T16356] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[  624.104210][T16356] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000
[  624.137692][T16356] page dumped because: unmovable page
[  624.158737][T16356] page_owner tracks the page as allocated
[  624.181663][T16356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14914, tgid 14914 (syz-executor), ts 557588241168, free_ts 557455828129
[  624.224299][T16356]  post_alloc_hook+0x1c0/0x230
[  624.234390][T16356]  get_page_from_freelist+0x10a3/0x3a30
[  624.256177][T16356]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  624.268920][T16356]  alloc_pages_mpol+0x1fb/0x550
[  624.282912][T16356]  alloc_pages_noprof+0x131/0x390
[  624.299931][T16356]  __vmalloc_node_range_noprof+0x6f8/0x1480
[  624.308347][T16356]  vmalloc_user_noprof+0x9e/0xe0
[  624.319079][T16356]  kcov_ioctl+0x4c/0x730
[  624.330768][T16356]  __x64_sys_ioctl+0x18e/0x210
[  624.342254][T16356]  do_syscall_64+0xcd/0xfa0
[  624.356188][T16356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.369590][T16356] page last free pid 9906 tgid 9906 stack trace:
[  624.384661][T16356]  __free_frozen_pages+0x7df/0x1160
[  624.395859][T16356]  vfree+0x1fd/0xb50
[  624.407919][T16356]  kcov_close+0x34/0x60
[  624.416086][T16356]  __fput+0x402/0xb70
[  624.424747][T16356]  task_work_run+0x150/0x240
[  624.435070][T16356]  do_exit+0x86f/0x2bf0
[  624.444819][T16356]  do_group_exit+0xd3/0x2a0
[  624.454446][T16356]  __x64_sys_exit_group+0x3e/0x50
[  624.470728][T16356]  x64_sys_call+0x150b/0x1730
[  624.478799][T16356]  do_syscall_64+0xcd/0xfa0
[  624.490021][T16356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.530608][T16419] nbd: socks must be embedded in a SOCK_ITEM attr
[  626.981168][T16449] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2079'.
[  629.517178][T16487] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2087'.
[  629.738735][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2090'.
[  630.189683][T16515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'.
[  630.363861][T16519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  630.617100][T16521] nbd: couldn't find a device at index 1418778119
[  631.325167][T16535] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  631.838492][T16558] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  632.727315][T15490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  632.747016][T16556] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2101'.
[  632.759419][T15490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  632.767910][T15490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  632.776429][T15490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  632.784755][T15490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  633.915714][T16562] chnl_net:caif_netlink_parms(): no params data found
[  634.544013][T16577] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  634.685751][T16577] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  634.736973][T16562] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.744230][T16562] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.768170][T16562] bridge_slave_0: entered allmulticast mode
[  634.794971][T16562] bridge_slave_0: entered promiscuous mode
[  634.807137][T16583] FAULT_INJECTION: forcing a failure.
[  634.807137][T16583] name failslab, interval 1, probability 0, space 0, times 0
[  634.826920][T16562] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.845152][T16562] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.872112][T16562] bridge_slave_1: entered allmulticast mode
[  634.882941][T15490] Bluetooth: hci4: command tx timeout
[  634.894885][T16583] CPU: 1 UID: 0 PID: 16583 Comm: syz.4.2104 Not tainted syzkaller #0 PREEMPT(full) 
[  634.894909][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  634.894918][T16583] Call Trace:
[  634.894924][T16583]  <TASK>
[  634.894930][T16583]  dump_stack_lvl+0x16c/0x1f0
[  634.894956][T16583]  should_fail_ex+0x512/0x640
[  634.894978][T16583]  ? fs_reclaim_acquire+0xae/0x150
[  634.894995][T16583]  should_failslab+0xc2/0x120
[  634.895009][T16583]  __kmalloc_node_track_caller_noprof+0xde/0x8a0
[  634.895030][T16583]  ? __pfx___might_resched+0x10/0x10
[  634.895049][T16583]  ? ima_collect_measurement+0x4c2/0xa50
[  634.895070][T16583]  ? krealloc_node_align_noprof+0x2c5/0x470
[  634.895089][T16583]  krealloc_node_align_noprof+0x2c5/0x470
[  634.895109][T16583]  ? ima_calc_file_hash+0x1e2/0x490
[  634.895126][T16583]  ima_collect_measurement+0x4c2/0xa50
[  634.895149][T16583]  ? __pfx_ima_collect_measurement+0x10/0x10
[  634.895177][T16583]  ? __mutex_lock+0x1c5/0x1060
[  634.895198][T16583]  ? is_bad_inode+0xd/0x40
[  634.895214][T16583]  ? xattr_resolve_name+0x27b/0x3f0
[  634.895233][T16583]  ? vfs_getxattr_alloc+0xec/0x350
[  634.895255][T16583]  ? ima_get_hash_algo+0x27c/0x400
[  634.895276][T16583]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  634.895305][T16583]  ? process_measurement+0x11fa/0x23e0
[  634.895318][T16583]  process_measurement+0x11fa/0x23e0
[  634.895337][T16583]  ? __lock_acquire+0x622/0x1c90
[  634.895352][T16583]  ? __pfx_process_measurement+0x10/0x10
[  634.895366][T16583]  ? __kasan_slab_alloc+0x89/0x90
[  634.895387][T16583]  ? security_file_alloc+0x34/0x2b0
[  634.895404][T16583]  ? alloc_empty_file+0x73/0x1e0
[  634.895418][T16583]  ? alloc_file_pseudo+0x13a/0x230
[  634.895436][T16583]  ? find_held_lock+0x2b/0x80
[  634.895477][T16583]  ima_file_mmap+0x1b1/0x1d0
[  634.895491][T16583]  ? __pfx_ima_file_mmap+0x10/0x10
[  634.895510][T16583]  security_mmap_file+0x88c/0x990
[  634.895529][T16583]  vm_mmap_pgoff+0xec/0x470
[  634.895552][T16583]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  634.895572][T16583]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  634.895588][T16583]  ? hugetlbfs_get_inode+0x31f/0x730
[  634.895615][T16583]  ksys_mmap_pgoff+0x1c8/0x5c0
[  634.895640][T16583]  __x64_sys_mmap+0x125/0x190
[  634.895658][T16583]  do_syscall_64+0xcd/0xfa0
[  634.895686][T16583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.895710][T16583] RIP: 0033:0x7f48f638eec9
[  634.895724][T16583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  634.895739][T16583] RSP: 002b:00007f48f45b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  634.895754][T16583] RAX: ffffffffffffffda RBX: 00007f48f65e6180 RCX: 00007f48f638eec9
[  634.895764][T16583] RDX: 00000000004001fd RSI: 0000000000a00006 RDI: 0000000000000000
[  634.895773][T16583] RBP: 00007f48f6411f91 R08: 0000000000000602 R09: 0000300000000000
[  634.895782][T16583] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000
[  634.895791][T16583] R13: 00007f48f65e6218 R14: 00007f48f65e6180 R15: 00007fffc3e1fa88
[  634.895811][T16583]  </TASK>
[  635.248148][T16562] bridge_slave_1: entered promiscuous mode
[  635.550453][T16596] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  635.673692][T16594] nbd: couldn't find a device at index 1418778119
[  635.722172][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.769053][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.970303][T16562] team0: Port device team_slave_0 added
[  636.009359][T16562] team0: Port device team_slave_1 added
[  636.034973][   T30] audit: type=1800 audit(4294985703.158:22): pid=16583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2104" name="anon_hugepage" dev="hugetlbfs" ino=59567 res=0 errno=0
[  636.148129][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.169825][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.254696][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.357460][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.364422][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.518453][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.817805][T16562] hsr_slave_0: entered promiscuous mode
[  636.858772][T16562] hsr_slave_1: entered promiscuous mode
[  636.889607][T16562] debugfs: 'hsr0' already exists in 'hsr'
[  636.918529][T16562] Cannot create hsr debugfs directory
[  636.956160][T15490] Bluetooth: hci4: command tx timeout
[  637.026280][T16632] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  637.451318][T16562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.614454][T16634] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2113'.
[  638.201159][T16562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.328813][T16562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.718996][T16562] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  638.767760][T16562] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  639.038342][T15490] Bluetooth: hci4: command tx timeout
[  639.047322][T16562] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  639.092834][T16562] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  639.494352][T16562] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.571474][T16562] 8021q: adding VLAN 0 to HW filter on device team0
[  639.635297][T16667] nbd: couldn't find a device at index 1418778119
[  639.654298][T11195] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.661439][T11195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.724960][T11195] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.732110][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.938432][T16562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  640.030250][T16562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  640.307668][T16684] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.8.2122: 7
[  640.870541][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.115332][T15490] Bluetooth: hci4: command tx timeout
[  641.169821][T16562] veth0_vlan: entered promiscuous mode
[  641.181710][T16709] hub 1-0:1.0: USB hub found
[  641.227940][T16709] hub 1-0:1.0: 1 port detected
[  641.235388][T16562] veth1_vlan: entered promiscuous mode
[  641.274978][T16709] FAULT_INJECTION: forcing a failure.
[  641.274978][T16709] name failslab, interval 1, probability 0, space 0, times 0
[  641.321583][T16709] CPU: 1 UID: 0 PID: 16709 Comm: syz.4.2127 Not tainted syzkaller #0 PREEMPT(full) 
[  641.321608][T16709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  641.321616][T16709] Call Trace:
[  641.321624][T16709]  <TASK>
[  641.321632][T16709]  dump_stack_lvl+0x16c/0x1f0
[  641.321665][T16709]  should_fail_ex+0x512/0x640
[  641.321689][T16709]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  641.321713][T16709]  should_failslab+0xc2/0x120
[  641.321729][T16709]  kmem_cache_alloc_noprof+0x75/0x6e0
[  641.321747][T16709]  ? __kernfs_new_node+0xd2/0x8e0
[  641.321773][T16709]  ? __kernfs_new_node+0xd2/0x8e0
[  641.321792][T16709]  __kernfs_new_node+0xd2/0x8e0
[  641.321816][T16709]  ? __pfx___kernfs_new_node+0x10/0x10
[  641.321845][T16709]  ? find_held_lock+0x2b/0x80
[  641.321865][T16709]  ? kernfs_root+0xee/0x2a0
[  641.321882][T16709]  kernfs_new_node+0x13c/0x1e0
[  641.321900][T16709]  __kernfs_create_file+0x53/0x350
[  641.321921][T16709]  sysfs_add_file_mode_ns+0x207/0x3c0
[  641.321947][T16709]  internal_create_group+0x578/0xf30
[  641.321964][T16709]  ? sysfs_create_file_ns+0x154/0x1d0
[  641.321984][T16709]  ? __pfx_internal_create_group+0x10/0x10
[  641.321996][T16709]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  641.322021][T16709]  ? __pfx_usb_acpi_find_companion+0x10/0x10
[  641.322042][T16709]  ? acpi_device_notify+0xcf/0x480
[  641.322062][T16709]  ? lockdep_init_map_type+0x5c/0x280
[  641.322084][T16709]  internal_create_groups+0x9d/0x150
[  641.322100][T16709]  device_add+0x77f/0x1aa0
[  641.322116][T16709]  ? __pfx_device_add+0x10/0x10
[  641.322129][T16709]  ? lockdep_init_map_type+0x5c/0x280
[  641.322144][T16709]  ? __init_waitqueue_head+0xca/0x150
[  641.322168][T16709]  usb_hub_create_port_device+0x3a1/0xde0
[  641.322187][T16709]  hub_probe+0x203b/0x3480
[  641.322207][T16709]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  641.322224][T16709]  ? __pfx_hub_probe+0x10/0x10
[  641.322235][T16709]  ? mark_held_locks+0x49/0x80
[  641.322249][T16709]  ? arch_get_unmapped_area_topdown+0x110/0x8f0
[  641.322270][T16709]  ? mark_held_locks+0x49/0x80
[  641.322283][T16709]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  641.322305][T16709]  usb_probe_interface+0x303/0xa40
[  641.322323][T16709]  ? __pfx_usb_probe_interface+0x10/0x10
[  641.322340][T16709]  really_probe+0x241/0xa90
[  641.322360][T16709]  __driver_probe_device+0x1de/0x440
[  641.322381][T16709]  driver_probe_device+0x4c/0x1b0
[  641.322400][T16709]  __device_attach_driver+0x1df/0x310
[  641.322420][T16709]  ? __pfx___device_attach_driver+0x10/0x10
[  641.322438][T16709]  bus_for_each_drv+0x159/0x1e0
[  641.322454][T16709]  ? __pfx_bus_for_each_drv+0x10/0x10
[  641.322470][T16709]  ? lockdep_hardirqs_on+0x7c/0x110
[  641.322490][T16709]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  641.322511][T16709]  __device_attach+0x1e4/0x4b0
[  641.322530][T16709]  ? __pfx___device_attach+0x10/0x10
[  641.322550][T16709]  ? do_raw_spin_unlock+0x172/0x230
[  641.322570][T16709]  bus_probe_device+0x17f/0x1c0
[  641.322589][T16709]  device_add+0x1148/0x1aa0
[  641.322603][T16709]  ? __pfx_device_add+0x10/0x10
[  641.322616][T16709]  ? mark_held_locks+0x49/0x80
[  641.322635][T16709]  usb_set_configuration+0x1187/0x1e20
[  641.322671][T16709]  bConfigurationValue_store+0x100/0x180
[  641.322686][T16709]  ? __pfx_bConfigurationValue_store+0x10/0x10
[  641.322700][T16709]  ? find_held_lock+0x2b/0x80
[  641.322718][T16709]  ? sysfs_file_kobj+0xe4/0x290
[  641.322738][T16709]  ? __pfx_bConfigurationValue_store+0x10/0x10
[  641.322751][T16709]  dev_attr_store+0x58/0x80
[  641.322772][T16709]  ? __pfx_dev_attr_store+0x10/0x10
[  641.322791][T16709]  sysfs_kf_write+0xf2/0x150
[  641.322812][T16709]  kernfs_fop_write_iter+0x3af/0x570
[  641.322828][T16709]  ? __pfx_sysfs_kf_write+0x10/0x10
[  641.322849][T16709]  iter_file_splice_write+0xa24/0x12e0
[  641.322904][T16709]  ? __pfx_iter_file_splice_write+0x10/0x10
[  641.322934][T16709]  ? __pfx_copy_splice_read+0x10/0x10
[  641.322966][T16709]  ? __pfx_iter_file_splice_write+0x10/0x10
[  641.322986][T16709]  direct_splice_actor+0x192/0x6c0
[  641.323006][T16709]  splice_direct_to_actor+0x345/0xa30
[  641.323032][T16709]  ? __pfx_direct_splice_actor+0x10/0x10
[  641.323059][T16709]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  641.323084][T16709]  do_splice_direct+0x174/0x240
[  641.323103][T16709]  ? __pfx_do_splice_direct+0x10/0x10
[  641.323123][T16709]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  641.323145][T16709]  ? rw_verify_area+0xcf/0x6c0
[  641.323166][T16709]  do_sendfile+0xb06/0xe50
[  641.323188][T16709]  ? __pfx_do_sendfile+0x10/0x10
[  641.323210][T16709]  ? __x64_sys_futex+0x1e0/0x4c0
[  641.323223][T16709]  ? __x64_sys_futex+0x1e9/0x4c0
[  641.323240][T16709]  __x64_sys_sendfile64+0x1d8/0x220
[  641.323258][T16709]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  641.323277][T16709]  do_syscall_64+0xcd/0xfa0
[  641.323302][T16709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.323317][T16709] RIP: 0033:0x7f48f638eec9
[  641.323333][T16709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  641.323349][T16709] RSP: 002b:00007f48f45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  641.323363][T16709] RAX: ffffffffffffffda RBX: 00007f48f65e5fa0 RCX: 00007f48f638eec9
[  641.323373][T16709] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[  641.323382][T16709] RBP: 00007f48f6411f91 R08: 0000000000000000 R09: 0000000000000000
[  641.323391][T16709] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  641.323399][T16709] R13: 00007f48f65e6038 R14: 00007f48f65e5fa0 R15: 00007fffc3e1fa88
[  641.323421][T16709]  </TASK>
[  641.890759][T16711] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2123'.
[  641.901304][T16711] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2123'.
[  642.047612][T16562] veth0_macvtap: entered promiscuous mode
[  642.056592][T16562] veth1_macvtap: entered promiscuous mode
[  642.071416][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.081497][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.154625][T16705] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x78000
[  642.165152][T16705] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff)
[  642.174896][T16705] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000
[  642.183621][T16705] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000
[  642.192735][T16705] page dumped because: unmovable page
[  642.198101][T16705] page_owner tracks the page as allocated
[  642.204041][T16705] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14914, tgid 14914 (syz-executor), ts 557588241168, free_ts 557455828129
[  642.223804][T16705]  post_alloc_hook+0x1c0/0x230
[  642.228607][T16705]  get_page_from_freelist+0x10a3/0x3a30
[  642.234418][T16705]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  642.240307][T16705]  alloc_pages_mpol+0x1fb/0x550
[  642.245363][T16705]  alloc_pages_noprof+0x131/0x390
[  642.250485][T16705]  __vmalloc_node_range_noprof+0x6f8/0x1480
[  642.256966][T16705]  vmalloc_user_noprof+0x9e/0xe0
[  642.261964][T16705]  kcov_ioctl+0x4c/0x730
[  642.266623][T16705]  __x64_sys_ioctl+0x18e/0x210
[  642.271381][T16705]  do_syscall_64+0xcd/0xfa0
[  642.275922][T16705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.281890][T16705] page last free pid 9906 tgid 9906 stack trace:
[  642.288292][T16705]  __free_frozen_pages+0x7df/0x1160
[  642.293956][T16705]  vfree+0x1fd/0xb50
[  642.297845][T16705]  kcov_close+0x34/0x60
[  642.302052][T16705]  __fput+0x402/0xb70
[  642.306030][T16705]  task_work_run+0x150/0x240
[  642.310613][T16705]  do_exit+0x86f/0x2bf0
[  642.315024][T16705]  do_group_exit+0xd3/0x2a0
[  642.319517][T16705]  __x64_sys_exit_group+0x3e/0x50
[  642.324591][T16705]  x64_sys_call+0x150b/0x1730
[  642.329259][T16705]  do_syscall_64+0xcd/0xfa0
[  642.333794][T16705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.518654][T16721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  642.527085][T11206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.541794][T11206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.550506][T11206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.639278][T11206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.844040][T16716] netlink: 93 bytes leftover after parsing attributes in process `syz.8.2128'.
[  642.856226][T11206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.879115][T11206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.986976][T11206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.022462][T11206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.064962][T16709] hub 1-0:1.0: couldn't create port1 device.
[  643.102728][T16709] hub 1-0:1.0: config failed, out of memory (err -12)
[  644.573228][T16770] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  646.737244][T16822] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2144'.
[  650.723465][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2154'.
[  653.249796][T16959] nbd: couldn't find a device at index 1418778119
[  653.880582][T16979] : Can't lookup blockdev
[  654.057547][   T30] audit: type=1800 audit(4294985721.207:23): pid=16983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2171" name="features" dev="configfs" ino=62121 res=0 errno=0
[  655.500110][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2177'.
[  656.171660][T17024] nbd: couldn't find a device at index 1418778119
[  656.601952][T17006] kexec: Could not allocate control_code_buffer
[  657.191203][T17043] FAULT_INJECTION: forcing a failure.
[  657.191203][T17043] name failslab, interval 1, probability 0, space 0, times 0
[  657.367724][T17043] CPU: 1 UID: 0 PID: 17043 Comm: syz.0.2184 Not tainted syzkaller #0 PREEMPT(full) 
[  657.367747][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  657.367757][T17043] Call Trace:
[  657.367762][T17043]  <TASK>
[  657.367769][T17043]  dump_stack_lvl+0x16c/0x1f0
[  657.367795][T17043]  should_fail_ex+0x512/0x640
[  657.367818][T17043]  ? __kmalloc_noprof+0xca/0x880
[  657.367837][T17043]  should_failslab+0xc2/0x120
[  657.367851][T17043]  __kmalloc_noprof+0xdd/0x880
[  657.367868][T17043]  ? __register_sysctl_table+0xb3/0x1900
[  657.367888][T17043]  ? __register_sysctl_table+0xb3/0x1900
[  657.367902][T17043]  __register_sysctl_table+0xb3/0x1900
[  657.367918][T17043]  ? is_module_address+0x5f/0xf0
[  657.367936][T17043]  ? __pfx___register_sysctl_table+0x10/0x10
[  657.367951][T17043]  ? is_module_address+0x69/0xf0
[  657.367965][T17043]  ? register_net_sysctl_sz+0x228/0x3e0
[  657.367984][T17043]  __addrconf_sysctl_register+0x1a2/0x360
[  657.368013][T17043]  ? __pfx___addrconf_sysctl_register+0x10/0x10
[  657.368039][T17043]  ? __asan_memcpy+0x3c/0x60
[  657.368058][T17043]  addrconf_init_net+0x53a/0x8e0
[  657.368091][T17043]  ? __pfx_addrconf_init_net+0x10/0x10
[  657.368112][T17043]  ops_init+0x1e2/0x5f0
[  657.368137][T17043]  setup_net+0x100/0x390
[  657.368159][T17043]  ? __pfx_setup_net+0x10/0x10
[  657.368180][T17043]  ? debug_mutex_init+0x37/0x70
[  657.368201][T17043]  copy_net_ns+0x2f8/0x690
[  657.368217][T17043]  create_new_namespaces+0x3ea/0xa90
[  657.368242][T17043]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  657.368264][T17043]  ksys_unshare+0x45b/0xa40
[  657.368278][T17043]  ? __pfx_ksys_unshare+0x10/0x10
[  657.368292][T17043]  ? xfd_validate_state+0x61/0x180
[  657.368313][T17043]  __x64_sys_unshare+0x31/0x40
[  657.368326][T17043]  do_syscall_64+0xcd/0xfa0
[  657.368353][T17043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.368368][T17043] RIP: 0033:0x7fa4e8b8eec9
[  657.368383][T17043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.368399][T17043] RSP: 002b:00007fa4e6df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  657.368413][T17043] RAX: ffffffffffffffda RBX: 00007fa4e8de6090 RCX: 00007fa4e8b8eec9
[  657.368423][T17043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  657.368432][T17043] RBP: 00007fa4e8c11f91 R08: 0000000000000000 R09: 0000000000000000
[  657.368442][T17043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  657.368450][T17043] R13: 00007fa4e8de6128 R14: 00007fa4e8de6090 R15: 00007ffe8a3a6938
[  657.368471][T17043]  </TASK>
[  659.350558][T15490] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  659.644490][T17074] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  660.481550][T17084] nbd: couldn't find a device at index 1418778119
[  660.667138][T17078] kexec: Could not allocate control_code_buffer
[  660.706229][T17086] FAULT_INJECTION: forcing a failure.
[  660.706229][T17086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.758675][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.0.2193 Not tainted syzkaller #0 PREEMPT(full) 
[  660.758699][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  660.758708][T17086] Call Trace:
[  660.758714][T17086]  <TASK>
[  660.758719][T17086]  dump_stack_lvl+0x16c/0x1f0
[  660.758745][T17086]  should_fail_ex+0x512/0x640
[  660.758771][T17086]  _copy_from_iter+0x29f/0x1720
[  660.758795][T17086]  ? __alloc_skb+0x200/0x380
[  660.758815][T17086]  ? __pfx__copy_from_iter+0x10/0x10
[  660.758836][T17086]  ? netlink_autobind.isra.0+0x158/0x370
[  660.758864][T17086]  netlink_sendmsg+0x820/0xdd0
[  660.758890][T17086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.758913][T17086]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  660.758931][T17086]  ____sys_sendmsg+0xa98/0xc70
[  660.758948][T17086]  ? copy_msghdr_from_user+0x10a/0x160
[  660.758968][T17086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.758987][T17086]  ? __pfx_futex_wake_mark+0x10/0x10
[  660.759007][T17086]  ___sys_sendmsg+0x134/0x1d0
[  660.759025][T17086]  ? futex_private_hash_put+0x176/0x300
[  660.759048][T17086]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.759075][T17086]  ? __lock_acquire+0x622/0x1c90
[  660.759113][T17086]  __sys_sendmsg+0x16d/0x220
[  660.759134][T17086]  ? __pfx___sys_sendmsg+0x10/0x10
[  660.759154][T17086]  ? __x64_sys_futex+0x1e0/0x4c0
[  660.759180][T17086]  do_syscall_64+0xcd/0xfa0
[  660.759202][T17086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.759217][T17086] RIP: 0033:0x7fa4e8b8eec9
[  660.759229][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  660.759243][T17086] RSP: 002b:00007fa4e995d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.759257][T17086] RAX: ffffffffffffffda RBX: 00007fa4e8de5fa0 RCX: 00007fa4e8b8eec9
[  660.759266][T17086] RDX: 0000000000040040 RSI: 0000200000000100 RDI: 0000000000000003
[  660.759275][T17086] RBP: 00007fa4e8c11f91 R08: 0000000000000000 R09: 0000000000000000
[  660.759284][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.759292][T17086] R13: 00007fa4e8de6038 R14: 00007fa4e8de5fa0 R15: 00007ffe8a3a6938
[  660.759312][T17086]  </TASK>
[  661.126549][T17088] netlink: 528 bytes leftover after parsing attributes in process `syz.0.2193'.
[  661.274787][T17092] zram0: detected capacity change from 0 to 8
[  661.299026][T17094] zram: Cannot change disksize for initialized device
[  661.421557][T17098] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  661.538626][T17100] FAULT_INJECTION: forcing a failure.
[  661.538626][T17100] name failslab, interval 1, probability 0, space 0, times 0
[  661.583143][T17100] CPU: 1 UID: 0 PID: 17100 Comm: syz.7.2198 Not tainted syzkaller #0 PREEMPT(full) 
[  661.583165][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  661.583174][T17100] Call Trace:
[  661.583179][T17100]  <TASK>
[  661.583185][T17100]  dump_stack_lvl+0x16c/0x1f0
[  661.583212][T17100]  should_fail_ex+0x512/0x640
[  661.583234][T17100]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  661.583264][T17100]  should_failslab+0xc2/0x120
[  661.583279][T17100]  kmem_cache_alloc_node_noprof+0x78/0x770
[  661.583298][T17100]  ? __alloc_skb+0x2b2/0x380
[  661.583321][T17100]  ? __alloc_skb+0x2b2/0x380
[  661.583338][T17100]  __alloc_skb+0x2b2/0x380
[  661.583357][T17100]  ? __pfx___alloc_skb+0x10/0x10
[  661.583377][T17100]  ? __pfx___might_resched+0x10/0x10
[  661.583397][T17100]  ? __lock_acquire+0xb8a/0x1c90
[  661.583414][T17100]  netlink_alloc_large_skb+0x69/0x140
[  661.583437][T17100]  netlink_sendmsg+0x698/0xdd0
[  661.583461][T17100]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.583485][T17100]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  661.583503][T17100]  ____sys_sendmsg+0xa98/0xc70
[  661.583519][T17100]  ? copy_msghdr_from_user+0x10a/0x160
[  661.583539][T17100]  ? __pfx_____sys_sendmsg+0x10/0x10
[  661.583557][T17100]  ? kfree+0x252/0x6d0
[  661.583576][T17100]  ___sys_sendmsg+0x134/0x1d0
[  661.583598][T17100]  ? __pfx____sys_sendmsg+0x10/0x10
[  661.583635][T17100]  ? __pfx___might_resched+0x10/0x10
[  661.583657][T17100]  __sys_sendmmsg+0x200/0x420
[  661.583679][T17100]  ? __pfx___sys_sendmmsg+0x10/0x10
[  661.583704][T17100]  ? __pfx_do_futex+0x10/0x10
[  661.583729][T17100]  ? xfd_validate_state+0x61/0x180
[  661.583748][T17100]  __x64_sys_sendmmsg+0x9c/0x100
[  661.583767][T17100]  ? lockdep_hardirqs_on+0x7c/0x110
[  661.583787][T17100]  do_syscall_64+0xcd/0xfa0
[  661.583808][T17100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.583822][T17100] RIP: 0033:0x7fc9b3d8eec9
[  661.583835][T17100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  661.583849][T17100] RSP: 002b:00007fc9b4c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  661.583864][T17100] RAX: ffffffffffffffda RBX: 00007fc9b3fe5fa0 RCX: 00007fc9b3d8eec9
[  661.583873][T17100] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  661.583882][T17100] RBP: 00007fc9b3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  661.583890][T17100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.583899][T17100] R13: 00007fc9b3fe6038 R14: 00007fc9b3fe5fa0 R15: 00007fff96785968
[  661.583918][T17100]  </TASK>
[  662.214554][T15490] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6
[  663.107800][T17144] HfR: entered promiscuous mode
[  663.145704][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'.
[  663.191812][T17147] HfR: left promiscuous mode
[  663.394083][T17153] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  664.545076][T17174] FAULT_INJECTION: forcing a failure.
[  664.545076][T17174] name failslab, interval 1, probability 0, space 0, times 0
[  664.670557][T17174] CPU: 1 UID: 0 PID: 17174 Comm: syz.0.2216 Not tainted syzkaller #0 PREEMPT(full) 
[  664.670581][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  664.670591][T17174] Call Trace:
[  664.670602][T17174]  <TASK>
[  664.670609][T17174]  dump_stack_lvl+0x16c/0x1f0
[  664.670635][T17174]  should_fail_ex+0x512/0x640
[  664.670657][T17174]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  664.670680][T17174]  should_failslab+0xc2/0x120
[  664.670695][T17174]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  664.670714][T17174]  ? proc_alloc_inode+0x25/0x200
[  664.670732][T17174]  ? __pfx_proc_alloc_inode+0x10/0x10
[  664.670745][T17174]  ? proc_alloc_inode+0x25/0x200
[  664.670757][T17174]  proc_alloc_inode+0x25/0x200
[  664.670769][T17174]  alloc_inode+0x64/0x240
[  664.670784][T17174]  new_inode+0x22/0x1c0
[  664.670795][T17174]  ? proc_lookup_de+0x201/0x360
[  664.670812][T17174]  proc_get_inode+0x1d/0x780
[  664.670827][T17174]  proc_lookup_de+0x236/0x360
[  664.670844][T17174]  ? __pfx_proc_lookup+0x10/0x10
[  664.670858][T17174]  proc_lookup+0xcf/0x110
[  664.670874][T17174]  lookup_open.isra.0+0x4da/0x1580
[  664.670895][T17174]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  664.670923][T17174]  ? mnt_get_write_access+0x1e9/0x2f0
[  664.670940][T17174]  path_openat+0x893/0x2cb0
[  664.670966][T17174]  ? __pfx_path_openat+0x10/0x10
[  664.670986][T17174]  ? __lock_acquire+0xb8a/0x1c90
[  664.671003][T17174]  do_filp_open+0x20b/0x470
[  664.671022][T17174]  ? __pfx_do_filp_open+0x10/0x10
[  664.671055][T17174]  ? alloc_fd+0x471/0x7d0
[  664.671078][T17174]  do_sys_openat2+0x11b/0x1d0
[  664.671094][T17174]  ? __pfx_do_sys_openat2+0x10/0x10
[  664.671116][T17174]  __x64_sys_openat+0x174/0x210
[  664.671132][T17174]  ? __pfx___x64_sys_openat+0x10/0x10
[  664.671155][T17174]  do_syscall_64+0xcd/0xfa0
[  664.671176][T17174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.671191][T17174] RIP: 0033:0x7fa4e8b8eec9
[  664.671203][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.671217][T17174] RSP: 002b:00007fa4e6df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  664.671231][T17174] RAX: ffffffffffffffda RBX: 00007fa4e8de6090 RCX: 00007fa4e8b8eec9
[  664.671241][T17174] RDX: 0000000000189001 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  664.671249][T17174] RBP: 00007fa4e8c11f91 R08: 0000000000000000 R09: 0000000000000000
[  664.671258][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  664.671266][T17174] R13: 00007fa4e8de6128 R14: 00007fa4e8de6090 R15: 00007ffe8a3a6938
[  664.671286][T17174]  </TASK>
[  668.601943][T17234] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  668.629264][T17234] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  668.651728][T17234] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  668.750990][T17234] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  668.756949][T17234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  668.859270][T17234] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  668.953876][T17234] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  668.992411][T17234] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  669.025606][T17234] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  669.088156][T17234] CPU0 is offline.
[  669.818666][ T6614] Bluetooth: hci1: command 0x0c1a tx timeout
[  670.584399][T11194] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.629584][ T6614] Bluetooth: hci3: command 0x0406 tx timeout
[  670.774341][T11194] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.788071][ T6614] Bluetooth: hci2: command 0x0c1a tx timeout
[  670.917221][T11194] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.018394][ T6614] Bluetooth: hci4: command 0x0c1a tx timeout
[  671.060814][T11194] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.459686][T11194] bridge_slave_1: left allmulticast mode
[  671.500109][T11194] bridge_slave_1: left promiscuous mode
[  671.505859][T11194] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.563122][T11194] bridge_slave_0: left allmulticast mode
[  671.601472][T11194] bridge_slave_0: left promiscuous mode
[  671.636507][T11194] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.794398][T15490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  671.804495][T15490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  671.812801][T15490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  671.823204][T15490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  671.832082][T15490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  672.330429][T17300] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  672.700949][ T6614] Bluetooth: hci3: command 0x0406 tx timeout
[  672.856856][ T6614] Bluetooth: hci2: command 0x0c1a tx timeout
[  672.870694][T11194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  672.894863][T11194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  672.905869][T11194] bond0 (unregistering): Released all slaves
[  673.033571][T11194] HfR: left promiscuous mode
[  673.098421][ T6614] Bluetooth: hci4: command 0x0c1a tx timeout
[  673.149163][T11194] tipc: Left network mode
[  673.438118][T17324] syz.7.2245 (17324): attempted to duplicate a private mapping with mremap.  This is not supported.
[  673.469778][T17324] FAULT_INJECTION: forcing a failure.
[  673.469778][T17324] name failslab, interval 1, probability 0, space 0, times 0
[  673.567749][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.7.2245 Not tainted syzkaller #0 PREEMPT(full) 
[  673.567773][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  673.567783][T17324] Call Trace:
[  673.567788][T17324]  <TASK>
[  673.567794][T17324]  dump_stack_lvl+0x16c/0x1f0
[  673.567819][T17324]  should_fail_ex+0x512/0x640
[  673.567841][T17324]  ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[  673.567866][T17324]  should_failslab+0xc2/0x120
[  673.567881][T17324]  __kmalloc_node_track_caller_noprof+0xde/0x8a0
[  673.567902][T17324]  ? key_alloc+0x43e/0x1330
[  673.567919][T17324]  ? kmem_cache_alloc_noprof+0x2a1/0x6e0
[  673.567939][T17324]  ? kmemdup_noprof+0x29/0x60
[  673.567957][T17324]  kmemdup_noprof+0x29/0x60
[  673.567975][T17324]  key_alloc+0x43e/0x1330
[  673.568000][T17324]  ? __pfx_key_alloc+0x10/0x10
[  673.568018][T17324]  ? aa_get_newest_label+0xd2/0x250
[  673.568036][T17324]  keyring_alloc+0x44/0xc0
[  673.568057][T17324]  lookup_user_key+0xc51/0x1300
[  673.568076][T17324]  ? __pfx_lookup_user_key+0x10/0x10
[  673.568097][T17324]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  673.568122][T17324]  keyctl_setperm_key+0x9d/0x3a0
[  673.568136][T17324]  ? __pfx_keyctl_setperm_key+0x10/0x10
[  673.568150][T17324]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x230
[  673.568168][T17324]  ? syscall_user_dispatch+0x78/0x140
[  673.568188][T17324]  __do_sys_keyctl+0x29a/0x590
[  673.568204][T17324]  do_syscall_64+0xcd/0xfa0
[  673.568226][T17324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.568239][T17324] RIP: 0033:0x7fc9b3d8eec9
[  673.568251][T17324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  673.568265][T17324] RSP: 002b:00007fc9b4c44038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  673.568278][T17324] RAX: ffffffffffffffda RBX: 00007fc9b3fe5fa0 RCX: 00007fc9b3d8eec9
[  673.568288][T17324] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0000000000000005
[  673.568296][T17324] RBP: 00007fc9b3e11f91 R08: 0000000000000008 R09: 0000000000000000
[  673.568304][T17324] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  673.568313][T17324] R13: 00007fc9b3fe6038 R14: 00007fc9b3fe5fa0 R15: 00007fff96785968
[  673.568332][T17324]  </TASK>
[  673.919670][ T6614] Bluetooth: hci0: command tx timeout
[  674.153348][T17289] chnl_net:caif_netlink_parms(): no params data found
[  674.630103][T11194] hsr_slave_0: left promiscuous mode
[  674.646185][T11194] hsr_slave_1: left promiscuous mode
[  674.700315][T11194] veth1_macvtap: left promiscuous mode
[  674.935493][ T6614] Bluetooth: hci2: command 0x0c1a tx timeout
[  675.179356][ T6614] Bluetooth: hci4: command 0x0c1a tx timeout
[  675.852222][T11194] team0 (unregistering): Port device team_slave_1 removed
[  675.901175][T11194] team0 (unregistering): Port device team_slave_0 removed
[  675.977360][ T6614] Bluetooth: hci0: command tx timeout
[  676.320303][T17289] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.328510][T17289] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.350748][T17289] bridge_slave_0: entered allmulticast mode
[  676.358237][T17289] bridge_slave_0: entered promiscuous mode
[  676.434847][T17289] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.450079][T17289] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.457981][T17289] bridge_slave_1: entered allmulticast mode
[  676.465665][T17289] bridge_slave_1: entered promiscuous mode
[  676.668854][T17289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.700190][T17289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.821770][T17289] team0: Port device team_slave_0 added
[  676.850864][T17289] team0: Port device team_slave_1 added
[  677.004188][T17289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.024560][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.152998][T17289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.215948][T17289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.242937][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.386366][T17289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.638925][T17289] hsr_slave_0: entered promiscuous mode
[  677.668741][T17289] hsr_slave_1: entered promiscuous mode
[  677.706309][T17289] debugfs: 'hsr0' already exists in 'hsr'
[  677.744167][T17289] Cannot create hsr debugfs directory
[  678.041339][T17396] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  678.054739][ T6614] Bluetooth: hci0: command tx timeout
[  678.429931][T17289] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  678.470275][T17289] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  678.516179][T17289] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  678.557903][T17289] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  678.829725][T17289] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.898537][T17289] 8021q: adding VLAN 0 to HW filter on device team0
[  678.936090][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.943229][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.136789][T11209] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.144021][T11209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.710657][T17289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.134738][T15490] Bluetooth: hci0: command tx timeout
[  680.272540][T17289] veth0_vlan: entered promiscuous mode
[  680.305521][T17289] veth1_vlan: entered promiscuous mode
[  680.361317][T17289] veth0_macvtap: entered promiscuous mode
[  680.420429][T17289] veth1_macvtap: entered promiscuous mode
[  680.460329][T17289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  680.516098][T17289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  680.576788][T11195] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.587235][T11195] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.636698][T11195] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.671041][T11195] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.776015][T11195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.813790][T11195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.879962][T11209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.900466][T11209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.688146][ T6614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  682.700872][ T6614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  682.715010][ T6614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  682.723809][ T6614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  682.731304][ T6614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  683.114693][T17459] netlink: 25 bytes leftover after parsing attributes in process `syz.9.2261'.
[  683.524588][T17456] chnl_net:caif_netlink_parms(): no params data found
[  683.987511][T17491] aoe: could not set interface list: too many interfaces
[  684.052797][T17456] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.081133][T17456] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.088372][T17456] bridge_slave_0: entered allmulticast mode
[  684.131722][T17456] bridge_slave_0: entered promiscuous mode
[  684.166001][T17456] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.175759][T17496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  684.206052][T17456] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.280872][T17456] bridge_slave_1: entered allmulticast mode
[  684.298560][T17492] Invalid ELF header magic: != ELF
[  684.324358][T17456] bridge_slave_1: entered promiscuous mode
[  684.529926][T17456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.593886][T17456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.770908][ T6614] Bluetooth: hci1: command tx timeout
[  684.789201][T17456] team0: Port device team_slave_0 added
[  684.847656][T17456] team0: Port device team_slave_1 added
[  685.016551][T17456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  685.035687][T17514] Invalid ELF header magic: != ELF
[  685.053999][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.162634][T17456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  685.193647][T17456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  685.209234][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.295268][T17456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.469581][T17456] hsr_slave_0: entered promiscuous mode
[  685.486162][T17456] hsr_slave_1: entered promiscuous mode
[  685.500171][T17456] debugfs: 'hsr0' already exists in 'hsr'
[  685.512677][T17456] Cannot create hsr debugfs directory
[  685.876965][T17528] Console: switching to colour VGA+ 80x11
[  686.849678][ T6614] Bluetooth: hci1: command tx timeout
[  687.857297][T17563] futex_wake_op: syz.7.2277 tries to shift op by -2048; fix this program
[  687.980007][T17563] futex_wake_op: syz.7.2277 tries to shift op by -2048; fix this program
[  688.034891][T17456] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  688.204920][T17456] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  688.257761][T17456] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  688.303476][T17576] <
[  688.317493][T17456] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  688.901797][T17456] 8021q: adding VLAN 0 to HW filter on device bond0
[  688.929417][ T6614] Bluetooth: hci1: command tx timeout
[  689.003577][T17456] 8021q: adding VLAN 0 to HW filter on device team0
[  689.060074][T11206] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.067465][T11206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  689.246619][T11212] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.253915][T11212] bridge0: port 2(bridge_slave_1) entered forwarding state

syzkaller
syzkaller login: [  689.455239][   T30] audit: type=1804 audit(4294985756.615:24): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2282" name=2F6E6577726F6F742F34372F22050820 dev="tmpfs" ino=269 res=1 errno=0
[  689.592658][   T30] audit: type=1800 audit(4294985756.695:25): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2282" name=22050820 dev="tmpfs" ino=269 res=0 errno=0
[  689.613266][    C1] vkms_vblank_simulate: vblank timer overrun
[  689.978604][T17456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  690.157259][T17456] veth0_vlan: entered promiscuous mode
[  690.218395][T17456] veth1_vlan: entered promiscuous mode
[  690.333275][T17456] veth0_macvtap: entered promiscuous mode
[  690.476322][T17456] veth1_macvtap: entered promiscuous mode
[  690.620251][T17456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.685797][T17456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.748342][T11212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.788229][T11212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.796974][T11212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.904751][T11212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  691.009054][ T6614] Bluetooth: hci1: command tx timeout
[  691.233761][T11195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.264059][T11195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.391562][T11195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.428280][T11195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.657317][T17645] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2256'.
[  691.871946][ T5831] Process accounting resumed
[  691.897415][T17649] usb usb37: usbfs: process 17649 (syz.1.2284) did not claim interface 0 before use
[  694.547176][T17702] netlink: 186 bytes leftover after parsing attributes in process `syz.7.2290'.
[  696.339782][T17735] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  696.875373][T17749] FAULT_INJECTION: forcing a failure.
[  696.875373][T17749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  696.935001][T17749] CPU: 1 UID: 0 PID: 17749 Comm: syz.1.2296 Not tainted syzkaller #0 PREEMPT(full) 
[  696.935022][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  696.935030][T17749] Call Trace:
[  696.935035][T17749]  <TASK>
[  696.935041][T17749]  dump_stack_lvl+0x16c/0x1f0
[  696.935066][T17749]  should_fail_ex+0x512/0x640
[  696.935090][T17749]  _copy_from_user+0x2e/0xd0
[  696.935104][T17749]  get_timespec64+0x8b/0x1b0
[  696.935118][T17749]  ? __pfx_get_timespec64+0x10/0x10
[  696.935129][T17749]  ? find_held_lock+0x2b/0x80
[  696.935152][T17749]  __x64_sys_futex+0x288/0x4c0
[  696.935168][T17749]  ? __pfx___x64_sys_futex+0x10/0x10
[  696.935189][T17749]  do_syscall_64+0xcd/0xfa0
[  696.935210][T17749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.935224][T17749] RIP: 0033:0x7fb84978eec9
[  696.935236][T17749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  696.935249][T17749] RSP: 002b:00007ffd918a0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  696.935263][T17749] RAX: ffffffffffffffda RBX: 00000000000aa28b RCX: 00007fb84978eec9
[  696.935273][T17749] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8499e5fac
[  696.935281][T17749] RBP: 0000000000000032 R08: 00007fb84a711000 R09: 00000010918a0c4f
[  696.935290][T17749] R10: 00007ffd918a0a50 R11: 0000000000000246 R12: 00007fb8499e5fac
[  696.935299][T17749] R13: 00007ffd918a0a50 R14: 00000000000aa2bd R15: 00007ffd918a0a70
[  696.935317][T17749]  </TASK>
[  698.455722][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'.
[  703.107090][T15490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  703.120057][T15490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  703.130337][T15490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  703.138482][T15490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  703.148843][T15490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  703.895620][T17849] chnl_net:caif_netlink_parms(): no params data found
[  704.401984][T17849] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.409087][T17849] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.425834][T17873] FAULT_INJECTION: forcing a failure.
[  704.425834][T17873] name failslab, interval 1, probability 0, space 0, times 0
[  704.510654][T17873] CPU: 1 UID: 0 PID: 17873 Comm: syz.1.2309 Not tainted syzkaller #0 PREEMPT(full) 
[  704.510677][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  704.510686][T17873] Call Trace:
[  704.510697][T17873]  <TASK>
[  704.510703][T17873]  dump_stack_lvl+0x16c/0x1f0
[  704.510730][T17873]  should_fail_ex+0x512/0x640
[  704.510751][T17873]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  704.510775][T17873]  should_failslab+0xc2/0x120
[  704.510790][T17873]  __kvmalloc_node_noprof+0x141/0x9c0
[  704.510811][T17873]  ? alloc_fdtable+0x17f/0x2d0
[  704.510832][T17873]  ? alloc_fdtable+0x17f/0x2d0
[  704.510847][T17873]  alloc_fdtable+0x17f/0x2d0
[  704.510865][T17873]  dup_fd+0x83b/0xb90
[  704.510885][T17873]  ? apparmor_task_alloc+0x2c2/0x3b0
[  704.510902][T17873]  copy_process+0x2312/0x76a0
[  704.510924][T17873]  ? __pfx___futex_wait+0x10/0x10
[  704.510948][T17873]  ? __pfx_copy_process+0x10/0x10
[  704.510969][T17873]  ? futex_private_hash_put+0x176/0x300
[  704.510993][T17873]  ? futex_private_hash_put+0x18a/0x300
[  704.511017][T17873]  kernel_clone+0xfc/0x930
[  704.511039][T17873]  ? __pfx_kernel_clone+0x10/0x10
[  704.511070][T17873]  __do_sys_clone+0xce/0x120
[  704.511083][T17873]  ? __pfx___do_sys_clone+0x10/0x10
[  704.511103][T17873]  ? xfd_validate_state+0x61/0x180
[  704.511124][T17873]  do_syscall_64+0xcd/0xfa0
[  704.511146][T17873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.511159][T17873] RIP: 0033:0x7fb84978eec9
[  704.511172][T17873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  704.511185][T17873] RSP: 002b:00007fb84a6ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  704.511200][T17873] RAX: ffffffffffffffda RBX: 00007fb8499e6090 RCX: 00007fb84978eec9
[  704.511209][T17873] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001
[  704.511217][T17873] RBP: 00007fb849811f91 R08: 0000000000000000 R09: 0000000000000000
[  704.511226][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  704.511234][T17873] R13: 00007fb8499e6128 R14: 00007fb8499e6090 R15: 00007ffd918a07f8
[  704.511252][T17873]  </TASK>
[  704.515247][T17849] bridge_slave_0: entered allmulticast mode
[  705.202083][ T6614] Bluetooth: hci5: command tx timeout
[  705.361878][T15490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  705.390291][T15490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  705.422100][T15490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  705.482317][T15490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  705.492475][T15490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  705.626302][T17849] bridge_slave_0: entered promiscuous mode
[  705.690878][T17849] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.698071][T17849] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.733291][T17849] bridge_slave_1: entered allmulticast mode
[  705.790435][T17849] bridge_slave_1: entered promiscuous mode
[  705.996097][T17849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  706.090441][T17849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  706.460446][T17849] team0: Port device team_slave_0 added
[  706.511339][T17849] team0: Port device team_slave_1 added
[  706.667622][T17849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.713688][T17849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.739768][    C1] vkms_vblank_simulate: vblank timer overrun
[  706.862961][T17849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.929668][T17849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.956178][T17849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.115459][T17849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.150670][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'.
[  707.239397][T15490] Bluetooth: hci5: command tx timeout
[  707.330982][T17920] db_root: cannot open: ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������
[  707.437339][    C1] vkms_vblank_simulate: vblank timer overrun
[  707.599237][T15490] Bluetooth: hci6: command tx timeout
[  708.099731][T17849] hsr_slave_0: entered promiscuous mode
[  708.140320][T17849] hsr_slave_1: entered promiscuous mode
[  708.167047][T17849] debugfs: 'hsr0' already exists in 'hsr'
[  708.206322][T17849] Cannot create hsr debugfs directory
[  709.095896][T11209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.318394][T15490] Bluetooth: hci5: command tx timeout
[  709.357009][T11209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.415779][T17883] chnl_net:caif_netlink_parms(): no params data found
[  709.633420][T11209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.644357][T15490] Bluetooth: hci6: command tx timeout
[  709.818672][T11209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.453388][T17883] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.494152][T17883] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.529806][T17883] bridge_slave_0: entered allmulticast mode
[  710.570576][T17883] bridge_slave_0: entered promiscuous mode
[  710.596950][T17883] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.636212][T17883] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.684749][T17883] bridge_slave_1: entered allmulticast mode
[  710.718210][T17883] bridge_slave_1: entered promiscuous mode
[  710.946935][T17883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.009613][T17883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.163801][T11209] bridge_slave_1: left allmulticast mode
[  711.187522][T11209] bridge_slave_1: left promiscuous mode
[  711.193243][T11209] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.255843][T11209] bridge_slave_0: left allmulticast mode
[  711.278727][T11209] bridge_slave_0: left promiscuous mode
[  711.284584][T11209] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.399445][T15490] Bluetooth: hci5: command tx timeout
[  711.718215][T15490] Bluetooth: hci6: command tx timeout
[  712.623985][T11209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.657543][T11209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.696199][T11209] bond0 (unregistering): Released all slaves
[  712.739423][T17883] team0: Port device team_slave_0 added
[  712.808639][T17883] team0: Port device team_slave_1 added
[  713.171357][T17883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.185956][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.256260][T17883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.349102][T17883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.391462][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.435388][T17883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.501182][T11209] hsr_slave_0: left promiscuous mode
[  713.514019][T11209] hsr_slave_1: left promiscuous mode
[  713.525462][T11209] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.543346][T11209] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.561679][T11209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.582782][T11209] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.612549][T11209] veth1_macvtap: left promiscuous mode
[  713.631753][T11209] veth0_macvtap: left promiscuous mode
[  713.646256][T11209] veth1_vlan: left promiscuous mode
[  713.658509][T11209] veth0_vlan: left promiscuous mode
[  713.798265][T15490] Bluetooth: hci6: command tx timeout
[  714.605350][T11209] team0 (unregistering): Port device team_slave_1 removed
[  714.697145][T11209] team0 (unregistering): Port device team_slave_0 removed
[  715.845956][T17883] hsr_slave_0: entered promiscuous mode
[  715.896713][T17883] hsr_slave_1: entered promiscuous mode
[  715.925005][T17883] debugfs: 'hsr0' already exists in 'hsr'
[  715.953629][T17883] Cannot create hsr debugfs directory
[  716.277344][T17849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  716.358886][T17849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  716.495084][T17849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  716.606542][T17849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  717.512885][T17849] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.668358][T17849] 8021q: adding VLAN 0 to HW filter on device team0
[  717.749337][T11195] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.756537][T11195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.836516][T11195] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.843875][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.345750][T17883] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  718.448283][T17883] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  718.519726][T17883] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  718.542111][T18124] FAULT_INJECTION: forcing a failure.
[  718.542111][T18124] name fail_futex, interval 1, probability 0, space 0, times 0
[  718.572647][T17883] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  718.737733][T18124] CPU: 1 UID: 0 PID: 18124 Comm: syz.7.2338 Not tainted syzkaller #0 PREEMPT(full) 
[  718.737757][T18124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  718.737766][T18124] Call Trace:
[  718.737771][T18124]  <TASK>
[  718.737778][T18124]  dump_stack_lvl+0x16c/0x1f0
[  718.737804][T18124]  should_fail_ex+0x512/0x640
[  718.737829][T18124]  get_futex_key+0x1d0/0x1560
[  718.737856][T18124]  ? __pfx_get_futex_key+0x10/0x10
[  718.737884][T18124]  futex_wake+0xea/0x530
[  718.737900][T18124]  ? kasan_quarantine_put+0x10a/0x240
[  718.737922][T18124]  ? __pfx_futex_wake+0x10/0x10
[  718.737938][T18124]  ? getname_flags.part.0+0x376/0x550
[  718.737964][T18124]  ? getname_flags.part.0+0x376/0x550
[  718.737980][T18124]  ? getname_flags.part.0+0x1c5/0x550
[  718.737997][T18124]  do_futex+0x1e3/0x350
[  718.738013][T18124]  ? __pfx_do_futex+0x10/0x10
[  718.738032][T18124]  __x64_sys_futex+0x1e0/0x4c0
[  718.738049][T18124]  ? __x64_sys_openat+0x174/0x210
[  718.738065][T18124]  ? __pfx___x64_sys_futex+0x10/0x10
[  718.738087][T18124]  do_syscall_64+0xcd/0xfa0
[  718.738108][T18124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.738123][T18124] RIP: 0033:0x7fc9b3d8eec9
[  718.738136][T18124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.738149][T18124] RSP: 002b:00007fc9b4c230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  718.738163][T18124] RAX: ffffffffffffffda RBX: 00007fc9b3fe6098 RCX: 00007fc9b3d8eec9
[  718.738172][T18124] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9b3fe609c
[  718.738181][T18124] RBP: 00007fc9b3fe6090 R08: 00007fc9b4c45000 R09: 0000000000000000
[  718.738189][T18124] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  718.738198][T18124] R13: 00007fc9b3fe6128 R14: 00007fff96785880 R15: 00007fff96785968
[  718.738218][T18124]  </TASK>
[  719.212622][T17883] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.299069][T17849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.355587][T17883] 8021q: adding VLAN 0 to HW filter on device team0
[  719.456055][T17849] veth0_vlan: entered promiscuous mode
[  719.505014][T11209] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.512117][T11209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.526105][T18143] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  719.595644][T17849] veth1_vlan: entered promiscuous mode
[  719.610108][T11206] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.617258][T11206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.737223][T17849] veth0_macvtap: entered promiscuous mode
[  719.765196][T17849] veth1_macvtap: entered promiscuous mode
[  719.822499][T17849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  719.905946][T17849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.980879][T11208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  720.016586][T11208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  720.098053][T11208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  720.179258][T11208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.422935][T11206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.430780][T11206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.486764][T17883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.544357][T11212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.586202][T11212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.114257][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2306'.
[  721.574928][T18174] bond0: (slave bond_slave_1): Releasing backup interface
[  722.066476][T17883] veth0_vlan: entered promiscuous mode
[  722.097276][T18204] usb usb36: usbfs: process 18204 (syz.3.2346) did not claim interface 0 before use
[  722.133639][T17883] veth1_vlan: entered promiscuous mode
[  722.148719][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'.
[  722.285676][T17883] veth0_macvtap: entered promiscuous mode
[  722.348481][T17883] veth1_macvtap: entered promiscuous mode
[  722.453976][T17883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.534434][T17883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.627445][T11194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.699154][T11194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.769308][T11194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.800520][T18212] zswap: compressor  not available
[  722.846876][T11194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.133596][T11194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.200716][T11194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.327117][T11212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.350823][T18228] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  723.397805][T11212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.640114][T18246] mkiss: ax0: crc mode is auto.
[  723.987282][T18246] ptp ptp0: guarantee physical clock free running
[  724.519816][T18276] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  725.001480][T18276] zswap: compressor  not available
[  725.630533][T18307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'.
[  725.684587][T18311] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2362'.
[  725.767964][T18313] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  725.818850][T18314] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  725.830484][T18307] kfence: disabled
[  725.969934][T18315] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  726.021983][T18313] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  726.927360][T18342] random: crng reseeded on system resumption
[  727.289975][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'.
[  727.375814][T18345] random: crng reseeded on system resumption
[  727.976021][T18379] __vm_enough_memory: pid: 18379, comm: syz.3.2372, bytes: 4398046511104 not enough memory for the allocation
[  728.480670][T18389] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[  730.019242][T18428] usb usb36: usbfs: process 18428 (syz.7.2379) did not claim interface 0 before use
[  730.320724][T18432] FAULT_INJECTION: forcing a failure.
[  730.320724][T18432] name fail_page_alloc, interval 1, probability 0, space 0, times 504
[  730.430123][T18432] CPU: 1 UID: 0 PID: 18432 Comm: syz.7.2380 Not tainted syzkaller #0 PREEMPT(full) 
[  730.430146][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  730.430155][T18432] Call Trace:
[  730.430160][T18432]  <TASK>
[  730.430166][T18432]  dump_stack_lvl+0x16c/0x1f0
[  730.430191][T18432]  should_fail_ex+0x512/0x640
[  730.430217][T18432]  should_fail_alloc_page+0xe7/0x130
[  730.430233][T18432]  prepare_alloc_pages+0x3c2/0x610
[  730.430250][T18432]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  730.430268][T18432]  ? stack_trace_save+0x8e/0xc0
[  730.430289][T18432]  ? __pfx_stack_trace_save+0x10/0x10
[  730.430309][T18432]  ? stack_depot_save_flags+0x29/0x9c0
[  730.430329][T18432]  ? trace_mm_page_alloc+0x11f/0x1a0
[  730.430345][T18432]  ? kasan_save_stack+0x42/0x60
[  730.430364][T18432]  ? kasan_save_stack+0x33/0x60
[  730.430382][T18432]  ? kasan_save_track+0x14/0x30
[  730.430401][T18432]  ? __kasan_slab_alloc+0x89/0x90
[  730.430421][T18432]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  730.430438][T18432]  ? __walk_page_range+0x163/0x820
[  730.430457][T18432]  ? madvise_vma_behavior+0xa54/0x2d50
[  730.430471][T18432]  ? madvise_do_behavior+0x1e2/0x530
[  730.430484][T18432]  ? do_madvise+0x176/0x240
[  730.430497][T18432]  ? __x64_sys_madvise+0xa9/0x110
[  730.430510][T18432]  ? do_syscall_64+0xcd/0xfa0
[  730.430529][T18432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.430552][T18432]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  730.430571][T18432]  ? policy_nodemask+0xea/0x4e0
[  730.430586][T18432]  alloc_pages_mpol+0x1fb/0x550
[  730.430600][T18432]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  730.430620][T18432]  alloc_pages_noprof+0x131/0x390
[  730.430634][T18432]  pte_alloc_one+0x1e/0x350
[  730.430663][T18432]  __pte_alloc+0x6d/0x380
[  730.430685][T18432]  ? __pfx___pte_alloc+0x10/0x10
[  730.430714][T18432]  ? _raw_spin_unlock+0x28/0x50
[  730.430734][T18432]  ? __pmd_alloc+0x64f/0x8b0
[  730.430750][T18432]  walk_pgd_range+0xb84/0x1f50
[  730.430775][T18432]  ? __pfx_guard_install_set_pte+0x10/0x10
[  730.430789][T18432]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  730.430804][T18432]  ? __pfx_guard_install_set_pte+0x10/0x10
[  730.430820][T18432]  ? __pfx_guard_install_set_pte+0x10/0x10
[  730.430833][T18432]  ? __pfx_guard_install_set_pte+0x10/0x10
[  730.430848][T18432]  ? __pfx_walk_pgd_range+0x10/0x10
[  730.430868][T18432]  ? __lock_acquire+0xb8a/0x1c90
[  730.430884][T18432]  __walk_page_range+0x163/0x820
[  730.430905][T18432]  ? find_vma+0xbf/0x140
[  730.430924][T18432]  ? __pfx_find_vma+0x10/0x10
[  730.430945][T18432]  ? walk_page_test+0x9b/0x180
[  730.430964][T18432]  walk_page_range_mm+0x461/0xb40
[  730.430986][T18432]  ? __pfx_walk_page_range_mm+0x10/0x10
[  730.431011][T18432]  ? __anon_vma_prepare+0x2e2/0x5e0
[  730.431029][T18432]  madvise_vma_behavior+0xa54/0x2d50
[  730.431047][T18432]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  730.431067][T18432]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  730.431083][T18432]  ? mas_prev+0x9b/0xf0
[  730.431094][T18432]  ? __pfx_mas_prev+0x10/0x10
[  730.431110][T18432]  ? find_vma_prev+0xd3/0x150
[  730.431122][T18432]  ? find_held_lock+0x2b/0x80
[  730.431140][T18432]  ? __pfx_find_vma_prev+0x10/0x10
[  730.431159][T18432]  ? __futex_wait+0x24b/0x2f0
[  730.431178][T18432]  madvise_walk_vmas+0x31f/0x9c0
[  730.431196][T18432]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  730.431217][T18432]  madvise_do_behavior+0x1e2/0x530
[  730.431230][T18432]  ? futex_private_hash_put+0x18a/0x300
[  730.431253][T18432]  ? __pfx_madvise_do_behavior+0x10/0x10
[  730.431268][T18432]  ? down_read+0x13d/0x480
[  730.431290][T18432]  do_madvise+0x176/0x240
[  730.431304][T18432]  ? __pfx_do_madvise+0x10/0x10
[  730.431318][T18432]  ? do_futex+0x122/0x350
[  730.431344][T18432]  ? xfd_validate_state+0x61/0x180
[  730.431358][T18432]  ? __pfx_ksys_write+0x10/0x10
[  730.431381][T18432]  __x64_sys_madvise+0xa9/0x110
[  730.431396][T18432]  ? lockdep_hardirqs_on+0x7c/0x110
[  730.431418][T18432]  do_syscall_64+0xcd/0xfa0
[  730.431441][T18432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  730.431455][T18432] RIP: 0033:0x7fc9b3d8eec9
[  730.431467][T18432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  730.431482][T18432] RSP: 002b:00007fc9b4c44038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  730.431496][T18432] RAX: ffffffffffffffda RBX: 00007fc9b3fe5fa0 RCX: 00007fc9b3d8eec9
[  730.431505][T18432] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000
[  730.431515][T18432] RBP: 00007fc9b3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  730.431524][T18432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  730.431533][T18432] R13: 00007fc9b3fe6038 R14: 00007fc9b3fe5fa0 R15: 00007fff96785968
[  730.431552][T18432]  </TASK>
[  730.900112][T18436] mkiss: ax0: crc mode is auto.
[  731.763079][   T30] audit: type=1800 audit(4294985798.876:26): pid=18455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2380" name="features" dev="configfs" ino=70487 res=0 errno=0
[  731.800177][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'.
[  731.828392][T18459] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2385'.
[  732.268107][T15490] Bluetooth: hci5: unexpected subevent 0x03 length: 253 > 9
[  733.978625][T18490] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  734.000275][T18490] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  734.040191][T18490] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  734.070654][T18490] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  734.101776][T18490] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  734.144169][T18490] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  734.181146][T18490] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  734.219560][T18490] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  734.254859][T18490] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  734.287927][T18490] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  734.320068][T18490] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  734.378963][T18490] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  734.427231][T18490] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  734.438712][T18490] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  734.497112][T18490] CPU0 is offline.
[  735.210042][T18551] netlink: 206 bytes leftover after parsing attributes in process `syz.7.2397'.
[  735.305378][T15490] Bluetooth: hci3: command 0x0406 tx timeout
[  735.940588][T18565] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  736.012052][T18563] vhci_hcd: invalid port number 16
[  736.027027][T15490] Bluetooth: hci2: command 0x0c1a tx timeout
[  736.107534][T15490] Bluetooth: hci0: command 0x0c1a tx timeout
[  736.117617][T18563] vhci_hcd: invalid port number 16
[  736.184954][T15490] Bluetooth: hci1: command 0x0c1a tx timeout
[  736.240346][T18564] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2400'.
[  736.266205][T15490] Bluetooth: hci5: command 0x0c1a tx timeout
[  736.424629][T15490] Bluetooth: hci6: command 0x0c1a tx timeout
[  737.325047][T18592] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  737.819113][T15490] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1
[  738.185806][T15490] Bluetooth: hci0: command 0x0c1a tx timeout
[  738.263857][T15490] Bluetooth: hci1: command 0x0c1a tx timeout
[  738.345988][T15490] Bluetooth: hci5: command 0x0c1a tx timeout
[  738.503845][T15490] Bluetooth: hci6: command 0x0c1a tx timeout
[  738.997493][T18632] blktrace: Concurrent blktraces are not allowed on loop2
[  740.263070][T15490] Bluetooth: hci0: command 0x0c1a tx timeout
[  740.343339][T15490] Bluetooth: hci1: command 0x0c1a tx timeout
[  740.422753][T15490] Bluetooth: hci5: command 0x0c1a tx timeout
[  740.582561][T15490] Bluetooth: hci6: command 0x0c1a tx timeout
[  740.832937][T18662] nbd: couldn't find a device at index 1418778119
[  744.081854][T18747] netlink: Conntrack attr has 4 unknown bytes
[  745.358144][T18756] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  745.378594][T18756] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  745.404189][T18756] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  745.423092][T18756] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  745.443536][T18756] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  745.466718][T18756] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  745.520216][T18756] CPU0 is offline.
[  745.922747][T18784] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  746.610126][ T6614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  746.629735][ T6614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  746.638173][ T6614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  746.646300][ T6614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  746.654454][ T6614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  746.803145][T18798] nbd: couldn't find a device at index 1418778119
[  746.901405][ T6614] Bluetooth: hci3: command 0x0406 tx timeout
[  747.379415][ T6614] Bluetooth: hci2: command 0x0c1a tx timeout
[  747.459310][ T6614] Bluetooth: hci5: command 0x0c1a tx timeout
[  747.465386][T15490] Bluetooth: hci1: command 0x0c1a tx timeout
[  747.471738][T15490] Bluetooth: hci0: command 0x0c1a tx timeout
[  747.539187][T18822] Bluetooth: hci6: command 0x0c1a tx timeout
[  748.175906][T18803] chnl_net:caif_netlink_parms(): no params data found
[  748.742850][T18822] Bluetooth: hci4: command tx timeout
[  748.909553][T18803] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.916661][T18803] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.970914][T18846] netlink: Conntrack attr has 4 unknown bytes
[  749.018572][T18803] bridge_slave_0: entered allmulticast mode
[  749.036215][T18803] bridge_slave_0: entered promiscuous mode
[  749.155932][T18803] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.206580][T18803] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.248407][T18803] bridge_slave_1: entered allmulticast mode
[  749.302857][T18803] bridge_slave_1: entered promiscuous mode
[  749.719019][T18803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  749.833138][T18803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  750.173736][T18803] team0: Port device team_slave_0 added
[  750.450215][T18803] team0: Port device team_slave_1 added
[  750.762103][T18803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  750.811274][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  750.863314][T18822] Bluetooth: hci4: command tx timeout
[  750.992626][T18803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.105247][T18803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.137854][T18803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.253948][T18803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.585092][T18803] hsr_slave_0: entered promiscuous mode
[  751.615423][T18803] hsr_slave_1: entered promiscuous mode
[  751.658653][T18803] debugfs: 'hsr0' already exists in 'hsr'
[  751.687546][T18803] Cannot create hsr debugfs directory
[  752.905164][T18822] Bluetooth: hci4: command tx timeout
[  753.607737][T18930] nbd: couldn't find a device at index 1418778119
[  754.978818][ T6475] Bluetooth: hci4: command tx timeout
[  755.103535][T18803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  755.329468][T18803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  755.475543][T18803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  755.548583][T18803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  756.171581][T18803] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.243526][T18803] 8021q: adding VLAN 0 to HW filter on device team0
[  756.366186][T11212] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.373427][T11212] bridge0: port 1(bridge_slave_0) entered forwarding state
[  756.496461][T11212] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.503662][T11212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  756.952721][T19010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  757.131732][T18803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  757.418086][T19016] FAULT_INJECTION: forcing a failure.
[  757.418086][T19016] name failslab, interval 1, probability 0, space 0, times 0
[  757.816140][T19016] CPU: 1 UID: 0 PID: 19016 Comm: syz.5.2446 Not tainted syzkaller #0 PREEMPT(full) 
[  757.816162][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  757.816171][T19016] Call Trace:
[  757.816176][T19016]  <TASK>
[  757.816181][T19016]  dump_stack_lvl+0x16c/0x1f0
[  757.816206][T19016]  should_fail_ex+0x512/0x640
[  757.816228][T19016]  ? fs_reclaim_acquire+0xae/0x150
[  757.816243][T19016]  should_failslab+0xc2/0x120
[  757.816257][T19016]  __kmalloc_noprof+0xdd/0x880
[  757.816275][T19016]  ? tomoyo_encode2+0x100/0x3e0
[  757.816297][T19016]  ? tomoyo_encode2+0x100/0x3e0
[  757.816314][T19016]  tomoyo_encode2+0x100/0x3e0
[  757.816334][T19016]  tomoyo_encode+0x29/0x50
[  757.816351][T19016]  tomoyo_realpath_from_path+0x18f/0x6e0
[  757.816375][T19016]  tomoyo_check_open_permission+0x2ab/0x3c0
[  757.816392][T19016]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  757.816408][T19016]  ? __lock_acquire+0xb8a/0x1c90
[  757.816440][T19016]  ? do_raw_spin_lock+0x12c/0x2b0
[  757.816462][T19016]  tomoyo_file_open+0x6b/0x90
[  757.816483][T19016]  security_file_open+0x84/0x1e0
[  757.816501][T19016]  do_dentry_open+0x596/0x1530
[  757.816527][T19016]  vfs_open+0x82/0x3f0
[  757.816544][T19016]  path_openat+0x1de4/0x2cb0
[  757.816570][T19016]  ? __pfx_path_openat+0x10/0x10
[  757.816590][T19016]  ? __lock_acquire+0xb8a/0x1c90
[  757.816606][T19016]  do_filp_open+0x20b/0x470
[  757.816625][T19016]  ? __pfx_do_filp_open+0x10/0x10
[  757.816658][T19016]  ? alloc_fd+0x471/0x7d0
[  757.816681][T19016]  do_sys_openat2+0x11b/0x1d0
[  757.816695][T19016]  ? __pfx_do_sys_openat2+0x10/0x10
[  757.816709][T19016]  ? find_held_lock+0x2b/0x80
[  757.816727][T19016]  ? handle_mm_fault+0x2ab/0xd10
[  757.816747][T19016]  __x64_sys_openat+0x174/0x210
[  757.816767][T19016]  ? __pfx___x64_sys_openat+0x10/0x10
[  757.816789][T19016]  do_syscall_64+0xcd/0xfa0
[  757.816811][T19016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.816825][T19016] RIP: 0033:0x7f139eb8eec9
[  757.816836][T19016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  757.816849][T19016] RSP: 002b:00007f139cdb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  757.816864][T19016] RAX: ffffffffffffffda RBX: 00007f139ede6360 RCX: 00007f139eb8eec9
[  757.816879][T19016] RDX: 0000000000082043 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  757.816887][T19016] RBP: 00007f139ec11f91 R08: 0000000000000000 R09: 0000000000000000
[  757.816896][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.816904][T19016] R13: 00007f139ede63f8 R14: 00007f139ede6360 R15: 00007ffc7b165e08
[  757.816923][T19016]  </TASK>
[  757.816937][T19016] ERROR: Out of memory at tomoyo_realpath_from_path.

syzkaller
syzkaller login: [  758.747023][T18803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  758.941787][T18803] veth0_vlan: entered promiscuous mode
[  758.991339][T18803] veth1_vlan: entered promiscuous mode
[  759.116329][T18803] veth0_macvtap: entered promiscuous mode
[  759.163141][T18803] veth1_macvtap: entered promiscuous mode
[  759.423726][T18803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  759.765403][T18803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  759.875954][T11192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  759.921997][T11192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  760.008222][T11192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  760.043160][T11192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  760.365336][T19049] nbd: couldn't find a device at index 1418778119
[  760.729566][T11208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  760.767967][T11208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.093932][T11208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  761.122044][T11208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.953432][T19064] random: crng reseeded on system resumption
[  762.448100][T19068] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2454'.
[  763.428917][T19090] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  764.549335][T19109] nbd: couldn't find a device at index 1418778119
[  768.355522][ T6475] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5
[  768.550644][T19208] nbd: couldn't find a device at index 1418778119
[  768.901648][T11192] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:26: bg 2: bad block bitmap checksum
[  769.003503][T11192] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 10 with max blocks 4 with error 74
[  769.100469][T11192] EXT4-fs (sda1): This should not happen!! Data will be lost
[  769.100469][T11192] 
[  770.803744][T19253] netlink: 'syz.2.2476': attribute type 11 has an invalid length.
[  771.670716][T19277] FAULT_INJECTION: forcing a failure.
[  771.670716][T19277] name failslab, interval 1, probability 0, space 0, times 0
[  771.729996][T19281] FAULT_INJECTION: forcing a failure.
[  771.729996][T19281] name fail_futex, interval 1, probability 0, space 0, times 0
[  771.759168][T19277] CPU: 1 UID: 0 PID: 19277 Comm: syz.2.2482 Not tainted syzkaller #0 PREEMPT(full) 
[  771.759190][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  771.759199][T19277] Call Trace:
[  771.759205][T19277]  <TASK>
[  771.759210][T19277]  dump_stack_lvl+0x16c/0x1f0
[  771.759236][T19277]  should_fail_ex+0x512/0x640
[  771.759258][T19277]  ? __kmalloc_cache_noprof+0x5f/0x780
[  771.759279][T19277]  should_failslab+0xc2/0x120
[  771.759293][T19277]  __kmalloc_cache_noprof+0x72/0x780
[  771.759311][T19277]  ? fuse_dev_alloc+0x8e/0x280
[  771.759341][T19277]  ? fuse_dev_alloc+0x8e/0x280
[  771.759362][T19277]  fuse_dev_alloc+0x8e/0x280
[  771.759385][T19277]  fuse_dev_alloc_install+0x13/0x40
[  771.759415][T19277]  cuse_channel_open+0x100/0x7f0
[  771.759437][T19277]  ? __pfx_cuse_channel_open+0x10/0x10
[  771.759458][T19277]  misc_open+0x26d/0x450
[  771.759481][T19277]  ? __pfx_misc_open+0x10/0x10
[  771.759507][T19277]  chrdev_open+0x234/0x6a0
[  771.759528][T19277]  ? __pfx_apparmor_file_open+0x10/0x10
[  771.759544][T19277]  ? __pfx_chrdev_open+0x10/0x10
[  771.759566][T19277]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  771.759589][T19277]  do_dentry_open+0x982/0x1530
[  771.759609][T19277]  ? __pfx_chrdev_open+0x10/0x10
[  771.759633][T19277]  vfs_open+0x82/0x3f0
[  771.759650][T19277]  path_openat+0x1de4/0x2cb0
[  771.759676][T19277]  ? __pfx_path_openat+0x10/0x10
[  771.759696][T19277]  ? __lock_acquire+0xb8a/0x1c90
[  771.759713][T19277]  do_filp_open+0x20b/0x470
[  771.759732][T19277]  ? __pfx_do_filp_open+0x10/0x10
[  771.759765][T19277]  ? alloc_fd+0x471/0x7d0
[  771.759788][T19277]  do_sys_openat2+0x11b/0x1d0
[  771.759803][T19277]  ? __pfx_do_sys_openat2+0x10/0x10
[  771.759825][T19277]  __x64_sys_openat+0x174/0x210
[  771.759841][T19277]  ? __pfx___x64_sys_openat+0x10/0x10
[  771.759864][T19277]  do_syscall_64+0xcd/0xfa0
[  771.759886][T19277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.759900][T19277] RIP: 0033:0x7fe8ad58eec9
[  771.759913][T19277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.759926][T19277] RSP: 002b:00007fe8ae46e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  771.759941][T19277] RAX: ffffffffffffffda RBX: 00007fe8ad7e5fa0 RCX: 00007fe8ad58eec9
[  771.759950][T19277] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  771.759960][T19277] RBP: 00007fe8ad611f91 R08: 0000000000000000 R09: 0000000000000000
[  771.759968][T19277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  771.759977][T19277] R13: 00007fe8ad7e6038 R14: 00007fe8ad7e5fa0 R15: 00007ffcfab84568
[  771.759997][T19277]  </TASK>
[  771.777121][T19283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'.
[  771.907947][T19281] CPU: 1 UID: 0 PID: 19281 Comm: syz.7.2480 Not tainted syzkaller #0 PREEMPT(full) 
[  771.907970][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  771.907980][T19281] Call Trace:
[  771.907985][T19281]  <TASK>
[  771.907991][T19281]  dump_stack_lvl+0x16c/0x1f0
[  771.908017][T19281]  should_fail_ex+0x512/0x640
[  771.908043][T19281]  get_futex_key+0x1d0/0x1560
[  771.908069][T19281]  ? __pfx_get_futex_key+0x10/0x10
[  771.908098][T19281]  futex_wake+0xea/0x530
[  771.908117][T19281]  ? __pfx_futex_wake+0x10/0x10
[  771.908133][T19281]  ? rcu_is_watching+0x12/0xc0
[  771.908160][T19281]  do_futex+0x1e3/0x350
[  771.908174][T19281]  ? __pfx_do_futex+0x10/0x10
[  771.908188][T19281]  ? __fput+0x68d/0xb70
[  771.908202][T19281]  ? __pfx___might_resched+0x10/0x10
[  771.908222][T19281]  __x64_sys_futex+0x1e0/0x4c0
[  771.908238][T19281]  ? __pfx_blkcg_maybe_throttle_current+0x10/0x10
[  771.908258][T19281]  ? __pfx___x64_sys_futex+0x10/0x10
[  771.908272][T19281]  ? __pfx___do_sys_close_range+0x10/0x10
[  771.908297][T19281]  do_syscall_64+0xcd/0xfa0
[  771.908318][T19281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.908332][T19281] RIP: 0033:0x7fc9b3d8eec9
[  771.908345][T19281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.908359][T19281] RSP: 002b:00007fc9b4be10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  771.908380][T19281] RAX: ffffffffffffffda RBX: 00007fc9b3fe6278 RCX: 00007fc9b3d8eec9
[  771.908394][T19281] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9b3fe627c
[  771.908403][T19281] RBP: 00007fc9b3fe6270 R08: 00007fc9b4c45000 R09: 0000000000000000
[  771.908413][T19281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  771.908422][T19281] R13: 00007fc9b3fe6308 R14: 00007fff96785880 R15: 00007fff96785968
[  771.908442][T19281]  </TASK>
[  772.464598][T19293] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  773.504760][T19311] sctp: [Deprecated]: syz.5.2486 (pid 19311) Use of int in max_burst socket option.
[  773.504760][T19311] Use struct sctp_assoc_value instead
[  774.575404][T19314] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  774.575614][T19314] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  774.575763][T19314] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  774.575901][T19314] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  774.576040][T19314] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  774.576185][T19314] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  774.576329][T19314] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  774.576400][T19314] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  774.586302][T19314] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  774.611896][T19314] CPU0 is offline.
[  776.170715][ T6475] Bluetooth: hci3: command 0x0406 tx timeout
[  776.648135][ T6475] Bluetooth: hci4: command 0x0c1a tx timeout
[  776.654235][ T6475] Bluetooth: hci6: command 0x0c1a tx timeout
[  776.660504][T18822] Bluetooth: hci5: command 0x0c1a tx timeout
[  776.666503][T18822] Bluetooth: hci1: command 0x0c1a tx timeout
[  776.672799][ T6614] Bluetooth: hci0: command 0x0c1a tx timeout
[  776.679635][T18822] Bluetooth: hci2: command 0x0c1a tx timeout
[  777.316668][T19409] Console: switching to colour frame buffer device 128x48
[  777.878865][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'.
[  777.921574][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'.
[  778.728404][T19406] Bluetooth: hci4: command 0x0c1a tx timeout
[  779.410825][T19457] mkiss: ax0: crc mode is auto.
[  779.498957][T19468] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  779.976401][T19471] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10)
[  780.807980][T19406] Bluetooth: hci4: command 0x0c1a tx timeout
[  781.160819][T19492] nbd: couldn't find a device at index 1418778119
[  783.542071][T19533] Console: switching to colour VGA+ 80x11
[  783.679332][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2529'.
[  784.007451][T19533] Console: switching to colour frame buffer device 128x48
[  784.219992][T19548] nbd: couldn't find a device at index 1418778119
[  785.518399][T19574] 0x000200000001-0xa29656a63616329 : ""
[  785.524002][T19574] mtd: partition "" is out of reach -- disabled
[  785.888336][T19574] ftl_cs: FTL header not found.
[  786.952077][T19597] FAULT_INJECTION: forcing a failure.
[  786.952077][T19597] name failslab, interval 1, probability 0, space 0, times 0
[  786.977599][T19599] zswap: compressor  not available
[  787.058259][T19603] zswap: compressor  not available
[  787.277319][T19597] CPU: 1 UID: 0 PID: 19597 Comm: syz.7.2541 Not tainted syzkaller #0 PREEMPT(full) 
[  787.277343][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  787.277354][T19597] Call Trace:
[  787.277359][T19597]  <TASK>
[  787.277365][T19597]  dump_stack_lvl+0x16c/0x1f0
[  787.277396][T19597]  should_fail_ex+0x512/0x640
[  787.277418][T19597]  ? __kmalloc_cache_noprof+0x5f/0x780
[  787.277442][T19597]  should_failslab+0xc2/0x120
[  787.277456][T19597]  __kmalloc_cache_noprof+0x72/0x780
[  787.277475][T19597]  ? pidlist_array_load+0x529/0x9d0
[  787.277493][T19597]  ? pidlist_array_load+0x529/0x9d0
[  787.277506][T19597]  pidlist_array_load+0x529/0x9d0
[  787.277521][T19597]  ? __pfx_pidlist_array_load+0x10/0x10
[  787.277534][T19597]  ? __pfx___mutex_lock+0x10/0x10
[  787.277568][T19597]  ? kernfs_root+0xf8/0x2a0
[  787.277585][T19597]  cgroup_pidlist_start+0x3a3/0x4f0
[  787.277600][T19597]  ? __pfx_cgroup_seqfile_start+0x10/0x10
[  787.277616][T19597]  kernfs_seq_start+0x133/0x2a0
[  787.277635][T19597]  seq_read_iter+0x2c1/0x12d0
[  787.277661][T19597]  kernfs_fop_read_iter+0x46c/0x610
[  787.277679][T19597]  ? rw_verify_area+0xcf/0x6c0
[  787.277699][T19597]  vfs_read+0x8bf/0xcf0
[  787.277720][T19597]  ? __pfx___mutex_lock+0x10/0x10
[  787.277744][T19597]  ? __pfx_vfs_read+0x10/0x10
[  787.277801][T19597]  ksys_read+0x12a/0x250
[  787.277833][T19597]  ? __pfx_ksys_read+0x10/0x10
[  787.277915][T19597]  do_syscall_64+0xcd/0xfa0
[  787.277947][T19597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.277962][T19597] RIP: 0033:0x7fc9b3d8eec9
[  787.277976][T19597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  787.277994][T19597] RSP: 002b:00007fc9b4c23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  787.278013][T19597] RAX: ffffffffffffffda RBX: 00007fc9b3fe6090 RCX: 00007fc9b3d8eec9
[  787.278023][T19597] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003
[  787.278036][T19597] RBP: 00007fc9b3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  787.278044][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.278053][T19597] R13: 00007fc9b3fe6128 R14: 00007fc9b3fe6090 R15: 00007fff96785968
[  787.278073][T19597]  </TASK>
[  787.497287][    C1] vkms_vblank_simulate: vblank timer overrun
[  791.546805][T19680] usb usb36: usbfs: process 19680 (syz.7.2552) did not claim interface 0 before use
[  791.618922][T19670] dyndbg: expected <4096 bytes into control
[  791.986460][T19674] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2551'.
[  792.741410][T19696] zswap: compressor  not available
[  793.756022][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'.
[  794.139199][T19757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  794.294624][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'.
[  795.522074][T19786] Invalid ELF header magic: != ELF
[  796.508087][T19803] usb usb36: usbfs: process 19803 (syz.7.2568) did not claim interface 0 before use
[  797.822863][T19842] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  798.188581][T19845] FAULT_INJECTION: forcing a failure.
[  798.188581][T19845] name failslab, interval 1, probability 0, space 0, times 0
[  798.316767][T19845] CPU: 1 UID: 0 PID: 19845 Comm: syz.3.2574 Not tainted syzkaller #0 PREEMPT(full) 
[  798.316789][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  798.316798][T19845] Call Trace:
[  798.316803][T19845]  <TASK>
[  798.316809][T19845]  dump_stack_lvl+0x16c/0x1f0
[  798.316836][T19845]  should_fail_ex+0x512/0x640
[  798.316858][T19845]  ? fs_reclaim_acquire+0xae/0x150
[  798.316881][T19845]  should_failslab+0xc2/0x120
[  798.316896][T19845]  __kmalloc_noprof+0xdd/0x880
[  798.316915][T19845]  ? tomoyo_encode2+0x100/0x3e0
[  798.316939][T19845]  ? tomoyo_encode2+0x100/0x3e0
[  798.316957][T19845]  tomoyo_encode2+0x100/0x3e0
[  798.316978][T19845]  tomoyo_encode+0x29/0x50
[  798.316996][T19845]  tomoyo_mount_acl+0x144/0x850
[  798.317013][T19845]  ? bpf_ksym_find+0x124/0x1c0
[  798.317034][T19845]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  798.317055][T19845]  ? is_bpf_text_address+0x94/0x1a0
[  798.317072][T19845]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  798.317089][T19845]  ? unwind_get_return_address+0x59/0xa0
[  798.317128][T19845]  ? tomoyo_domain+0xbb/0x150
[  798.317149][T19845]  ? tomoyo_profile+0x47/0x60
[  798.317171][T19845]  tomoyo_mount_permission+0x16d/0x420
[  798.317188][T19845]  ? tomoyo_mount_permission+0x14f/0x420
[  798.317207][T19845]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  798.317236][T19845]  security_sb_mount+0x9b/0x260
[  798.317253][T19845]  path_mount+0x158/0x23a0
[  798.317277][T19845]  ? __pfx_path_mount+0x10/0x10
[  798.317299][T19845]  ? kmem_cache_free+0x2d4/0x6c0
[  798.317316][T19845]  ? putname+0x154/0x1a0
[  798.317332][T19845]  ? putname+0x154/0x1a0
[  798.317343][T19845]  ? putname+0x154/0x1a0
[  798.317358][T19845]  ? __x64_sys_mount+0x293/0x310
[  798.317376][T19845]  __x64_sys_mount+0x293/0x310
[  798.317397][T19845]  ? __pfx___x64_sys_mount+0x10/0x10
[  798.317423][T19845]  do_syscall_64+0xcd/0xfa0
[  798.317445][T19845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.317460][T19845] RIP: 0033:0x7fd4ce98eec9
[  798.317473][T19845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  798.317488][T19845] RSP: 002b:00007fd4cf7cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  798.317503][T19845] RAX: ffffffffffffffda RBX: 00007fd4cebe5fa0 RCX: 00007fd4ce98eec9
[  798.317512][T19845] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000
[  798.317522][T19845] RBP: 00007fd4cea11f91 R08: 0000000000000000 R09: 0000000000000000
[  798.317530][T19845] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  798.317539][T19845] R13: 00007fd4cebe6038 R14: 00007fd4cebe5fa0 R15: 00007ffc05d2d578
[  798.317559][T19845]  </TASK>
[  799.898282][T19850] block nbd7: not configured, cannot reconfigure
[  801.019777][T19874] usb usb36: usbfs: process 19874 (syz.7.2579) did not claim interface 0 before use
[  801.444744][T19880] program syz.7.2582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  801.723695][T19890] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  801.789562][T19890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  801.838267][T19888] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  802.716145][T19895] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  802.815109][T19895] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  802.957727][T19895] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  803.061167][T19895] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  803.138669][T19895] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  803.240551][T19909] block nbd7: not configured, cannot reconfigure
[  803.257453][T19895] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  803.319799][T19895] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  803.391887][T19895] CPU0 is offline.
[  803.917459][T19914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  803.971197][T19917] ICMPv6: process `syz.5.2590' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead
[  804.157365][T19922] ptp: physical clock is free running
[  804.226652][T19924] FAULT_INJECTION: forcing a failure.
[  804.226652][T19924] name fail_page_alloc, interval 1, probability 0, space 0, times 503
[  804.253793][T19406] Bluetooth: hci3: command 0x0406 tx timeout
[  804.322544][T19924] CPU: 1 UID: 0 PID: 19924 Comm: syz.2.2592 Not tainted syzkaller #0 PREEMPT(full) 
[  804.322567][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  804.322576][T19924] Call Trace:
[  804.322584][T19924]  <TASK>
[  804.322591][T19924]  dump_stack_lvl+0x16c/0x1f0
[  804.322616][T19924]  should_fail_ex+0x512/0x640
[  804.322642][T19924]  should_fail_alloc_page+0xe7/0x130
[  804.322658][T19924]  prepare_alloc_pages+0x3c2/0x610
[  804.322672][T19924]  ? rcu_is_watching+0x12/0xc0
[  804.322695][T19924]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  804.322714][T19924]  ? css_rstat_updated+0x1c2/0x510
[  804.322737][T19924]  ? __pfx_css_rstat_updated+0x10/0x10
[  804.322760][T19924]  ? __lock_acquire+0x622/0x1c90
[  804.322777][T19924]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  804.322804][T19924]  ? __lock_acquire+0x622/0x1c90
[  804.322820][T19924]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  804.322840][T19924]  ? policy_nodemask+0xea/0x4e0
[  804.322856][T19924]  alloc_pages_mpol+0x1fb/0x550
[  804.322870][T19924]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  804.322890][T19924]  folio_alloc_mpol_noprof+0x36/0x2f0
[  804.322908][T19924]  vma_alloc_folio_noprof+0xed/0x1e0
[  804.322924][T19924]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  804.322947][T19924]  do_pte_missing+0x2202/0x3ba0
[  804.322964][T19924]  ? find_held_lock+0x2b/0x80
[  804.322988][T19924]  __handle_mm_fault+0x1556/0x2aa0
[  804.323010][T19924]  ? __pfx___handle_mm_fault+0x10/0x10
[  804.323039][T19924]  ? __pte_offset_map_lock+0x174/0x310
[  804.323063][T19924]  ? find_held_lock+0x2b/0x80
[  804.323088][T19924]  ? follow_page_pte+0x5cf/0x1390
[  804.323106][T19924]  handle_mm_fault+0x589/0xd10
[  804.323127][T19924]  __get_user_pages+0x54e/0x3530
[  804.323151][T19924]  ? __pfx___get_user_pages+0x10/0x10
[  804.323171][T19924]  populate_vma_page_range+0x267/0x3f0
[  804.323188][T19924]  ? __pfx_populate_vma_page_range+0x10/0x10
[  804.323203][T19924]  ? __pfx_find_vma_intersection+0x10/0x10
[  804.323226][T19924]  ? do_mmap+0x69c/0x1210
[  804.323241][T19924]  __mm_populate+0x1d8/0x380
[  804.323257][T19924]  ? __pfx___mm_populate+0x10/0x10
[  804.323273][T19924]  ? up_write+0x1b2/0x520
[  804.323291][T19924]  vm_mmap_pgoff+0x37f/0x470
[  804.323315][T19924]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  804.323341][T19924]  ? __x64_sys_futex+0x1e0/0x4c0
[  804.323355][T19924]  ? __x64_sys_futex+0x1e9/0x4c0
[  804.323371][T19924]  ksys_mmap_pgoff+0x7d/0x5c0
[  804.323393][T19924]  ? xfd_validate_state+0x61/0x180
[  804.323407][T19924]  ? __pfx_do_writev+0x10/0x10
[  804.323428][T19924]  __x64_sys_mmap+0x125/0x190
[  804.323447][T19924]  do_syscall_64+0xcd/0xfa0
[  804.323469][T19924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.323484][T19924] RIP: 0033:0x7fe8ad58eec9
[  804.323496][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  804.323511][T19924] RSP: 002b:00007fe8ae46e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  804.323525][T19924] RAX: ffffffffffffffda RBX: 00007fe8ad7e5fa0 RCX: 00007fe8ad58eec9
[  804.323535][T19924] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  804.323544][T19924] RBP: 00007fe8ad611f91 R08: 0000000000000002 R09: 0000000000008000
[  804.323554][T19924] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  804.323564][T19924] R13: 00007fe8ad7e6038 R14: 00007fe8ad7e5fa0 R15: 00007ffcfab84568
[  804.323584][T19924]  </TASK>
[  805.137918][T19406] Bluetooth: hci2: command 0x0c1a tx timeout
[  805.144959][T19406] Bluetooth: hci0: command 0x0c1a tx timeout
[  805.151143][T19406] Bluetooth: hci5: command 0x0c1a tx timeout
[  805.157210][T19406] Bluetooth: hci1: command 0x0c1a tx timeout
[  805.249402][T19931] netlink: 346 bytes leftover after parsing attributes in process `syz.5.2594'.
[  805.333793][T19924] can: request_module (can-proto-5) failed.
[  805.357979][T15490] Bluetooth: hci6: command 0x0c1a tx timeout
[  805.532779][T15490] Bluetooth: hci4: command 0x0c1a tx timeout
[  806.486158][T19957] program syz.7.2599 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  806.509998][T19958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2600'.
[  807.821826][T19982] nfsd: Unknown parameter '^B�-'
[  808.120584][T19985] netlink: 'syz.5.2604': attribute type 4 has an invalid length.
[  808.148802][T19985] netlink: 314 bytes leftover after parsing attributes in process `syz.5.2604'.
[  808.457838][T19991] hub 8-0:1.0: USB hub found
[  808.476398][T19991] hub 8-0:1.0: 1 port detected
[  808.513609][T19993] random: crng reseeded on system resumption
[  808.524595][T19992] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  809.044225][T19996] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 919 with max blocks 11 with error 117
[  809.217096][T19996] EXT4-fs (sda1): This should not happen!! Data will be lost
[  809.217096][T19996] 
[  809.687440][T20016] __vm_enough_memory: pid: 20016, comm: syz.3.2609, bytes: 4398046511104 not enough memory for the allocation
[  810.818862][T20034] openvswitch: netlink: Key type 261 is out of range max 32
[  812.038940][T20061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  812.141671][T15490] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260
[  813.283831][T20067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22
[  813.311125][T20085] ACPI: Can not change Invalid GPE/Fixed Event status
[  814.318006][T20099] program syz.2.2627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  814.471063][T20100] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  815.628589][T20110] block nbd8: Unsupported socket: should be TCP or UNIX.
[  815.664943][ T5898] Process accounting resumed
[  816.239462][T20117] nbd: couldn't find a device at index 1418778119
[  816.651930][   T30] audit: type=1806 audit(43038.621:27): xattr="" res=-22
[  817.022362][T15490] Bluetooth: hci6: unexpected event 0x02 length: 726 > 260
[  817.705096][T20148] FAULT_INJECTION: forcing a failure.
[  817.705096][T20148] name fail_futex, interval 1, probability 0, space 0, times 0
[  817.802219][T20148] CPU: 1 UID: 0 PID: 20148 Comm: syz.5.2637 Not tainted syzkaller #0 PREEMPT(full) 
[  817.802241][T20148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  817.802250][T20148] Call Trace:
[  817.802256][T20148]  <TASK>
[  817.802262][T20148]  dump_stack_lvl+0x16c/0x1f0
[  817.802288][T20148]  should_fail_ex+0x512/0x640
[  817.802313][T20148]  get_futex_key+0x1d0/0x1560
[  817.802339][T20148]  ? __pfx_get_futex_key+0x10/0x10
[  817.802364][T20148]  ? __lock_acquire+0x622/0x1c90
[  817.802381][T20148]  futex_wake+0xea/0x530
[  817.802400][T20148]  ? __pfx_futex_wake+0x10/0x10
[  817.802421][T20148]  ? mntput_no_expire+0x14f/0xc80
[  817.802442][T20148]  do_futex+0x1e3/0x350
[  817.802456][T20148]  ? __pfx_do_futex+0x10/0x10
[  817.802469][T20148]  ? __pfx_mntput_no_expire+0x10/0x10
[  817.802486][T20148]  ? dput.part.0+0xce/0x9b0
[  817.802503][T20148]  __x64_sys_futex+0x1e0/0x4c0
[  817.802518][T20148]  ? mntput+0x6b/0x90
[  817.802534][T20148]  ? __pfx___x64_sys_futex+0x10/0x10
[  817.802548][T20148]  ? __pfx___x64_sys_truncate+0x10/0x10
[  817.802575][T20148]  do_syscall_64+0xcd/0xfa0
[  817.802610][T20148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.802626][T20148] RIP: 0033:0x7f139eb8eec9
[  817.802639][T20148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  817.802654][T20148] RSP: 002b:00007f139f9750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  817.802668][T20148] RAX: ffffffffffffffda RBX: 00007f139ede5fa8 RCX: 00007f139eb8eec9
[  817.802677][T20148] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f139ede5fac
[  817.802686][T20148] RBP: 00007f139ede5fa0 R08: 00007f139f976000 R09: 0000000000000000
[  817.802695][T20148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.802704][T20148] R13: 00007f139ede6038 R14: 00007ffc7b165d20 R15: 00007ffc7b165e08
[  817.802724][T20148]  </TASK>
[  817.989903][    C1] vkms_vblank_simulate: vblank timer overrun
[  818.483257][T20138] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  818.489913][T20138] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  818.513523][T20138] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  818.519655][T20138] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  818.553273][T20138] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  818.579934][T20138] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  818.603257][T20138] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  818.623175][T20138] CPU0 is offline.
[  818.788793][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2637'.
[  819.616664][T19406] Bluetooth: hci3: command 0x0406 tx timeout
[  820.363254][T20182] nbd: couldn't find a device at index 1418778119
[  820.583436][T19406] Bluetooth: hci5: command 0x0c1a tx timeout
[  820.590265][T15490] Bluetooth: hci1: command 0x0c1a tx timeout
[  820.596309][ T6475] Bluetooth: hci0: command 0x0c1a tx timeout
[  820.602321][ T6475] Bluetooth: hci2: command 0x0c1a tx timeout
[  820.655003][T19406] Bluetooth: hci4: command 0x0c1a tx timeout
[  820.661028][T19406] Bluetooth: hci6: command 0x0c1a tx timeout
[  820.998615][T20187] i2c i2c-0: new_device: Extra parameters
[  821.545218][T20198] program syz.2.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  821.625949][T20198] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  821.709368][   T30] audit: type=1806 audit(43043.679:28): xattr="" res=-22
[  823.023020][T20225] FAULT_INJECTION: forcing a failure.
[  823.023020][T20225] name failslab, interval 1, probability 0, space 0, times 0
[  823.139690][T20225] CPU: 1 UID: 0 PID: 20225 Comm: syz.2.2651 Not tainted syzkaller #0 PREEMPT(full) 
[  823.139715][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  823.139724][T20225] Call Trace:
[  823.139736][T20225]  <TASK>
[  823.139742][T20225]  dump_stack_lvl+0x16c/0x1f0
[  823.139768][T20225]  should_fail_ex+0x512/0x640
[  823.139790][T20225]  ? __kmalloc_cache_noprof+0x5f/0x780
[  823.139811][T20225]  should_failslab+0xc2/0x120
[  823.139826][T20225]  __kmalloc_cache_noprof+0x72/0x780
[  823.139844][T20225]  ? mem_cgroup_css_online+0x5c/0x640
[  823.139867][T20225]  ? __pfx_mem_cgroup_css_online+0x10/0x10
[  823.139884][T20225]  ? mem_cgroup_css_online+0x5c/0x640
[  823.139902][T20225]  mem_cgroup_css_online+0x5c/0x640
[  823.139919][T20225]  ? __pfx_mem_cgroup_css_online+0x10/0x10
[  823.139937][T20225]  online_css+0xb2/0x350
[  823.139953][T20225]  cgroup_apply_control_enable+0x702/0xbb0
[  823.139978][T20225]  cgroup_mkdir+0x5e0/0x12e0
[  823.140008][T20225]  ? __pfx_cgroup_mkdir+0x10/0x10
[  823.140028][T20225]  kernfs_iop_mkdir+0x111/0x190
[  823.140044][T20225]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  823.140065][T20225]  vfs_mkdir+0x593/0x8c0
[  823.140085][T20225]  do_mkdirat+0x304/0x3e0
[  823.140107][T20225]  ? __pfx_do_mkdirat+0x10/0x10
[  823.140128][T20225]  ? getname_flags.part.0+0x1c5/0x550
[  823.140146][T20225]  __x64_sys_mkdir+0xef/0x140
[  823.140166][T20225]  do_syscall_64+0xcd/0xfa0
[  823.140188][T20225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.140203][T20225] RIP: 0033:0x7fe8ad58eec9
[  823.140215][T20225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  823.140229][T20225] RSP: 002b:00007fe8ae44d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  823.140243][T20225] RAX: ffffffffffffffda RBX: 00007fe8ad7e6090 RCX: 00007fe8ad58eec9
[  823.140253][T20225] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000
[  823.140262][T20225] RBP: 00007fe8ad611f91 R08: 0000000000000000 R09: 0000000000000000
[  823.140270][T20225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  823.140279][T20225] R13: 00007fe8ad7e6128 R14: 00007fe8ad7e6090 R15: 00007ffcfab84568
[  823.140299][T20225]  </TASK>
[  824.047404][T20232] nbd: couldn't find a device at index 1418778119
[  824.216828][T20237] binder: 20236:20237 ioctl c0046209 9 returned -22
[  824.683677][T20222] snd_aloop snd_aloop.0: control 7:-2147483391:4:������:2 is already present
[  825.120960][T20251] ptrace attach of "./syz-executor exec"[18803] was attempted by ""[20251]
[  825.205252][T20260] __vm_enough_memory: pid: 20260, comm: syz.3.2658, bytes: 4398046511104 not enough memory for the allocation
[  825.561279][T20259] zswap: compressor  not available
[  825.732869][T20251] ptrace attach of "./syz-executor exec"[18803] was attempted by ""[20251]
[  825.923434][T20251] ptrace attach of "./syz-executor exec"[18803] was attempted by ""[20251]
[  826.092549][T20279] ima: policy update failed
[  826.133521][   T30] audit: type=1802 audit(43048.096:29): pid=20279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2661" res=0 errno=0
[  826.261904][T20286] usb usb36: usbfs: process 20286 (syz.3.2662) did not claim interface 0 before use
[  827.321404][T20312] snd_aloop snd_aloop.0: control 7:-2147483391:4:������:2 is already present
[  827.468821][T19406] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  827.476349][T19406] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff
[  828.452306][T20352] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2676'.
[  828.524166][T20357] netlink: 93 bytes leftover after parsing attributes in process `syz.7.2676'.
[  828.802398][T20362] [U] 
[  828.805221][T20362] [U] 
[  828.807901][T20362] [U] 
[  828.810576][T20362] [U] 
[  828.881483][T20362] [U] 
[  828.884203][T20362] [U] 
[  828.886884][T20362] [U] 
[  828.889655][T20362] [U] 
[  828.966675][T20362] [U] 
[  828.969467][T20362] [U] 
[  828.972148][T20362] [U] 
[  828.974826][T20362] [U] 
[  829.030119][T20362] [U] 
[  830.838466][T20421] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  831.262200][T20441] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  831.837505][T20438] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2694'.
[  831.938662][T20456] mmap: syz.2.2699 (20456): VmData 46145536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  832.572532][T20471] input input23: cannot allocate more than FF_MAX_EFFECTS effects
[  832.854335][   T30] audit: type=1800 audit(43054.823:30): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2704" name="discovery_nqn" dev="configfs" ino=80236 res=0 errno=0
[  833.237075][T20483] FAULT_INJECTION: forcing a failure.
[  833.237075][T20483] name fail_futex, interval 1, probability 0, space 0, times 0
[  833.367198][T20486] ptrace attach of "./syz-executor exec"[17849] was attempted by "z�?��T��˾��y�9�e
_��*e\x0b�3�l_�@�1����;[8QO��-~K�׳��T�MK�a.ٔL����˨�\x0aǝ�Pe@��W�12�]�c(��ѓ�b�#(��p��QS�M����]�\x0af\x1b]Lь�.1���y���R�k�qʊ���^����}����S/�X�zkc���������f��燥1S�)~�mis�S\x0b���?���>�\x0a����N�8l���,\x0c\x0cR\x1b܃ur�LhC��K�\x0b�4\x09�����_G:^\x09�V�ru2`D0bS�4��V�a5x�3ey)<�wW�Ƿ�Z,ᰁ\x0aba%!�����Sr��.Τ�K�x��dw�f\x0a��h��B�������v'���ĖU�X�Q{�'�c�;���fߝ��1a)w�a �
__0J!+�`�n�7�}H���$^[���e���}l�J�^q�1����fY
��ʈO�@�\x22l/*���������\x0c)qC#1w]C�Ȋ��x�
q��0@A�ܢSnr�;m�t\x0dQ'A`�|&
�H)򫬶l�\x5c��WW��]HJ�g^z0Ǔ�/��_�A�d�>�0 �/�,�j�$�������|�T�t�\x5c�=�?��+�� qϘ�q�%��\x5c�+|�ՆM\x0c��}+��C4/�g6\x0c�Ĝ�5��fN\x1b�|䛲���֝�X�w�)τy�\x09&\x5cJ�\x5c����%g#��-�����0B� �$¬Qm,��)@9���^�.5�Z��wFi+u`��L�)�)s,��m<��8�����h$�n\x22��H:��i�/����2[�&s�
������Z6�E��l~����(��T����ig�]+�O��H��u�O��|�V�TP]�!`X�R���B��9IJ4���W�*�49�h�����k����='��m���5�
[  833.375047][T20487] ptrace attach of "./syz-executor exec"[17849] was attempted by "z�?��T��˾��y�9�e
_��*e\x0b�3�l_�@�1����;[8QO��-~K�׳��T�MK�a.ٔL����˨�\x0aǝ�Pe@��W�12�]�c(��ѓ�b�#(��p��QS�M����]�\x0af\x1b]Lь�.1���y���R�k�qʊ���^����}����S/�X�zkc���������f��燥1S�)~�mis�S\x0b���?���>�\x0a����N�8l���,\x0c\x0cR\x1b܃ur�LhC��K�\x0b�4\x09�����_G:^\x09�V�ru2`D0bS�4��V�a5x�3ey)<�wW�Ƿ�Z,ᰁ\x0aba%!�����Sr��.Τ�K�x��dw�f\x0a��h��B�������v'���ĖU�X�Q{�'�c�;���fߝ��1a)w�a �
__0J!+�`�n�7�}H���$^[���e���}l�J�^q�1����fY
��ʈO�@�\x22l/*���������\x0c)qC#1w]C�Ȋ��x�
q��0@A�ܢSnr�;m�t\x0dQ'A`�|&
�H)򫬶l�\x5c��WW��]HJ�g^z0Ǔ�/��_�A�d�>�0 �/�,�j�$�������|�T�t�\x5c�=�?��+�� qϘ�q�%��\x5c�+|�ՆM\x0c��}+��C4/�g6\x0c�Ĝ�5��fN\x1b�|䛲���֝�X�w�)τy�\x09&\x5cJ�\x5c����%g#��-�����0B� �$¬Qm,��)@9���^�.5�Z��wFi+u`��L�)�)s,��m<��8�����h$�n\x22��H:��i�/����2[�&s�
������Z6�E��l~����(��T����ig�]+�O��H��u�O��|�V�TP]�!`X�R���B��9IJ4���W�*�49�h�����k����='��m���5�
[  833.999435][T20483] CPU: 1 UID: 0 PID: 20483 Comm: syz.3.2705 Not tainted syzkaller #0 PREEMPT(full) 
[  833.999458][T20483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  833.999467][T20483] Call Trace:
[  833.999473][T20483]  <TASK>
[  833.999479][T20483]  dump_stack_lvl+0x16c/0x1f0
[  833.999504][T20483]  should_fail_ex+0x512/0x640
[  833.999529][T20483]  get_futex_key+0x1d0/0x1560
[  833.999555][T20483]  ? __pfx_get_futex_key+0x10/0x10
[  833.999575][T20483]  ? __lock_acquire+0x622/0x1c90
[  833.999597][T20483]  futex_wait_setup+0x9d/0x550
[  833.999619][T20483]  __futex_wait+0x193/0x2f0
[  833.999637][T20483]  ? __pfx___futex_wait+0x10/0x10
[  833.999657][T20483]  ? __pfx_futex_wake_mark+0x10/0x10
[  833.999676][T20483]  ? futex_private_hash_put+0x176/0x300
[  833.999700][T20483]  ? futex_private_hash_put+0x18a/0x300
[  833.999723][T20483]  futex_wait+0xe8/0x380
[  833.999739][T20483]  ? __pfx_futex_wait+0x10/0x10
[  833.999766][T20483]  do_futex+0x229/0x350
[  833.999781][T20483]  ? __pfx_do_futex+0x10/0x10
[  833.999799][T20483]  __x64_sys_futex+0x1e0/0x4c0
[  833.999816][T20483]  ? __pfx___x64_sys_futex+0x10/0x10
[  833.999831][T20483]  ? __pfx___do_sys_prctl+0x10/0x10
[  833.999853][T20483]  do_syscall_64+0xcd/0xfa0
[  833.999875][T20483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.999889][T20483] RIP: 0033:0x7fd4ce98eec9
[  833.999902][T20483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  833.999915][T20483] RSP: 002b:00007fd4cf7cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  833.999936][T20483] RAX: ffffffffffffffda RBX: 00007fd4cebe5fa8 RCX: 00007fd4ce98eec9
[  833.999946][T20483] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4cebe5fa8
[  833.999954][T20483] RBP: 00007fd4cebe5fa0 R08: 0000000000000000 R09: 0000000000000000
[  833.999963][T20483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  833.999971][T20483] R13: 00007fd4cebe6038 R14: 00007ffc05d2d490 R15: 00007ffc05d2d578
[  833.999990][T20483]  </TASK>
[  834.851682][T20503] FAULT_INJECTION: forcing a failure.
[  834.851682][T20503] name failslab, interval 1, probability 0, space 0, times 0
[  834.901346][T20503] CPU: 1 UID: 0 PID: 20503 Comm: syz.5.2708 Not tainted syzkaller #0 PREEMPT(full) 
[  834.901369][T20503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  834.901379][T20503] Call Trace:
[  834.901385][T20503]  <TASK>
[  834.901391][T20503]  dump_stack_lvl+0x16c/0x1f0
[  834.901418][T20503]  should_fail_ex+0x512/0x640
[  834.901440][T20503]  ? fs_reclaim_acquire+0xae/0x150
[  834.901456][T20503]  should_failslab+0xc2/0x120
[  834.901470][T20503]  kmem_cache_alloc_noprof+0x75/0x6e0
[  834.901489][T20503]  ? __pfx_map_id_range_down+0x10/0x10
[  834.901507][T20503]  ? security_inode_alloc+0x3b/0x2b0
[  834.901526][T20503]  ? security_inode_alloc+0x3b/0x2b0
[  834.901540][T20503]  security_inode_alloc+0x3b/0x2b0
[  834.901556][T20503]  inode_init_always_gfp+0xce4/0x1030
[  834.901579][T20503]  alloc_inode+0x86/0x240
[  834.901593][T20503]  sock_alloc+0x40/0x280
[  834.901608][T20503]  __sock_create+0xc1/0x8d0
[  834.901627][T20503]  __sys_socket+0x14d/0x260
[  834.901644][T20503]  ? __pfx___sys_socket+0x10/0x10
[  834.901661][T20503]  ? xfd_validate_state+0x61/0x180
[  834.901682][T20503]  __x64_sys_socket+0x72/0xb0
[  834.901697][T20503]  ? lockdep_hardirqs_on+0x7c/0x110
[  834.901718][T20503]  do_syscall_64+0xcd/0xfa0
[  834.901739][T20503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.901754][T20503] RIP: 0033:0x7f139eb8eec9
[  834.901767][T20503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.901781][T20503] RSP: 002b:00007f139f954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  834.901794][T20503] RAX: ffffffffffffffda RBX: 00007f139ede6090 RCX: 00007f139eb8eec9
[  834.901804][T20503] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  834.901813][T20503] RBP: 00007f139ec11f91 R08: 0000000000000000 R09: 0000000000000000
[  834.901822][T20503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  834.901830][T20503] R13: 00007f139ede6128 R14: 00007f139ede6090 R15: 00007ffc7b165e08
[  834.901849][T20503]  </TASK>
[  834.901873][T20503] socket: no more sockets
[  835.153682][T20504] Invalid ELF header magic: != ELF
[  837.067786][T20552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  838.023085][   T31] INFO: task syz.9.2274:17536 blocked for more than 143 seconds.
[  838.051289][   T31]       Not tainted syzkaller #0
[  838.081456][T20583] random: crng reseeded on system resumption
[  838.087868][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  838.135631][   T31] task:syz.9.2274      state:D stack:27672 pid:17536 tgid:17535 ppid:17289  task_flags:0x400140 flags:0x00080002
[  838.198457][   T31] Call Trace:
[  838.213571][   T31]  <TASK>
[  838.227384][   T31]  __schedule+0x1190/0x5de0
[  838.246302][   T31]  ? check_path.constprop.0+0x24/0x50
[  838.260788][T20583] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff]
[  838.271673][   T31]  ? __lock_acquire+0x622/0x1c90
[  838.285805][   T31]  ? __pfx___schedule+0x10/0x10
[  838.304053][   T31]  ? find_held_lock+0x2b/0x80
[  838.320232][   T31]  ? schedule+0x2d7/0x3a0
[  838.335846][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  838.355616][   T31]  schedule+0xe7/0x3a0
[  838.372549][   T31]  schedule_preempt_disabled+0x13/0x30
[  838.388397][T20583] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff]
[  838.398551][   T31]  __mutex_lock+0x818/0x1060
[  838.404992][   T31]  ? __lock_acquire+0x622/0x1c90
[  838.415925][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  838.429329][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  838.441624][   T31]  ? net_generic+0xea/0x2a0
[  838.453101][   T31]  ? nfsd_nl_threads_set_doit+0x687/0xbc0
[  838.465542][   T31]  nfsd_nl_threads_set_doit+0x687/0xbc0
[  838.474983][T20583] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff]
[  838.483581][   T31]  genl_family_rcv_msg_doit+0x209/0x2f0
[  838.496266][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  838.515343][   T31]  ? rcu_is_watching+0x12/0xc0
[  838.526791][   T31]  ? bpf_lsm_capable+0x9/0x10
[  838.531582][T20583] PM: hibernation: Basic memory bitmaps created
[  838.539035][   T31]  ? security_capable+0x7e/0x260
[  838.549893][   T31]  genl_rcv_msg+0x55c/0x800
[  838.561027][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  838.576548][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  838.593151][   T31]  netlink_rcv_skb+0x158/0x420
[  838.607708][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  838.615766][T20570] PM: hibernation: Basic memory bitmaps freed
[  838.622658][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  838.632823][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  838.638569][   T31]  genl_rcv+0x28/0x40
[  838.642786][   T31]  netlink_unicast+0x5aa/0x870
[  838.649459][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  838.655172][   T31]  ? __pfx___might_resched+0x10/0x10
[  838.660626][   T31]  netlink_sendmsg+0x8c8/0xdd0
[  838.666924][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.672493][   T31]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  838.681667][   T31]  ____sys_sendmsg+0xa98/0xc70
[  838.686816][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  838.692429][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  838.698153][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[  838.703771][   T31]  ___sys_sendmsg+0x134/0x1d0
[  838.709172][   T31]  ? futex_private_hash_put+0x176/0x300
[  838.717129][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  838.722492][   T31]  ? __lock_acquire+0x622/0x1c90
[  838.730108][   T31]  __sys_sendmsg+0x16d/0x220
[  838.736127][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  838.741389][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  838.747831][   T31]  do_syscall_64+0xcd/0xfa0
[  838.752510][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.759564][   T31] RIP: 0033:0x7fe4e878eec9
[  838.764454][   T31] RSP: 002b:00007fe4e95df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  838.780034][   T31] RAX: ffffffffffffffda RBX: 00007fe4e89e5fa0 RCX: 00007fe4e878eec9
[  838.796821][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  838.816421][   T31] RBP: 00007fe4e8811f91 R08: 0000000000000000 R09: 0000000000000000
[  838.844599][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  838.853843][   T31] R13: 00007fe4e89e6038 R14: 00007fe4e89e5fa0 R15: 00007ffc40a27488
[  838.861939][   T31]  </TASK>
[  838.936497][   T31] 
[  838.936497][   T31] Showing all locks held in the system:
[  838.994097][   T31] 1 lock held by khungtaskd/31:
[  839.015518][   T31]  #0: ffffffff8e3c42e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  839.050792][   T31] 4 locks held by kworker/u10:28/11194:
[  839.069695][   T31]  #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  839.082770][   T31]  #1: ffffc9000b4bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  839.096113][   T31]  #2: ffffffff900e8630 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0
[  839.108692][   T31]  #3: ffffffff8e3cf878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  839.119635][   T31] 2 locks held by syz.8.2224/17236:
[  839.125053][   T31]  #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  839.133581][   T31]  #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  839.144112][   T31] 2 locks held by syz-executor/17456:
[  839.149532][   T31]  #0: ffff8880451bc0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  839.165136][   T31]  #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  839.176297][   T31] 2 locks held by syz.9.2274/17536:
[  839.181623][   T31]  #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  839.192505][   T31]  #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0
[  839.202987][   T31] 2 locks held by getty/19023:
[  839.209050][   T31]  #0: ffff8880349920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  839.219607][   T31]  #1: ffffc9000b5db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  839.230659][   T31] 2 locks held by syz.2.2719/20549:
[  839.236224][   T31]  #0: ffffffff900e8630 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[  839.246050][   T31]  #1: ffffffff8e3cf740 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[  839.256336][   T31] 1 lock held by syz.5.2725/20573:
[  839.262098][   T31]  #0: ffffffff900e8630 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690
[  839.288168][   T31] 
[  839.315855][   T31] =============================================
[  839.315855][   T31] 
[  839.346195][   T31] NMI backtrace for cpu 1
[  839.346212][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  839.346229][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  839.346237][   T31] Call Trace:
[  839.346243][   T31]  <TASK>
[  839.346249][   T31]  dump_stack_lvl+0x116/0x1f0
[  839.346274][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  839.346289][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  839.346317][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  839.346337][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  839.346355][   T31]  watchdog+0xf3f/0x1170
[  839.346375][   T31]  ? rcu_is_watching+0x12/0xc0
[  839.346395][   T31]  ? __pfx_watchdog+0x10/0x10
[  839.346410][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  839.346432][   T31]  ? __kthread_parkme+0x19e/0x250
[  839.346455][   T31]  ? __pfx_watchdog+0x10/0x10
[  839.346472][   T31]  kthread+0x3c5/0x780
[  839.346487][   T31]  ? __pfx_kthread+0x10/0x10
[  839.346503][   T31]  ? rcu_is_watching+0x12/0xc0
[  839.346521][   T31]  ? __pfx_kthread+0x10/0x10
[  839.346537][   T31]  ret_from_fork+0x675/0x7d0
[  839.346552][   T31]  ? __pfx_kthread+0x10/0x10
[  839.346567][   T31]  ret_from_fork_asm+0x1a/0x30
[  839.346591][   T31]  </TASK>
[  839.346655][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  839.473587][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  839.482681][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  839.492722][   T31] Call Trace:
[  839.495986][   T31]  <TASK>
[  839.498900][   T31]  dump_stack_lvl+0x3d/0x1f0
[  839.503493][   T31]  vpanic+0x640/0x6f0
[  839.507465][   T31]  panic+0xca/0xd0
[  839.511167][   T31]  ? __pfx_panic+0x10/0x10
[  839.515566][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  839.520925][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  839.527064][   T31]  ? watchdog+0xe48/0x1170
[  839.531468][   T31]  ? watchdog+0xe3b/0x1170
[  839.535871][   T31]  watchdog+0xe59/0x1170
[  839.540101][   T31]  ? rcu_is_watching+0x12/0xc0
[  839.544857][   T31]  ? __pfx_watchdog+0x10/0x10
[  839.549517][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  839.554705][   T31]  ? __kthread_parkme+0x19e/0x250
[  839.559731][   T31]  ? __pfx_watchdog+0x10/0x10
[  839.564429][   T31]  kthread+0x3c5/0x780
[  839.568499][   T31]  ? __pfx_kthread+0x10/0x10
[  839.573087][   T31]  ? rcu_is_watching+0x12/0xc0
[  839.577850][   T31]  ? __pfx_kthread+0x10/0x10
[  839.582432][   T31]  ret_from_fork+0x675/0x7d0
[  839.587011][   T31]  ? __pfx_kthread+0x10/0x10
[  839.591654][   T31]  ret_from_fork_asm+0x1a/0x30
[  839.596420][   T31]  </TASK>
[  839.599479][   T31] Kernel Offset: disabled
[  839.603795][   T31] Rebooting in 86400 seconds..